last executing test programs:

3m7.968722063s ago: executing program 1 (id=195):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x599, &(0x7f0000001280)="$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")
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f0000002240)=""/4103, 0x0, 0x30520cf7f25f0c64, 0x0, 0x0})

3m7.75819324s ago: executing program 1 (id=199):
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
r2 = dup(r1)
ioctl$NBD_SET_SOCK(r0, 0xab00, r2)
ioctl$NBD_SET_SOCK(r0, 0xab00, r2)
ioctl$NBD_SET_SOCK(r0, 0xab08, 0xffffffffffffffff)

3m7.482683287s ago: executing program 1 (id=202):
sysfs$1(0x7ffffffe, 0x0)

3m7.415292239s ago: executing program 1 (id=203):
syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000480)='./file1\x00', 0x810010, &(0x7f0000000800)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES16=0x0, @ANYRES32, @ANYRESOCT, @ANYRESHEX, @ANYRESDEC=0x0], 0x1, 0x1ff, &(0x7f0000000600)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

3m7.287843723s ago: executing program 1 (id=206):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0)

3m7.008004569s ago: executing program 1 (id=210):
io_uring_setup(0x6c7e, &(0x7f0000000140)={0x0, 0x0, 0x3000})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="1a", 0x1, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

3m6.837100372s ago: executing program 32 (id=210):
io_uring_setup(0x6c7e, &(0x7f0000000140)={0x0, 0x0, 0x3000})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="1a", 0x1, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

2m43.384589621s ago: executing program 3 (id=398):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000200)={0xa, 0xe22, 0x0, @empty}, 0x1c)
connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x515, @mcast1, 0x9, 0x2}, 0x20)
syz_emit_ethernet(0xd2, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffbfff00000000000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0)

2m42.973011727s ago: executing program 3 (id=400):
sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="0c0100", @ANYBLOB="010725bd700000000000670000000c009900090000004c0000000800c300"], 0x10c}, 0x1, 0x0, 0x0, 0x44844}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000980)={0x1, 0x58, &(0x7f0000000900)}, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

2m42.845646413s ago: executing program 3 (id=401):
r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0xf020000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x980909, 0x7fff, '\x00', @ptr=0x20001100}})

2m42.845261615s ago: executing program 3 (id=402):
r0 = syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000500)=ANY=[], 0xc, 0xac, &(0x7f0000000100)="$eJzs0jFqwzAUBuBnY7cdu3foDXwHn6BnMB3tzZNLJ9+nlyh07RFygwxZsygYyUP2QAh8H0hPP/8ikP7PP2+xRryvESmlJu2aSPPyNQ7TvLTjMEVEG3+RVWU+Bw+uLs/ZR/4DWz72uatKfzh9f+4rNx+/eT7d7+IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcEPV63Wuo+vK8WXbLgEAAP//2Bwh+A==")
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
unshare(0x2040400)
syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0)
getpriority(0x1, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8000c61)
getdents64(r0, 0x0, 0x0)

2m42.533973476s ago: executing program 3 (id=405):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001540)={0x10, 0x10, 0x1, 0x0, 0x25dfdbfe}, 0x10}], 0x1}, 0x0)

2m42.322021348s ago: executing program 3 (id=411):
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x18}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
get_robust_list(0x0, &(0x7f0000000400)=&(0x7f00000003c0), &(0x7f0000000540)=0x18)
socket$inet6(0x10, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0)
r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0x0, 0x6, 0x18}, 0xc)
r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@generic={&(0x7f0000000500)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x18}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xe, 0x7, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0x1, r6, r7], &(0x7f0000000600), 0x10, 0x3}, 0x94)

2m42.1382684s ago: executing program 33 (id=411):
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x18}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
get_robust_list(0x0, &(0x7f0000000400)=&(0x7f00000003c0), &(0x7f0000000540)=0x18)
socket$inet6(0x10, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0)
r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0x0, 0x6, 0x18}, 0xc)
r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@generic={&(0x7f0000000500)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x18}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xe, 0x7, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0x1, r6, r7], &(0x7f0000000600), 0x10, 0x3}, 0x94)

2m39.968469245s ago: executing program 2 (id=424):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x519, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0xffffffff, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0xfffffff1, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x40], [0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x9, 0xfffffffd, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x200, 0x0, 0x0, 0x2, 0x0, 0x0, 0x31c, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xc8a], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffff, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x7], [0x0, 0xfffffffe, 0xff, 0x0, 0x0, 0x0, 0x200, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x10, 0x200000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000006480))

2m39.760395094s ago: executing program 2 (id=425):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @empty}, 0x10)
sendto$inet(r3, &(0x7f00000004c0)="ab", 0xff04, 0xc0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)

2m38.77523166s ago: executing program 2 (id=428):
syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000003c0), 0xfe, 0x529, &(0x7f0000000e00)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x400, 0x83)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, 0x0)

2m38.604052554s ago: executing program 2 (id=429):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0xc02, &(0x7f0000000000)=ANY=[@ANYBLOB='iocharset=macromanian,uid=', @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRES16=0x0, @ANYRES16], 0x1, 0x1521, &(0x7f0000007640)="$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")
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x800000, 0x0)

2m38.40108772s ago: executing program 2 (id=430):
syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x4800802, &(0x7f0000000000)={[{@noikeep}, {@usrquota}]}, 0x4, 0x9865, &(0x7f0000000140)="$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")

2m37.278096908s ago: executing program 2 (id=434):
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)})
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$eJzs3c1rG80dAODfyh+ynbR2odAmJ0OhNYTIdeomLfSQ0kMpNBBoz02MrJjUshUsOcTGEOdQ6KXQlh4K7SXnfqSHQq/9uLb/ROmhJITWMW/e04tediX5U5LtxJId/Dyw2pnd2Z0Z7ezsSLtIAVxYk+lLLuJKRPw8iRhvLk8iYigLDUbcbqR7u7VRTKck6vUf/C/J0vz50u6+kub8UjPyxYj4+08iruUO5jranJdLK83QdG3p0XR1bf36w6W5hdJCafnmzOzsjVtfv3Xz8Fbv6qN/rV9+9YvvfuWPtwfjCy9+9o8kbsfl5rrtrY3ie+7+kMmYbL4nQ+lbuM93TjuzM5acdQF4J+mpOdA4y+NKjMdAFurgfU9AAOBceBoRdQDggklc/wHggml9D7C9tVFsTWf7jUR/vf52RIw06t+6v9lYM9i8ZzeS3Qcd20723RlJImLiFPKfjIjf/uVHv0+n6NF9SIB2Np9FxP2Jye2t/IH+P0n7v+Gj95DvuOar3TarN7abPLBY/wf989d0/PONw+O/qzsP9IxkrwfGPyP5Nufuuzj6/M+97LDpMfqmo6Xjv2/tebZtd/y389DaxEAz9plszDeUPHhYLqV922cjYiqG8ml8Jkva/imoqTefvOmU/97x3/9/+ePfpfmn890UuZeD+aiP79lmfq42dwpVz7x+FnF1sF39k53xb9Jh/Hu34173H5rvffOnv+mUMq1/Wt/WdLj+vVV/HvHltsd/91gmXZ9PnM6aw3SrUbTxp//8eqxT/rvHP5/N0/xbnwX6IT3+Y93rP5GGqmvri3PlcmmlevI8/vl8/G+d1u1t/+3rn7X/fdL2P5z8MAu3WtqTuVptZSZiOPn+4eU3drdtxVvp0/pPfan9+d+p/eeaz8be34l1N/hq+A/NXbWtf2azU/17K63//ImOf5dAvbnNgVUv3i4OdMr/eMd/NgtNNZccp/87oqTv0ZoBAAAAAAAAAAAAAAAAAAAAAAAA4ORyEXE5klxhJ5zLFQqN//D+fIzlypVq7dqDyuryfGT/lT0RQ7nWT12O7/k91Jnm7+G34jcOxL8WEZ+LiF/lR7N4oVgpz5915QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg6dL+//9/ms4Khca6/+bPunQAQM+MnHUBAIC+c/0HgIvnZNf/0Z6VAwDonxN//q8nvSkIANA3x77+3+9tOQCA/nH/HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgB67e+dOOtU/3toopvH5x2uri5XH1+dL1cXC0mqxUKysPCosVCoL5VKhWFnquKPNxqxcqTyajeXVJ9O1UrU2XV1bv7dUWV2u3Xu4NLdQulca6lvNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD4qmvri3PlcmlFoEtgtDR6HopxjgKDcS6KcSiw+e+hrF13TRwTH0zjH+6SJjnNvEYPLtnbS4yeSd8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8CH4NAAA//9RvRhH")
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0)
fremovexattr(r3, 0x0)

2m36.988372754s ago: executing program 34 (id=434):
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)})
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$eJzs3c1rG80dAODfyh+ynbR2odAmJ0OhNYTIdeomLfSQ0kMpNBBoz02MrJjUshUsOcTGEOdQ6KXQlh4K7SXnfqSHQq/9uLb/ROmhJITWMW/e04tediX5U5LtxJId/Dyw2pnd2Z0Z7ezsSLtIAVxYk+lLLuJKRPw8iRhvLk8iYigLDUbcbqR7u7VRTKck6vUf/C/J0vz50u6+kub8UjPyxYj4+08iruUO5jranJdLK83QdG3p0XR1bf36w6W5hdJCafnmzOzsjVtfv3Xz8Fbv6qN/rV9+9YvvfuWPtwfjCy9+9o8kbsfl5rrtrY3ie+7+kMmYbL4nQ+lbuM93TjuzM5acdQF4J+mpOdA4y+NKjMdAFurgfU9AAOBceBoRdQDggklc/wHggml9D7C9tVFsTWf7jUR/vf52RIw06t+6v9lYM9i8ZzeS3Qcd20723RlJImLiFPKfjIjf/uVHv0+n6NF9SIB2Np9FxP2Jye2t/IH+P0n7v+Gj95DvuOar3TarN7abPLBY/wf989d0/PONw+O/qzsP9IxkrwfGPyP5Nufuuzj6/M+97LDpMfqmo6Xjv2/tebZtd/y389DaxEAz9plszDeUPHhYLqV922cjYiqG8ml8Jkva/imoqTefvOmU/97x3/9/+ePfpfmn890UuZeD+aiP79lmfq42dwpVz7x+FnF1sF39k53xb9Jh/Hu34173H5rvffOnv+mUMq1/Wt/WdLj+vVV/HvHltsd/91gmXZ9PnM6aw3SrUbTxp//8eqxT/rvHP5/N0/xbnwX6IT3+Y93rP5GGqmvri3PlcmmlevI8/vl8/G+d1u1t/+3rn7X/fdL2P5z8MAu3WtqTuVptZSZiOPn+4eU3drdtxVvp0/pPfan9+d+p/eeaz8be34l1N/hq+A/NXbWtf2azU/17K63//ImOf5dAvbnNgVUv3i4OdMr/eMd/NgtNNZccp/87oqTv0ZoBAAAAAAAAAAAAAAAAAAAAAAAA4ORyEXE5klxhJ5zLFQqN//D+fIzlypVq7dqDyuryfGT/lT0RQ7nWT12O7/k91Jnm7+G34jcOxL8WEZ+LiF/lR7N4oVgpz5915QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg6dL+//9/ms4Khca6/+bPunQAQM+MnHUBAIC+c/0HgIvnZNf/0Z6VAwDonxN//q8nvSkIANA3x77+3+9tOQCA/nH/HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgB67e+dOOtU/3toopvH5x2uri5XH1+dL1cXC0mqxUKysPCosVCoL5VKhWFnquKPNxqxcqTyajeXVJ9O1UrU2XV1bv7dUWV2u3Xu4NLdQulca6lvNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD4qmvri3PlcmlFoEtgtDR6HopxjgKDcS6KcSiw+e+hrF13TRwTH0zjH+6SJjnNvEYPLtnbS4yeSd8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8CH4NAAA//9RvRhH")
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0)
fremovexattr(r3, 0x0)

1.750155022s ago: executing program 4 (id=2335):
r0 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000780)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x100000000000000, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xb9&-~\xea(J\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\x12\x95\xbfd1\x88\x06\xb4{G\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xbd\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132?\xb7\xb2\x93B\x01\'#\xc0v\xce{\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde44m\x96+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x8c\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xa1W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a:z\xf9\x83\b.\xdf\xa5\xf1\xe8*\xe5\xed\x05\x87r8\xa1/A\x91*k\x8d}\xff\x82w\xff\x8c\x1d\xce \xfcl\xe0\xea\x02\xf4\xfeV\xd8zUj G\x87\xcdO\xc1\x9b\xc2\xd5', 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, './file0'}, 0x26d)

1.749969689s ago: executing program 4 (id=2336):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0x3a0af83a)
listen(r0, 0x20)
r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x3c00, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0)
shutdown(r0, 0x0)

1.640079954s ago: executing program 4 (id=2337):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000003c0007010000000000400000037c00000400fc80100001805fd05a607f"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

1.551847265s ago: executing program 4 (id=2338):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x7)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x80)
fchdir(r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
r3 = open_tree(0xffffffffffffff9c, 0x0, 0x89901)
mount_setattr(r3, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000000000)={0x0, 0x5, 0x20000}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)

1.279820382s ago: executing program 4 (id=2344):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=@getsa={0x28, 0x12, 0x1, 0x70bd26, 0x25dfdbff, {@in=@multicast2, 0x4d5, 0xa, 0x3c}}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x4000)

1.176909519s ago: executing program 4 (id=2346):
syz_mount_image$bcachefs(&(0x7f0000005b00), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="adc967d8e9781b4a6d725f7cefe89a94839b8189da465a3ff9a6c7c3e4fd4c97d59a2e2ea4d91925225f67093117bbd73195d3ffdda675bbc3df43efeab3fd3a722e355632cfce2fb0be551aca33dd1a879310fe217b94ac553496fe1c405eddbe1fb2eb957c117fc8db34ea1a7013295a9a44a9b0ad00"/132, @ANYRESOCT=0x0, @ANYRES8, @ANYRES64, @ANYBLOB="5e0000130000000023641ace4dc6164a00b94365a79418003957f1e75b25fbea79ef714ad27d706b9ae53bebc61dc4ed9784440455007fa2ac96e39492a3ac5771a8b94fefbd737678ee3f5289e0d23e772b1174f1e1ddb6dec391afc9ba2af09de84083775ac28957035d9111042b", @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRES64], 0xfe, 0x5be2, &(0x7f000000b700)="$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")

1.095074843s ago: executing program 5 (id=2347):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x38, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x9}}, @NHA_OIF={0x8, 0x5, r1}]}, 0x38}}, 0x0)

949.957559ms ago: executing program 5 (id=2349):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0xfffffffffffffc82, 0x0, 0x0, &(0x7f0000000380)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x10}, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10)
recvmmsg(r1, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0)

949.793552ms ago: executing program 0 (id=2350):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000300000000000000001000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00'}, 0x80)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r2, 0x25, 0x8}, 0x14)

829.470332ms ago: executing program 5 (id=2351):
r0 = syz_io_uring_setup(0x498, &(0x7f0000000200)={0x0, 0x7279, 0x0, 0x4, 0xb}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x8, 0xe, 0xffffffffffffffff, 0x0})
io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0)

708.919897ms ago: executing program 0 (id=2352):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setreuid(r2, 0x0)
fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setreuid(r3, 0x0)
setreuid(0x0, 0xee00)

595.677375ms ago: executing program 5 (id=2353):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
syz_io_uring_setup(0x48ba, &(0x7f0000000000)={0x0, 0xfffffffc, 0x1000, 0x0, 0x333}, &(0x7f0000000080), &(0x7f0000ff4000))
close_range(r2, 0xffffffffffffffff, 0x0)

