last executing test programs:

6m9.766728432s ago: executing program 0 (id=101):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48890}, 0x0)
r3 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f0000000140)=0x2)
ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f00000001c0)={{r2}, 0x0, 0x0, 0x8, 0x1f})

6m9.235863724s ago: executing program 0 (id=106):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x2c, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}}, 0x0)

6m9.071604688s ago: executing program 0 (id=107):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x64, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0x0, 0x1, 0x5, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x8, 0x34, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x10, 0x8, 0x6}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x4, 0x5, {0x5, 0x1, "a7ea31"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

6m7.29484885s ago: executing program 0 (id=112):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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")
r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]})
write$uinput_user_dev(r0, &(0x7f0000000c40)={'syz0\x00', {0x2, 0x1, 0x7ff, 0x2}, 0x4b, [0x5, 0x7f, 0x7, 0x9, 0x8349, 0x5, 0x6, 0xffff, 0x1ff, 0x4, 0x81, 0x31, 0x400, 0x4a0, 0x5, 0x7, 0x3, 0x9, 0x0, 0xffffffff, 0x800, 0x8000, 0x2, 0x9, 0x3, 0x3ff, 0x5, 0x0, 0xb9dc, 0xd, 0x0, 0x8, 0x10000, 0x0, 0x3, 0x9, 0x9, 0x6, 0x10, 0x3, 0x40, 0x6, 0x7, 0xffffffff, 0x7, 0xd, 0x7, 0x0, 0xff, 0x2, 0x6, 0x1, 0x2, 0xfffffff9, 0x7, 0x0, 0x101, 0x4, 0xffff8000, 0x372aa190, 0x1, 0xb00, 0x6, 0xff], [0x16f0, 0x4, 0x6, 0x0, 0x7, 0x4, 0x10, 0x6, 0x5, 0xc, 0xfffffff3, 0x9, 0x8, 0x7ff80, 0x0, 0xd06a, 0x1, 0x8, 0x3, 0x7fe, 0x0, 0x7, 0x2, 0x385e, 0x5, 0xeb1, 0x8996, 0xffffffff, 0x7, 0x8, 0x2, 0x61, 0x7, 0x1, 0x3ff, 0x1, 0x6, 0x7, 0x2, 0x8, 0x9, 0xff, 0x80000001, 0x875c, 0x9, 0x40, 0x6, 0xa829, 0x6, 0x10e, 0xffffffc0, 0x5, 0x1000, 0xf50, 0xb6c, 0x10, 0xc0000000, 0x5, 0x9, 0x8, 0x10000, 0x3, 0x9, 0x7fff], [0xffffffff, 0xab, 0x7, 0x587f, 0x6, 0x9, 0x401, 0x5, 0x10bf, 0x7, 0x3, 0x965, 0x1, 0x8, 0x5, 0x2, 0x9, 0xad, 0x1, 0x2, 0xa, 0x7fe000, 0xfff4, 0x9, 0x1a0ecd1e, 0xd, 0xc2, 0x2, 0x1, 0x3, 0x9, 0x0, 0x0, 0x8, 0x0, 0x7, 0x1, 0x6, 0x2, 0x6, 0x0, 0x8, 0x8, 0x0, 0xfffffc00, 0x3225, 0xdf6, 0x1, 0x4, 0x4, 0x7f6, 0x7f, 0xe, 0x3, 0xc667, 0x0, 0x9, 0x88, 0xe324, 0x7fff, 0x6, 0x2, 0x9, 0x4a92], [0xa, 0xfffffffa, 0x8000, 0x0, 0x4, 0x6, 0x4, 0x5, 0x7b26, 0x4, 0xebd, 0x5, 0x1, 0x8, 0x10000, 0x5, 0x1000, 0xc000000, 0x2, 0xfffffff1, 0x3, 0x7, 0x1a7b, 0x2, 0x7c, 0x8, 0x0, 0x100, 0x7, 0xc, 0x0, 0x80000000, 0x6, 0x7, 0x101, 0xce, 0x7, 0x9, 0xba, 0xb0, 0x9, 0x0, 0x8, 0x7, 0x2, 0x10001, 0x2, 0xe76a, 0x9, 0x7, 0xb637, 0x2, 0x2, 0x2, 0x8, 0x1, 0x0, 0x9, 0x2bbf7e86, 0x8, 0x3, 0x3, 0x7, 0x7]}, 0x45c)
mkdir(0x0, 0x108)
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0)

6m6.876414552s ago: executing program 0 (id=115):
syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01)
creat(&(0x7f0000000040)='./file0\x00', 0x140)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
write$P9_RLERRORu(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00\x00F\x00'], 0x53)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}})

6m6.564827751s ago: executing program 0 (id=119):
syz_emit_ethernet(0x5e, &(0x7f00000004c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback, @mcast2}}}}}}, 0x0)

6m6.344067393s ago: executing program 32 (id=119):
syz_emit_ethernet(0x5e, &(0x7f00000004c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback, @mcast2}}}}}}, 0x0)

5m35.772448311s ago: executing program 2 (id=509):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00')
read$FUSE(r0, &(0x7f0000000b40)={0x2020}, 0x2020)
preadv(r0, &(0x7f0000000b00)=[{&(0x7f0000000300)=""/30, 0x1e}], 0x1, 0x80000001, 0x0)
read$FUSE(r0, &(0x7f0000005f00)={0x2020}, 0x2020)

5m35.692316673s ago: executing program 2 (id=510):
gettid()
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000010100000024000180060005004e230800070001000200000008000300ac1414aa0800060001"], 0x38}}, 0x0)

5m35.633262304s ago: executing program 2 (id=511):
mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='qnx4\x00', 0x208000, 0x0)

5m35.632757046s ago: executing program 2 (id=512):
syz_mount_image$minix(&(0x7f0000000540), &(0x7f0000000040)='./file2\x00', 0x1200808, &(0x7f0000000100)=ANY=[], 0x1, 0x1e6, &(0x7f0000000140)="$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")
truncate(&(0x7f0000000000)='./file2\x00', 0x2400)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$peeksig(0x4209, r0, 0x0, &(0x7f0000000fc0))
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000))
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x212801, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r5, &(0x7f0000000380)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}, {{&(0x7f0000000280)={0xa, 0x4e24, 0x5, @local, 0x6}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='\t', 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r5, 0x1)
getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x101}, &(0x7f0000000080)=0x8)
setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r6=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xb00, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff3}}}, 0x24}}, 0x0)

5m35.519742617s ago: executing program 2 (id=513):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000001240)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000080)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000))
fallocate(0xffffffffffffffff, 0x0, 0x4000003, 0x800000)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)

5m35.103922705s ago: executing program 2 (id=517):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x71}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c00990000000000000000000800a100ffff0000080026008d03000008009f"], 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x0)

5m34.656331095s ago: executing program 33 (id=517):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x71}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c00990000000000000000000800a100ffff0000080026008d03000008009f"], 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x0)

5m17.96322823s ago: executing program 3 (id=747):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0)
ioctl$PTP_SYS_OFFSET(r0, 0xc0403d08, 0xffffffffffffffff)

5m17.907629171s ago: executing program 3 (id=748):
r0 = syz_usb_connect(0x5, 0x3d7, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004cefc008e10593085bfd010203010902c50301000000000904"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

5m16.501545656s ago: executing program 3 (id=760):
r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0)
ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x0, 0x822, 0x0, '\x00', 0x0})

5m16.499099771s ago: executing program 3 (id=761):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00')

5m16.396277371s ago: executing program 3 (id=762):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10)
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r1, 0x0, r0, 0x0, 0x6, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x3ff)
fcntl$setstatus(r0, 0x4, 0x7c00)
dup3(r1, r0, 0x0)
sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000010605"], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0)

5m16.162367939s ago: executing program 3 (id=767):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2002}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @tail_call]}, &(0x7f00000000c0)='GPL\x00', 0x9, 0x100d, &(0x7f00000038c0)=""/4109, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)

5m15.503805095s ago: executing program 34 (id=767):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2002}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @tail_call]}, &(0x7f00000000c0)='GPL\x00', 0x9, 0x100d, &(0x7f00000038c0)=""/4109, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)

5m9.096908077s ago: executing program 5 (id=768):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001a1401"], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0)

5m8.919385558s ago: executing program 5 (id=837):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x89f6, &(0x7f0000000900)={'ip6tnl0\x00', @random="1e40002000"})

5m8.804330346s ago: executing program 5 (id=841):
r0 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000a00)=ANY=[@ANYBLOB="00e789da34e04a1ffbc2f05cefeb4ee6d5ae1071124b2c2fb684f5c7ac05000000c7880f67e775c748f6381a3e01e7f93330b30b90bbb4d2b697899a16f2df4fa2a8f06ac2c5352ddcae2b83672ef3d9f532e55f4e798924ac6332751e737383f6890d2dcfcbdbd41940a64c7b4374674e7bb6dd0d1b8d3d62f6d77b0282e166e2ce4c353d2d4d315a81146bf46a1508ef0d2ddc7d0b447fe17b85b292d13cea2256a16cab12d75a852bc680da7ea837480feb2e0500001e0000000000003bc18c52d0351cd285197b0641569048b5b416ba1c570000000000100083794afff0a9eed63b1226b18c4b455ab222d7ae1be52a22e8ec8bf2c0c7d99770415863f50aa18bcb66061a29bc55105f3482ed752f882d224a386b51836c1b437036b677156e22e174ff516dbab0b2cdf52bee43c4ffffffffffffffffd9487b8663a339b98df63b4bf3e97f02d6f1e7e65f968dd90841506355d9ac40f1b434c8a9b5bd91a70c53a5aadbebd9ed9d0a55bd47a967163e0c02753f8895bfbf1b41b5490667c241068d59983ae1d0f03e650f5357425200000000000000008fa437e38b8200000000630000000000000000000000000000000000000000000000e91100000000ee65e073c14bb74617079e0b6ecfc830db14244567fd8f4e4e5903eaf983786e28295783f130b95dc37f59a658020e88047db7783ce8a9cba6c255902cfb83946ea3f5f7a8cee911b2b37ae4b01e65ea86d5ea7ae17b2a9bc250c9b8fc9fbc04617939bdd13457954172d18701768f8a461bee740f2d82ae566d2e30a93ad2b201a6d16a93c75a950cc437e7f25d3aadddb8edd028d84490b6bafd636aa4fb482a8a4b3987dafe58e742448c4b36b03790090198145dee533257bb9050554f8cace210a5bc5c768f83e99019f7c00ff9ca679768dbba3f7d21c545c99c2f7688f7030fe37121d625d1f81018feb74c9d48eebdf1702550b097271ab9bd38c62f4b31fd9482c05ba042bb2617f5b3eb59efcdf3e9332827586e6be0cd2d7297ebd5716514942fd941c1152a8df17f7bf8d23188cc812736a6eb35f0004dde29f79717df9065381ba566751a8e1710210f00ca58ff481633fa3fbe088f86e336cce022c8e2233b79af7f3fb562f9863b2842df189b15ae659ffd7fb31258935a7d1eec82952520f62fbf0f4c8d879805ef3e6b576f5bac6cd8ad874081", @ANYRES16], 0x0, 0x11dc, &(0x7f0000001280)="$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")
r1 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x30)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307202, &(0x7f0000000f00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])

5m8.491444999s ago: executing program 5 (id=846):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000080))

5m7.452277877s ago: executing program 5 (id=859):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000c30000000001000095"], &(0x7f0000000180)='GPL\x00', 0x8}, 0x94)

5m7.314970645s ago: executing program 35 (id=859):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000c30000000001000095"], &(0x7f0000000180)='GPL\x00', 0x8}, 0x94)

2.941843655s ago: executing program 1 (id=4484):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x20000)
ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f0000000380)={&(0x7f0000000280)=[0x0], 0x0, 0x1})

2.322937914s ago: executing program 1 (id=4488):
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @dev={0xfe, 0x80, '\x00', 0x8}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x0, 0xfffffffc}})
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6)

2.065472343s ago: executing program 1 (id=4489):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[], 0x20}}, 0x84)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000003c0007010000000000400000037c"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

1.836631012s ago: executing program 4 (id=4490):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="05000000040000000900000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10)

1.772903152s ago: executing program 4 (id=4492):
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17)
mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)

1.642704885s ago: executing program 4 (id=4493):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000002440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0)

860.235949ms ago: executing program 1 (id=4495):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x3010009, 0x0, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c0)
mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0/file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]})
syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000200)='./bus\x00', 0x3242cac, &(0x7f0000000380)=ANY=[], 0xff, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x28880, 0x0)
lseek(r0, 0x434f, 0x1)

771.06023ms ago: executing program 1 (id=4497):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0xfffffff9}}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10)
r4 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4)

712.583225ms ago: executing program 1 (id=4498):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$uinput_user_dev(r2, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0xffffffff, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100], [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x2, 0x0, 0x0, 0x55f8, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x7], [0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, 0x45c)
ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0)
ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000006480))

712.331294ms ago: executing program 4 (id=4499):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001280)='./binderfs/binder1\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)

633.110428ms ago: executing program 4 (id=4500):
syz_emit_ethernet(0x76, &(0x7f0000000080)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "081000", 0x40, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0xffff, {0x5, 0x6, "5436ea", 0x400, 0x88, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@dstopts={0x0, 0x0, '\x00', [@padn={0x1, 0xffffffffffffff11}, @pad1]}]}}}}}}}, 0x0)

541.708797ms ago: executing program 6 (id=4501):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}})
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x100, 0x0, 0x0, 0x4, 0x2, 0x1}})

431.761452ms ago: executing program 6 (id=4502):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
ioctl$SIOCGSTAMP(r0, 0x8906, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={<r1=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)

431.302995ms ago: executing program 4 (id=4503):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000240)={[{@jqfmt_vfsold}, {@resgid}, {@bh}, {@noload}, {@data_err_ignore}, {@noblock_validity}]}, 0xfe, 0x445, &(0x7f0000000900)="$eJzs3MtvG0UYAPBv7Tz6JKGUR0MLgYKIeCRN+qAHLiCQOICEBIciTiFJq1C3QU2QaBVB4BCOqBJ3xBGJv4ATXBBwQuIKd1SpQrm0cDJaezd1HTuNE6cu8e8nbTvjHXfm293xzs7YDaBrDad/JBH7IuKPiBioZm8vMFz96+bK4tQ/K4tTSZTLb/+dVMrdWFmcyovm79tbzZTLWb6/Qb3L70VMlkozl7L82MKFD8fmL195YfbC5LmZczMXJ9J/7UjfqYmTbYkzjevG0Cdzhw+9/u7VN6fOXH3/l+/SGvZl+2vjaJfh6tFt6Ol2V9Zh+2vSSU8HG0JLihGRnq7eSv8fiGLsXt03EK993tHGAduqXC6XG92fM0tlYAdLotMtADojv9Gnz7/5dpeGHveE6y9XH4DSuG9mW3VPTxSyMr11z7ftNBwRZ5b+/TrdYpvmIQAAav2Qjn+ebzT+K8RDNeXuy9ZQBiPi/og4EBEPRMTBiHgwolL24Yh4pMX661dI1o5/Ctc2FdgGpeO/l7K1rdvHf/noLwaLWW5/Jf7e5OxsaeZYdkxGorc/zY+vU8ePr/7+ZbN9teO/dEvrz8eCWTuu9dRN0E1PLkxuJeZa1z+LGOppFH8S+TJOEhGHImJok3XMPvvt4Wb77hz/OtqwzlT+JuKZ6vlfirr4c0nD9cnTp08cH3/x1MTJsV1Rmjk2ll8Va/362/JbzerfUvxtkJ7/PQ2v/9X4B5NdEfOXr5yvrNfOt17H8p9fNH2m2ez135e8U0n3Za99PLmwcGk8oi95Y+3rE7fem+fz8mn8I0cb9/8DcetIPBoR6UV8JCIei4jHs7Y/ERFPRsTRdeL/+ZWnPmg9/nVm5dsojX/6Tuc/as9/64ni+Z++bz3+XHr+T1RSI9krG/n822gDt3LsAAAA4P+iUPkOfFIYXU0XCqOj1e/wH4w9hdLc/MJzZ+c+ujhd/a78YPQW8pmugZr50PFsbjjPT9Tlj2fzxl8Vd1fyo1NzpelOBw9dbm+T/p/6q9jp1gHbzu+1oHvV9f/yp51qCHDXuf9D99L/oXvp/9C9GvV/cwDQHdz/oXvp/9C99H/oXvo/dKWmv40vbOkn/xI7PhGFe6IZOz/Rs+H/zGKTif6Guzr9yQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAe/wUAAP//ziLlLw==")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setgroups(0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000000300)=ANY=[@ANYBLOB="000075b8b62e943fefae1913e055b8852885f3200b41a4a7e940141a3e9a708cfa000f58442c767bb8bac7e75a49ac5762e52f7f3bf6909e28d3468821124bce8d75bf8584dedd275c45e85bfa22d157b6d5ac4e569df05173d6ff9d8ed3bdf95c41f60f6a1b456842fecd0f09b6ab9136de2336b349cfe9cd308933da9b574e4f040f"], 0x1, 0x5ec, &(0x7f0000001640)="$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")
modify_ldt$write(0x1, &(0x7f0000000040), 0x10)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r4 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r4, 0xc1004110, &(0x7f00000000c0)={0xfffffffe, [0x3b, 0xffff0000, 0x40], [{0x0, 0x9, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8000000}, {0x0, 0x1}], 0x35})
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0)
pwritev2(r5, &(0x7f0000000680)=[{&(0x7f0000000200)="05", 0x6a000}], 0x1, 0x6000000, 0x0, 0x0)

321.729436ms ago: executing program 6 (id=4504):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000036000b63861538e186a697fc12b5fc60", 0x14}], 0x1}, 0x0)

