last executing test programs:

4m27.607884118s ago: executing program 0 (id=169):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r1=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={r1, 0x8008, 0xfffffff5, 0x80000000}, 0x10)

4m26.669679974s ago: executing program 0 (id=190):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="2400000001040102000001800000000000000000080005400000000005"], 0x24}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r4, 0x0, 0x4000)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0)
keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={'sha1-avx2\x00'}})
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r6, &(0x7f0000000380)={&(0x7f00000000c0)={0xa, 0x4e06, 0x80000, @loopback, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000002900000003"], 0x18}, 0x20040081)

4m25.756903472s ago: executing program 0 (id=193):
r0 = syz_open_dev$media(&(0x7f0000000000), 0x8000009, 0x8800)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x13, r2, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000280)={0x0, 0x8, 0x0, &(0x7f0000001d40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0})

4m25.686664284s ago: executing program 0 (id=195):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0)
mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc01, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x84000, 0x0)

4m25.683654963s ago: executing program 0 (id=197):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x2, 0x11, 0x0, 0x0, 0x25dfdbfe, [@sadb_key={0x3, 0x8, 0x80, 0x0, "043b8af8b75606ec95f4cb7770814caa"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x88}, 0x1, 0x7}, 0x0)

4m25.429701169s ago: executing program 0 (id=203):
r0 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0)

4m25.401760945s ago: executing program 32 (id=203):
r0 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0)

3m35.420615155s ago: executing program 2 (id=800):
timer_create(0x2, 0x0, &(0x7f0000000100)=<r0=>0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
timer_settime(r0, 0x0, &(0x7f00000003c0)={{}, {0x77359400}}, &(0x7f0000000400))

3m35.280307462s ago: executing program 2 (id=801):
syz_emit_ethernet(0x4a, &(0x7f0000000100)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x14, 0xc, 0x1, 0x0, [{@remote}, {@multicast2}]}]}}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}}}}}, 0x0)

3m35.117012247s ago: executing program 2 (id=802):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20c9}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400"], 0x48)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'macsec0\x00', @random="06517dc2e6ea"})
socket$nl_route(0x10, 0x3, 0x0)

3m34.141554872s ago: executing program 2 (id=813):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680), 0x3, 0x470, &(0x7f0000000dc0)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

3m34.072462529s ago: executing program 2 (id=816):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00')
pread64(r2, &(0x7f0000000600)=""/161, 0xa1, 0x40)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0)

3m33.80794231s ago: executing program 2 (id=824):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
getpeername$packet(r0, 0x0, &(0x7f0000000040))

3m33.732665438s ago: executing program 33 (id=824):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
getpeername$packet(r0, 0x0, &(0x7f0000000040))

3m26.358909503s ago: executing program 3 (id=914):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$kcm(0x29, 0x5, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x5, 0x20000}, 0x10}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

3m26.290288371s ago: executing program 3 (id=915):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETA(r0, 0x560a, &(0x7f0000001040)={0x0, 0xff3, 0x4, 0x20, 0x0, "0000e5ff0100"})

3m26.290050173s ago: executing program 3 (id=916):
unshare(0x22020600)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000014c0)='/proc/meminfo\x00', 0x0, 0x0)
poll(&(0x7f0000001bc0)=[{r0, 0x920a}], 0x1, 0x101)

3m25.96947434s ago: executing program 3 (id=917):
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0})
sendto$packet(r0, 0x0, 0x0, 0x200068c0, &(0x7f0000000180)={0x11, 0x888e, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r2, &(0x7f0000006b40)={0x2020}, 0x206e)

3m25.928743714s ago: executing program 3 (id=920):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[@ANYBLOB="58000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080006400000000011000300686173683a69702c6d61726b"], 0x58}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)

3m25.671213647s ago: executing program 3 (id=928):
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/tcp6\x00')
preadv2(r0, &(0x7f0000000400)=[{&(0x7f0000000040)=""/245, 0xf5}], 0x1, 0x8, 0x9f55, 0x0)

3m25.322473401s ago: executing program 34 (id=928):
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/tcp6\x00')
preadv2(r0, &(0x7f0000000400)=[{&(0x7f0000000040)=""/245, 0xf5}], 0x1, 0x8, 0x9f55, 0x0)