595.330994ms ago: executing program 0 (id=2354):
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x0, {0x2, 0xa}, {0x1}, @const={0xfffd, {0xfbff, 0x8, 0x4, 0x81}}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0)

319.086566ms ago: executing program 0 (id=2355):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000100000000000000e9ff000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10)
r1 = epoll_create1(0x80000)
epoll_pwait2(r1, &(0x7f0000000180)=[{}], 0x1, &(0x7f00000001c0), 0x0, 0x0)

314.461385ms ago: executing program 5 (id=2356):
io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0xd9d8, 0x8})
socket$inet6(0xa, 0x5, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet(0x2, 0xa, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r1}]}, 0x24}}, 0x0)

134.323293ms ago: executing program 0 (id=2357):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)={0x3c, r1, 0x1001, 0x70bd28, 0x0, {}, [@ETHTOOL_A_RINGS_TX={0x8}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x3}]}, 0x3c}}, 0x0)

133.668098ms ago: executing program 5 (id=2358):
r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x28444, 0x0)
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2b, 0x2, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x0, 0x3, 0x7f, 0xa9, 0xfffffffffffffff7})
read$msr(r1, &(0x7f000001b000)=""/102400, 0x19000)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmsg(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[{0x10, 0x84, 0x4}], 0x10}, 0x20040004)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x401, 0x181, 0x2, 0x3, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x9, 0x404, 0x2, 0x8000013, 0xa7, 0xffffffa7, 0x8000b, 0x34d, 0x6e, 0x0, 0x4000009, 0x200, 0xe2df, 0x9, 0x20000001, 0x4, 0x505e, 0x7, 0xf58, 0x6]})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @multicast1}, &(0x7f0000000240)=0xc)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340), 0xf)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00')
ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000700)={&(0x7f0000ffb000/0x2000)=nil, 0x2000})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20018080}, 0x94)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000740), 0x41703, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)

0s ago: executing program 0 (id=2359):
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0)
write$cgroup_int(r0, &(0x7f0000000040)=0x900, 0x12)

kernel console output (not intermixed with test programs):

