last executing test programs:

1m59.209554115s ago: executing program 0 (id=225):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0xa00004, &(0x7f0000000100)={[{@gid_ignore}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@utf8}, {@uid}, {}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@mode={'mode', 0x3d, 0x8}}, {@dmode={'dmode', 0x3d, 0x4}}, {@adinicb}, {@uid_forget}, {@lastblock={'lastblock', 0x3d, 0x7}}, {@gid_forget}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}]}, 0x1, 0xc67, &(0x7f0000001dc0)="$eJzs3U9sHNd9B/DfG5LiSm5rJk4VJ42DTVuksmK5+hdTtgp3VdNsA8iyEIq5BeBKpNSFKZIgqUY23JbppYceAhRFDzkRaIUCKRoYTRH0yLQukFx8KHLqiWhhIyh6YIsAAVoEW8zsW3FFkZYskiIlfz429d2deW/mvZnxjCzozQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIOJ3Xj13/ETaZEXfHjQGAHgoLox99fjJzZ7/AMBj69JW//8PAAAAAAAAAAAAAADsFymKeCpSzF1YSxPV947a+dbAjZvjI6ObVzuYqpp9Vfnyp3bi5KnTX35h+Ew3z7dmPqT+TvtsvD526Vz9ldnrc/NTCwtTk/XxmdaV2cmp+97CdutvdLQ6APXrb9yYvHp1oX7y+VN3rL459MHgE4eHzg4/e+yZbtnxkdHRsfUitd7y/Q/ckI6tRngciCKORYrnvvuT1IyIIrZ/LGoP99xvdLDqxNGqE+Mjo1VHplvNmcVy5cXugSgi6j2VGt1jtPm5iP6Bh9qHrTUilsrmlw0+WnZvbK4537w8PVW/2JxfbC22Zmcupk5ry/7Uo4gzKWI5IlYH797cQBTRHym+/eRaupzf+lEdhy9VA4O3bkexi328D2U76wMRy8UjcM72scEo4rVI8dN3j8SVfJ+p7jVfjHitzO9H3Crz5YhUXhinI97f5Dri0dQfRfxZef7PrqXJ6n7Qva+c/1r9KzNXZ3vKdu8rH/H5cNedYo+eDwc35MOxz+9NtSiiWd3x19KD/2YHAAAAAAAAAAAAAAAAgJ12MIr4TKR49V//oBpXHNW49CfPDv/u0C/2jhl/+h7bKcs+HxFLxf2NyT2QBwZeTBdT2uOxxB9ntSjiD/P4v2/udWMAAAAAAAAAAAAAAAAAAAA+1or4caR46b0jaTl65xRvzVyrX2penu7MCtud+7c7Z3q73W7XUycbOSdyLuVczrmSczVnFLl+zkbOiZxLOZdzruRczRl9uX7ORs6JnEs5l3Ou5FzNGf25fs5GzomcSzmXc67kXM0Z+2TuXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAx0kRRfw8UnzrG2spUkQ0IiaikyuDe906AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA0mIr4XqSo/17j9rL+iEjVvx1Hyl9OR+NAmZ+MxnCZL0fjXM5mlf2Nb+5B+9megVTEjyLFYO2d2yc8n/+Bzrfbl0Hcenv922f7O9nXXTn0weATh588Ozz6+ae3+pw2a8DR862ZGzfr4yOjo2M9i/vz3j/Zs2wo77fYma4TEQtvvvVGc3p6av7BP5SXwANW757Jbez9YX5I/Y9MU33YiQ/Rvy+asTd9v0NtL25O7Lry+f9+pPjN9/6t+8DvPP9r8Qudb7ef8PGzP1p//r+0cUP3+fzv31gvP//LJ8Fmz/+nepa9lH83MtAfUVu8PjdwOKK28OZbx1rXm9emrk3NnD5+/MXh4RdPHR84EFG72pqe6vm0I4cLAAAAAAAAAAAAAAAA4OFJRfx2pGj+aC3VI+JmNV5r6Ozws8ee6Yu+arzVHeO2Xx+7dK7+yuz1ufmphYWpyfr4TOvK7OTU/e6uVg33Gh8Z3ZXO3NPBXW7/wdors3Nvzreu/f7ipusP1c5dXlicb17ZfHUcjCKi0bvkaNXg8ZHRqtHTreZMVfXipoPpP7qBVMS/R4orp+vpC3lZHv+/cYR/3Hr7xdvXwtLGDe3g+P/PH1of//eJnqLlPlMq4meR4jf+/On4QtXOQ3HXMcvl/jpSHD3zuVwuDpTlum3ovFegMzKwLPvfkeLvf35n2e54yKfWy574SAf3EVCe/ycjxff+9Dvxq3nZne9/6D3/68fv0MYN7dL7Hz7Vs+zQHe8r2HbXyef/WKR4+al34teqJf/7oe//6L6x4Uin8Pr7OXbp/P9yz7KhvN9f36nOAwAAAAAAAAAAPMIGUhF/Eyl+MNqfXsjL7ufv/01u3NAu/f2vT/csm9yZ+Yru+WHbBxUAAAAA9omBVMSPI8W1xXduj6G+c/x3z/jP31of/zmSNqyt/pzvl6r3Buzkn//1Gsr7ndh+twEAAAAAAAAAAAAAAAAAAGBfSamIF/J86hPVeP7JLedTX4kUr/7nc7lcOlyW684DP1T9WrswO3Ps3PT0bC0Wm5enp+pjc80rU2XdT0WKtb/6XK5bVPOrd+eb78zxvj4X+3ykGP3bbtnOXOzduck784HX2u2IE2XZT0SK//i7O8vmqanz3NHVdk+WZf8yUnz9Hzcve3i97Kmy7HcixQ+/Xu+WPVSW7b4f9dPrZZ+/MlvswlkBAAAAAAAAAAAAAAAAAADg42YgFfEnkeK/ri/fHsuf5/8f6PlaufV2z3z/G9ys5vkfqub/3+rzg8z/X71XYGmrvQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOMpRRFvRYq5C2tpZbD83lE735q5cXN8ZHTzagdTVbOvKl/+1E6cPHX6yy8Mn+nmh9ffaZ+J18cunau/Mnt9bn5qYWFqsj4+07oyOzl131vYbv2NjlYHoH79jRuTV68u1E8+f+qO1TeHPhh84vDQ2eFnjz3TLTs+Mjo61lOmf+CB936XtMXyA1HEX0SK5777k/SDwYgitn8s7nHt7LaDVSeOVp0YHxmtOjLdas4slisvdg9EEVHvqdToHqN7nov/a7fbD6srm2hELJXNLxt8tOze2Fxzvnl5eqp+sTm/2Fpszc5cTJ3Wlv2pRxFnUsRyRKwO3r25gSjijUjx7SfX0j8NRvR1j8OXLox99fjJrdtR7GIf70PZzvpAxHJxP+eMrQxGEf8QKX767pH458GI/uj8xBcjXivz+xG3onO+U3lhnI54f5PriEdTfxTxP+X5P7uW3h0s7wfd+8r5r9W/MnN1tqds976yzedDu93+4zL37vnwMO3ze1MtivhhdcdfS//iv2sAAAAAAAAAAAAAAACAfaSIX4kUL713JFXjg2+PKW7NXKtfal6e7gzr6479646Zbrfb7XrqZCPnRM6lnMs5V3Ku5owi18/ZKLPWbk/k70s5l3Ou5FzNGX25fl81XLHdyN8nci7lXM65knM1Z/Tn+jkbOSdyLuVczrmSczVn7JOxewAAAAAAAAAAAAAAAAAAwOOlqP5J8a1vrKX2YGd+6Yno5Ir5QB97/x8AAP//Jhb4VQ==")
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x38c5, 0x2000000, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0)

1m59.09388296s ago: executing program 0 (id=227):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000001780)=0x49a3, 0x4)
sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
recvfrom(r0, 0x0, 0x0, 0x40016300, 0x0, 0x0)

1m59.026729297s ago: executing program 0 (id=228):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
writev(r0, &(0x7f0000019880)=[{0x0}, {&(0x7f00000197c0)="19", 0x1}], 0x2)

1m59.02639101s ago: executing program 0 (id=230):
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='proc\x00', 0x16, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00')

1m58.95752614s ago: executing program 0 (id=232):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x8081, &(0x7f0000000040)={[{}, {@type={'type', 0x3d, "0b4fb860"}}, {@force}, {@uid}, {@type={'type', 0x3d, "e95c3fe9"}}, {@creator={'creator', 0x3d, "f5e298ff"}}, {}, {@force}, {@session={'session', 0x3d, 0x4}}]}, 0x3d, 0x6e8, &(0x7f0000002080)="$eJzs3U1sHGcZAOB31uu1N5XcbZu0BSHFakQEDSS2l5IgIREqhHyoUCQuvZrEaays3cjeIidCZAsUjnBCOfRQhMyhJ9QDUhEHRDkjIXFFuUfiHnFg0czO2Ptjr3cT/yTp80jj+Wbm+3nn9czn3dlEG8Dn1uLbMdmKJBbPvbWZbt/fqjfub9VXi3JETEVEKaLcWUWyFpF8FnE5Okt8Id2Zd5fsNc4bDz798Oy9j+udrXK+ZPVLw9rtaA8ZoZUvMRsRE/l6TOW9+rsabw70d3esrpNqEXeasDNF4uC4tQe0xmk+wn0LPOnuRkxM7rK/FnEiIqbz1wGRzw6lIw7vwI01ywEAAMCTaWK/Cs8/jIexGTNHEw4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8G5LOdwYm+VIqyrORFN//X8n3pSqVY453uK/tc/yD60cUCAAAAAAAAAAcik/yD+5PP4yHsRkzxf52kn3m/1q2cTL7+Vy8FxuxHOtxPjZjKZrRjPWYj5ic6eqwsrnUbK7PD7b8baQt2+323bzlQkTUBlouHMFJAwAAAAAAAMCz62exGDPHHQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHRLIiY6q2w5WZRrUSpHxHREVNJ6rYi/FOWn2V+POwAAAAA4fNV8PZP8r1NoJ9l7/pez9/3T8V6sRTNWohmNWI5r2bOAzrv+0j9b9cb9rfpqugx2/N3/jBVH1mNETMT7e4w8l9U4td1iMb4fP4xzMRtXYj1W4sexFM1YjtmopicRS5FErdp5elEr4tw93ss9W1f6Yzvdt/1qFkk1rsdKFtv5uFqJzmOT7BzSMV/tGu1PlYi+Ed9Ps5N8Jzdijq51/b5+kz+XybWfH7GPw1HLznxyOyNzae7zbLwwPPdjXif9I81HafsZ1MmdUdLN/pGKnP9onJyfyNdprn/Zm/ODNuajtP5MLEQpv/oiXu7N+a0v33uxt/FX//W3KzdKazdvXN84d4in9Dhm96swWRT6M1HvysQrw6++PBONNBOt0TMx2b9jetSWh6uSZyObikacLb+XlZbita5L8N24FstxMeZiPi7FXHwrFqLec4Wd6slrub7am5PsXisNzm/VIcGf+UpXpV/tU/lopXl5oSuv3TNdLTuW77n865jrytKLw6++sf8KpON/MS+nY/x8+y/Ok6AnE/ncXET30vBM/K6d/txorN1cv7F0a8Txzubr9Lb9oHdu/v1BnM+jS6+XdMYtZ1tZTqrF9ZIee2k72t58VfJPXDrtSgPHTm0fq8VMrMQP9rxTK/lruMGeOsde6T72752Zs5K/vimO9bzKiXejkb0K6bPvVA3AETvx+olK9UH1H9WPqr+o3qi+Nf3m1KWpL1Vi8u/lP0/8sfSH0reT1+Oj+GnMHHekAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwLNi4fefmUqOxvL5diOn+PY9bqOw51vBClPats/XcaB1GLWL4WEleqBzsuT+NhWocUs+fRMSQOpXHHiIZ+xobu5BeyAfSYfHFadme9sQYzctFq93rlGNjeq/f4NTOXRC1m0uN/7Z76lSj65YBnnEXmqu3LmzcvvP1ldWld5bfWV5buHTx0sX6N+e/ceH6SmN5rvPzuKMEDsPG7TsTxx0DAAAAAAAAAAAAMJ78X/83H/k/M5T3qVNZ39h95NNHfaoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAU2rx7ZhsRRLzc+fn0u37W/VGuhTlnZrliChFRPKTiOSziMvRWaLW1V2y1zhvPPj0w7P3Pq7v9FUu6peGtRtNK19iNiIm8vX+pnbpZrC/q139tR4pvGT7DNOEnSkSB8ft/wEAAP//SE75+g==")

1m58.687167026s ago: executing program 0 (id=237):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0}, 0x10)
epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xffffffff)

1m58.574481867s ago: executing program 32 (id=237):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0}, 0x10)
epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xffffffff)

1m53.549663375s ago: executing program 3 (id=273):
r0 = socket(0x1000000010, 0x80002, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c00)=@deltfilter={0x24, 0x2d, 0x1}, 0x24}}, 0x0)

1m53.479529978s ago: executing program 3 (id=275):
r0 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0xcc6217b081f06044, 0x10002, 0x0, 0x0, 0x9})

1m53.419420059s ago: executing program 3 (id=277):
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
uname(&(0x7f0000000280)=""/33)

1m53.349432597s ago: executing program 3 (id=278):
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@nojournal_checksum}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x452, &(0x7f0000001400)="$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")
capset(0x0, 0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x40)
open(0x0, 0x72083, 0xa9)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000004)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0xc4140, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})
chdir(&(0x7f0000000080)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1d)

1m52.152443557s ago: executing program 3 (id=288):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/17, 0x11}, 0xff}], 0x1, 0x23, 0x0)
setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000180)=0x6, 0x4)
setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000080)=0x6, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2e, &(0x7f0000001140)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)

1m50.199605602s ago: executing program 3 (id=309):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x4b, 0x89}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)

1m50.094955419s ago: executing program 33 (id=309):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x4b, 0x89}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)

48.507114929s ago: executing program 4 (id=1178):
socket$phonet_pipe(0x23, 0x5, 0x2)
r0 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x1, &(0x7f0000001340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]})
signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x0)
r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x8, 0x0, @fd_index=0x5, 0x5, &(0x7f0000000380)=[{&(0x7f0000000500)=""/244, 0xf4}, {0x0}], 0x2, 0x2})
io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0)

48.294002681s ago: executing program 4 (id=1182):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff})
sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}})
syz_usb_disconnect(0xffffffffffffffff)

46.75857276s ago: executing program 4 (id=1195):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xfd06, 0x0, &(0x7f0000000100)="4f06000000f2ffffffffffffff00", 0x0, 0x6d3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

46.75820979s ago: executing program 4 (id=1197):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x11, &(0x7f0000000040)={[{@norecovery}, {@grpquota}, {@debug}, {@discard}]}, 0xee, 0x498, &(0x7f0000001b40)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000080)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000200)=""/179, 0xb3)

46.676897005s ago: executing program 4 (id=1199):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)

45.848743598s ago: executing program 4 (id=1201):
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x3200c00, &(0x7f0000002680)=ANY=[], 0x6, 0xa9b, &(0x7f0000000c00)="$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")
r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x72)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, &(0x7f00000004c0)={0x0, 0xffffffffffffffff, 0x400000, 0x2, 0x0, 0x0, 0x2401})