251.456121ms ago: executing program 6 (id=4505):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='veth0_to_hsr\x00', 0x10)
bind$xdp(r0, &(0x7f0000000040)={0x2c, 0x9, 0x0, 0xc, r0}, 0x10)

112.752928ms ago: executing program 6 (id=4506):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r1, 0x0, 0xdc0, 0x4000, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x0, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22)

0s ago: executing program 6 (id=4507):
syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000180), 0x1, 0x979b, &(0x7f0000009780)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x1060, 0x2000})
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x48)

kernel console output (not intermixed with test programs):

tem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  303.838339][ T7294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  305.093792][ T5854] Bluetooth: hci0: unexpected event for opcode 0x200a
[  305.281596][T12841] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2800'.
[  305.285062][T12841] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2800'.
[  306.374518][T12870] loop4: detected capacity change from 0 to 4096
[  306.456549][T12870] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  306.853610][T12872] loop6: detected capacity change from 0 to 40427
[  306.854089][T12877] loop4: detected capacity change from 0 to 32768
[  306.864090][T12872] F2FS-fs (loop6): invalid crc value
[  306.902680][T12877] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  306.922003][T12877] (syz.4.2817,12877,1):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 72
[  306.934655][T12877] ocfs2: Unmounting device (7,4) on (node local)
[  307.139731][T12872] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  307.154600][T12872] F2FS-fs (loop6): Start checkpoint disabled!
[  307.166070][T12872] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  307.254205][   T53] kworker/u10:3: attempt to access beyond end of device
[  307.254205][   T53] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  307.259573][   T53] CPU: 1 UID: 0 PID: 53 Comm: kworker/u10:3 Not tainted syzkaller #0 PREEMPT(full) 
[  307.259587][   T53] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  307.259594][   T53] Workqueue: writeback wb_workfn (flush-7:6)
[  307.259618][   T53] Call Trace:
[  307.259622][   T53]  <TASK>
[  307.259627][   T53]  dump_stack_lvl+0x189/0x250
[  307.259643][   T53]  ? __pfx_dump_stack_lvl+0x10/0x10
[  307.259653][   T53]  ? __pfx_queue_work_on+0x10/0x10
[  307.259662][   T53]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  307.259697][   T53]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  307.259714][   T53]  f2fs_handle_critical_error+0x37c/0x540
[  307.259733][   T53]  f2fs_write_end_io+0x886/0xb60
[  307.259750][   T53]  __submit_merged_bio+0x27a/0x6a0
[  307.259766][   T53]  __submit_merged_write_cond+0x255/0x530
[  307.259780][   T53]  f2fs_write_data_pages+0x261d/0x3000
[  307.259811][   T53]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  307.259831][   T53]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  307.259858][   T53]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  307.259870][   T53]  ? look_up_lock_class+0x74/0x170
[  307.259887][   T53]  ? trace_f2fs_writepages+0x7f/0x200
[  307.259899][   T53]  ? f2fs_write_node_pages+0x478/0x6e0
[  307.259913][   T53]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  307.259931][   T53]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  307.259944][   T53]  do_writepages+0x32e/0x550
[  307.259958][   T53]  ? reacquire_held_locks+0x127/0x1d0
[  307.259966][   T53]  ? writeback_sb_inodes+0x384/0x1010
[  307.259980][   T53]  __writeback_single_inode+0x145/0xff0
[  307.259991][   T53]  ? do_raw_spin_unlock+0x4d/0x240
[  307.260003][   T53]  writeback_sb_inodes+0x6c7/0x1010
[  307.260027][   T53]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  307.260059][   T53]  ? rcu_is_watching+0x15/0xb0
[  307.260073][   T53]  wb_writeback+0x43b/0xaf0
[  307.260087][   T53]  ? queue_io+0x3a1/0x590
[  307.260098][   T53]  ? __pfx_wb_writeback+0x10/0x10
[  307.260113][   T53]  ? _raw_spin_unlock_irq+0x23/0x50
[  307.260126][   T53]  wb_workfn+0x409/0xef0
[  307.260143][   T53]  ? __pfx_wb_workfn+0x10/0x10
[  307.260153][   T53]  ? __lock_acquire+0xab9/0xd20
[  307.260171][   T53]  ? process_scheduled_works+0x9ef/0x17b0
[  307.260182][   T53]  ? _raw_spin_unlock_irq+0x23/0x50
[  307.260192][   T53]  ? process_scheduled_works+0x9ef/0x17b0
[  307.260198][   T53]  ? process_scheduled_works+0x9ef/0x17b0
[  307.260207][   T53]  process_scheduled_works+0xae1/0x17b0
[  307.260230][   T53]  ? __pfx_process_scheduled_works+0x10/0x10
[  307.260247][   T53]  worker_thread+0x8a0/0xda0
[  307.260270][   T53]  kthread+0x711/0x8a0
[  307.260282][   T53]  ? __pfx_worker_thread+0x10/0x10
[  307.260290][   T53]  ? __pfx_kthread+0x10/0x10
[  307.260300][   T53]  ? _raw_spin_unlock_irq+0x23/0x50
[  307.260310][   T53]  ? lockdep_hardirqs_on+0x9c/0x150
[  307.260321][   T53]  ? __pfx_kthread+0x10/0x10
[  307.260331][   T53]  ret_from_fork+0x3fc/0x770
[  307.260341][   T53]  ? __pfx_ret_from_fork+0x10/0x10
[  307.260354][   T53]  ? __switch_to_asm+0x39/0x70
[  307.260364][   T53]  ? __switch_to_asm+0x33/0x70
[  307.260374][   T53]  ? __pfx_kthread+0x10/0x10
[  307.260384][   T53]  ret_from_fork_asm+0x1a/0x30
[  307.260403][   T53]  </TASK>
[  307.260407][   T53] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  307.585118][T12906] loop6: detected capacity change from 0 to 128
[  307.601235][  T974] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  307.640676][T12906] vxfs: unsupported VxFS version (2066843062)
[  307.762333][  T974] usb 5-1: Using ep0 maxpacket: 8
[  307.769196][  T974] usb 5-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e
[  307.778896][  T974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  307.804370][  T974] usb 5-1: config 0 descriptor??
[  307.875451][T12910] GUP no longer grows the stack in syz.6.2831 (12910): 200000004000-20000000a000 (200000002000)
[  307.883115][T12910] CPU: 0 UID: 0 PID: 12910 Comm: syz.6.2831 Not tainted syzkaller #0 PREEMPT(full) 
[  307.883140][T12910] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  307.883151][T12910] Call Trace:
[  307.883158][T12910]  <TASK>
[  307.883165][T12910]  dump_stack_lvl+0x189/0x250
[  307.883197][T12910]  ? __pfx_dump_stack_lvl+0x10/0x10
[  307.883217][T12910]  ? __pfx__printk+0x10/0x10
[  307.883236][T12910]  ? find_vma+0xe7/0x160
[  307.883264][T12910]  __get_user_pages+0x24d0/0x2ce0
[  307.883297][T12910]  ? mtree_load+0x100/0x700
[  307.883326][T12910]  get_user_pages_remote+0x2f1/0xad0
[  307.883345][T12910]  ? __pfx_mtree_load+0x10/0x10
[  307.883371][T12910]  ? __pfx_get_user_pages_remote+0x10/0x10
[  307.883392][T12910]  ? __access_remote_vm+0x367/0x7d0
[  307.883415][T12910]  __access_remote_vm+0x211/0x7d0
[  307.883440][T12910]  ? __pfx___access_remote_vm+0x10/0x10
[  307.883463][T12910]  ? alloc_pages_noprof+0xbe/0x190
[  307.883486][T12910]  proc_pid_cmdline_read+0x430/0x810
[  307.883509][T12910]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[  307.883534][T12910]  ? rw_verify_area+0x2a6/0x4d0
[  307.883559][T12910]  vfs_readv+0x5aa/0x850
[  307.883577][T12910]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[  307.883593][T12910]  ? __pfx_vfs_readv+0x10/0x10
[  307.883617][T12910]  ? __fget_files+0x2a/0x420
[  307.883664][T12910]  ? __fget_files+0x3a0/0x420
[  307.883678][T12910]  ? __fget_files+0x2a/0x420
[  307.883700][T12910]  __x64_sys_preadv+0x197/0x2a0
[  307.883725][T12910]  ? __pfx___x64_sys_preadv+0x10/0x10
[  307.883745][T12910]  ? rcu_is_watching+0x15/0xb0
[  307.883766][T12910]  ? do_syscall_64+0xbe/0x3b0
[  307.883782][T12910]  do_syscall_64+0xfa/0x3b0
[  307.883795][T12910]  ? lockdep_hardirqs_on+0x9c/0x150
[  307.883818][T12910]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  307.883834][T12910]  ? exc_page_fault+0x9f/0xf0
[  307.883855][T12910]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  307.883869][T12910] RIP: 0033:0x7f667778ebe9
[  307.883885][T12910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  307.883898][T12910] RSP: 002b:00007f6678697038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  307.883917][T12910] RAX: ffffffffffffffda RBX: 00007f66779c5fa0 RCX: 00007f667778ebe9
[  307.883930][T12910] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003
[  307.883940][T12910] RBP: 00007f6677811e19 R08: 0000000000000000 R09: 0000000000000000
[  307.883950][T12910] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000
[  307.883960][T12910] R13: 00007f66779c6038 R14: 00007f66779c5fa0 R15: 00007fffa3a98b98
[  307.883982][T12910]  </TASK>
[  308.024871][ T5916] usb 5-1: USB disconnect, device number 32
[  308.672411][T12916] block device autoloading is deprecated and will be removed.
[  308.879295][ T5854] Bluetooth: hci1: command 0x0406 tx timeout
[  309.063929][T12943] loop6: detected capacity change from 0 to 8
[  309.495580][  T974] usb 5-1: new full-speed USB device number 33 using dummy_hcd
[  309.644082][  T974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  309.648322][  T974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  309.656392][  T974] usb 5-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00
[  309.663422][  T974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  309.670182][  T974] usb 5-1: config 0 descriptor??
[  309.737847][T12955] netlink: 'syz.1.2852': attribute type 1 has an invalid length.
[  310.099503][  T974] chicony 0003:04F2:1421.0010: unknown main item tag 0x0
[  310.102780][  T974] chicony 0003:04F2:1421.0010: item fetching failed at offset 3/5
[  310.106695][  T974] chicony 0003:04F2:1421.0010: Chicony hid parse failed: -22
[  310.110066][  T974] chicony 0003:04F2:1421.0010: probe with driver chicony failed with error -22
[  310.312305][ T5916] usb 5-1: USB disconnect, device number 33
[  310.814335][T12991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2870'.
[  310.954161][T12989] loop6: detected capacity change from 0 to 40427
[  310.960223][T12989] F2FS-fs (loop6): Fix alignment : internally, start(4096) end(16896) block(12288)
[  310.988229][T12989] F2FS-fs (loop6): invalid crc value
[  310.998923][T12989] F2FS-fs (loop6): invalid crc value
[  311.001042][T12989] F2FS-fs (loop6): Failed to get valid F2FS checkpoint
[  311.050763][T13001] dvmrp0: entered allmulticast mode
[  311.060876][T13000] dvmrp0: left allmulticast mode
[  311.143975][   T33] audit: type=1326 audit(1756998770.645:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13004 comm="syz.1.2877" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1dd58ebe9 code=0x7ffc0000
[  311.159081][   T33] audit: type=1326 audit(1756998770.645:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13004 comm="syz.1.2877" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1dd58ebe9 code=0x7ffc0000
[  311.170230][   T33] audit: type=1326 audit(1756998770.645:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13004 comm="syz.1.2877" exe="/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fd1dd58ebe9 code=0x7ffc0000
[  311.191859][   T33] audit: type=1326 audit(1756998770.645:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13004 comm="syz.1.2877" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1dd58ebe9 code=0x7ffc0000
[  311.201047][   T33] audit: type=1326 audit(1756998770.645:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13004 comm="syz.1.2877" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1dd58ebe9 code=0x7ffc0000
[  311.211325][   T33] audit: type=1326 audit(1756998770.645:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13004 comm="syz.1.2877" exe="/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7fd1dd58ebe9 code=0x7ffc0000
[  311.220659][   T33] audit: type=1326 audit(1756998770.645:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13004 comm="syz.1.2877" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1dd58ebe9 code=0x7ffc0000
[  311.229878][   T33] audit: type=1326 audit(1756998770.645:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13004 comm="syz.1.2877" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1dd58ebe9 code=0x7ffc0000
[  311.251602][   T33] audit: type=1326 audit(1756998770.645:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13004 comm="syz.1.2877" exe="/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fd1dd58ebe9 code=0x7ffc0000
[  311.259248][   T33] audit: type=1326 audit(1756998770.645:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13004 comm="syz.1.2877" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1dd58ebe9 code=0x7ffc0000
[  311.569984][T13009] loop4: detected capacity change from 0 to 32768
[  311.593981][T13009] bcachefs (/dev/loop4): error validating superblock: Invalid superblock section members_v2: device 0: bucket size 0 smaller than block size 8
[  311.593981][T13009] members_v2 (size 152):
[  311.593981][T13009] Device:                        0
[  311.593981][T13009]   Label:                       (none)
[  311.593981][T13009]   UUID:                        7af6772b-00de-4159-84cd-1faead05aceb
[  311.593981][T13009]   Size:                        0
[  311.593981][T13009]   read errors:                 0
[  311.593981][T13009]   write errors:                0
[  311.593981][T13009]   checksum errors:             0
[  311.593981][T13009]   seqread iops:                0
[  311.593981][T13009]   seqwrite iops:               0
[  311.593981][T13009]   randread iops:               0
[  311.593981][T13009]   randwrite iops:              0
[  311.593981][T13009]   Bucket size:                 0
[  311.593981][T13009]   First bucket:                0
[  311.593981][T13009]   Buckets:                     128
[  311.593981][T13009]   Last mount:                  1714681267
[  311.593981][T13009]   Last superblock write:       42
[  311.593981][T13009]   State:                       rw
[  311.593981][T13009]   Data allowed:                journal,btree,user
[  311.593981][T13009]   Has data:                    btree
[  311.593981][T13009]   Btree allocated bitmap blocksize:128
[  311.593981][T13009]   Btree allocated bitmap:      0000000000000000000001000010000010011000000000000000000000000000
[  311.593981][T13009]   Durability:        
[  311.594098][T13009] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  312.381426][ T5883] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  312.534123][ T5883] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  312.539115][ T5883] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  312.543785][ T5883] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  312.547376][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  312.550189][ T5883] usb 5-1: SerialNumber: syz
[  312.772996][ T5883] usb 5-1: 0:2 : does not exist
[  312.777001][ T5883] usb 5-1: unit 255 not found!
[  312.798449][ T5883] usb 5-1: USB disconnect, device number 34
[  312.859648][ T5942] udevd[5942]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  313.327342][  T974] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  313.350765][  T974] hid-generic 0000:0000:0000.0011: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  314.216475][T13065] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  314.226916][T13083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  314.231846][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  314.235637][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  314.669497][T13094] loop6: detected capacity change from 0 to 32768
[  314.673194][T13094] XFS: noikeep mount option is deprecated.
[  314.688572][T13094] XFS (loop6): DAX unsupported by block device. Turning off DAX.
[  314.691896][T13094] XFS (loop6): cannot change alignment: superblock does not support data alignment
[  315.371244][  T974] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  315.529878][  T974] usb 5-1: New USB device found, idVendor=187f, idProduct=0202, bcdDevice=39.91
[  315.535030][  T974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  315.538194][  T974] usb 5-1: Product: syz
[  315.539877][  T974] usb 5-1: Manufacturer: syz
[  315.543931][  T974] usb 5-1: SerialNumber: syz
[  315.550486][  T974] usb 5-1: config 0 descriptor??
[  315.560608][  T974] smsusb:smsusb_probe: board id=11, interface number 0
[  315.567182][  T974] smsusb:smsusb_probe: Device initialized with return code -19
[  315.769869][   T24] usb 5-1: USB disconnect, device number 35
[  316.571705][   T10] usb 5-1: new full-speed USB device number 36 using dummy_hcd
[  316.728352][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[  316.733294][T13152] wireguard: wg2: Could not create IPv4 socket
[  316.740905][   T10] usb 5-1: not running at top speed; connect to a high speed hub
[  316.746276][   T10] usb 5-1: config 253 has an invalid interface number: 153 but max is 0
[  316.749711][   T10] usb 5-1: config 253 has no interface number 0
[  316.760379][   T10] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=56.96
[  316.765695][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  316.769026][   T10] usb 5-1: Product: syz
[  316.770701][   T10] usb 5-1: Manufacturer: syz
[  316.775991][   T10] usb 5-1: SerialNumber: syz
[  316.957525][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  316.960180][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  316.997086][   T10] usbhid 5-1:253.153: couldn't find an input interrupt endpoint
[  317.008961][   T10] usb 5-1: USB disconnect, device number 36
[  317.074485][T13166] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  317.920489][T13197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2955'.
[  318.771403][   T24] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  318.931384][   T24] usb 5-1: Using ep0 maxpacket: 32
[  318.942460][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  318.946932][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  318.950824][   T24] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  318.960132][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  318.967248][   T24] usb 5-1: config 0 descriptor??
[  319.268154][T13249] netlink: 'syz.1.2977': attribute type 1 has an invalid length.
[  319.273951][T13249] netlink: 'syz.1.2977': attribute type 1 has an invalid length.
[  319.411887][T13257] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2981'.
[  319.472932][   T24] savu 0003:1E7D:2D5A.0012: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0
[  319.495399][T13260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2982'.
[  319.916300][ T5916] usb 5-1: USB disconnect, device number 37
[  320.429547][T13291] netlink: 27 bytes leftover after parsing attributes in process `syz.6.2995'.
[  320.556768][T13299] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  320.587725][T13301] loop6: detected capacity change from 0 to 256
[  320.590849][T13301] exfat: Deprecated parameter 'namecase'
[  320.598448][T13301] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  320.674962][T13306] loop4: detected capacity change from 0 to 1024
[  320.687018][T13309] loop6: detected capacity change from 0 to 1024
[  320.700078][T13309] EXT4-fs: Ignoring removed bh option