[   91.614757][  T792] pvrusb2: Hardware description: Terratec Grabster AV400
[   91.617104][  T792] pvrusb2: **********
[   91.627718][  T792] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[   91.631639][  T792] pvrusb2: Important functionality might not be entirely working.
[   91.637684][  T792] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[   91.645189][    C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[   91.646223][  T792] pvrusb2: **********
[   91.652221][ T5741] usb 1-1: USB disconnect, device number 4
[   91.676795][ T5741] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[   91.689083][ T5960] Bluetooth: hci1: command tx timeout
[   91.699790][ T5741] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[   91.706065][ T5741] quatech2 1-1:0.51: device disconnected
[   91.819663][ T2397] pvrusb2: Invalid write control endpoint
[   91.852098][ T2397] pvrusb2: Invalid write control endpoint
[   91.854506][ T2397] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[   91.858237][ T2397] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[   91.860637][ T2397] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[   91.863690][ T2397] pvrusb2: Device being rendered inoperable
[   91.866861][ T2397] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[   91.871290][ T2397] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[   91.877543][ T2397] pvrusb2: Attached sub-driver cx25840
[   91.882842][ T2397] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[   91.886884][ T2397] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[   92.028960][  T792] usb 3-1: USB disconnect, device number 4
[   92.311846][ T6461] loop0: detected capacity change from 0 to 256
[   92.332925][ T6461] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   92.346109][ T6461] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010364, chksum : 0x44009a1b, utbl_chksum : 0xe619d30d)
[   92.964487][   T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   93.129219][   T24] usb 4-1: config 0 has an invalid interface number: 76 but max is 0
[   93.134602][   T24] usb 4-1: config 0 has no interface number 0
[   93.137169][   T24] usb 4-1: too many endpoints for config 0 interface 76 altsetting 1: 52, using maximum allowed: 30
[   93.145417][   T24] usb 4-1: config 0 interface 76 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 52
[   93.151109][   T24] usb 4-1: config 0 interface 76 has no altsetting 0
[   93.153784][   T24] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[   93.158355][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.175803][   T24] usb 4-1: config 0 descriptor??
[   93.193419][   T24] cp210x 4-1:0.76: cp210x converter detected
[   93.594773][   T24] cp210x 4-1:0.76: failed to get vendor val 0x000e size 3: -71
[   93.628052][   T24] usb 4-1: cp210x converter now attached to ttyUSB0
[   93.666001][   T24] usb 4-1: USB disconnect, device number 2
[   93.730184][   T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[   93.743462][   T24] cp210x 4-1:0.76: device disconnected
[   93.757885][ T5960] Bluetooth: hci1: command tx timeout
[   93.816211][ T6482] netlink: 28 bytes leftover after parsing attributes in process `syz.0.264'.
[   93.823659][ T6482] team0: entered promiscuous mode
[   93.827506][ T6482] team_slave_0: entered promiscuous mode
[   93.841909][ T6482] team_slave_1: entered promiscuous mode
[   93.846242][ T6482] team0: entered allmulticast mode
[   93.853982][ T6482] team_slave_0: entered allmulticast mode
[   93.856764][ T6482] team_slave_1: entered allmulticast mode
[   94.016371][ T6484] lo speed is unknown, defaulting to 1000
[   94.019690][ T6484] lo speed is unknown, defaulting to 1000
[   94.031845][ T6484] lo speed is unknown, defaulting to 1000
[   94.049682][ T6484] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   94.064252][ T6484] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   94.169063][ T6484] lo speed is unknown, defaulting to 1000
[   94.176617][ T6484] lo speed is unknown, defaulting to 1000
[   94.183118][ T6484] lo speed is unknown, defaulting to 1000
[   94.551233][ T6492] overlayfs: failed to decode file handle (len=4, type=248, flags=0, err=-22)
[   94.779935][ T6496] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   94.926993][ T5962] cgroup: fork rejected by pids controller in /syz0
[   95.171798][   T14] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.231883][   T14] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.363064][ T6501] loop2: detected capacity change from 0 to 1024
[   95.474906][   T14] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.616466][   T14] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.340678][   T14] bridge_slave_1: left allmulticast mode
[   96.345386][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   96.358421][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   96.378262][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   96.381282][   T14] bridge_slave_1: left promiscuous mode
[   96.392402][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   96.392406][   T14] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.402504][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   96.516356][   T14] bridge_slave_0: left allmulticast mode
[   96.531145][   T14] bridge_slave_0: left promiscuous mode
[   96.544738][   T14] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.961016][   T33] audit: type=1326 audit(1758540433.476:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.3.281" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3824f8ec29 code=0x0
[   97.070648][ T6538] netlink: 104 bytes leftover after parsing attributes in process `syz.2.284'.
[   97.174840][ T6544] loop3: detected capacity change from 0 to 512
[   97.182517][ T6544] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   97.185988][ T6544] EXT4-fs (loop3): orphan cleanup on readonly fs
[   97.194397][ T6544] Quota error (device loop3): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6).
[   97.206206][ T6544] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   97.222719][ T6544] EXT4-fs (loop3): Cannot turn on quotas: error -117
[   97.234792][ T6544] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.286: bg 0: block 40: padding at end of block bitmap is not set
[   97.257973][ T6544] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem
[   97.281522][ T6544] EXT4-fs (loop3): 1 truncate cleaned up
[   97.289245][ T6544] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   97.305392][ T6544] EXT4-fs error (device loop3): ext4_get_link:106: inode #16: comm syz.3.286: bad symlink.
[   97.356332][ T6300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.467230][   T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   97.479174][   T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   97.484279][   T14] bond0 (unregistering): Released all slaves
[   97.544844][ T6553] tap0: tun_chr_ioctl cmd 1074025677
[   97.547130][ T6553] tap0: linktype set to 823
[   97.565095][ T6525] lo speed is unknown, defaulting to 1000
[   98.326035][   T14] hsr_slave_0: left promiscuous mode
[   98.329280][   T14] hsr_slave_1: left promiscuous mode
[   98.331760][   T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   98.335033][   T14] batman_adv: batadv0: Removing interface: batadv_slave_0
[   98.342060][   T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   98.344720][   T14] batman_adv: batadv0: Removing interface: batadv_slave_1
[   98.361092][   T14] veth1_macvtap: left promiscuous mode
[   98.363494][   T14] veth0_macvtap: left promiscuous mode
[   98.365655][   T14] veth1_vlan: left promiscuous mode
[   98.368852][   T14] veth0_vlan: left promiscuous mode
[   98.491192][   T55] Bluetooth: hci2: command tx timeout
[   98.788209][ T6564] syz.2.291 (6564): drop_caches: 2
[   99.168804][ T6588] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   99.181688][ T6588] block device autoloading is deprecated and will be removed.
[   99.289644][   T14] team_slave_1 (unregistering): left promiscuous mode
[   99.296530][   T14] team_slave_1 (unregistering): left allmulticast mode
[   99.309974][   T14] team0 (unregistering): Port device team_slave_1 removed
[   99.347902][ T6592] netlink: 20 bytes leftover after parsing attributes in process `syz.2.299'.
[   99.363227][   T14] team_slave_0 (unregistering): left promiscuous mode
[   99.365938][   T14] team_slave_0 (unregistering): left allmulticast mode
[   99.371210][   T14] team0 (unregistering): Port device team_slave_0 removed
[   99.785853][   T10] lo speed is unknown, defaulting to 1000
[   99.792898][   T10] infiniband syz2: ib_query_port failed (-19)
[   99.820759][ T5967] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   99.824165][ T5967] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   99.841803][ T5967] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   99.845320][ T5967] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   99.865597][ T6525] chnl_net:caif_netlink_parms(): no params data found
[   99.963922][ T6596] netlink: 'syz.2.300': attribute type 41 has an invalid length.
[  100.045379][ T6604] loop3: detected capacity change from 0 to 256
[  100.075850][ T6604] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d)
[  100.208808][ T6525] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.213310][ T6525] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.216176][ T6525] bridge_slave_0: entered allmulticast mode
[  100.250027][ T6525] bridge_slave_0: entered promiscuous mode
[  100.255987][ T6525] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.268070][ T6525] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.271236][ T6525] bridge_slave_1: entered allmulticast mode
[  100.291043][ T6525] bridge_slave_1: entered promiscuous mode
[  100.375902][ T6620] loop2: detected capacity change from 0 to 512
[  100.394630][ T6525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  100.433256][ T6525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  100.503423][ T6525] team0: Port device team_slave_0 added
[  100.526188][ T6525] team0: Port device team_slave_1 added
[  100.557909][   T55] Bluetooth: hci2: command tx timeout
[  100.619708][ T6525] batman_adv: batadv0: Adding interface: batadv_slave_0
[  100.622303][ T6525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.637548][ T6525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  100.674944][ T6525] batman_adv: batadv0: Adding interface: batadv_slave_1
[  100.689503][ T6525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.707927][ T6525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  101.265831][ T6525] hsr_slave_0: entered promiscuous mode
[  101.279222][ T6525] hsr_slave_1: entered promiscuous mode
[  101.294966][ T6525] debugfs: 'hsr0' already exists in 'hsr'
[  101.305803][ T6525] Cannot create hsr debugfs directory
[  101.496353][ T6643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.314'.
[  101.563309][ T6647] loop2: detected capacity change from 0 to 512
[  101.601651][ T6647] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.615956][ T6647] ext4 filesystem being mounted at /94/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  101.725504][ T5954] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.795647][ T6660] loop2: detected capacity change from 0 to 1024
[  101.852653][ T6660] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  101.857324][ T6660] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  101.948625][ T5954] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.045893][ T6675] loop3: detected capacity change from 0 to 512
[  102.055511][ T6675] EXT4-fs: Ignoring removed bh option
[  102.073292][ T6675] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  102.080268][ T6675] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  102.090958][ T6675] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  102.118192][ T6675] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  102.126674][ T6675] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006]
[  102.136471][ T6675] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  102.228945][ T6525] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  102.246775][ T6525] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  102.263337][ T6525] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  102.282495][ T6525] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  102.390012][ T5984] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  102.491688][ T6525] 8021q: adding VLAN 0 to HW filter on device bond0
[  102.510468][ T6525] 8021q: adding VLAN 0 to HW filter on device team0
[  102.522507][ T6639] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.525614][ T6639] bridge0: port 1(bridge_slave_0) entered forwarding state
[  102.537982][ T6639] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.541109][ T6639] bridge0: port 2(bridge_slave_1) entered forwarding state
[  102.570896][ T5984] usb 4-1: Using ep0 maxpacket: 16
[  102.586750][ T5984] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  102.594984][ T5984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.598866][ T5984] usb 4-1: Product: syz
[  102.600641][ T5984] usb 4-1: Manufacturer: syz
[  102.602566][ T5984] usb 4-1: SerialNumber: syz
[  102.631163][ T5984] usb 4-1: config 0 descriptor??
[  102.638707][ T5984] ums-onetouch 4-1:0.0: USB Mass Storage device detected
[  102.648030][   T55] Bluetooth: hci2: command tx timeout
[  102.823148][ T6525] 8021q: adding VLAN 0 to HW filter on device batadv0
[  102.843618][  T792] usb 4-1: USB disconnect, device number 3
[  102.903525][ T6525] veth0_vlan: entered promiscuous mode
[  102.915309][ T6525] veth1_vlan: entered promiscuous mode
[  102.953387][ T6525] veth0_macvtap: entered promiscuous mode
[  102.962328][ T6525] veth1_macvtap: entered promiscuous mode
[  102.981921][ T6525] batman_adv: batadv0: Interface activated: batadv_slave_0
[  102.995253][ T6525] batman_adv: batadv0: Interface activated: batadv_slave_1
[  103.003385][ T5967] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  103.007239][ T5967] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  103.012976][ T5967] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  103.020946][ T5967] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  103.100924][   T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.109632][   T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.149905][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.154631][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.420488][ T6300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.537152][ T6745] netlink: 'syz.0.331': attribute type 10 has an invalid length.
[  103.763397][ T6745] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  104.296140][ T6747] loop2: detected capacity change from 0 to 40427
[  104.318125][ T6747] F2FS-fs (loop2): build fault injection rate: 771
[  104.329360][ T6747] F2FS-fs (loop2): invalid crc value
[  104.386298][ T6747] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  104.393086][ T6747] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  104.455755][   T33] audit: type=1800 audit(1758540440.966:11): pid=6747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.332" name="file1" dev="loop2" ino=10 res=0 errno=0
[  104.492737][ T5954] syz-executor: attempt to access beyond end of device
[  104.492737][ T5954] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  104.533978][ T5954] CPU: 0 UID: 0 PID: 5954 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  104.533998][ T5954] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  104.534007][ T5954] Call Trace:
[  104.534013][ T5954]  <TASK>
[  104.534019][ T5954]  dump_stack_lvl+0x189/0x250
[  104.534059][ T5954]  ? __pfx_dump_stack_lvl+0x10/0x10
[  104.534075][ T5954]  ? __pfx_queue_work_on+0x10/0x10
[  104.534089][ T5954]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  104.534109][ T5954]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  104.534139][ T5954]  f2fs_handle_critical_error+0x37c/0x540
[  104.534166][ T5954]  f2fs_write_end_io+0x886/0xb60
[  104.534223][ T5954]  __submit_merged_bio+0x27a/0x6a0
[  104.534250][ T5954]  __submit_merged_write_cond+0x255/0x530
[  104.534275][ T5954]  f2fs_write_data_pages+0x261d/0x3000
[  104.534319][ T5954]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  104.534397][ T5954]  ? __lock_acquire+0xab9/0xd20
[  104.534424][ T5954]  ? do_raw_spin_lock+0x121/0x290
[  104.534450][ T5954]  ? do_raw_spin_unlock+0x4d/0x240
[  104.534466][ T5954]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  104.534480][ T5954]  do_writepages+0x32e/0x550
[  104.534518][ T5954]  ? do_raw_spin_unlock+0x4d/0x240
[  104.534538][ T5954]  filemap_fdatawrite+0x199/0x240
[  104.534557][ T5954]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  104.534618][ T5954]  ? do_raw_spin_unlock+0x4d/0x240
[  104.534638][ T5954]  f2fs_sync_dirty_inodes+0x31f/0x830
[  104.534666][ T5954]  f2fs_write_checkpoint+0x95a/0x1df0
[  104.534703][ T5954]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  104.534755][ T5954]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  104.534769][ T5954]  ? kfree+0x18e/0x440
[  104.534787][ T5954]  ? kill_f2fs_super+0x298/0x6c0
[  104.534806][ T5954]  kill_f2fs_super+0x2c3/0x6c0
[  104.534826][ T5954]  ? __pfx_kill_f2fs_super+0x10/0x10
[  104.534838][ T5954]  ? radix_tree_delete_item+0x2b6/0x400
[  104.534858][ T5954]  ? shrinker_free+0x2ce/0x3e0
[  104.534875][ T5954]  deactivate_locked_super+0xbc/0x130
[  104.534894][ T5954]  cleanup_mnt+0x425/0x4c0
[  104.534910][ T5954]  ? lockdep_hardirqs_on+0x9c/0x150
[  104.534926][ T5954]  task_work_run+0x1d4/0x260
[  104.534946][ T5954]  ? __pfx_task_work_run+0x10/0x10
[  104.534961][ T5954]  ? __x64_sys_umount+0x122/0x160
[  104.534983][ T5954]  ? exit_to_user_mode_loop+0x40/0x110
[  104.535006][ T5954]  exit_to_user_mode_loop+0xec/0x110
[  104.535025][ T5954]  do_syscall_64+0x2bd/0x3b0
[  104.535038][ T5954]  ? lockdep_hardirqs_on+0x9c/0x150
[  104.535051][ T5954]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.535064][ T5954]  ? exc_page_fault+0x9f/0xf0
[  104.535080][ T5954]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.535092][ T5954] RIP: 0033:0x7fb63bb8ff57
[  104.535106][ T5954] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  104.535115][ T5954] RSP: 002b:00007fff80f2cd38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  104.535129][ T5954] RAX: 0000000000000000 RBX: 00007fb63bc11c2d RCX: 00007fb63bb8ff57
[  104.535138][ T5954] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff80f2cdf0
[  104.535146][ T5954] RBP: 00007fff80f2cdf0 R08: 0000000000000000 R09: 0000000000000000
[  104.535153][ T5954] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff80f2de80
[  104.535162][ T5954] R13: 00007fb63bc11c2d R14: 00000000000197a8 R15: 00007fff80f2dec0
[  104.535215][ T5954]  </TASK>
[  104.535222][ T5954] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  104.727247][   T55] Bluetooth: hci2: command tx timeout
[  104.890722][ T6780] netlink: 'syz.3.344': attribute type 10 has an invalid length.
[  104.914740][ T6780] syz_tun: entered promiscuous mode
[  104.924905][ T6780] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  105.012476][ T6784] netlink: 'syz.3.346': attribute type 3 has an invalid length.
[  105.136920][ T6791] sctp: [Deprecated]: syz.3.348 (pid 6791) Use of struct sctp_assoc_value in delayed_ack socket option.
[  105.136920][ T6791] Use struct sctp_sack_info instead
[  105.267203][ T6803] netlink: 16 bytes leftover after parsing attributes in process `syz.3.353'.
[  105.318846][ T6807] sock: sock_set_timeout: `syz.3.355' (pid 6807) tries to set negative timeout
[  105.598522][ T6829] loop3: detected capacity change from 0 to 1024
[  105.629698][ T6829] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  105.650918][ T6829] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.366: bg 0: block 88: padding at end of block bitmap is not set
[  105.662465][ T6829] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  105.701386][ T6300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.347993][ T5984] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  106.509619][ T5984] usb 4-1: Using ep0 maxpacket: 32
[  106.840086][ T5984] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  106.845063][ T5984] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.851754][ T5984] usb 4-1: config 0 descriptor??
[  106.861487][ T5984] gspca_main: sunplus-2.14.0 probing 041e:400b
[  107.164958][ T6861] netlink: 512 bytes leftover after parsing attributes in process `syz.2.376'.
[  107.673231][ T5984] gspca_sunplus: reg_w_riv err -71
[  107.676271][ T5984] sunplus 4-1:0.0: probe with driver sunplus failed with error -71
[  107.684517][ T5984] usb 4-1: USB disconnect, device number 4
[  108.270140][ T6897] netlink: 36 bytes leftover after parsing attributes in process `syz.0.393'.
[  108.360440][ T6904] loop3: detected capacity change from 0 to 22
[  108.363953][ T6904] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  108.389059][ T6904] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  109.100219][ T6920] loop3: detected capacity change from 0 to 65
[  109.113349][ T6920] BFS-fs: bfs_fill_super(): NOTE: filesystem loop3 was created with 512 inodes, the real maximum is 511, mounting anyway
[  109.523957][ T6923] bond0: (slave syz_tun): Releasing backup interface
[  109.654704][ T5985] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.744782][ T5985] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.851061][ T5985] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.934156][ T5985] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.955756][ T6946] mmap: syz.0.413 (6946) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  110.345785][ T5985] bridge_slave_1: left allmulticast mode
[  110.347498][ T5985] bridge_slave_1: left promiscuous mode
[  110.356216][ T5985] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.399804][ T5985] bridge_slave_0: left allmulticast mode
[  110.411308][ T5985] bridge_slave_0: left promiscuous mode
[  110.413721][ T5985] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.470683][ T5958] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  110.476065][ T5958] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  110.481500][ T5958] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  110.486036][ T5958] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  110.490915][ T5958] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  110.624370][ T6952] loop2: detected capacity change from 0 to 32768
[  110.632612][ T6952] btrfs: Deprecated parameter 'usebackuproot'
[  110.637351][ T6952] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  110.645159][ T6952] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.417 (6952)
[  110.652220][ T5958] Bluetooth: hci2: command 0x0405 tx timeout
[  110.671957][ T6952] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  110.688456][ T6952] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  110.817439][ T6952] BTRFS info (device loop2): rebuilding free space tree
[  110.899525][ T6952] BTRFS info (device loop2): allowing degraded mounts
[  110.902172][ T6952] BTRFS info (device loop2): enabling ssd optimizations
[  110.904895][ T6952] BTRFS info (device loop2): turning on flush-on-commit
[  110.907532][ T6952] BTRFS info (device loop2): enabling free space tree
[  110.911398][ T6952] BTRFS info (device loop2): force clearing of disk cache
[  110.914267][ T6952] BTRFS info (device loop2): trying to use backup root at mount time
[  110.919996][ T6952] BTRFS info (device loop2): use zstd compression, level 3
[  111.109429][ T5954] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  111.234392][ T5985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  111.244955][ T5985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  111.254689][ T5985] bond0 (unregistering): Released all slaves
[  111.965793][ T6989] input: syz0 as /devices/virtual/input/input4
[  112.569239][   T55] Bluetooth: hci1: command tx timeout