45.671356527s ago: executing program 34 (id=1201):
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x3200c00, &(0x7f0000002680)=ANY=[], 0x6, 0xa9b, &(0x7f0000000c00)="$eJzs3U2MG1fhAPBn73qTTdJ/nP4TuiRpm/DVFuhus1lCIYKmai5ETcUtUsUlStMSkQZEKkGrSvk4cYJWVbhCEadyqAAhtRcU9cSlEo3EpeJQOHAgClIlDlBIjNb7nnf8Ynfs7Ift9e8nvX1+88bz3syOx+OZee8FYGxVm38XFmYqIVx5+7Wjf//c36YXpzzWmqPe/DtZSNVCCJWYnsyW98HEUnzzw5dPdYorYb75N6XDUzda790aQrgY9oWroR52X7n26rvzTx6/dOzy/vfeOHy9WMaJVd0CAAAwPr559fDCrr/8cc+Oj96870jY1Jqezs/rMb0tnvcfiSf+6fy/GtrTlUIomsrmm4yhms030WG+Yjm1bL7JLuVPZcuttfL3tM23qaT8icK0TusNoyztx/VQqc62pavV2dml3+Sh+bt+qjJ77szZZ88PqKLAqvvn/SGEfUK/odFoXGhuwCGoiyDcaWhsH/QRCBhnre/SDvcLb3Mxv7KwMq2lTfZW/o3Hq53fD6tgvff/svJ//OfBln+bMS//l5cccVg9G3VvSuuVPkfbYjq/j5A/v9Tv5z8tL78fUeuxnt3uI4zK/YVu9ZxY53rcqW71z/eLjeprMU7b4etZfvHzk/9PR+V/DHT2r/W6/v/69MCvdS6GfUNQhw0dakNQB6Hn0Bj0AQgYWsvPzS1pRCk/f64vz99Ukr+5JH+6JH9LSf7WknwYZ7994Sfhlcry7/z8N32/18PSdba7Yvx/fdYnvx7Zb/n5c7/9Wmn5+fPEix5dYZ1grbx18sTpR595+trS8/+V1v5/K+7v+2K6Hj9bV+MM6Xphfl299ex/vb2capf57s7qc9dt8zeWStzZPl9l5/JyQuE4s7z8ex9q5s20v297t/rubZ+vns03HcPmrL75+cmW7H3p/CMdV9P2mszWt5atx1RWj3Rc2RHjvB5wJ9L+2O35/7R/zoRa5dkzZ08/EtNpP/3DRG3T4vQDxYX+an3qDqxMr+1/ZkJ7+59trem1auG40Dr9TseLA63ltU+fX0rW8vkPxnT6nvv2xHRz+uyp7559ZrVXHsbc+Rdf+s7Js2dPf9+L9GLaZvHCi7Ijx0Z9chDGx9wLz39v7vyLLz185vmTz51+7vS5g4cOHZyfP/SVgwtzzfP6ueKvfmAjWf7SH3RNAAAAAAAAAAAAgF794NjRa39658vvL7X/X27/l9r/pyd/U/v/H2Xt//N28qlVQGpnv6NDfnPcvbfa6zGVzVeL4f+z+u7MytmVve8TMW6N4xfb/6f29nm/rqk+92TT8/5703xZdwK39ZcylfVB0hovMDbY/1RMX47xLwIMUGW68+QYl/Vvnfb1Zv8UF9aqkqy11J9I2htSPyap/Xe3fp3S8X/HOtSR1bcezQkHvY5AZ/8YxvE/q8V04Ux80PX6+NBoDL4OKw/Dv52FVQyNhlE8gOEw6PE/03XPFJ/7/Tc2L4Y0243H24+Xef+lsBLDPv6k8jfW+J+t8e96Ov516F29rZ/n3kdX+PfPrr9fKDbs7vX4m69/6gd6Z3mZRR/F8tP6PxB6K7/xelZ+fkOoR//Jyt/SY/m3rf/eOyv/v7H8tNke/HSv5S/VuFJtr0d+3Tjd/8uvGyc3s/VPfXv2vf5xv+l3XI9bsXwYZ93Hme11BNvhNCrj/3aTP4fxpZhOB8L0nEP+jdxv/dPzFel7YFe2/ErJ99uojFPczbiP//vVGJd9HtL4v2l/rHdIVwvpWodtO+r7Cmw0Hwzj/b9RDheHoA7CkIbhGAO7GBqNxkA78taL+GANevsP+u7zoMsf9PYvk4//m5/D5+P/VrMfEPn4v/n78/F/8/x8fL08Px//N9+e+fi/ef492XLz64gzJfmfLMnfXZK/Zzl/ulP+3pL331uSv78k/76S/PtL8u8uyZ8oyf9Me37anVr5ny15f+PCx+c/WPL+h0ryN7pme5TCh2rc1h/GWd4+z+cfxke6/9Pt87+zJB8YXT9988ATT//mW/Wl9v9Trd9r6T7ekZiuxd/OP4zp/L53KKQX896J6b9m+cN+vQPGSd5/Rv79/kBJPjC60nNePt8whiqbO0+OcToudOu3qtt5PqPl8zH+Qoy/GOOHYzwb47kYH4jx/DrVj7XxxK9/d/iVyvLv/e1Zfq/Pk+ftgfJ+og72WJ/8+kC/z7Pn/fj1a6Xl32FzMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIGpNv8uLMxUQrjy9mtHTxw/M7c45bHWHPXm38lCqtZ6XwiPxHgixj+PL25++PKpYnwrxpUwHyqh0poenrrRKmlrCOFi2BeuhnrYfeXaq+/OP3n80rHL+9974/D1tdsCAAAAsPH9LwAA//8SciNw")
r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x72)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, &(0x7f00000004c0)={0x0, 0xffffffffffffffff, 0x400000, 0x2, 0x0, 0x0, 0x2401})

31.567898162s ago: executing program 5 (id=1346):
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$afs(&(0x7f0000000400), &(0x7f00000004c0)='./file1\x00', &(0x7f0000000500), 0x410, 0x0)

31.491572969s ago: executing program 5 (id=1347):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000000), 0x10)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/153, 0x7}, {0x0}], 0x2)
sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=0x2710], 0x80}}, 0x0)

31.417485713s ago: executing program 5 (id=1349):
bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xa8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

31.346577964s ago: executing program 5 (id=1351):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfe, 0x47c, &(0x7f0000000a80)="$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")
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0)
mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x958028, &(0x7f00000001c0)={[{@gid}, {}]})
r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020)

31.217102227s ago: executing program 5 (id=1353):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000082505a1a440000000010109023b0001010010000904005d12020600000524060000052400ff010d240f010000000040000000000905820220000000fc0905030208000d0000761d777879"], 0x0)
ioctl$EVIOCRMFF(r0, 0x550c, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000100), 0x1, 0x599, &(0x7f0000000540)="$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")

30.9265158s ago: executing program 5 (id=1355):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x26, 0x12, 0xa01, 0x0, 0x0, {0x7}}, 0x26}}, 0x0)

30.823596133s ago: executing program 35 (id=1355):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x26, 0x12, 0xa01, 0x0, 0x0, {0x7}}, 0x26}}, 0x0)

548.998219ms ago: executing program 6 (id=1721):
syz_open_dev$loop(0x0, 0xf01c, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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")
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)

419.64364ms ago: executing program 1 (id=1725):
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000003c0)={[{@errors_remount}, {@gid}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@fmask={'fmask', 0x3d, 0x8c1}}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@errors_continue}, {@keep_last_dots}, {@errors_remount}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@namecase}]}, 0x1, 0x1531, &(0x7f0000001f80)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)

419.391935ms ago: executing program 1 (id=1727):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

296.44984ms ago: executing program 1 (id=1730):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="38010000fe0000", @ANYRES64=r2, @ANYBLOB="f4b02b86df87851e7be7b383760d80"], 0x138)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

222.488058ms ago: executing program 1 (id=1731):
unshare(0x2040600)
bpf$MAP_DELETE_ELEM(0x15, 0x0, 0x0)

222.254919ms ago: executing program 2 (id=1732):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r0, 0x0, 0x0)

222.028027ms ago: executing program 2 (id=1733):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
io_setup(0x20000000001005, &(0x7f0000000880)=<r2=>0x0)
sendmmsg(r1, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000008c0)="89e62494ef80ce9d03e999b5169cd79c", 0x10}], 0x1}}], 0x1, 0x20000040)
io_submit(r2, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x5000000, 0x0, 0xd, 0x0, 0x0, r1, &(0x7f0000000080)='=', 0x11}])

211.085849ms ago: executing program 6 (id=1734):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "9615"}]}]}]}]}, 0x40}}, 0x8000)

119.081299ms ago: executing program 1 (id=1735):
syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x40c01)
r0 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x95f5, 0x10100, 0x0, 0x89}, &(0x7f0000000280)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31})
io_uring_enter(r0, 0x207a98, 0x363, 0xc, 0x0, 0x0)

118.914609ms ago: executing program 6 (id=1736):
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
splice(r1, &(0x7f0000000040), r0, 0x0, 0x800000000ff, 0x0)

118.732528ms ago: executing program 2 (id=1737):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x641f5eb86f254ffb}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x7c}}, 0x0)

118.632074ms ago: executing program 1 (id=1738):
syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000124d5240e316e9f958000000000109021b00010000000009047800018fa68d000905", @ANYRES16], 0x0)

112.141075ms ago: executing program 6 (id=1739):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x8003, 0x1, 0x0, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x4)
r3 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4094)

50.3548ms ago: executing program 2 (id=1740):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x7ffd)
ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000000)=[{0x40, 0x0, 0x0, 0x5}, {0x6, 0x80, 0x4f, 0xffffffff}]})
write$ppp(r0, &(0x7f00000001c0)="0000599928cbd3", 0x7)

50.186898ms ago: executing program 6 (id=1741):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff0100000025000000560000002500000019000a000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)

50.101415ms ago: executing program 2 (id=1742):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0x15, 0x0, <r1=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r1, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2})
ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1)
ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff2f00000000000001"])

165.343µs ago: executing program 6 (id=1743):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f00800", 0x0, 0x2000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c)

0s ago: executing program 2 (id=1744):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty, 0x1}, 0x1c)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0)

kernel console output (not intermixed with test programs):

