last executing test programs:

3m35.708551833s ago: executing program 1 (id=277):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x5, 0x1, 0x8, 0xa, 0x0, 0x70bd27, 0x0, [@sadb_address={0x3, 0x6, 0x33, 0x0, 0x0, @in={0x2, 0x1000}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0xfc, 0xe0000001}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0)

3m35.649519363s ago: executing program 1 (id=278):
setresuid(0x0, 0xee00, 0x0)
unshare(0x4a040600)

3m35.615537211s ago: executing program 1 (id=279):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x44, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9b03}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xffffffff}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)

3m35.521281695s ago: executing program 1 (id=280):
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@dioread_lock}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@usrquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@nodioread_nolock}]}, 0xff, 0x756, &(0x7f0000001e40)="$eJzs3c2LW1UbAPDnpvP1tn2dKbiwIjjQhYXSjJ3WUkGkogspVoq6c9GmM+lQJmnKJFM6Q6VWFMGVSHHtx8qd/4Aogu5cCq5dSaFIqRtBiNzMzZg2SScznUyq+f3glnPuvek5z/04OZlzuDeAoTWd/pOL2B8RHycRk9n6JCJGG6mRiJNr+929c20uXZKo19/8PWnsk+aj5TOpPVnmiYj4/oOIQ7n2cqsrq4uFUqm4lOVnauXLM9WV1cMXy4WF4kLx0uzx54/Onph97sTstsX65/uvnz/19Stf3nzvp1/feOfU00mcjL3ZttY4tst0TGfHZDQ9hPd4ebsLG7Bk0BVgS9Jbc9faXR77YzJ2NVIAwH/Z9YioAwBDJvH9DwBDpvl3gObYXj/GwR5lt1+KiImIsZZjsLZlJBuzm2iMg+6+m9wzMpJExNQ2lD8dEVff/vCbdIk+jUMCdPLujYg4NzXd3v4nbXMWNuvZHvaZvi+v/YOd813a/znRqf+XW+//RIf+z3iHe3crNr7/c7e2oZiu0v7fCx37v+uT1qZ2Zbn/N/p8o8mFi6Vi2rY9FhEHY3Q8zR95QBnHPnnxx27bWvt/6ZKW3+wLZvW4NTJ+72fmC7XCw8Tc6vaNiCdHOsWfrJ//pEv/90yPZdR+eOqLbts2jr+/6p9HPNPx/P8zoy1pmZ84Hm3zE2ca18NM86pol/9ocl+38gcdf3r+dz84/qmkdb5mdfNl/PzpX69227bV638seauRHsvWXS3UaktHIsaS19rXt0whbeab+6fxHzzw4Pav0/Wf/iY812P8i599dX7r8fdXGv/8ps7/5hMHfvm2czz1bLbxhuf/WCN1MFvTS/vXawUf5tgBAAAAAAAAAAAAAAAAAAAAAAAAQK9yEbE3klx+PZ3L5fNr7/B+PHbnSpVq7dCFyvKl+Wi8K3sqRnPNJ11OtjwP9Uj2PPxmfva+/NGI2BcRN8f/18jn5yql+UEHDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACZPV3e/5/6bXzQtQMA+mbi+qBrAADstIlBVwAA2HG+/wFg+Pj+B4ChctocPwAYTn7/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0GdnTp9Ol/ofd67Npfn5KyvLi5Urh+eL1cV8eXkuP1dZupxfqFQWSsX8XKW80f9XqlQuzx6P5asztWK1NlNdWT1brixfqp29WC4sFM8WR3ckKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYnOrK6mKhVCouPWKJiax+j0p9JCSGKzHghgkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgX+LvAAAA///A4xmC")
r0 = open(&(0x7f00000001c0)='./file1\x00', 0x20042, 0x45)
r1 = open(&(0x7f0000000200)='./file2\x00', 0x100, 0x123)
creat(&(0x7f0000000380)='./bus\x00', 0x0)
mount(&(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1a, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
copy_file_range(r1, 0x0, r0, 0x0, 0x3df1, 0x0)

3m35.28146321s ago: executing program 1 (id=281):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4)

3m34.941009016s ago: executing program 1 (id=284):
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x17e)
ioctl$BLKPG(r0, 0xc0c0128e, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x0})

3m34.922812929s ago: executing program 32 (id=284):
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x17e)
ioctl$BLKPG(r0, 0xc0c0128e, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x0})

3m19.708562011s ago: executing program 3 (id=467):
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000200)={{@any, 0x88}, 0x0, 0x2, 0x1})
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r0, 0x0)
futex_waitv(&(0x7f0000001b00)=[{0x3, &(0x7f00000000c0)=0x200000006, 0x6}], 0x1, 0x0, 0x0, 0x1)

3m19.657737354s ago: executing program 3 (id=471):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendmmsg$inet6(r0, &(0x7f00000026c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="8f92", 0x2}], 0x1}}], 0x1, 0x4400c800)
sendto$inet6(r0, &(0x7f0000000300), 0x1e, 0x3b00, 0x0, 0xfffffffffffffdfd)

3m19.594475761s ago: executing program 3 (id=472):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000002140)=@setlink={0x3c, 0x13, 0x5, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x41000}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}, @IFLA_CARRIER={0x5, 0x21, 0x6}]}, 0x3c}}, 0x8084)

3m19.47887165s ago: executing program 3 (id=473):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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")
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
shutdown(r1, 0x1)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
listen(r1, 0x5a)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0x5, 0x42}]}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x40, @empty}, 0x1c)
sendmmsg$inet(r2, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="abc9d5f5f4e2ebd6fdb549be4af901e93738b57eaf5d64030000005246bda49640092f", 0x23}], 0x1}}, {{0x0, 0x0, &(0x7f0000004300)=[{&(0x7f0000004200)="beadcc21615db5adf0841f6384707f1cb8cd5253721a61310e4f630cb4ef44a6ef2389c61b5c1095d821e1635410602b10ad310a6644", 0x36}], 0x1, &(0x7f0000001d40)}}], 0x2, 0x48045)
close_range(r1, 0xffffffffffffffff, 0x0)

3m19.333862155s ago: executing program 3 (id=477):
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='timerslack_ns\x00')
write$tcp_mem(r0, &(0x7f0000000040)={0xfffffffffffffff9, 0x20, 0x9, 0x20, 0x7}, 0x48)

3m18.806126706s ago: executing program 3 (id=483):
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x2048cc, &(0x7f00000005c0)=ANY=[], 0x1, 0x35b, &(0x7f0000000180)="$eJzs3c9rI2UYB/CncW2763bTgwgK4ote9BLa+g8YZBfEglK3snoQZm2qIbNJyYSVLOLuTTwI/h2LR2+CCJ578e7NWy8e97AYSdJfiQ1olzQt/XygfZ/m7Zd5Z4Ypz2X67t354V5ju6hsZ50ovZPiakSUnkQsRykOzO2PpUE9H8c9irfKd/549aNPPn2/ur5+cyOlW9Xbb6+llG689stXX//4+q+dFz7+6cbPC7G7/NneX2t/7r60+/Le37e/rBepXqRmq5OydLfV6mR381raqheNSkof5rWsqKV6s6i1R+a389bOTjdlza2lazvtWlGkrNlNjVo3dVqp0+6m7Ius3kyVSiUtXYvL5TTnu/l4YyOrTmExnKHvxj+4Ovpju13N+s/wwr+Sm4+nujAA4Fwa7/9LsTj4fEb9/0GL8v/7/7nL3v+fhv7/Muj3//P7z+8o/T8AAAAAAAAAAAAAAFwET3q9cq/XKx+M41+zXh/T5f5fbsde3FuMyL+9v3l/czgO56vbUY88arES5Xga0TsUgzcFb723fnMlDSzH0r2Hw3x/fG40vxrlWB7N97/386sppd7DlEbzzw/+o8Vhfi3K8eLJ+bXh8cfy8/HmG8fylSjH759HK/LYin72KP/NakrvfrA+ll8Y/N5x35/97QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgjFTSoRP3769UJs0P84f7669EOZ6evD//yon781+JV67M9twBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4EDRfdDI8rzW/k/F3KlSE4pHMWGqt+/ZD3FRioipHeK36zHpOk+5WIyI83F5z1exEBOmru8/XTNf4aCY4R8lAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmJGjTb9nvRIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABmqeg+aGR5XmtPsZj1OQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwk/wQAAP//eNodCg==")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

3m18.599046464s ago: executing program 33 (id=483):
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x2048cc, &(0x7f00000005c0)=ANY=[], 0x1, 0x35b, &(0x7f0000000180)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

2m37.482783839s ago: executing program 2 (id=1073):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000000), 0x1, 0x625, &(0x7f0000000800)="$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")

2m37.339553099s ago: executing program 2 (id=1075):
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x17, 0xffffffffffffffff, {0x2}}, './file1\x00'})

2m37.240320063s ago: executing program 2 (id=1076):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x2000000, &(0x7f0000000200), 0x1, 0x445, &(0x7f0000001dc0)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000000)={0x1, 0x8000000000005, 0x5, 0x80006, 0xfffffffe, 0x7})

2m37.089589286s ago: executing program 2 (id=1083):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x200000, &(0x7f0000000000)={[{@noinit_itable}]}, 0xfe, 0x596, &(0x7f00000026c0)="$eJzs3d9rFNceAPDvbLLRGK9GELn3crkEfKhF3Jikthb6YB9LKxXadxuSNUg2rmQ3YlKh+lBf+lKkUEqF0j+g730q0n+gf4WlFaRIqAX7sGU2s7pJdvPL1azZzwdG58ycmXPOznxPzuzZZQPoWSPpP7mI/0TEl0nE4aZ9/ZHtHFnJt/zoxlS6JFGrffRHEkm2rZE/yf4fyhL/joifP484mVtfbmVxaXayVCrOZ+nR6tzV0cri0qnLc5MzxZnilfGJibNnJsbffuvNjrX19QuPv/nw3ntnvzi+/PUPD47cSeJcHMz2NbdjQ/s23HuzOTESI9lrko9zazKObafir4BktyvAjvRlcZ6PtA84HH1Z1AN732cRUdu+Jzs4Bug6yU7iH9gDGuOAxrP9lp+D94iH7648AK1vf7Ly3kjsrz8bHVhOVj0Zpc+7wx0oPy3jx9/v3kmX2M77EADP6eatiDjd39++/1vj79qWz316C3nWlqH/g5fnXjr++WkwYl38556Of6LF+GeoRezuxObxn3uwMgnVZKADBWfS8d87Lce/T4sc7stS/6qP+fLJpculYtq3HYqIE5Hfl6Y3ms85u3y/bafZPP5Ll7T8xlgwq8eD/jVzTtOT1cnnaXOzh7ci/rvJ+Ddpcf3T1+PCFss4Vrz7/3b7Nm//i1X7PuK1ltf/2YxWsvH85Gj9fhht3BXr/Xn72C/tyt/t9qfX/8DG7R9OmudrK9sv47v9T4rt9o0k2aTpNu//geTjes/U6AquT1ar82MRA8kH9fSq7ePPjm2kG/nT9p843jr+N7r/ByPiky22//bR222z1q//4d29/tPbuv4brzw+s3JQ867773/6bbvyt9b/vVFfO5Ft2Ur/17aCA6u37PiFAwAAAAAAgC6UG4g4GEmukM3pH4xcrlBY+XzH0TiQK5Ur1ZOXygtXpqP+XdnhyOcaM91DTZ+HGMuOb6THs8/HNtITEXEkIr7qG6ynC1Pl0vRuNx4AAAAAAAAAAAAAAAAAAAC6xFC0/v5/6re+3a4d8ML5yW/oXavif1+LDJ34pSegK/n7D71L/EPvEv/Qu8Q/9C7xD71L/EPv2ln8/+9QxysCvHT+/gMAAAAAAAAAAAAAAAAAAAAAAAAAAEBHXTh/Pl1qy49uTEXE/ri2uDBbvnZqupifLcwtTBWmyvNXCzPl8kypWJgqz212vlK5fHVsPBauj1aLlepoZXHp4lx54Ur14uW5yZnixWL+5TQLAAAAAAAAAAAAAAAAAAAAXimVxaXZyVKpON+dK/kOn/DXLmnXHlrp745qWJmvDEYHT7i6n/irVqvtVh8FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP8EAAD//3hONlo=")
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)

2m36.887470269s ago: executing program 2 (id=1089):
r0 = socket$netlink(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="ac0100001700010000000000000000007f0000010000000000000000000000000000fefffffffffffd8000000000000000000000000000bbac1414bb000000000000000000000000ffffff2b6b57a470b83fce00000000004e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000200000000f9ffffff00000000000000000000000084000500ffffffff000000000000000000000000000004d33c0000000a00000000000000000000000000000000000001053500000200ac0003000000010000000900000000000000000000000000000000000001000004d56c"], 0x1ac}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2c, 0x25dfdbfd, {{@in=@loopback, @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x70bd27, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xdffc, 0x0, 0x0, 0x0, 0xa, 0xe0}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@local, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0)

2m36.568245162s ago: executing program 2 (id=1091):
prctl$PR_SCHED_CORE(0x4d, 0x20000000000001, 0x0, 0x2, 0x0)

2m36.486509709s ago: executing program 34 (id=1091):
prctl$PR_SCHED_CORE(0x4d, 0x20000000000001, 0x0, 0x2, 0x0)

47.397398772s ago: executing program 5 (id=2949):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="b800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000080008400000ff1608001540000000000800048004000280140005800f"], 0xb8}, 0x1, 0x0, 0x0, 0x8014}, 0x40c0)

47.397250038s ago: executing program 5 (id=2950):
syz_usb_connect(0x0, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c17aa5500010102030109025100010100c0320705820200020009040001040806620007050102000200032401"], 0x0)

46.157224273s ago: executing program 5 (id=2959):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001740), 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001c80)={0x6, 0x5, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x1000}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000700)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}, 0x94)

46.157117823s ago: executing program 5 (id=2960):
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x81001)
unshare(0x22020400)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', r2, 0x0, 0x41)

46.100942806s ago: executing program 5 (id=2961):
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x8804, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x810\x8f\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00<r\xe9\x9cD\x90\xce\xe1\xc5\x85=\\!\xbbQ\xde\x1f\x17G\xa6\x13\xae\x92 \x1c\xbf\xfa\xe8e\x8cD\"\xa3w\x00\x00\x00\x00')

45.886756685s ago: executing program 5 (id=2962):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4)
r1 = socket$netlink(0x10, 0x3, 0x4)
writev(r1, &(0x7f0000000100)=[{&(0x7f0000000440)="5800000014001923060000000000000010ff000000000069d6e580dfee0000004e32f61bcdf1e422676b001000000100800000000000001000aadc28dad12c0d03cf77ce8196c2b228742e6faa000000c600000000000000", 0x58}], 0x1)

45.786511802s ago: executing program 35 (id=2962):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4)
r1 = socket$netlink(0x10, 0x3, 0x4)
writev(r1, &(0x7f0000000100)=[{&(0x7f0000000440)="5800000014001923060000000000000010ff000000000069d6e580dfee0000004e32f61bcdf1e422676b001000000100800000000000001000aadc28dad12c0d03cf77ce8196c2b228742e6faa000000c600000000000000", 0x58}], 0x1)

25.125854356s ago: executing program 4 (id=3355):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket(0x10, 0x80003, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "000b000000020400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)

25.045861747s ago: executing program 4 (id=3359):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmmsg$inet_sctp(r0, &(0x7f0000001380)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f00000001c0)="14", 0x1}], 0x1, &(0x7f0000000100)=[@sndinfo={0x20, 0x84, 0x2, {0x2, 0x8, 0xe8, 0x9}}], 0x20, 0x8001}], 0x1, 0x40)

24.977679825s ago: executing program 4 (id=3360):
io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000000)=[@ioring_restriction_register_op], 0x1)
io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0)

24.976557387s ago: executing program 4 (id=3363):
syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x300800c, &(0x7f0000000100)=ANY=[], 0x1, 0x259, &(0x7f0000000580)="$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")
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

24.832959426s ago: executing program 4 (id=3368):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x458, 0x0, 0x60, 0xd0e0000, 0x0, 0x100, 0x3c0, 0x1d8, 0x1d8, 0x3c0, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x2a0, 0x2c0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x2, 0x0, 0x0, './file0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x9400, 0x98, 0x100, 0x94, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8)

24.635354665s ago: executing program 4 (id=3372):
r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x8000000b, 0x1, 0x4, 0x0, 0x87})
ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x9, 0xd75, 0x1, {0x1, @vbi={0x8, 0x8000, 0x3, 0x41416770, [0x82, 0x7], [0xc153], 0x1}}, 0xd3})

24.482230952s ago: executing program 36 (id=3372):
r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x8000000b, 0x1, 0x4, 0x0, 0x87})
ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x9, 0xd75, 0x1, {0x1, @vbi={0x8, 0x8000, 0x3, 0x41416770, [0x82, 0x7], [0xc153], 0x1}}, 0xd3})