[  112.961381][ T5985] hsr_slave_0: left promiscuous mode
[  112.964079][ T5985] hsr_slave_1: left promiscuous mode
[  112.966284][ T5985] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  112.974643][ T5985] batman_adv: batadv0: Removing interface: batadv_slave_0
[  112.979422][ T5985] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  112.982216][ T5985] batman_adv: batadv0: Removing interface: batadv_slave_1
[  113.052403][ T5985] veth1_macvtap: left promiscuous mode
[  113.060728][ T5985] veth0_macvtap: left promiscuous mode
[  113.062695][ T5985] veth1_vlan: left promiscuous mode
[  113.064608][ T5985] veth0_vlan: left promiscuous mode
[  113.138428][ T7009] loop2: detected capacity change from 0 to 512
[  113.165401][ T7009] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  113.174921][ T7009] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  113.199038][ T7009] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  113.201804][ T7009] System zones: 0-2, 18-18, 34-34
[  113.210829][ T7009] EXT4-fs error (device loop2): ext4_orphan_get:1392: comm syz.2.428: inode #15: comm syz.2.428: iget: illegal inode #
[  113.219066][ T7009] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.428: couldn't read orphan inode 15 (err -117)
[  113.225903][ T7009] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  113.288736][ T5954] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.372752][ T7013] loop2: detected capacity change from 0 to 256
[  113.392336][ T7013] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb5f96684, utbl_chksum : 0xe619d30d)
[  113.565650][ T7015] netlink: 'syz.0.431': attribute type 13 has an invalid length.
[  113.568815][ T7015] netlink: 'syz.0.431': attribute type 17 has an invalid length.
[  113.795591][ T5985] team0 (unregistering): Port device team_slave_1 removed
[  113.831665][ T5985] team0 (unregistering): Port device team_slave_0 removed
[  114.330003][ T7015] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  114.375130][ T6954] chnl_net:caif_netlink_parms(): no params data found
[  114.450535][ T7019] syz.0.432 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  114.609089][ T6954] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.611849][ T6954] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.614663][ T6954] bridge_slave_0: entered allmulticast mode
[  114.633856][ T6954] bridge_slave_0: entered promiscuous mode
[  114.638864][   T55] Bluetooth: hci1: command tx timeout
[  114.644634][ T6954] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.664342][ T6954] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.677964][ T6954] bridge_slave_1: entered allmulticast mode
[  114.685877][ T6954] bridge_slave_1: entered promiscuous mode
[  114.801019][ T6954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  114.840240][ T6954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  115.123937][ T6954] team0: Port device team_slave_0 added
[  115.142507][ T6954] team0: Port device team_slave_1 added
[  115.219735][ T6954] batman_adv: batadv0: Adding interface: batadv_slave_0
[  115.229448][ T6954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.248414][ T6954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  115.288020][ T5958] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  115.292285][ T5958] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  115.299156][ T5958] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  115.304713][ T5958] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  115.312145][ T5958] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  115.357469][ T5985] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  115.371353][ T5985] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.404971][ T6954] batman_adv: batadv0: Adding interface: batadv_slave_1
[  115.411007][ T6954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.441157][ T6954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  115.538692][ T5985] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  115.542679][ T5985] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.633961][ T6954] hsr_slave_0: entered promiscuous mode
[  115.636951][ T6954] hsr_slave_1: entered promiscuous mode
[  115.641814][ T6954] debugfs: 'hsr0' already exists in 'hsr'
[  115.644411][ T6954] Cannot create hsr debugfs directory
[  115.671708][ T5985] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  115.675762][ T5985] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.766966][ T5985] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  115.774010][ T5985] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.014317][ T7059] Invalid ELF header magic: != ELF
[  116.148840][ T5985] bridge_slave_1: left allmulticast mode
[  116.153540][ T5985] bridge_slave_1: left promiscuous mode
[  116.159588][ T5985] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.165980][ T5985] bridge_slave_0: left allmulticast mode
[  116.170508][ T5985] bridge_slave_0: left promiscuous mode
[  116.173131][ T5985] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.577450][ T5985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  116.583599][ T5985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  116.588153][ T5985] bond0 (unregistering): Released all slaves
[  116.621164][ T7033] chnl_net:caif_netlink_parms(): no params data found
[  116.628291][ T6954] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  116.643421][ T6954] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  116.650406][ T6954] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  116.668695][ T6954] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  116.728622][   T55] Bluetooth: hci1: command tx timeout
[  116.750338][ T7033] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.754163][ T7033] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.756929][ T7033] bridge_slave_0: entered allmulticast mode
[  116.760571][ T7033] bridge_slave_0: entered promiscuous mode
[  116.781061][ T7033] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.784320][ T7033] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.790356][ T7033] bridge_slave_1: entered allmulticast mode
[  116.793882][ T7033] bridge_slave_1: entered promiscuous mode
[  116.894065][ T7033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  116.910815][ T7033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  116.942884][ T5985] hsr_slave_0: left promiscuous mode
[  116.949876][ T5985] hsr_slave_1: left promiscuous mode
[  116.952626][ T5985] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  116.955577][ T5985] batman_adv: batadv0: Removing interface: batadv_slave_0
[  116.972025][ T5985] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  116.975061][ T5985] batman_adv: batadv0: Removing interface: batadv_slave_1
[  117.015752][ T5985] veth1_macvtap: left promiscuous mode
[  117.018644][ T5985] veth0_macvtap: left promiscuous mode
[  117.020997][ T5985] veth1_vlan: left promiscuous mode
[  117.023210][ T5985] veth0_vlan: left promiscuous mode
[  117.360309][   T55] Bluetooth: hci0: command tx timeout
[  117.486450][ T5985] team0 (unregistering): Port device team_slave_1 removed
[  117.522812][ T5985] team0 (unregistering): Port device team_slave_0 removed
[  117.934548][ T7090] netlink: 2 bytes leftover after parsing attributes in process `syz.0.448'.
[  117.990333][ T7033] team0: Port device team_slave_0 added
[  118.022989][ T7033] team0: Port device team_slave_1 added
[  118.066126][ T7033] batman_adv: batadv0: Adding interface: batadv_slave_0
[  118.069122][ T7033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  118.082611][ T7033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  118.091991][ T7033] batman_adv: batadv0: Adding interface: batadv_slave_1
[  118.094814][ T7033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  118.105253][ T7033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  118.200065][ T7033] hsr_slave_0: entered promiscuous mode
[  118.202800][ T7033] hsr_slave_1: entered promiscuous mode
[  118.282120][ T6954] 8021q: adding VLAN 0 to HW filter on device bond0
[  118.325601][ T6954] 8021q: adding VLAN 0 to HW filter on device team0
[  118.338943][   T79] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.341226][   T79] bridge0: port 1(bridge_slave_0) entered forwarding state
[  118.373793][   T79] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.376380][   T79] bridge0: port 2(bridge_slave_1) entered forwarding state
[  118.462980][ T7033] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  118.470437][ T7033] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  118.474968][ T7033] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  118.483157][ T7033] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  118.567502][ T6954] 8021q: adding VLAN 0 to HW filter on device batadv0
[  118.630003][ T7033] 8021q: adding VLAN 0 to HW filter on device bond0
[  118.660798][ T7033] 8021q: adding VLAN 0 to HW filter on device team0
[  118.680742][   T79] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.683273][   T79] bridge0: port 1(bridge_slave_0) entered forwarding state
[  118.696659][   T79] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.699268][   T79] bridge0: port 2(bridge_slave_1) entered forwarding state
[  118.807782][   T55] Bluetooth: hci1: command tx timeout
[  118.835498][ T6954] veth0_vlan: entered promiscuous mode
[  118.860007][ T6954] veth1_vlan: entered promiscuous mode
[  118.943190][ T6954] veth0_macvtap: entered promiscuous mode
[  118.961650][ T6954] veth1_macvtap: entered promiscuous mode
[  118.995391][ T7033] 8021q: adding VLAN 0 to HW filter on device batadv0
[  119.001474][ T6954] batman_adv: batadv0: Interface activated: batadv_slave_0
[  119.019459][ T6954] batman_adv: batadv0: Interface activated: batadv_slave_1
[  119.031081][ T5952] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  119.034599][ T5952] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  119.044522][ T5952] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  119.049136][ T5952] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  119.142718][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.150428][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.183613][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.186342][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.439282][   T55] Bluetooth: hci0: command tx timeout
[  119.594280][ T7033] veth0_vlan: entered promiscuous mode
[  119.614141][ T7033] veth1_vlan: entered promiscuous mode
[  119.689389][ T7033] veth0_macvtap: entered promiscuous mode
[  119.712595][ T7033] veth1_macvtap: entered promiscuous mode
[  119.794205][ T7033] batman_adv: batadv0: Interface activated: batadv_slave_0
[  119.816770][ T7033] batman_adv: batadv0: Interface activated: batadv_slave_1
[  119.897139][ T5967] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  119.928163][ T5967] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  119.947529][ T5967] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  119.992230][ T5967] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  120.120468][ T7160] netlink: 12 bytes leftover after parsing attributes in process `syz.0.453'.
[  120.283313][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.286561][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.445114][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.456631][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  121.102445][ T7177] loop5: detected capacity change from 0 to 2048
[  121.196314][ T7180] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  121.518760][   T55] Bluetooth: hci0: command tx timeout
[  121.785543][ T7184] NILFS error (device loop5): nilfs_dotdot: directory #12 missing '..'
[  121.824939][ T7184] Remounting filesystem read-only
[  122.328686][   T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  122.507825][   T24] usb 6-1: Using ep0 maxpacket: 16
[  122.513049][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  122.517026][   T24] usb 6-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00
[  122.521296][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.534972][   T24] usb 6-1: config 0 descriptor??
[  123.608608][   T55] Bluetooth: hci0: command tx timeout
[  124.010777][ T7210] capability: warning: `syz.4.469' uses deprecated v2 capabilities in a way that may be insecure
[  124.126858][   T24] usbhid 6-1:0.0: can't add hid device: -71
[  124.137375][   T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  124.145284][   T24] usb 6-1: USB disconnect, device number 2
[  124.149323][ T7033] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer
[  124.551988][ T7220] fuse: Bad value for 'fd'
[  125.051669][ T7234] syz_tun: entered promiscuous mode
[  125.053785][ T7234] vlan2: entered promiscuous mode
[  125.541281][   T33] audit: type=1804 audit(1758540462.056:12): pid=7256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.488" name="/newroot/5/bus/file0" dev="overlay" ino=52 res=1 errno=0
[  125.550107][ T7256] evm: overlay not supported
[  125.821160][ T7275] netlink: 28 bytes leftover after parsing attributes in process `syz.5.496'.
[  126.894719][ T7285] syz.4.501 (7285) used greatest stack depth: 18776 bytes left
[  127.156546][ T7299] netlink: 'syz.0.508': attribute type 2 has an invalid length.
[  127.163282][ T7299] netlink: 'syz.0.508': attribute type 11 has an invalid length.
[  127.165900][ T7299] netlink: 132 bytes leftover after parsing attributes in process `syz.0.508'.
[  127.684689][ T7322] netlink: 8 bytes leftover after parsing attributes in process `syz.5.515'.
[  128.574637][ T7349] loop5: detected capacity change from 0 to 128
[  128.651745][ T7352] netlink: 92 bytes leftover after parsing attributes in process `syz.4.532'.
[  128.654714][ T7352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.532'.
[  128.658411][ T7352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.532'.
[  129.124272][ T7360] syz.5.531: attempt to access beyond end of device
[  129.124272][ T7360] loop5: rw=2049, sector=145, nr_sectors = 896 limit=128
[  129.630089][ T7373] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.541'.
[  129.655441][ T7376] loop5: detected capacity change from 0 to 128
[  129.702176][   T33] audit: type=1800 audit(1758540466.216:13): pid=7376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.539" name="bus" dev="loop5" ino=1048641 res=0 errno=0
[  129.774924][ T7376] syz.5.539: attempt to access beyond end of device
[  129.774924][ T7376] loop5: rw=0, sector=121, nr_sectors = 920 limit=128
[  130.107420][ T7379] delete_channel: no stack
[  130.184571][ T7395] loop5: detected capacity change from 0 to 2048
[  130.234202][ T7395] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  130.245597][ T7395] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  130.482899][ T7033] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.291137][ T7468] loop5: detected capacity change from 0 to 512
[  131.333185][ T7468] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  131.345901][ T7468] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.564: bg 0: block 384: padding at end of block bitmap is not set
[  131.352625][ T7468] EXT4-fs (loop5): Remounting filesystem read-only
[  131.355053][ T7468] EXT4-fs (loop5): 1 truncate cleaned up
[  131.357959][ T7468] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  131.386906][ T7033] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.453900][ T7478] netlink: 172 bytes leftover after parsing attributes in process `syz.5.567'.
[  131.469481][ T7478] netlink: 8 bytes leftover after parsing attributes in process `syz.5.567'.
[  131.477404][ T7478] netlink: 172 bytes leftover after parsing attributes in process `syz.5.567'.
[  131.490029][ T7478] netlink: 100 bytes leftover after parsing attributes in process `syz.5.567'.
[  131.495886][ T7478] netlink: 32 bytes leftover after parsing attributes in process `syz.5.567'.
[  132.651752][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.654265][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  133.177416][ T7538] netlink: zone id is out of range
[  133.185434][ T7538] netlink: zone id is out of range
[  133.187537][ T7538] netlink: zone id is out of range
[  133.191787][ T7538] netlink: zone id is out of range
[  133.193834][ T7538] netlink: zone id is out of range
[  133.196047][ T7538] netlink: zone id is out of range
[  133.199110][ T7538] netlink: zone id is out of range
[  133.201225][ T7538] netlink: zone id is out of range
[  133.202726][ T7538] netlink: zone id is out of range
[  133.204360][ T7538] netlink: zone id is out of range
[  133.485631][ T7553] loop5: detected capacity change from 0 to 2048
[  133.569075][ T7553]  loop5: p1 < > p2 p3 < p5 p6 > p4
[  133.571642][ T7553] loop5: partition table partially beyond EOD, truncated
[  133.575447][ T7553] loop5: p1 start 4278190080 is beyond EOD, truncated
[  133.579599][ T7553] loop5: p2 start 16908800 is beyond EOD, truncated
[  133.584524][ T7553] loop5: p4 start 11326 is beyond EOD, truncated
[  133.586981][ T7553] loop5: p5 start 16908800 is beyond EOD, truncated
[  133.590108][ T7553] loop5: p6 start 11326 is beyond EOD, truncated
[  133.700124][ T6237] udevd[6237]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[  134.013325][ T7573] loop5: detected capacity change from 0 to 64
[  134.059863][   T33] audit: type=1800 audit(1758540470.576:14): pid=7573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.609" name="bus" dev="loop5" ino=8 res=0 errno=0
[  134.508047][ T7599] loop5: detected capacity change from 0 to 1024
[  134.510691][ T7599] EXT4-fs: Ignoring removed orlov option
[  134.513374][ T7599] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[  134.516717][ T7599] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  134.521979][ T7599] EXT4-fs (loop5): invalid journal inode
[  134.524064][ T7599] EXT4-fs (loop5): can't get journal size
[  134.527756][ T7599] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  135.451474][ T7033] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.461376][ T7609] cgroup: noprefix used incorrectly
[  135.556377][ T7615] binder: 7614:7615 unknown command 0
[  135.560772][ T7615] binder: 7614:7615 ioctl c0306201 200000000080 returned -22
[  135.772213][ T7630] loop5: detected capacity change from 0 to 4096
[  135.798480][ T7635] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  135.961889][ T7641] loop5: detected capacity change from 0 to 136
[  135.990395][ T7641] Attempt to read inode for relocated directory
[  136.503154][ T7647] netlink: 165 bytes leftover after parsing attributes in process `syz.5.642'.
[  136.552234][ T7649] loop5: detected capacity change from 0 to 512
[  136.557431][ T7649] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  136.562489][ T7649] EXT4-fs (loop5): DAX unsupported by block device.
[  136.729376][ T5985] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xab
[  136.983705][ T7677] netlink: 'syz.0.655': attribute type 1 has an invalid length.
[  137.879383][ T7714] binder: 7706:7714 ioctl c0306201 200000000640 returned -22
[  138.961813][ T7742] warning: `syz.4.685' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  139.447782][   T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  139.599980][   T10] usb 6-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62
[  139.603539][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.620285][   T10] usb 6-1: config 0 descriptor??
[  139.627246][   T10] usb 6-1: selecting invalid altsetting 1
[  139.637810][   T10] flexcop_usb: set interface failed.
[  139.640088][   T10] b2c2_flexcop_usb 6-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22
[  139.827447][ T6478] usb 6-1: USB disconnect, device number 3
[  140.225098][ T7793] netlink: 24 bytes leftover after parsing attributes in process `syz.4.710'.
[  141.255917][ T7804] loop5: detected capacity change from 0 to 32768
[  141.466158][ T7817] net_ratelimit: 17 callbacks suppressed
[  141.466544][ T7817] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  142.321881][ T7829] loop5: detected capacity change from 0 to 32768
[  142.350488][ T7829] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  142.369176][ T7829] XFS (loop5): Ending clean mount
[  142.405860][ T7033] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  142.561983][ T7839] loop5: detected capacity change from 0 to 16
[  142.591944][ T7839] erofs (device loop5): mounted with root inode @ nid 36.
[  142.838135][   T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  142.997746][   T10] usb 6-1: Using ep0 maxpacket: 16
[  143.005313][   T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  143.015838][   T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  143.024400][   T10] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  143.031655][   T10] usb 6-1: config 0 interface 0 has no altsetting 0
[  143.034165][   T10] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  143.038937][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.062225][   T10] usb 6-1: config 0 descriptor??
[  143.510583][   T10] hid (null): unknown global tag 0xd5
[  143.512912][   T10] hid (null): invalid report_size -2057069368
[  143.515356][   T10] hid (null): unknown global tag 0x2c
[  143.519912][   T10] hid (null): unknown global tag 0xc
[  143.522335][   T10] hid (null): unknown global tag 0xd2
[  143.526190][   T10] hid (null): report_id 0 is invalid
[  143.530065][   T10] hid (null): report_id 0 is invalid
[  143.532446][   T10] hid (null): unknown global tag 0xe
[  143.534671][   T10] hid (null): unknown global tag 0xd
[  143.726671][ T6018] usb 6-1: USB disconnect, device number 4
[  144.358056][ T6478] IPVS: starting estimator thread 0...
[  144.447842][ T7899] IPVS: using max 43 ests per chain, 103200 per kthread
[  144.556165][ T7908] loop5: detected capacity change from 0 to 1024
[  144.562400][ T7908] EXT4-fs: Ignoring removed bh option
[  144.591558][ T7908] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  144.637007][ T7033] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.996732][ T7933] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  145.146107][ T7942] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  145.310858][ T7948] 9pnet: p9_errstr2errno: server reported unknown error @c
[  145.557492][ T7944] loop5: detected capacity change from 0 to 32768
[  145.584914][ T7944] XFS (loop5): filesystem is marked as having an internal log; do not specify logdev on the mount command line.
[  145.604358][ T7965] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  145.974838][ T7977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.781'.
[  146.367263][   T33] audit: type=1326 audit(1758540482.876:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7982 comm="syz.5.786" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f2d8ec29 code=0x7ffc0000
[  146.376422][   T33] audit: type=1326 audit(1758540482.876:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7982 comm="syz.5.786" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f2d8ec29 code=0x7ffc0000
[  146.385507][   T33] audit: type=1326 audit(1758540482.896:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7982 comm="syz.5.786" exe="/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f51f2d8ec29 code=0x7ffc0000
[  146.395474][   T33] audit: type=1326 audit(1758540482.896:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7982 comm="syz.5.786" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f2d8ec29 code=0x7ffc0000
[  146.404095][   T33] audit: type=1326 audit(1758540482.896:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7982 comm="syz.5.786" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f2d8ec29 code=0x7ffc0000
[  147.178011][ T8026] loop5: detected capacity change from 0 to 1024
[  147.208618][ T8026] hfsplus: catalog searching failed
[  147.228441][   T79] hfsplus: b-tree write err: -5, ino 3
[  148.051219][ T8044] smc: net device bond0 applied user defined pnetid SYZ2
[  150.773246][ T8119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.848'.
[  151.117079][ T8133] 9pnet_fd: Insufficient options for proto=fd