0)
[   82.200276][   T33] audit: type=1326 audit(1755258754.355:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6501 comm="syz.2.231" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3383f8ebe9 code=0x7ffc0000
[   82.211234][   T33] audit: type=1326 audit(1755258754.355:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6501 comm="syz.2.231" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3383f8ebe9 code=0x7ffc0000
[   82.231599][   T33] audit: type=1326 audit(1755258754.375:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6501 comm="syz.2.231" exe="/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f3383f8ebe9 code=0x7ffc0000
[   82.247613][   T33] audit: type=1326 audit(1755258754.375:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6501 comm="syz.2.231" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3383f8ebe9 code=0x7ffc0000
[   82.274600][   T33] audit: type=1326 audit(1755258754.375:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6501 comm="syz.2.231" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3383f8ebe9 code=0x7ffc0000
[   82.322956][ T6506] capability: warning: `syz.1.234' uses deprecated v2 capabilities in a way that may be insecure
[   82.337618][ T6506] loop1: detected capacity change from 0 to 512
[   82.358482][ T6506] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   82.378331][ T6506] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   82.434709][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.475608][ T5878] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.548331][ T5878] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.610261][ T5878] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.670630][ T5878] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.804797][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   82.810957][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   82.820993][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   82.823851][ T5878] bridge_slave_1: left allmulticast mode
[   82.823925][ T5878] bridge_slave_1: left promiscuous mode
[   82.825104][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.838022][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   82.844821][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   82.863666][ T5878] bridge_slave_0: left allmulticast mode
[   82.866238][ T5878] bridge_slave_0: left promiscuous mode
[   82.868966][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.874271][   T47] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   83.024148][   T47] usb 2-1: Using ep0 maxpacket: 32
[   83.029971][   T47] usb 2-1: config 0 has an invalid interface number: 85 but max is 0
[   83.041756][   T47] usb 2-1: config 0 has no interface number 0
[   83.045041][   T47] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 123, changing to 10
[   83.049692][   T47] usb 2-1: config 0 interface 85 has no altsetting 0
[   83.064051][   T47] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[   83.067429][   T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.070505][   T47] usb 2-1: Product: syz
[   83.071926][   T47] usb 2-1: Manufacturer: syz
[   83.081102][   T47] usb 2-1: SerialNumber: syz
[   83.097444][   T47] usb 2-1: config 0 descriptor??
[   83.202048][ T5878] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   83.209498][ T5878] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   83.214691][ T5878] bond0 (unregistering): Released all slaves
[   83.681388][ T6545] loop2: detected capacity change from 0 to 1764
[   83.708986][ T6523] chnl_net:caif_netlink_parms(): no params data found
[   83.719208][   T47] appletouch 2-1:0.85: Geyser mode initialized.
[   83.729848][   T47] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input4
[   83.788429][ T5878] hsr_slave_0: left promiscuous mode
[   83.795430][ T5878] hsr_slave_1: left promiscuous mode
[   83.813606][ T5878] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   83.816305][ T5878] batman_adv: batadv0: Removing interface: batadv_slave_0
[   83.834014][ T5878] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   83.836943][ T5878] batman_adv: batadv0: Removing interface: batadv_slave_1
[   83.876129][ T5878] veth0_macvtap: left promiscuous mode
[   83.879307][ T5878] veth1_vlan: left promiscuous mode
[   83.881739][ T5878] veth0_vlan: left promiscuous mode
[   83.927032][   T47] usb 2-1: USB disconnect, device number 5
[   83.956787][   T47] appletouch 2-1:0.85: input: appletouch disconnected
[   84.251829][ T5878] team0 (unregistering): Port device team_slave_1 removed
[   84.284014][ T5878] team0 (unregistering): Port device team_slave_0 removed
[   84.893533][ T5850] Bluetooth: hci1: command tx timeout
[   85.019187][ T6523] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.022395][ T6523] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.025633][ T6523] bridge_slave_0: entered allmulticast mode
[   85.029170][ T6523] bridge_slave_0: entered promiscuous mode
[   85.034545][ T6523] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.037497][ T6523] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.040438][ T6523] bridge_slave_1: entered allmulticast mode
[   85.046246][ T6523] bridge_slave_1: entered promiscuous mode
[   85.067477][ T6560] netlink: 12 bytes leftover after parsing attributes in process `syz.2.249'.
[   85.118534][ T6523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.125806][ T6523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.179931][ T6566] loop2: detected capacity change from 0 to 512
[   85.180598][ T6523] team0: Port device team_slave_0 added
[   85.206948][ T6523] team0: Port device team_slave_1 added
[   85.209364][ T6566] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   85.220812][ T6566] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   85.261140][ T6523] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.265745][ T6523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.267960][ T6566] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.286017][ T6523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.301194][ T6523] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.308097][ T6523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.326537][ T6523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.407270][ T6523] hsr_slave_0: entered promiscuous mode
[   85.428375][ T6523] hsr_slave_1: entered promiscuous mode
[   85.430727][ T6523] debugfs: 'hsr0' already exists in 'hsr'
[   85.440707][ T6523] Cannot create hsr debugfs directory
[   85.577994][ T6588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.258'.
[   85.676537][ T6523] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   85.710881][ T6523] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   85.739227][ T6523] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   85.751612][ T6523] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   86.053913][ T6523] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.078238][ T6523] 8021q: adding VLAN 0 to HW filter on device team0
[   86.088772][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.091983][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.107886][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.110427][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.490180][ T6523] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.652271][  T794] cfg80211: failed to load regulatory.db
[   86.830030][ T6523] veth0_vlan: entered promiscuous mode
[   86.862680][ T6523] veth1_vlan: entered promiscuous mode
[   86.963655][ T5850] Bluetooth: hci1: command tx timeout
[   86.985777][ T6523] veth0_macvtap: entered promiscuous mode
[   87.016350][ T6523] veth1_macvtap: entered promiscuous mode
[   87.066788][ T6523] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.099859][ T6523] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.120648][ T5878] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.134130][ T5878] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.138782][ T5878] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.156091][ T5878] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.324167][  T401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.327652][  T401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.444970][  T401] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.463090][  T401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.850948][ T6662] loop3: detected capacity change from 0 to 512
[   87.859828][ T6662] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   87.887206][ T6662] EXT4-fs (loop3): 1 truncate cleaned up
[   87.898259][ T6662] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   88.197948][ T6687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.285'.
[   88.723892][ T6662] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   88.735074][ T6662] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   88.825751][ T6662] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   88.895210][ T6662] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   88.907664][ T6662] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   88.928487][ T6662] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   88.945511][ T6662] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   88.948267][ T6662] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   88.956743][ T6662] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   88.987861][ T6523] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[   89.027275][ T6706] overlayfs: failed to clone upperpath
[   89.202667][ T5916] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   89.354332][ T5916] usb 2-1: Using ep0 maxpacket: 16
[   89.358164][ T5916] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   89.362471][ T5916] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[   89.371454][ T5916] usb 2-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00
[   89.375428][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.378993][ T5916] usb 2-1: Product: syz
[   89.380808][ T5916] usb 2-1: Manufacturer: syz
[   89.383482][ T5916] usb 2-1: SerialNumber: syz
[   89.387869][ T6711] 9pnet_fd: Insufficient options for proto=fd
[   89.395253][ T5916] usb 2-1: config 0 descriptor??
[   89.602329][ T6725] syz.2.297 uses obsolete (PF_INET,SOCK_PACKET)
[   89.757429][ T6733] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   89.766795][ T5850] Bluetooth: hci2: unexpected event for opcode 0x041c
[   89.809320][ T5916] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[   89.823057][ T5916] asix 2-1:0.0: probe with driver asix failed with error -71
[   89.833662][ T5916] usb 2-1: USB disconnect, device number 6
[   90.073428][ T5850] Bluetooth: hci0: command 0x0c1a tx timeout
[   90.918059][ T6523] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.956324][ T5880] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.021262][ T5880] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.076531][ T5880] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.137894][ T5880] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.286124][ T5880] bridge_slave_1: left allmulticast mode
[   91.290057][ T5855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   91.296324][ T5880] bridge_slave_1: left promiscuous mode
[   91.299851][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   91.301404][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.307088][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   91.311675][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   91.318296][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   91.325458][ T5880] bridge_slave_0: left allmulticast mode
[   91.327968][ T5880] bridge_slave_0: left promiscuous mode
[   91.331274][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.346225][ T6761] loop1: detected capacity change from 0 to 1024
[   91.679842][ T5880] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   91.688253][ T5880] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   91.693860][ T5880] bond0 (unregistering): Released all slaves
[   91.705210][ T6769] netlink: 830 bytes leftover after parsing attributes in process `syz.1.315'.
[   91.711574][ T6769] bond_slave_0: entered promiscuous mode
[   91.714246][ T6769] bond_slave_1: entered promiscuous mode
[   91.889619][ T6782] loop1: detected capacity change from 0 to 512
[   91.905423][ T6782] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   91.926227][ T6782] EXT4-fs (loop1): 1 truncate cleaned up
[   91.929810][ T6782] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   91.960460][   T33] audit: type=1800 audit(1755258764.115:14): pid=6782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.319" name="file2" dev="loop1" ino=16 res=0 errno=0
[   92.055658][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.153664][ T5855] Bluetooth: hci0: command 0x0c1a tx timeout
[   92.157959][ T6758] chnl_net:caif_netlink_parms(): no params data found
[   92.195990][ T5880] hsr_slave_0: left promiscuous mode
[   92.199346][ T5880] hsr_slave_1: left promiscuous mode
[   92.202104][ T5880] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   92.210215][ T5880] batman_adv: batadv0: Removing interface: batadv_slave_0
[   92.216527][ T5880] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   92.220760][ T5880] batman_adv: batadv0: Removing interface: batadv_slave_1
[   92.235886][ T5880] veth1_macvtap: left promiscuous mode
[   92.238412][ T5880] veth0_macvtap: left promiscuous mode
[   92.240977][ T5880] veth1_vlan: left promiscuous mode
[   92.245234][ T5880] veth0_vlan: left promiscuous mode
[   92.585914][ T5855] Bluetooth: hci2: unexpected event for opcode 0x041b
[   92.641657][ T5880] team0 (unregistering): Port device team_slave_1 removed
[   92.675560][ T5880] team0 (unregistering): Port device team_slave_0 removed
[   93.353631][ T5855] Bluetooth: hci1: command tx timeout
[   93.476991][ T6758] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.479377][ T6758] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.510452][ T6758] bridge_slave_0: entered allmulticast mode
[   93.521887][ T6758] bridge_slave_0: entered promiscuous mode
[   93.533705][ T6758] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.536784][ T6758] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.539944][ T6758] bridge_slave_1: entered allmulticast mode
[   93.553649][ T6758] bridge_slave_1: entered promiscuous mode
[   93.627005][ T6758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   93.648246][ T6758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   93.725985][ T6758] team0: Port device team_slave_0 added
[   93.729262][ T6758] team0: Port device team_slave_1 added
[   93.806568][ T6758] batman_adv: batadv0: Adding interface: batadv_slave_0
[   93.814430][ T6758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.838920][ T6758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   93.847836][ T6758] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.850655][ T6758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.865408][ T6758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.894498][ T6841] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.335'.
[   93.948160][ T6758] hsr_slave_0: entered promiscuous mode
[   93.950961][ T6758] hsr_slave_1: entered promiscuous mode
[   93.955201][ T6758] debugfs: 'hsr0' already exists in 'hsr'
[   93.957174][ T6758] Cannot create hsr debugfs directory
[   94.225078][ T6758] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   94.232796][ T5855] Bluetooth: hci0: command 0x0c1a tx timeout
[   94.245259][ T6758] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   94.279847][ T6758] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   94.300480][ T6758] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   94.374247][ T6758] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.377805][ T6758] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.381271][ T6758] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.384322][ T6758] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.436101][ T6888] loop1: detected capacity change from 0 to 256
[   94.462144][ T6885] JFS: charset not found
[   94.492090][   T28] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.497956][   T28] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.515569][ T6888] FAT-fs (loop1): Directory bread(block 64) failed
[   94.519322][ T6888] FAT-fs (loop1): Directory bread(block 65) failed
[   94.524337][ T6888] FAT-fs (loop1): Directory bread(block 66) failed
[   94.542148][ T6888] FAT-fs (loop1): Directory bread(block 67) failed
[   94.551802][ T6888] FAT-fs (loop1): Directory bread(block 68) failed
[   94.562844][ T6888] FAT-fs (loop1): Directory bread(block 69) failed
[   94.565149][ T6888] FAT-fs (loop1): Directory bread(block 70) failed
[   94.570661][ T6888] FAT-fs (loop1): Directory bread(block 71) failed
[   94.577154][ T6888] FAT-fs (loop1): Directory bread(block 72) failed
[   94.584659][ T6888] FAT-fs (loop1): Directory bread(block 73) failed
[   94.587164][ T6758] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.619896][ T6758] 8021q: adding VLAN 0 to HW filter on device team0
[   94.636876][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.640008][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.657891][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.661009][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.181291][ T6920] lo speed is unknown, defaulting to 1000
[   95.184430][ T6920] lo speed is unknown, defaulting to 1000
[   95.191358][ T6758] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.196741][ T6920] lo speed is unknown, defaulting to 1000
[   95.215160][ T6920] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   95.244451][ T6920] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   95.279241][ T6920] lo speed is unknown, defaulting to 1000
[   95.282053][ T6920] lo speed is unknown, defaulting to 1000
[   95.289600][ T6920] lo speed is unknown, defaulting to 1000
[   95.442820][ T5855] Bluetooth: hci1: command tx timeout
[   95.477986][ T6758] veth0_vlan: entered promiscuous mode
[   95.490887][ T6758] veth1_vlan: entered promiscuous mode
[   95.527200][ T6758] veth0_macvtap: entered promiscuous mode
[   95.546383][ T6758] veth1_macvtap: entered promiscuous mode
[   95.573590][ T6758] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.587356][ T6758] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.617352][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.623947][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.656657][ T6954] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   95.665400][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.683499][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.776100][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.779342][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.828646][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.834295][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.963315][ T6971] loop4: detected capacity change from 0 to 512
[   95.970527][ T6971] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[   96.021021][ T6971] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.364: iget: bad i_size value: 360287970189639680
[   96.139331][ T6971] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.364: couldn't read orphan inode 15 (err -117)
[   96.306581][ T6971] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   96.727818][ T6991] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.368'.
[   96.778641][ T6994] loop1: detected capacity change from 0 to 512
[   96.785009][ T6994] EXT4-fs (loop1): Test dummy encryption mode enabled
[   96.788066][ T6994] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   96.840996][ T6994] EXT4-fs error (device loop1): xattr_find_entry:333: inode #15: comm syz.1.369: corrupted xattr entries
[   96.860947][ T6994] EXT4-fs (loop1): 1 orphan inode deleted
[   96.874239][ T6758] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.875390][ T6994] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   96.964732][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.407247][ T7025] lo speed is unknown, defaulting to 1000
[   97.410170][ T7025] lo speed is unknown, defaulting to 1000
[   97.418797][ T7025] lo speed is unknown, defaulting to 1000
[   97.474578][ T7025] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   97.542820][ T5855] Bluetooth: hci1: command tx timeout
[   97.612437][ T7025] lo speed is unknown, defaulting to 1000
[   97.617466][ T7025] lo speed is unknown, defaulting to 1000
[   97.621266][ T7025] lo speed is unknown, defaulting to 1000
[   98.125370][ T7042] loop1: detected capacity change from 0 to 256
[   98.142019][ T7042] exfat: Deprecated parameter 'namecase'
[   98.169364][ T7042] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[   98.251583][ T5855] Bluetooth: hci2: unexpected event for opcode 0x080b
[   98.402758][ T7066] loop4: detected capacity change from 0 to 256
[   98.453813][ T7066] FAT-fs (loop4): Directory bread(block 64) failed
[   98.456808][ T7066] FAT-fs (loop4): Directory bread(block 65) failed
[   98.459736][ T7066] FAT-fs (loop4): Directory bread(block 66) failed
[   98.463314][ T7066] FAT-fs (loop4): Directory bread(block 67) failed
[   98.467867][ T7066] FAT-fs (loop4): Directory bread(block 68) failed
[   98.470799][ T7066] FAT-fs (loop4): Directory bread(block 69) failed
[   98.476366][ T7066] FAT-fs (loop4): Directory bread(block 70) failed
[   98.478971][ T7066] FAT-fs (loop4): Directory bread(block 71) failed
[   98.481503][ T7066] FAT-fs (loop4): Directory bread(block 72) failed
[   98.484879][ T7066] FAT-fs (loop4): Directory bread(block 73) failed
[   98.831044][ T5855] Bluetooth: hci2: ACL packet for unknown connection handle 201
[   98.861843][ T7098] 9pnet_fd: Insufficient options for proto=fd
[   98.952757][    T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   99.102614][    T9] usb 5-1: Using ep0 maxpacket: 32
[   99.106663][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   99.111373][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   99.115958][    T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   99.119056][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.123317][    T9] usb 5-1: config 0 descriptor??
[   99.130894][    T9] hub 5-1:0.0: USB hub found
[   99.207108][ T7118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.419'.
[   99.271220][ T7122] loop1: detected capacity change from 0 to 256
[   99.306269][ T7122] exfat: Deprecated parameter 'utf8'
[   99.308545][ T7122] exfat: Deprecated parameter 'utf8'
[   99.331365][ T7122] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d)
[   99.333010][    T9] hub 5-1:0.0: 1 port detected
[   99.376591][ T7122] exFAT-fs (loop1): error, in sector 160, dentry 12 should be unused, but 0x85
[   99.435939][ T7124] loop1: detected capacity change from 0 to 256
[   99.442613][ T7124] exfat: Deprecated parameter 'namecase'
[   99.445060][ T7124] exfat: Deprecated parameter 'namecase'
[   99.455548][ T7124] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[   99.522070][ T7130] netlink: 'syz.1.425': attribute type 10 has an invalid length.
[   99.539053][    T9] hub 5-1:0.0: hub_hub_status failed (err = -71)
[   99.546088][    T9] hub 5-1:0.0: config failed, can't get hub status (err -71)
[   99.546756][ T7130] dummy0: entered promiscuous mode
[   99.551371][    T9] usbhid 5-1:0.0: can't add hid device: -71
[   99.555043][    T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[   99.556881][ T7130] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   99.583828][    T9] usb 5-1: USB disconnect, device number 2
[   99.599033][ T5855] Bluetooth: hci1: command tx timeout
[  100.131083][ T7184] vcan0: tx drop: invalid da for name 0xfffffffffffffffe
[  100.200515][ T7189] loop4: detected capacity change from 0 to 256
[  100.217303][ T7189] exfat: Deprecated parameter 'utf8'
[  100.242212][   T33] audit: type=1800 audit(1755258772.395:15): pid=7189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.446" name="file2" dev="loop4" ino=1048630 res=0 errno=0
[  100.311982][ T7192] loop1: detected capacity change from 0 to 2048
[  100.337395][ T7192] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  100.440294][ T7201] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  101.568764][ T7275] netlink: 'syz.4.472': attribute type 21 has an invalid length.
[  101.571556][ T7275] netlink: 132 bytes leftover after parsing attributes in process `syz.4.472'.
[  101.576886][ T7275] netlink: 20 bytes leftover after parsing attributes in process `syz.4.472'.
[  101.945376][ T7295] loop1: detected capacity change from 0 to 4096
[  101.948893][ T7295] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  101.979476][ T7295] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  101.983254][ T7295] ntfs3(loop1): Failed to load root (-22).