[  320.703075][T13309] EXT4-fs (loop6): bad geometry: block count 768 exceeds size of device (512 blocks)
[  320.810348][T13313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3004'.
[  320.815434][T13313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3004'.
[  320.818125][T13312] input: syz0 as /devices/virtual/input/input14
[  320.945871][T13319] cgroup: Invalid name
[  321.893739][T13345] loop6: detected capacity change from 0 to 512
[  321.900404][T13345] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  323.314688][T13365] loop6: detected capacity change from 0 to 2048
[  323.350515][T13367] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  323.419622][T13365] CPU: 0 UID: 0 PID: 13365 Comm: syz.6.3026 Not tainted syzkaller #0 PREEMPT(full) 
[  323.419653][T13365] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  323.419666][T13365] Call Trace:
[  323.419674][T13365]  <TASK>
[  323.419683][T13365]  dump_stack_lvl+0x189/0x250
[  323.419713][T13365]  ? rcu_is_watching+0x15/0xb0
[  323.419734][T13365]  ? __pfx_dump_stack_lvl+0x10/0x10
[  323.419752][T13365]  ? kmem_cache_alloc_noprof+0x21a/0x3c0
[  323.419777][T13365]  ? __asan_memset+0x22/0x50
[  323.419799][T13365]  ? nilfs_btree_alloc_path+0x5e5/0x610
[  323.419828][T13365]  nilfs_btree_last_key+0x491/0x620
[  323.419851][T13365]  nilfs_bmap_last_key+0x7a/0x130
[  323.419879][T13365]  nilfs_truncate_bmap+0xfe/0x340
[  323.419906][T13365]  ? __pfx_nilfs_truncate_bmap+0x10/0x10
[  323.419935][T13365]  ? nilfs_transaction_begin+0x52a/0x710
[  323.419953][T13365]  ? __pfx_nilfs_get_block+0x10/0x10
[  323.419972][T13365]  nilfs_truncate+0x279/0x4e0
[  323.420000][T13365]  ? __pfx_nilfs_truncate+0x10/0x10
[  323.420043][T13365]  ? truncate_setsize+0xcf/0xf0
[  323.420068][T13365]  nilfs_setattr+0x206/0x2b0
[  323.420099][T13365]  ? __pfx_nilfs_setattr+0x10/0x10
[  323.420131][T13365]  ? try_break_deleg+0x79/0x130
[  323.420149][T13365]  ? __pfx_nilfs_setattr+0x10/0x10
[  323.420176][T13365]  notify_change+0xb36/0xe40
[  323.420208][T13365]  do_truncate+0x1a4/0x220
[  323.420227][T13365]  ? __pfx_do_truncate+0x10/0x10
[  323.420245][T13365]  ? apparmor_file_truncate+0x23e/0x2d0
[  323.420288][T13365]  path_openat+0x306c/0x3830
[  323.420309][T13365]  ? arch_stack_walk+0xfc/0x150
[  323.420355][T13365]  ? __pfx_path_openat+0x10/0x10
[  323.420370][T13365]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  323.420399][T13365]  do_filp_open+0x1fa/0x410
[  323.420416][T13365]  ? __lock_acquire+0xab9/0xd20
[  323.420477][T13365]  ? __pfx_do_filp_open+0x10/0x10
[  323.420511][T13365]  ? _raw_spin_unlock+0x28/0x50
[  323.420530][T13365]  ? alloc_fd+0x64c/0x6c0
[  323.420562][T13365]  do_sys_openat2+0x121/0x1c0
[  323.420580][T13365]  ? __se_sys_futex+0x36f/0x400
[  323.420602][T13365]  ? __pfx_do_sys_openat2+0x10/0x10
[  323.420628][T13365]  ? rcu_is_watching+0x15/0xb0
[  323.420648][T13365]  __x64_sys_creat+0x8f/0xc0
[  323.420664][T13365]  do_syscall_64+0xfa/0x3b0
[  323.420674][T13365]  ? lockdep_hardirqs_on+0x9c/0x150
[  323.420686][T13365]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  323.420698][T13365]  ? exc_page_fault+0x9f/0xf0
[  323.420712][T13365]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  323.420720][T13365] RIP: 0033:0x7f667778ebe9
[  323.420731][T13365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  323.420739][T13365] RSP: 002b:00007f6678697038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[  323.420750][T13365] RAX: ffffffffffffffda RBX: 00007f66779c5fa0 RCX: 00007f667778ebe9
[  323.420758][T13365] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000200000000000
[  323.420763][T13365] RBP: 00007f6677811e19 R08: 0000000000000000 R09: 0000000000000000
[  323.420769][T13365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  323.420774][T13365] R13: 00007f66779c6038 R14: 00007f66779c5fa0 R15: 00007fffa3a98b98
[  323.420794][T13365]  </TASK>
[  323.420799][T13365] NILFS (loop6): btree level mismatch (ino=16): 1 != 7
[  323.543699][T13365] NILFS error (device loop6): nilfs_bmap_last_key: broken bmap (inode number=16)
[  323.604567][T13365] Remounting filesystem read-only
[  323.608144][T13365] NILFS (loop6): error -5 truncating bmap (ino=16)
[  323.629719][ T8147] NILFS (loop6): disposed unprocessed dirty file(s) when detaching log writer
[  324.552679][   T24] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  324.714407][   T24] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  324.722024][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  324.725895][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  324.730203][   T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  324.740316][   T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  324.746283][   T24] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  324.749274][   T24] usb 5-1: Manufacturer: syz
[  324.757554][   T24] usb 5-1: config 0 descriptor??
[  325.184875][   T24] appleir 0003:05AC:8243.0013: unknown main item tag 0x0
[  325.198632][   T24] appleir 0003:05AC:8243.0013: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0
[  325.242722][T13417] loop6: detected capacity change from 0 to 8
[  325.672368][   T13] af_packet: tpacket_rcv: packet too big, clamped from 24 to 4294967272. macoff=96
[  326.003043][   T24] usb 5-1: USB disconnect, device number 38
[  326.029303][T13416] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  326.035051][T13416] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  326.055116][T13416] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  326.057672][T13416] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  326.076900][T13416] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  326.079540][T13416] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  326.404146][T13444] overlayfs: failed to clone lowerpath
[  326.457198][T13446] loop6: detected capacity change from 0 to 512
[  326.487272][T13446] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  326.490607][T13446] System zones: 0-7
[  326.500193][T13446] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  326.626713][ T8147] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  327.244692][T13472] ieee802154 phy0 wpan0: encryption failed: -22
[  327.271359][ T5861] Bluetooth: hci0: command 0x0406 tx timeout
[  327.454923][T13476] loop6: detected capacity change from 0 to 8192
[  327.842482][T13487] loop6: detected capacity change from 0 to 1024
[  328.071322][ T5861] Bluetooth: hci2: command 0x0406 tx timeout
[  328.149313][T13493] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3082'.
[  328.152391][ T5861] Bluetooth: hci1: command 0x0406 tx timeout
[  328.236322][T13489] loop6: detected capacity change from 0 to 32768
[  328.239599][T13489] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3080 (13489)
[  328.252453][T13489] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  328.262395][T13489] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm
[  328.342376][T13489] BTRFS info (device loop6): enabling ssd optimizations
[  328.344658][T13489] BTRFS info (device loop6): enabling free space tree
[  328.390478][ T8147] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  328.453706][ T5902] usb 5-1: new full-speed USB device number 39 using dummy_hcd
[  328.649114][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  328.653930][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  328.672443][ T5902] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  328.677513][ T5902] usb 5-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00
[  328.681014][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  328.732134][ T5902] usb 5-1: config 0 descriptor??
[  329.150739][ T5902] logitech 0003:046D:CA04.0014: unknown main item tag 0x4
[  329.159212][ T5902] logitech 0003:046D:CA04.0014: hidraw0: USB HID vff.fa Device [HID 046d:ca04] on usb-dummy_hcd.4-1/input0
[  329.167454][ T5902] logitech 0003:046D:CA04.0014: no inputs found
[  329.350523][ T5883] usb 5-1: USB disconnect, device number 39
[  329.357214][ T5861] Bluetooth: hci0: command 0x0406 tx timeout
[  330.114953][T13536] loop4: detected capacity change from 0 to 32768
[  330.120905][T13536] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3095 (13536)
[  330.139739][T13536] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  330.145819][T13536] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  330.151249][ T5861] Bluetooth: hci2: command 0x0406 tx timeout
[  330.193575][T13536] BTRFS info (device loop4): enabling ssd optimizations
[  330.196484][T13536] BTRFS info (device loop4): enabling free space tree
[  330.222107][ T7294] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  330.241242][ T5861] Bluetooth: hci1: command 0x0406 tx timeout
[  330.618531][T13564] RDS: rds_bind could not find a transport for 0:0:4::1, load rds_tcp or rds_rdma?
[  330.906224][T13578] loop4: detected capacity change from 0 to 2048
[  330.930998][T13579] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  331.168263][T13585] loop4: detected capacity change from 0 to 512
[  331.178831][T13585] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  331.198389][T13585] EXT4-fs (loop4): 1 truncate cleaned up
[  331.201543][T13585] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  331.242115][ T7294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  331.567658][ T5861] Bluetooth: hci2: unexpected event for opcode 0x0c5b
[  331.685238][T13619] loop4: detected capacity change from 0 to 64
[  331.882986][T13630] loop4: detected capacity change from 0 to 512
[  331.894558][T13630] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.3130: corrupted in-inode xattr: invalid ea_ino
[  331.900559][T13630] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.3130: couldn't read orphan inode 15 (err -117)
[  331.907349][T13630] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  332.645696][ T7294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  333.185767][ T5861] Bluetooth: hci0: unexpected event for opcode 0x0c38
[  333.236642][T13675] loop4: detected capacity change from 0 to 8
[  333.318144][T13649] loop6: detected capacity change from 0 to 32768
[  333.396989][T13649] XFS (loop6): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  333.412144][T13680] loop4: detected capacity change from 0 to 4096
[  333.416276][T13680] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  333.438422][T13680] ntfs3(loop4): Failed to load $Extend (-22).
[  333.440790][T13680] ntfs3(loop4): Failed to initialize $Extend.
[  333.460728][T13649] XFS (loop6): Ending clean mount
[  333.499406][T13649] XFS (loop6): Quotacheck needed: Please wait.
[  333.507253][T13691] loop4: detected capacity change from 0 to 2048
[  333.565327][ T5942] Alternate GPT is invalid, using primary GPT.
[  333.567414][ T5942]  loop4: p1 p2 p3
[  333.573033][T13649] XFS (loop6): Quotacheck: Done.
[  333.613056][T13691] Alternate GPT is invalid, using primary GPT.
[  333.616224][T13691]  loop4: p1 p2 p3
[  333.670677][T13697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3157'.
[  333.676054][ T8147] XFS (loop6): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  333.738550][T13699] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3159'.
[  333.766758][ T6050] udevd[6050]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  333.766827][ T5863] udevd[5863]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  333.793191][ T5942] udevd[5942]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  333.810211][T13701] netlink: 'syz.1.3160': attribute type 1 has an invalid length.
[  333.838779][ T6050] udevd[6050]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  333.838997][ T5863] udevd[5863]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  333.846133][ T5942] udevd[5942]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  334.690739][T13728] loop6: detected capacity change from 0 to 4096
[  334.785179][T13728] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  334.838160][T13734] openvswitch: netlink: IP tunnel dst address not specified
[  334.850711][T13728] ntfs3(loop6): ino=1f, "file2" attr_set_size
[  334.946131][ T8147] ntfs3(loop6): ino=9, ntfs_sync_fs failed, -22.
[  335.547695][T13742] loop6: detected capacity change from 0 to 32768
[  335.556285][T13742] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3177 (13742)
[  335.586349][T13742] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  335.593438][T13742] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm
[  335.679705][T13742] BTRFS info (device loop6): enabling ssd optimizations
[  335.687227][T13742] BTRFS info (device loop6): enabling free space tree
[  335.692271][T13742] BTRFS info (device loop6): use zlib compression, level 3
[  335.826169][ T8147] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  336.865262][T13810] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  337.158214][T13828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3210'.
[  337.164674][T13828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3210'.
[  337.280773][T13838] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3215'.
[  337.661459][ T5902] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  337.811161][ T5902] usb 5-1: Using ep0 maxpacket: 8
[  337.817826][ T5902] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  337.821839][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  337.825155][ T5902] usb 5-1: Product: syz
[  337.826884][ T5902] usb 5-1: Manufacturer: syz
[  337.828905][ T5902] usb 5-1: SerialNumber: syz
[  337.838494][ T5902] usb 5-1: config 0 descriptor??
[  338.047558][ T5902] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  338.858130][ T5902] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  338.867783][ T5902] usb 5-1: USB disconnect, device number 40
[  339.189968][T13868] loop6: detected capacity change from 0 to 4096
[  339.195701][T13868] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512).
[  339.236014][T13868] ntfs3(loop6): Inode r=19 is not in use!
[  339.238606][T13868] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  339.248353][T13868] ntfs3(loop6): Failed to initialize $Extend/$Reparse.
[  339.273623][T13868] ntfs3(loop6): ino=1b, mi_enum_attr
[  339.281567][T13868] ntfs3(loop6): ino=1b, mi_enum_attr
[  340.071564][ T5883] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  340.221606][ T5883] usb 5-1: Using ep0 maxpacket: 8
[  340.226235][ T5883] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  340.230375][ T5883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  340.234903][ T5883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  340.238881][ T5883] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  340.243359][ T5883] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[  340.250281][ T5883] usb 5-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=14.a8
[  340.254478][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  340.258375][ T5883] usb 5-1: Product: syz
[  340.260194][ T5883] usb 5-1: Manufacturer: syz
[  340.262373][ T5883] usb 5-1: SerialNumber: syz
[  340.265610][ T5883] usb 5-1: config 0 descriptor??
[  340.269862][ T5883] redrat3 5-1:0.0: Couldn't find all endpoints
[  340.479094][   T24] usb 5-1: USB disconnect, device number 41
[  340.683921][T13922] loop6: detected capacity change from 0 to 32768
[  340.695045][T13922] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  340.718524][T13922] XFS (loop6): Ending clean mount
[  340.728817][T13922] XFS (loop6): Quotacheck needed: Please wait.
[  340.788470][T13922] XFS (loop6): Quotacheck: Done.
[  340.800084][   T33] kauditd_printk_skb: 2 callbacks suppressed
[  340.800127][   T33] audit: type=1800 audit(1756998800.295:61): pid=13922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3253" name="file1" dev="loop6" ino=4422 res=0 errno=0
[  340.875479][ T5861] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  340.879246][ T5861] Bluetooth: hci0: Injecting HCI hardware error event
[  340.883731][ T5861] Bluetooth: hci0: hardware error 0x00
[  341.156774][T13937] netlink: 'syz.4.3256': attribute type 5 has an invalid length.
[  341.161573][T13937] netlink: 'syz.4.3256': attribute type 7 has an invalid length.
[  341.180712][T13937] : entered promiscuous mode
[  341.618279][ T8147] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  342.894279][T13954] loop6: detected capacity change from 0 to 1024
[  342.951282][ T5861] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  342.976632][ T4200] hfsplus: b-tree write err: -5, ino 4
[  342.976912][T13959] overlayfs: failed to clone lowerpath
[  343.076858][T13964] evm: overlay not supported
[  343.303797][T13981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3276'.
[  343.664870][   T33] audit: type=1326 audit(1756998803.165:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14008 comm="syz.4.3289" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0545d8ebe9 code=0x7ffc0000
[  343.679203][T14007] loop6: detected capacity change from 0 to 4096
[  343.682783][   T33] audit: type=1326 audit(1756998803.165:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14008 comm="syz.4.3289" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0545d8ebe9 code=0x7ffc0000
[  343.703334][   T33] audit: type=1326 audit(1756998803.165:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14008 comm="syz.4.3289" exe="/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f0545d8ebe9 code=0x7ffc0000
[  343.721522][   T33] audit: type=1326 audit(1756998803.165:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14008 comm="syz.4.3289" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0545d8ebe9 code=0x7ffc0000
[  343.728509][   T33] audit: type=1326 audit(1756998803.165:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14008 comm="syz.4.3289" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0545d8ebe9 code=0x7ffc0000
[  343.760789][   T33] audit: type=1326 audit(1756998803.165:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14008 comm="syz.4.3289" exe="/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f0545d8ebe9 code=0x7ffc0000
[  343.781289][   T33] audit: type=1326 audit(1756998803.165:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14008 comm="syz.4.3289" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0545d8ebe9 code=0x7ffc0000
[  345.185921][T14041] syzkaller1: entered promiscuous mode
[  345.190404][T14041] syzkaller1: entered allmulticast mode
[  345.810973][T14064] loop4: detected capacity change from 0 to 2048
[  345.827418][T14064] NILFS (loop4): couldn't mount RDWR because of unsupported optional features (40)
[  346.235344][T14065] loop6: detected capacity change from 0 to 32768
[  346.331291][T14065] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  346.433994][T14065] XFS (loop6): Ending clean mount
[  346.452275][T14065] XFS (loop6): Quotacheck needed: Please wait.
[  346.534177][T14065] XFS (loop6): Quotacheck: Done.
[  346.820676][ T8147] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  348.125939][T14094] loop4: detected capacity change from 0 to 32768
[  348.156368][T14094] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  348.169364][T14094] XFS (loop4): Ending clean mount