7.128960842s ago: executing program 7 (id=3592):
syz_read_part_table(0x5eb, &(0x7f0000000600)="$eJzs0k9LXFcUAPDzpplMbLQjJdBFN4VIoGCbtqE0UAcawjBkE4P9Q5ZdBVJoF0IWWQyKzjpNv0BDGgVx4xcQurEqiIKuxEUXMptuCkqhDKW88t48RwuuWqnW/H4w79137z33nOGe4H+tFNX+7iitRMSffcfsGYyISu/rx8vFoHI5Pp+vV+Kte7fGPosPk/j154Evk9652ZHdU5NufClPUu6u3+mLzedrt/fnB9evbq0MvSgVcYuliKygr3dnqn+rJf/Iqrh4sXc+L72F2nJ1ujXeePK4VolGs33jQRLxe740kkRM3i8aJeuruJQPL51s/qwn8/wPtxvN9tDmzdmNdHTv+4F3yyubnQ9W812vRXIkRu+eH5+8EhGtw/t/dmVqZ6pz99rco+vDF2Jp4mlx8b8V74+zx1eTUT7NogEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHNpobbcidZ448nj2sPtRrN948E79Te/rX/z3Uc/jEx88cbI/VK2K4n0j2PDyyeQvzrdOjim2S7HzdmNdHQvBsaziVcP9g0nR6Mu/Nu0nBFvlyOmj/TfsyvvvT/VuXtt7tH14dd3liaeFveepr2Qvvz5y+pplQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnHH1mEzTW2OliCR+Sg7n00r3neS/sd7KaDF/p/Jp8nzt9v784PrVrZWhF/eK+cX+6M8HuzPV//J/8M/8FQAA//+rV3et")

6.880390112s ago: executing program 7 (id=3594):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'vlan0\x00', @random="010000201000"})

6.661470878s ago: executing program 7 (id=3597):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000200)={[{@creator={'creator', 0x3d, "91b6afda"}}, {@nls={'nls', 0x3d, 'cp866'}}, {@gid}, {@type={'type', 0x3d, "abe89a7a"}}, {@nobarrier}]}, 0x1, 0x5d9, &(0x7f0000000cc0)="$eJzs3U1rXNcdB+DfHY9lywVbSezELQGLGNqmovaMxk3dbuqWUrQIJVDoKgSEPY6Ex0qQJkUJpVXft/0I6UJfoLvsAukiq3bdlbah0L12LvfOHWlsKYoUK5pR/Txw5pxzzz3nnvu/LzN3hJgAz6yFuTQ3UmRh7vX1sr612eltbXYeDstJziVpJM1BlmIlKT5J7mSQ8vVyYT1c8XnbefWzSx9de+vTNwe1Zp2q9RsH9TucjTplNsmZOj+u8e4+9XjFY3t4fRg4GLdHe2wcpftTXrfAJCgG75t7zCQXkpyvPwekvjs0TnZ2x+9IdzkAAAA4pS5tZzvruTjueQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBpUv/+f1GnxrA8m2L4+/9T9bLU5VPt43FPAAAAAAAAAACOwbXtbGc9F4f1R0X1N/9Xqsrl6vVreS9r6WY1N7KexfTTz2raSWZGBppaX+z3V9uH6Dm/b8/5k9lfAAAAAAAAAPg/9fss7P79HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJkGRnBlkVbo8LM+k0UxyPslUud5G8q9h+TT7eNwTAAAAgBNwaTvbWc/FYf1RUT3zv1g995/Pe1lJP8vpp5du7lXfBQye+htbm53e1mbnYZn2jvvj/x5pGtWIGXz3sP+Wr1ZrTOd+lqslN3I376SXe2lUPUtXh/PZf16/K+dU/Kh2yJndq/Nyz/9a55NhporI2Z2ItOq5ldF47uBIHPHoPLmldho73/xc/gpifqHOy/3580THfH7k7Hvx4Egk3/vlv5eWeisPlu6vzU3OLn1JT0aiMxKJl56pSLSqSFzZqS/kZ/lF5jKbN7Ka5fwqi+mnm9n8tCot1udz+TpzcKTuPFZ744tmMlUfl8Fd9GhzeqXqezHL+Xneyb10czs/yK3czu3cynxaaY0c4SuHuOobR7vqr3+7Lkwn+UudT4Yyrs+NxHX0njtTtY0u2Y3S88d/b2x+oy6U2/hDnU+GJyPRHonECwdH4m+Pyte13sqD1aXFdw+5vW/VeXkd/Wmi3iXK8+X58mBVtcfPjrLthX3b2lXb5Z22xp62KzttX3SlTtWf4faONF+1vbRvW6dquzrStt/nLQAm3oXvXJia/s/0P6c/nP7j9NL06+d/cu72uZencvYfZ3/YbJ35ZuPl4u/5ML/Zff4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+vLX3P3iw2Ot1VxUUFJ7Jwm/3bRr3nQn4qt3sP3z35tr7H3x3+eHi2923uyudW+3Oa7far3W+f/P+cq/bGrzudpga52yB47T7pj/umQAAAAAAAAAAAACHdRL/YDDufQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOt4W5NDdSpN260SrrW5udXpmG5d01m0kaSYpfJ8UnyZ0MUmZGhis+bzuvfnbpo2tvffrm7ljN4fqNg/odzkadMpvkTJ0f13h3n3q8YmcPy4BdHwYOxu1/AQAA//96kwu1")
socket$inet(0x2, 0x2, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x2808080, &(0x7f00000000c0)=ANY=[@ANYBLOB="756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c756e695f786c6174653d312c756d61736b3d30303030303030303030303030303230303030303030372c636f6465706167653d3836302c73686f72746e616d653d6c6f77656b2c726f6469722c73686f72746e616d653d77696e6e742c6e66733d7374616c655f72772c696f638b61727365743d6b6f69382d722c666c7573682c6e6f6e756d7461696c3d302c00"], 0x81, 0x2ae, &(0x7f0000001980)="$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")
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000050, &(0x7f0000000300)={[{@barrier}, {@jqfmt_vfsv0}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nouser_xattr}]}, 0x1, 0x59c, &(0x7f0000001840)="$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")
r0 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x58)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180))
file_getattr(0xffffffffffffff9c, 0x0, &(0x7f0000000180), 0x18, 0x1000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x181802)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r4, 0xc0a85352, 0x0)
ioctl$TUNSETLINK(r3, 0x5411, 0x1000000000000)

5.160074226s ago: executing program 7 (id=3613):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x34)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x400)
chdir(&(0x7f00000001c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r0, &(0x7f0000000180)="707a73408b202e2f66696c65303a30", 0xf)

5.056127603s ago: executing program 7 (id=3618):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000540)={[{@fat=@errors_continue}]}, 0xfa, 0x299, &(0x7f0000000280)="$eJzs3M9rE0EUwPHXtGnTlDY5iKAgPvSil6WNf0GQFsSAUhtRD8LUbjRkTUp2jUTE9ubVv6N49CZY/4FevHkXL0UQvPQgXelu1mxLsD9s3Np8P1B2ujMvM7s7CW8XdjbvvXlaq7hWxXiSyqikRFZlSyS/U+oY6mxTQXlU4lbl6sSPzxfu3H9ws1gqzc6rzhUXrhVUderih+cv31766E3cfTf1fkw28g83vxe+bJzdOLe5vRB9esNTo4uNhmcWHVuXqm7NUr3t2Ma1tVp37eau+orTWF5uq6kvTWaXm7brqqm3tWa31Wuo12yreWyqdbUsSyezMmiGDx1RXpufN8W+DAZJGO+1s9ksmuGeleW1fzEoAABwsiSV/z+pulp1tb5f/p8S8v/+CfL/7Z5JI06H9M4NQNFkO9/f3cj/AQAAAAAAAAAAAAAAAAAAAAD4H2z5fs73/Vy0jf7GRCQjItH/SY8T/XGE6z+U4HBxzGIv7mVEnNetcqscbsP6YkWq4ogt02mRn8F86AjLczdKs9MayMu6s9KJD14SHIviI/ne8TNhvMbiV1rltGTj/RckJ2d6xxf2xKdFpFUelSuXY/GW5OTTI2mII0vBvO7Gv5pRvX6rtKf/8aAdAAAAAACngaW/5Xff/4arSVqWRsuG7KkPd3afD0hun+cDKuuj0o0fkfMjyR03AAAAAACDxG2/qBnHsZsUDlcYxFNnZcJJ88fGvu+v7DT6+05TIpLQkX4TkRNwwo+78PVZeAEP0jjJXyUAAAAA/dBN+pMeCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAg+ugi4dF7Y+y9lisu+FkjhIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4GX4FAAD//z2KG1o=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143041, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x7, 0x8000})

4.761961737s ago: executing program 7 (id=3626):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x48}}, 0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x38, 0x9, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}]}]}, 0x38}}, 0x0)

4.624060642s ago: executing program 37 (id=3626):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x48}}, 0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x38, 0x9, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}]}]}, 0x38}}, 0x0)

1.25816908s ago: executing program 0 (id=3661):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000001600)=0xffffffff, 0x4)

1.258014394s ago: executing program 0 (id=3662):
fsopen(&(0x7f0000000240)='anon_inodefs\x00', 0x0)
landlock_restrict_self(0xffffffffffffffff, 0xc)

1.190313167s ago: executing program 0 (id=3663):
time(&(0x7f0000000200))

1.190102283s ago: executing program 0 (id=3664):
connect$inet(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]})
membarrier(0x10, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000440))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000300)={0x0, <r1=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000280))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5, r1})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x40080)

662.461799ms ago: executing program 8 (id=3629):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000740)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800010000000000080002000100000008000880040007802c0004"], 0x58}}, 0x0)

572.080997ms ago: executing program 8 (id=3665):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = syz_io_uring_setup(0x141c, &(0x7f0000000200)={0x0, 0x2af2, 0x1, 0x1, 0x139}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10000)
r4 = eventfd2(0xbd49, 0x800)
io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r4, 0x1)
io_uring_enter(r0, 0x4119, 0x869e, 0xc, 0x0, 0x0)
io_uring_enter(r0, 0x7f9d, 0xf427, 0x8, 0x0, 0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000340)={0x2e, 0x52, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@any_dev={0x2, 0xda4, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0xde}}}, 0x0)
syz_io_uring_complete(r1, r2)
io_uring_enter(r0, 0x20, 0x20, 0x1, 0x0, 0x0)

372.144121ms ago: executing program 8 (id=3666):
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001f80)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10, 0x0}}], 0x1, 0x4004)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
clock_nanosleep(0x7, 0x1, &(0x7f00000000c0), 0x0)

301.105783ms ago: executing program 8 (id=3667):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', 0x0, 0x0, 0x2)
socket$kcm(0x10, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)

300.780063ms ago: executing program 0 (id=3668):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8947, &(0x7f00000002c0)={'vlan0\x00', @local})

233.273256ms ago: executing program 0 (id=3669):
timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]})
membarrier(0x10, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000140))

232.920146ms ago: executing program 8 (id=3670):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1800}}, &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)

232.610153ms ago: executing program 6 (id=3671):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffb})

173.034305ms ago: executing program 6 (id=3672):
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f00000002c0)="240000005a001f021007f4d6558250c4c58da85c7e00038005000000ffc8bbb06ec81ffd", 0x24)

172.875514ms ago: executing program 6 (id=3673):
r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x8)
r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f0000004000)={0x2020}, 0x2020)

71.45935ms ago: executing program 6 (id=3674):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000600034000010000080007"], 0xa0}}, 0x0)

71.195135ms ago: executing program 8 (id=3675):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000000)={0x2, 0x3, 0x815, 0xa, 0x15e, 0x0})

206.449µs ago: executing program 6 (id=3676):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x20, 0x24, 0x107, 0xfffffffe, 0x25dfdbff, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x9d}]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010)

0s ago: executing program 6 (id=3677):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b0400000000000000000200000050000480280001800a00010071756f74610000001800028008000240000000000c000140000000000000086724000180090001006d6574610000000014000280080002400000001a08000140000000060900010073797a30000000000900020073797a32"], 0xa4}}, 0x0)

kernel console output (not intermixed with test programs):