[  102.324651][ T5855] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  102.328354][ T5855] Bluetooth: hci2: Injecting HCI hardware error event
[  102.336779][ T5855] Bluetooth: hci2: hardware error 0x00
[  102.392148][   T33] audit: type=1326 audit(1755258774.545:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7313 comm="syz.1.485" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d118ebe9 code=0x7ffc0000
[  102.409829][   T33] audit: type=1326 audit(1755258774.545:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7313 comm="syz.1.485" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d118ebe9 code=0x7ffc0000
[  102.420941][   T33] audit: type=1326 audit(1755258774.575:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7313 comm="syz.1.485" exe="/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7fa5d118ebe9 code=0x7ffc0000
[  102.431907][   T33] audit: type=1326 audit(1755258774.575:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7313 comm="syz.1.485" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d118ebe9 code=0x7ffc0000
[  102.441522][   T33] audit: type=1326 audit(1755258774.575:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7313 comm="syz.1.485" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d118ebe9 code=0x7ffc0000
[  102.568072][ T7325] loop1: detected capacity change from 0 to 1024
[  102.668739][ T7332] loop1: detected capacity change from 0 to 256
[  102.673178][ T7332] exfat: Deprecated parameter 'utf8'
[  102.685449][ T7332] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d)
[  102.865696][ T7347] netlink: 28 bytes leftover after parsing attributes in process `syz.2.500'.
[  103.063130][    T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  103.224760][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  103.234187][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  103.244875][    T9] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  103.249147][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.282232][    T9] usb 2-1: config 0 descriptor??
[  103.457668][ T7386] netlink: 'syz.4.516': attribute type 4 has an invalid length.
[  103.462214][ T7386] netlink: 14345 bytes leftover after parsing attributes in process `syz.4.516'.
[  103.580173][ T7400] loop4: detected capacity change from 0 to 1024
[  103.755864][    T9] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0
[  104.185922][    T9] hid-led 0003:0FC5:B080.0002: probe with driver hid-led failed with error -71
[  104.194748][    T9] usb 2-1: USB disconnect, device number 7
[  104.392895][ T5855] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  104.919254][ T7475] Bluetooth: MGMT ver 1.23
[  104.921829][ T7475] Bluetooth: hci0: invalid length 0, exp 2 for type 18
[  105.100285][ T7493] capability: warning: `syz.4.554' uses 32-bit capabilities (legacy support in use)
[  105.170677][ T7500] loop4: detected capacity change from 0 to 256
[  105.174479][ T7500] exfat: Deprecated parameter 'namecase'
[  105.184654][ T7500] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d)
[  105.663595][ T7514] 9pnet_fd: Insufficient options for proto=fd
[  105.876590][ T7520] loop1: detected capacity change from 0 to 4096
[  105.918754][ T7522] netlink: 16 bytes leftover after parsing attributes in process `syz.2.568'.
[  105.925396][ T7520] NILFS (loop1): invalid segment: Checksum error in segment payload
[  105.928667][ T7520] NILFS (loop1): trying rollback from an earlier position
[  106.003664][ T7520] NILFS (loop1): recovery complete
[  106.010990][ T7523] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  106.506002][ T7535] loop1: detected capacity change from 0 to 1024
[  106.551895][ T7535] hfsplus: bad catalog entry type
[  107.342116][ T7559] loop4: detected capacity change from 0 to 32768
[  107.382887][ T7594] IPVS: Error joining to the multicast group
[  107.390787][ T7559] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  107.423382][ T7559] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  107.454908][   T33] audit: type=1800 audit(1755258779.615:21): pid=7559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.584" name="bus" dev="loop4" ino=17058 res=0 errno=0
[  107.561757][ T6758] ocfs2: Unmounting device (7,4) on (node local)
[  107.592791][ T5940] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  107.754464][ T5940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  107.758874][ T5940] usb 2-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00
[  107.767135][ T5940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.773369][ T5940] usb 2-1: config 0 descriptor??
[  107.908186][ T7624] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.605'.
[  107.917163][ T7624] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.605'.
[  108.050632][ T7620] loop4: detected capacity change from 0 to 32768
[  108.066294][ T7620] 
[  108.066294][ T7620]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  108.066294][ T7620] 
[  108.081611][ T7620] 
[  108.081611][ T7620]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  108.081611][ T7620] 
[  108.086272][ T7620] 
[  108.086272][ T7620]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  108.086272][ T7620] 
[  108.090104][ T7620] 
[  108.090104][ T7620]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  108.090104][ T7620] 
[  108.098445][ T7620] 
[  108.098445][ T7620]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  108.098445][ T7620] 
[  108.110021][  T115] 
[  108.110021][  T115]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  108.110021][  T115] 
[  108.116436][ T7620] ialloc: diAlloc returned -5!
[  108.141441][ T6758] 
[  108.141441][ T6758]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  108.141441][ T6758] 
[  108.147011][ T6758] 
[  108.147011][ T6758]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  108.147011][ T6758] 
[  108.183262][ T5940] hid (null): usage index exceeded
[  108.186460][ T5940] hid (null): usage index exceeded
[  108.191599][ T5940] itetech 0003:258A:6A88.0003: ignoring exceeding usage max
[  108.208938][ T5940] itetech 0003:258A:6A88.0003: usage index exceeded
[  108.214579][ T5940] itetech 0003:258A:6A88.0003: item 0 4 2 0 parsing failed
[  108.221844][ T5940] itetech 0003:258A:6A88.0003: probe with driver itetech failed with error -22
[  108.536735][  T794] usb 2-1: USB disconnect, device number 8
[  109.149307][ T7657] loop1: detected capacity change from 0 to 64
[  109.161267][   T33] audit: type=1800 audit(1755258781.315:22): pid=7657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.613" name="file1" dev="loop1" ino=5 res=0 errno=0
[  109.342801][ T7661] loop1: detected capacity change from 0 to 32768
[  109.346433][ T7661] XFS: noikeep mount option is deprecated.
[  109.358090][ T7661] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  109.377572][ T7661] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  109.386751][ T7661] XFS (loop1): Starting recovery (logdev: internal)
[  109.399043][ T7661] XFS (loop1): Ending recovery (logdev: internal)
[  109.424874][ T5848] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  109.619809][ T7674] lo speed is unknown, defaulting to 1000
[  109.626232][ T7674] lo speed is unknown, defaulting to 1000
[  109.912907][  T793] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[  110.091719][  T793] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  110.105642][  T793] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  110.132764][  T793] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  110.138495][  T793] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  110.145574][  T793] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.237556][  T793] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  110.315524][ T5857] udevd[5857]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  110.330216][  T793] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2
[  110.391742][  T793] usb 2-1: USB disconnect, device number 9
[  110.702755][   T33] audit: type=1326 audit(1755258782.855:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7706 comm="syz.4.624" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c178ebe9 code=0x7ffc0000
[  110.711659][   T33] audit: type=1326 audit(1755258782.855:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7706 comm="syz.4.624" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c178ebe9 code=0x7ffc0000
[  110.736719][   T33] audit: type=1326 audit(1755258782.885:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7706 comm="syz.4.624" exe="/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f05c178ebe9 code=0x7ffc0000
[  110.746633][   T33] audit: type=1326 audit(1755258782.885:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7706 comm="syz.4.624" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c178ebe9 code=0x7ffc0000
[  110.764468][   T33] audit: type=1326 audit(1755258782.885:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7706 comm="syz.4.624" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c178ebe9 code=0x7ffc0000
[  110.794977][ T7716] netlink: 52 bytes leftover after parsing attributes in process `syz.2.628'.
[  111.087016][  T793] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  111.262826][  T793] usb 5-1: Using ep0 maxpacket: 8
[  111.338753][  T793] usb 5-1: config 0 has an invalid interface number: 150 but max is 0
[  111.342741][  T793] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  111.352738][  T793] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  111.364821][  T793] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[  111.376497][  T793] usb 5-1: config 0 has no interface number 0
[  111.381318][  T793] usb 5-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  111.387985][  T793] usb 5-1: config 0 interface 150 has no altsetting 0
[  111.391082][  T793] usb 5-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75
[  111.397416][  T793] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.413901][  T793] usb 5-1: config 0 descriptor??
[  111.830490][  T794] usb 5-1: USB disconnect, device number 3
[  111.952628][  T793] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  112.424878][  T793] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  112.429521][  T793] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 24929, setting to 64
[  112.436135][  T793] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  112.439114][  T793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.441811][  T793] usb 2-1: Product: syz
[  112.444501][  T793] usb 2-1: Manufacturer: syz
[  112.446293][  T793] usb 2-1: SerialNumber: syz
[  112.450937][  T793] usb 2-1: config 0 descriptor??
[  112.453583][ T7741] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  112.477632][ T7752] loop4: detected capacity change from 0 to 128
[  112.482076][ T7752] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  112.492815][ T7752] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  112.503389][  T793] rc_core: IR keymap rc-streamzap not found
[  112.505991][  T793] Registered IR keymap rc-empty
[  112.508691][  T793] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  112.514272][  T793] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input5
[  112.968114][ T5940] usb 2-1: USB disconnect, device number 10
[  113.530119][ T7765] loop1: detected capacity change from 0 to 64
[  113.733496][  T793] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  113.833031][  T794] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  113.891440][  T793] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  113.897474][  T793] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.900909][  T793] usb 5-1: Product: syz
[  113.904734][  T793] usb 5-1: Manufacturer: syz
[  113.906804][  T793] usb 5-1: SerialNumber: syz
[  113.910850][  T793] usb 5-1: config 0 descriptor??
[  113.917087][  T793] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  113.985748][  T794] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  113.989608][  T794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.995512][  T794] usb 2-1: config 0 descriptor??
[  114.003936][  T794] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  114.205911][  T794] gp8psk: usb in 128 operation failed.
[  114.413831][  T794] gp8psk: usb in 146 operation failed.
[  114.415853][  T794] gp8psk: failed to get FW version
[  114.418327][  T794] gp8psk: usb in 149 operation failed.
[  114.420572][  T794] gp8psk: failed to get FPGA version
[  114.523935][  T793] gspca_sunplus: reg_r err -71
[  114.528347][  T793] sunplus 5-1:0.0: probe with driver sunplus failed with error -71
[  114.533912][  T793] usb 5-1: USB disconnect, device number 4
[  114.628546][  T794] gp8psk: usb out operation failed.
[  114.630324][  T794] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  114.635828][  T794] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  114.640285][  T794] usb 2-1: USB disconnect, device number 11
[  114.966196][ T7783] netlink: 12 bytes leftover after parsing attributes in process `syz.2.656'.
[  114.969467][ T7783] tipc: Started in network mode
[  114.971212][ T7783] tipc: Node identity ff000000000000000000000000000001, cluster identity 4711
[  114.974445][ T7783] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  115.273744][ T7798] overlayfs: failed to clone lowerpath
[  115.851793][ T7801] overlayfs: failed to clone upperpath
[  116.389613][ T7817] unsupported nla_type 52263
[  116.435123][ T7819] loop4: detected capacity change from 0 to 2048
[  116.474848][ T5857] Dev loop4: RDB in block 1 has bad checksum
[  116.481444][ T7819] Dev loop4: RDB in block 1 has bad checksum
[  116.492824][  T794] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  116.573568][ T7823] bridge0: port 3(batadv1) entered blocking state
[  116.576398][ T7823] bridge0: port 3(batadv1) entered disabled state
[  116.579412][ T7823] batadv1: entered allmulticast mode
[  116.584930][ T7823] batadv1: entered promiscuous mode
[  116.642683][  T794] usb 2-1: Using ep0 maxpacket: 16
[  116.653551][  T794] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  116.659864][  T794] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  116.666090][  T794] usb 2-1: too many endpoints for config 1 interface 1 altsetting 48: 49, using maximum allowed: 30
[  116.670867][  T794] usb 2-1: config 1 interface 1 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 49
[  116.681936][  T794] usb 2-1: config 1 interface 1 has no altsetting 0
[  116.691104][  T794] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  116.697293][  T794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.700844][  T794] usb 2-1: Product: syz
[  116.703563][  T794] usb 2-1: Manufacturer: syz
[  116.705646][  T794] usb 2-1: SerialNumber: syz
[  116.749643][  T794] usb 2-1: selecting invalid altsetting 1
[  116.756260][  T794] usb 2-1: selecting invalid altsetting 0
[  116.758869][  T794] usb 2-1: selecting invalid altsetting 0
[  116.761524][  T794] cdc_ncm 2-1:1.0: bind() failure
[  116.994362][  T794] usb 2-1: selecting invalid altsetting 0
[  117.007830][  T794] usbtest 2-1:1.1: probe with driver usbtest failed with error -22
[  117.043159][  T794] usb 2-1: USB disconnect, device number 12
[  117.087582][ T5880] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  117.091808][ T5880] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  117.660180][ T7843] loop1: detected capacity change from 0 to 2048
[  117.687541][ T7843] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  117.690924][ T7843] UDF-fs: Scanning with blocksize 512 failed
[  117.761159][ T7843] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  118.506029][ T7865] overlayfs: missing 'workdir'
[  118.702710][ T7872] loop1: detected capacity change from 0 to 1024
[  118.720140][ T7872] hfsplus: bad catalog entry type
[  118.736700][ T1163] hfsplus: b-tree write err: -5, ino 4
[  119.239293][ T7895] loop1: detected capacity change from 0 to 8
[  119.524749][ T7901] loop4: detected capacity change from 0 to 32768
[  119.582193][ T7901] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  119.600837][ T7901] XFS (loop4): Ending clean mount
[  119.605491][ T7901] XFS (loop4): Quotacheck needed: Please wait.
[  119.630767][ T7901] XFS (loop4): Quotacheck: Done.
[  119.669369][ T6758] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  119.916390][ T7917] bridge1: entered promiscuous mode
[  120.332843][ T7907] 9pnet_fd: p9_fd_create_tcp (7907): problem connecting socket to 127.0.0.1
[  120.528840][ T7928] loop1: detected capacity change from 0 to 1764
[  121.383985][ T5855] Bluetooth: Unexpected continuation frame (len 16)
[  121.867008][ T7966] loop1: detected capacity change from 0 to 8
[  121.879769][ T7966] SQUASHFS error: Failed to read block 0x1ec: -5
[  121.883568][ T7966] SQUASHFS error: Unable to read metadata cache entry [1ea]
[  122.084872][ T7974] loop4: detected capacity change from 0 to 512
[  122.125714][ T7974] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  122.166790][ T7974] Quota error (device loop4): v2_read_file_info: Free block number 58381 out of range (1, 6).
[  122.171222][ T7974] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  122.181868][ T7974] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[  122.197286][ T7974] Quota error (device loop4): v2_read_file_info: Free block number 58381 out of range (1, 6).
[  122.203831][ T7974] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  122.246460][ T6758] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[  122.268059][ T7985] tipc: Failed to remove unknown binding: 66,1,1/0:1730508126/1730508128
[  122.271945][ T7985] tipc: Failed to remove unknown binding: 66,1,1/0:1730508126/1730508128
[  122.296221][ T7985] tipc: Failed to remove unknown binding: 66,1,1/0:1730508126/1730508128
[  122.327813][ T7989] loop4: detected capacity change from 0 to 2048
[  122.349027][ T7989] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  122.365026][ T7989] EXT4-fs error (device loop4): ext4_read_inline_dir:1476: inode #12: block 9: comm syz.4.743: path /103/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0
[  122.385134][ T6758] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.477294][ T8001] loop4: detected capacity change from 0 to 2048
[  122.488307][ T8001] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  122.752662][ T8009] loop4: detected capacity change from 0 to 32768
[  122.785486][ T8009] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[  122.798071][   T33] audit: type=1800 audit(1755258794.955:28): pid=8009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.750" name="file1" dev="loop4" ino=17058 res=0 errno=0
[  122.840927][ T6758] ocfs2: Unmounting device (7,4) on (node local)
[  122.855207][ T8013] loop1: detected capacity change from 0 to 16
[  122.861214][ T8013] erofs (device loop1): rootino(nid 36) is not a directory(i_mode 10000)
[  122.977861][  T793] IPVS: starting estimator thread 0...
[  123.065654][ T8022] IPVS: using max 80 ests per chain, 192000 per kthread
[  123.120432][ T8034] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  123.136472][ T8034] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  123.276392][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.279308][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.841737][ T5940] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  123.992715][ T5940] usb 5-1: Using ep0 maxpacket: 32
[  124.009759][ T5940] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  124.021815][ T5940] usb 5-1: config 0 has no interface number 0
[  124.035580][ T5940] usb 5-1: config 0 interface 184 has no altsetting 0
[  124.061201][ T5940] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  124.077453][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.087744][ T5940] usb 5-1: Product: syz
[  124.096783][ T5940] usb 5-1: Manufacturer: syz
[  124.105615][ T5940] usb 5-1: SerialNumber: syz
[  124.121510][ T5940] usb 5-1: config 0 descriptor??
[  124.130284][ T5940] smsc75xx v1.0.0
[  124.792771][  T793] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  124.943984][  T793] usb 2-1: Using ep0 maxpacket: 8
[  124.948329][  T793] usb 2-1: config 128 has an invalid interface number: 25 but max is 0
[  124.951742][  T793] usb 2-1: config 128 has no interface number 0
[  124.958859][  T793] usb 2-1: New USB device found, idVendor=0cf2, idProduct=76f6, bcdDevice=9b.f5
[  124.962338][  T793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.965677][  T793] usb 2-1: Product: syz
[  124.967020][  T793] usb 2-1: Manufacturer: syz
[  124.968518][  T793] usb 2-1: SerialNumber: syz
[  124.974115][  T793] usb-storage 2-1:128.25: USB Mass Storage device detected
[  125.176497][  T793] usb 2-1: USB disconnect, device number 13
[  125.341957][ T5940] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71
[  125.346115][ T5940] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA
[  125.350068][ T5940] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  125.354965][ T5940] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  125.358613][ T5940] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  125.362842][ T5940] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  125.366704][ T5940] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71
[  125.371575][ T5940] usb 5-1: USB disconnect, device number 5
[  125.754005][ T8105] loop1: detected capacity change from 0 to 512
[  125.757470][ T8105] EXT4-fs: Ignoring removed nobh option
[  125.786426][ T8105] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.793: corrupted inode contents
[  125.792633][ T8105] EXT4-fs (loop1): Remounting filesystem read-only
[  125.795542][ T8105] EXT4-fs (loop1): 1 truncate cleaned up
[  125.799069][ T8105] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  125.807480][ T8105] ext4 filesystem being mounted at /255/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  125.818960][   T64] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  125.826119][   T64] Quota error (device loop1): write_blk: dquota write failed
[  125.829294][   T64] Quota error (device loop1): remove_free_dqentry: Can't write block (5) with free entries
[  125.835267][   T64] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  125.841176][   T64] Quota error (device loop1): write_blk: dquota write failed
[  125.846729][   T64] Quota error (device loop1): free_dqentry: Can't move quota data block (5) to free list
[  125.853605][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.855934][   T64] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started
[  125.861666][   T64] Quota error (device loop1): v2_write_file_info: Can't write info structure
[  125.869306][   T64] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  126.030734][ T8120] loop1: detected capacity change from 0 to 4096
[  126.041532][ T8120] EXT4-fs (loop1): Test dummy encryption mode enabled
[  126.069139][ T8120] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  126.073073][ T8120] System zones: 0-5
[  126.085298][ T8120] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  126.115048][ T8120] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000.
[  126.145657][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.206336][ T8133] netlink: 12 bytes leftover after parsing attributes in process `syz.1.804'.
[  126.210229][ T8133] smc: net device bond0 applied user defined pnetid SYZ
[  126.258190][ T8138] loop1: detected capacity change from 0 to 8
[  126.286591][ T8138] SQUASHFS error: xz decompression failed, data probably corrupt
[  126.289816][ T8138] SQUASHFS error: Failed to read block 0x108: -5
[  126.302850][ T8138] SQUASHFS error: Unable to read metadata cache entry [106]
[  126.305564][ T8138] SQUASHFS error: Unable to read inode 0x11f
[  126.612366][ T8150] netlink: 14 bytes leftover after parsing attributes in process `syz.1.813'.
[  126.631494][ T8153] loop4: detected capacity change from 0 to 512
[  126.659138][ T8153] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  126.707334][ T6758] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.808879][ T8158] loop1: detected capacity change from 0 to 2048
[  126.905850][ T8158] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  127.270947][    T9] kernel write not supported for file /binder/transaction_log (pid: 9 comm: kworker/0:0)
[  128.905713][ T8203] netlink: 'syz.4.833': attribute type 6 has an invalid length.
[  129.608836][ T8232] loop1: detected capacity change from 0 to 32768
[  129.611619][ T8232] bcachefs: bch2_fs_parse_param() Error parsing option move_bytes_in_flight: option_value
[  129.758875][ T8245] loop1: detected capacity change from 0 to 512
[  129.762069][ T8245] EXT4-fs: Ignoring removed i_version option
[  129.780304][ T8245] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  129.802058][ T8245] EXT4-fs (loop1): 1 truncate cleaned up
[  129.806166][ T8245] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  130.675923][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.761979][ T8259] loop1: detected capacity change from 0 to 512