[  348.177039][T14094] XFS (loop4): Quotacheck needed: Please wait.
[  348.220286][T14094] XFS (loop4): Quotacheck: Done.
[  348.252298][ T7294] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  348.505936][T14115] loop4: detected capacity change from 0 to 512
[  348.512601][T14115] EXT4-fs: Ignoring removed i_version option
[  348.539418][T14115] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  348.613386][ T7294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  349.545836][T14163] netlink: 512 bytes leftover after parsing attributes in process `syz.4.3349'.
[  349.811760][T14169] loop4: detected capacity change from 0 to 32768
[  349.834357][T14169] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  349.882989][T14169] XFS (loop4): Ending clean mount
[  349.916239][ T7294] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  351.347609][T14208] netlink: 'syz.6.3365': attribute type 1 has an invalid length.
[  351.563722][T14212] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  352.827809][T14246] loop4: detected capacity change from 0 to 2048
[  352.837596][T14246] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  352.850396][T14246] UDF-fs: error (device loop4): udf_read_inode: (ino 1345) failed !bh
[  352.947972][T14250] loop4: detected capacity change from 0 to 2048
[  352.978282][T14250] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  353.008397][ T7294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  353.096409][T14255] loop4: detected capacity change from 0 to 8
[  353.119865][T14255] squashfs image failed sanity check
[  353.381389][ T5902] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  353.541045][ T5902] usb 5-1: Using ep0 maxpacket: 32
[  353.547159][ T5902] usb 5-1: config index 0 descriptor too short (expected 35577, got 27)
[  353.550682][ T5902] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  353.554753][ T5902] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92
[  353.558469][ T5902] usb 5-1: config 1 has no interface number 0
[  353.561339][ T5902] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  353.565920][ T5902] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  353.572592][ T5902] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  353.576258][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  353.596624][ T5902] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found
[  353.796211][ T5902] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached
[  354.219831][ T5902] usb 5-1: USB disconnect, device number 42
[  354.226153][ T5902] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected
[  354.315836][T14285] 9pnet_fd: Insufficient options for proto=fd
[  355.354579][T14309] overlayfs: failed to clone upperpath
[  355.863348][T14325] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3417'.
[  355.937434][T14331] loop6: detected capacity change from 0 to 512
[  355.940752][T14330] netlink: 'syz.4.3420': attribute type 1 has an invalid length.
[  355.944623][T14330] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3420'.
[  355.978034][T14331] EXT4-fs error (device loop6): ext4_orphan_get:1392: comm syz.6.3421: inode #13: comm syz.6.3421: iget: illegal inode #
[  355.984987][T14331] EXT4-fs (loop6): Remounting filesystem read-only
[  355.988072][T14331] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  356.145612][T14342] loop4: detected capacity change from 0 to 16
[  356.152085][T14342] erofs (device loop4): mounted with root inode @ nid 36.
[  356.154158][ T8147] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  356.605682][T14352] loop6: detected capacity change from 0 to 512
[  356.628022][T14352] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.3428: error while reading EA inode 32 err=-116
[  356.661142][T14355] netlink: 'syz.4.3430': attribute type 3 has an invalid length.
[  356.664381][T14352] EXT4-fs (loop6): Remounting filesystem read-only
[  356.667315][T14352] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  356.675344][T14352] EXT4-fs (loop6): 1 orphan inode deleted
[  356.678295][T14352] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  356.689000][T14352] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  357.053679][T14361] loop6: detected capacity change from 0 to 32768
[  357.092632][T14361] XFS (loop6): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  357.100231][   T33] audit: type=1326 audit(1757001394.598:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14377 comm="syz.1.3439" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd1dd58ebe9 code=0x0
[  357.130974][   T24] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  357.134380][T14361] XFS (loop6): Starting recovery (logdev: internal)
[  357.150177][T14361] XFS (loop6): Ending recovery (logdev: internal)
[  357.184251][ T8147] XFS (loop6): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  357.302020][   T24] usb 5-1: Using ep0 maxpacket: 32
[  357.305719][   T24] usb 5-1: config 64 has an invalid interface number: 110 but max is 0
[  357.308578][   T24] usb 5-1: config 64 has no interface number 0
[  357.312686][   T24] usb 5-1: config 64 interface 110 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  357.317092][   T24] usb 5-1: config 64 interface 110 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  357.321334][   T24] usb 5-1: config 64 interface 110 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024
[  357.324914][   T24] usb 5-1: config 64 interface 110 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  357.328474][   T24] usb 5-1: config 64 interface 110 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  357.332147][   T24] usb 5-1: config 64 interface 110 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  357.335217][   T24] usb 5-1: config 64 interface 110 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  357.341543][   T24] usb 5-1: New USB device found, idVendor=04fc, idProduct=0231, bcdDevice=6f.a9
[  357.344574][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  357.347716][   T24] usb 5-1: Product: syz
[  357.349355][   T24] usb 5-1: Manufacturer: syz
[  357.351539][   T24] usb 5-1: SerialNumber: syz
[  357.358648][T14363] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  357.365520][   T24] spcp8x5 5-1:64.110: SPCP8x5 converter detected
[  357.371304][   T24] usb 5-1: SPCP8x5 converter now attached to ttyUSB0
[  357.573410][   T24] usb 5-1: USB disconnect, device number 43
[  357.585053][   T24] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0
[  357.588205][   T24] spcp8x5 5-1:64.110: device disconnected
[  358.658801][T14412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3454'.
[  358.663985][T14413] loop6: detected capacity change from 0 to 256
[  358.667496][T14413] exfat: Deprecated parameter 'namecase'
[  358.682542][T14413] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  359.006891][T14397] 9pnet_fd: p9_fd_create_tcp (14397): problem connecting socket to 127.0.0.1
[  359.075847][T14415] loop6: detected capacity change from 0 to 32768
[  359.083512][T14415] BTRFS warning: excessive commit interval 2147483647, use with care
[  359.106893][T14415] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3455 (14415)
[  359.145253][T14415] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  359.149384][T14415] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm
[  359.160893][T14415] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  359.250840][T14415] BTRFS info (device loop6): rebuilding free space tree
[  359.291399][T14415] BTRFS info (device loop6): disabling free space tree
[  359.296976][T14415] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  359.310592][T14415] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  359.313910][ T5902] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  359.336376][T14415] BTRFS info (device loop6): setting nodatasum
[  359.338990][T14415] BTRFS info (device loop6): enabling ssd optimizations
[  359.353423][T14415] BTRFS info (device loop6): turning off barriers
[  359.356157][T14415] BTRFS info (device loop6): turning on flush-on-commit
[  359.359432][T14415] BTRFS info (device loop6): turning on sync discard
[  359.363037][T14415] BTRFS info (device loop6): enabling disk space caching
[  359.365790][T14415] BTRFS info (device loop6): force clearing of disk cache
[  359.368542][T14415] BTRFS info (device loop6): doing ref verification
[  359.374998][T14415] BTRFS info (device loop6): max_inline set to 0
[  359.444652][ T8147] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  359.463286][ T5902] usb 5-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 1023
[  359.466641][ T5902] usb 5-1: config 1 interface 0 has no altsetting 0
[  359.476806][ T5902] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  359.483572][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  359.490471][ T5902] usb 5-1: Product: syz
[  359.491827][ T5902] usb 5-1: Manufacturer: syz
[  359.493402][ T5902] usb 5-1: SerialNumber: syz
[  359.530903][T14426] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  359.697920][T14447] netdevsim netdevsim6 netdevsim0: entered allmulticast mode
[  359.725209][T14447] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  359.761635][ T5902] usb 5-1: USB disconnect, device number 44
[  361.245470][T14485] netlink: 244 bytes leftover after parsing attributes in process `syz.6.3477'.
[  361.504715][T14500] : entered promiscuous mode
[  361.523993][T14500] : left promiscuous mode
[  361.605881][T14506] loop4: detected capacity change from 0 to 512
[  361.631090][T14506] EXT4-fs: Ignoring removed orlov option
[  361.644609][T14506] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  361.668312][T14506] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  361.691539][T14506] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.3487: corrupted in-inode xattr: e_value size too large
[  361.705688][T14506] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.3487: couldn't read orphan inode 15 (err -117)
[  361.713178][T14506] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  361.778998][ T7294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  362.767250][T14521] program syz.4.3492 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  363.209834][   T10] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  363.365279][   T10] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50
[  363.369067][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  363.372663][   T10] usb 5-1: Product: syz
[  363.374352][   T10] usb 5-1: Manufacturer: syz
[  363.376262][   T10] usb 5-1: SerialNumber: syz
[  363.381951][   T10] usb 5-1: config 0 descriptor??
[  363.388259][   T10] usb 5-1: Waiting for MOTU Microbook II to boot up...
[  363.391557][   T10] usb 5-1: failed setting the sample rate for Motu MicroBook II: -22
[  363.394806][   T10] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22
[  363.599193][   T10] usb 5-1: USB disconnect, device number 45
[  364.165475][T14533] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  364.169340][T14533] syzkaller0: entered promiscuous mode
[  364.175608][T14533] syzkaller0: entered allmulticast mode
[  364.200183][T14533] tipc: Resetting bearer <eth:syzkaller0>
[  364.206926][T14532] tipc: Resetting bearer <eth:syzkaller0>
[  364.223596][T14532] tipc: Disabling bearer <eth:syzkaller0>
[  364.601126][T14538] loop4: detected capacity change from 0 to 32768
[  364.605953][T14538] bcachefs (/dev/loop4): error validating superblock: Invalid superblock section replicas_v0: invalid device 1 in entry user: 1/113 [0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 1 1 1 1 1 1 1 1 2 2 4 5 5 5 5 5 6 8 10 108]
[  364.605953][T14538] replicas_v0 (size 24):
[  364.605953][T14538] btree: 1 [0] journal: 1 [0] user: 113 [4 0 0 0 0 0 0 0 108 1 0 0 6 0 0 0 0 0 0 0 0 0 0 0 10 0 0 0 0 0 0 0 1 0 1 0 5 0 0 0 8 0 0 0 0 0 0 0 1 0 2 0 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 1 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 2 5 0 0 0 0 0 0 0 0 0 0 0 1]
[  364.605953][T14538] 
[  364.633826][T14538] bcachefs: bch2_fs_get_tree() error: invalid_replicas_entry
[  364.763099][T14542] loop6: detected capacity change from 0 to 1024
[  365.053420][T14558] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3509'.
[  365.555481][T14571] loop4: detected capacity change from 0 to 512
[  365.564249][T14571] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.3514: bad orphan inode 11
[  365.568056][T14571] ext4_test_bit(bit=10, block=4) = 1
[  365.570736][T14571] is_bad_inode(inode)=0
[  365.572399][T14571] NEXT_ORPHAN(inode)=2080374784
[  365.574561][T14571] max_ino=32
[  365.576018][T14571] i_nlink=0
[  365.577350][T14571] EXT4-fs (loop4): 1 truncate cleaned up
[  365.581579][T14571] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  365.620616][ T7294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  365.672691][T14576] loop4: detected capacity change from 0 to 256
[  365.684274][T14576] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d)
[  366.053364][ T5916] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  366.081389][T14588] loop6: detected capacity change from 0 to 8192
[  366.087050][T14588] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  366.175798][T14588] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1052)
[  366.179271][T14588] FAT-fs (loop6): Filesystem has been set read-only
[  366.184677][T14588] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1052)
[  366.188349][T14588] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1052)
[  366.199625][ T5916] usb 5-1: Using ep0 maxpacket: 32
[  366.208615][ T5916] usb 5-1: config 0 has an invalid interface number: 20 but max is 0
[  366.217466][ T5916] usb 5-1: config 0 has no interface number 0
[  366.239780][ T5916] usb 5-1: New USB device found, idVendor=0d8e, idProduct=7811, bcdDevice= 3.81
[  366.249398][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  366.252467][ T5916] usb 5-1: Product: syz
[  366.254255][ T5916] usb 5-1: Manufacturer: syz
[  366.256136][ T5916] usb 5-1: SerialNumber: syz
[  366.261492][ T5916] usb 5-1: config 0 descriptor??
[  366.275674][ T5916] usb 5-1: Could not find all expected endpoints
[  366.285039][ T8147] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1052)
[  366.445011][T14594] veth3: entered promiscuous mode
[  366.447216][T14594] veth3: entered allmulticast mode
[  366.481666][ T5902] usb 5-1: USB disconnect, device number 46
[  367.479867][T14602] loop4: detected capacity change from 0 to 2048
[  367.497201][T14602] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  367.529654][ T5942] udevd[5942]: incorrect nilfs2 checksum on /dev/loop4
[  367.545356][T14602] NILFS (loop4): too large checkpoint size: 1741 bytes
[  367.560180][T14602] NILFS (loop4): error -22 while loading super root
[  367.608998][ T5942] udevd[5942]: incorrect nilfs2 checksum on /dev/loop4
[  368.272646][T14625] loop4: detected capacity change from 0 to 128
[  368.363789][T14625] syz.4.3538: attempt to access beyond end of device
[  368.363789][T14625] loop4: rw=34817, sector=102, nr_sectors = 32 limit=128
[  368.647468][T14627] loop6: detected capacity change from 0 to 32768
[  368.681577][T14627] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  368.731460][T14627] XFS (loop6): Ending clean mount
[  368.741865][T14627] XFS (loop6): Quotacheck needed: Please wait.
[  368.793043][T14627] XFS (loop6): Quotacheck: Done.
[  368.832279][ T8147] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  368.983062][T14636] loop4: detected capacity change from 0 to 32768
[  368.990557][T14636] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3543 (14636)
[  369.036125][T14636] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  369.049723][T14636] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  369.098817][T14649] loop6: detected capacity change from 0 to 512
[  369.204350][T14649] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.3545: invalid indirect mapped block 1024 (level 0)
[  369.223965][T14649] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3545: bg 0: block 35: padding at end of block bitmap is not set
[  369.232536][T14649] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  369.247227][T14649] EXT4-fs (loop6): 1 truncate cleaned up
[  369.254537][T14649] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  369.256035][T14636] BTRFS info (device loop4): enabling ssd optimizations
[  369.263185][T14636] BTRFS info (device loop4): enabling free space tree
[  369.321830][ T7294] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  369.330052][ T8147] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  370.342719][T14686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3553'.
[  370.641914][T14702] loop4: detected capacity change from 0 to 512
[  370.654977][T14702] EXT4-fs: Ignoring removed orlov option
[  370.662114][T14702] EXT4-fs (loop4): Test dummy encryption mode enabled
[  370.674633][T14702] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  370.694403][T14702] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  370.698614][T14702] EXT4-fs error (device loop4): ext4_add_entry:2417: inode #2: comm syz.4.3561: Directory hole found for htree leaf block 0
[  370.713996][T14702] EXT4-fs (loop4): Remounting filesystem read-only
[  370.728938][ T7294] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000.
[  371.048894][   T24] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  371.181910][T14716] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3566'.
[  371.184751][T14716] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3566'.
[  371.188302][T14716] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3566'.
[  371.192310][T14716] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3566'.
[  371.208875][   T24] usb 5-1: Using ep0 maxpacket: 8
[  371.212804][   T24] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  371.215993][   T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  371.220088][   T24] usb 5-1: config 0 has no interface number 0
[  371.222471][   T24] usb 5-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75
[  371.228873][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  371.244490][   T24] usb 5-1: config 0 descriptor??
[  371.520447][T14732] overlayfs: failed to resolve './file0': -2
[  371.655112][ T5902] usb 5-1: USB disconnect, device number 47
[  372.782797][T14777] netlink: 'syz.1.3595': attribute type 1 has an invalid length.
[  372.806501][T14777] 8021q: adding VLAN 0 to HW filter on device bond3
[  372.829086][T14777] vlan2: entered allmulticast mode
[  372.830935][T14777] batadv0: entered allmulticast mode
[  372.838437][T14777] bond3: (slave vlan2): making interface the new active one
[  372.847237][T14777] bond3: (slave vlan2): Enslaving as an active interface with an up link
[  372.867769][T14767] loop4: detected capacity change from 0 to 40427
[  372.871596][T14767] F2FS-fs (loop4): build fault injection rate: 14
[  372.873821][T14767] F2FS-fs (loop4): build fault injection type: 0x3bfe8c
[  372.883585][T14767] F2FS-fs (loop4): invalid crc value