roller created
[  179.505423][ T5678] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  179.546705][ T5678] DVB: Unable to find symbol tda10046_attach()
[  179.549658][ T5678] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  179.552507][ T5678] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  179.765216][T10733] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1963'.
[  179.811814][T10733] vlan2: entered allmulticast mode
[  179.814044][T10733] bridge1: entered allmulticast mode
[  179.980675][T10741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1967'.
[  179.990060][T10741] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.001426][T10741] bridge_slave_0 (unregistering): left allmulticast mode
[  180.011980][T10741] bridge_slave_0 (unregistering): left promiscuous mode
[  180.018505][T10741] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.086523][ T5678] dvb_usb_m920x 6-1:0.0: probe with driver dvb_usb_m920x failed with error -71
[  180.104000][ T5678] usb 6-1: USB disconnect, device number 13
[  180.184190][T10749] loop0: detected capacity change from 0 to 1024
[  180.186926][T10749] EXT4-fs: Ignoring removed oldalloc option
[  180.226282][T10749] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  180.262878][   T34] audit: type=1804 audit(1786755972.504:50): pid=10749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1970" name="/newroot/671/file1/bus" dev="loop0" ino=18 res=1 errno=0
[  180.343410][T10757] EXT4-fs (loop0): shut down requested (0)
[  180.421077][ T5597] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.635925][T10763] loop5: detected capacity change from 0 to 1024
[  180.672727][T10763] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  180.741745][T10763] EXT4-fs warning (device loop5): ext4_empty_dir:3104: inode #11: comm syz.5.1975: directory missing '..'
[  180.767706][ T8536] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.380184][T10788] loop0: detected capacity change from 0 to 256
[  181.454454][T10795] openvswitch: netlink: Missing valid actions attribute.
[  181.459516][T10795] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  181.797187][T10812] xt_hashlimit: size too large, truncated to 1048576
[  181.914962][T10820] IPVS: length: 153 != 24
[  182.029387][T10828] loop5: detected capacity change from 0 to 4096
[  182.143797][T10836] Non-string source
[  182.172204][T10840] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2010'.
[  183.224896][T10851] loop5: detected capacity change from 0 to 4096
[  184.084118][T10861] loop5: detected capacity change from 0 to 40427
[  184.097546][T10861] F2FS-fs (loop5): Wrong segment_count / block_count (31 > 0)
[  184.100362][T10861] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  184.103647][T10861] F2FS-fs (loop5): invalid crc value
[  184.151056][T10861] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  184.163551][T10861] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0
[  184.166375][T10861] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  184.378041][T10879] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2027'.
[  184.545045][T10883] loop5: detected capacity change from 0 to 32768
[  184.557090][T10883] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2029 (10883)
[  184.578578][T10883] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  184.581788][T10883] BTRFS info (device loop5): using crc32c checksum algorithm
[  184.621937][T10883] BTRFS info (device loop5): rebuilding free space tree
[  184.658220][T10883] BTRFS info (device loop5): allowing degraded mounts
[  184.667549][T10883] BTRFS info (device loop5): enabling ssd optimizations
[  184.669774][T10883] BTRFS info (device loop5): enabling free space tree
[  184.673474][T10883] BTRFS info (device loop5): force clearing of disk cache
[  184.677214][T10883] BTRFS info (device loop5): force zlib compression, level 3
[  184.760181][ T8536] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  185.016551][T10913] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.2035'.
[  185.085816][T10920] loop5: detected capacity change from 0 to 128
[  185.105884][T10920] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  185.111683][T10920] ext4 filesystem being mounted at /351/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  185.129293][   T34] audit: type=1800 audit(1786755977.374:51): pid=10920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2039" name="file1" dev="loop5" ino=12 res=0 errno=0
[  185.170397][ T8536] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  185.261961][T10935] loop5: detected capacity change from 0 to 512
[  185.296799][T10935] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  185.309878][T10935] EXT4-fs warning (device loop5): ext4_group_add:1735: No reserved GDT blocks, can't resize
[  185.333459][ T8536] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.820865][T10962] loop5: detected capacity change from 0 to 32768
[  185.823895][T10962] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2056 (10962)
[  185.838400][T10962] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  185.842557][T10962] BTRFS info (device loop5): using blake2b checksum algorithm
[  185.874021][T10962] BTRFS info (device loop5): enabling ssd optimizations
[  185.876288][T10962] BTRFS info (device loop5): turning on async discard
[  185.878656][T10962] BTRFS info (device loop5): enabling free space tree
[  185.913318][ T8536] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  186.176283][T11000] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2067'.
[  186.572474][T11028] loop5: detected capacity change from 0 to 64
[  186.816478][T11035] pimreg: entered allmulticast mode
[  186.826955][T11035] pimreg: left allmulticast mode
[  186.911477][T11041] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2086'.
[  186.926636][T11041] bridge1: port 1(erspan0) entered blocking state
[  186.934593][T11041] bridge1: port 1(erspan0) entered disabled state
[  186.936716][T11041] erspan0: entered allmulticast mode
[  186.939512][T11041] erspan0: entered promiscuous mode
[  186.941768][T11041] bridge1: port 1(erspan0) entered blocking state
[  186.943839][T11041] bridge1: port 1(erspan0) entered forwarding state
[  188.490809][T11092] loop5: detected capacity change from 0 to 512
[  188.493949][T11092] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  188.516188][T11092] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[  188.675677][T11097] loop5: detected capacity change from 0 to 32768
[  189.814767][T11177] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2110'.
[  189.818820][T11177] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2110'.
[  189.825725][T11177] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2110'.
[  190.392083][T11218] loop5: detected capacity change from 0 to 32768
[  190.421744][T11218] read_mapping_page failed!
[  190.423338][T11218] ERROR: (device loop5): txCommit: 
[  190.423338][T11218] 
[  190.456896][  T124] ERROR: (device loop5): diUpdatePMap: the inode is not allocated in the working map
[  190.456896][  T124] 
[  190.524104][T11238] vlan0: MTU too low for tipc bearer
[  190.526445][T11238] tipc: Enabling of bearer <eth:vlan0> rejected, failed to enable media
[  191.040855][T11253] bond0: (slave bridge_slave_1): Error: Device is in use and cannot be enslaved
[  191.153259][T11259] loop5: detected capacity change from 0 to 4096
[  191.157002][T11259] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  191.161681][T11259] EXT4-fs (loop5): Unsupported encryption level 6
[  191.291162][T11265] netlink: 'syz.5.2146': attribute type 1 has an invalid length.
[  191.334242][T11267] netdevsim netdevsim5 netdevsim0: entered allmulticast mode
[  191.442953][T11271] overlayfs: upper fs does not support tmpfile.
[  191.542535][T11279] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2153'.
[  191.687817][T11286] loop5: detected capacity change from 0 to 8192
[  191.703516][T11290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2158'.
[  191.772929][T11292] loop4: detected capacity change from 0 to 256
[  191.805691][T11292] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbfe4f927, utbl_chksum : 0xe619d30d)
[  191.833604][   T34] audit: type=1800 audit(1786755984.079:52): pid=11292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2159" name="file1" dev="loop4" ino=1048630 res=0 errno=0
[  191.895203][T11294] tunl0: entered promiscuous mode
[  191.903086][T11294] netlink: 'syz.5.2160': attribute type 4 has an invalid length.
[  191.906168][T11294] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2160'.
[  192.134185][T11310] loop4: detected capacity change from 0 to 256
[  192.277863][T11319] loop5: detected capacity change from 0 to 16
[  192.282659][T11319] erofs (device loop5): mounted with root inode @ nid 36.
[  192.290376][T11319] CacheFiles: Failed to register: -95
[  192.383683][T11317] loop4: detected capacity change from 0 to 32768
[  192.388455][T11317] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2171 (11317)
[  192.412484][T11317] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  192.417288][T11317] BTRFS info (device loop4): using sha256 checksum algorithm
[  192.542373][T11317] BTRFS info (device loop4): enabling ssd optimizations
[  192.545291][T11317] BTRFS info (device loop4): turning on sync discard
[  192.548530][T11317] BTRFS info (device loop4): enabling free space tree
[  192.551303][T11317] BTRFS info (device loop4): use zlib compression, level 3
[  193.135692][ T6957] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  194.102200][T11411] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2196'.
[  194.173299][ T1376] ieee802154 phy0 wpan0: encryption failed: -22
[  194.176112][ T1376] ieee802154 phy1 wpan1: encryption failed: -22
[  194.539259][T11430] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3)
[  194.542210][T11430] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  194.550419][T11430] vhci_hcd vhci_hcd.0: Device attached
[  194.556068][T11432] vhci_hcd: connection closed
[  194.560847][ T5496] vhci_hcd vhci_hcd.5: stop threads
[  194.567521][ T5496] vhci_hcd vhci_hcd.5: release socket
[  194.569965][ T5496] vhci_hcd vhci_hcd.5: disconnect device
[  195.154702][T11448] loop5: detected capacity change from 0 to 128
[  195.275890][T11452] loop5: detected capacity change from 0 to 512
[  195.675163][ T7076] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  195.825509][ T7076] usb 6-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=ab.0e
[  195.829343][ T7076] usb 6-1: config 220 has an invalid interface number: 142 but max is 0
[  195.832000][ T7076] usb 6-1: config 220 has no interface number 0
[  195.834064][ T7076] usb 6-1: config 220 interface 142 has no altsetting 0
[  195.838779][ T7076] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.841888][ T7076] usb 6-1: Product: syz
[  195.843242][ T7076] usb 6-1: Manufacturer: syz
[  195.844696][ T7076] usb 6-1: SerialNumber: syz
[  195.936687][ T5496] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  195.999457][T11468] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2222'.
[  196.060134][ T7076] ttusb_dec_send_command: command bulk message failed: error -22
[  196.067951][ T7076] ttusb-dec 6-1:220.142: probe with driver ttusb-dec failed with error -22
[  196.075480][ T7076] usb 6-1: USB disconnect, device number 14
[  196.437662][T11494] netlink: 'syz.0.2235': attribute type 1 has an invalid length.
[  196.854265][ T5678] hid-generic 0005:0C45:1010.000C: unknown main item tag 0x0
[  196.889029][T11512] netlink: 'syz.5.2243': attribute type 1 has an invalid length.
[  196.889654][ T5678] hid-generic 0005:0C45:1010.000C: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa
[  196.892361][T11512] netlink: 232 bytes leftover after parsing attributes in process `syz.5.2243'.
[  196.893128][T11512] netlink: 'syz.5.2243': attribute type 1 has an invalid length.
[  196.969643][T11514] veth3: entered promiscuous mode
[  196.971922][T11514] veth3: entered allmulticast mode
[  197.201914][T11524] tc_dump_action: action bad kind
[  197.234616][T11526] fuse: Bad value for 'fd'
[  197.319853][T11534] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2253'.
[  197.568517][T11556] overlayfs: failed to clone upperpath
[  197.649003][T11565] netlink: 452 bytes leftover after parsing attributes in process `syz.5.2268'.
[  197.691587][T11568] netlink: 277 bytes leftover after parsing attributes in process `syz.5.2270'.
[  197.828083][T11572] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2273'.
[  197.830995][T11572] openvswitch: netlink: Missing key (keys=c0, expected=100)
[  197.915086][T11576] team0: Port device syz_tun added
[  197.979295][T11582] loop5: detected capacity change from 0 to 128
[  197.987044][T11582] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  198.036375][T11582] UDF-fs: error (device loop5): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  198.126444][T11588] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  199.383192][T11626] xt_hashlimit: size too large, truncated to 1048576
[  200.065668][T11670] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2308'.
[  200.115334][T11674] ip_tables: iptables: counters copy to user failed while replacing table
[  200.562149][T11709] loop4: detected capacity change from 0 to 2048
[  200.594963][T11709] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  200.599945][T11709] ext4 filesystem being mounted at /507/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  200.641502][ T6957] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.690796][   T34] audit: type=1326 audit(1786755992.933:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11718 comm="syz.4.2324" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f07d539e0d9 code=0x0
[  200.789249][T11723] size and base must be multiples of 4 kiB
[  200.791274][T11723] CPU: 1 UID: 0 PID: 11723 Comm: syz.4.2326 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  200.791287][T11723] Tainted: [L]=SOFTLOCKUP
[  200.791290][T11723] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  200.791296][T11723] Call Trace:
[  200.791300][T11723]  <TASK>
[  200.791304][T11723]  dump_stack_lvl+0xe8/0x150
[  200.791322][T11723]  mtrr_add+0xd5/0x100
[  200.791334][T11723]  mtrr_ioctl+0xc98/0x13b0
[  200.791347][T11723]  ? __pfx_mtrr_ioctl+0x10/0x10
[  200.791362][T11723]  ? __fget_files+0x2a/0x420
[  200.791373][T11723]  ? __fget_files+0x3a2/0x420
[  200.791382][T11723]  ? __fget_files+0x2a/0x420
[  200.791391][T11723]  ? __pfx_mtrr_ioctl+0x10/0x10
[  200.791400][T11723]  proc_reg_unlocked_ioctl+0x1d6/0x2c0
[  200.791413][T11723]  ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10
[  200.791447][T11723]  __se_sys_ioctl+0xfc/0x170
[  200.791455][T11723]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.791463][T11723]  do_syscall_64+0x174/0x580
[  200.791475][T11723]  ? trace_irq_disable+0x3b/0x140
[  200.791487][T11723]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.791496][T11723] RIP: 0033:0x7f07d539e0d9
[  200.791506][T11723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  200.791513][T11723] RSP: 002b:00007f07d618a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  200.791524][T11723] RAX: ffffffffffffffda RBX: 00007f07d5625fa0 RCX: 00007f07d539e0d9
[  200.791529][T11723] RDX: 0000200000000140 RSI: 0000000040104d01 RDI: 0000000000000003
[  200.791534][T11723] RBP: 00007f07d5435024 R08: 0000000000000000 R09: 0000000000000000
[  200.791539][T11723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  200.791544][T11723] R13: 00007f07d5626038 R14: 00007f07d5625fa0 R15: 00007ffff480f9c8
[  200.791556][T11723]  </TASK>
[  201.050220][T11729] loop4: detected capacity change from 0 to 8192
[  201.126732][T11731] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.181228][T11734] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2331'.
[  201.388489][T11754] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2341'.
[  201.417774][T11756] netlink: 'syz.0.2342': attribute type 5 has an invalid length.
[  201.428346][T11756] ip6erspan0: entered promiscuous mode
[  201.460539][T11758] fuse: fd is not a fuse device
[  201.516147][T11762] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  201.521793][T11762] bond1 (unregistering): Released all slaves
[  201.605360][T11767] XFS (nbd5): SB validate failed with error -5.
[  201.610057][T11773] xt_hashlimit: size too large, truncated to 1048576
[  201.874799][T11790] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  202.045128][T11797] loop5: detected capacity change from 0 to 2048
[  202.081228][T11797] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  202.779954][T11823] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  203.275623][T11872] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2391'.
[  203.280688][T11872] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2391'.
[  203.591515][T11911] loop4: detected capacity change from 0 to 64
[  203.597274][T11911] syz.4.2409: attempt to access beyond end of device
[  203.597274][T11911] loop4: rw=8388608, sector=45066, nr_sectors = 2 limit=64
[  203.604872][T11911] Buffer I/O error on dev loop4, logical block 22533, async page read
[  203.607761][T11911] syz.4.2409: attempt to access beyond end of device
[  203.607761][T11911] loop4: rw=8388608, sector=45066, nr_sectors = 2 limit=64
[  203.613371][T11911] Buffer I/O error on dev loop4, logical block 22533, async page read
[  203.616689][T11911] syz.4.2409: attempt to access beyond end of device
[  203.616689][T11911] loop4: rw=8388608, sector=45066, nr_sectors = 2 limit=64
[  203.630655][T11911] Buffer I/O error on dev loop4, logical block 22533, async page read
[  203.700674][T11915] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  203.703113][T11915] overlayfs: failed to set xattr on upper
[  203.704878][T11915] overlayfs: ...falling back to index=off.
[  203.709226][T11915] overlayfs: ...falling back to uuid=null.
[  203.714258][T11915] overlayfs: conflicting lowerdir path
[  203.790089][T11921] loop4: detected capacity change from 0 to 512
[  203.804816][T11921] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.4.2415: corrupted xattr block 95: invalid header
[  203.817256][T11921] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  203.820657][T11921] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.2415: bg 0: block 7: invalid block bitmap
[  203.823739][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  203.823751][    C0] EXT4-fs (loop4): initial error at time 1786755996: ext4_expand_extra_isize_ea:2810: inode 11
[  203.823765][    C0] EXT4-fs (loop4): last error at time 1786755996: ext4_expand_extra_isize_ea:2810: inode 11
[  203.839186][T11921] loop4: lost filesystem error report for type 5 error -117
[  203.842609][T11921] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  203.847861][T11921] loop4: lost filesystem error report for type 5 error -117
[  203.851733][T11921] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2972: inode #11: comm syz.4.2415: corrupted xattr block 95: invalid header
[  203.858832][T11921] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  203.859093][T11921] EXT4-fs warning (device loop4): ext4_evict_inode:287: xattr delete (err -117)
[  203.865504][T11921] EXT4-fs (loop4): 1 orphan inode deleted
[  203.868349][T11921] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  203.898166][ T6957] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.985111][T11935] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1)
[  204.141989][ T5677] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  204.281734][T11969] netlink: 'syz.4.2437': attribute type 4 has an invalid length.
[  204.292183][ T5677] usb 6-1: New USB device found, idVendor=046d, idProduct=c71e, bcdDevice= 0.00
[  204.297480][ T5677] usb 6-1: config 0 interface 0 altsetting 26 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  204.303178][ T5677] usb 6-1: config 0 interface 0 altsetting 26 endpoint 0x81 has invalid wMaxPacketSize 0
[  204.306864][ T5677] usb 6-1: config 0 interface 0 altsetting 26 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  204.312174][ T5677] usb 6-1: config 0 interface 0 has no altsetting 0
[  204.316790][ T5677] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.328442][ T5677] usb 6-1: config 0 descriptor??
[  204.744154][ T5677] logitech-djreceiver 0003:046D:C71E.000D: unbalanced collection at end of report description
[  204.747770][ T5677] logitech-djreceiver 0003:046D:C71E.000D: logi_dj_probe: parse failed
[  204.752034][ T5677] logitech-djreceiver 0003:046D:C71E.000D: probe with driver logitech-djreceiver failed with error -22
[  204.948284][T11927] loop5: detected capacity change from 0 to 256
[  204.951874][T11927] exfat: Deprecated parameter 'utf8'
[  204.954168][T11927] exfat: Deprecated parameter 'namecase'
[  204.956533][T11927] exfat: Deprecated parameter 'namecase'
[  204.959078][T11927] exfat: Deprecated parameter 'utf8'
[  204.975068][T11927] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d)
[  204.979157][T11927] exFAT-fs (loop5): failed to test first cluster bit of root dir(5)
[  204.999281][ T5678] usb 6-1: USB disconnect, device number 15
[  205.735806][   T34] audit: type=1326 audit(1786755997.986:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11997 comm="syz.5.2451" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f802279e0d9 code=0x0
[  206.042054][T12010] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2457'.
[  206.110330][T12016] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2460'.
[  206.356520][T12027] fuse: Invalid rootmode
[  206.478968][T12029] loop5: detected capacity change from 0 to 32768
[  206.486279][T12029] JBD2: Ignoring recovery information on journal
[  206.508713][T12029] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  206.564221][ T8536] ocfs2: Unmounting device (7,5) on (node local)
[  206.860526][ T7076] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  207.011908][ T7076] usb 6-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  207.021413][ T7076] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  207.025622][ T7076] usb 6-1: config 0 has no interfaces?
[  207.027315][ T7076] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.032822][ T7076] usb 6-1: config 0 descriptor??
[  207.257802][    T9] usb 6-1: USB disconnect, device number 16
[  208.482234][T12080] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2487'.
[  208.509085][T12082] fuse: fd is not a fuse device
[  208.682389][T12094] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2494'.
[  208.685380][T12094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2494'.
[  208.957279][T12108] loop5: detected capacity change from 0 to 512
[  208.961669][T12108] EXT4-fs (loop5): unable to read superblock
[  209.540058][  T804] Bluetooth: Patch file not found ar3k/AthrBT_0x7c72a049.dfu
[  209.543930][  T804] Bluetooth: Loading patch file failed
[  209.546865][  T804] ath3k 5-1:0.0: probe with driver ath3k failed with error -110
[  209.556138][  T804] usb 5-1: USB disconnect, device number 10
[  209.721712][T12133] loop5: detected capacity change from 0 to 128
[  209.856171][T12139] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2515'.
[  209.964239][T12145] netlink: 'syz.5.2518': attribute type 13 has an invalid length.
[  210.082691][T12145] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2518'.
[  210.087485][T12145] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2518'.
[  210.233303][T12154] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2522'.
[  210.420921][T12166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2528'.
[  210.588591][T12172] loop4: detected capacity change from 0 to 32768
[  210.670316][    T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  210.686907][T12177] loop4: detected capacity change from 0 to 4096
[  210.691549][T12177] EXT4-fs: Ignoring removed orlov option
[  210.694651][T12177] EXT4-fs (loop4): Test dummy encryption mode enabled