[  151.166669][   T33] audit: type=1326 audit(1758540487.676:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8134 comm="syz.0.856" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e8b8ec29 code=0x7ffc0000
[  151.180885][   T33] audit: type=1326 audit(1758540487.676:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8134 comm="syz.0.856" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e8b8ec29 code=0x7ffc0000
[  151.199850][   T33] audit: type=1326 audit(1758540487.716:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8134 comm="syz.0.856" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f41e8b8ec29 code=0x7ffc0000
[  151.223434][   T33] audit: type=1326 audit(1758540487.736:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8134 comm="syz.0.856" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e8b8ec29 code=0x7ffc0000
[  151.239789][   T33] audit: type=1326 audit(1758540487.736:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8134 comm="syz.0.856" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e8b8ec29 code=0x7ffc0000
[  151.617997][ T8157] netlink: 'syz.5.866': attribute type 3 has an invalid length.
[  151.695993][   T33] kauditd_printk_skb: 2 callbacks suppressed
[  151.696008][   T33] audit: type=1326 audit(1758540488.206:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8160 comm="syz.0.869" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f41e8b8ec29 code=0x0
[  152.634628][ T8181] geneve2: entered promiscuous mode
[  152.636907][ T8181] geneve2: entered allmulticast mode
[  153.430360][ T8204] loop5: detected capacity change from 0 to 32768
[  153.649538][ T8218] overlayfs: failed to clone upperpath
[  153.789151][ T8223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.897'.
[  154.241552][ T8229] loop5: detected capacity change from 0 to 512
[  154.258277][ T8229] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  154.262246][ T8229] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  154.352094][ T7033] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.927864][   T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  156.077772][   T10] usb 6-1: Using ep0 maxpacket: 32
[  156.081921][   T10] usb 6-1: New USB device found, idVendor=04cb, idProduct=013d, bcdDevice=a4.42
[  156.084925][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.089407][   T10] usb 6-1: config 0 descriptor??
[  156.099351][   T10] gspca_main: finepix-2.14.0 probing 04cb:013d
[  156.313333][   T10] usb 6-1: USB disconnect, device number 5
[  156.334455][ T8278] netlink: 20 bytes leftover after parsing attributes in process `syz.0.920'.
[  157.399294][ T8298] loop5: detected capacity change from 0 to 16
[  157.428565][ T8298] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  157.471834][ T8298] cramfs: empty filesystem
[  159.040017][ T8328] overlayfs: failed to clone upperpath
[  160.010470][ T8362] loop5: detected capacity change from 0 to 32768
[  160.184232][ T8373] netlink: 48 bytes leftover after parsing attributes in process `syz.5.961'.
[  160.458753][ T6018] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  160.619606][ T6018] usb 6-1: config 160 has an invalid interface number: 200 but max is 0
[  160.622885][ T6018] usb 6-1: config 160 has no interface number 0
[  160.625449][ T6018] usb 6-1: config 160 interface 200 has no altsetting 0
[  160.631645][ T6018] usb 6-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b
[  160.635210][ T6018] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.640817][ T6018] usb 6-1: Product: syz
[  160.642500][ T6018] usb 6-1: Manufacturer: syz
[  160.644255][ T6018] usb 6-1: SerialNumber: syz
[  160.688833][ T8381] Driver unsupported XDP return value 0 on prog  (id 81) dev N/A, expect packet loss!
[  160.876972][ T6018] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  160.881102][ T6018] usb 6-1: MIDIStreaming interface descriptor not found
[  160.899831][ T8388] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  160.899831][ T8388] The task syz.4.968 (8388) triggered the difference, watch for misbehavior.
[  160.927251][ T6018] usb 6-1: USB disconnect, device number 6
[  160.985814][ T5961] udevd[5961]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  162.355047][ T8413] loop5: detected capacity change from 0 to 2048
[  162.359325][ T8413] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  162.370366][ T8413] NILFS (loop5): mounting unchecked fs
[  162.376271][ T6237] udevd[6237]: incorrect nilfs2 checksum on /dev/loop5
[  162.403686][ T6237] udevd[6237]: incorrect nilfs2 checksum on /dev/loop5
[  162.422965][ T8413] NILFS (loop5): recovery complete
[  162.438072][ T8418] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  163.161631][ T8435] fuse: Bad value for 'fd'
[  163.571150][ T8453] Device name not specified.
[  163.571150][ T8453] 
[  164.490864][ T8490] IPv6: NLM_F_CREATE should be specified when creating new route
[  165.223241][   T33] audit: type=1326 audit(1758540501.736:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8499 comm="syz.0.1011" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f41e8b2ae09 code=0x7ffc0000
[  165.247723][   T33] audit: type=1326 audit(1758540501.736:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8499 comm="syz.0.1011" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e8b8ec29 code=0x7ffc0000
[  165.273680][   T33] audit: type=1326 audit(1758540501.736:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8499 comm="syz.0.1011" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e8b8ec29 code=0x7ffc0000
[  165.295553][   T33] audit: type=1326 audit(1758540501.736:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8499 comm="syz.0.1011" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f41e8b2ae09 code=0x7ffc0000
[  165.322699][   T33] audit: type=1326 audit(1758540501.736:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8499 comm="syz.0.1011" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e8b8ec29 code=0x7ffc0000
[  165.344135][   T33] audit: type=1326 audit(1758540501.736:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8499 comm="syz.0.1011" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e8b8ec29 code=0x7ffc0000
[  165.384280][   T33] audit: type=1326 audit(1758540501.736:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8499 comm="syz.0.1011" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f41e8b2ae09 code=0x7ffc0000
[  165.421018][   T33] audit: type=1326 audit(1758540501.736:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8499 comm="syz.0.1011" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f41e8b2ae09 code=0x7ffc0000
[  165.439884][   T33] audit: type=1326 audit(1758540501.736:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8499 comm="syz.0.1011" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f41e8b2ae09 code=0x7ffc0000
[  165.482484][   T33] audit: type=1326 audit(1758540501.736:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8499 comm="syz.0.1011" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f41e8b2ae09 code=0x7ffc0000
[  165.714047][ T8520] netlink: 'syz.4.1021': attribute type 10 has an invalid length.
[  165.736231][ T8520] team0: Port device syz_tun added
[  165.936515][ T8530] Invalid ELF header magic: != ELF
[  166.461114][ T5985] tipc: Subscription rejected, illegal request
[  166.548073][ T8537] loop5: detected capacity change from 0 to 65536
[  166.584536][ T8537] XFS (loop5): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  166.610685][ T8537] XFS (loop5): Ending clean mount
[  166.633461][ T8537] XFS (loop5): Metadata CRC error detected at xfs_agfl_read_verify+0x126/0x1f0, xfs_agfl block 0x3 
[  166.640051][ T8537] XFS (loop5): Unmount and run xfs_repair
[  166.642367][ T8537] XFS (loop5): First 128 bytes of corrupted metadata buffer:
[  166.645255][ T8537] 00000000: 58 41 46 4c 00 00 00 00 d6 f6 9d bd 8c 5d 46 be  XAFL.........]F.
[  166.648826][ T8537] 00000010: b8 8e 92 c0 ae 88 ce b2 00 00 00 00 00 00 00 00  ................
[  166.652198][ T8537] 00000020: 35 fc 5c 25 ff 00 ff ff 00 00 00 05 00 00 00 06  5.\%............
[  166.655631][ T8537] 00000030: 00 00 00 07 00 00 00 08 ff ff ff ff ff ff ff ff  ................
[  166.659861][ T8537] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  166.664737][ T8537] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  166.668274][ T8537] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  166.671744][ T8537] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  166.675365][ T8537] XFS (loop5): metadata I/O error in "xfs_alloc_read_agfl+0x202/0x410" at daddr 0x3 len 1 error 74
[  166.680484][ T8537] XFS (loop5): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8e0 (fs/xfs/xfs_trans_buf.c:311).  Shutting down filesystem.
[  166.686211][ T8537] XFS (loop5): Please unmount the filesystem and rectify the problem(s)
[  166.706598][ T7033] XFS (loop5): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  166.980128][ T8557] usb usb8: check_ctrlrecip: process 8557 (syz.5.1035) requesting ep 01 but needs 81
[  166.983926][ T8557] usb usb8: usbfs: process 8557 (syz.5.1035) did not claim interface 0 before use
[  167.532612][ T8576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1042'.
[  167.536951][ T8576] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1042'.
[  167.540564][ T8576] netlink: 'syz.4.1042': attribute type 32 has an invalid length.
[  168.274414][ T8596] loop5: detected capacity change from 0 to 2048
[  168.303851][ T8596] NILFS (loop5): invalid segment: Checksum error in super root
[  168.315078][ T8596] NILFS (loop5): error -22 while loading super root
[  168.367545][ T8598] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1053'.
[  168.571235][ T8612] loop5: detected capacity change from 0 to 256
[  168.578761][ T8612] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  168.590452][ T8612] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  168.602055][ T8612] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  169.788399][ T5958] Bluetooth: hci2: unexpected event for opcode 0x2062
[  169.796497][ T8644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1072'.
[  171.238772][ T8694] loop5: detected capacity change from 0 to 128
[  171.260310][   T33] kauditd_printk_skb: 313 callbacks suppressed
[  171.260325][   T33] audit: type=1800 audit(1758540507.776:351): pid=8697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1095" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  171.282755][ T8694] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  171.292805][ T8694] ext4 filesystem being mounted at /171/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  171.372593][ T8701] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1094'.
[  171.376251][ T8701] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1094'.
[  171.380623][ T8701] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1094'.
[  171.880430][ T8709] pim6reg: entered allmulticast mode
[  171.908317][ T8709] pim6reg: left allmulticast mode
[  172.655649][ T7033] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  172.717221][ T8730] loop5: detected capacity change from 0 to 2048
[  172.748501][ T8730] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  172.758147][ T8730] UDF-fs: Scanning with blocksize 512 failed
[  172.778462][ T8730] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  172.795656][   T33] audit: type=1800 audit(1758540509.306:352): pid=8730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1105" name="file2" dev="loop5" ino=839 res=0 errno=0
[  172.864382][   T33] audit: type=1326 audit(1758540509.376:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8732 comm="syz.0.1107" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e8b8ec29 code=0x50000
[  172.877569][   T33] audit: type=1326 audit(1758540509.376:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8732 comm="syz.0.1107" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e8b8ec29 code=0x50000
[  172.896687][   T33] audit: type=1326 audit(1758540509.376:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8732 comm="syz.0.1107" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e8b8ec29 code=0x50000
[  172.906978][   T33] audit: type=1326 audit(1758540509.376:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8732 comm="syz.0.1107" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e8b8ec29 code=0x50000
[  172.915229][   T33] audit: type=1326 audit(1758540509.376:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8732 comm="syz.0.1107" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e8b8ec29 code=0x50000
[  172.923626][   T33] audit: type=1326 audit(1758540509.376:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8732 comm="syz.0.1107" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e8b8ec29 code=0x50000
[  172.931689][   T33] audit: type=1326 audit(1758540509.376:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8732 comm="syz.0.1107" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e8b8ec29 code=0x50000
[  172.941767][   T33] audit: type=1326 audit(1758540509.376:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8732 comm="syz.0.1107" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e8b8ec29 code=0x50000
[  173.840539][ T5958] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  173.843617][ T5958] Bluetooth: hci2: Injecting HCI hardware error event
[  173.850044][   T55] Bluetooth: hci2: hardware error 0x00
[  175.312701][ T8787] loop5: detected capacity change from 0 to 256
[  175.344491][ T8787] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d)
[  175.470743][ T6478] IPVS: starting estimator thread 0...
[  175.557769][ T8791] IPVS: using max 43 ests per chain, 103200 per kthread
[  175.632736][ T8797] Can't find a SQUASHFS superblock on nullb0
[  175.850949][ T8810] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1133'.
[  175.854277][ T8810] unsupported nlmsg_type 40
[  175.918884][   T55] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  176.055677][ T8831] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1143'.
[  176.706958][ T8848] loop5: detected capacity change from 0 to 2048
[  176.748615][ T8848] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  176.784288][ T7033] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.904470][  T792] Process accounting resumed
[  177.110255][ T6478] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  177.272763][ T6478] usb 6-1: Using ep0 maxpacket: 8
[  177.279498][ T6478] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  177.283252][ T6478] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.286394][ T6478] usb 6-1: Product: syz
[  177.290487][ T6478] usb 6-1: Manufacturer: syz
[  177.292415][ T6478] usb 6-1: SerialNumber: syz
[  177.316297][ T6478] usb 6-1: config 0 descriptor??
[  177.574957][ T6478] dvb_usb_rtl28xxu 6-1:0.0: chip type detection failed -71
[  177.579089][ T6478] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  177.593927][ T6478] usb 6-1: USB disconnect, device number 7
[  178.205026][ T8895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1170'.
[  178.612019][ T8922] loop5: detected capacity change from 0 to 1024
[  178.637120][ T8922] hfsplus: keylen 65060 too large
[  178.645221][ T8922] hfsplus: xattr searching failed
[  178.654613][   T33] kauditd_printk_skb: 10964 callbacks suppressed
[  178.654628][   T33] audit: type=1804 audit(1758540515.166:11325): pid=8922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1183" name="/newroot/195/file1/file1" dev="loop5" ino=20 res=1 errno=0
[  178.666737][ T8922] hfsplus: keylen 65060 too large
[  178.677507][ T8922] hfsplus: xattr searching failed
[  178.693322][ T8922] hfsplus: keylen 65060 too large
[  179.646907][ T8958] all: renamed from bridge_slave_0 (while UP)
[  179.876507][ T8971] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1207'.
[  180.897810][ T6478] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  180.989033][ T9030] Invalid ELF header magic: != ELF
[  181.050754][ T6478] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  181.054597][ T6478] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  181.064467][ T6478] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  181.069205][ T6478] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  181.072413][ T6478] usb 6-1: SerialNumber: syz
[  181.289631][ T6478] usb 6-1: 0:2 : does not exist
[  181.320029][ T6478] usb 6-1: USB disconnect, device number 8
[  181.357406][ T6237] udevd[6237]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  182.389005][ T9075] raw_sendmsg: syz.5.1254 forgot to set AF_INET. Fix it!
[  182.494615][ T9078] netlink: 'syz.5.1256': attribute type 3 has an invalid length.
[  182.725190][ T9092] veth0: entered promiscuous mode
[  182.733404][ T9094] overlayfs: failed to resolve './file0': -2
[  182.736963][ T9090] veth0: left promiscuous mode
[  184.294977][ T9163] loop5: detected capacity change from 0 to 32768
[  184.306586][ T9163] bcachefs (/dev/loop5): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section
[  184.306586][ T9163] clean (size 2912):
[  184.306586][ T9163] flags:          0
[  184.306586][ T9163] journal_seq:    8
[  184.306586][ T9163] prio_ptrs: 
[  184.306586][ T9163] usage: type=key_version v=0
[  184.306586][ T9163] usage: type=reserved v=0
[  184.306586][ T9163] usage: type=reserved v=0
[  184.306586][ T9163] usage: type=reserved v=0
[  184.306586][ T9163] usage: type=reserved v=0
[  184.306586][ T9163] data_usage: btree: 1/1 [0]=2816
[  184.306586][ T9163] data_usage: journal: 1/1 [0]=0
[  184.306586][ T9163] data_usage: user: 1/1 [0]=32
[  184.306586][ T9163] dev_usage: dev=0  
[  184.306586][ T9163]   free: buckets=83 sectors=0 fragmented=0
[  184.306586][ T9163]   sb: buckets=25 sectors=6152 fragmented=248
[  184.306586][ T9163]   journal: buckets=8 sectors=2048 fragmented=0
[  184.306586][ T9163]   btree: buckets=11 sectors=2816 fragmented=0
[  184.306586][ T9163]   user: buckets=1 sectors=32 fragmented=224
[  184.306586][ T9163]   cached: buckets=0 sectors=0 fragmented=0
[  184.306586][ T9163]   parity: buckets=0 sectors=0 fragmented=0
[  184.306586][ T9163]   stripe: buckets=0 sectors=0 fragmented=0
[  184.306586][ T9163]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[  184.306586][ T9163]   need_discard: buckets=0 sectors=0 fragmented=0
[  184.306586][ T9163] clock: read=0
[  184.306586][ T9163] clock: write=1288
[  184.306586][ T9163] btree_root: btree=extents level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 249e7ae2af8ee3
[  184.306779][ T9163] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  184.792722][ T9197] tmpfs: Bad value for 'mpol'
[  185.068904][ T9211] netlink: 11 bytes leftover after parsing attributes in process `syz.5.1282'.
[  185.720966][ T9223] loop5: detected capacity change from 0 to 32768
[  185.787404][ T9223] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  185.811994][ T9223] XFS (loop5): Ending clean mount
[  185.840286][ T9223] XFS (loop5): Quotacheck needed: Please wait.
[  185.859880][ T9247] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  185.907146][ T9223] XFS (loop5): Quotacheck: Done.
[  185.971141][ T7033] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  186.542637][ T9249] overlayfs: failed to clone upperpath
[  186.613228][ T9268] _Z`Ԁ@: entered promiscuous mode
[  186.938012][ T9282] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  187.979382][ T9308] loop5: detected capacity change from 0 to 256
[  188.022541][ T9308] FAT-fs (loop5): Directory bread(block 64) failed
[  188.028264][ T9308] FAT-fs (loop5): Directory bread(block 65) failed
[  188.032665][ T9308] FAT-fs (loop5): Directory bread(block 66) failed
[  188.035419][ T9308] FAT-fs (loop5): Directory bread(block 67) failed
[  188.038391][ T9308] FAT-fs (loop5): Directory bread(block 68) failed
[  188.041035][ T9308] FAT-fs (loop5): Directory bread(block 69) failed
[  188.043815][ T9308] FAT-fs (loop5): Directory bread(block 70) failed
[  188.046332][ T9308] FAT-fs (loop5): Directory bread(block 71) failed
[  188.050502][ T9308] FAT-fs (loop5): Directory bread(block 72) failed
[  188.053223][ T9308] FAT-fs (loop5): Directory bread(block 73) failed
[  188.914918][ T9328] loop5: detected capacity change from 0 to 512
[  188.920099][ T9328] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  188.932524][ T9328] EXT4-fs (loop5): 1 truncate cleaned up
[  188.945739][ T9328] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  189.025054][ T7033] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.164488][ T9384] loop5: detected capacity change from 0 to 32768
[  191.212830][ T9384] OCFS2: ERROR (device loop5): int ocfs2_validate_extent_block(struct super_block *, struct buffer_head *): Extent block #17024 has bad signature 
[  191.222394][ T9384] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  191.226427][ T9384] OCFS2: File system is now read-only.
[  191.230761][ T9384] (syz.5.1353,9384,0):__ocfs2_find_path:1852 ERROR: status = -30
[  191.235308][ T9384] (syz.5.1353,9384,0):ocfs2_find_leaf:1948 ERROR: status = -30
[  191.239413][ T9384] (syz.5.1353,9384,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30
[  191.242837][ T9384] (syz.5.1353,9384,0):ocfs2_get_clusters:634 ERROR: status = -30
[  191.245921][ T9384] (syz.5.1353,9384,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30
[  191.250946][ T9384] (syz.5.1353,9384,0):ocfs2_map_slot_buffers:378 ERROR: status = -30
[  191.254281][ T9384] (syz.5.1353,9384,0):ocfs2_init_slot_info:426 ERROR: status = -30
[  191.258901][ T9384] (syz.5.1353,9384,0):ocfs2_initialize_super:2222 ERROR: status = -30
[  191.263065][ T9384] (syz.5.1353,9384,0):ocfs2_fill_super:1177 ERROR: status = -30
[  191.570751][ T9398] loop5: detected capacity change from 0 to 4096
[  191.574379][ T9398] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512).
[  192.305738][ T9406] RDS: rds_bind could not find a transport for 0:0:4::1, load rds_tcp or rds_rdma?
[  193.504993][ T9438] loop5: detected capacity change from 0 to 4096
[  193.534242][ T9438] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  193.885816][ T9457] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1386'.
[  194.014304][ T9463] loop5: detected capacity change from 0 to 128
[  194.034235][ T9463] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  194.042050][ T9463] ext4 filesystem being mounted at /278/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  194.081747][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  194.084678][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  194.093729][ T7033] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  194.155470][ T9467] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1390'.
[  194.209848][ T9469] loop5: detected capacity change from 0 to 1024
[  194.324623][   T36] hfsplus: b-tree write err: -5, ino 4
[  194.651574][ T9482] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.655819][ T9482] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.804986][ T9482] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  194.814642][ T9482] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  194.974302][ T9485] syz_tun: refused to change device tx_queue_len
[  194.978936][ T9485] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  194.985095][ T5952] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  194.998964][ T5952] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  195.004347][ T5952] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  195.013417][ T5952] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  195.062336][ T9489] loop5: detected capacity change from 0 to 256
[  195.594118][ T9519] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1410'.
[  196.116966][   T33] audit: type=1326 audit(1758540532.626:11326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9539 comm="syz.4.1424" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f20b838ec29 code=0x0
[  196.884806][ T9567] loop5: detected capacity change from 0 to 4096