1m6.090341736s ago: executing program 1 (id=2519):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000004c, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYRES64=0x0, @ANYRESHEX=0x0, @ANYBLOB="2c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030372c646973636172642c00214b3cf244ea5fb7437f2c69f67a093e240a6e978fa4cd2d"], 0x1, 0x14f5, &(0x7f0000001580)="$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")
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

1m6.090132964s ago: executing program 1 (id=2520):
openat$fuse(0xffffffffffffff9c, &(0x7f0000000600), 0x42, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0)
r0 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r1 = syz_io_uring_setup(0x1458, &(0x7f00000004c0)={0x0, 0x4, 0x10180, 0x2000, 0x3ab}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000380)=<r3=>0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}}, 0x4000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x20, 0x0, @fd_index=0x1, 0x80, {}, 0x4, 0x5})
io_uring_enter(r1, 0x2d3e, 0xfffffffd, 0x2, 0x0, 0x0)

1m5.965678205s ago: executing program 1 (id=2521):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000400)='*', 0x1, 0x0, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x5, &(0x7f0000000140)=0x6, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, "7817765dc5914c3d", "c0a9b92b592a8e91a6934cb6b7b18f7a7a6eaa9cbd8ef3b0fbc326100136e976", "58a190f0", "2a1e833e7af32011"}, 0x38)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "54164ace389ff5c0", "faad50724acb18aba4e3bc654d684ad9c694f3e96ca4b72643dd3689727968e9", "5cb6d054", "29a78ab9b0a4e8ae"}, 0x38)

1m4.576509424s ago: executing program 1 (id=2537):
syz_mount_image$cramfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="00af268263b121dc03d7d9b98b9cdb76841d31005b31fdfd141b652968fbeae7aac982a517703dc5950f6728aecf5ec337b119ffd66d0a02970718ba573db352906385cece74366e628b6a775c9a6f6fff046416c6240e39a647186c4cf0b360bd17d4cdbd912dc61fd24e6f17d8"], 0x1, 0x152, &(0x7f00000007c0)="$eJzs0E1LKnEUx/Hf3Bnlcq/eBzKwFia0aEjMacRatdBIEtKBwk0rwSYKFCOhXBrRrkXQ1oXlVnwLlrWxRgh7E23cBS0n/o7Rw67977MZ5nsOh2FWlnoqgoAMx3KpuLdvlsvmVnDdSCc3ntrtuOhuAD8/zZ39qziwI54KMDgCRL7xAtu7BXMuXyqI90EcUAEkfjtdg7P7SzSf0+YhSaKp00Bn3Gn6aO9ji47apAIk/r7fsy+AGXHv/9s94BlApRZquZCxbNu2xfeepEJTY5LTm3cZq5sKzwbMUz050fD4ZWTN20skhvPHSDf8EGk1+z0rvWakjV5U1xeimqJpsb5xb6Vi1TMoq54DYPPLPTf8ASULHEvA+XA2uJa8ADr1F6P4Z7E++tfVQzkISJVaPud3NXK+fz8gq5BARERERERERERERERERET0Xa8BAAD//wFeZcY=")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f00000001c0)='./file0\x00')
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f0000000240)=ANY=[], 0x25, 0x2)

1m4.497759831s ago: executing program 1 (id=2540):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x17, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

1m4.220306476s ago: executing program 1 (id=2547):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x2, 0x1000000}]}, @enum]}}, 0x0, 0x3e}, 0x20)

1m4.154017076s ago: executing program 35 (id=2547):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x2, 0x1000000}]}, @enum]}}, 0x0, 0x3e}, 0x20)

7.719264974s ago: executing program 6 (id=3175):
r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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")
sendfile(0xffffffffffffffff, r0, 0x0, 0x7a680004)

7.526641928s ago: executing program 6 (id=3176):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3}, 0x10)
sendmsg$tipc(r1, &(0x7f0000000540)={&(0x7f0000000200)=@name, 0x10, 0x0}, 0x4)
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)

7.237157161s ago: executing program 6 (id=3178):
r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB="00040300000020"], 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)

3.342350597s ago: executing program 6 (id=3214):
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x818808, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1018000, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c})
chdir(&(0x7f00000001c0)='./file0\x00')
chdir(&(0x7f00000003c0)='./bus\x00')
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x1)
syz_mount_image$minix(&(0x7f0000000100), &(0x7f0000000a40)='./file1\x00', 0x2004010, &(0x7f0000001180)=ANY=[], 0x9, 0x1f2, &(0x7f00000004c0)="$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")
getdents64(r0, &(0x7f0000000180)=""/92, 0x5c)