[  210.704661][T12177] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  210.766057][ T6957] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.853178][    T9] usb 6-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  210.863195][    T9] usb 6-1: config 36 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 192, changing to 11
[  210.873219][    T9] usb 6-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  210.878086][    T9] usb 6-1: Manufacturer: syz
[  210.880207][    T9] usb 6-1: SerialNumber: syz
[  211.113289][    T9] usbhid 6-1:36.0: couldn't find an input interrupt endpoint
[  211.140682][    T9] usb 6-1: USB disconnect, device number 17
[  212.016883][ T5677] usb 6-1: new full-speed USB device number 18 using dummy_hcd
[  212.024205][T12215] loop4: detected capacity change from 0 to 1024
[  212.027377][T12215] EXT4-fs: Ignoring removed mblk_io_submit option
[  212.037904][T12215] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  212.082889][ T6957] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.168299][ T5677] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[  212.174820][ T5677] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  212.181573][ T5677] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  212.196802][ T5677] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.202562][ T5677] usb 6-1: config 0 descriptor??
[  212.209184][T12201] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  212.263732][  T804] kernel write not supported for file bpf-map (pid: 804 comm: kworker/0:2)
[  212.371195][T12245] trusted_key: syz.4.2564 sent an empty control message without MSG_MORE.
[  212.628785][ T5677] konepure 0003:1E7D:2DB4.000E: unknown main item tag 0x4
[  212.631306][ T5677] konepure 0003:1E7D:2DB4.000E: reserved main item tag 0xd
[  212.633645][ T5677] konepure 0003:1E7D:2DB4.000E: unknown main item tag 0x1
[  212.635880][ T5677] konepure 0003:1E7D:2DB4.000E: unknown main item tag 0x3
[  212.638636][ T5677] konepure 0003:1E7D:2DB4.000E: invalid report_count 59046
[  212.640892][ T5677] konepure 0003:1E7D:2DB4.000E: item 0 2 1 9 parsing failed
[  212.643792][ T5677] konepure 0003:1E7D:2DB4.000E: parse failed
[  212.645736][ T5677] konepure 0003:1E7D:2DB4.000E: probe with driver konepure failed with error -22
[  212.839784][    T9] usb 6-1: USB disconnect, device number 18
[  213.494047][T12270] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2575'.
[  213.528606][T12270] 8021q: adding VLAN 0 to HW filter on device bond1
[  213.547282][T12270] 8021q: adding VLAN 0 to HW filter on device bond1
[  213.552128][T12270] bond1: (slave ip6_vti0): The slave device specified does not support setting the MAC address
[  213.561230][T12270] bond1: (slave ip6_vti0): Error -95 calling set_mac_address
[  213.774681][T12285] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  213.777394][T12285] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock
[  213.780070][T12285] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  213.782591][T12285] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock
[  214.423900][T12305] tc_dump_action: action bad kind
[  214.830384][T12315] loop4: detected capacity change from 0 to 4096
[  214.851472][T12315] ntfs3(loop4): ino=3, ntfs_set_state failed, -22.
[  214.853717][T12315] ntfs3(loop4): Failed to initialize $Extend/$ObjId.
[  214.882437][ T4668] ntfs3(loop4): ino=3, ntfs3_write_inode failed, -22.
[  214.891493][ T6957] ntfs3(loop4): ino=3, ntfs_set_state failed, -22.
[  214.893922][ T6957] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  214.900472][ T6957] ntfs3(loop4): ino=3, ntfs_set_state failed, -22.
[  214.902727][   T26] ntfs3(loop4): ino=3, ntfs3_write_inode failed, -22.
[  215.022945][   T55] Bluetooth: hci2: link tx timeout
[  215.029216][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  215.036552][ T5600] Bluetooth: hci2: link tx timeout
[  215.038323][ T5600] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  215.175280][ T5677] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  215.325245][ T5677] usb 5-1: Using ep0 maxpacket: 16
[  215.328387][ T5677] usb 5-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00
[  215.334588][ T5677] usb 5-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 180, changing to 11
[  215.339397][ T5677] usb 5-1: config 0 interface 0 has no altsetting 0
[  215.342288][ T5677] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.348292][ T5677] usb 5-1: config 0 descriptor??
[  215.769052][ T5677] sony 0003:054C:0268.000F: unexpected long global item
[  215.771752][ T5677] sony 0003:054C:0268.000F: parse failed
[  215.773621][ T5677] sony 0003:054C:0268.000F: probe with driver sony failed with error -22
[  215.901126][T12350] loop5: detected capacity change from 0 to 512
[  215.919613][T12350] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  215.922992][T12350] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002]
[  215.926470][T12350] EXT4-fs (loop5): orphan cleanup on readonly fs
[  215.929006][T12350] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #13: comm syz.5.2611: iget: bad i_size value: 12154761577498
[  215.933546][T12350] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  215.933797][T12350] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.2611: couldn't read orphan inode 13 (err -117)
[  215.936718][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  215.936728][    C0] EXT4-fs (loop5): initial error at time 1786756008: ext4_orphan_get:1399: inode 13
[  215.936741][    C0] EXT4-fs (loop5): last error at time 1786756008: ext4_orphan_get:1399: inode 13
[  215.948541][T12350] loop5: lost filesystem error report for type 5 error -117
[  215.949382][T12350] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  215.969285][T12350] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.2611: dx entry: limit 65535 != root limit 120
[  215.969396][  T804] usb 5-1: USB disconnect, device number 11
[  215.979152][T12350] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.2611: Corrupt directory, running e2fsck is recommended
[  216.009214][ T8536] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.098352][T12357] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  216.183485][T12363] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2617'.
[  216.240127][T12366] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2617'.
[  216.964440][ T5677] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  217.121129][ T5677] usb 5-1: Using ep0 maxpacket: 32
[  217.125232][ T5600] Bluetooth: hci2: command 0x0406 tx timeout
[  217.141620][ T5677] usb 5-1: unable to get BOS descriptor or descriptor too short
[  217.145869][ T5677] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  217.150235][ T5677] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  217.154129][ T5677] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  217.160259][ T5677] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.163536][ T5677] usb 5-1: Product: syz
[  217.165525][ T5677] usb 5-1: Manufacturer: syz
[  217.167386][ T5677] usb 5-1: SerialNumber: syz
[  217.333334][T12410] netlink: 140 bytes leftover after parsing attributes in process `syz.5.2639'.
[  217.400082][ T5677] usb 5-1: unit 4 not found!
[  217.408812][ T5677] usb 5-1: unit 0 not found!
[  217.569329][T12420] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2644'.
[  217.732308][T12430] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  217.775354][   T34] audit: type=1326 audit(1786756010.022:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12431 comm="syz.5.2650" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802279e0d9 code=0x7ffc0000
[  217.795134][ T5677] IPVS: starting estimator thread 0...
[  217.795856][   T34] audit: type=1326 audit(1786756010.032:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12431 comm="syz.5.2650" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802279e0d9 code=0x7ffc0000
[  217.823991][   T34] audit: type=1326 audit(1786756010.032:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12431 comm="syz.5.2650" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802279e0d9 code=0x7ffc0000
[  217.835102][   T34] audit: type=1326 audit(1786756010.032:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12431 comm="syz.5.2650" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f802279e0d9 code=0x7ffc0000
[  217.846701][T12398] loop4: detected capacity change from 0 to 512
[  217.868462][   T34] audit: type=1326 audit(1786756010.032:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12431 comm="syz.5.2650" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802279e0d9 code=0x7ffc0000
[  217.870067][T12398] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.2633: inode has both inline data and extents flags
[  217.884348][T12433] IPVS: using max 52 ests per chain, 124800 per kthread
[  217.888553][T12398] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  217.888820][T12398] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.2633: couldn't read orphan inode 15 (err -117)
[  217.895972][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  217.895985][    C1] EXT4-fs (loop4): initial error at time 1786756010: ext4_orphan_get:1399: inode 15
[  217.895997][    C1] EXT4-fs (loop4): last error at time 1786756010: ext4_orphan_get:1399: inode 15
[  217.899038][   T34] audit: type=1326 audit(1786756010.032:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12431 comm="syz.5.2650" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802279e0d9 code=0x7ffc0000
[  217.903172][T12398] loop4: lost filesystem error report for type 5 error -117
[  217.913686][T12398] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  217.918158][   T34] audit: type=1326 audit(1786756010.032:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12431 comm="syz.5.2650" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802279e0d9 code=0x7ffc0000
[  217.949574][ T5677] usb 5-1: USB disconnect, device number 12
[  217.955250][   T34] audit: type=1326 audit(1786756010.032:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12431 comm="syz.5.2650" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802279e0d9 code=0x7ffc0000
[  218.007348][   T34] audit: type=1326 audit(1786756010.032:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12431 comm="syz.5.2650" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f802279e0d9 code=0x7ffc0000
[  218.012263][T12443] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2654'.
[  218.024557][T12443] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.026892][T12443] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.030868][   T34] audit: type=1326 audit(1786756010.032:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12431 comm="syz.5.2650" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802279e0d9 code=0x7ffc0000
[  218.084702][T12447] bridge_slave_0: Caught tx_queue_len zero misconfig
[  218.117580][T12445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2655'.
[  218.156029][T12452] fuse: fd is not a fuse device
[  218.355782][T12463] veth0: entered promiscuous mode
[  218.366327][T12462] veth0: left promiscuous mode
[  218.385793][ T5677] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  218.493218][ T6957] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.535917][ T5677] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  218.548387][ T5677] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.555125][ T5677] usb 6-1: Product: syz
[  218.556556][ T5677] usb 6-1: Manufacturer: syz
[  218.558233][ T5677] usb 6-1: SerialNumber: syz
[  218.630600][T12470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2666'.
[  218.660072][  T990] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  218.690117][T12472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2667'.
[  219.223394][    T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  219.296467][ T5677] usb 6-1: USB disconnect, device number 19
[  219.357511][  T804] libceph: connect (1)[c::]:6789 error -22
[  219.362682][  T804] libceph: mon0 (1)[c::]:6789 connect error
[  219.384654][    T9] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  219.389813][    T9] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  219.394259][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.408819][    T9] gspca_main: stv0680-2.14.0 probing 041e:4007
[  219.457644][T12491] ceph: No mds server is up or the cluster is laggy
[  219.549896][T12499] fuse: fd is not a fuse device
[  219.677450][T12507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2682'.
[  219.914919][  T990] usb 6-1: Service connection timeout for: 256
[  219.922148][  T990] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  219.935858][  T990] ath9k_htc: Failed to initialize the device
[  219.939778][ T5677] usb 6-1: ath9k_htc: USB layer deinitialized
[  220.303865][T12540] loop5: detected capacity change from 0 to 32768
[  220.328292][T12540] ea_get: extended attribute size too large: 2617245744 > INT_MAX
[  220.499392][T12546] loop5: detected capacity change from 0 to 1024
[  220.503946][T12546] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[  220.507945][T12546] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  220.516458][T12546] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  220.519915][T12546] EXT4-fs (loop5): orphan cleanup on readonly fs
[  220.523584][T12546] EXT4-fs error (device loop5): ext4_read_inode_bitmap:169: comm syz.5.2701: Inode bitmap for bg 0 marked uninitialized
[  220.528702][T12546] loop5: lost filesystem error report for type 5 error -117
[  220.530728][T12546] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  220.558946][ T8536] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  220.716121][    T9] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -71
[  220.727451][    T9] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[  220.730799][    T9] stv0680 5-1:4.0: last error: 86,  command = 0x78
[  220.740635][    T9] usb 5-1: USB disconnect, device number 13
[  221.138995][T12559] 9p: Bad value for 'rfdno'
[  223.178786][T12610] loop4: detected capacity change from 0 to 40427
[  223.185923][T12610] F2FS-fs (loop4): Image doesn't support compression
[  223.193886][T12610] F2FS-fs (loop4): build fault injection type: 0x4
[  223.200320][T12610] F2FS-fs (loop4): invalid crc value
[  223.238555][T12610] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  223.250838][T12610] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  223.615552][T12625] loop5: detected capacity change from 0 to 32768
[  223.625275][T12625] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2732 (12625)
[  223.746645][T12630] loop4: detected capacity change from 0 to 32768
[  223.763812][T12630] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  223.857115][T12625] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  223.887342][T12625] BTRFS info (device loop5): using sha256 checksum algorithm
[  223.919667][ T6957] ocfs2: Unmounting device (7,4) on (node local)
[  223.969467][T12625] BTRFS info (device loop5): rebuilding free space tree
[  224.036124][T12625] BTRFS info (device loop5): setting nodatasum
[  224.038182][T12625] BTRFS info (device loop5): setting nodatacow
[  224.040141][T12625] BTRFS info (device loop5): turning off barriers
[  224.042472][T12625] BTRFS info (device loop5): turning on sync discard
[  224.044945][T12625] BTRFS info (device loop5): enabling free space tree
[  224.047669][T12625] BTRFS info (device loop5): force clearing of disk cache
[  224.071361][   T34] kauditd_printk_skb: 14 callbacks suppressed
[  224.071370][   T34] audit: type=1800 audit(1786756016.333:79): pid=12625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2732" name="file1" dev="loop5" ino=260 res=0 errno=0
[  224.083588][T12625] BTRFS error (device loop5): balance: invalid convert system profile single
[  224.125115][ T8536] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  224.366534][T12662] batadv_slave_0: Caught tx_queue_len zero misconfig
[  224.444170][T12668] loop5: detected capacity change from 0 to 256
[  224.448282][T12668] exfat: Deprecated parameter 'utf8'
[  224.458058][T12668] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d)
[  224.474507][   T34] audit: type=1800 audit(1786756016.733:80): pid=12668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2742" name="file1" dev="loop5" ino=1048633 res=0 errno=0
[  224.553910][T12672] ISOFS: Unable to identify CD-ROM format.
[  224.691659][  T804] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  224.734297][T12685] loop5: detected capacity change from 0 to 512
[  224.738606][T12685] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  224.749076][T12685] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002]
[  224.755960][T12685] System zones: 1-12
[  224.759475][T12685] EXT4-fs (loop5): orphan cleanup on readonly fs
[  224.763529][T12685] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2750: bg 0: block 361: padding at end of block bitmap is not set
[  224.769258][T12685] loop5: lost filesystem error report for type 5 error -117
[  224.771236][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  224.774093][T12685] EXT4-fs (loop5): Remounting filesystem read-only
[  224.774509][    C1] EXT4-fs (loop5): initial error at time 1786756017: ext4_validate_block_bitmap:441
[  224.777042][T12685] EXT4-fs (loop5): 1 truncate cleaned up
[  224.779222][    C1] 
[  224.783358][T12685] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  224.784541][    C1] EXT4-fs (loop5): last error at time 1786756017: ext4_validate_block_bitmap:441
[  224.804308][T12685] EXT4-fs warning (device loop5): dx_probe:791: inode #2: lblock 0: comm syz.5.2750: error -EUCLEAN reading directory block
[  224.831272][ T8536] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  224.863044][  T804] usb 5-1: Using ep0 maxpacket: 16
[  224.868517][  T804] usb 5-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00
[  224.884192][  T804] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 165, changing to 11
[  224.892596][  T804] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  224.902864][  T804] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  224.909519][  T804] usb 5-1: config 0 interface 0 has no altsetting 0
[  224.912504][  T804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  224.926230][  T804] usb 5-1: config 0 descriptor??
[  224.976591][T12699] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  225.044307][T12705] loop5: detected capacity change from 0 to 764
[  225.193368][T12712] nvme nvme0: rdma connection establishment failed (-104)
[  225.358041][  T804] elecom 0003:056E:00FC.0010: unknown main item tag 0x0
[  225.365600][  T804] elecom 0003:056E:00FC.0010: unknown main item tag 0x0
[  225.368383][  T804] elecom 0003:056E:00FC.0010: unknown main item tag 0x0
[  225.371790][  T804] elecom 0003:056E:00FC.0010: unknown main item tag 0x0
[  225.374072][  T804] elecom 0003:056E:00FC.0010: unknown main item tag 0x0
[  225.376280][  T804] elecom 0003:056E:00FC.0010: unknown main item tag 0x0
[  225.379018][  T804] elecom 0003:056E:00FC.0010: unknown main item tag 0x0
[  225.382721][  T804] elecom 0003:056E:00FC.0010: unknown main item tag 0x0
[  225.385383][  T804] elecom 0003:056E:00FC.0010: unknown main item tag 0x0
[  225.388068][  T804] elecom 0003:056E:00FC.0010: unknown main item tag 0x0
[  225.394795][  T804] elecom 0003:056E:00FC.0010: hidraw0: USB HID v0.00 Device [HID 056e:00fc] on usb-dummy_hcd.4-1/input0
[  225.665301][  T804] usb 5-1: USB disconnect, device number 14
[  226.441294][ T5677] usb 6-1: new low-speed USB device number 20 using dummy_hcd
[  226.632963][ T5677] usb 6-1: unable to get BOS descriptor or descriptor too short
[  226.636116][ T5677] usb 6-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4
[  226.639974][ T5677] usb 6-1: config 100 has an invalid interface number: 173 but max is 0
[  226.642785][ T5677] usb 6-1: config 100 has no interface number 0
[  226.644804][ T5677] usb 6-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt
[  226.648278][ T5677] usb 6-1: config 100 interface 173 altsetting 142 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  226.655185][ T5677] usb 6-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid wMaxPacketSize 0
[  226.666552][ T5677] usb 6-1: config 100 interface 173 has no altsetting 0
[  226.676403][ T5677] usb 6-1: string descriptor 0 read error: -22
[  226.682765][ T5677] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.695864][T12731] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  226.706089][ T5677] metro_usb 6-1:100.173: Metrologic USB to Serial converter detected
[  226.720625][ T5677] usb 6-1: Metrologic USB to Serial converter now attached to ttyUSB0
[  226.883437][T12753] netlink: 'syz.0.2781': attribute type 4 has an invalid length.
[  226.885987][T12753] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2781'.
[  226.929926][T12731] metro-usb ttyUSB0: metrousb_open - failed submitting interrupt in urb, error code=-90
[  226.936763][ T5677] usb 6-1: USB disconnect, device number 20
[  226.947257][ T5677] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0
[  226.956678][ T5677] metro_usb 6-1:100.173: device disconnected
[  227.002317][T12757] overlayfs: failed to clone lowerpath
[  227.006345][T12757] overlayfs: failed to clone upperpath
[  227.655268][T12774] loop5: detected capacity change from 0 to 16
[  227.691734][T12778] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2793'.
[  227.697766][T12774] erofs (device loop5): unsupported datalayout 7 of nid 36
[  227.745130][T12781] loop4: detected capacity change from 0 to 128
[  227.774807][T12781] ufs: ufs_fill_super(): bad magic number
[  228.002258][T12804] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2807'.
[  228.510885][ T5678] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  228.554168][T12842] loop5: detected capacity change from 0 to 40427
[  228.559825][T12842] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504)
[  228.562699][T12842] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  228.566733][T12842] F2FS-fs (loop5): invalid crc value
[  228.568599][T12842] F2FS-fs (loop5): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root and reserve_node
[  228.605084][T12842] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  228.614360][T12842] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  228.616722][T12842] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  228.661741][ T5678] usb 5-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00
[  228.666862][ T5678] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  228.671800][ T5678] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.677737][ T5678] usb 5-1: config 0 descriptor??
[  228.685933][T12831] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  228.815199][T12849] tipc: Started in network mode
[  228.816858][T12849] tipc: Node identity 1000001, cluster identity 4369
[  228.819021][T12849] tipc: Node number set to 16777217
[  228.829255][T12851] loop5: detected capacity change from 0 to 8
[  228.835398][T12849] tipc: New replicast peer: 127.0.0.1
[  228.836022][T12851] SQUASHFS error: Unknown inode type 0 in squashfs_iget!
[  228.846641][T12849] tipc: Enabled bearer <udp:syz0>, priority 10
[  228.901662][T12855] loop5: detected capacity change from 0 to 4096
[  228.921865][T12856] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  229.122808][ T5678] asus 0003:0B05:1ABE.0011: reserved main item tag 0xd
[  229.130492][ T5678] asus 0003:0B05:1ABE.0011: hidraw0: USB HID v7f.fd Device [HID 0b05:1abe] on usb-dummy_hcd.4-1/input0
[  229.165622][T12872] RDS: rds_bind could not find a transport for fe80::3e, load rds_tcp or rds_rdma?
[  229.268880][T12880] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2839'.
[  229.516885][ T5678] asus 0003:0B05:1ABE.0011: Asus handshake 5a returned invalid response: 5a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  229.615934][T12900] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  229.627051][T12900] CIFS mount error: No usable UNC path provided in device string!
[  229.627051][T12900] 