[  196.911820][ T9567] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  196.937063][ T9567] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  196.979277][ T7033] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.499894][ T9585] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1441'.
[  197.536726][ T9587] netlink: 'syz.0.1442': attribute type 3 has an invalid length.
[  197.602505][ T9591] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1444'.
[  197.887764][ T5984] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[  198.040079][ T5984] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  198.044365][ T5984] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  198.049694][ T5984] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  198.053389][ T5984] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.063396][ T5984] usb 6-1: config 0 descriptor??
[  198.076371][ T5984] hub 6-1:0.0: USB hub found
[  198.154436][ T9620] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1458'.
[  198.263859][ T9626] sctp: [Deprecated]: syz.0.1461 (pid 9626) Use of struct sctp_assoc_value in delayed_ack socket option.
[  198.263859][ T9626] Use struct sctp_sack_info instead
[  198.277358][ T5984] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  198.684508][ T5984] usbhid 6-1:0.0: can't add hid device: -71
[  198.686969][ T5984] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  198.732630][ T5984] usb 6-1: USB disconnect, device number 9
[  198.744465][ T9634] overlayfs: failed to clone upperpath
[  198.857856][ T9640] overlayfs: failed to clone upperpath
[  198.862861][ T9640] overlayfs: failed to clone upperpath
[  200.603264][ T9669] netlink: 'syz.5.1481': attribute type 11 has an invalid length.
[  201.550015][ T9688] fuse: Bad value for 'fd'
[  201.602770][ T9695] batadv_slave_1: entered promiscuous mode
[  201.643980][ T9694] batadv_slave_1: left promiscuous mode
[  201.952546][ T9725] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1505'.
[  201.956241][ T9725] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1505'.
[  202.012963][ T9727] loop5: detected capacity change from 0 to 2048
[  202.018990][ T9727] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  202.025668][ T9727] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  202.029231][ T9727] UDF-fs: Scanning with blocksize 512 failed
[  202.040760][ T9727] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  202.479560][    T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  202.638499][    T9] usb 6-1: Using ep0 maxpacket: 16
[  202.644347][    T9] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  202.649680][    T9] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  202.659470][    T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  202.671827][    T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  202.675242][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.684347][    T9] usb 6-1: Product: syz
[  202.686006][    T9] usb 6-1: Manufacturer: syz
[  202.689017][    T9] usb 6-1: SerialNumber: syz
[  203.150464][    T9] usb 6-1: 0:2 : does not exist
[  203.165098][    T9] usb 6-1: USB disconnect, device number 10
[  203.206606][ T6237] udevd[6237]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  203.651770][ T9796] netlink: 'syz.4.1539': attribute type 4 has an invalid length.
[  203.679912][ T9796] netlink: 'syz.4.1539': attribute type 4 has an invalid length.
[  203.721315][ T9800] loop5: detected capacity change from 0 to 128
[  203.849832][ T5967] bond0: (slave bond_slave_0): interface is now down
[  203.852600][ T5967] bond0: (slave bond_slave_1): interface is now down
[  203.855302][ T5967] bond0: (slave wlan1): interface is now down
[  203.857828][ T9804] bond0: entered allmulticast mode
[  203.864546][ T9804] bond_slave_0: entered allmulticast mode
[  203.874296][ T9804] bond_slave_1: entered allmulticast mode
[  203.876490][ T9804] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  203.879666][ T5967] bond0: (slave bond_slave_0): interface is now down
[  203.882357][ T5967] bond0: (slave bond_slave_1): interface is now down
[  203.885772][ T5967] bond0: (slave wlan1): interface is now down
[  203.902925][ T5967] bond0: now running without any active interface!
[  204.907270][ T9854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1566'.
[  206.332402][ T9887] netlink: 'syz.4.1578': attribute type 4 has an invalid length.
[  206.460990][ T9895] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1582'.
[  206.464743][ T9895] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1582'.
[  206.473798][ T9895] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1582'.
[  206.480664][ T9895] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1582'.
[  206.489336][ T9895] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1582'.
[  206.573630][ T9897] overlayfs: failed to clone upperpath
[  206.952185][ T9911] pimreg: entered allmulticast mode
[  206.955809][ T9911] pimreg: left allmulticast mode
[  207.932818][ T9938] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1601'.
[  208.372990][ T9960] overlayfs: failed to clone upperpath
[  210.946425][T10013] overlay: Unknown parameter '/'
[  211.046118][T10013] sp0: Synchronizing with TNC
[  211.489049][T10010] [U] 
[  212.468235][T10033] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (15)
[  212.639150][T10044] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1647'.
[  212.793082][T10052] af_packet: tpacket_rcv: packet too big, clamped from 4710 to 4294967272. macoff=96
[  213.904010][T10079] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1664'.
[  215.663611][T10121] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1681'.
[  215.860098][T10141] loop5: detected capacity change from 0 to 128
[  216.544703][T10168] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  216.548411][T10168] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  217.896909][T10196] loop5: detected capacity change from 0 to 32768
[  217.945135][T10196] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  217.973668][T10196] XFS (loop5): Ending clean mount
[  217.980926][T10196] XFS (loop5): Quotacheck needed: Please wait.
[  218.018572][T10196] XFS (loop5): Quotacheck: Done.
[  218.064414][ T7033] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  218.300511][T10223] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun!
[  218.366978][T10229] netlink: 260 bytes leftover after parsing attributes in process `syz.5.1722'.
[  218.529746][T10238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1725'.
[  218.708327][  T792] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  218.757151][T10245] syz_tun: entered allmulticast mode
[  218.764132][T10244] syz_tun: left allmulticast mode
[  218.878594][  T792] usb 6-1: Using ep0 maxpacket: 8
[  218.883980][  T792] usb 6-1: unable to get BOS descriptor or descriptor too short
[  218.891923][  T792] usb 6-1: config 9 has an invalid interface number: 240 but max is 0
[  218.897889][  T792] usb 6-1: config 9 has no interface number 0
[  218.899857][  T792] usb 6-1: config 9 interface 240 has no altsetting 0
[  218.904556][  T792] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=74.94
[  218.908291][  T792] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.911319][  T792] usb 6-1: Product: syz
[  218.913034][  T792] usb 6-1: Manufacturer: syz
[  218.914721][  T792] usb 6-1: SerialNumber: syz
[  219.129272][  T792] usbtest 6-1:9.240: couldn't get endpoints, -22
[  219.131731][  T792] usbtest 6-1:9.240: probe with driver usbtest failed with error -22
[  219.139067][  T792] usb 6-1: USB disconnect, device number 11
[  220.007787][  T792] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  220.177753][  T792] usb 6-1: Using ep0 maxpacket: 8
[  220.183987][  T792] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  220.187974][  T792] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.191246][  T792] usb 6-1: Product: syz
[  220.193099][  T792] usb 6-1: Manufacturer: syz
[  220.195130][  T792] usb 6-1: SerialNumber: syz
[  220.203435][  T792] usb 6-1: config 0 descriptor??
[  220.209659][  T792] gspca_main: sonixj-2.14.0 probing 0c45:613e
[  221.410504][ T5741] usb 6-1: USB disconnect, device number 12
[  221.452689][T10299] netlink: 146780 bytes leftover after parsing attributes in process `syz.4.1751'.
[  221.891657][T10309] trusted_key: syz.0.1756 sent an empty control message without MSG_MORE.
[  222.325831][T10321] loop5: detected capacity change from 0 to 32768
[  222.354575][T10321] XFS (loop5): DAX unsupported by block device. Turning off DAX.
[  222.368643][T10321] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  222.383753][T10321] XFS (loop5): Ending clean mount
[  222.392041][T10321] XFS (loop5): Quotacheck needed: Please wait.
[  222.399506][   T40] XFS (loop5): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_cntbt block 0x10 
[  222.403242][   T40] XFS (loop5): Unmount and run xfs_repair
[  222.406518][   T40] XFS (loop5): First 128 bytes of corrupted metadata buffer:
[  222.410175][   T40] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  222.412903][   T40] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  222.415949][   T40] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  222.419706][   T40] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02  .... ......N....
[  222.422737][   T40] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  222.425304][   T40] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00  ................
[  222.428568][   T40] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  222.434741][   T40] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  222.437560][   T40] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x10 len 8 error 74
[  222.448276][T10321] XFS (loop5): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  222.525971][ T7033] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  222.542343][ T7033] XFS (loop5): Uncorrected metadata errors detected; please run xfs_repair.
[  223.715083][T10376] team0: Cannot enslave team device to itself
[  224.460820][   T33] audit: type=1326 audit(1758540560.946:11327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10388 comm="syz.5.1788" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f2d8ec29 code=0x7ffc0000
[  224.507807][   T33] audit: type=1326 audit(1758540560.946:11328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10388 comm="syz.5.1788" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f2d8ec29 code=0x7ffc0000
[  224.536937][   T33] audit: type=1326 audit(1758540560.946:11329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10388 comm="syz.5.1788" exe="/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f51f2d8ec29 code=0x7ffc0000
[  224.577429][   T33] audit: type=1326 audit(1758540560.946:11330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10388 comm="syz.5.1788" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f2d8ec29 code=0x7ffc0000
[  224.604956][   T33] audit: type=1326 audit(1758540560.946:11331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10388 comm="syz.5.1788" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f2d8ec29 code=0x7ffc0000
[  224.715365][   T55] Bluetooth: hci1: unexpected Set CIG Parameters response data
[  225.596063][T10417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1800'.
[  226.008753][T10434] vivid-000: disconnect
[  226.047431][ T6478] vivid-000: reconnect
[  226.192720][T10443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1811'.
[  226.207969][   T33] audit: type=1326 audit(1758540562.656:11332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10440 comm="syz.4.1810" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b838ec29 code=0x7ffc0000
[  226.265931][   T33] audit: type=1326 audit(1758540562.656:11333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10440 comm="syz.4.1810" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b838ec29 code=0x7ffc0000
[  226.280050][   T33] audit: type=1326 audit(1758540562.656:11334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10440 comm="syz.4.1810" exe="/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f20b838ec29 code=0x7ffc0000
[  226.299497][   T33] audit: type=1326 audit(1758540562.656:11335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10440 comm="syz.4.1810" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b838ec29 code=0x7ffc0000
[  226.524373][   T33] audit: type=1326 audit(1758540562.656:11336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10440 comm="syz.4.1810" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b838ec29 code=0x7ffc0000
[  226.960239][T10467] netlink: 'syz.0.1819': attribute type 3 has an invalid length.
[  228.797982][   T55] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  228.801534][   T55] Bluetooth: hci1: Injecting HCI hardware error event
[  228.808506][ T5958] Bluetooth: hci1: hardware error 0x00
[  229.116176][T10527] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1836'.
[  229.127419][T10526] loop5: detected capacity change from 0 to 4096
[  229.204548][T10526] ntfs3(loop5): ino=1e, "file1" attr_set_size
[  229.207171][T10526] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  229.344550][T10541] loop5: detected capacity change from 0 to 4096
[  229.387564][T10541] NILFS (loop5): invalid segment: Checksum error in segment payload
[  229.402142][T10541] NILFS (loop5): trying rollback from an earlier position
[  229.422060][T10541] NILFS (loop5): recovery complete
[  229.430224][T10548] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  229.523010][T10554] comedi comedi0: dmm32at: I/O port conflict (0x3,16)
[  229.940191][ T5984] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  230.097822][ T5984] usb 6-1: Using ep0 maxpacket: 32
[  230.102081][ T5984] usb 6-1: config 0 has an invalid interface number: 12 but max is 0
[  230.105222][ T5984] usb 6-1: config 0 has no interface number 0
[  230.107540][ T5984] usb 6-1: config 0 interface 12 has no altsetting 0
[  230.123014][ T5984] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  230.125876][ T5984] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.129366][ T5984] usb 6-1: Product: syz
[  230.130756][ T5984] usb 6-1: Manufacturer: syz
[  230.132520][ T5984] usb 6-1: SerialNumber: syz
[  230.141492][ T5984] usb 6-1: config 0 descriptor??
[  230.355109][   T33] audit: type=1326 audit(1758540566.866:11337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10583 comm="syz.0.1862" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e8b8ec29 code=0x7ffc0000
[  230.365163][   T33] audit: type=1326 audit(1758540566.866:11338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10583 comm="syz.0.1862" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e8b8ec29 code=0x7ffc0000
[  230.375739][   T33] audit: type=1326 audit(1758540566.866:11339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10583 comm="syz.0.1862" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e8b8ec29 code=0x7ffc0000
[  230.388147][   T33] audit: type=1326 audit(1758540566.866:11340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10583 comm="syz.0.1862" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f41e8b8ec29 code=0x7ffc0000
[  230.396144][   T33] audit: type=1326 audit(1758540566.866:11341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10583 comm="syz.0.1862" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e8b8ec29 code=0x7ffc0000
[  230.406523][   T33] audit: type=1326 audit(1758540566.876:11342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10583 comm="syz.0.1862" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e8b8ec29 code=0x7ffc0000
[  230.418600][   T33] audit: type=1326 audit(1758540566.876:11343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10583 comm="syz.0.1862" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e8b8ec29 code=0x7ffc0000
[  230.425718][   T33] audit: type=1326 audit(1758540566.876:11344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10583 comm="syz.0.1862" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e8b8ec29 code=0x7ffc0000
[  230.444868][   T33] audit: type=1326 audit(1758540566.876:11345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10583 comm="syz.0.1862" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e8b8ec29 code=0x7ffc0000
[  230.457810][   T33] audit: type=1326 audit(1758540566.876:11346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10583 comm="syz.0.1862" exe="/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f41e8b8ec29 code=0x7ffc0000
[  230.571093][T10591] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1865'.
[  230.877928][ T5958] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  231.091855][T10613] netlink: 'syz.0.1875': attribute type 4 has an invalid length.
[  231.176646][ T5984] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  231.179426][ T5984] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71
[  231.182112][ T5984] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  231.184609][ T5984] f81534 6-1:0.12: probe with driver f81534 failed with error -71
[  231.191495][ T5984] usb 6-1: USB disconnect, device number 13
[  232.157909][    T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  232.177926][T10631] overlayfs: failed to clone upperpath
[  232.307848][    T9] usb 6-1: Using ep0 maxpacket: 32
[  232.314113][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  232.327833][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  232.331915][    T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  232.335361][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.352921][    T9] usb 6-1: config 0 descriptor??
[  232.360304][    T9] hub 6-1:0.0: USB hub found
[  232.554198][T10639] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1887'.
[  232.569569][    T9] hub 6-1:0.0: 1 port detected
[  232.661353][T10647] bridge0: port 3(vxlan0) entered blocking state
[  232.664349][T10647] bridge0: port 3(vxlan0) entered disabled state
[  232.666583][T10647] vxlan0: entered allmulticast mode
[  232.670293][T10647] vxlan0: entered promiscuous mode
[  232.777932][    T9] hub 6-1:0.0: hub_hub_status failed (err = -71)
[  232.780963][    T9] hub 6-1:0.0: config failed, can't get hub status (err -71)
[  232.791922][    T9] usbhid 6-1:0.0: can't add hid device: -71
[  232.794344][    T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  232.822204][    T9] usb 6-1: USB disconnect, device number 14
[  232.921426][T10667] gtp0: entered promiscuous mode
[  233.345847][T10683] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1907'.
[  233.452751][T10693] loop5: detected capacity change from 0 to 64
[  233.463436][T10693] minix: Unknown parameter '(+*tm2 ӉѨ.̓?y9|.uKL*"4/&^-rx:RnN[xhB*qB'
[  233.646448][T10693] loop5: detected capacity change from 0 to 40427
[  233.650514][T10693] F2FS-fs (loop5): build fault injection rate: 14
[  233.652606][T10693] F2FS-fs (loop5): build fault injection type: 0x3bfe8c
[  233.660680][T10693] F2FS-fs (loop5): invalid crc value
[  233.668968][    C0] F2FS-fs (loop5): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  233.676405][    C0] F2FS-fs (loop5): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  233.713502][T10693] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  233.716431][T10693] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  233.723578][T10693] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  233.769679][T10693] F2FS-fs (loop5): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  233.775579][T10693] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of f2fs_convert_inline_inode+0x6bd/0x880
[  233.802976][ T7033] syz-executor: attempt to access beyond end of device
[  233.802976][ T7033] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  233.811824][ T7033] CPU: 0 UID: 0 PID: 7033 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  233.811838][ T7033] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  233.811844][ T7033] Call Trace:
[  233.811848][ T7033]  <TASK>
[  233.811852][ T7033]  dump_stack_lvl+0x189/0x250
[  233.811868][ T7033]  ? __pfx_dump_stack_lvl+0x10/0x10
[  233.811878][ T7033]  ? __pfx_queue_work_on+0x10/0x10
[  233.811886][ T7033]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  233.811900][ T7033]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  233.811918][ T7033]  f2fs_handle_critical_error+0x37c/0x540
[  233.811934][ T7033]  f2fs_write_end_io+0x886/0xb60
[  233.811951][ T7033]  __submit_merged_bio+0x27a/0x6a0
[  233.811972][ T7033]  __submit_merged_write_cond+0x255/0x530
[  233.811987][ T7033]  f2fs_write_data_pages+0x261d/0x3000
[  233.811994][ T7033]  ? __lock_acquire+0xab9/0xd20
[  233.812023][ T7033]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  233.812068][ T7033]  ? __lock_acquire+0xab9/0xd20
[  233.812083][ T7033]  ? do_raw_spin_lock+0x121/0x290
[  233.812099][ T7033]  ? do_raw_spin_unlock+0x4d/0x240
[  233.812113][ T7033]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  233.812125][ T7033]  do_writepages+0x32e/0x550
[  233.812149][ T7033]  ? do_raw_spin_unlock+0x4d/0x240
[  233.812162][ T7033]  filemap_fdatawrite+0x199/0x240
[  233.812173][ T7033]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  233.812226][ T7033]  ? do_raw_spin_unlock+0x4d/0x240
[  233.812238][ T7033]  f2fs_sync_dirty_inodes+0x31f/0x830
[  233.812255][ T7033]  f2fs_write_checkpoint+0x95a/0x1df0
[  233.812279][ T7033]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  233.812344][ T7033]  ? kill_f2fs_super+0x298/0x6c0
[  233.812356][ T7033]  kill_f2fs_super+0x2c3/0x6c0
[  233.812368][ T7033]  ? __pfx_kill_f2fs_super+0x10/0x10
[  233.812375][ T7033]  ? radix_tree_delete_item+0x2b6/0x400
[  233.812388][ T7033]  ? shrinker_free+0x2ce/0x3e0
[  233.812398][ T7033]  deactivate_locked_super+0xbc/0x130
[  233.812409][ T7033]  cleanup_mnt+0x425/0x4c0
[  233.812419][ T7033]  ? lockdep_hardirqs_on+0x9c/0x150
[  233.812429][ T7033]  task_work_run+0x1d4/0x260
[  233.812442][ T7033]  ? __pfx_task_work_run+0x10/0x10
[  233.812451][ T7033]  ? __x64_sys_umount+0x122/0x160
[  233.812465][ T7033]  ? exit_to_user_mode_loop+0x40/0x110
[  233.812480][ T7033]  exit_to_user_mode_loop+0xec/0x110
[  233.812497][ T7033]  do_syscall_64+0x2bd/0x3b0
[  233.812508][ T7033]  ? lockdep_hardirqs_on+0x9c/0x150
[  233.812522][ T7033]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.812534][ T7033]  ? exc_page_fault+0x9f/0xf0
[  233.812544][ T7033]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.812551][ T7033] RIP: 0033:0x7f51f2d8ff57
[  233.812560][ T7033] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  233.812567][ T7033] RSP: 002b:00007fff5a19d568 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  233.812576][ T7033] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f51f2d8ff57
[  233.812581][ T7033] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff5a19d620
[  233.812586][ T7033] RBP: 00007fff5a19d620 R08: 0000000000000000 R09: 0000000000000000
[  233.812590][ T7033] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff5a19e6b0
[  233.812595][ T7033] R13: 00007f51f2e11c2d R14: 00000000000390cd R15: 00007fff5a19e6f0
[  233.812610][ T7033]  </TASK>
[  233.812614][ T7033] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  236.069553][T10789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1951'.
[  237.207736][    T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  237.449488][    T9] usb 6-1: config 0 has an invalid interface number: 17 but max is 0
[  237.452583][    T9] usb 6-1: config 0 has no interface number 0
[  237.454903][    T9] usb 6-1: config 0 interface 17 altsetting 4 bulk endpoint 0x8F has invalid maxpacket 64
[  237.468281][    T9] usb 6-1: config 0 interface 17 has no altsetting 0
[  237.470731][    T9] usb 6-1: New USB device found, idVendor=0bb4, idProduct=0a21, bcdDevice=e2.be
[  237.474279][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.488684][    T9] usb 6-1: config 0 descriptor??
[  237.497804][T10810] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  237.719806][    T9] usb 6-1: USB disconnect, device number 15
[  238.566451][T10856] loop5: detected capacity change from 0 to 512
[  238.587502][T10856] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.1981: bg 0: block 16: invalid block bitmap