3.23142042s ago: executing program 6 (id=3216):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000000300)=ANY=[], 0x1, 0x5dd, &(0x7f0000000680)="$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")
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x80)
getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000)
close_range(r0, 0xffffffffffffffff, 0x0)

2.967371167s ago: executing program 6 (id=3223):
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000000c0)={0xffffffffffffffff, 0x1, 0x62960c9091099891, 0x2000})

2.87953871s ago: executing program 36 (id=3223):
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000000c0)={0xffffffffffffffff, 0x1, 0x62960c9091099891, 0x2000})

1.399859425s ago: executing program 5 (id=3236):
syz_usb_connect(0x2, 0x3f, &(0x7f0000000b80)={{0x12, 0x1, 0x250, 0xd, 0x48, 0x35, 0x20, 0xfff0, 0xfff0, 0x1e11, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x6, 0xf7, 0x0, 0x6, [{{0x9, 0x4, 0x1e, 0x0, 0x3, 0xb0, 0x6, 0x71, 0x8, [], [{{0x9, 0x5, 0xb, 0x10, 0x40, 0x5, 0xff, 0x8}}, {{0x9, 0x5, 0x8, 0x1, 0x10, 0x6, 0xfd, 0xff}}, {{0x9, 0x5, 0x5, 0x2, 0x200, 0xd, 0x4, 0x1}}]}}]}}]}}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0})

299.900416ms ago: executing program 4 (id=3241):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0101180000007d420000deff0c0000000c00000002"], &(0x7f0000001f80)=""/226, 0x26, 0xe2, 0x2}, 0x28)

299.779081ms ago: executing program 4 (id=3242):
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000001c0)={0x1, @pix_mp={0x101, 0x6, 0x34524742, 0x6, 0xe, [{0x0, 0x8000}, {0x0, 0x3}, {0x5, 0x2}, {0x1, 0xfffffffd}, {0x6, 0xffffffff}, {0x3, 0x9}, {0x4, 0x9}, {0x3, 0x9}], 0x0, 0x1, 0x4, 0x2, 0x5}})

299.674441ms ago: executing program 4 (id=3243):
mount(&(0x7f0000000080)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='ufs\x00', 0x8000, 0x0)

196.492266ms ago: executing program 4 (id=3244):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x78, 0xa0, 0x3f, 0x32, 0x1c0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x2, 0xa})
ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000200)={0x6, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140), &(0x7f0000000180), 0x0})

193.516959ms ago: executing program 5 (id=3245):
rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8)
r0 = getpgrp(0x0)
r1 = gettid()
rt_tgsigqueueinfo(r0, r1, 0x1f, &(0x7f00000000c0)={0x3f, 0x8000006, 0x1})
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000)
read$FUSE(r2, &(0x7f0000002bc0)={0x2020}, 0x2020)

189.052121ms ago: executing program 5 (id=3246):
r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000100))

130.119959ms ago: executing program 5 (id=3247):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4010)

129.943197ms ago: executing program 5 (id=3248):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000500), 0xce, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

67.983281ms ago: executing program 4 (id=3249):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x5, 0x1}}, 0x20)
close_range(r2, r2, 0x0)