[  372.922618][    C1] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  372.933345][    C1] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  372.990295][T14767] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  372.994006][T14767] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  373.000802][T14767] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  373.018352][T14767] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  373.025293][T14767] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_convert_inline_inode+0x6bd/0x880
[  373.051955][ T7294] syz-executor: attempt to access beyond end of device
[  373.051955][ T7294] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  373.057161][ T7294] CPU: 0 UID: 0 PID: 7294 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  373.057176][ T7294] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  373.057184][ T7294] Call Trace:
[  373.057190][ T7294]  <TASK>
[  373.057197][ T7294]  dump_stack_lvl+0x189/0x250
[  373.057224][ T7294]  ? __pfx_dump_stack_lvl+0x10/0x10
[  373.057237][ T7294]  ? __pfx_queue_work_on+0x10/0x10
[  373.057249][ T7294]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  373.057267][ T7294]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  373.057296][ T7294]  f2fs_handle_critical_error+0x37c/0x540
[  373.057324][ T7294]  f2fs_write_end_io+0x886/0xb60
[  373.057355][ T7294]  __submit_merged_bio+0x27a/0x6a0
[  373.057381][ T7294]  __submit_merged_write_cond+0x255/0x530
[  373.057406][ T7294]  f2fs_write_data_pages+0x261d/0x3000
[  373.057459][ T7294]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  373.057521][ T7294]  ? __mod_zone_page_state+0xd7/0x140
[  373.057556][ T7294]  ? folios_put_refs+0x560/0x640
[  373.057583][ T7294]  ? __lock_acquire+0xab9/0xd20
[  373.057608][ T7294]  ? do_raw_spin_lock+0x121/0x290
[  373.057670][ T7294]  ? do_raw_spin_unlock+0x4d/0x240
[  373.057682][ T7294]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  373.057718][ T7294]  do_writepages+0x32e/0x550
[  373.057740][ T7294]  ? do_raw_spin_unlock+0x4d/0x240
[  373.057754][ T7294]  filemap_fdatawrite+0x199/0x240
[  373.057769][ T7294]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  373.057816][ T7294]  ? do_raw_spin_unlock+0x4d/0x240
[  373.057834][ T7294]  f2fs_sync_dirty_inodes+0x31f/0x830
[  373.057863][ T7294]  f2fs_write_checkpoint+0x95a/0x1df0
[  373.057897][ T7294]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  373.057930][ T7294]  ? kill_f2fs_super+0x298/0x6c0
[  373.057942][ T7294]  kill_f2fs_super+0x2c3/0x6c0
[  373.057953][ T7294]  ? __pfx_kill_f2fs_super+0x10/0x10
[  373.057960][ T7294]  ? radix_tree_delete_item+0x2b6/0x400
[  373.057977][ T7294]  ? shrinker_free+0x2ce/0x3e0
[  373.057987][ T7294]  deactivate_locked_super+0xbc/0x130
[  373.057999][ T7294]  cleanup_mnt+0x425/0x4c0
[  373.058009][ T7294]  ? lockdep_hardirqs_on+0x9c/0x150
[  373.058023][ T7294]  task_work_run+0x1d4/0x260
[  373.058036][ T7294]  ? __pfx_task_work_run+0x10/0x10
[  373.058047][ T7294]  ? __x64_sys_umount+0x122/0x160
[  373.058068][ T7294]  ? exit_to_user_mode_loop+0x40/0x110
[  373.058088][ T7294]  exit_to_user_mode_loop+0xec/0x110
[  373.058100][ T7294]  do_syscall_64+0x2bd/0x3b0
[  373.058106][ T7294]  ? lockdep_hardirqs_on+0x9c/0x150
[  373.058118][ T7294]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  373.058129][ T7294]  ? exc_page_fault+0x9f/0xf0
[  373.058146][ T7294]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  373.058159][ T7294] RIP: 0033:0x7f0545d8ff17
[  373.058171][ T7294] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  373.058178][ T7294] RSP: 002b:00007ffd9aa14df8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  373.058191][ T7294] RAX: 0000000000000000 RBX: 00007f0545e11c05 RCX: 00007f0545d8ff17
[  373.058200][ T7294] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd9aa14eb0
[  373.058206][ T7294] RBP: 00007ffd9aa14eb0 R08: 0000000000000000 R09: 0000000000000000
[  373.058214][ T7294] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd9aa15f40
[  373.058222][ T7294] R13: 00007f0545e11c05 R14: 000000000005b0c3 R15: 00007ffd9aa15f80
[  373.058246][ T7294]  </TASK>
[  373.180344][    C0] vkms_vblank_simulate: vblank timer overrun
[  373.183501][ T7294] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  373.572447][T14806] loop4: detected capacity change from 0 to 128
[  373.611094][T14806] loop4: detected capacity change from 0 to 8
[  373.652756][T14806] SQUASHFS error: Unable to read inode 0x6
[  374.039243][T14814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3610'.
[  374.070269][T14814] team1: entered promiscuous mode
[  374.072405][T14814] team1: entered allmulticast mode
[  374.363318][   T33] audit: type=1326 audit(1757001629.873:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14830 comm="syz.4.3618" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0545d8ebe9 code=0x7ffc0000
[  374.372813][   T33] audit: type=1326 audit(1757001629.873:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14830 comm="syz.4.3618" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0545d8ebe9 code=0x7ffc0000
[  374.382011][   T33] audit: type=1326 audit(1757001629.873:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14830 comm="syz.4.3618" exe="/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f0545d8ebe9 code=0x7ffc0000
[  374.390748][   T33] audit: type=1326 audit(1757001629.873:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14830 comm="syz.4.3618" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0545d8ebe9 code=0x7ffc0000
[  374.399140][   T33] audit: type=1326 audit(1757001629.873:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14830 comm="syz.4.3618" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0545d8ebe9 code=0x7ffc0000
[  374.407446][   T33] audit: type=1326 audit(1757001629.883:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14830 comm="syz.4.3618" exe="/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7f0545d8ebe9 code=0x7ffc0000
[  374.420315][   T33] audit: type=1326 audit(1757001629.883:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14830 comm="syz.4.3618" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0545d8ebe9 code=0x7ffc0000
[  374.432193][   T33] audit: type=1326 audit(1757001629.883:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14830 comm="syz.4.3618" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0545d8ebe9 code=0x7ffc0000
[  374.838813][ T5916] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  375.013552][ T5916] usb 5-1: Using ep0 maxpacket: 16
[  375.019827][ T5916] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  375.024664][ T5916] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  375.031501][ T5916] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  375.039499][ T5916] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  375.043200][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  375.049265][ T5916] usb 5-1: Product: syz
[  375.051116][ T5916] usb 5-1: Manufacturer: syz
[  375.061155][ T5916] usb 5-1: SerialNumber: syz
[  375.281526][ T5916] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  375.318924][ T5916] usb 5-1: USB disconnect, device number 48
[  375.346375][ T5942] udevd[5942]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  375.775198][T14881] loop6: detected capacity change from 0 to 32768
[  375.803968][T14881] JBD2: Can't enable checksumming v1 and v2/3 at the same time!
[  375.807110][T14881] (syz.6.3639,14881,1):ocfs2_journal_init:973 ERROR: Linux journal layer error
[  375.820919][T14881] (syz.6.3639,14881,1):ocfs2_check_volume:2347 ERROR: Could not initialize journal!
[  375.833541][T14881] (syz.6.3639,14881,1):ocfs2_check_volume:2432 ERROR: status = -22
[  375.836671][T14881] (syz.6.3639,14881,1):ocfs2_mount_volume:1764 ERROR: status = -22
[  375.858750][T14881] (syz.6.3639,14881,1):ocfs2_fill_super:1177 ERROR: status = -22
[  376.098937][   T10] usb 5-1: new full-speed USB device number 49 using dummy_hcd
[  376.226349][T14899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3647'.
[  376.264164][   T10] usb 5-1: config 0 has an invalid interface number: 212 but max is 0
[  376.267367][   T10] usb 5-1: config 0 has no interface number 0
[  376.270115][   T10] usb 5-1: config 0 interface 212 has no altsetting 0
[  376.273900][T14901] loop6: detected capacity change from 0 to 4096
[  376.275435][   T10] usb 5-1: New USB device found, idVendor=1ae7, idProduct=0525, bcdDevice=ca.e6
[  376.282437][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  376.284668][T14901] ntfs3(loop6): Primary boot: invalid sectors per cluster 4294967274.
[  376.285420][   T10] usb 5-1: Product: syz
[  376.292654][   T10] usb 5-1: Manufacturer: syz
[  376.294725][   T10] usb 5-1: SerialNumber: syz
[  376.310065][T14901] ntfs3(loop6): try to read out of volume at offset 0x1ffe00
[  376.315790][   T10] usb 5-1: config 0 descriptor??
[  376.320993][   T10] HFC-S_USB 5-1:0.212: probe with driver HFC-S_USB failed with error -5
[  376.534241][   T10] usb 5-1: USB disconnect, device number 49
[  376.621712][T14905] loop6: detected capacity change from 0 to 32768
[  376.625212][T14905] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3650 (14905)
[  376.632140][T14905] BTRFS info (device loop6): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  376.635463][T14905] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm
[  376.671986][T14905] BTRFS info (device loop6): enabling ssd optimizations
[  376.674261][T14905] BTRFS info (device loop6): enabling free space tree
[  376.703217][ T8147] BTRFS info (device loop6): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  376.855472][T14927] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  377.541707][T14935] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4)
[  377.544696][T14935] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  377.553759][T14954] netlink: 'syz.1.3665': attribute type 178 has an invalid length.
[  377.571812][T14935] vhci_hcd vhci_hcd.0: Device attached
[  377.591018][T14935] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  377.610610][T14935] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(8)
[  377.612686][T14935] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  377.615046][T14935] vhci_hcd vhci_hcd.0: Device attached
[  377.664550][T14963] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3668'.
[  377.678017][T14958] vhci_hcd: connection closed
[  377.678527][T14951] vhci_hcd: connection closed
[  377.686428][   T13] vhci_hcd: stop threads
[  377.693456][   T13] vhci_hcd: release socket
[  377.697874][   T13] vhci_hcd: disconnect device
[  377.703061][   T13] vhci_hcd: stop threads
[  377.704868][   T13] vhci_hcd: release socket
[  377.706742][   T13] vhci_hcd: disconnect device
[  377.750434][  T974] vhci_hcd: vhci_device speed not set
[  378.361108][T14989] loop6: detected capacity change from 0 to 256
[  378.401814][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  378.404526][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  378.413087][T14989] FAT-fs (loop6): Directory bread(block 64) failed
[  378.415807][T14989] FAT-fs (loop6): Directory bread(block 65) failed
[  378.418743][T14989] FAT-fs (loop6): Directory bread(block 66) failed
[  378.423631][T14989] FAT-fs (loop6): Directory bread(block 67) failed
[  378.426335][T14989] FAT-fs (loop6): Directory bread(block 68) failed
[  378.430629][T14989] FAT-fs (loop6): Directory bread(block 69) failed
[  378.433382][T14989] FAT-fs (loop6): Directory bread(block 70) failed
[  378.436014][T14989] FAT-fs (loop6): Directory bread(block 71) failed
[  378.438749][T14989] FAT-fs (loop6): Directory bread(block 72) failed
[  378.442333][T14989] FAT-fs (loop6): Directory bread(block 73) failed
[  378.509126][ T5916] usb 5-1: new full-speed USB device number 50 using dummy_hcd
[  378.664996][ T5916] usb 5-1: unable to get BOS descriptor or descriptor too short
[  378.670331][ T5916] usb 5-1: not running at top speed; connect to a high speed hub
[  378.680376][ T5916] usb 5-1: config 2 has an invalid interface number: 212 but max is 1
[  378.691449][ T5916] usb 5-1: config 2 has an invalid interface number: 226 but max is 1
[  378.697345][ T5916] usb 5-1: config 2 has no interface number 0
[  378.701157][ T5916] usb 5-1: config 2 has no interface number 1
[  378.703819][ T5916] usb 5-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  378.708245][ T5916] usb 5-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping
[  378.713689][ T5916] usb 5-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64
[  378.718215][ T5916] usb 5-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  378.729340][ T5916] usb 5-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  378.738762][ T5916] usb 5-1: config 2 interface 212 has no altsetting 0
[  378.745892][ T5916] usb 5-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce
[  378.753667][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  378.759526][ T5916] usb 5-1: Product: syz
[  378.762823][ T5916] usb 5-1: Manufacturer: syz
[  378.765696][ T5916] usb 5-1: SerialNumber: syz
[  378.996235][ T5916] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:2.226/input/input16
[  379.040337][ T5916] usb 5-1: USB disconnect, device number 50
[  379.042960][    C1] xpad 5-1:2.226: xpad_irq_in - usb_submit_urb failed with result -19
[  379.375222][T15018] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3695'.
[  379.819262][  T974] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  379.971516][  T974] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  379.974785][  T974] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  379.982657][  T974] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  379.987809][  T974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  379.993081][  T974] usb 5-1: SerialNumber: syz
[  380.225654][  T974] usb 5-1: 0:2 : does not exist
[  380.267842][  T974] usb 5-1: USB disconnect, device number 51
[  380.297494][ T5942] udevd[5942]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  380.802169][T15054] loop4: detected capacity change from 0 to 4096
[  381.140924][T15061] veth0_macvtap: left promiscuous mode
[  381.147767][T15061] macvtap0: refused to change device tx_queue_len
[  381.190289][  T974] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  381.339515][  T974] usb 5-1: Using ep0 maxpacket: 8
[  381.350627][  T974] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  381.353945][  T974] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  381.359091][  T974] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.40
[  381.362942][  T974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  381.366192][  T974] usb 5-1: Product: syz
[  381.367885][  T974] usb 5-1: Manufacturer: syz
[  381.370102][  T974] usb 5-1: SerialNumber: syz
[  381.592041][  T974] usb 5-1: USB disconnect, device number 52
[  382.616022][T15106] delete_channel: no stack
[  382.618507][T15105] delete_channel: no stack
[  382.658708][T15108] netlink: 'syz.4.3736': attribute type 1 has an invalid length.
[  382.663165][T15108] netlink: 'syz.4.3736': attribute type 3 has an invalid length.
[  382.666066][T15108] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3736'.
[  383.056318][   T33] audit: type=1326 audit(1757001638.562:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15109 comm="syz.4.3737" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0545d8ebe9 code=0x0
[  384.149216][T15139] loop4: detected capacity change from 0 to 32768
[  384.163633][T15139] (syz.4.3749,15139,1):ocfs2_read_journal_inode:1659 ERROR: status = -13
[  384.166641][T15139] (syz.4.3749,15139,1):ocfs2_mark_dead_nodes:1942 ERROR: status = -13
[  384.178485][T15139] (syz.4.3749,15139,1):ocfs2_check_volume:2420 ERROR: status = -13
[  384.182336][T15139] (syz.4.3749,15139,1):ocfs2_check_volume:2432 ERROR: status = -13
[  384.186114][T15139] (syz.4.3749,15139,1):ocfs2_mount_volume:1764 ERROR: status = -13
[  384.198931][T15139] (syz.4.3749,15139,1):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 77
[  384.216381][T15139] (syz.4.3749,15139,1):ocfs2_fill_super:1177 ERROR: status = -13
[  384.535051][T15152] netlink: 'syz.4.3754': attribute type 46 has an invalid length.
[  384.591647][T15154] netlink: 'syz.1.3755': attribute type 1 has an invalid length.
[  384.597336][T15154] netlink: 'syz.1.3755': attribute type 4 has an invalid length.
[  384.603469][T15154] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.3755'.
[  384.779971][T15163] loop4: detected capacity change from 0 to 16
[  384.788633][T15163] erofs (device loop4): mounted with root inode @ nid 36.
[  384.845794][T15163] erofs (device loop4): readahead error at folio 6 @ nid 36
[  384.849116][T15163] erofs (device loop4): readahead error at folio 4 @ nid 36
[  384.856123][T15163] erofs (device loop4): invalid logical cluster 0 at nid 36
[  384.859108][T15163] erofs (device loop4): readahead error at folio 0 @ nid 36
[  384.862791][T15163] syz.4.3759: attempt to access beyond end of device
[  384.862791][T15163] loop4: rw=524288, sector=296, nr_sectors = 16 limit=16
[  384.868550][T15163] syz.4.3759: attempt to access beyond end of device
[  384.868550][T15163] loop4: rw=524288, sector=1049264, nr_sectors = 16 limit=16
[  384.876399][T15163] syz.4.3759: attempt to access beyond end of device
[  384.876399][T15163] loop4: rw=524288, sector=8, nr_sectors = 16 limit=16
[  384.881346][T15163] syz.4.3759: attempt to access beyond end of device
[  384.881346][T15163] loop4: rw=524288, sector=720, nr_sectors = 16 limit=16
[  384.897064][T15163] erofs (device loop4): invalid logical cluster 0 at nid 36
[  384.901335][T15163] syz.4.3759: attempt to access beyond end of device
[  384.901335][T15163] loop4: rw=0, sector=296, nr_sectors = 8 limit=16
[  384.907790][T15163] erofs (device loop4): read error -5 @ 0 of nid 36
[  384.910825][T15163] erofs (device loop4): failed to readdir of logical block 0 of nid 36
[  385.609921][   T10] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  385.759923][   T10] usb 5-1: Using ep0 maxpacket: 16
[  385.764152][   T10] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  385.768516][   T10] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  385.773393][   T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  385.779937][   T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  385.783713][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  385.786969][   T10] usb 5-1: Product: syz
[  385.788889][   T10] usb 5-1: Manufacturer: syz
[  385.791937][   T10] usb 5-1: SerialNumber: syz
[  385.875632][T15187] sch_tbf: burst 1821 is lower than device lo mtu (65550) !
[  385.884190][T15187] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3770'.
[  385.901617][T15187] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  386.003940][   T10] usb 5-1: 0:2 : does not exist
[  386.010803][   T10] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  386.029428][   T10] usb 5-1: USB disconnect, device number 53
[  386.063237][ T5942] udevd[5942]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  386.601782][T15191] loop4: detected capacity change from 0 to 256
[  386.620149][T15191] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  387.172214][T15208] netlink: 'syz.1.3780': attribute type 2 has an invalid length.