[  238.600380][T10856] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  238.604179][T10856] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.1981: attempt to clear invalid blocks 1669132790 len 1
[  238.619319][T10856] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1981: invalid indirect mapped block 4294967295 (level 1)
[  238.630370][T10856] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1981: invalid indirect mapped block 4294967295 (level 2)
[  238.637554][T10856] EXT4-fs (loop5): 1 truncate cleaned up
[  238.642182][T10856] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  238.683308][ T7033] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  239.393751][T10872] overlayfs: failed to clone upperpath
[  240.615534][T10909] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2002'.
[  242.244129][   T55] Bluetooth: hci0: command 0x0406 tx timeout
[  242.378391][ T6478] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  242.542563][ T6478] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  242.545662][ T6478] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.549219][ T6478] usb 6-1: Product: syz
[  242.551286][ T6478] usb 6-1: Manufacturer: syz
[  242.552919][ T6478] usb 6-1: SerialNumber: syz
[  242.560047][ T6478] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  242.595435][ T6478] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  243.002263][    T9] usb 6-1: USB disconnect, device number 16
[  243.381780][T10963] netlink: 'syz.4.2027': attribute type 10 has an invalid length.
[  243.395378][T10963] team0: Port device dummy0 added
[  243.644952][T10975] loop5: detected capacity change from 0 to 1024
[  243.678949][ T6478] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  243.681316][ T6478] ath9k_htc: Failed to initialize the device
[  243.707421][    T9] usb 6-1: ath9k_htc: USB layer deinitialized
[  243.761004][T10984] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  243.806153][T10986] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2039'.
[  243.811080][T10986] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2039'.
[  243.983798][T10999] loop5: detected capacity change from 0 to 512
[  243.992205][T10999] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  243.996871][T10999] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.2044: invalid indirect mapped block 8 (level 2)
[  244.003241][T10999] EXT4-fs (loop5): Remounting filesystem read-only
[  244.005796][T10999] EXT4-fs (loop5): 1 truncate cleaned up
[  244.009332][T10999] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  244.022508][T10999] EXT4-fs (loop5): changing journal_checksum during remount not supported; ignoring
[  244.025900][T10999] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000.
[  244.050382][ T7033] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.787820][   T33] kauditd_printk_skb: 4 callbacks suppressed
[  244.787834][   T33] audit: type=1326 audit(1758540581.296:11351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11012 comm="syz.4.2049" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b838ec29 code=0x7ffc0000
[  244.807392][   T33] audit: type=1326 audit(1758540581.296:11352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11012 comm="syz.4.2049" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b838ec29 code=0x7ffc0000
[  244.821506][   T33] audit: type=1326 audit(1758540581.316:11353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11012 comm="syz.4.2049" exe="/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f20b838ec29 code=0x7ffc0000
[  244.842216][   T33] audit: type=1326 audit(1758540581.316:11354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11012 comm="syz.4.2049" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b838ec29 code=0x7ffc0000
[  244.851043][   T33] audit: type=1326 audit(1758540581.316:11355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11012 comm="syz.4.2049" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b838ec29 code=0x7ffc0000
[  244.862056][   T33] audit: type=1326 audit(1758540581.316:11356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11012 comm="syz.4.2049" exe="/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f20b838ec29 code=0x7ffc0000
[  244.872647][   T33] audit: type=1326 audit(1758540581.316:11357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11012 comm="syz.4.2049" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b838ec29 code=0x7ffc0000
[  244.881126][   T33] audit: type=1326 audit(1758540581.316:11358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11012 comm="syz.4.2049" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b838ec29 code=0x7ffc0000
[  246.298568][T11037] overlayfs: failed to clone upperpath
[  246.352670][T11042] netlink: 146840 bytes leftover after parsing attributes in process `syz.0.2061'.
[  247.083603][T11060] loop5: detected capacity change from 0 to 32768
[  247.107074][T11060] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[  247.130541][T11060] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  247.180518][ T7033] ocfs2: Unmounting device (7,5) on (node local)
[  247.303458][T11081] fuse: Bad value for 'fd'
[  247.347138][T11084] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[  247.815251][T11112] loop5: detected capacity change from 0 to 32768
[  249.089375][T11127] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2099'.
[  249.126994][T11131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2100'.
[  250.011776][T11146] 9pnet_fd: p9_fd_create_unix (11146): problem connecting socket: ./file0/file0: -2
[  250.137564][T11156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2110'.
[  250.144681][T11156] bridge0: entered promiscuous mode
[  250.146495][T11156] macsec1: entered allmulticast mode
[  250.148814][T11156] bridge0: entered allmulticast mode
[  250.152006][T11156] bridge0: port 3(macsec1) entered blocking state
[  250.154218][T11156] bridge0: port 3(macsec1) entered disabled state
[  250.162847][T11156] bridge0: left allmulticast mode
[  250.164890][T11156] bridge0: left promiscuous mode
[  250.439214][T11169] sock: sock_set_timeout: `syz.4.2115' (pid 11169) tries to set negative timeout
[  251.183666][T11199] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2128'.
[  251.231194][T11203] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2130'.
[  251.680404][T11219] loop5: detected capacity change from 0 to 256
[  251.699060][T11219] MINIX-fs: mounting file system with errors, running fsck is recommended
[  251.714652][T11219] MINIX-fs warning: remounting fs with errors, running fsck is recommended
[  252.006926][T11225] loop5: detected capacity change from 0 to 32768
[  253.508620][T11254] overlayfs: failed to clone upperpath
[  255.244161][T11281] netlink: 'syz.0.2165': attribute type 5 has an invalid length.
[  255.401797][T11281] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  255.407836][T11281] macsec1: entered promiscuous mode
[  255.420858][T11281] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  255.436228][T11283] loop5: detected capacity change from 0 to 40427
[  255.450204][T11283] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  255.452881][T11283] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  255.543016][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  255.550316][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  255.646520][T11286] delete_channel: no stack
[  255.686937][T11283] F2FS-fs (loop5): invalid crc value
[  255.789500][T11283] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  255.801852][T11283] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  255.804495][T11283] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  257.036841][T11313] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2176'.
[  257.125556][T11315] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  257.794356][T11321] netlink: 'syz.5.2179': attribute type 21 has an invalid length.
[  257.797390][T11321] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2179'.
[  257.810981][T11321] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2179'.
[  258.239694][   T33] audit: type=1326 audit(1758540594.636:11359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11333 comm="syz.4.2186" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b838ec29 code=0x7ffc0000
[  258.264002][   T33] audit: type=1326 audit(1758540594.636:11360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11333 comm="syz.4.2186" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b838ec29 code=0x7ffc0000
[  258.280473][   T33] audit: type=1326 audit(1758540594.646:11361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11333 comm="syz.4.2186" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b838ec29 code=0x7ffc0000
[  258.305116][   T33] audit: type=1326 audit(1758540594.646:11362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11333 comm="syz.4.2186" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b838ec29 code=0x7ffc0000
[  258.335671][   T33] audit: type=1326 audit(1758540594.646:11363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11333 comm="syz.4.2186" exe="/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f20b838ec29 code=0x7ffc0000
[  258.354746][   T33] audit: type=1326 audit(1758540594.646:11364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11333 comm="syz.4.2186" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b838ec29 code=0x7ffc0000
[  258.374915][   T33] audit: type=1326 audit(1758540594.646:11365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11333 comm="syz.4.2186" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b838ec29 code=0x7ffc0000
[  258.389510][   T33] audit: type=1326 audit(1758540594.646:11366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11333 comm="syz.4.2186" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b838ec29 code=0x7ffc0000
[  258.397278][   T33] audit: type=1326 audit(1758540594.646:11367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11333 comm="syz.4.2186" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f20b838ec29 code=0x7ffc0000
[  258.409747][   T33] audit: type=1326 audit(1758540594.646:11368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11333 comm="syz.4.2186" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f20b838ec29 code=0x7ffc0000
[  258.468295][ T5741] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  258.483965][T11345] tipc: Invalid UDP bearer configuration
[  258.484014][T11345] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  258.629423][ T5741] usb 6-1: Using ep0 maxpacket: 32
[  258.636696][ T5741] usb 6-1: config 2 has an invalid interface number: 45 but max is 0
[  258.641154][ T5741] usb 6-1: config 2 has no interface number 0
[  258.644293][ T5741] usb 6-1: config 2 interface 45 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  258.649168][ T5741] usb 6-1: config 2 interface 45 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  258.655133][ T5741] usb 6-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92
[  258.659041][ T5741] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.662286][ T5741] usb 6-1: Product: syz
[  258.663931][ T5741] usb 6-1: Manufacturer: syz
[  258.665754][ T5741] usb 6-1: SerialNumber: syz
[  258.679431][ T5741] kobil_sct 6-1:2.45: KOBIL USB smart card terminal converter detected
[  258.688410][ T5741] usb 6-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  258.879824][ T5741] usb 6-1: USB disconnect, device number 17
[  258.893984][ T5741] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  258.903616][ T5741] kobil_sct 6-1:2.45: device disconnected
[  259.598957][T11363] netlink: 277 bytes leftover after parsing attributes in process `syz.5.2199'.
[  260.176497][T11383] fuse: Bad value for 'fd'
[  260.294137][T11385] overlayfs: failed to clone upperpath
[  260.469198][T11387] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2208'.
[  260.761081][T11402] loop5: detected capacity change from 0 to 256
[  261.023941][T11419] futex_wake_op: syz.5.2223 tries to shift op by -1; fix this program
[  261.080969][T11423] 9pnet_virtio: no channels available for device 127.0.0.1
[  261.321378][ T5958] Bluetooth: hci0: unexpected event for opcode 0x041c
[  261.926751][T11449] loop5: detected capacity change from 0 to 4096
[  261.973812][T11449] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  262.061914][T11453] capability: warning: `syz.5.2236' uses 32-bit capabilities (legacy support in use)
[  263.221971][ T7033] ntfs3(loop5): ino=9, ntfs_sync_fs failed, -22.
[  263.798018][T11497] overlayfs: failed to resolve './bus': -2
[  264.434604][T11515] xt_time: invalid argument - start or stop time greater than 23:59:59
[  264.637528][T11554] overlayfs: conflicting options: metacopy=on,redirect_dir=follow
[  264.700002][T11562] netlink: 'syz.0.2275': attribute type 4 has an invalid length.
[  264.919155][  T792] usb 6-1: new low-speed USB device number 18 using dummy_hcd
[  264.956776][T11582] netlink: 'syz.4.2285': attribute type 10 has an invalid length.
[  264.981376][T11582] team0: Port device geneve1 added
[  265.069700][  T792] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  265.074732][  T792] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  265.078653][  T792] usb 6-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00
[  265.081744][  T792] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.087450][  T792] usb 6-1: config 0 descriptor??
[  265.504327][  T792] logitech-djreceiver 0003:046D:C52F.0002: ignoring exceeding usage max
[  265.537165][  T792] logitech-djreceiver 0003:046D:C52F.0002: hidraw0: USB HID v0.00 Device [HID 046d:c52f] on usb-dummy_hcd.5-1/input0
[  265.746652][T11558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  265.767589][T11558] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  265.783070][T11558] loop5: detected capacity change from 0 to 128
[  266.253819][T11558] vfat: Unknown parameter '18446744073709551615'
[  266.272295][  T792] usb 6-1: USB disconnect, device number 18
[  267.514630][ T5984] libceph: connect (1)[c::]:6789 error -101
[  267.528495][ T5984] libceph: mon0 (1)[c::]:6789 connect error
[  267.626950][T11625] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20000
[  267.659499][ T5984] libceph: connect (1)[c::]:6789 error -101
[  267.661924][ T5984] libceph: mon0 (1)[c::]:6789 connect error
[  267.672313][T11625] overlayfs: failed to clone upperpath
[  267.820576][T11621] ceph: No mds server is up or the cluster is laggy
[  268.731625][T11645] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  268.826728][T11647] loop5: detected capacity change from 0 to 4096
[  268.851293][T11647] ntfs3(loop5): ino=b, mi_enum_attr
[  268.853312][T11647] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  268.855829][T11647] ntfs3(loop5): Failed to load $Extend (-22).
[  268.858059][T11647] ntfs3(loop5): Failed to initialize $Extend.
[  268.916009][T11649] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2311'.
[  269.350403][T11665] loop5: detected capacity change from 0 to 32768
[  269.356777][T11665] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2319 (11665)
[  269.383769][T11665] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  269.395068][T11665] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm
[  269.460094][T11665] BTRFS info (device loop5): rebuilding free space tree
[  269.495446][T11665] BTRFS info (device loop5): enabling ssd optimizations
[  269.504544][T11665] BTRFS info (device loop5): enabling free space tree
[  269.506822][T11665] BTRFS info (device loop5): force clearing of disk cache
[  269.517802][T11665] BTRFS info (device loop5): use lzo compression, level 1
[  269.663634][ T7033] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  270.009085][   T33] audit: type=1326 audit(1758540606.526:11369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11708 comm="syz.4.2332" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b838ec29 code=0x7ffc0000
[  270.020484][   T33] audit: type=1326 audit(1758540606.526:11370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11708 comm="syz.4.2332" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b838ec29 code=0x7ffc0000
[  270.029409][   T33] audit: type=1326 audit(1758540606.536:11371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11708 comm="syz.4.2332" exe="/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f20b838ec29 code=0x7ffc0000
[  270.040353][   T33] audit: type=1326 audit(1758540606.536:11372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11708 comm="syz.4.2332" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b838ec29 code=0x7ffc0000
[  270.048933][   T33] audit: type=1326 audit(1758540606.536:11373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11708 comm="syz.4.2332" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b838ec29 code=0x7ffc0000
[  270.253307][T11719] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2337'.
[  271.943828][T11764] comedi comedi1: c6xdigio: I/O port conflict (0x401,3)
[  271.946528][T11764] ------------[ cut here ]------------
[  271.949415][T11764] Unexpected driver unregister!
[  271.951898][T11764] WARNING: CPU: 1 PID: 11764 at drivers/base/driver.c:273 driver_unregister+0x94/0xb0
[  271.955635][T11764] Modules linked in:
[  271.958068][T11764] CPU: 1 UID: 0 PID: 11764 Comm: syz.5.2358 Not tainted syzkaller #0 PREEMPT(full) 
[  271.962845][T11764] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  271.966636][T11764] RIP: 0010:driver_unregister+0x94/0xb0
[  271.968854][T11764] Code: 35 5d fc 48 89 df 5b 41 5e 41 5f e9 56 55 ff ff e8 b1 31 be fb eb 05 e8 aa 31 be fb 90 48 c7 c7 00 06 0a 8c e8 6d ce 81 fb 90 <0f> 0b 90 90 5b 41 5e 41 5f c3 cc cc cc cc cc cc cc cc cc cc cc cc
[  271.976384][T11764] RSP: 0018:ffffc90028c0fa40 EFLAGS: 00010246
[  271.978847][T11764] RAX: 8983fe5c42d3f800 RBX: ffffffff8f3f7680 RCX: 0000000000080000
[  271.981925][T11764] RDX: ffffc90020402000 RSI: 0000000000000f6a RDI: 0000000000000f6b
[  271.984926][T11764] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000004
[  271.988105][T11764] R10: dffffc0000000000 R11: fffffbfff1bfa22c R12: ffff88810ca29038
[  271.991321][T11764] R13: ffffffff8f3f75d0 R14: 0000000000000000 R15: dffffc0000000000
[  271.994441][T11764] FS:  00007f51f3c4d6c0(0000) GS:ffff8881a3c12000(0000) knlGS:0000000000000000
[  271.997964][T11764] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  272.000404][T11764] CR2: fffffffffffffe70 CR3: 0000000029816000 CR4: 00000000000006f0
[  272.003437][T11764] Call Trace:
[  272.004766][T11764]  <TASK>
[  272.005929][T11764]  comedi_device_detach_locked+0x178/0x750
[  272.008418][T11764]  comedi_device_attach+0x5d4/0x720
[  272.010372][T11764]  comedi_unlocked_ioctl+0x5ff/0x1020
[  272.012436][T11764]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  272.014625][T11764]  ? __lock_acquire+0xab9/0xd20
[  272.016484][T11764]  ? __fget_files+0x2a/0x420
[  272.018491][T11764]  ? __fget_files+0x2a/0x420
[  272.020254][T11764]  ? __fget_files+0x3a0/0x420
[  272.022002][T11764]  ? __fget_files+0x2a/0x420
[  272.023673][T11764]  ? bpf_lsm_file_ioctl+0x9/0x20
[  272.025497][T11764]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  272.027744][T11764]  __se_sys_ioctl+0xfc/0x170
[  272.030041][T11764]  do_syscall_64+0xfa/0x3b0
[  272.031782][T11764]  ? lockdep_hardirqs_on+0x9c/0x150
[  272.033845][T11764]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  272.036256][T11764]  ? exc_page_fault+0x9f/0xf0
[  272.038167][T11764]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  272.040413][T11764] RIP: 0033:0x7f51f2d8ec29
[  272.042164][T11764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  272.049324][T11764] RSP: 002b:00007f51f3c4d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  272.052533][T11764] RAX: ffffffffffffffda RBX: 00007f51f2fd5fa0 RCX: 00007f51f2d8ec29
[  272.055570][T11764] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000003
[  272.058791][T11764] RBP: 00007f51f2e11e41 R08: 0000000000000000 R09: 0000000000000000
[  272.061925][T11764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  272.065055][T11764] R13: 00007f51f2fd6038 R14: 00007f51f2fd5fa0 R15: 00007fff5a19e2d8
[  272.068035][T11764]  </TASK>
[  272.069270][T11764] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  272.071996][T11764] CPU: 1 UID: 0 PID: 11764 Comm: syz.5.2358 Not tainted syzkaller #0 PREEMPT(full) 
[  272.075584][T11764] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  272.079503][T11764] Call Trace:
[  272.080816][T11764]  <TASK>
[  272.081974][T11764]  dump_stack_lvl+0x99/0x250
[  272.083802][T11764]  ? __asan_memcpy+0x40/0x70
[  272.085625][T11764]  ? __pfx_dump_stack_lvl+0x10/0x10
[  272.087673][T11764]  ? __pfx__printk+0x10/0x10
[  272.089567][T11764]  vpanic+0x281/0x750
[  272.091148][T11764]  ? __pfx__printk+0x10/0x10
[  272.092987][T11764]  ? __pfx_vpanic+0x10/0x10
[  272.094913][T11764]  ? is_bpf_text_address+0x26/0x2b0
[  272.096950][T11764]  panic+0xb9/0xc0
[  272.098393][T11764]  ? __pfx_panic+0x10/0x10
[  272.100250][T11764]  __warn+0x31b/0x4b0
[  272.101832][T11764]  ? driver_unregister+0x94/0xb0
[  272.103752][T11764]  ? driver_unregister+0x94/0xb0
[  272.105668][T11764]  report_bug+0x2be/0x4f0
[  272.107271][T11764]  ? driver_unregister+0x94/0xb0
[  272.109321][T11764]  ? driver_unregister+0x94/0xb0
[  272.111257][T11764]  ? driver_unregister+0x96/0xb0
[  272.113122][T11764]  handle_bug+0x84/0x160
[  272.114768][T11764]  exc_invalid_op+0x1a/0x50
[  272.116543][T11764]  asm_exc_invalid_op+0x1a/0x20
[  272.118385][T11764] RIP: 0010:driver_unregister+0x94/0xb0
[  272.120445][T11764] Code: 35 5d fc 48 89 df 5b 41 5e 41 5f e9 56 55 ff ff e8 b1 31 be fb eb 05 e8 aa 31 be fb 90 48 c7 c7 00 06 0a 8c e8 6d ce 81 fb 90 <0f> 0b 90 90 5b 41 5e 41 5f c3 cc cc cc cc cc cc cc cc cc cc cc cc
[  272.127530][T11764] RSP: 0018:ffffc90028c0fa40 EFLAGS: 00010246
[  272.129908][T11764] RAX: 8983fe5c42d3f800 RBX: ffffffff8f3f7680 RCX: 0000000000080000
[  272.132915][T11764] RDX: ffffc90020402000 RSI: 0000000000000f6a RDI: 0000000000000f6b
[  272.135927][T11764] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000004
[  272.138958][T11764] R10: dffffc0000000000 R11: fffffbfff1bfa22c R12: ffff88810ca29038
[  272.141981][T11764] R13: ffffffff8f3f75d0 R14: 0000000000000000 R15: dffffc0000000000
[  272.145051][T11764]  comedi_device_detach_locked+0x178/0x750
[  272.147306][T11764]  comedi_device_attach+0x5d4/0x720
[  272.149411][T11764]  comedi_unlocked_ioctl+0x5ff/0x1020
[  272.151474][T11764]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  272.154361][T11764]  ? __lock_acquire+0xab9/0xd20
[  272.157473][T11764]  ? __fget_files+0x2a/0x420
[  272.159418][T11764]  ? __fget_files+0x2a/0x420
[  272.161367][T11764]  ? __fget_files+0x3a0/0x420
[  272.163283][T11764]  ? __fget_files+0x2a/0x420
[  272.165178][T11764]  ? bpf_lsm_file_ioctl+0x9/0x20
[  272.167222][T11764]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  272.169829][T11764]  __se_sys_ioctl+0xfc/0x170
[  272.171763][T11764]  do_syscall_64+0xfa/0x3b0
[  272.173576][T11764]  ? lockdep_hardirqs_on+0x9c/0x150
[  272.175644][T11764]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  272.178043][T11764]  ? exc_page_fault+0x9f/0xf0
[  272.179851][T11764]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  272.182216][T11764] RIP: 0033:0x7f51f2d8ec29
[  272.184018][T11764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  272.191920][T11764] RSP: 002b:00007f51f3c4d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  272.195219][T11764] RAX: ffffffffffffffda RBX: 00007f51f2fd5fa0 RCX: 00007f51f2d8ec29
[  272.198521][T11764] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000003
[  272.201753][T11764] RBP: 00007f51f2e11e41 R08: 0000000000000000 R09: 0000000000000000
[  272.205049][T11764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  272.208339][T11764] R13: 00007f51f2fd6038 R14: 00007f51f2fd5fa0 R15: 00007fff5a19e2d8
[  272.211574][T11764]  </TASK>
[  272.213536][T11764] Kernel Offset: disabled
[  272.215336][T11764] Rebooting in 86400 seconds..