[  229.633113][T12900] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  229.719397][ T5678] usb 5-1: USB disconnect, device number 15
[  230.185399][T12915] loop5: detected capacity change from 0 to 32768
[  230.220019][T12915] UFO tlock:0xffffc90002be2120
[  230.223394][T12915] Bad maxslot:44 in dtpage (expected 128)
[  230.223394][T12915] 
[  230.237054][T12915] ERROR: (device loop5): dtSearch: DT_GETPAGE: dtree page corrupt
[  230.237054][T12915] 
[  230.256702][T12915] ERROR: (device loop5): remounting filesystem as read-only
[  230.259619][T12915] jfs_lookup: dtSearch returned -5
[  230.263344][T12915] Bad maxslot:44 in dtpage (expected 128)
[  230.263344][T12915] 
[  230.266744][T12915] ERROR: (device loop5): dtSearch: DT_GETPAGE: dtree page corrupt
[  230.266744][T12915] 
[  230.274376][T12915] jfs_lookup: dtSearch returned -5
[  230.911892][T12953] jffs2: notice: (12953) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  231.060542][  T804] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  231.148918][T12972] batman_adv: batadv0: Adding interface: dummy0
[  231.157943][T12972] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  231.167870][T12972] batman_adv: batadv0: Interface activated: dummy0
[  231.202105][T12972] batadv0: mtu less than device minimum
[  231.204823][T12972] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  231.208642][T12972] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  231.211730][  T804] usb 6-1: Using ep0 maxpacket: 32
[  231.214198][T12972] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  231.215363][  T804] usb 6-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00
[  231.218895][T12972] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  231.223464][  T804] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  231.225804][T12972] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  231.226236][T12972] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  231.235612][  T804] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.238333][T12972] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  231.244865][T12972] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  231.248320][  T804] usb 6-1: config 0 descriptor??
[  231.248332][T12972] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  231.309952][T12979] netlink: 'syz.0.2887': attribute type 2 has an invalid length.
[  231.319104][T12979] netlink: 'syz.0.2887': attribute type 4 has an invalid length.
[  231.332977][T12979] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2887'.
[  231.386440][T12981] syzkaller0: tun_chr_ioctl cmd 1074025676
[  231.390078][T12981] syzkaller0: owner set to 4294967294
[  231.503682][T12988] loop4: detected capacity change from 0 to 512
[  231.536028][T12988] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  231.543029][T12988] ext4 filesystem being mounted at /651/qY3aK supports timestamps until 2038-01-19 (0x7fffffff)
[  231.567290][T12988] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2972: inode #15: comm syz.4.2892: corrupted xattr block 33: invalid ea_ino
[  231.576348][T12988] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  231.581359][T12988] EXT4-fs warning (device loop4): ext4_evict_inode:287: xattr delete (err -117)
[  231.623676][ T6957] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.671511][  T804] hid_parser_main: 477 callbacks suppressed
[  231.671533][  T804] lenovo 0003:17EF:60A4.0012: unknown main item tag 0x0
[  231.678189][T12998] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  231.692761][  T804] lenovo 0003:17EF:60A4.0012: unknown main item tag 0x0
[  231.696432][  T804] lenovo 0003:17EF:60A4.0012: unknown main item tag 0x0
[  231.699254][  T804] lenovo 0003:17EF:60A4.0012: unknown main item tag 0x0
[  231.703806][  T804] lenovo 0003:17EF:60A4.0012: unknown main item tag 0x0
[  231.706742][  T804] lenovo 0003:17EF:60A4.0012: unknown main item tag 0x0
[  231.713492][  T804] lenovo 0003:17EF:60A4.0012: unknown main item tag 0x0
[  231.726177][  T804] lenovo 0003:17EF:60A4.0012: hidraw0: USB HID v0.00 Device [HID 17ef:60a4] on usb-dummy_hcd.5-1/input0
[  231.905637][T13020] overlayfs: failed to clone upperpath
[  231.916882][ T5677] usb 6-1: USB disconnect, device number 21
[  232.978783][T13064] xt_hashlimit: size too large, truncated to 1048576
[  233.032398][T13072] xt_hashlimit: size too large, truncated to 1048576
[  233.438970][T13097] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2931'.
[  233.621103][T13103] misc userio: Can't change port proto on an already running userio instance
[  233.724174][T13095] loop5: detected capacity change from 0 to 131072
[  233.727531][T13095] F2FS-fs (loop5): invalid crc value
[  233.755780][T13095] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  233.762278][T13095] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  234.306486][T13139] usb usb8: usbfs: process 13139 (syz.5.2948) did not claim interface 9 before use
[  234.330716][ T5678] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  234.337241][T13141] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2949'.
[  234.482747][ T5678] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  234.487564][ T5678] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  234.491564][ T5678] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  234.494733][ T5678] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  234.499323][ T5678] usb 5-1: config 0 descriptor??
[  234.630199][  T804] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  234.781216][  T804] usb 6-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00
[  234.785730][  T804] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  234.789755][  T804] usb 6-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  234.794067][  T804] usb 6-1: config 1 interface 0 has no altsetting 0
[  234.803156][  T804] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.806432][  T804] usb 6-1: Product: syz
[  234.808266][  T804] usb 6-1: Manufacturer: syz
[  234.810313][  T804] usb 6-1: SerialNumber: syz
[  234.822597][  T804] usb-storage 6-1:1.0: USB Mass Storage device detected
[  234.830863][  T804] usb-storage 6-1:1.0: Quirks match for vid 174c pid 55aa: 400000
[  234.920840][ T5678] cp2112 0003:10C4:EA90.0013: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0
[  235.023265][  T990] usb 6-1: USB disconnect, device number 22
[  235.115781][ T5678] cp2112 0003:10C4:EA90.0013: Part Number: 0x00 Device Version: 0x00
[  235.319339][ T5678] cp2112 0003:10C4:EA90.0013: error requesting SMBus config
[  235.325982][ T5678] cp2112 0003:10C4:EA90.0013: probe with driver cp2112 failed with error -32
[  235.333792][ T5678] usb 5-1: USB disconnect, device number 16
[  235.983089][T13168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2964'.
[  236.086989][ T5600] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  236.097479][ T5600] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  236.105437][ T5600] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  236.111508][ T5600] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  236.115161][ T5600] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  236.157214][T13178] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2968'.
[  236.220851][T13188] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.2971'.
[  236.409835][  T804] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  236.542730][T13173] bridge0: port 1(bridge_slave_0) entered blocking state
[  236.545774][T13173] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.553072][T13173] bridge_slave_0: entered allmulticast mode
[  236.556147][T13173] bridge_slave_0: entered promiscuous mode
[  236.559858][T13173] bridge0: port 2(bridge_slave_1) entered blocking state
[  236.562729][T13173] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.565243][T13173] bridge_slave_1: entered allmulticast mode
[  236.568001][T13173] bridge_slave_1: entered promiscuous mode
[  236.571120][  T804] usb 5-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00
[  236.580861][  T804] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  236.590333][  T804] usb 5-1: config 0 has no interfaces?
[  236.599978][  T804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.607020][  T804] usb 5-1: config 0 descriptor??
[  236.621788][T13173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  236.630375][T13173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  236.651541][T13173] team0: Port device team_slave_0 added
[  236.654598][T13173] team0: Port device team_slave_1 added
[  236.669556][T13173] batman_adv: batadv0: Adding interface: batadv_slave_0
[  236.671837][T13173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  236.681052][T13173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  236.684448][T13219] tipc: MTU too low for tipc bearer
[  236.686869][T13173] batman_adv: batadv0: Adding interface: batadv_slave_1
[  236.688987][T13173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  236.698355][T13173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  236.731771][T13173] hsr_slave_0: entered promiscuous mode
[  236.734154][T13173] hsr_slave_1: entered promiscuous mode
[  236.736751][T13173] debugfs: 'hsr0' already exists in 'hsr'
[  236.738983][T13173] Cannot create hsr debugfs directory
[  236.802680][T13229] netlink: 'syz.0.2984': attribute type 8 has an invalid length.
[  236.810537][T13229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2984'.
[  236.832487][ T5677] usb 5-1: USB disconnect, device number 17
[  236.855904][T13229] veth1_to_team: entered promiscuous mode
[  236.858421][T13229] gretap0: entered promiscuous mode
[  236.861622][T13229] veth1_to_team: left promiscuous mode
[  236.865033][T13229] gretap0: left promiscuous mode
[  236.906126][T13173] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  236.911098][T13173] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  236.913782][T13173] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  236.919310][T13173] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  236.922568][T13173] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  236.938972][T13173] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  236.942225][T13173] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  236.946613][T13173] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  236.992444][T13173] 8021q: adding VLAN 0 to HW filter on device bond0
[  237.007847][T13173] 8021q: adding VLAN 0 to HW filter on device team0
[  237.013153][ T1118] bridge0: port 1(bridge_slave_0) entered blocking state
[  237.015725][ T1118] bridge0: port 1(bridge_slave_0) entered forwarding state
[  237.032006][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state
[  237.034626][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state
[  237.232616][T13173] 8021q: adding VLAN 0 to HW filter on device batadv0
[  237.264455][T13270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2995'.
[  237.344909][T13173] veth0_vlan: entered promiscuous mode
[  237.356882][T13173] veth1_vlan: entered promiscuous mode
[  237.395938][T13173] veth0_macvtap: entered promiscuous mode
[  237.402584][T13173] veth1_macvtap: entered promiscuous mode
[  237.422573][T13173] batman_adv: batadv0: Interface activated: batadv_slave_0
[  237.433797][T13173] batman_adv: batadv0: Interface activated: batadv_slave_1
[  237.482494][ T5496] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  237.489456][ T5496] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  237.515798][ T5657] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  237.647609][  T195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  237.650810][ T5496] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  237.662051][  T195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  237.727652][ T1118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  237.734062][ T1118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  237.734650][T13293] loop4: detected capacity change from 0 to 512
[  237.757388][T13293] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.3004: inode has both inline data and extents flags
[  237.767548][T13293] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  237.767715][T13293] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.3004: couldn't read orphan inode 15 (err -117)
[  237.771178][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  237.771190][    C1] EXT4-fs (loop4): initial error at time 1786756030: ext4_orphan_get:1399: inode 15
[  237.771209][    C1] EXT4-fs (loop4): last error at time 1786756030: ext4_orphan_get:1399: inode 15
[  237.786959][T13293] loop4: lost filesystem error report for type 5 error -117
[  237.787901][T13293] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  237.942457][ T6957] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  238.149916][ T5600] Bluetooth: hci2: command tx timeout
[  238.251622][   T10] usb 5-1: new full-speed USB device number 18 using dummy_hcd
[  238.365673][T13316] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3012'.
[  238.401487][   T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  238.406924][T13319] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  238.415225][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.431354][   T10] usb 5-1: Product: syz
[  238.437235][   T10] usb 5-1: Manufacturer: syz
[  238.439316][   T10] usb 5-1: SerialNumber: syz
[  238.444376][   T10] usb 5-1: config 0 descriptor??
[  238.467434][T13325] net_ratelimit: 10 callbacks suppressed
[  238.467444][T13325] openvswitch: netlink: Multiple metadata blocks provided
[  238.526482][T13326] loop6: detected capacity change from 0 to 8192
[  238.543958][T13326] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  238.654211][   T10] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  238.726736][T13341] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3023'.
[  238.957396][T13350] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  239.425010][   T34] audit: type=1326 audit(1786756031.685:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13373 comm="syz.6.3039" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbcc239e0d9 code=0x0
[  240.229554][ T5600] Bluetooth: hci2: command tx timeout
[  240.397292][   T10] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  240.406121][   T10] usb 5-1: USB disconnect, device number 18
[  240.889333][ T7076] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  240.962569][T13420] loop6: detected capacity change from 0 to 128
[  241.039465][ T7076] usb 5-1: Using ep0 maxpacket: 32
[  241.043544][ T7076] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  241.050590][ T7076] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  241.059519][ T7076] usb 5-1: config 0 has no interface number 0
[  241.068341][ T7076] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.079575][ T7076] usb 5-1: Product: syz
[  241.083271][ T7076] usb 5-1: Manufacturer: syz
[  241.086489][ T7076] usb 5-1: SerialNumber: syz
[  241.093463][ T7076] usb 5-1: config 0 descriptor??
[  241.096843][ T7076] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  241.114332][T13427] loop6: detected capacity change from 0 to 128
[  241.145104][T13427] befs: (loop6): invalid magic header
[  241.382067][T13435] binder: BINDER_SET_CONTEXT_MGR already set
[  241.392628][T13435] binder: 13434:13435 ioctl 4018620d 200000004a80 returned -16
[  241.640166][  T804] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  241.642017][    C1] usb-serial ttyUSB0: qt2_process_read_urb - unsupported command 231
[  241.691538][ T7076] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  241.696748][ T7076] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  241.791665][  T804] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  241.796817][  T804] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  241.801796][  T804] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  241.805865][  T804] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.812072][  T804] usb 7-1: config 0 descriptor??
[  241.858127][    C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[  241.858796][   T10] usb 5-1: USB disconnect, device number 19
[  241.879289][   T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  241.893274][   T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  241.898675][   T10] quatech2 5-1:0.51: device disconnected
[  242.235971][  T804] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0
[  242.242029][  T804] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0
[  242.244876][  T804] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0
[  242.248530][  T804] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0
[  242.252063][  T804] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0
[  242.255259][  T804] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0
[  242.258261][  T804] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0
[  242.268522][  T804] pyra 0003:1E7D:2CF6.0014: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.6-1/input0
[  242.311366][ T5600] Bluetooth: hci2: command tx timeout
[  242.531853][T13461] 0x0000,0x40000000 overlaps existing 0x0000,0x1000
[  242.936947][T13471] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3081'.
[  243.041096][T13476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3083'.
[  243.643578][  T804] pyra 0003:1E7D:2CF6.0014: couldn't init struct pyra_device
[  243.646560][  T804] pyra 0003:1E7D:2CF6.0014: couldn't install mouse
[  243.650135][  T804] pyra 0003:1E7D:2CF6.0014: probe with driver pyra failed with error -71
[  243.655115][  T804] usb 7-1: USB disconnect, device number 2
[  244.192500][T13497] loop6: detected capacity change from 0 to 512
[  244.227728][T13497] EXT4-fs (loop6): 1 orphan inode deleted
[  244.232842][T13497] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  244.238334][T13497] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  244.248545][   T26] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  244.262059][   T26] EXT4-fs error (device loop6): ext4_release_dquot:7077: comm kworker/u9:0: Failed to release dquot type 1
[  244.289920][T13497] EXT4-fs error (device loop6): ext4_empty_dir:3125: inode #12: block 13: comm syz.6.3092: bad entry in directory: inode out of bounds - offset=24, inode=4294836237, rec_len=16, size=4096 fake=0
[  244.317881][T13173] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.325790][   T61] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  244.329330][   T61] EXT4-fs error (device loop6): ext4_release_dquot:7077: comm kworker/u10:2: Failed to release dquot type 1
[  244.333038][   T61] loop6: lost filesystem error report for type 5 error -117
[  244.389077][ T5600] Bluetooth: hci2: command tx timeout
[  244.496043][T13508] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3096'.
[  244.500343][T13508] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3096'.
[  244.509642][T13508] geneve2: entered promiscuous mode
[  244.511898][T13508] geneve2: entered allmulticast mode
[  244.624612][T13516] loop6: detected capacity change from 0 to 4096
[  244.628002][T13516] ntfs3(loop6): Different NTFS sector size (2048) and media sector size (512).
[  245.068999][    T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  245.218821][    T9] usb 7-1: Using ep0 maxpacket: 16
[  245.221564][    T9] usb 7-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00
[  245.226328][    T9] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  245.230921][    T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  245.237257][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.244687][    T9] usb 7-1: config 0 descriptor??
[  245.587546][T13463] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  245.688101][    T9] apple 0003:05AC:027C.0015: unknown main item tag 0x1
[  245.692289][    T9] apple 0003:05AC:027C.0015: ignoring exceeding usage max
[  245.700801][    T9] apple 0003:05AC:027C.0015: hidraw0: USB HID v0.81 Device [HID 05ac:027c] on usb-dummy_hcd.6-1/input0
[  245.865605][   T31] usb 7-1: USB disconnect, device number 3
[  246.111348][T13562] xt_hashlimit: size too large, truncated to 1048576
[  246.638647][  T804] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  246.801601][  T804] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  246.811662][  T804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.816021][  T804] usb 5-1: Product: syz
[  246.818666][  T804] usb 5-1: Manufacturer: syz
[  246.820592][  T804] usb 5-1: SerialNumber: syz
[  246.870152][    T9] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  247.006639][T13602] Invalid ELF header magic: != ELF
[  247.095582][T13608] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3144'.
[  247.281083][   T10] usb 5-1: USB disconnect, device number 20
[  247.908748][    T9] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  247.914790][    T9] ath9k_htc: Failed to initialize the device
[  247.937477][   T10] usb 5-1: ath9k_htc: USB layer deinitialized
[  248.153085][T13630] ipt_REJECT: ECHOREPLY no longer supported.
[  248.453523][T13642] MTRR 3 not used
[  248.561677][T13650] vlan0: entered promiscuous mode
[  248.577266][T13650] vlan0: left promiscuous mode
[  248.696485][T13662] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  249.012236][T13695] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3184'.
[  249.015108][T13695] openvswitch: netlink: Missing key (keys=c0, expected=480)
[  249.246554][T13718] netlink: 199784 bytes leftover after parsing attributes in process `syz.4.3195'.
[  249.252593][T13718] netlink: 'syz.4.3195': attribute type 1 has an invalid length.
[  249.270029][T13720] tipc: Started in network mode
[  249.272184][T13720] tipc: Node identity 7f000001, cluster identity 4711
[  249.275262][T13720] tipc: New replicast peer: 127.0.0.1
[  249.277903][T13720] tipc: Enabled bearer <udp:syz0>, priority 10
[  249.608336][   T31] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  249.691531][T13734] loop4: detected capacity change from 0 to 32768
[  249.761218][   T31] usb 7-1: Using ep0 maxpacket: 32
[  249.767249][   T31] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  249.776874][   T31] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  249.784334][   T31] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  249.787303][   T31] usb 7-1: Product: syz
[  249.789975][   T31] usb 7-1: Manufacturer: syz
[  249.791568][   T31] usb 7-1: SerialNumber: syz
[  249.794681][   T31] usb 7-1: config 0 descriptor??
[  249.798651][T13727] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  249.802354][   T31] hub 7-1:0.0: bad descriptor, ignoring hub
[  249.804343][   T31] hub 7-1:0.0: probe with driver hub failed with error -5
[  249.858449][ T5496] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  249.877011][ T5496] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  249.886542][ T5496] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  249.891890][ T5496] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  249.929686][T13746] pim6reg: entered allmulticast mode
[  250.268164][ T5677] tipc: Node number set to 2130706433
[  250.279461][   T34] audit: type=1326 audit(1786756042.546:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13774 comm="syz.4.3220" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d539e0d9 code=0x7ffc0000
[  250.280033][T13775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3220'.
[  250.296812][   T34] audit: type=1326 audit(1786756042.546:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13774 comm="syz.4.3220" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d539e0d9 code=0x7ffc0000
[  250.304754][   T34] audit: type=1326 audit(1786756042.546:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13774 comm="syz.4.3220" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f07d539e0d9 code=0x7ffc0000
[  250.318121][   T34] audit: type=1326 audit(1786756042.546:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13774 comm="syz.4.3220" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d539e0d9 code=0x7ffc0000