[  130.802265][ T8259] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  130.813968][ T8259] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it
[  130.827823][ T8259] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.854: Corrupt directory, running e2fsck is recommended
[  130.853861][ T8259] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  130.857451][ T8259] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.854: corrupted in-inode xattr: invalid ea_ino
[  130.863760][ T8259] EXT4-fs (loop1): Remounting filesystem read-only
[  130.869178][ T8259] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  130.890368][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.026144][ T8274] netlink: 68 bytes leftover after parsing attributes in process `syz.2.860'.
[  132.030488][ T8293] loop1: detected capacity change from 0 to 128
[  132.034300][ T8293] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  132.042335][ T8293] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  132.607688][ T8299] netlink: 'syz.2.870': attribute type 1 has an invalid length.
[  132.611132][ T8299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.870'.
[  132.672077][ T8301] loop4: detected capacity change from 0 to 4096
[  132.683359][ T8301] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  132.700411][ T8301] ntfs3(loop4): Failed to load $Extend (-22).
[  132.703288][ T8301] ntfs3(loop4): Failed to initialize $Extend.
[  132.840947][ T8305] binder: 8300:8305 ioctl c0306201 0 returned -14
[  132.862853][ T1366] ieee802154 phy0 wpan0: encryption failed: -22
[  132.865707][ T1366] ieee802154 phy1 wpan1: encryption failed: -22
[  132.940983][  T418] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  133.154012][ T8319] netlink: 36 bytes leftover after parsing attributes in process `syz.4.877'.
[  133.379826][ T8326] loop4: detected capacity change from 0 to 32768
[  133.390984][ T8326] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  133.400968][ T8326] XFS (loop4): Ending clean mount
[  133.410363][ T8326] XFS (loop4): User initiated shutdown received.
[  133.414238][ T8326] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:476).  Shutting down filesystem.
[  133.418987][ T8326] XFS (loop4): Please unmount the filesystem and rectify the problem(s)
[  133.434949][ T6758] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  133.540982][ T8336] usb usb8: usbfs: process 8336 (syz.4.882) did not claim interface 7 before use
[  133.661299][ T8343] loop4: detected capacity change from 0 to 2048
[  133.668512][ T8343] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  134.744585][ T8355] loop1: detected capacity change from 0 to 32768
[  134.775015][ T8355] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  134.789515][ T8355] XFS (loop1): Ending clean mount
[  134.797739][ T8355] XFS (loop1): Quotacheck needed: Please wait.
[  134.818482][ T8355] XFS (loop1): Quotacheck: Done.
[  134.837598][ T5848] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  135.252775][  T794] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[  135.392459][ T8386] netlink: 20 bytes leftover after parsing attributes in process `syz.2.900'.
[  135.404663][  T794] usb 2-1: config 0 has an invalid interface number: 93 but max is 0
[  135.407660][  T794] usb 2-1: config 0 has no interface number 0
[  135.412209][  T794] usb 2-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65
[  135.417986][  T794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.421194][  T794] usb 2-1: Product: syz
[  135.423447][  T794] usb 2-1: Manufacturer: syz
[  135.425465][  T794] usb 2-1: SerialNumber: syz
[  135.430835][  T794] usb 2-1: config 0 descriptor??
[  135.642298][  T794] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in cold state, will try to load a firmware
[  135.670876][  T794] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  135.684851][  T794] dib0700: firmware download failed at 7 with -22
[  135.694688][  T794] usb 2-1: USB disconnect, device number 14
[  135.738145][   T33] audit: type=1326 audit(1755258807.895:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8403 comm="syz.4.909" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c178ebe9 code=0x7ffc0000
[  135.771476][   T33] audit: type=1326 audit(1755258807.915:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8403 comm="syz.4.909" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c178ebe9 code=0x7ffc0000
[  135.790923][   T33] audit: type=1326 audit(1755258807.915:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8403 comm="syz.4.909" exe="/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f05c178ebe9 code=0x7ffc0000
[  135.811295][   T33] audit: type=1326 audit(1755258807.915:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8403 comm="syz.4.909" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c178ebe9 code=0x7ffc0000
[  135.820665][   T33] audit: type=1326 audit(1755258807.915:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8403 comm="syz.4.909" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c178ebe9 code=0x7ffc0000
[  136.845204][ T8446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.927'.
[  136.849281][ T8446] bridge_slave_1: left allmulticast mode
[  136.851823][ T8446] bridge_slave_1: left promiscuous mode
[  136.855879][ T8446] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.870236][ T8446] bridge_slave_0: left allmulticast mode
[  136.872809][ T8446] bridge_slave_0: left promiscuous mode
[  136.875543][ T8446] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.887801][ T8530] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  138.893963][ T8530] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  140.663019][ T8577] loop4: detected capacity change from 0 to 32768
[  140.687692][ T8577] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[  140.714345][ T8577] ieee802154 phy0 wpan0: encryption failed: -22
[  140.719423][   T33] audit: type=1804 audit(1755258812.865:34): pid=8577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.983" name="/newroot/171/file1/cgroup.controllers" dev="loop4" ino=17058 res=1 errno=0
[  140.770920][ T6758] ocfs2: Unmounting device (7,4) on (node local)
[  140.877861][ T8585] netlink: 'syz.1.987': attribute type 5 has an invalid length.
[  140.930380][   T33] audit: type=1800 audit(1755258813.085:35): pid=8587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.988" name="file1" dev="tmpfs" ino=2148 res=0 errno=0
[  141.041692][ T8597] loop4: detected capacity change from 0 to 4096
[  141.051459][ T8601] netlink: 256 bytes leftover after parsing attributes in process `syz.1.994'.
[  141.172338][ T8607] overlayfs: missing 'lowerdir'
[  142.251884][ T8633] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1008'.
[  143.557989][   T33] audit: type=1326 audit(1755258815.715:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz.2.1025" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3383f8ebe9 code=0x7ffc0000
[  143.576857][   T33] audit: type=1326 audit(1755258815.715:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz.2.1025" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3383f8ebe9 code=0x7ffc0000
[  143.601881][   T33] audit: type=1326 audit(1755258815.725:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz.2.1025" exe="/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f3383f8ebe9 code=0x7ffc0000
[  143.626893][   T33] audit: type=1326 audit(1755258815.725:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz.2.1025" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3383f8ebe9 code=0x7ffc0000
[  143.645243][   T33] audit: type=1326 audit(1755258815.725:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz.2.1025" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3383f8ebe9 code=0x7ffc0000
[  143.785663][ T8691] @: renamed from bond_slave_0 (while UP)
[  143.890015][ T8698] loop4: detected capacity change from 0 to 256
[  144.125761][ T8704] loop1: detected capacity change from 0 to 4096
[  144.138854][ T8704] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  144.265580][ T8704] ntfs3(loop1): ino=19, mi_enum_attr
[  144.267948][ T8704] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  144.294454][   T33] audit: type=1800 audit(1755258816.455:41): pid=8704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1038" name="file1" dev="loop1" ino=33 res=0 errno=0
[  144.367563][ T8713] overlayfs: failed to clone upperpath
[  145.034074][ T5916] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  145.037635][ T8737] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1052'.
[  145.181616][ T8748] 9pnet_fd: Insufficient options for proto=fd
[  145.187627][ T5916] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  145.198368][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.201067][ T5916] usb 2-1: Product: syz
[  145.202851][ T5916] usb 2-1: Manufacturer: syz
[  145.207700][ T5916] usb 2-1: SerialNumber: syz
[  145.213328][ T5916] usb 2-1: config 0 descriptor??
[  145.219299][ T5916] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 015
[  145.882315][ T5916] i2c i2c-2: failure reading functionality
[  145.891492][ T5916] i2c i2c-2: connected i2c-tiny-usb device
[  145.894790][ T5916] usb 2-1: USB disconnect, device number 15
[  145.916996][ T8768] mmap: syz.2.1067 (8768) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  146.962670][ T8792] loop1: detected capacity change from 0 to 32768
[  146.999105][ T8792] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  147.085057][ T5848] ocfs2: Unmounting device (7,1) on (node local)
[  147.299484][ T8806] loop1: detected capacity change from 0 to 1024
[  147.322482][ T8809] netlink: 'syz.2.1083': attribute type 11 has an invalid length.
[  147.326166][ T8809] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1083'.
[  147.332054][ T8806] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  147.376431][ T8816] netlink: 3176 bytes leftover after parsing attributes in process `syz.2.1086'.
[  147.385829][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.369363][ T8879] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  149.829726][ T8905] ip6tnl1: entered allmulticast mode
[  149.857028][ T8907] loop1: detected capacity change from 0 to 256
[  149.869706][ T8907] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  149.979937][ T8911] ip6tnl1: entered promiscuous mode
[  149.982964][ T8911] ip6tnl1: entered allmulticast mode
[  150.211349][ T8913] loop1: detected capacity change from 0 to 32768
[  150.220707][ T8913] 
[  150.220707][ T8913]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  150.220707][ T8913] 
[  150.271076][   T40] read_mapping_page failed!
[  150.274454][   T40] ERROR: (device loop1): txCommit: 
[  150.274454][   T40] 
[  150.278962][   T40] ERROR: (device loop1): remounting filesystem as read-only
[  150.283791][   T40] jfs_write_inode: jfs_commit_inode failed!
[  150.286494][ T5848] 
[  150.286494][ T5848]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  150.286494][ T5848] 
[  150.292898][ T5848] 
[  150.292898][ T5848]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  150.292898][ T5848] 
[  150.612397][ T8933] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode
[  150.616314][ T8933] macvtap1: entered allmulticast mode
[  150.618250][ T8933] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode
[  150.632211][ T8933] mac80211_hwsim hwsim10 wlan0: left allmulticast mode
[  150.635545][ T8933] mac80211_hwsim hwsim10 wlan0: left promiscuous mode
[  151.040626][ T8956] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  151.071452][ T8958] af_packet: tpacket_rcv: packet too big, clamped from 65532 to 3944. macoff=96
[  151.354608][ T8981] vivid-000: =================  START STATUS  =================
[  151.357938][ T8981] vivid-000: Test Pattern: 75% Colorbar
[  151.361481][ T8981] vivid-000: Fill Percentage of Frame: 100
[  151.369071][ T8981] vivid-000: Horizontal Movement: No Movement
[  151.371727][ T8981] vivid-000: Vertical Movement: No Movement
[  151.375124][ T8981] vivid-000: OSD Text Mode: All
[  151.377292][ T8981] vivid-000: Show Border: false
[  151.379420][ T8981] vivid-000: Show Square: false
[  151.381483][ T8981] vivid-000: Sensor Flipped Horizontally: false
[  151.387251][ T8981] vivid-000: Sensor Flipped Vertically: false
[  151.389945][ T8981] vivid-000: Insert SAV Code in Image: false
[  151.392418][ T8981] vivid-000: Insert EAV Code in Image: false
[  151.395462][ T8981] vivid-000: Insert Video Guard Band: false
[  151.397903][ T8981] vivid-000: Reduced Framerate: false
[  151.400271][ T8981] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator
[  151.408020][ T8981] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator
[  151.411524][ T8981] vivid-000: Enable Capture Cropping: true grabbed
[  151.414820][ T8981] vivid-000: Enable Capture Composing: true grabbed
[  151.417654][ T8981] vivid-000: Enable Capture Scaler: true grabbed
[  151.420406][ T8981] vivid-000: Timestamp Source: End of Frame
[  151.423180][  T794] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  151.429743][ T8981] vivid-000: Colorspace: sRGB
[  151.431855][ T8981] vivid-000: Transfer Function: Default
[  151.434619][ T8981] vivid-000: Y'CbCr Encoding: Default
[  151.437159][ T8981] vivid-000: HSV Encoding: Hue 0-179
[  151.439581][ T8981] vivid-000: Quantization: Default
[  151.441931][ T8981] vivid-000: Apply Alpha To Red Only: false
[  151.447559][ T8981] vivid-000: Standard Aspect Ratio: 4x3
[  151.450095][ T8981] vivid-000: DV Timings Signal Mode: Current DV Timings inactive
[  151.453687][ T8981] vivid-000: DV Timings: 640x480p59 inactive
[  151.456374][ T8981] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[  151.459550][ T8981] vivid-000: Maximum EDID Blocks: 2
[  151.461949][ T8981] vivid-000: Limited RGB Range (16-235): false
[  151.467092][ T8981] vivid-000: Rx RGB Quantization Range: Automatic
[  151.469964][ T8981] vivid-000: Power Present: 0x00000001
[  151.472380][ T8981] tpg source WxH: 320x240 (Y'CbCr)
[  151.475111][ T8981] tpg field: 1
[  151.476864][ T8981] tpg crop: (0,0)/320x240
[  151.478839][ T8981] tpg compose: (0,0)/320x240
[  151.480868][ T8981] tpg colorspace: 8
[  151.485007][ T8981] tpg transfer function: 0/2
[  151.487165][ T8981] tpg Y'CbCr encoding: 0/1
[  151.489121][ T8981] tpg quantization: 0/2
[  151.490951][ T8981] tpg RGB range: 0/2
[  151.493449][ T8981] vivid-000: ==================  END STATUS  ==================
[  151.574156][  T794] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  151.580702][  T794] usb 5-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d
[  151.586671][  T794] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.590229][  T794] usb 5-1: Product: syz
[  151.592114][  T794] usb 5-1: Manufacturer: syz
[  151.594266][  T794] usb 5-1: SerialNumber: syz
[  151.730190][ T8988] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1163'.
[  151.812006][  T794] usb 5-1: selecting invalid altsetting 1
[  151.818432][  T794] LME2510(C): Firmware Status: 00 00 00 00 00 00
[  151.818511][  T794] dvb_usb_lmedm04 5-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22
[  151.839206][  T794] usb 5-1: USB disconnect, device number 6
[  152.238888][   T33] audit: type=1326 audit(1755258824.395:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9011 comm="syz.2.1174" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3383f8ebe9 code=0x7ffc0000
[  152.255094][   T33] audit: type=1326 audit(1755258824.405:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9011 comm="syz.2.1174" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3383f8ebe9 code=0x7ffc0000
[  152.272233][   T33] audit: type=1326 audit(1755258824.405:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9011 comm="syz.2.1174" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3383f8ebe9 code=0x7ffc0000
[  152.292253][   T33] audit: type=1326 audit(1755258824.405:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9011 comm="syz.2.1174" exe="/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f3383f8ebe9 code=0x7ffc0000
[  152.330507][   T33] audit: type=1326 audit(1755258824.405:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9011 comm="syz.2.1174" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3383f8ebe9 code=0x7ffc0000
[  152.339025][   T33] audit: type=1326 audit(1755258824.405:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9011 comm="syz.2.1174" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3383f8ebe9 code=0x7ffc0000
[  152.352585][   T33] audit: type=1326 audit(1755258824.405:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9011 comm="syz.2.1174" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3383f8ebe9 code=0x7ffc0000
[  152.365721][   T33] audit: type=1326 audit(1755258824.405:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9011 comm="syz.2.1174" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3383f8ebe9 code=0x7ffc0000
[  152.809859][ T9028] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  152.813959][  T793] IPVS: starting estimator thread 0...
[  152.912607][ T9030] IPVS: using max 79 ests per chain, 189600 per kthread
[  153.146991][ T9041] loop1: detected capacity change from 0 to 16
[  153.395806][ T9041] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  153.408281][ T9041] cramfs: empty filesystem
[  153.915720][ T9061] loop1: detected capacity change from 0 to 128
[  153.921101][ T9061] EXT4-fs (loop1): Test dummy encryption mode enabled
[  153.930901][ T9061] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  153.940034][ T9061] ext4 filesystem being mounted at /354/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  153.997934][ T9061] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  154.108748][ T9061] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[  154.146511][ T5848] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  154.410862][ T9079] loop4: detected capacity change from 0 to 512
[  154.417191][ T9079] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  154.422808][  T794] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  154.428639][ T9079] EXT4-fs (loop4): invalid journal inode
[  154.431044][ T9079] EXT4-fs (loop4): can't get journal size
[  154.446685][ T9079] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002]
[  154.450482][ T9079] System zones: 1-12, 13-13
[  154.456870][ T9079] EXT4-fs (loop4): orphan cleanup on readonly fs
[  154.461475][ T9079] EXT4-fs (loop4): 1 truncate cleaned up
[  154.467400][ T9079] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  154.497778][ T6758] EXT4-fs error (device loop4): __ext4_iget:5464: inode #11: block 1828716567: comm syz-executor: invalid block
[  154.509588][ T6758] EXT4-fs error (device loop4): __ext4_iget:5464: inode #11: block 1828716567: comm syz-executor: invalid block
[  154.622636][  T794] usb 2-1: Using ep0 maxpacket: 8
[  154.628375][  T794] usb 2-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10
[  154.631653][  T794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.638585][  T794] usb 2-1: Product: syz
[  154.640332][  T794] usb 2-1: Manufacturer: syz
[  154.642108][  T794] usb 2-1: SerialNumber: syz
[  154.647860][  T794] usb 2-1: config 0 descriptor??
[  154.652085][  T794] radioshark2 2-1:0.0: Invalid radioSHARK2 device
[  154.655535][  T794] radioshark2 2-1:0.0: probe with driver radioshark2 failed with error -22
[  154.658860][  T794] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  154.973168][  T794] usb 2-1: USB disconnect, device number 16
[  155.267078][ T7019] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.307273][ T5880] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.446170][ T5880] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.500270][ T5880] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.533467][ T9091] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  155.611484][ T5880] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.789488][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  155.796926][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  155.802095][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  155.808345][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  155.815832][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  155.843966][ T5880] batadv1: left allmulticast mode
[  155.846075][ T5880] batadv1: left promiscuous mode
[  155.847978][ T5880] bridge0: port 3(batadv1) entered disabled state
[  155.851775][ T5880] bridge_slave_1: left allmulticast mode
[  155.856405][ T5880] bridge_slave_1: left promiscuous mode
[  155.858983][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.865615][ T5880] bridge_slave_0: left allmulticast mode
[  155.868078][ T5880] bridge_slave_0: left promiscuous mode
[  155.870428][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.282159][ T5880] bond0 (unregistering): (slave 5@): Releasing backup interface
[  156.287971][ T5880] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  156.291845][ T5880] bond0 (unregistering): Released all slaves
[  156.367378][ T9100] lo speed is unknown, defaulting to 1000
[  156.371138][ T9100] lo speed is unknown, defaulting to 1000
[  156.627259][ T9123] hfsplus: unable to find HFS+ superblock
[  156.638627][ T9100] chnl_net:caif_netlink_parms(): no params data found
[  156.857932][ T5880] hsr_slave_0: left promiscuous mode
[  156.863034][ T5880] hsr_slave_1: left promiscuous mode
[  156.867701][ T5880] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  156.870396][ T5880] batman_adv: batadv0: Removing interface: batadv_slave_0
[  156.887353][ T5880] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  156.892308][ T5880] batman_adv: batadv0: Removing interface: batadv_slave_1
[  156.906976][ T5880] veth1_macvtap: left promiscuous mode
[  156.909308][ T5880] veth0_macvtap: left promiscuous mode
[  156.911475][ T5880] veth1_vlan: left promiscuous mode
[  156.914954][ T5880] veth0_vlan: left promiscuous mode
[  157.587856][ T5880] team0 (unregistering): Port device team_slave_1 removed
[  157.619900][ T5880] team0 (unregistering): Port device team_slave_0 removed
[  157.786451][ T9144] loop1: detected capacity change from 0 to 512
[  157.802383][ T9144] EXT4-fs: Ignoring removed bh option
[  157.808672][ T9144] ext3: Unknown parameter 'noacl'
[  157.836986][ T5855] Bluetooth: hci1: command tx timeout
[  158.493789][   T47] lo speed is unknown, defaulting to 1000
[  158.496854][ T9100] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.500063][ T9100] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.504016][   T47] infiniband syz2: ib_query_port failed (-19)
[  158.505819][ T9100] bridge_slave_0: entered allmulticast mode
[  158.510406][ T9100] bridge_slave_0: entered promiscuous mode
[  158.516430][ T9100] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.522985][ T9100] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.526086][ T9100] bridge_slave_1: entered allmulticast mode
[  158.529943][ T9100] bridge_slave_1: entered promiscuous mode
[  158.541496][   T33] audit: type=1326 audit(1755258830.695:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9147 comm="syz.2.1219" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3383f8ebe9 code=0x7ffc0000
[  158.556551][   T33] audit: type=1326 audit(1755258830.695:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9147 comm="syz.2.1219" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3383f8ebe9 code=0x7ffc0000
[  158.572897][   T33] audit: type=1326 audit(1755258830.705:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9147 comm="syz.2.1219" exe="/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f3383f8ebe9 code=0x7ffc0000
[  158.588044][   T33] audit: type=1326 audit(1755258830.705:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9147 comm="syz.2.1219" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3383f8ebe9 code=0x7ffc0000
[  158.608091][ T9100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  158.617242][ T9100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  158.748850][ T9100] team0: Port device team_slave_0 added
[  158.756813][ T9156] loop1: detected capacity change from 0 to 4096
[  158.769882][ T9100] team0: Port device team_slave_1 added
[  158.811442][ T9161] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  158.835094][ T9156] NILFS error (device loop1): nilfs_find_entry: dir 2 size 34359742464 exceeds block count 1
[  158.848423][ T9100] batman_adv: batadv0: Adding interface: batadv_slave_0
[  158.851192][ T9100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  158.856280][ T9156] Remounting filesystem read-only
[  158.873662][ T9100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  158.882036][ T9100] batman_adv: batadv0: Adding interface: batadv_slave_1
[  158.888228][ T9100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  158.910167][ T9100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  158.929334][ T9166] netlink: 'syz.1.1225': attribute type 10 has an invalid length.