[  387.182195][   T10] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  387.255812][T15212] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3782'.
[  387.331680][   T10] usb 5-1: Using ep0 maxpacket: 16
[  387.338917][   T10] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  387.343001][   T10] usb 5-1: config 0 interface 0 has no altsetting 0
[  387.345275][   T10] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  387.349151][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  387.357615][   T10] usb 5-1: config 0 descriptor??
[  387.812180][   T10] nzxt-smart2 0003:1E71:2009.0015: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0
[  388.215684][ T5883] usb 5-1: USB disconnect, device number 54
[  388.686203][T15256] loop6: detected capacity change from 0 to 1764
[  389.617311][   T10] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  389.784568][   T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  389.791141][   T10] usb 5-1: config 0 has no interface number 0
[  389.797688][   T10] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  389.804088][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  389.809808][   T10] usb 5-1: Product: syz
[  389.811853][   T10] usb 5-1: Manufacturer: syz
[  389.813932][   T10] usb 5-1: SerialNumber: syz
[  389.822291][   T10] usb 5-1: config 0 descriptor??
[  389.846692][T15268] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3805'.
[  389.967318][   T33] audit: type=1800 audit(1757001645.472:79): pid=15272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3807" name="file1" dev="tmpfs" ino=9189 res=0 errno=0
[  390.071058][   T10] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  390.132928][   T10] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  390.137128][   T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  390.140140][   T10] usb 5-1: media controller created
[  390.215769][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  390.281801][   T10] i2c i2c-2: ec100: i2c rd failed=-71 reg=33
[  390.331060][T15286] loop6: detected capacity change from 0 to 1024
[  390.361141][   T10] usb 5-1: USB disconnect, device number 55
[  390.407463][   T33] audit: type=1800 audit(1757001645.912:80): pid=15286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3814" name="file1" dev="loop6" ino=20 res=0 errno=0
[  390.779621][T15296] libceph: resolve '0.0' (ret=-3): failed
[  391.694761][T15319] loop4: detected capacity change from 0 to 1024
[  391.698337][T15319] EXT4-fs: Ignoring removed nobh option
[  391.746245][T15319] EXT4-fs: Ignoring removed bh option
[  391.789099][T15319] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  391.811618][T15319] EXT4-fs (loop4): shut down requested (2)
[  391.832611][ T7294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  392.174197][T15345] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3839'.
[  392.225879][T15347] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3840'.
[  392.487416][T15355] gretap0: entered promiscuous mode
[  392.524245][ T5883] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  392.638019][T15330] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  392.682927][ T5883] usb 5-1: config index 0 descriptor too short (expected 8192, got 36)
[  392.690249][ T5883] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  392.695470][ T5883] usb 5-1: config 0 has no interfaces?
[  392.697714][ T5883] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  392.706671][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  392.713326][ T5883] usb 5-1: config 0 descriptor??
[  392.919223][ T5916] usb 5-1: USB disconnect, device number 56
[  392.946779][T15370] 8021q: VLANs not supported on gre0
[  393.152796][T15382] netlink: 2384 bytes leftover after parsing attributes in process `syz.1.3856'.
[  393.838169][T15407] bond1: entered promiscuous mode
[  393.840508][T15407] bond1: entered allmulticast mode
[  393.843379][T15407] 8021q: adding VLAN 0 to HW filter on device bond1
[  393.936738][T15412] loop6: detected capacity change from 0 to 256
[  393.967347][T15414] loop4: detected capacity change from 0 to 16
[  393.988466][T15414] erofs (device loop4): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk!
[  394.003150][T15412] FAT-fs (loop6): Directory bread(block 64) failed
[  394.005756][T15412] FAT-fs (loop6): Directory bread(block 65) failed
[  394.008468][T15412] FAT-fs (loop6): Directory bread(block 66) failed
[  394.016573][T15414] erofs (device loop4): mounted with root inode @ nid 36.
[  394.023609][T15412] FAT-fs (loop6): Directory bread(block 67) failed
[  394.032421][T15414] erofs (device loop4): read error -117 @ 0 of nid 36
[  394.033878][T15412] FAT-fs (loop6): Directory bread(block 68) failed
[  394.042242][T15412] FAT-fs (loop6): Directory bread(block 69) failed
[  394.044934][T15412] FAT-fs (loop6): Directory bread(block 70) failed
[  394.047610][T15412] FAT-fs (loop6): Directory bread(block 71) failed
[  394.062346][T15412] FAT-fs (loop6): Directory bread(block 72) failed
[  394.064887][T15412] FAT-fs (loop6): Directory bread(block 73) failed
[  394.246126][T15424] ref_ctr going negative. vaddr: 0x200000ffd000, curr val: -19135, delta: 1
[  394.249597][T15424] ref_ctr increment failed for inode: 0xeab offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88801bf0d600
[  394.414717][T15436] netlink: 'syz.1.3882': attribute type 17 has an invalid length.
[  394.417172][T15436] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3882'.
[  394.556546][T15438] lo speed is unknown, defaulting to 1000
[  394.887362][T15422] loop4: detected capacity change from 0 to 40427
[  394.901142][T15422] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  394.904061][T15422] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  395.082418][T15422] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  395.089450][T15422] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  395.101533][T15422] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  395.567869][T15455] loop6: detected capacity change from 0 to 1024
[  395.647333][   T26] hfsplus: b-tree write err: -5, ino 4
[  395.716400][T15457] XFS (nullb0): Invalid superblock magic number
[  395.993500][T15473] vcan0: entered allmulticast mode
[  396.002343][T15473] vcan0: left allmulticast mode
[  396.123190][   T33] audit: type=1326 audit(1757001651.621:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15484 comm="syz.6.3899" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f667778ebe9 code=0x7ffc0000
[  396.139402][   T33] audit: type=1326 audit(1757001651.621:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15484 comm="syz.6.3899" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f667778ebe9 code=0x7ffc0000
[  396.150271][   T33] audit: type=1326 audit(1757001651.621:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15484 comm="syz.6.3899" exe="/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f667778ebe9 code=0x7ffc0000
[  396.162608][   T33] audit: type=1326 audit(1757001651.621:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15484 comm="syz.6.3899" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f667778ebe9 code=0x7ffc0000
[  396.172747][   T33] audit: type=1326 audit(1757001651.621:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15484 comm="syz.6.3899" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f667778ebe9 code=0x7ffc0000
[  396.253820][ T5916] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  396.398386][T15499] netlink: 'syz.1.3905': attribute type 62 has an invalid length.
[  396.402894][T15491] loop6: detected capacity change from 0 to 32768
[  396.415093][T15491] bcachefs (/dev/loop6): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section
[  396.415093][T15491] clean (size 2912):
[  396.415093][T15491] flags:          0
[  396.415093][T15491] journal_seq:    10
[  396.415093][T15491] usage: type=inodes v=8
[  396.415093][T15491] usage: type=key_version v=2
[  396.415093][T15491] usage: type=reserved v=0
[  396.415093][T15491] usage: type=(unknown fs_usage_type 226) v=0
[  396.415093][T15491] usage: type=reserved v=0
[  396.415093][T15491] usage: type=reserved v=0
[  396.415093][T15491] data_usage: btree: 1/1 [0]=2816
[  396.415093][T15491] data_usage: journal: 1/1 [0]=0
[  396.415093][T15491] data_usage: user: 1/1 [0]=32
[  396.415093][T15491] dev_usage: dev=0  
[  396.415093][T15491]   free: buckets=83 sectors=0 fragmented=0
[  396.415093][T15491]   sb: buckets=25 sectors=6152 fragmented=248
[  396.415093][T15491]   journal: buckets=8 sectors=2048 fragmented=0
[  396.415093][T15491]   btree: buckets=11 sectors=2816 fragmented=0
[  396.415093][T15491]   user: buckets=1 sectors=32 fragmented=224
[  396.415093][T15491]   cached: buckets=0 sectors=0 fragmented=0
[  396.415093][T15491]   parity: buckets=0 sectors=0 fragmented=0
[  396.415093][T15491]   stripe: buckets=0 sectors=0 fragmented=0
[  396.415093][T15491]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[  396.415093][T15491]   need_discard: buckets=0 sectors=0 fragmented=0
[  396.415093][T15491] clock: read=0
[  396.415093][T15491] clock: write=1336
[  396.415093][T15491] btree_root: btree=extents level=0 u64s 11 type btree_ptr_v2 SPOS_MAX 
[  396.415310][T15491] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  396.416716][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  396.479232][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  396.485196][ T5916] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  396.490321][ T5916] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  396.495884][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  396.501509][ T5916] usb 5-1: config 0 descriptor??
[  396.926116][ T5916] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  397.175522][T15513] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  397.448625][ T5883] usb 5-1: USB disconnect, device number 57
[  397.718584][T15544] overlayfs: empty lowerdir
[  397.806221][T15550] netlink: 'syz.6.3930': attribute type 1 has an invalid length.
[  397.810910][T15550] netlink: 'syz.6.3930': attribute type 2 has an invalid length.
[  397.887941][T15553] loop6: detected capacity change from 0 to 1024
[  397.918644][T15553] hfsplus: xattr searching failed
[  397.925907][T15553] hfsplus: bad catalog folder thread
[  398.182051][T15568] loop6: detected capacity change from 0 to 256
[  398.189025][T15568] exfat: Deprecated parameter 'utf8'
[  398.233504][ T5861] Bluetooth: hci2: unexpected event for opcode 0x204e
[  400.173647][T15592] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  400.180264][T15591] IPVS: stopping backup sync thread 15592 ...
[  400.500951][T15594] loop4: detected capacity change from 0 to 32768
[  400.589400][T15594] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  400.702065][T15594] XFS (loop4): Ending clean mount
[  400.817482][ T7294] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  401.242768][T15621] netlink: 'syz.4.3959': attribute type 39 has an invalid length.
[  401.536261][T15635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3966'.
[  401.794726][   T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  402.227866][T15675] loop4: detected capacity change from 0 to 2048
[  402.249158][T15675] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  402.562011][ T5916] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  402.715253][ T5916] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  402.719713][ T5916] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  402.724986][ T5916] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  402.728530][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  402.737219][T15677] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  402.746978][ T5916] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  403.028291][ T5916] usb 5-1: USB disconnect, device number 58
[  403.638334][T15689] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  403.638334][T15689]    program syz.4.3992 not setting count and/or reply_len properly
[  403.855984][T15701] loop4: detected capacity change from 0 to 2048
[  403.965148][T15708] loop4: detected capacity change from 0 to 1024
[  403.984055][T15708] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  403.996700][T15708] ext4 filesystem being mounted at /955/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  404.020396][T15708] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 3: comm syz.4.4001: lblock 3 mapped to illegal pblock 3 (length 13)
[  404.031602][T15708] EXT4-fs (loop4): Remounting filesystem read-only
[  404.057546][ T7294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  404.149560][T15713] loop4: detected capacity change from 0 to 512
[  404.153076][T15713] EXT4-fs (loop4): Invalid default hash set in the superblock
[  404.407483][T15718] IPv6: NLM_F_REPLACE set, but no existing node found!
[  404.798633][ T5861] Bluetooth: hci2: unexpected event for opcode 0x2010
[  405.359261][T15753] loop4: detected capacity change from 0 to 256
[  405.404521][T15753] FAT-fs (loop4): Directory bread(block 64) failed
[  405.408789][T15753] FAT-fs (loop4): Directory bread(block 65) failed
[  405.411367][T15753] FAT-fs (loop4): Directory bread(block 66) failed
[  405.413990][T15753] FAT-fs (loop4): Directory bread(block 67) failed
[  405.416421][T15753] FAT-fs (loop4): Directory bread(block 68) failed
[  405.418894][T15753] FAT-fs (loop4): Directory bread(block 69) failed
[  405.421909][T15753] FAT-fs (loop4): Directory bread(block 70) failed
[  405.428412][T15753] FAT-fs (loop4): Directory bread(block 71) failed
[  405.431410][T15753] FAT-fs (loop4): Directory bread(block 72) failed
[  405.434688][T15753] FAT-fs (loop4): Directory bread(block 73) failed
[  405.551851][T15761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4024'.
[  405.663027][T15749] loop6: detected capacity change from 0 to 32768
[  405.672053][T15749] bcachefs (/dev/loop6): error validating superblock: Bad number of member devices 0 (max 64)
[  405.676807][T15749] bcachefs: bch2_fs_get_tree() error: invalid_sb_too_many_members
[  405.719440][   T33] audit: type=1326 audit(1757001661.220:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15766 comm="syz.4.4027" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0545d8ebe9 code=0x0
[  406.048755][T15796] netlink: 'syz.6.4040': attribute type 5 has an invalid length.
[  406.154362][T15798] loop6: detected capacity change from 0 to 4096
[  406.160989][T15798] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512).
[  406.203334][T15798] ntfs3(loop6): $Secure::$SDH is corrupted.
[  406.206144][T15798] ntfs3(loop6): Failed to initialize $Secure (-22).
[  406.288017][T15808] vivid-000: disconnect
[  406.295015][T15807] vivid-000: reconnect
[  406.507200][T15810] loop6: detected capacity change from 0 to 32768
[  406.514778][T15810] 
[  406.514778][T15810]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  406.514778][T15810] 
[  406.534170][T15810] ERROR: (device loop6): diWrite: ixpxd invalid
[  406.534170][T15810] 
[  406.541081][T15810] ERROR: (device loop6): txCommit: 
[  406.541081][T15810] 
[  406.586775][ T8147] 
[  406.586775][ T8147]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  406.586775][ T8147] 
[  406.604244][ T8147] 
[  406.604244][ T8147]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  406.604244][ T8147] 
[  406.674703][T15814] loop4: detected capacity change from 0 to 8192
[  406.703499][ T5942] Dev loop4: RDB in block 1 has bad checksum
[  406.712669][T15814] Dev loop4: RDB in block 1 has bad checksum
[  407.181098][T15837] loop6: detected capacity change from 0 to 128
[  407.215105][T15837] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  407.228776][T15837] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  407.741221][T15849] loop6: detected capacity change from 0 to 40427
[  407.752047][T15849] F2FS-fs (loop6): invalid crc value
[  407.825644][T15849] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  407.840743][T15849] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  407.860879][   T33] audit: type=1800 audit(1757001663.359:87): pid=15849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4067" name="bus" dev="loop6" ino=10 res=0 errno=0
[  407.887860][ T8147] syz-executor: attempt to access beyond end of device
[  407.887860][ T8147] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  407.892227][ T8147] CPU: 0 UID: 0 PID: 8147 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  407.892240][ T8147] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  407.892246][ T8147] Call Trace:
[  407.892251][ T8147]  <TASK>
[  407.892255][ T8147]  dump_stack_lvl+0x189/0x250
[  407.892275][ T8147]  ? __pfx_dump_stack_lvl+0x10/0x10
[  407.892285][ T8147]  ? __pfx_queue_work_on+0x10/0x10
[  407.892294][ T8147]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  407.892308][ T8147]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  407.892325][ T8147]  f2fs_handle_critical_error+0x37c/0x540
[  407.892344][ T8147]  f2fs_write_end_io+0x886/0xb60
[  407.892361][ T8147]  __submit_merged_bio+0x27a/0x6a0
[  407.892396][ T8147]  __submit_merged_write_cond+0x255/0x530
[  407.892411][ T8147]  f2fs_write_data_pages+0x261d/0x3000
[  407.892441][ T8147]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  407.892482][ T8147]  ? folios_put_refs+0x559/0x640
[  407.892502][ T8147]  ? __pfx_folios_put_refs+0x10/0x10
[  407.892509][ T8147]  ? rcu_is_watching+0x15/0xb0
[  407.892523][ T8147]  ? __lock_acquire+0xab9/0xd20
[  407.892545][ T8147]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  407.892558][ T8147]  do_writepages+0x32e/0x550
[  407.892576][ T8147]  ? do_raw_spin_unlock+0x4d/0x240
[  407.892589][ T8147]  filemap_fdatawrite+0x199/0x240
[  407.892602][ T8147]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  407.892637][ T8147]  ? do_raw_spin_unlock+0x4d/0x240
[  407.892649][ T8147]  f2fs_sync_dirty_inodes+0x31f/0x830
[  407.892666][ T8147]  f2fs_write_checkpoint+0x95a/0x1df0
[  407.892686][ T8147]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  407.892719][ T8147]  ? kill_f2fs_super+0x298/0x6c0
[  407.892731][ T8147]  kill_f2fs_super+0x2c3/0x6c0
[  407.892744][ T8147]  ? __pfx_kill_f2fs_super+0x10/0x10
[  407.892751][ T8147]  ? radix_tree_delete_item+0x2b6/0x400
[  407.892767][ T8147]  ? shrinker_free+0x2ce/0x3e0
[  407.892777][ T8147]  deactivate_locked_super+0xbc/0x130
[  407.892789][ T8147]  cleanup_mnt+0x425/0x4c0
[  407.892800][ T8147]  ? lockdep_hardirqs_on+0x9c/0x150
[  407.892814][ T8147]  task_work_run+0x1d4/0x260
[  407.892828][ T8147]  ? __pfx_task_work_run+0x10/0x10
[  407.892837][ T8147]  ? __x64_sys_umount+0x122/0x160
[  407.892851][ T8147]  ? exit_to_user_mode_loop+0x40/0x110
[  407.892866][ T8147]  exit_to_user_mode_loop+0xec/0x110
[  407.892878][ T8147]  do_syscall_64+0x2bd/0x3b0
[  407.892884][ T8147]  ? lockdep_hardirqs_on+0x9c/0x150
[  407.892895][ T8147]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  407.892903][ T8147]  ? exc_page_fault+0x9f/0xf0
[  407.892915][ T8147]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  407.892922][ T8147] RIP: 0033:0x7f667778ff17