[  250.325960][   T34] audit: type=1326 audit(1786756042.546:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13774 comm="syz.4.3220" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d539e0d9 code=0x7ffc0000
[  250.335763][   T34] audit: type=1326 audit(1786756042.546:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13774 comm="syz.4.3220" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f07d539e0d9 code=0x7ffc0000
[  250.345585][   T34] audit: type=1326 audit(1786756042.556:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13774 comm="syz.4.3220" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d539e0d9 code=0x7ffc0000
[  250.352595][   T34] audit: type=1326 audit(1786756042.556:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13774 comm="syz.4.3220" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d539e0d9 code=0x7ffc0000
[  250.359684][   T34] audit: type=1326 audit(1786756042.556:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13774 comm="syz.4.3220" exe="/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f07d539e0d9 code=0x7ffc0000
[  250.366698][   T34] audit: type=1326 audit(1786756042.556:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13774 comm="syz.4.3220" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d539e0d9 code=0x7ffc0000
[  250.595248][T13787] loop4: detected capacity change from 0 to 32768
[  250.600087][T13787] OCFS2: ERROR (device loop4): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode 69: extent list l_count is zero
[  250.605690][T13787] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  250.609067][T13787] OCFS2: File system is now read-only.
[  250.611056][T13787] (syz.4.3225,13787,1):ocfs2_read_locked_inode:633 ERROR: status = -30
[  250.613669][T13787] (syz.4.3225,13787,1):_ocfs2_get_system_file_inode:141 ERROR: status = -30
[  250.616633][T13787] (syz.4.3225,13787,1):ocfs2_init_global_system_inodes:465 ERROR: status = -30
[  250.622192][T13787] (syz.4.3225,13787,1):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 2, possibly corrupt fs?
[  250.622207][T13787] (syz.4.3225,13787,1):ocfs2_init_global_system_inodes:476 ERROR: status = -30
[  250.633092][T13787] (syz.4.3225,13787,1):ocfs2_initialize_super:2195 ERROR: status = -30
[  250.635956][T13787] (syz.4.3225,13787,1):ocfs2_fill_super:1177 ERROR: status = -30
[  251.525915][T13838] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3250'.
[  251.613611][T13844] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3253'.
[  251.642260][T13844] bond1: entered promiscuous mode
[  251.643996][T13844] bond1: entered allmulticast mode
[  251.698049][T13849] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  251.840024][T13859] fuse: fd is not a fuse device
[  253.183635][T13885] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3272'.
[  253.264529][T13891] netlink: 'syz.4.3275': attribute type 1 has an invalid length.
[  253.298044][T13891] bond1: (slave geneve3): making interface the new active one
[  253.305540][T13891] bond1: (slave geneve3): Enslaving as an active interface with an up link
[  253.319063][ T5496] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20004 - 0
[  253.322566][ T5496] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20004 - 0
[  253.326125][ T5496] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20004 - 0
[  253.331197][ T5496] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20004 - 0
[  253.421300][T13898] loop4: detected capacity change from 0 to 4096
[  253.427468][T13898] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  253.449982][ T6957] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.472757][T13902] use of bytesused == 0 is deprecated and will be removed in the future,
[  253.478664][T13902] use the actual size instead.
[  253.702449][   T31] usb 7-1: USB disconnect, device number 4
[  253.842437][T13927] xt_ecn: cannot match TCP bits for non-tcp packets
[  253.881924][T13931] netlink: 'syz.6.3293': attribute type 21 has an invalid length.
[  253.886073][T13931] netlink: 156 bytes leftover after parsing attributes in process `syz.6.3293'.
[  254.567074][T13975] loop4: detected capacity change from 0 to 128
[  254.733851][T13983] loop4: detected capacity change from 0 to 1024
[  254.891827][T13988] loop6: detected capacity change from 0 to 512
[  254.917835][T13988] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  254.930973][T13988] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082]
[  254.937631][T13988] System zones: 1-12
[  254.953787][T13988] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 207 vs 220 free clusters
[  254.977507][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  254.979531][    C1] EXT4-fs (loop6): initial error at time 1786756047: ext4_mb_generate_buddy:1317
[  254.982286][    C1] EXT4-fs (loop6): last error at time 1786756047: ext4_mb_generate_buddy:1317
[  254.986535][T13988] EXT4-fs (loop6): 1 truncate cleaned up
[  254.992828][T13988] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  255.020185][T13173] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.361467][T14013] fuse: fd is not a fuse device
[  255.593715][ T1376] ieee802154 phy0 wpan0: encryption failed: -22
[  255.596821][ T1376] ieee802154 phy1 wpan1: encryption failed: -22
[  255.996130][T14036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3338'.
[  255.999981][T14036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3338'.
[  256.241700][T14044] loop6: detected capacity change from 0 to 2048
[  256.268210][T14044] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[  256.307893][T14049] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  256.332372][T14044] overlayfs: workdir and upperdir must be separate subtrees
[  256.484644][T14057] netlink: 'syz.6.3346': attribute type 8 has an invalid length.
[  256.492099][T14057] bridge0: entered allmulticast mode
[  256.807822][T14087] loop4: detected capacity change from 0 to 16
[  256.835229][T14087] erofs (device loop4): mounted with root inode @ nid 36.
[  256.860831][T14087] erofs (device loop4): invalid h_shared_count 83 @ nid 46
[  256.861420][T14091] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3365'.
[  256.905743][ T6957] erofs (device loop4): invalid h_shared_count 83 @ nid 46
[  257.014041][ T7481] team0: Port device syz_tun removed
[  257.097514][T14101] loop6: detected capacity change from 0 to 32768
[  257.100922][T14101] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3371 (14101)
[  257.106518][T14101] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  257.116905][T14101] BTRFS info (device loop6): using blake2b checksum algorithm
[  257.187503][T14101] BTRFS info (device loop6): enabling ssd optimizations
[  257.192355][T14101] BTRFS info (device loop6): turning on async discard
[  257.197519][   T13] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  257.204241][T14101] BTRFS info (device loop6): enabling free space tree
[  257.212340][T14101] BTRFS info (device loop6): use zstd compression, level 3
[  257.215979][   T13] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.222146][   T13] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  257.237804][   T34] kauditd_printk_skb: 60 callbacks suppressed
[  257.237816][   T34] audit: type=1800 audit(1786756049.507:152): pid=14101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3371" name="file1" dev="loop6" ino=260 res=0 errno=0
[  257.280815][   T13] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  257.300234][   T13] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.305350][   T13] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  257.387036][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  257.393822][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  257.401314][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  257.409935][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  257.413380][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  257.493014][   T13] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  257.496611][   T13] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.504808][   T13] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  257.578367][   T13] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  257.589803][   T13] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.596154][   T13] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  257.626248][T13173] BTRFS info (device loop6): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  258.198968][   T13] bridge_slave_1: left allmulticast mode
[  258.204736][   T13] bridge_slave_1: left promiscuous mode
[  258.213972][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  258.233863][   T13] pim6reg: left allmulticast mode
[  258.402323][   T13] bond1 (unregistering): (slave geneve3): Releasing active interface
[  258.438155][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  258.442461][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  258.446147][   T13] bond0 (unregistering): Released all slaves
[  258.457859][   T13] bond1 (unregistering): Released all slaves
[  258.499624][ T5345] 8021q: adding VLAN 0 to HW filter on device eth13
[  258.504240][T14182] syz_tun: entered allmulticast mode
[  258.508438][T14184] syz_tun: left allmulticast mode
[  258.557313][   T13] tipc: Left network mode
[  258.622742][T14120] bridge0: port 1(bridge_slave_0) entered blocking state
[  258.625298][T14120] bridge0: port 1(bridge_slave_0) entered disabled state
[  258.628441][T14120] bridge_slave_0: entered allmulticast mode
[  258.631080][T14120] bridge_slave_0: entered promiscuous mode
[  258.669669][T14120] bridge0: port 2(bridge_slave_1) entered blocking state
[  258.672738][T14120] bridge0: port 2(bridge_slave_1) entered disabled state
[  258.677664][T14120] bridge_slave_1: entered allmulticast mode
[  258.685988][T14120] bridge_slave_1: entered promiscuous mode
[  258.725263][T14194] netdevsim netdevsim6: Firmware load for './file0/file0/..' refused, path contains '..' component
[  258.764707][T14196] tipc: Enabled bearer <udp:syz2>, priority 10
[  258.792512][T14120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  258.805815][T14120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  258.850979][T14120] team0: Port device team_slave_0 added
[  258.855329][T14120] team0: Port device team_slave_1 added
[  258.872772][T14120] batman_adv: batadv0: Adding interface: batadv_slave_0
[  258.875553][T14120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  258.884026][T14120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  258.903717][T14120] batman_adv: batadv0: Adding interface: batadv_slave_1
[  258.905970][T14120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  258.913894][T14120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  258.952672][T14120] hsr_slave_0: entered promiscuous mode
[  258.955026][T14120] hsr_slave_1: entered promiscuous mode
[  258.957503][T14120] debugfs: 'hsr0' already exists in 'hsr'
[  258.959435][T14120] Cannot create hsr debugfs directory
[  259.067230][ T5677] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  259.122376][   T13] hsr_slave_0: left promiscuous mode
[  259.131188][   T13] hsr_slave_1: left promiscuous mode
[  259.135707][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  259.138236][   T13] batadv0: mtu less than device minimum
[  259.141124][   T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  259.147951][   T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  259.151578][   T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  259.155329][   T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  259.159222][   T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  259.163986][   T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  259.170096][   T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  259.173975][   T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  259.177896][   T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  259.186851][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  259.211374][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  259.225995][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  259.232901][   T13] batman_adv: batadv0: Interface deactivated: dummy0
[  259.235731][   T13] batman_adv: batadv0: Removing interface: dummy0
[  259.303734][   T13] veth1_macvtap: left promiscuous mode
[  259.305986][   T13] veth0_macvtap: left promiscuous mode
[  259.313221][   T13] veth1_vlan: left promiscuous mode
[  259.315339][   T13] veth0_vlan: left promiscuous mode
[  259.427333][ T5677] usb 7-1: Using ep0 maxpacket: 8
[  259.430487][ T5677] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  259.434770][ T5677] usb 7-1: config 0 has an invalid interface number: 31 but max is 0
[  259.437418][ T5677] usb 7-1: config 0 has no interface number 0
[  259.441264][ T5677] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  259.443766][ T5677] usb 7-1: Product: syz
[  259.445082][ T5677] usb 7-1: Manufacturer: syz
[  259.446884][ T5677] usb 7-1: SerialNumber: syz
[  259.455304][ T5677] usb 7-1: config 0 descriptor??
[  259.507515][ T5600] Bluetooth: hci1: command tx timeout
[  259.637482][   T13] team0 (unregistering): Port device team_slave_1 removed
[  259.645225][   T13] team0 (unregistering): Port device team_slave_0 removed
[  260.358511][ T5345] 8021q: adding VLAN 0 to HW filter on device eth14
[  260.538297][ T5677] uvcvideo 7-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  260.543514][ T5677] uvcvideo 7-1:0.31: No valid video chain found.
[  260.578472][ T5677] usb 7-1: USB disconnect, device number 5
[  260.657951][T14120] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  260.669756][T14120] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  260.676075][T14120] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  260.763287][T14120] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  260.767968][ T5345] 8021q: adding VLAN 0 to HW filter on device eth15
[  260.778503][T14120] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  260.829192][T14120] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  260.834270][T14120] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  260.843572][T14120] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  261.040610][T14120] 8021q: adding VLAN 0 to HW filter on device bond0
[  261.057568][T14120] 8021q: adding VLAN 0 to HW filter on device team0
[  261.067701][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  261.070666][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  261.089823][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  261.092219][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  261.099470][   T13] IPVS: stop unused estimator thread 0...
[  261.240055][ T5345] 8021q: adding VLAN 0 to HW filter on device eth16
[  261.587138][ T5600] Bluetooth: hci1: command tx timeout
[  261.647777][T14261] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.672802][T14120] 8021q: adding VLAN 0 to HW filter on device batadv0
[  261.747181][ T5678] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  261.760734][T14261] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.857941][T14261] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.899499][ T5678] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  261.905246][ T5678] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  261.910126][ T5678] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64
[  261.916605][T14120] veth0_vlan: entered promiscuous mode
[  261.916934][ T5678] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.929886][ T5678] usb 7-1: Product: syz
[  261.932990][ T5678] usb 7-1: Manufacturer: syz
[  261.935767][T14120] veth1_vlan: entered promiscuous mode
[  261.937587][ T5678] usb 7-1: SerialNumber: syz
[  261.948872][ T5678] cdc_mbim 7-1:1.0: skipping garbage
[  262.064550][T14120] veth0_macvtap: entered promiscuous mode
[  262.077737][T14120] veth1_macvtap: entered promiscuous mode
[  262.095528][T14120] batman_adv: batadv0: Interface activated: batadv_slave_0
[  262.110090][T14120] batman_adv: batadv0: Interface activated: batadv_slave_1
[  262.234817][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  262.248167][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  262.327743][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  262.371009][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  262.375131][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  262.390664][ T5657] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  262.427639][ T5657] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  262.440891][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  262.444724][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  262.448449][ T5657] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  262.455524][ T5657] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  262.460119][ T5657] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  262.764847][ T5678] cdc_mbim 7-1:1.0: SET_CRC_MODE failed
[  262.770444][ T5678] cdc_mbim 7-1:1.0: SET_NTB_FORMAT failed
[  262.789791][ T5678] cdc_mbim 7-1:1.0: bind() failure
[  262.798842][ T5678] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found
[  262.802007][ T5678] cdc_ncm 7-1:1.1: bind() failure
[  262.819341][T14299] netlink: 9 bytes leftover after parsing attributes in process `syz.7.3417'.
[  262.823870][ T5678] usb 7-1: USB disconnect, device number 6
[  262.823920][T14299] 0: renamed from hsr0 (while UP)
[  262.848180][T14299] 0: entered allmulticast mode
[  262.850116][T14299] hsr_slave_0: entered allmulticast mode
[  262.852051][T14299] hsr_slave_1: entered allmulticast mode
[  262.894583][T14303] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3419'.
[  262.972639][T14309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  262.989861][T14309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  262.994235][T14309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  263.378732][T14316] loop6: detected capacity change from 0 to 16
[  263.400417][T14316] erofs (device loop6): mounted with root inode @ nid 36.
[  263.676924][ T5600] Bluetooth: hci1: command tx timeout
[  263.786584][T14270] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  263.936682][T14270] usb 8-1: Using ep0 maxpacket: 32
[  263.941368][T14270] usb 8-1: New USB device found, idVendor=06a3, idProduct=f921, bcdDevice=89.69
[  263.947516][T14270] usb 8-1: config 9 has an invalid interface number: 178 but max is 0
[  263.950130][T14270] usb 8-1: config 9 has no interface number 0
[  263.952455][T14270] usb 8-1: config 9 interface 178 has no altsetting 0
[  263.955010][T14270] usb 8-1: language id specifier not provided by device, defaulting to English
[  263.960091][T14270] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  263.964232][T14270] usb 8-1: Product: syz
[  263.965570][T14270] usb 8-1: Manufacturer: 磌⨶럯셳検봗☹簑ޱ뢨좛陊㹠ࠅ취䴮ᢍਏ鬱﶐攍钃텈퉨௨혼螰攎
[  263.975431][T14270] usb 8-1: SerialNumber: syz
[  264.221036][T14270] usb 8-1: USB disconnect, device number 2
[  264.364108][T14357] loop6: detected capacity change from 0 to 256
[  264.368145][T14357] exfat: Deprecated parameter 'namecase'
[  264.372952][T14357] exfat: Deprecated parameter 'utf8'
[  264.379207][T14357] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb94bd070, utbl_chksum : 0xe619d30d)
[  264.488619][T14361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3446'.
[  264.491469][T14361] netlink: 'syz.0.3446': attribute type 30 has an invalid length.
[  264.493888][T14361] netlink: 'syz.0.3446': attribute type 29 has an invalid length.
[  264.497015][T14361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3446'.
[  265.129694][T14407] xt_hashlimit: size too large, truncated to 1048576
[  265.186934][   T10] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  265.262309][T14413] sctp: [Deprecated]: syz.0.3467 (pid 14413) Use of int in max_burst socket option.
[  265.262309][T14413] Use struct sctp_assoc_value instead
[  265.334678][T14415] loop7: detected capacity change from 0 to 4096
[  265.341111][   T10] usb 7-1: Using ep0 maxpacket: 8
[  265.347879][   T10] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  265.381609][T14415] NILFS (loop7): invalid segment: Checksum error in segment payload
[  265.384175][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.388062][   T10] usb 7-1: Product: syz
[  265.395165][   T10] usb 7-1: Manufacturer: syz
[  265.397751][T14415] NILFS (loop7): trying rollback from an earlier position
[  265.400847][   T10] usb 7-1: SerialNumber: syz
[  265.411952][   T10] usb 7-1: config 0 descriptor??
[  265.422649][T14415] NILFS (loop7): recovery complete
[  265.424975][   T10] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  265.428141][T14420] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  265.613215][T14428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3474'.
[  265.639793][T14430] bond1: (slave bond_slave_1): Device is not our slave
[  265.642043][T14430] bond1: option active_slave: invalid value (bond_slave_1)
[  265.645702][T14430] bond1 (unregistering): Released all slaves
[  265.746653][ T5600] Bluetooth: hci1: command tx timeout
[  265.955862][T14443] MTDSB: Device #1 doesn't appear to exist
[  265.955862][T14443] 
[  266.056599][T14270] usb 8-1: new full-speed USB device number 3 using dummy_hcd
[  266.206933][T14270] usb 8-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  266.211529][T14270] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  266.219009][T14270] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.222294][T14270] usb 8-1: Product: syz
[  266.223993][T14270] usb 8-1: Manufacturer: syz
[  266.225800][T14270] usb 8-1: SerialNumber: syz
[  266.239010][T14270] usb 8-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  266.453345][T14270] usb 8-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  266.464531][T14270] usb 8-1: USB disconnect, device number 3
[  268.277568][T14512] fuse: fd is not a fuse device
[  268.415957][   T10] gspca_sonixj: i2c_w8 err -71
[  268.456039][   T10] sonixj 7-1:0.0: probe with driver sonixj failed with error -71
[  268.472676][   T10] usb 7-1: USB disconnect, device number 7
[  268.684333][T14535] pim6reg: entered allmulticast mode
[  269.226009][   T10] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  269.376661][   T10] usb 7-1: Using ep0 maxpacket: 16
[  269.380010][   T10] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  269.392302][   T10] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  269.406369][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  269.413375][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  269.416904][   T10] usb 7-1: Product: syz
[  269.418296][   T10] usb 7-1: Manufacturer: syz
[  269.421051][   T10] usb 7-1: SerialNumber: syz
[  269.424247][T14560] loop7: detected capacity change from 0 to 128
[  269.428746][   T10] usb 7-1: config 0 descriptor??
[  269.434324][   T10] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  269.442514][   T10] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class)
[  269.695957][ T5677] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  269.855820][ T5677] usb 8-1: Using ep0 maxpacket: 16
[  269.858188][ T5677] usb 8-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  269.862064][ T5677] usb 8-1: config 0 has an invalid interface number: 105 but max is 0
[  269.864703][ T5677] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  269.868346][ T5677] usb 8-1: config 0 has no interface number 0
[  269.872612][ T5677] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  269.875229][ T5677] usb 8-1: Product: syz
[  269.877290][ T5677] usb 8-1: Manufacturer: syz
[  269.878926][ T5677] usb 8-1: SerialNumber: syz
[  269.883141][ T5677] usb 8-1: config 0 descriptor??
[  269.887292][ T5677] uvcvideo 8-1:0.105: Found UVC 0.00 device syz (046d:08f3)
[  269.890060][ T5677] uvcvideo 8-1:0.105: No valid video chain found.
[  270.042892][   T10] em28xx 7-1:0.0: chip ID is em2874
[  270.089235][ T5677] usb 8-1: USB disconnect, device number 4
[  270.254980][  T987] usb 7-1: USB disconnect, device number 8