[  158.939174][ T9166] bond0: (slave dummy0): Releasing backup interface
[  158.942978][ T9166] dummy0: left promiscuous mode
[  158.948397][ T9166] team0: Port device dummy0 added
[  159.016913][ T9100] hsr_slave_0: entered promiscuous mode
[  159.026981][ T9100] hsr_slave_1: entered promiscuous mode
[  159.045071][ T9100] debugfs: 'hsr0' already exists in 'hsr'
[  159.047576][ T9100] Cannot create hsr debugfs directory
[  159.061189][ T9177] loop1: detected capacity change from 0 to 256
[  159.075026][ T9177] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  159.175753][ T5880] IPVS: stop unused estimator thread 0...
[  159.386397][ T9100] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  159.411196][ T9100] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  159.423179][ T9100] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  159.431055][ T9100] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  159.527014][ T9183] loop1: detected capacity change from 0 to 32768
[  159.540827][ T9183] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1231 (9183)
[  159.605102][ T9183] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  159.609056][ T9183] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  159.611977][ T9183] BTRFS info (device loop1): using free-space-tree
[  159.617468][ T9100] 8021q: adding VLAN 0 to HW filter on device bond0
[  159.640163][ T9100] 8021q: adding VLAN 0 to HW filter on device team0
[  159.648865][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.651332][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[  159.668829][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.671223][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[  159.898043][ T9100] 8021q: adding VLAN 0 to HW filter on device batadv0
[  159.914365][ T5855] Bluetooth: hci1: command tx timeout
[  159.931088][ T5848] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  160.251242][ T9100] veth0_vlan: entered promiscuous mode
[  160.275728][ T9100] veth1_vlan: entered promiscuous mode
[  160.331318][ T9100] veth0_macvtap: entered promiscuous mode
[  160.346139][ T9100] veth1_macvtap: entered promiscuous mode
[  160.378868][ T9100] batman_adv: batadv0: Interface activated: batadv_slave_0
[  160.407912][ T9100] batman_adv: batadv0: Interface activated: batadv_slave_1
[  160.428755][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  160.444246][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  160.469583][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  160.481186][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  160.602440][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  160.616342][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  160.681077][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  160.687379][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  160.915182][ T9275] netlink: 'syz.5.1243': attribute type 5 has an invalid length.
[  162.012767][ T5855] Bluetooth: hci1: command tx timeout
[  162.584444][ T9327] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1259'.
[  162.587491][ T9327] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1259'.
[  162.590608][ T9327] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1259'.
[  162.594427][ T9327] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1259'.
[  163.949784][ T9360] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1272'.
[  164.072687][ T5855] Bluetooth: hci1: command tx timeout
[  164.549097][ T9376] loop5: detected capacity change from 0 to 8192
[  165.054201][ T9412] usb usb5: usbfs: process 9412 (syz.5.1291) did not claim interface 0 before use
[  165.220331][ T9408] team0: Port device dummy0 removed
[  165.336073][ T9408] bond0: (slave bond_slave_0): Releasing backup interface
[  165.339972][ T9408] bond_slave_0: left promiscuous mode
[  165.346922][ T9408] bond0: (slave bond_slave_1): Releasing backup interface
[  165.350044][ T9408] bond_slave_1: left promiscuous mode
[  165.358089][ T9408] team0: Port device team_slave_0 removed
[  165.364468][ T9408] team0: Port device team_slave_1 removed
[  165.368829][ T9408] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  165.371591][ T9408] batman_adv: batadv0: Removing interface: batadv_slave_0
[  165.375955][ T9408] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  165.378504][ T9408] batman_adv: batadv0: Removing interface: batadv_slave_1
[  165.877542][ T9424] loop5: detected capacity change from 0 to 256
[  166.454977][ T9430] loop1: detected capacity change from 0 to 128
[  166.487343][ T9432] loop5: detected capacity change from 0 to 1024
[  166.773699][ T9453] random: crng reseeded on system resumption
[  167.612910][ T9456] loop5: detected capacity change from 0 to 32768
[  168.125175][   T33] audit: type=1326 audit(1755258840.285:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9472 comm="syz.5.1318" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc33b8ebe9 code=0x7ffc0000
[  168.146853][   T33] audit: type=1326 audit(1755258840.295:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9472 comm="syz.5.1318" exe="/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fdc33b8ebe9 code=0x7ffc0000
[  168.173319][   T33] audit: type=1326 audit(1755258840.295:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9472 comm="syz.5.1318" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc33b8ebe9 code=0x7ffc0000
[  168.186288][   T33] audit: type=1326 audit(1755258840.295:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9472 comm="syz.5.1318" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc33b8ebe9 code=0x7ffc0000
[  168.213711][   T33] audit: type=1326 audit(1755258840.295:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9472 comm="syz.5.1318" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdc33b8ebe9 code=0x7ffc0000
[  168.221622][   T33] audit: type=1326 audit(1755258840.295:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9472 comm="syz.5.1318" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc33b8ebe9 code=0x7ffc0000
[  168.230975][   T33] audit: type=1326 audit(1755258840.295:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9472 comm="syz.5.1318" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc33b8ebe9 code=0x7ffc0000
[  168.240362][   T33] audit: type=1326 audit(1755258840.295:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9472 comm="syz.5.1318" exe="/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fdc33b8ebe9 code=0x7ffc0000
[  168.251711][   T33] audit: type=1326 audit(1755258840.315:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9472 comm="syz.5.1318" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc33b8ebe9 code=0x7ffc0000
[  168.261950][   T33] audit: type=1326 audit(1755258840.315:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9472 comm="syz.5.1318" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc33b8ebe9 code=0x7ffc0000
[  168.669310][ T9500] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  168.715507][ T9503] loop1: detected capacity change from 0 to 2364
[  169.144034][ T5902] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  169.310707][ T9528] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.314378][ T9528] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.325350][ T5902] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  169.329898][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.340038][ T5902] usb 2-1: Product: syz
[  169.344854][ T5902] usb 2-1: Manufacturer: syz
[  169.350560][ T5902] usb 2-1: SerialNumber: syz
[  169.368928][ T5902] usb 2-1: config 0 descriptor??
[  169.378945][ T5902] gspca_main: sunplus-2.14.0 probing 055f:c230
[  169.476077][ T9528] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  169.485741][ T9528] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  169.535867][ T9531] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  169.540140][ T9531] overlayfs: missing 'lowerdir'
[  169.623141][ T9535] kAFS: Can only specify source 'none' with -o dyn
[  169.680001][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  169.684344][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  169.690078][ T9264] lo speed is unknown, defaulting to 1000
[  169.696402][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  169.700180][ T9264] syz0: Port: 1 Link DOWN
[  169.706346][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  169.794925][ T5902] gspca_sunplus: reg_r err -71
[  169.797116][ T5902] sunplus 2-1:0.0: probe with driver sunplus failed with error -71
[  169.825177][ T5902] usb 2-1: USB disconnect, device number 17
[  169.861220][ T9546] loop5: detected capacity change from 0 to 512
[  169.868961][ T9546] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  169.875280][ T9546] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  169.881355][ T9546] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.1351: corrupted in-inode xattr: e_value size too large
[  169.889880][ T9546] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1351: couldn't read orphan inode 15 (err -117)
[  169.897147][ T9546] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  169.931467][ T9100] EXT4-fs error (device loop5): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39
[  169.937151][ T9100] EXT4-fs error (device loop5): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39
[  169.978363][ T9392] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.231941][   T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.280658][   T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.341964][   T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.388754][ T9556] ip6gre1: entered allmulticast mode
[  170.441812][   T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.602456][ T9565] veth1_vlan: entered allmulticast mode
[  170.891841][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  170.897353][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  170.903453][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  170.914383][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  170.920317][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  170.955191][   T13] bridge_slave_1: left allmulticast mode
[  170.959383][   T13] bridge_slave_1: left promiscuous mode
[  170.962248][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.972336][   T13] bridge_slave_0: left allmulticast mode
[  170.975094][   T13] bridge_slave_0: left promiscuous mode
[  170.977086][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.253119][ T5940] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  171.293908][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  171.298468][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  171.305725][   T13] bond0 (unregistering): Released all slaves
[  171.329394][ T9568] lo speed is unknown, defaulting to 1000
[  171.422830][ T5940] usb 2-1: Using ep0 maxpacket: 32
[  171.431536][ T5940] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[  171.444524][ T5940] usb 2-1: config 0 has no interface number 0
[  171.446973][ T5940] usb 2-1: config 0 interface 184 has no altsetting 0
[  171.483023][ T5940] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  171.486627][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.499825][ T5940] usb 2-1: Product: syz
[  171.501554][ T5940] usb 2-1: Manufacturer: syz
[  171.510149][ T5940] usb 2-1: SerialNumber: syz
[  171.515167][ T5940] usb 2-1: config 0 descriptor??
[  171.523818][ T5940] smsc75xx v1.0.0
[  171.626698][ T9568] chnl_net:caif_netlink_parms(): no params data found
[  171.700882][   T13] hsr_slave_0: left promiscuous mode
[  171.705292][   T13] hsr_slave_1: left promiscuous mode
[  171.707819][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  171.710779][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  171.719321][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  171.722411][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  171.750971][   T13] veth1_macvtap: left promiscuous mode
[  171.755869][   T13] veth0_macvtap: left promiscuous mode
[  171.758193][   T13] veth1_vlan: left promiscuous mode
[  171.760337][   T13] veth0_vlan: left promiscuous mode
[  172.141987][ T5940] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  172.151143][ T5940] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  172.155286][ T5940] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  172.159568][ T5940] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71
[  172.169826][ T5940] usb 2-1: USB disconnect, device number 18
[  172.244924][   T13] team0 (unregistering): Port device team_slave_1 removed
[  172.273299][   T13] team0 (unregistering): Port device team_slave_0 removed
[  172.814426][ T9568] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.817798][ T9568] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.820976][ T9568] bridge_slave_0: entered allmulticast mode
[  172.830979][ T9568] bridge_slave_0: entered promiscuous mode
[  172.837820][ T9568] bridge0: port 2(bridge_slave_1) entered blocking state
[  172.841076][ T9568] bridge0: port 2(bridge_slave_1) entered disabled state
[  172.847130][ T9568] bridge_slave_1: entered allmulticast mode
[  172.853124][ T9568] bridge_slave_1: entered promiscuous mode
[  172.954167][ T5850] Bluetooth: hci1: command tx timeout
[  172.969322][ T9568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  172.985602][ T9568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  173.061722][ T9568] team0: Port device team_slave_0 added
[  173.075001][ T9568] team0: Port device team_slave_1 added
[  173.192656][ T9568] batman_adv: batadv0: Adding interface: batadv_slave_0
[  173.195123][ T9568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  173.243320][ T9568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  173.247777][ T9568] batman_adv: batadv0: Adding interface: batadv_slave_1
[  173.250164][ T9568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  173.260220][ T9568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  173.318355][ T9568] hsr_slave_0: entered promiscuous mode
[  173.320734][ T9568] hsr_slave_1: entered promiscuous mode
[  173.325226][ T9568] debugfs: 'hsr0' already exists in 'hsr'
[  173.327271][ T9568] Cannot create hsr debugfs directory
[  173.662301][ T9568] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  173.716094][ T9568] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  173.779127][ T9568] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  173.807057][ T9568] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  173.962084][ T9568] 8021q: adding VLAN 0 to HW filter on device bond0
[  173.974684][ T9568] 8021q: adding VLAN 0 to HW filter on device team0
[  173.979847][  T418] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.982150][  T418] bridge0: port 1(bridge_slave_0) entered forwarding state
[  173.996300][  T418] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.998857][  T418] bridge0: port 2(bridge_slave_1) entered forwarding state
[  174.063150][ T5940] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  174.169113][ T9568] 8021q: adding VLAN 0 to HW filter on device batadv0
[  174.214618][ T5940] usb 2-1: New USB device found, idVendor=59cc, idProduct=980d, bcdDevice=b4.8e
[  174.221796][ T5940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.236569][ T5940] usb 2-1: config 0 descriptor??
[  174.333157][ T5940] usb-storage 2-1:0.0: USB Mass Storage device detected
[  174.387184][ T9568] veth0_vlan: entered promiscuous mode
[  174.395387][ T9568] veth1_vlan: entered promiscuous mode
[  174.446073][ T9568] veth0_macvtap: entered promiscuous mode
[  174.456005][ T9568] veth1_macvtap: entered promiscuous mode
[  174.469809][ T9568] batman_adv: batadv0: Interface activated: batadv_slave_0
[  174.482833][ T9568] batman_adv: batadv0: Interface activated: batadv_slave_1
[  174.493658][   T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  174.503084][   T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  174.507005][   T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  174.512465][   T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  174.539230][ T5940] usb 2-1: USB disconnect, device number 19
[  174.592031][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.601406][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  174.629159][  T418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.634407][  T418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  174.711689][ T9712] bond0: entered promiscuous mode
[  174.714485][ T9712] bond_slave_0: entered promiscuous mode
[  174.716619][ T9712] bond_slave_1: entered promiscuous mode
[  174.791330][ T9719] loop6: detected capacity change from 0 to 764
[  174.858023][ T9721] Symlink component flag not implemented
[  174.864887][ T9721] Symlink component flag not implemented
[  174.873890][ T9721] Symlink component flag not implemented (128)
[  174.884280][ T9721] Symlink component flag not implemented (122)
[  175.032814][ T5850] Bluetooth: hci1: command tx timeout
[  177.133040][ T5850] Bluetooth: hci1: command tx timeout
[  177.421581][ T9784] loop6: detected capacity change from 0 to 32768
[  177.433274][ T9784] XFS: ikeep mount option is deprecated.
[  177.453294][ T9784] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  177.474855][ T9784] XFS (loop6): Ending clean mount
[  177.478587][ T9784] XFS (loop6): Quotacheck needed: Please wait.
[  177.580973][ T9784] XFS (loop6): Quotacheck: Done.
[  177.649531][ T9568] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  178.222673][   T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  178.242556][ T5902] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  178.383239][   T10] usb 2-1: Using ep0 maxpacket: 32
[  178.390785][   T10] usb 2-1: config 0 has too many interfaces: 66, using maximum allowed: 32
[  178.398524][   T10] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  178.401881][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  178.411216][ T5902] usb 7-1: Using ep0 maxpacket: 32
[  178.422590][   T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 66
[  178.429907][ T5902] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe
[  178.433519][ T5902] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.441140][ T5902] usb 7-1: Product: syz
[  178.443652][ T5902] usb 7-1: Manufacturer: syz
[  178.445908][ T5902] usb 7-1: SerialNumber: syz
[  178.447817][   T10] usb 2-1: New USB device found, idVendor=d084, idProduct=c487, bcdDevice=f4.ce
[  178.451300][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.457211][   T10] usb 2-1: Product: syz
[  178.458872][   T10] usb 2-1: Manufacturer: syz
[  178.460721][   T10] usb 2-1: SerialNumber: syz
[  178.463267][ T5902] usb 7-1: config 0 descriptor??
[  178.480751][   T10] usb 2-1: config 0 descriptor??
[  178.675136][ T5902] snd-usb-6fire 7-1:0.0: unknown device firmware state received from device:
[  178.678886][ T5902] eb 9a 47 80 9b f8 7a f0 
[  178.680701][ T5902] snd-usb-6fire 7-1:0.0: probe with driver snd-usb-6fire failed with error -5
[  178.694066][ T5902] usb 2-1: USB disconnect, device number 20
[  178.886759][ T5902] usb 7-1: USB disconnect, device number 2
[  179.192510][ T5850] Bluetooth: hci1: command tx timeout
[  179.344015][ T9876] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1432'.
[  179.348048][ T9876] netlink: 'syz.1.1432': attribute type 1 has an invalid length.
[  179.541694][ T9880] loop6: detected capacity change from 0 to 40427
[  179.549326][ T9880] F2FS-fs (loop6): invalid crc value
[  179.581127][ T9880] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  179.585920][ T9880] F2FS-fs (loop6): Start checkpoint disabled!
[  179.594246][ T9880] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  179.627661][ T9880] F2FS-fs (loop6): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[  179.679342][   T28] kworker/u9:1: attempt to access beyond end of device
[  179.679342][   T28] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  179.691312][   T28] CPU: 0 UID: 0 PID: 28 Comm: kworker/u9:1 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  179.691331][   T28] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  179.691338][   T28] Workqueue: writeback wb_workfn (flush-7:6)
[  179.691385][   T28] Call Trace:
[  179.691390][   T28]  <TASK>
[  179.691396][   T28]  dump_stack_lvl+0x189/0x250
[  179.691412][   T28]  ? __pfx_dump_stack_lvl+0x10/0x10
[  179.691425][   T28]  ? __pfx_queue_work_on+0x10/0x10
[  179.691435][   T28]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  179.691449][   T28]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  179.691470][   T28]  f2fs_handle_critical_error+0x37c/0x540
[  179.691490][   T28]  f2fs_write_end_io+0x886/0xb60
[  179.691513][   T28]  __submit_merged_bio+0x27a/0x6a0
[  179.691529][   T28]  __submit_merged_write_cond+0x255/0x530
[  179.691546][   T28]  f2fs_write_data_pages+0x261d/0x3000
[  179.691584][   T28]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  179.691652][   T28]  ? f2fs_write_meta_pages+0x357/0x450
[  179.691671][   T28]  ? __lock_acquire+0xab9/0xd20
[  179.691689][   T28]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  179.691705][   T28]  do_writepages+0x32e/0x550
[  179.691723][   T28]  ? reacquire_held_locks+0x127/0x1d0
[  179.691733][   T28]  ? writeback_sb_inodes+0x384/0x1010
[  179.691752][   T28]  __writeback_single_inode+0x145/0xff0
[  179.691766][   T28]  ? do_raw_spin_unlock+0x4d/0x240
[  179.691782][   T28]  writeback_sb_inodes+0x6c7/0x1010
[  179.691808][   T28]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  179.691850][   T28]  ? rcu_is_watching+0x15/0xb0
[  179.691870][   T28]  wb_writeback+0x43b/0xaf0
[  179.691889][   T28]  ? queue_io+0x3c1/0x590
[  179.691904][   T28]  ? __pfx_wb_writeback+0x10/0x10
[  179.691920][   T28]  ? _raw_spin_unlock_irq+0x23/0x50
[  179.691933][   T28]  wb_workfn+0x409/0xef0
[  179.691953][   T28]  ? __pfx_wb_workfn+0x10/0x10
[  179.691968][   T28]  ? __lock_acquire+0xab9/0xd20
[  179.691989][   T28]  ? process_scheduled_works+0x9ef/0x17b0
[  179.692004][   T28]  ? _raw_spin_unlock_irq+0x23/0x50
[  179.692016][   T28]  ? process_scheduled_works+0x9ef/0x17b0
[  179.692025][   T28]  ? process_scheduled_works+0x9ef/0x17b0
[  179.692037][   T28]  process_scheduled_works+0xae1/0x17b0
[  179.692062][   T28]  ? __pfx_process_scheduled_works+0x10/0x10
[  179.692084][   T28]  worker_thread+0x8a0/0xda0
[  179.692114][   T28]  kthread+0x711/0x8a0
[  179.692130][   T28]  ? __pfx_worker_thread+0x10/0x10
[  179.692140][   T28]  ? __pfx_kthread+0x10/0x10
[  179.692151][   T28]  ? _raw_spin_unlock_irq+0x23/0x50
[  179.692168][   T28]  ? lockdep_hardirqs_on+0x9c/0x150
[  179.692181][   T28]  ? __pfx_kthread+0x10/0x10
[  179.692195][   T28]  ret_from_fork+0x3fc/0x770
[  179.692208][   T28]  ? __pfx_ret_from_fork+0x10/0x10
[  179.692223][   T28]  ? __switch_to_asm+0x39/0x70
[  179.692236][   T28]  ? __switch_to_asm+0x33/0x70
[  179.692247][   T28]  ? __pfx_kthread+0x10/0x10
[  179.692280][   T28]  ret_from_fork_asm+0x1a/0x30
[  179.692305][   T28]  </TASK>
[  179.802590][    C0] vkms_vblank_simulate: vblank timer overrun
[  179.806492][   T28] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  179.862511][ T5901] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  180.012843][ T5901] usb 2-1: Using ep0 maxpacket: 16
[  180.016610][ T5901] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  180.020666][ T5901] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  180.027715][ T5901] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  180.030962][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.036911][ T5901] usb 2-1: Product: syz
[  180.038418][ T5901] usb 2-1: Manufacturer: syz
[  180.040466][ T5901] usb 2-1: SerialNumber: syz
[  180.259171][ T5901] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  180.289676][ T5901] usb 2-1: USB disconnect, device number 21
[  180.324570][ T5857] udevd[5857]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  180.947927][ T9934] dvmrp0: entered allmulticast mode
[  180.953246][ T9933] dvmrp0: left allmulticast mode
[  181.665874][ T9955] loop6: detected capacity change from 0 to 32768
[  181.673976][ T9955] 
[  181.673976][ T9955]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  181.673976][ T9955] 
[  181.688108][ T9952] JFS: metapage_get_blocks failed
[  181.691081][ T9952] ERROR: (device loop6): release_metapage: metapage_write_one() failed
[  181.691081][ T9952] 
[  181.699492][ T9952] ERROR: (device loop6): diWrite: ixpxd invalid
[  181.699492][ T9952] 
[  181.702507][ T9952] ERROR: (device loop6): txCommit: 
[  181.702507][ T9952] 
[  182.140583][ T9568] 
[  182.140583][ T9568]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  182.140583][ T9568] 
[  182.147149][ T9568] 
[  182.147149][ T9568]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  182.147149][ T9568] 