232.601µs ago: executing program 5 (id=3250):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x40, &(0x7f00000003c0)={[{@errors_remount}]}, 0x1, 0x58a, &(0x7f0000001380)="$eJzs3U9oHPUeAPDvzGZf/+W99MF78J70UFSoULpJ+kerp/QqFgo9CF40bLahZJMN2USbEDC9F7EHUeml3vTgUfHgQbx49OpF8SwUGxSaHnRl9k+SJpu4iU22Zj8fmN35zW9mv7+Z2e/s/oYZJoCedTJ7SSP+HxFXkoiBdXV90aw82ZhvZXmx+HB5sZhErXb15ySSiHiwvFhszZ80349FxFJE/C8ivs5HnE43x63OL0yMlsulmWZ5cHZyerA6v3Dm+uToeGm8NHXuhRcvXDx/Yfjs8PrFHtbWl/I7W9dbP9x+59a3L9+9/cmnJ5aK740mMRL9zbr16/E4NbZJPkY2TD+/F8G6KOl2A9iVXDPPs1T6bwxErpn17dQG9rVpwB6rHYqo7VLfbhcEnhDJrvMf+Htr/Q/I+r+tYT//f9y71OiAZHFXmkOjpq9xbiIO1/smR39JHumZZP3N4/vZUA6kpZsRMdTXt/n7nzS/f7s39DgayJ766lJjR23e/+nq8SfaHH/6W+dO/6LW8W9l0/FvLX5ui+PflQ5j/Pbajx9uGf9mxFNt4yer8ZM28dOIeKPD+Hde/eLiVnW1jyJORfv4Lcn254cHr10vl4Yar21jfHnqxEvbrf/RLeI3ztkerv/MtNv+0x2u/+fffPb00jbxn3tm+/3fbvsfiYh3O4z/7wcfv7JV3b2byf1aLesCvJ0VO97/2bS7HcZ/fuTk9x3OCgAAAAAAAAAA7EBav5YtSQur42laKDTu4f1PHE3Llers6WuVuamxxjVvxyOftq60GmiUk6w83Lwet1U+2yyPHInIyudyzYC5I/X6QrFSHuvyugMAAAAAAAAAAAAAAAAAAMCT4tiG+/9/zdXv/9/4uGrgoNr6kd/AQbeW//mutgPYf4/+/iddawew//z/h55Vk//Qu+Q/9C75D71L/kPvkv/Qu+Q/9C75DwAAAAAAAAAAAAAAAAAAAAAAAAAAe+LK5cvZUHu4vFjMymN983MTlTfPjJWqE4XJuWKhWJmZLoxXKuPlUqFYmfyzz0sqlemhmJq7MThbqs4OVucXXp+szE21nila8oBhAAAAAAAAAAAAAAAAAAAA2Ky/PiRpISLS+niaFgoR/4yI45FPrl0vl4Yi4l8R8V0ufygrD3e70QAAAAAAAAAAAAAAAAAAAHDAVOcXJkbL5dJMj4z07WTmiFh6vM3IPnHHS+Wb++pJ2YZGemGkywcmAAAAAAAAAAAAAAAAAADoQWs3/Xa6xO972yAAAAAAAAAAAAAAAAAAAADoSelPSURkw6mBZ/s31v4jWcnV3yPirTtX378xOjs7M5xNv786ffaD5vSz3Wg/0KlWnrbyGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFhTnV+YGC2XSzN7ONLtdQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYjT8CAAD//7+01Qg=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141042, 0x0)
fallocate(r0, 0x11, 0xffc, 0x6d8)
write$UHID_INPUT(r0, &(0x7f0000001940)={0x8, {"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", 0x1045}}, 0x1006)

0s ago: executing program 4 (id=3251):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)="3930ace9d7671036202ac5b536eaa47705349c5c831fec816f3d0875fc2202f3e7be7f6c34f8a00866ec8cf2c77e2a3181a23f21febd871a6a459cfa637923909ceac8aa3748a5866410964cc4e7db55", 0x50}], 0x1}, 0x48044)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f00000006c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

kernel console output (not intermixed with test programs):