[  270.262676][  T987] em28xx 7-1:0.0: Disconnecting em28xx
[  270.287259][  T987] em28xx 7-1:0.0: Freeing device
[  271.047256][T14583] netlink: 'syz.7.3542': attribute type 2 has an invalid length.
[  271.711780][   T34] audit: type=1800 audit(1786756063.979:153): pid=14614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3557" name="nullb0" dev="tmpfs" ino=5096 res=0 errno=0
[  272.390089][T14640] sg_write: data in/out 439260/178 bytes for SCSI command 0x0-- guessing data in;
[  272.390089][T14640]    program syz.7.3564 not setting count and/or reply_len properly
[  273.535314][   T10] usb 8-1: new low-speed USB device number 5 using dummy_hcd
[  273.686156][   T10] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  273.689957][   T10] usb 8-1: config 0 has an invalid interface number: 55 but max is 0
[  273.692570][   T10] usb 8-1: config 0 has no interface number 0
[  273.694514][   T10] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  273.698224][   T10] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[  273.703433][   T10] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  273.707897][   T10] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  273.711292][   T10] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  273.714247][   T10] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  273.718644][   T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  273.722261][   T10] usb 8-1: config 0 descriptor??
[  273.723834][T14677] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3576'.
[  273.727749][T14653] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  273.737811][   T10] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  273.884487][T14686] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3580'.
[  273.934700][T14653] ldusb 8-1:0.55: Couldn't submit interrupt_in_urb -90
[  273.939808][ T5678] usb 8-1: USB disconnect, device number 5
[  273.944338][T14690] loop6: detected capacity change from 0 to 1024
[  273.948073][ T5678] ldusb 8-1:0.55: LD USB Device #0 now disconnected
[  273.981840][   T34] audit: type=1800 audit(1786756066.249:154): pid=14690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3582" name="file1" dev="loop6" ino=20 res=0 errno=0
[  274.032552][T14692] netlink: 'syz.0.3583': attribute type 13 has an invalid length.
[  274.151036][T14697] trusted_key: encrypted_key: master key parameter 'u' is invalid
[  274.395944][   T55] Bluetooth: hci1: command 0x0405 tx timeout
[  274.431769][T14703] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3588'.
[  274.637261][T14711] loop7: detected capacity change from 0 to 2048
[  274.697379][T14711]  loop7: p1 < > p4
[  274.697379][T14711]  p4: <solaris: [s0] p5 [s1] p6 [s2] p7 >
[  274.706113][T14711] loop7: p4 size 722688 extends beyond EOD, truncated
[  274.718687][T14711] loop7: p6 start 262464109 is beyond EOD, truncated
[  274.724203][T14711] loop7: p7 size 2304 extends beyond EOD, truncated
[  274.897695][ T9411] udevd[9411]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory
[  274.902586][ T5737] udevd[5737]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory
[  274.903251][ T5606] udevd[5606]: inotify_add_watch(7, /dev/loop7p7, 10) failed: No such file or directory
[  274.914493][ T5609] udevd[5609]: inotify_add_watch(7, /dev/loop7p5, 10) failed: No such file or directory
[  274.982771][ T9411] udevd[9411]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory
[  274.998494][ T5737] udevd[5737]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory
[  275.003075][ T5609] udevd[5609]: inotify_add_watch(7, /dev/loop7p5, 10) failed: No such file or directory
[  275.008023][ T5606] udevd[5606]: inotify_add_watch(7, /dev/loop7p7, 10) failed: No such file or directory
[  275.093539][T14724] loop7: detected capacity change from 0 to 1024
[  275.227364][T14729] MTD: Couldn't look up './dev/mtdblock0': -2
[  275.228565][ T5677] IPVS: starting estimator thread 0...
[  275.345249][T14730] IPVS: using max 87 ests per chain, 208800 per kthread
[  275.774031][T14740] loop6: detected capacity change from 0 to 512
[  275.781163][T14740] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  275.793317][T14740] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.3603: bad orphan inode 15
[  275.797023][T14740] loop6: lost filesystem error report for type 5 error -117
[  275.802266][T14740] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  275.819708][T14740] netlink: 'syz.6.3603': attribute type 1 has an invalid length.
[  275.822358][T14740] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3603'.
[  275.857600][T13173] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  276.175747][T14750] loop6: detected capacity change from 0 to 512
[  276.251292][T14750] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  276.260458][T14750] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  276.368606][T13173] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  276.577687][T14760] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3611'.
[  276.702688][T14120] overlayfs: failed lookup in lower (newroot/53, name='bus', err=-40): overlapping layers
[  276.708862][T14120] overlayfs: failed lookup in lower (newroot/53, name='bus', err=-40): overlapping layers
[  276.860409][T14780] loop6: detected capacity change from 0 to 2048
[  276.868194][T14780] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  277.170201][   T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.285911][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  277.303279][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  277.308208][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  277.326243][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  277.337057][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  277.406215][   T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.453050][T14810] netlink: 'syz.6.3636': attribute type 32 has an invalid length.
[  277.501203][   T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.590176][   T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.660807][T14817] loop6: detected capacity change from 0 to 32768
[  277.663941][T14817] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3638 (14817)
[  277.682058][T14817] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  277.693240][T14817] BTRFS info (device loop6): using sha256 checksum algorithm
[  277.790542][T14817] BTRFS info (device loop6): rebuilding free space tree
[  277.820460][T14817] BTRFS info (device loop6): setting nodatasum
[  277.829085][T14817] BTRFS info (device loop6): setting nodatacow
[  277.837011][T14817] BTRFS info (device loop6): turning off barriers
[  277.842738][T14817] BTRFS info (device loop6): turning on sync discard
[  277.847561][T14817] BTRFS info (device loop6): enabling free space tree
[  277.851476][T14817] BTRFS info (device loop6): force clearing of disk cache
[  277.889976][T13173] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  278.040833][   T13] bridge_slave_1: left allmulticast mode
[  278.042883][   T13] bridge_slave_1: left promiscuous mode
[  278.045111][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  278.052315][   T13] bridge_slave_0: left allmulticast mode
[  278.054550][   T13] bridge_slave_0: left promiscuous mode
[  278.057257][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  278.199101][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  278.203450][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  278.207858][   T13] bond0 (unregistering): Released all slaves
[  278.209749][T14845] loop6: detected capacity change from 0 to 32768
[  278.215922][T14798] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.218330][T14798] bridge0: port 1(bridge_slave_0) entered disabled state
[  278.220688][T14798] bridge_slave_0: entered allmulticast mode
[  278.223268][T14798] bridge_slave_0: entered promiscuous mode
[  278.234162][T14798] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.247448][T14798] bridge0: port 2(bridge_slave_1) entered disabled state
[  278.257710][T14798] bridge_slave_1: entered allmulticast mode
[  278.260718][T14798] bridge_slave_1: entered promiscuous mode
[  278.272723][   T34] audit: type=1800 audit(1786756070.519:155): pid=14845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3639" name="file1" dev="loop6" ino=4 res=0 errno=0
[  278.315574][  T195] read_mapping_page failed!
[  278.321459][T14798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  278.328662][  T195] ERROR: (device loop6): txCommit: 
[  278.328662][  T195] 
[  278.341241][T14798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  278.356267][  T195] jfs_write_inode: jfs_commit_inode failed!
[  278.485834][T14798] team0: Port device team_slave_0 added
[  278.490097][ T5345] 8021q: adding VLAN 0 to HW filter on device eth17
[  278.498106][T14798] team0: Port device team_slave_1 added
[  278.572756][T14798] batman_adv: batadv0: Adding interface: batadv_slave_0
[  278.579702][T14798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  278.603718][T14798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  278.613865][   T13] hsr_slave_0: left promiscuous mode
[  278.630404][   T13] hsr_slave_1: left promiscuous mode
[  278.637467][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  278.644435][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  278.656757][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  278.660473][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  278.668962][   T13] veth1_macvtap: left promiscuous mode
[  278.670745][   T13] veth0_macvtap: left promiscuous mode
[  278.672783][   T13] veth1_vlan: left promiscuous mode
[  278.674587][   T13] veth0_vlan: left promiscuous mode
[  278.829741][   T13] team0 (unregistering): Port device team_slave_1 removed
[  278.838895][   T13] team0 (unregistering): Port device team_slave_0 removed
[  278.856711][   T10] libceph: connect (1)[c::]:6789 error -22
[  278.858880][   T10] libceph: mon0 (1)[c::]:6789 connect error
[  278.916443][  T804] libceph: connect (1)[c::]:6789 error -22
[  278.918499][  T804] libceph: mon0 (1)[c::]:6789 connect error
[  278.926143][  T804] libceph: connect (1)[c::]:6789 error -22
[  278.929428][T14798] batman_adv: batadv0: Adding interface: batadv_slave_1
[  278.932143][  T804] libceph: mon0 (1)[c::]:6789 connect error
[  278.934021][T14798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  278.942490][T14798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  278.946733][T14865] bond0: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0)
[  279.068901][T14798] hsr_slave_0: entered promiscuous mode
[  279.076582][T14798] hsr_slave_1: entered promiscuous mode
[  279.083480][T14798] debugfs: 'hsr0' already exists in 'hsr'
[  279.087144][T14798] Cannot create hsr debugfs directory
[  279.128202][  T804] libceph: connect (1)[c::]:6789 error -22
[  279.139070][  T804] libceph: mon0 (1)[c::]:6789 connect error
[  279.205468][  T804] libceph: connect (1)[c::]:6789 error -22
[  279.212280][  T804] libceph: mon0 (1)[c::]:6789 connect error
[  279.238122][ T5345] 8021q: adding VLAN 0 to HW filter on device eth18
[  279.434865][ T5600] Bluetooth: hci1: command tx timeout
[  279.450739][   T13] IPVS: stop unused estimator thread 0...
[  279.477075][T14798] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  279.493253][T14798] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  279.497168][T14798] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  279.518771][T14798] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  279.522489][T14798] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  279.538680][T14798] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  279.545169][T14798] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  279.574674][T14798] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  279.648247][  T804] libceph: connect (1)[c::]:6789 error -22
[  279.653020][  T804] libceph: mon0 (1)[c::]:6789 connect error
[  279.691423][T14870] ceph: No mds server is up or the cluster is laggy
[  279.703206][T14867] ceph: No mds server is up or the cluster is laggy
[  279.724870][   T10] libceph: connect (1)[c::]:6789 error -22
[  279.730630][   T10] libceph: mon0 (1)[c::]:6789 connect error
[  279.809357][ T5345] 8021q: adding VLAN 0 to HW filter on device eth19
[  279.977942][T14798] 8021q: adding VLAN 0 to HW filter on device bond0
[  280.023471][T14798] 8021q: adding VLAN 0 to HW filter on device team0
[  280.043656][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  280.046732][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  280.089449][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  280.092427][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  280.101526][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[  280.103815][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[  280.106224][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[  280.108326][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[  280.110406][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[  280.112459][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[  280.114620][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[  280.116653][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[  280.118890][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[  280.193732][T14798] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  280.237725][T14910] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3654'.
[  280.241659][T14910] net_ratelimit: 31 callbacks suppressed
[  280.241667][T14910] openvswitch: netlink: Missing key (keys=c0, expected=20080)
[  280.275215][ T5345] 8021q: adding VLAN 0 to HW filter on device eth20
[  280.445935][T14798] 8021q: adding VLAN 0 to HW filter on device batadv0
[  280.496642][   T10] usb 7-1: new full-speed USB device number 9 using dummy_hcd
[  280.629966][T14798] veth0_vlan: entered promiscuous mode
[  280.641150][T14798] veth1_vlan: entered promiscuous mode
[  280.655581][   T10] usb 7-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11
[  280.664512][   T10] usb 7-1: config 0 has an invalid interface number: 83 but max is 0
[  280.672159][   T10] usb 7-1: config 0 has no interface number 0
[  280.676266][   T10] usb 7-1: config 0 interface 83 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 4
[  280.682774][T14798] veth0_macvtap: entered promiscuous mode
[  280.686197][   T10] usb 7-1: config 0 interface 83 altsetting 0 endpoint 0x82 has invalid maxpacket 1014, setting to 64
[  280.696531][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  280.700585][T14798] veth1_macvtap: entered promiscuous mode
[  280.705162][   T10] usb 7-1: Product: syz
[  280.707725][   T10] usb 7-1: Manufacturer: syz
[  280.712837][   T10] usb 7-1: SerialNumber: syz
[  280.726030][   T10] usb 7-1: config 0 descriptor??
[  280.735073][T14913] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  280.746027][   T10] redrat3 7-1:0.83: Couldn't find all endpoints
[  280.758359][T14798] batman_adv: batadv0: Interface activated: batadv_slave_0
[  280.776988][T14798] batman_adv: batadv0: Interface activated: batadv_slave_1
[  280.824632][ T5657] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  280.831844][ T5657] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  280.841959][ T5657] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  280.871072][    C1] vcan0: j1939_tp_rxtimer: 0xffff88816ac5f800: rx timeout, send abort
[  280.946829][ T5677] usb 7-1: USB disconnect, device number 9
[  280.966723][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  280.974506][ T5657] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  280.977653][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  281.033086][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  281.041051][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  281.113624][T14957] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3629'.
[  281.380028][    C1] vcan0: j1939_tp_rxtimer: 0xffff88816ac5f800: abort rx timeout. Force session deactivation
[  281.432543][T14964] jffs2: notice: (14964) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  281.515993][ T5600] Bluetooth: hci1: command tx timeout
[  281.676368][T14980] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3674'.
[  281.731448][T14985] netlink: 'syz.6.3676': attribute type 1 has an invalid length.
[  281.731461][T14985] netlink: 'syz.6.3676': attribute type 1 has an invalid length.
[  281.756871][T14982] ==================================================================
[  281.756883][T14982] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0xff5/0x1e40
[  281.756908][T14982] Write of size 8 at addr ffffc90004aca3c0 by task syz.8.3675/14982
[  281.756919][T14982] 
[  281.756929][T14982] CPU: 0 UID: 0 PID: 14982 Comm: syz.8.3675 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  281.756945][T14982] Tainted: [L]=SOFTLOCKUP
[  281.756950][T14982] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  281.756957][T14982] Call Trace:
[  281.756962][T14982]  <TASK>
[  281.756968][T14982]  dump_stack_lvl+0xe8/0x150
[  281.756984][T14982]  print_address_description+0x55/0x1e0
[  281.757000][T14982]  ? sys_imageblit+0xff5/0x1e40
[  281.757014][T14982]  print_report+0x58/0x70
[  281.757027][T14982]  kasan_report+0x117/0x150
[  281.757044][T14982]  ? sys_imageblit+0xff5/0x1e40
[  281.757062][T14982]  sys_imageblit+0xff5/0x1e40
[  281.757081][T14982]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  281.757128][T14982]  drm_fbdev_shmem_defio_imageblit+0x2c/0x110
[  281.757147][T14982]  cw_putcs+0x1626/0x18e0
[  281.757171][T14982]  ? __pfx_cw_putcs+0x10/0x10
[  281.757187][T14982]  ? fb_get_color_depth+0x162/0x280
[  281.757202][T14982]  fbcon_putcs+0x3c5/0x5a0
[  281.757214][T14982]  ? __pfx_cw_putcs+0x10/0x10
[  281.757229][T14982]  do_update_region+0x389/0x440
[  281.757247][T14982]  redraw_screen+0xa3d/0x1020
[  281.757261][T14982]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  281.757277][T14982]  ? __pfx_redraw_screen+0x10/0x10
[  281.757291][T14982]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  281.757305][T14982]  ? tty_do_resize+0xe1/0x130
[  281.757322][T14982]  vc_do_resize+0xffc/0x1550
[  281.757339][T14982]  ? __pfx_vc_do_resize+0x10/0x10
[  281.757357][T14982]  fbcon_do_set_font+0x93f/0x1d00
[  281.757376][T14982]  con_font_op+0x850/0xfe0
[  281.757542][T14982]  ? __pfx_con_font_op+0x10/0x10
[  281.757559][T14982]  ? __might_fault+0xaf/0x130
[  281.757572][T14982]  vt_ioctl+0x1ba8/0x20e0
[  281.757582][T14982]  ? __pfx_vt_ioctl+0x10/0x10
[  281.757592][T14982]  ? __fget_files+0x2a/0x420
[  281.757603][T14982]  ? tty_jobctrl_ioctl+0x378/0xba0
[  281.757612][T14982]  ? __fget_files+0x2a/0x420
[  281.757620][T14982]  tty_ioctl+0x920/0xdd0
[  281.757630][T14982]  ? __pfx_tty_ioctl+0x10/0x10
[  281.757640][T14982]  __se_sys_ioctl+0xfc/0x170
[  281.757647][T14982]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.757654][T14982]  do_syscall_64+0x174/0x580
[  281.757662][T14982]  ? trace_irq_disable+0x3b/0x140
[  281.757672][T14982]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.757679][T14982] RIP: 0033:0x7f6b9d59e0d9
[  281.757687][T14982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  281.757693][T14982] RSP: 002b:00007f6b9e390028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  281.757706][T14982] RAX: ffffffffffffffda RBX: 00007f6b9d825fa0 RCX: 00007f6b9d59e0d9
[  281.757712][T14982] RDX: 0000200000000000 RSI: 0000000000004b72 RDI: 0000000000000003
[  281.757717][T14982] RBP: 00007f6b9d635024 R08: 0000000000000000 R09: 0000000000000000
[  281.757722][T14982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  281.757726][T14982] R13: 00007f6b9d826038 R14: 00007f6b9d825fa0 R15: 00007ffd62dfa328
[  281.757735][T14982]  </TASK>
[  281.757737][T14982] 
[  281.757740][T14982] The buggy address belongs to a vmalloc virtual mapping
[  281.757747][T14982] Memory state around the buggy address:
[  281.757751][T14982]  ffffc90004aca280: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  281.757756][T14982]  ffffc90004aca300: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  281.757761][T14982] >ffffc90004aca380: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  281.757765][T14982]                                            ^
[  281.757769][T14982]  ffffc90004aca400: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  281.757774][T14982]  ffffc90004aca480: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  281.757778][T14982] ==================================================================
[  281.760654][T14982] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  281.760665][T14982] CPU: 0 UID: 0 PID: 14982 Comm: syz.8.3675 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  281.760677][T14982] Tainted: [L]=SOFTLOCKUP
[  281.760680][T14982] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  281.760685][T14982] Call Trace:
[  281.760689][T14982]  <TASK>
[  281.760692][T14982]  vpanic+0x56c/0xa60
[  281.760705][T14982]  ? __pfx_vpanic+0x10/0x10
[  281.760714][T14982]  ? __pfx___schedule+0x10/0x10
[  281.760725][T14982]  panic+0xc5/0xd0
[  281.760734][T14982]  ? __pfx_panic+0x10/0x10
[  281.760742][T14982]  ? preempt_schedule_thunk+0x16/0x40
[  281.760751][T14982]  ? sys_imageblit+0xff5/0x1e40
[  281.760760][T14982]  check_panic_on_warn+0x89/0xb0
[  281.760769][T14982]  ? sys_imageblit+0xff5/0x1e40
[  281.760778][T14982]  end_report+0x73/0x170
[  281.760787][T14982]  ? sys_imageblit+0xff5/0x1e40
[  281.760796][T14982]  kasan_report+0x128/0x150
[  281.760812][T14982]  ? sys_imageblit+0xff5/0x1e40
[  281.760821][T14982]  sys_imageblit+0xff5/0x1e40
[  281.760831][T14982]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  281.760842][T14982]  drm_fbdev_shmem_defio_imageblit+0x2c/0x110
[  281.760873][T14982]  cw_putcs+0x1626/0x18e0
[  281.760890][T14982]  ? __pfx_cw_putcs+0x10/0x10
[  281.760899][T14982]  ? fb_get_color_depth+0x162/0x280
[  281.760908][T14982]  fbcon_putcs+0x3c5/0x5a0
[  281.760916][T14982]  ? __pfx_cw_putcs+0x10/0x10
[  281.760925][T14982]  do_update_region+0x389/0x440
[  281.760936][T14982]  redraw_screen+0xa3d/0x1020
[  281.760944][T14982]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  281.760955][T14982]  ? __pfx_redraw_screen+0x10/0x10
[  281.760964][T14982]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  281.760973][T14982]  ? tty_do_resize+0xe1/0x130
[  281.760983][T14982]  vc_do_resize+0xffc/0x1550
[  281.760995][T14982]  ? __pfx_vc_do_resize+0x10/0x10
[  281.761004][T14982]  fbcon_do_set_font+0x93f/0x1d00
[  281.761015][T14982]  con_font_op+0x850/0xfe0
[  281.761024][T14982]  ? __pfx_con_font_op+0x10/0x10
[  281.761034][T14982]  ? __might_fault+0xaf/0x130
[  281.761044][T14982]  vt_ioctl+0x1ba8/0x20e0
[  281.761054][T14982]  ? __pfx_vt_ioctl+0x10/0x10
[  281.761063][T14982]  ? __fget_files+0x2a/0x420
[  281.761072][T14982]  ? tty_jobctrl_ioctl+0x378/0xba0
[  281.761080][T14982]  ? __fget_files+0x2a/0x420
[  281.761088][T14982]  tty_ioctl+0x920/0xdd0
[  281.761097][T14982]  ? __pfx_tty_ioctl+0x10/0x10
[  281.761111][T14982]  __se_sys_ioctl+0xfc/0x170
[  281.761118][T14982]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.761125][T14982]  do_syscall_64+0x174/0x580
[  281.761133][T14982]  ? trace_irq_disable+0x3b/0x140
[  281.761144][T14982]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.761151][T14982] RIP: 0033:0x7f6b9d59e0d9
[  281.761159][T14982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  281.761166][T14982] RSP: 002b:00007f6b9e390028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  281.761175][T14982] RAX: ffffffffffffffda RBX: 00007f6b9d825fa0 RCX: 00007f6b9d59e0d9
[  281.761180][T14982] RDX: 0000200000000000 RSI: 0000000000004b72 RDI: 0000000000000003
[  281.761184][T14982] RBP: 00007f6b9d635024 R08: 0000000000000000 R09: 0000000000000000
[  281.761189][T14982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  281.761193][T14982] R13: 00007f6b9d826038 R14: 00007f6b9d825fa0 R15: 00007ffd62dfa328
[  281.761200][T14982]  </TASK>
[  281.761958][T14982] Kernel Offset: disabled