VM DIAGNOSIS:
11:30:07  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff8209592f RBX=0000000000000000 RCX=ffff888023b28000 RDX=0000000000000000
RSI=0000000000000000 RDI=0000000000000000 RBP=ffffc90028c3f650 RSP=ffffc90028c3f3a0
R8 =ffffea0000df7487 R9 =1ffffd40001bee90 R10=dffffc0000000000 R11=fffff940001bee91
R12=dffffc0000000000 R13=ffffc90028c3f860 R14=ffffea0000df7480 R15=ffffc90028c3f860
RIP=ffffffff8209592f RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f41e99ec6c0 ffffffff 00c00000
GS =0000 ffff8880b8612000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000020000001d000 CR3=000000010f5aa000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f41e8c12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000035 RBX=0000000000000035 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000c2de RDI=000000000000c2df RBP=00000000000003f8 RSP=ffffc90028c0f1f0
R8 =ffff8880218a8237 R9 =1ffff11004315046 R10=dffffc0000000000 R11=ffffffff854fb260
R12=dffffc0000000000 R13=ffffffff99b038fb R14=ffffffff99df84e0 R15=0000000000000000
RIP=ffffffff854fb2dc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f51f3c4d6c0 ffffffff 00c00000
GS =0000 ffff8881a3c12000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=fffffffffffffe70 CR3=0000000029816000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f51f2fa7498 00007f51f2fa7470 XMM03=00007f51f2fa74a8 00007f51f2fa74a0
XMM04=00007f51f3b0d100 00007f51f2fa7460 XMM05=00007f51f2fa7478 00007f51f2fa74c0
XMM06=00007f51f2fa74b8 00007f51f2fa74b0 XMM07=00007f51f2fa74a8 00007f51f2fa74a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f51f2e12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