[  407.892933][ T8147] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  407.892940][ T8147] RSP: 002b:00007fffa3a97e28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  407.892974][ T8147] RAX: 0000000000000000 RBX: 00007f6677811c05 RCX: 00007f667778ff17
[  407.892979][ T8147] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa3a97ee0
[  407.892984][ T8147] RBP: 00007fffa3a97ee0 R08: 0000000000000000 R09: 0000000000000000
[  407.892988][ T8147] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffa3a98f70
[  407.892993][ T8147] R13: 00007f6677811c05 R14: 00000000000638d5 R15: 00007fffa3a98fb0
[  407.893008][ T8147]  </TASK>
[  408.015716][ T8147] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  408.383137][T15857] loop4: detected capacity change from 0 to 32768
[  408.386750][T15857] btrfs: Deprecated parameter 'usebackuproot'
[  408.389289][T15857] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  408.394087][T15857] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4070 (15857)
[  408.404624][T15857] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  408.408734][T15857] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  408.494228][T15857] BTRFS info (device loop4): rebuilding free space tree
[  408.509715][T15857] BTRFS info (device loop4): enabling ssd optimizations
[  408.514012][T15857] BTRFS info (device loop4): using spread ssd allocation scheme
[  408.517229][T15857] BTRFS info (device loop4): enabling free space tree
[  408.519877][T15857] BTRFS info (device loop4): force clearing of disk cache
[  408.522880][T15857] BTRFS info (device loop4): enabling auto defrag
[  408.525552][T15857] BTRFS info (device loop4): doing ref verification
[  408.528231][T15857] BTRFS info (device loop4): trying to use backup root at mount time
[  408.531430][T15857] BTRFS info (device loop4): max_inline set to 4096
[  408.818187][ T7294] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  409.584560][ T5916] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  409.735219][ T5916] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  409.739864][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  409.745072][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  409.748970][ T5916] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  409.758267][ T5916] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  409.762142][ T5916] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  409.765951][ T5916] usb 5-1: Manufacturer: syz
[  409.774893][ T5916] usb 5-1: config 0 descriptor??
[  410.191473][ T5916] appleir 0003:05AC:8243.0017: unknown main item tag 0x0
[  410.197830][ T5916] appleir 0003:05AC:8243.0017: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0
[  410.615821][ T5916] usb 5-1: USB disconnect, device number 59
[  411.594804][  T974] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  411.745769][  T974] usb 5-1: config 0 has no interfaces?
[  411.749057][  T974] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  411.752754][  T974] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  411.760394][  T974] usb 5-1: Manufacturer: syz
[  411.766175][  T974] usb 5-1: config 0 descriptor??
[  412.000971][T15928] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4094'.
[  412.007866][ T5883] usb 5-1: USB disconnect, device number 60
[  412.505252][   T33] audit: type=1800 audit(1757001668.009:88): pid=15949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4104" name="file1" dev="tmpfs" ino=10010 res=0 errno=0
[  414.203451][  T974] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  414.355550][  T974] usb 5-1: config 0 has no interfaces?
[  414.360151][  T974] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  414.364942][  T974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  414.371172][  T974] usb 5-1: config 0 descriptor??
[  414.702129][  T974] usb 5-1: USB disconnect, device number 61
[  414.735115][T16012] netlink: 'syz.6.4132': attribute type 11 has an invalid length.
[  414.880002][T16016] loop6: detected capacity change from 0 to 4096
[  414.902690][T16017] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  415.692542][T16048] 9pnet: Unknown protocol version 9p20\++}
[  417.022999][T16084] netlink: 268 bytes leftover after parsing attributes in process `syz.1.4165'.
[  417.027045][T16084] unsupported nla_type 65024
[  417.088291][T16088] nfs: Unknown parameter 'ntext'
[  417.183962][ T5902] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  417.337548][ T5902] usb 5-1: config 0 has an invalid interface number: 29 but max is 0
[  417.340733][ T5902] usb 5-1: config 0 has no interface number 0
[  417.343094][ T5902] usb 5-1: config 0 interface 29 has no altsetting 0
[  417.349687][ T5902] usb 5-1: New USB device found, idVendor=357d, idProduct=7788, bcdDevice=81.0d
[  417.353427][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  417.361709][ T5902] usb 5-1: config 0 descriptor??
[  417.576068][ T5902] usb 5-1: string descriptor 0 read error: -71
[  417.584827][ T5902] usb-storage 5-1:0.29: USB Mass Storage device detected
[  417.597714][ T5902] usb-storage 5-1:0.29: Quirks match for vid 357d pid 7788: 4800000
[  417.659112][ T5902] usb 5-1: USB disconnect, device number 62
[  419.564091][ T5902] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[  419.714557][ T5902] usb 5-1: Using ep0 maxpacket: 8
[  419.726845][ T5902] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  419.731915][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  419.744174][ T5902] usb 5-1: Product: syz
[  419.746007][ T5902] usb 5-1: Manufacturer: syz
[  419.747965][ T5902] usb 5-1: SerialNumber: syz
[  419.752402][ T5902] usb 5-1: config 0 descriptor??
[  419.841472][T16145] netlink: 'syz.1.4192': attribute type 1 has an invalid length.
[  420.174815][T16140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  420.186705][T16140] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  420.207063][ T5902] usb read operation failed. (-71)
[  420.215319][ T5902] usb write operation failed. (-71)
[  420.219968][ T5902] usb write operation failed. (-71)
[  420.235636][ T5902] usb write operation failed. (-71)
[  420.243730][ T5902] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in cold state
[  420.255347][ T5902] usb 5-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2
[  420.259590][ T5902] usb 5-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw
[  421.357503][T16190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4213'.
[  421.461252][T16184] loop4: detected capacity change from 0 to 32768
[  421.468357][T16184] XFS: attr2 mount option is deprecated.
[  421.492578][T16184] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  421.513837][T16184] XFS (loop4): Ending clean mount
[  421.523461][T16184] XFS (loop4): Quotacheck needed: Please wait.
[  421.586882][T16184] XFS (loop4): Quotacheck: Done.
[  421.640804][ T7294] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  421.843340][T16219] geneve2: entered promiscuous mode
[  421.846474][T16219] geneve2: entered allmulticast mode
[  422.267539][T16236] loop6: detected capacity change from 0 to 512
[  422.291584][T16236] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  422.304899][T16236] ext4 filesystem being mounted at /794/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  422.702338][ T5861] Bluetooth: hci1: unexpected event for opcode 0x2042
[  423.018037][T16249] netlink: 'syz.4.4234': attribute type 2 has an invalid length.
[  423.201731][ T8147] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  423.231400][T16259] loop4: detected capacity change from 0 to 512
[  423.241986][T16259] EXT4-fs (loop4): Test dummy encryption mode enabled
[  423.270708][T16259] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  423.286246][T16259] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.4239: bad orphan inode 131083
[  423.307911][T16259] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  423.326716][ T5861] Bluetooth: hci1: SCO packet for unknown connection handle 0
[  423.377962][ T7294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  423.501179][T16277] loop6: detected capacity change from 0 to 8
[  423.508499][T16277] squashfs image failed sanity check
[  423.573948][T16281] loop4: detected capacity change from 0 to 8
[  423.596480][T16281] Major/Minor mismatch, older Squashfs 0.0 filesystems are unsupported
[  423.773692][T16281] loop4: detected capacity change from 0 to 32768
[  423.824172][T16281] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  423.867860][T16281] XFS (loop4): Ending clean mount
[  423.873669][T16281] XFS (loop4): Quotacheck needed: Please wait.
[  423.930213][T16281] XFS (loop4): Quotacheck: Done.
[  424.590137][T16295] ptrace attach of "/syz-executor exec"[5851] was attempted by ""[16295]
[  425.304283][ T7294] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  425.499422][T16313] usb usb8: usbfs: process 16313 (syz.4.4258) did not claim interface 15 before use
[  425.604086][T16319] netlink: 'syz.1.4263': attribute type 2 has an invalid length.
[  425.613919][T16319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4263'.
[  425.765436][T16331] syzkaller1: entered promiscuous mode
[  425.767173][T16331] syzkaller1: entered allmulticast mode
[  426.667328][T16351] binder: 16349:16351 ioctl c0306201 200000000640 returned -22
[  426.725082][ T5861] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  426.729636][ T5861] Bluetooth: hci1: Injecting HCI hardware error event
[  426.735032][ T5861] Bluetooth: hci1: hardware error 0x00
[  426.940289][T16360] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=4
[  428.643657][T16390] CIFS: VFS: Malformed UNC in devname
[  428.798385][ T5861] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  429.688411][T16406] loop4: detected capacity change from 0 to 1764
[  429.837830][T16411] program syz.6.4303 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  430.458741][T16417] befs: (nullb0): No write support. Marking filesystem read-only
[  430.469644][T16417] befs: (nullb0): invalid magic header
[  431.918504][T16443] loop4: detected capacity change from 0 to 512
[  431.922004][T16443] EXT4-fs: Ignoring removed i_version option
[  431.925193][T16443] EXT4-fs (loop4): can't mount with both data=journal and dax
[  432.287270][T16449] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  432.757087][T16474] input: syz1 as /devices/virtual/input/input18
[  432.759378][T16474] input: failed to attach handler leds to device input18, error: -6
[  432.805099][T16476] loop4: detected capacity change from 0 to 128
[  432.818569][T16476] EXT4-fs (loop4): Test dummy encryption mode enabled
[  432.838094][T16476] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  432.842327][T16476] ext4 filesystem being mounted at /1038/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  432.867266][ T7294] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  433.559015][T16508] loop4: detected capacity change from 0 to 2048
[  433.564388][T16508] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  433.573654][ T6050] udevd[6050]: incorrect nilfs2 checksum on /dev/loop4
[  433.589392][T16509] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  433.631340][T16508] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 3044605952
[  433.634761][T16508] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=15)
[  433.660525][T16508] Remounting filesystem read-only
[  433.662662][T16508] NILFS (loop4): error -5 truncating bmap (ino=15)
[  433.843319][T16518] tap0: tun_chr_ioctl cmd 1074025677
[  433.845350][T16518] tap0: linktype set to 825
[  434.654575][T16531] loop4: detected capacity change from 0 to 128
[  434.713160][   T33] audit: type=1800 audit(1757001690.206:89): pid=16531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4356" name="bus" dev="loop4" ino=1048675 res=0 errno=0
[  434.764084][T16531] syz.4.4356: attempt to access beyond end of device
[  434.764084][T16531] loop4: rw=0, sector=121, nr_sectors = 920 limit=128
[  435.362247][T16553] loop6: detected capacity change from 0 to 32768
[  436.578635][  T974] libceph: connect (1)[c::]:6789 error -101
[  436.587838][  T974] libceph: mon0 (1)[c::]:6789 connect error
[  436.733777][   T33] audit: type=1326 audit(1757001692.226:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16599 comm="syz.6.4387" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f667778ebe9 code=0x0
[  436.781754][T16600] ceph: No mds server is up or the cluster is laggy
[  436.856842][  T974] libceph: connect (1)[c::]:6789 error -101
[  436.858951][  T974] libceph: mon0 (1)[c::]:6789 connect error
[  437.011685][T16624] netlink: 'syz.4.4396': attribute type 2 has an invalid length.
[  437.846778][ T5854] Bluetooth: hci2: command 0x0406 tx timeout
[  437.885887][T16652] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  438.230800][T16658] loop6: detected capacity change from 0 to 32768
[  438.280406][ T6050]  loop6: p9 p11 p16
[  438.301411][T16658]  loop6: p9 p11 p16
[  438.504158][ T6050] udevd[6050]: inotify_add_watch(7, /dev/loop6p9, 10) failed: No such file or directory
[  438.507309][ T5863] udevd[5863]: inotify_add_watch(7, /dev/loop6p11, 10) failed: No such file or directory
[  438.511276][ T6051] udevd[6051]: inotify_add_watch(7, /dev/loop6p16, 10) failed: No such file or directory
[  438.545499][ T6050] udevd[6050]: inotify_add_watch(7, /dev/loop6p9, 10) failed: No such file or directory
[  438.548226][ T5863] udevd[5863]: inotify_add_watch(7, /dev/loop6p11, 10) failed: No such file or directory
[  438.552157][ T6051] udevd[6051]: inotify_add_watch(7, /dev/loop6p16, 10) failed: No such file or directory
[  438.728165][T16668] loop6: detected capacity change from 0 to 32768
[  438.737722][T16668] bcachefs (/dev/loop6): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section
[  438.737722][T16668] clean (size 2912):
[  438.737722][T16668] flags:          0
[  438.737722][T16668] journal_seq:    196618
[  438.737722][T16668] usage: type=inodes v=8
[  438.737722][T16668] usage: type=key_version v=0
[  438.737722][T16668] usage: type=reserved v=0
[  438.737722][T16668] usage: type=reserved v=0
[  438.737722][T16668] usage: type=reserved v=0
[  438.737722][T16668] usage: type=reserved v=0
[  438.737722][T16668] data_usage: btree: 1/1 [0]=2816
[  438.737722][T16668] data_usage: journal: 1/1 [0]=0
[  438.737722][T16668] data_usage: user: 1/1 [0]=16
[  438.737722][T16668] dev_usage: dev=0  
[  438.737722][T16668]   free: buckets=83 sectors=0 fragmented=0
[  438.737722][T16668]   sb: buckets=25 sectors=6152 fragmented=248
[  438.737722][T16668]   journal: buckets=8 sectors=2048 fragmented=0
[  438.737722][T16668]   btree: buckets=11 sectors=2816 fragmented=0
[  438.737722][T16668]   user: buckets=1 sectors=16 fragmented=240
[  438.737722][T16668]   cached: buckets=0 sectors=0 fragmented=0
[  438.737722][T16668]   parity: buckets=0 sectors=0 fragmented=0
[  438.737722][T16668]   stripe: buckets=0 sectors=0 fragmented=0
[  438.737722][T16668]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[  438.737722][T16668]   need_discard: buckets=0 sectors=0 fragmented=0
[  438.737722][T16668] clock: read=0
[  438.737722][T16668] clock: write=1280
[  438.737722][T16668] btree_root: btree=extents level=0 u64s 11 type btree_ptr_v2 POS_MAX len 511 ver 0: s
[  438.737827][T16668] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  439.065339][T16677] loop6: detected capacity change from 0 to 8192
[  439.119691][T16677] FAT-fs (loop6): error, clusters badly computed (2 != 1)
[  439.122918][T16677] FAT-fs (loop6): Filesystem has been set read-only
[  439.821911][T16702] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  439.827004][T16702] bridge0: port 2(bridge_slave_1) entered disabled state
[  439.831458][T16702] bridge0: port 1(bridge_slave_0) entered disabled state
[  439.842294][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  439.844784][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  440.363877][T16720] netlink: 'syz.1.4441': attribute type 12 has an invalid length.
[  441.663597][T16738] loop4: detected capacity change from 0 to 32768
[  441.692971][T16738] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  441.754608][T16738] XFS (loop4): Ending clean mount
[  441.773612][T16738] XFS (loop4): Quotacheck needed: Please wait.
[  441.852891][T16738] XFS (loop4): Quotacheck: Done.
[  441.885187][ T7294] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  442.248134][T16768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4460'.
[  442.262981][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  442.263644][T16768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4460'.
[  442.266329][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  442.279500][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  442.282959][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  442.388119][T16776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4463'.
[  442.391190][T16776] netlink: 'syz.1.4463': attribute type 20 has an invalid length.
[  442.393529][T16776] netlink: 'syz.1.4463': attribute type 21 has an invalid length.
[  442.863800][T16772] loop4: detected capacity change from 0 to 32768
[  442.884736][T16772] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  442.918232][T16772] XFS (loop4): Ending clean mount
[  442.950726][ T7294] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  443.113700][T16794] overlayfs: failed to clone upperpath
[  443.515736][T16815] netlink: 'syz.1.4478': attribute type 1 has an invalid length.
[  443.675801][T16824] loop6: detected capacity change from 0 to 128
[  443.706077][T16824] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  443.725649][T16824] ext4 filesystem being mounted at /843/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  443.782845][ T8147] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  443.833755][T16832] loop6: detected capacity change from 0 to 256
[  443.864617][T16832] FAT-fs (loop6): Directory bread(block 64) failed
[  443.867700][T16832] FAT-fs (loop6): Directory bread(block 65) failed
[  443.870289][T16832] FAT-fs (loop6): Directory bread(block 66) failed
[  443.872625][T16832] FAT-fs (loop6): Directory bread(block 67) failed
[  443.875174][T16832] FAT-fs (loop6): Directory bread(block 68) failed
[  443.881461][T16832] FAT-fs (loop6): Directory bread(block 69) failed
[  443.884712][T16832] FAT-fs (loop6): Directory bread(block 70) failed
[  443.888719][T16832] FAT-fs (loop6): Directory bread(block 71) failed
[  443.894346][T16832] FAT-fs (loop6): Directory bread(block 72) failed
[  443.900266][T16832] FAT-fs (loop6): Directory bread(block 73) failed
[  443.931998][T16834] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4483'.
[  444.183981][T16836] loop6: detected capacity change from 0 to 32768
[  444.187692][T16836] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.4486 (16836)
[  444.196214][T16836] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  444.200650][T16836] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm
[  444.270596][T16836] BTRFS info (device loop6): setting nodatasum
[  444.272721][T16836] BTRFS info (device loop6): enabling free space tree
[  444.275425][T16836] BTRFS info (device loop6): use zlib compression, level 3