[  182.168882][ T9973] overlayfs: failed to resolve './file0/../file0': -2
[  183.880276][   T33] kauditd_printk_skb: 5 callbacks suppressed
[  183.880311][   T33] audit: type=1326 audit(1755261432.035:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10016 comm="syz.6.1487" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9353d2add9 code=0x7ffc0000
[  183.915692][   T33] audit: type=1326 audit(1755261432.035:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10016 comm="syz.6.1487" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9353d2add9 code=0x7ffc0000
[  183.928273][   T33] audit: type=1326 audit(1755261432.035:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10016 comm="syz.6.1487" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9353d2add9 code=0x7ffc0000
[  183.945223][   T33] audit: type=1326 audit(1755261432.035:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10016 comm="syz.6.1487" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9353d2add9 code=0x7ffc0000
[  183.961887][   T33] audit: type=1326 audit(1755261432.035:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10016 comm="syz.6.1487" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9353d2add9 code=0x7ffc0000
[  183.983850][   T33] audit: type=1326 audit(1755261432.035:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10016 comm="syz.6.1487" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9353d2add9 code=0x7ffc0000
[  183.992386][   T33] audit: type=1326 audit(1755261432.035:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10016 comm="syz.6.1487" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9353d2add9 code=0x7ffc0000
[  184.000921][   T33] audit: type=1326 audit(1755261432.035:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10016 comm="syz.6.1487" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9353d2add9 code=0x7ffc0000
[  184.009670][   T33] audit: type=1326 audit(1755261432.045:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10016 comm="syz.6.1487" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9353d2add9 code=0x7ffc0000
[  184.018269][   T33] audit: type=1326 audit(1755261432.045:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10016 comm="syz.6.1487" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9353d2add9 code=0x7ffc0000
[  184.258353][T10030] netlink: 'syz.6.1490': attribute type 2 has an invalid length.
[  184.479080][T10044] loop6: detected capacity change from 0 to 128
[  184.496938][T10044] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only
[  184.543148][T10044] hpfs: hpfs_map_sector(): read error
[  184.637712][T10053] loop6: detected capacity change from 0 to 4096
[  184.655060][T10054] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  185.129373][T10064] loop6: detected capacity change from 0 to 256
[  185.157081][T10064] FAT-fs (loop6): Directory bread(block 64) failed
[  185.159932][T10064] FAT-fs (loop6): Directory bread(block 65) failed
[  185.164817][T10064] FAT-fs (loop6): Directory bread(block 66) failed
[  185.168006][T10064] FAT-fs (loop6): Directory bread(block 67) failed
[  185.170822][T10064] FAT-fs (loop6): Directory bread(block 68) failed
[  185.175012][T10064] FAT-fs (loop6): Directory bread(block 69) failed
[  185.177730][T10064] FAT-fs (loop6): Directory bread(block 70) failed
[  185.180508][T10064] FAT-fs (loop6): Directory bread(block 71) failed
[  185.183384][T10064] FAT-fs (loop6): Directory bread(block 72) failed
[  185.186409][T10064] FAT-fs (loop6): Directory bread(block 73) failed
[  185.502519][   T47] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  185.654321][   T47] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  185.657569][   T47] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[  185.664237][   T47] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  185.667692][   T47] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.670395][   T47] usb 7-1: Product: syz
[  185.672371][   T47] usb 7-1: Manufacturer: syz
[  185.674048][   T47] usb 7-1: SerialNumber: syz
[  185.678100][   T47] usb 7-1: config 0 descriptor??
[  185.683776][   T47] usb 7-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress 07
[  185.774526][T10078] 9pnet_fd: Insufficient options for proto=fd
[  185.904530][   T47] usb 7-1: USB disconnect, device number 3
[  185.946976][ T6251] udevd[6251]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  186.239887][   T10] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0
[  186.243905][   T10] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0
[  186.246524][   T10] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0
[  186.255398][   T10] hid-generic 0000:0004:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  186.811831][T10120] siw: device registration error -23
[  187.840484][T10144] loop6: detected capacity change from 0 to 128
[  187.876269][T10144] vxfs: unsupported VxFS version (2066843062)
[  188.243700][T10158] Invalid ELF header magic: != ELF
[  188.536772][T10174] trusted_key: syz.6.1553 sent an empty control message without MSG_MORE.
[  189.279603][T10224] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  189.921449][ T5901] usb 7-1: new low-speed USB device number 4 using dummy_hcd
[  190.079737][ T5901] usb 7-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  190.094555][ T5901] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  190.107304][ T5901] usb 7-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  190.123739][ T5901] usb 7-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  190.128538][ T5901] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  190.134076][ T5901] usb 7-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  190.140858][ T5901] usb 7-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  190.151061][ T5901] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  190.155512][ T5901] usb 7-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  190.489744][ T5901] usb 7-1: string descriptor 0 read error: -22
[  190.492553][ T5901] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  190.496115][ T5901] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.512559][ T5901] adutux 7-1:168.0: interrupt endpoints not found
[  190.706640][  T793] usb 7-1: USB disconnect, device number 4
[  191.035380][T10324] netlink: 'syz.1.1601': attribute type 13 has an invalid length.
[  191.038037][T10324] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1601'.
[  191.046158][T10324] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len
[  191.331035][ T5901] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  191.495109][ T5901] usb 2-1: Using ep0 maxpacket: 8
[  191.499675][ T5901] usb 2-1: config index 0 descriptor too short (expected 30, got 18)
[  191.508109][ T5901] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  191.518075][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.522151][ T5901] usb 2-1: Product: syz
[  191.523668][ T5901] usb 2-1: Manufacturer: syz
[  191.525468][ T5901] usb 2-1: SerialNumber: syz
[  191.533196][ T5901] usb 2-1: config 0 descriptor??
[  191.543414][ T5901] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  191.550274][ T5901] usb 2-1: setting power ON
[  191.552977][ T5901] dvb-usb: bulk message failed: -22 (2/0)
[  191.559670][ T5901] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  191.565571][ T5901] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  191.569441][ T5901] usb 2-1: media controller created
[  191.573571][T10351] sp0: Synchronizing with TNC
[  191.591514][ T5901] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  191.619079][ T5901] usb 2-1: selecting invalid altsetting 6
[  191.622585][ T5901] usb 2-1: digital interface selection failed (-22)
[  191.625472][ T5901] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  191.630377][ T5901] usb 2-1: setting power OFF
[  191.634504][ T5901] dvb-usb: bulk message failed: -22 (2/0)
[  191.637054][ T5901] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  191.641370][ T5901] (NULL device *): no alternate interface
[  191.675011][ T5901] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  191.709626][T10354] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1615'.
[  191.749232][   T47] usb 2-1: USB disconnect, device number 22
[  191.971305][T10355] loop6: detected capacity change from 0 to 32768
[  191.983204][T10355] XFS: noikeep mount option is deprecated.
[  192.006429][T10355] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  192.083071][T10355] XFS (loop6): Ending clean mount
[  192.093946][T10355] XFS (loop6): Quotacheck needed: Please wait.
[  192.127602][T10355] XFS (loop6): Quotacheck: Done.
[  192.159019][ T9568] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  192.526051][T10394] IPv6: NLM_F_CREATE should be specified when creating new route
[  192.529502][T10394] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  192.533107][T10394] IPv6: NLM_F_CREATE should be set when creating new route
[  193.633582][T10411] loop6: detected capacity change from 0 to 256
[  193.657406][T10411] exFAT-fs (loop6): error, data size is invalid(34359738378)
[  193.670435][T10411] exFAT-fs (loop6): Filesystem has been set read-only
[  193.679708][T10411] exFAT-fs (loop6): error, data size is invalid(34359738378)
[  193.725218][T10421] loop6: detected capacity change from 0 to 128
[  193.755966][   T33] kauditd_printk_skb: 305 callbacks suppressed
[  193.755976][   T33] audit: type=1800 audit(1755261441.906:384): pid=10421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1640" name="file1" dev="loop6" ino=1048658 res=0 errno=0
[  194.103294][T10444] fuse: Bad value for 'fd'
[  194.191378][ T1366] ieee802154 phy0 wpan0: encryption failed: -22
[  194.193983][ T1366] ieee802154 phy1 wpan1: encryption failed: -22
[  195.939745][   T33] audit: type=1326 audit(1755261444.096:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10471 comm="syz.2.1661" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3383f8ebe9 code=0x7ffc0000
[  195.947341][   T33] audit: type=1326 audit(1755261444.106:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10471 comm="syz.2.1661" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3383f8ebe9 code=0x7ffc0000
[  195.956506][   T33] audit: type=1326 audit(1755261444.106:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10471 comm="syz.2.1661" exe="/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f3383f8ebe9 code=0x7ffc0000
[  195.965223][   T33] audit: type=1326 audit(1755261444.106:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10471 comm="syz.2.1661" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3383f8ebe9 code=0x7ffc0000
[  195.973718][   T33] audit: type=1326 audit(1755261444.106:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10471 comm="syz.2.1661" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3383f8ebe9 code=0x7ffc0000
[  197.368585][T10502] tipc: Failed to obtain node identity
[  197.375548][T10502] tipc: Enabling of bearer <ib:sit0> rejected, failed to enable media
[  198.339296][T10543] lo speed is unknown, defaulting to 1000
[  198.961528][T10565] bridge1: the hash_elasticity option has been deprecated and is always 16
[  198.965558][T10565] bridge1: entered promiscuous mode
[  198.967848][T10565] bridge1: entered allmulticast mode
[  199.260075][ T5940] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  199.421497][ T5940] usb 7-1: config 0 has an invalid interface number: 83 but max is 0
[  199.424415][ T5940] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  199.428088][ T5940] usb 7-1: config 0 has no interface number 0
[  199.432545][ T5940] usb 7-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61
[  199.436179][ T5940] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.442782][ T5940] usb 7-1: config 0 descriptor??
[  199.447660][ T5940] ttusbir 7-1:0.83: cannot find expected altsetting
[  199.653962][ T5940] usb 7-1: USB disconnect, device number 5
[  200.518415][T10617] lo speed is unknown, defaulting to 1000
[  200.637220][T10623] loop6: detected capacity change from 0 to 2048
[  200.668480][T10623] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  200.830719][T10638] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  200.842040][T10638] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 814 with error 28
[  200.848906][T10638] EXT4-fs (loop6): This should not happen!! Data will be lost
[  200.848906][T10638] 
[  200.860303][T10638] EXT4-fs (loop6): Total free blocks count 0
[  200.863685][T10638] EXT4-fs (loop6): Free/Dirty block details
[  200.865977][T10638] EXT4-fs (loop6): free_blocks=2415919104
[  200.867925][T10638] EXT4-fs (loop6): dirty_blocks=816
[  200.869665][T10638] EXT4-fs (loop6): Block reservation details
[  200.874596][T10638] EXT4-fs (loop6): i_reserved_data_blocks=51
[  200.968843][   T28] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28
[  201.117535][T10673] netlink: 'syz.6.1741': attribute type 10 has an invalid length.
[  201.122785][T10673] team0: Port device team_slave_0 removed
[  201.206147][T10679] ==================================================================
[  201.209560][T10679] BUG: KASAN: use-after-free in xfrm_alloc_spi+0x570/0xf30
[  201.212681][T10679] Read of size 4 at addr ffff8880228180c4 by task syz.2.1744/10679
[  201.215914][T10679] 
[  201.217132][T10679] CPU: 1 UID: 0 PID: 10679 Comm: syz.2.1744 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  201.217144][T10679] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  201.217149][T10679] Call Trace:
[  201.217154][T10679]  <TASK>
[  201.217158][T10679]  dump_stack_lvl+0x189/0x250
[  201.217170][T10679]  ? __kasan_check_byte+0x12/0x40
[  201.217181][T10679]  ? __pfx_dump_stack_lvl+0x10/0x10
[  201.217190][T10679]  ? lock_release+0x4b/0x3e0
[  201.217202][T10679]  ? __virt_addr_valid+0x4a5/0x5c0
[  201.217212][T10679]  print_report+0xca/0x240
[  201.217221][T10679]  ? xfrm_alloc_spi+0x570/0xf30
[  201.217229][T10679]  kasan_report+0x118/0x150
[  201.217238][T10679]  ? xfrm_alloc_spi+0x570/0xf30
[  201.217246][T10679]  xfrm_alloc_spi+0x570/0xf30
[  201.217253][T10679]  ? xfrm_alloc_spi+0x2a0/0xf30
[  201.217262][T10679]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  201.217269][T10679]  ? xfrm_find_acq+0x87/0xa0
[  201.217277][T10679]  xfrm_alloc_userspi+0x70b/0xc90
[  201.217289][T10679]  ? apparmor_capable+0x137/0x1b0
[  201.217297][T10679]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  201.217305][T10679]  ? __nla_parse+0x40/0x60
[  201.217315][T10679]  xfrm_user_rcv_msg+0x7a3/0xab0
[  201.217324][T10679]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  201.217336][T10679]  ? __pfx___mutex_trylock_common+0x10/0x10
[  201.217344][T10679]  ? rcu_is_watching+0x15/0xb0
[  201.217351][T10679]  ? trace_contention_end+0x39/0x120
[  201.217359][T10679]  ? __mutex_lock+0x335/0x1360
[  201.217369][T10679]  netlink_rcv_skb+0x208/0x470
[  201.217379][T10679]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  201.217386][T10679]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  201.217397][T10679]  ? netlink_deliver_tap+0x2e/0x1b0
[  201.217405][T10679]  ? netlink_deliver_tap+0x2e/0x1b0
[  201.217414][T10679]  xfrm_netlink_rcv+0x79/0x90
[  201.217421][T10679]  netlink_unicast+0x82f/0x9e0
[  201.217430][T10679]  ? __pfx_netlink_unicast+0x10/0x10
[  201.217438][T10679]  ? netlink_sendmsg+0x642/0xb30
[  201.217447][T10679]  ? skb_put+0x11b/0x210
[  201.217454][T10679]  netlink_sendmsg+0x805/0xb30
[  201.217465][T10679]  ? __pfx_netlink_sendmsg+0x10/0x10
[  201.217475][T10679]  ? aa_sock_msg_perm+0xf1/0x1d0
[  201.217485][T10679]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  201.217492][T10679]  ? __pfx_netlink_sendmsg+0x10/0x10
[  201.217501][T10679]  __sock_sendmsg+0x21c/0x270
[  201.217510][T10679]  ____sys_sendmsg+0x505/0x830
[  201.217517][T10679]  ? __pfx_____sys_sendmsg+0x10/0x10
[  201.217525][T10679]  ? import_iovec+0x74/0xa0
[  201.217533][T10679]  ___sys_sendmsg+0x21f/0x2a0
[  201.217539][T10679]  ? __pfx____sys_sendmsg+0x10/0x10
[  201.217551][T10679]  ? __fget_files+0x2a/0x420
[  201.217557][T10679]  ? __fget_files+0x3a0/0x420
[  201.217564][T10679]  __x64_sys_sendmsg+0x19b/0x260
[  201.217571][T10679]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  201.217579][T10679]  ? rcu_is_watching+0x15/0xb0
[  201.217586][T10679]  ? do_syscall_64+0xbe/0x3b0
[  201.217595][T10679]  do_syscall_64+0xfa/0x3b0
[  201.217603][T10679]  ? lockdep_hardirqs_on+0x9c/0x150
[  201.217612][T10679]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.217618][T10679]  ? exc_page_fault+0x9f/0xf0
[  201.217626][T10679]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.217633][T10679] RIP: 0033:0x7f3383f8ebe9
[  201.217641][T10679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  201.217647][T10679] RSP: 002b:00007f3384e51038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  201.217655][T10679] RAX: ffffffffffffffda RBX: 00007f33841b5fa0 RCX: 00007f3383f8ebe9
[  201.217660][T10679] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[  201.217664][T10679] RBP: 00007f3384011e19 R08: 0000000000000000 R09: 0000000000000000
[  201.217668][T10679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  201.217672][T10679] R13: 00007f33841b6038 R14: 00007f33841b5fa0 R15: 00007ffe7b845078
[  201.217679][T10679]  </TASK>
[  201.217682][T10679] 
[  201.289744][ T9264] usb 2-1: new full-speed USB device number 23 using dummy_hcd
[  201.290038][T10679] The buggy address belongs to the physical page:
[  201.360023][T10679] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888022818480 pfn:0x22818
[  201.363890][T10679] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  201.366777][T10679] raw: 00fff00000000000 ffffea00007c8108 ffffea0000a44d08 0000000000000000
[  201.370141][T10679] raw: ffff888022818480 00000000000e0000 00000000ffffffff 0000000000000000
[  201.373336][T10679] page dumped because: kasan: bad access detected
[  201.375756][T10679] page_owner tracks the page as freed
[  201.377888][T10679] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7817, tgid 7816 (syz.4.669), ts 116387376526, free_ts 197799338408
[  201.384672][T10679]  post_alloc_hook+0x240/0x2a0
[  201.386626][T10679]  get_page_from_freelist+0x21e4/0x22c0
[  201.388799][T10679]  __alloc_frozen_pages_noprof+0x181/0x370
[  201.391156][T10679]  alloc_pages_mpol+0x232/0x4a0
[  201.392962][T10679]  allocate_slab+0x8a/0x370
[  201.394634][T10679]  ___slab_alloc+0xbeb/0x1410
[  201.396207][T10679]  kmem_cache_alloc_noprof+0x283/0x3c0
[  201.397866][T10679]  xfrm_state_alloc+0x24/0x2f0
[  201.399555][T10679]  __find_acq_core+0x8a7/0x1c00
[  201.401599][T10679]  xfrm_find_acq+0x78/0xa0
[  201.403394][T10679]  xfrm_alloc_userspi+0x6b3/0xc90
[  201.405189][T10679]  xfrm_user_rcv_msg+0x7a3/0xab0
[  201.406981][T10679]  netlink_rcv_skb+0x208/0x470
[  201.408735][T10679]  xfrm_netlink_rcv+0x79/0x90
[  201.410559][T10679]  netlink_unicast+0x82f/0x9e0
[  201.412484][T10679]  netlink_sendmsg+0x805/0xb30
[  201.414340][T10679] page last free pid 5857 tgid 5857 stack trace:
[  201.416872][T10679]  __free_frozen_pages+0xbc4/0xd30
[  201.418712][T10679]  __slab_free+0x303/0x3c0
[  201.420375][T10679]  qlist_free_all+0x97/0x140
[  201.422140][T10679]  kasan_quarantine_reduce+0x148/0x160
[  201.424083][T10679]  __kasan_slab_alloc+0x22/0x80
[  201.425899][T10679]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  201.428079][T10679]  getname_flags+0xb8/0x540
[  201.429699][T10679]  do_sys_openat2+0xbc/0x1c0
[  201.431278][T10679]  __x64_sys_openat+0x138/0x170
[  201.432961][T10679]  do_syscall_64+0xfa/0x3b0
[  201.434612][T10679]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.436756][T10679] 
[  201.437656][T10679] Memory state around the buggy address:
[  201.439899][T10679]  ffff888022817f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  201.441138][ T9264] usb 2-1: config 0 has an invalid interface number: 120 but max is 0
[  201.442709][T10679]  ffff888022818000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  201.442717][T10679] >ffff888022818080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  201.442721][T10679]                                            ^
[  201.442725][T10679]  ffff888022818100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  201.442731][T10679]  ffff888022818180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  201.442735][T10679] ==================================================================
[  201.443068][T10679] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  201.443077][T10679] CPU: 1 UID: 0 PID: 10679 Comm: syz.2.1744 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  201.443087][T10679] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  201.443092][T10679] Call Trace:
[  201.443095][T10679]  <TASK>
[  201.443099][T10679]  dump_stack_lvl+0x99/0x250
[  201.443109][T10679]  ? __asan_memcpy+0x40/0x70
[  201.443118][T10679]  ? __pfx_dump_stack_lvl+0x10/0x10
[  201.443126][T10679]  ? __pfx__printk+0x10/0x10
[  201.443139][T10679]  vpanic+0x281/0x750
[  201.443148][T10679]  ? __pfx_vpanic+0x10/0x10
[  201.443155][T10679]  ? irqentry_exit+0x74/0x90
[  201.443167][T10679]  panic+0xb9/0xc0
[  201.443175][T10679]  ? __pfx_panic+0x10/0x10
[  201.443183][T10679]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  201.443191][T10679]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  201.443200][T10679]  ? xfrm_alloc_spi+0x570/0xf30
[  201.443207][T10679]  check_panic_on_warn+0x89/0xb0
[  201.443218][T10679]  ? xfrm_alloc_spi+0x570/0xf30
[  201.443224][T10679]  end_report+0x78/0x160
[  201.443233][T10679]  kasan_report+0x129/0x150
[  201.443241][T10679]  ? xfrm_alloc_spi+0x570/0xf30
[  201.443249][T10679]  xfrm_alloc_spi+0x570/0xf30
[  201.443256][T10679]  ? xfrm_alloc_spi+0x2a0/0xf30
[  201.443265][T10679]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  201.443273][T10679]  ? xfrm_find_acq+0x87/0xa0
[  201.443281][T10679]  xfrm_alloc_userspi+0x70b/0xc90
[  201.443291][T10679]  ? apparmor_capable+0x137/0x1b0
[  201.443299][T10679]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  201.443306][T10679]  ? __nla_parse+0x40/0x60
[  201.443316][T10679]  xfrm_user_rcv_msg+0x7a3/0xab0
[  201.443323][T10679]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  201.443335][T10679]  ? __pfx___mutex_trylock_common+0x10/0x10
[  201.443343][T10679]  ? rcu_is_watching+0x15/0xb0
[  201.443350][T10679]  ? trace_contention_end+0x39/0x120
[  201.443357][T10679]  ? __mutex_lock+0x335/0x1360
[  201.443367][T10679]  netlink_rcv_skb+0x208/0x470
[  201.443377][T10679]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  201.443384][T10679]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  201.443395][T10679]  ? netlink_deliver_tap+0x2e/0x1b0
[  201.443403][T10679]  ? netlink_deliver_tap+0x2e/0x1b0
[  201.443411][T10679]  xfrm_netlink_rcv+0x79/0x90
[  201.443418][T10679]  netlink_unicast+0x82f/0x9e0
[  201.443427][T10679]  ? __pfx_netlink_unicast+0x10/0x10
[  201.443435][T10679]  ? netlink_sendmsg+0x642/0xb30
[  201.443442][T10679]  ? skb_put+0x11b/0x210
[  201.443449][T10679]  netlink_sendmsg+0x805/0xb30
[  201.443459][T10679]  ? __pfx_netlink_sendmsg+0x10/0x10
[  201.443467][T10679]  ? aa_sock_msg_perm+0xf1/0x1d0
[  201.443476][T10679]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  201.443483][T10679]  ? __pfx_netlink_sendmsg+0x10/0x10
[  201.443491][T10679]  __sock_sendmsg+0x21c/0x270
[  201.443500][T10679]  ____sys_sendmsg+0x505/0x830
[  201.443507][T10679]  ? __pfx_____sys_sendmsg+0x10/0x10
[  201.443514][T10679]  ? import_iovec+0x74/0xa0
[  201.443522][T10679]  ___sys_sendmsg+0x21f/0x2a0
[  201.443529][T10679]  ? __pfx____sys_sendmsg+0x10/0x10
[  201.443539][T10679]  ? __fget_files+0x2a/0x420
[  201.443546][T10679]  ? __fget_files+0x3a0/0x420
[  201.443553][T10679]  __x64_sys_sendmsg+0x19b/0x260
[  201.443559][T10679]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  201.443567][T10679]  ? rcu_is_watching+0x15/0xb0
[  201.443574][T10679]  ? do_syscall_64+0xbe/0x3b0
[  201.443583][T10679]  do_syscall_64+0xfa/0x3b0
[  201.443591][T10679]  ? lockdep_hardirqs_on+0x9c/0x150
[  201.443598][T10679]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.443605][T10679]  ? exc_page_fault+0x9f/0xf0
[  201.443613][T10679]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.443619][T10679] RIP: 0033:0x7f3383f8ebe9
[  201.443626][T10679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  201.443633][T10679] RSP: 002b:00007f3384e51038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  201.443642][T10679] RAX: ffffffffffffffda RBX: 00007f33841b5fa0 RCX: 00007f3383f8ebe9
[  201.443647][T10679] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[  201.443651][T10679] RBP: 00007f3384011e19 R08: 0000000000000000 R09: 0000000000000000
[  201.443656][T10679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  201.443660][T10679] R13: 00007f33841b6038 R14: 00007f33841b5fa0 R15: 00007ffe7b845078
[  201.443667][T10679]  </TASK>
[  201.446342][T10679] Kernel Offset: disabled