VM DIAGNOSIS:
01:03:38  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000037 RBX=0000000000000037 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000043a8f RDI=0000000000043a90 RBP=00000000000003f8 RSP=ffffc900034cecd0
R8 =ffff888109970237 R9 =1ffff1102132e046 R10=dffffc0000000000 R11=ffffffff85666680
R12=dffffc0000000000 R13=ffffffff9aad6460 R14=ffffffff9aad64a0 R15=0000000000000000
RIP=ffffffff856666fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f6b9e3906c0 ffffffff 00c00000
GS =0000 ffff88818d955000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffd84ce9a18 CR3=0000000117fdc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 ffffffff81c7cbb0
XMM02=00007f411b3f25e8 00007f411b3f2618 XMM03=00007f411b3f2600 00007f411b3f25e0
XMM04=00007f411bf5d020 00007f411b3f25c0 XMM05=00007f411b3f25d0 00007f411b3f2610
XMM06=00007f411b3f25f8 00007f411b3f25c8 XMM07=00007f411b3f2600 00007f411b3f25e0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff816c912c RBX=0000000000000000 RCX=ffff88810bac5940 RDX=0000000000010000
RSI=0000000000000008 RDI=ffffffff9371d2e0 RBP=0000000000000000 RSP=ffffc90000a08fc0
R8 =ffffffff9371d2e7 R9 =1ffffffff26e3a5c R10=dffffc0000000000 R11=fffffbfff26e3a5d
R12=0000000000000000 R13=0000000000000000 R14=0000000000000001 R15=dffffc0000000000
RIP=ffffffff816c912d RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fda042cfc80 ffffffff 00c00000
GS =0000 ffff8882a8f55000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fbcc31556c8 CR3=000000010dc6c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f XMM01=2f68637461772f76 6564752f6e75722f
XMM02=0000000000000000 ff0000000000ff00 XMM03=000000ff00000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=000000000000004c 0000000039336c55
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffff00000000 XMM09=00000000000000f1 0000000039336c6c
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