[  444.278183][T16836] BTRFS info (device loop6): max_inline set to 0
[  444.284813][   T33] audit: type=1800 audit(1757001699.775:91): pid=16836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4486" name="file1" dev="loop6" ino=260 res=0 errno=0
[  444.378704][ T8147] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  444.741220][T16859] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4489'.
[  444.989533][T16867] loop6: detected capacity change from 0 to 4096
[  445.004246][T16867] EXT4-fs (loop6): Test dummy encryption mode enabled
[  445.034460][T16867] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  445.051036][T16867] System zones: 0-5
[  445.065647][T16867] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  445.172612][ T8147] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  445.855009][T16880] overlayfs: failed to clone upperpath
[  445.871850][T16880] overlayfs: failed to clone upperpath
[  445.891529][T16882] loop6: detected capacity change from 0 to 512
[  445.967435][T16882] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  446.024511][T16889] binder: BINDER_SET_CONTEXT_MGR already set
[  446.026757][T16889] binder: 16888:16889 ioctl 40046207 0 returned -16
[  446.041875][T16882] EXT4-fs (loop6): Couldn't remount RDWR because of unprocessed orphan inode list.  Please umount/remount instead
[  446.142421][ T8147] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  446.375970][T16899] loop4: detected capacity change from 0 to 512
[  446.419146][T16899] EXT4-fs: Ignoring removed bh option
[  446.452497][T16899] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  446.491249][T16899] EXT4-fs (loop4): 1 truncate cleaned up
[  446.496401][T16899] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  446.992268][   T33] audit: type=1800 audit(1757001702.325:92): pid=16910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4503" name="bus" dev="loop4" ino=18 res=0 errno=0
[  447.030659][    C0] ==================================================================
[  447.033790][    C0] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0
[  447.036873][    C0] Write of size 8 at addr ffff888112b31230 by task kworker/u8:1/13
[  447.040249][    C0] 
[  447.041499][    C0] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
[  447.041514][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  447.041521][    C0] Workqueue: bat_events batadv_nc_worker
[  447.041537][    C0] Call Trace:
[  447.041541][    C0]  <IRQ>
[  447.041546][    C0]  dump_stack_lvl+0x189/0x250
[  447.041557][    C0]  ? __virt_addr_valid+0x1c8/0x5c0
[  447.041568][    C0]  ? rcu_is_watching+0x15/0xb0
[  447.041576][    C0]  ? __kasan_check_byte+0x12/0x40
[  447.041587][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  447.041595][    C0]  ? rcu_is_watching+0x15/0xb0
[  447.041602][    C0]  ? lock_release+0x4b/0x3e0
[  447.041614][    C0]  ? __virt_addr_valid+0x1c8/0x5c0
[  447.041622][    C0]  ? __virt_addr_valid+0x4a5/0x5c0
[  447.041632][    C0]  print_report+0xca/0x240
[  447.041639][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  447.041647][    C0]  kasan_report+0x118/0x150
[  447.041658][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  447.041666][    C0]  __xfrm_state_delete+0x696/0xca0
[  447.041675][    C0]  xfrm_timer_handler+0x18f/0xa00
[  447.041685][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  447.041691][    C0]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  447.041702][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  447.041713][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  447.041723][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  447.041734][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  447.041740][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  447.041747][    C0]  __hrtimer_run_queues+0x52c/0xc60
[  447.041766][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  447.041773][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  447.041782][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  447.041790][    C0]  handle_softirqs+0x286/0x870
[  447.041798][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  447.041806][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  447.041815][    C0]  __irq_exit_rcu+0xca/0x1f0
[  447.041822][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  447.041831][    C0]  irq_exit_rcu+0x9/0x30
[  447.041838][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  447.041849][    C0]  </IRQ>
[  447.041852][    C0]  <TASK>
[  447.041854][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  447.041863][    C0] RIP: 0010:lock_acquire+0xc9/0x360
[  447.041874][    C0] Code: 03 11 85 c0 0f 85 eb 00 00 00 65 48 8b 04 25 08 80 a0 92 83 b8 ec 0a 00 00 00 0f 85 d5 00 00 00 48 c7 44 24 30 00 00 00 00 9c <8f> 44 24 30 4c 89 74 24 10 4d 89 fe 4c 8b 7c 24 30 fa 48 c7 c7 05
[  447.041882][    C0] RSP: 0018:ffffc90000107908 EFLAGS: 00000246
[  447.041892][    C0] RAX: ffff88801c688000 RBX: 0000000000000000 RCX: efa356818bfd7100
[  447.041901][    C0] RDX: 0000000000000000 RSI: ffffffff8b47c54b RDI: 1ffffffff1c273e4
[  447.041909][    C0] RBP: ffffffff8b47c52a R08: 0000000000000000 R09: 0000000000000000
[  447.041918][    C0] R10: dffffc0000000000 R11: fffffbfff1f47207 R12: 0000000000000002
[  447.041924][    C0] R13: ffffffff8e139f20 R14: 0000000000000000 R15: 0000000000000000
[  447.041930][    C0]  ? batadv_nc_process_nc_paths+0xba/0x3a0
[  447.041982][    C0]  ? batadv_nc_process_nc_paths+0xdb/0x3a0
[  447.041998][    C0]  ? batadv_nc_process_nc_paths+0xba/0x3a0
[  447.042013][    C0]  ? __pfx_batadv_nc_fwd_flush+0x10/0x10
[  447.042026][    C0]  batadv_nc_process_nc_paths+0xdb/0x3a0
[  447.042038][    C0]  ? batadv_nc_process_nc_paths+0xba/0x3a0
[  447.042052][    C0]  ? batadv_nc_process_nc_paths+0xba/0x3a0
[  447.042069][    C0]  batadv_nc_worker+0x429/0x610
[  447.042085][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  447.042094][    C0]  process_scheduled_works+0xae1/0x17b0
[  447.042113][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  447.042129][    C0]  worker_thread+0x8a0/0xda0
[  447.042147][    C0]  kthread+0x711/0x8a0
[  447.042166][    C0]  ? __pfx_worker_thread+0x10/0x10
[  447.042179][    C0]  ? __pfx_kthread+0x10/0x10
[  447.042190][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  447.042200][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  447.042210][    C0]  ? __pfx_kthread+0x10/0x10
[  447.042218][    C0]  ret_from_fork+0x3fc/0x770
[  447.042228][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  447.042237][    C0]  ? __switch_to_asm+0x39/0x70
[  447.042246][    C0]  ? __switch_to_asm+0x33/0x70
[  447.042255][    C0]  ? __pfx_kthread+0x10/0x10
[  447.042263][    C0]  ret_from_fork_asm+0x1a/0x30
[  447.042276][    C0]  </TASK>
[  447.042279][    C0] 
[  447.184416][    C0] Allocated by task 15693:
[  447.185981][    C0]  kasan_save_track+0x3e/0x80
[  447.187983][    C0]  __kasan_slab_alloc+0x6c/0x80
[  447.190033][    C0]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  447.192281][    C0]  xfrm_state_alloc+0x24/0x2f0
[  447.194243][    C0]  __find_acq_core+0x8a7/0x1c00
[  447.196211][    C0]  xfrm_find_acq+0x78/0xa0
[  447.198063][    C0]  xfrm_alloc_userspi+0x6b3/0xc90
[  447.200290][    C0]  xfrm_user_rcv_msg+0x7a3/0xab0
[  447.202323][    C0]  netlink_rcv_skb+0x208/0x470
[  447.204276][    C0]  xfrm_netlink_rcv+0x79/0x90
[  447.206158][    C0]  netlink_unicast+0x82f/0x9e0
[  447.208121][    C0]  netlink_sendmsg+0x805/0xb30
[  447.210099][    C0]  __sock_sendmsg+0x21c/0x270
[  447.212028][    C0]  ____sys_sendmsg+0x505/0x830
[  447.213957][    C0]  ___sys_sendmsg+0x21f/0x2a0
[  447.215810][    C0]  __x64_sys_sendmsg+0x19b/0x260
[  447.217431][    C0]  do_syscall_64+0xfa/0x3b0
[  447.218874][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  447.221161][    C0] 
[  447.222153][    C0] Freed by task 5883:
[  447.223786][    C0]  kasan_save_track+0x3e/0x80
[  447.225547][    C0]  kasan_save_free_info+0x46/0x50
[  447.227158][    C0]  __kasan_slab_free+0x5b/0x80
[  447.228796][    C0]  kmem_cache_free+0x18f/0x400
[  447.230313][    C0]  xfrm_state_gc_task+0x52d/0x6b0
[  447.231901][    C0]  process_scheduled_works+0xae1/0x17b0
[  447.233900][    C0]  worker_thread+0x8a0/0xda0
[  447.235809][    C0]  kthread+0x711/0x8a0
[  447.237531][    C0]  ret_from_fork+0x3fc/0x770
[  447.239361][    C0]  ret_from_fork_asm+0x1a/0x30
[  447.241272][    C0] 
[  447.242197][    C0] The buggy address belongs to the object at ffff888112b31200
[  447.242197][    C0]  which belongs to the cache xfrm_state of size 928
[  447.247439][    C0] The buggy address is located 48 bytes inside of
[  447.247439][    C0]  freed 928-byte region [ffff888112b31200, ffff888112b315a0)
[  447.252634][    C0] 
[  447.253600][    C0] The buggy address belongs to the physical page:
[  447.256152][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888112b30000 pfn:0x112b30
[  447.260184][    C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  447.263584][    C0] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  447.266497][    C0] page_type: f5(slab)
[  447.268109][    C0] raw: 057ff00000000040 ffff88801af46780 dead000000000122 0000000000000000
[  447.271556][    C0] raw: ffff888112b30000 00000000800e000d 00000000f5000000 0000000000000000
[  447.275015][    C0] head: 057ff00000000040 ffff88801af46780 dead000000000122 0000000000000000
[  447.278395][    C0] head: ffff888112b30000 00000000800e000d 00000000f5000000 0000000000000000
[  447.281841][    C0] head: 057ff00000000002 ffffea00044acc01 00000000ffffffff 00000000ffffffff
[  447.285299][    C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  447.288763][    C0] page dumped because: kasan: bad access detected
[  447.291357][    C0] page_owner tracks the page as allocated
[  447.293577][    C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7712, tgid 7711 (syz.1.687), ts 124236003973, free_ts 124030036489
[  447.300986][    C0]  post_alloc_hook+0x240/0x2a0
[  447.302960][    C0]  get_page_from_freelist+0x21e4/0x22c0
[  447.305109][    C0]  __alloc_frozen_pages_noprof+0x181/0x370
[  447.307405][    C0]  alloc_pages_mpol+0x232/0x4a0
[  447.309340][    C0]  allocate_slab+0x8a/0x370
[  447.311112][    C0]  ___slab_alloc+0xbeb/0x1410
[  447.312683][    C0]  kmem_cache_alloc_noprof+0x283/0x3c0
[  447.314530][    C0]  xfrm_state_alloc+0x24/0x2f0
[  447.316114][    C0]  xfrm_add_sa+0x17d1/0x4070
[  447.317534][    C0]  xfrm_user_rcv_msg+0x7a3/0xab0
[  447.319099][    C0]  netlink_rcv_skb+0x208/0x470
[  447.320687][    C0]  xfrm_netlink_rcv+0x79/0x90
[  447.322370][    C0]  netlink_unicast+0x82f/0x9e0
[  447.324025][    C0]  netlink_sendmsg+0x805/0xb30
[  447.325581][    C0]  __sock_sendmsg+0x21c/0x270
[  447.326956][    C0]  ____sys_sendmsg+0x505/0x830
[  447.328464][    C0] page last free pid 7697 tgid 7695 stack trace:
[  447.330883][    C0]  __free_frozen_pages+0xbc4/0xd30
[  447.332891][    C0]  stack_depot_save_flags+0x436/0x860
[  447.334778][    C0]  kasan_save_track+0x4f/0x80
[  447.336543][    C0]  __kasan_kmalloc+0x93/0xb0
[  447.338349][    C0]  __kmalloc_cache_noprof+0x230/0x3d0
[  447.340318][    C0]  __ipv6_dev_mc_inc+0x44f/0xa50
[  447.341992][    C0]  __ipv6_sock_mc_join+0x535/0x9c0
[  447.343661][    C0]  ipv6_mcast_join_leave+0x177/0x1f0
[  447.345450][    C0]  do_ipv6_setsockopt+0x17e8/0x2eb0
[  447.347208][    C0]  ipv6_setsockopt+0x59/0x170
[  447.348745][    C0]  do_sock_setsockopt+0x17c/0x1b0
[  447.350495][    C0]  __x64_sys_setsockopt+0x13f/0x1b0
[  447.352189][    C0]  do_syscall_64+0xfa/0x3b0
[  447.353951][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  447.356208][    C0] 
[  447.357165][    C0] Memory state around the buggy address:
[  447.359362][    C0]  ffff888112b31100: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  447.362592][    C0]  ffff888112b31180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  447.365780][    C0] >ffff888112b31200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  447.369076][    C0]                                      ^
[  447.371364][    C0]  ffff888112b31280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  447.374195][    C0]  ffff888112b31300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  447.376937][    C0] ==================================================================
[  447.379667][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  447.382312][    C0] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
[  447.385530][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  447.389256][    C0] Workqueue: bat_events batadv_nc_worker
[  447.391082][    C0] Call Trace:
[  447.392127][    C0]  <IRQ>
[  447.393019][    C0]  dump_stack_lvl+0x99/0x250
[  447.394393][    C0]  ? __asan_memcpy+0x40/0x70
[  447.395795][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  447.397508][    C0]  ? __pfx__printk+0x10/0x10
[  447.398852][    C0]  vpanic+0x281/0x750
[  447.400299][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  447.402094][    C0]  ? __pfx_vpanic+0x10/0x10
[  447.403682][    C0]  ? irqentry_exit+0x74/0x90
[  447.405434][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  447.406987][    C0]  panic+0xb9/0xc0
[  447.408084][    C0]  ? __pfx_panic+0x10/0x10
[  447.409595][    C0]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  447.411667][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  447.413701][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  447.415346][    C0]  check_panic_on_warn+0x89/0xb0
[  447.416812][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  447.418409][    C0]  end_report+0x78/0x160
[  447.419935][    C0]  kasan_report+0x129/0x150
[  447.421366][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  447.422950][    C0]  __xfrm_state_delete+0x696/0xca0
[  447.424446][    C0]  xfrm_timer_handler+0x18f/0xa00
[  447.426047][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  447.427723][    C0]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  447.429468][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  447.431298][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  447.433410][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  447.435769][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  447.437961][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  447.439712][    C0]  __hrtimer_run_queues+0x52c/0xc60
[  447.441759][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  447.443593][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  447.445623][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  447.447658][    C0]  handle_softirqs+0x286/0x870
[  447.449283][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  447.450664][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  447.452588][    C0]  __irq_exit_rcu+0xca/0x1f0
[  447.454277][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  447.456237][    C0]  irq_exit_rcu+0x9/0x30
[  447.457888][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  447.459561][    C0]  </IRQ>
[  447.460424][    C0]  <TASK>
[  447.461463][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  447.463362][    C0] RIP: 0010:lock_acquire+0xc9/0x360
[  447.465041][    C0] Code: 03 11 85 c0 0f 85 eb 00 00 00 65 48 8b 04 25 08 80 a0 92 83 b8 ec 0a 00 00 00 0f 85 d5 00 00 00 48 c7 44 24 30 00 00 00 00 9c <8f> 44 24 30 4c 89 74 24 10 4d 89 fe 4c 8b 7c 24 30 fa 48 c7 c7 05
[  447.471125][    C0] RSP: 0018:ffffc90000107908 EFLAGS: 00000246
[  447.473100][    C0] RAX: ffff88801c688000 RBX: 0000000000000000 RCX: efa356818bfd7100
[  447.476055][    C0] RDX: 0000000000000000 RSI: ffffffff8b47c54b RDI: 1ffffffff1c273e4
[  447.478291][    C0] RBP: ffffffff8b47c52a R08: 0000000000000000 R09: 0000000000000000
[  447.481388][    C0] R10: dffffc0000000000 R11: fffffbfff1f47207 R12: 0000000000000002
[  447.484533][    C0] R13: ffffffff8e139f20 R14: 0000000000000000 R15: 0000000000000000
[  447.486846][    C0]  ? batadv_nc_process_nc_paths+0xba/0x3a0
[  447.488698][    C0]  ? batadv_nc_process_nc_paths+0xdb/0x3a0
[  447.490631][    C0]  ? batadv_nc_process_nc_paths+0xba/0x3a0
[  447.492703][    C0]  ? __pfx_batadv_nc_fwd_flush+0x10/0x10
[  447.494520][    C0]  batadv_nc_process_nc_paths+0xdb/0x3a0
[  447.496221][    C0]  ? batadv_nc_process_nc_paths+0xba/0x3a0
[  447.498126][    C0]  ? batadv_nc_process_nc_paths+0xba/0x3a0
[  447.499942][    C0]  batadv_nc_worker+0x429/0x610
[  447.501478][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  447.503348][    C0]  process_scheduled_works+0xae1/0x17b0
[  447.505087][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  447.506932][    C0]  worker_thread+0x8a0/0xda0
[  447.508331][    C0]  kthread+0x711/0x8a0
[  447.509614][    C0]  ? __pfx_worker_thread+0x10/0x10
[  447.511271][    C0]  ? __pfx_kthread+0x10/0x10
[  447.512729][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  447.514370][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  447.516068][    C0]  ? __pfx_kthread+0x10/0x10
[  447.517544][    C0]  ret_from_fork+0x3fc/0x770
[  447.519174][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  447.521154][    C0]  ? __switch_to_asm+0x39/0x70
[  447.522724][    C0]  ? __switch_to_asm+0x33/0x70
[  447.524245][    C0]  ? __pfx_kthread+0x10/0x10
[  447.525845][    C0]  ret_from_fork_asm+0x1a/0x30
[  447.527413][    C0]  </TASK>
[  447.529188][    C0] Kernel Offset: disabled
[  447.530450][    C0] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:15:06  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000002e RBX=000000000000002e RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000073b0
R8 =ffff888020c80237 R9 =1ffff11004190046 R10=dffffc0000000000 R11=ffffffff854f3b80
R12=dffffc0000000000 R13=ffffffff99afd8c7 R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f3bfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0050 ffff880000000000 00000007 00008200 DPL=0 LDT
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000020000031f030 CR3=0000000037618000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=1fd4b1433347e68e fdb0ed7db0635637 XMM05=4d0a93deffff0000 3cfbb184aad9925c
XMM06=e19bdbc789c2db9b ec09e98b1fd4b143 XMM07=3347e68efdb0ed7d b0635637bfbf1f07
XMM08=c9f3b8d47e9f3ef4 5f6ae1a1ad25fd30 XMM09=0000000000000000 00007f0545e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffea0004a37080 RBX=0000000000000000 RCX=1ffff9200429dd24 RDX=0000000000000000
RSI=0000000080000000 RDI=0000000000000000 RBP=ffff88810fc1c300 RSP=ffffc900214ee9e0
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=fffffbfff3362190
R12=0000000000000000 R13=dffffc0000000000 R14=0000000000003dfc R15=0000000000000000
RIP=ffffffff82007bfd RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f0546b816c0 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000318030 CR3=000000010f436000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f0545f97498 00007f0545f97470 XMM03=00007f0545f974a8 00007f0545f974a0
XMM04=00007f0546afd100 00007f0545f97460 XMM05=00007f0545f97478 00007f0545f974c0
XMM06=00007f0545f974b8 00007f0545f974b0 XMM07=00007f0545f974a8 00007f0545f974a0
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007f0545e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