VM DIAGNOSIS:
11:54:33  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=ffff88801a49127c RCX=0000000000000005 RDX=ffffffff81c38720
RSI=ffffffff8e18f470 RDI=0000000000000004 RBP=0000002eda866445 RSP=ffffc900036cf3c8
R8 =ffff88801b373980 R9 =0000000000000016 R10=0000000000000016 R11=0000000000000002
R12=ffff88801a491010 R13=0000000000000004 R14=0000000000016684 R15=000000000000026c
RIP=ffffffff81bfb192 RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f9354b4d6c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f33841b7dac CR3=000000003e73e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=000000000000a1bf 00000000fff81a7b XMM03=00000008000002b7 fffffff800000107
XMM04=95000000b1000000 8500000000000003 XMM05=b700000008000002 b7fffffff8000001
XMM06=07000000000000a1 bf00000000fff81a XMM07=7b20202000000000 0025642020000000
XMM08=0000000000000000 00007f9353e12ee7 XMM09=0000000000000000 00007f9353e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000031 RBX=0000000000000031 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000012e7 RDI=00000000000012e8 RBP=00000000000003f8 RSP=ffffc90002f3e9f0
R8 =ffff888020420237 R9 =1ffff11004084046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99af98c6 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f3384e516c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000280 CR3=000000011c6aa000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f3384187498 00007f3384187470 XMM03=00007f33841874a8 00007f33841874a0
XMM04=00007f3384ced100 00007f3384187460 XMM05=00007f3384187478 00007f33841874c0
XMM06=00007f33841874b8 00007f33841874b0 XMM07=00007f33841874a8 00007f33841874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f3384012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