67) failed
[  249.942103][T12207] FAT-fs (loop5): Directory bread(block 68) failed
[  249.944482][T12207] FAT-fs (loop5): Directory bread(block 69) failed
[  249.949945][T12207] FAT-fs (loop5): Directory bread(block 70) failed
[  249.952339][T12209] loop4: detected capacity change from 0 to 2048
[  249.954832][T12207] FAT-fs (loop5): Directory bread(block 71) failed
[  249.956982][T12207] FAT-fs (loop5): Directory bread(block 72) failed
[  249.961622][T12207] FAT-fs (loop5): Directory bread(block 73) failed
[  249.998978][ T6517]  loop4: p3 < > p4 < >
[  250.000420][ T6517] loop4: partition table partially beyond EOD, truncated
[  250.009747][ T6517] loop4: p3 start 4284289 is beyond EOD, truncated
[  250.019450][T12209]  loop4: p3 < > p4 < >
[  250.020880][T12209] loop4: partition table partially beyond EOD, truncated
[  250.023737][T12209] loop4: p3 start 4284289 is beyond EOD, truncated
[  250.068055][ T6517] udevd[6517]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  250.078097][ T6517] udevd[6517]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  250.144808][T12218] loop4: detected capacity change from 0 to 8
[  250.150364][T12218] SQUASHFS error: zlib decompression failed, data probably corrupt
[  250.153018][T12218] SQUASHFS error: Failed to read block 0x9b: -5
[  250.157770][T12218] SQUASHFS error: Unable to read metadata cache entry [99]
[  250.160375][T12218] SQUASHFS error: Unable to read inode 0x127
[  250.774457][T12225] loop4: detected capacity change from 0 to 32768
[  250.795077][T12225] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2308 (12225)
[  250.817596][T12225] BTRFS info (device loop4 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  250.823790][T12225] BTRFS info (device loop4 state S): using crc32c (crc32c-lib) checksum algorithm
[  250.831303][T12225] BTRFS info (device loop4 state S): using free-space-tree
[  250.913739][ T1089] BTRFS warning (device loop4 state S): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xf6479a7e level 0, ignored
[  250.922978][   T35] BTRFS warning (device loop4 state S): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcd9414ca level 0, ignored
[  250.940499][T12190] BTRFS warning (device loop4 state S): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x28b693f7 level 0, ignored
[  250.950686][T12225] BTRFS error (device loop4 state CS): failed to load root free space
[  250.984160][   T35] BTRFS warning (device loop4 state CS): checksum verify failed on logical 5267456 mirror 1 wanted 0x22fa3277 found 0x0d9b21b0 level 0, ignored
[  251.034131][ T8051] BTRFS info (device loop4 state CS): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  251.539805][   T28] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  251.736656][T12259] overlayfs: upper fs does not support file handles, falling back to index=off.
[  251.740088][T12259] overlayfs: NFS export requires "index=on", falling back to nfs_export=off.
[  252.811436][T12275] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2323'.
[  252.886837][T12281] loop1: detected capacity change from 0 to 2048
[  252.889887][T12281] nilfs2: Bad value for 'cp'
[  253.173345][T12286] qrtr: Invalid version 0
[  253.269892][T12288] loop5: detected capacity change from 0 to 512
[  253.293357][T12288] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.2329: iget: bad extended attribute block 1
[  253.310036][T12288] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.2329: couldn't read orphan inode 15 (err -117)
[  253.323424][T12288] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  253.342769][T12288] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters
[  253.398743][ T8408] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.028320][ T6014] IPVS: starting estimator thread 0...
[  254.104631][T12317] loop5: detected capacity change from 0 to 512
[  254.117999][T12306] IPVS: using max 80 ests per chain, 192000 per kthread
[  254.124883][T12317] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  254.135420][T12317] ext4 filesystem being mounted at /419/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  254.172143][T12317] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #2: block 7: comm syz.5.2341: lblock 12 mapped to illegal pblock 7 (length 22)
[  254.181571][T12317] EXT4-fs (loop5): Remounting filesystem read-only
[  254.192488][ T8408] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.312805][T12332] loop5: detected capacity change from 0 to 256
[  254.318656][T12332] exfat: Deprecated parameter 'utf8'
[  254.321310][T12332] exfat: Deprecated parameter 'utf8'
[  254.323084][T12332] exfat: Deprecated parameter 'utf8'
[  254.327350][T12324] loop1: detected capacity change from 0 to 32768
[  254.330998][T12332] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[  254.333087][T12324] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2343 (12324)
[  254.358429][T12324] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  254.363202][T12324] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  254.366422][T12324] BTRFS info (device loop1): disk space caching is enabled
[  254.380170][T12324] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  254.523152][T12324] BTRFS info (device loop1): rebuilding free space tree
[  254.531586][T12324] BTRFS info (device loop1): disabling free space tree
[  254.534723][T12324] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  254.539034][T12324] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  254.821807][ T5958] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  255.086599][T12356] loop4: detected capacity change from 0 to 32768
[  255.112940][T12356] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  255.153685][T12378] loop1: detected capacity change from 0 to 512
[  255.156952][T12356] XFS (loop4): Ending clean mount
[  255.163137][T12378] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  255.166634][T12378] EXT4-fs (loop1): blocks per group (34) and clusters per group (32768) inconsistent
[  255.187844][T12356] XFS (loop4): User initiated shutdown received.
[  255.190155][T12356] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:476).  Shutting down filesystem.
[  255.194988][T12356] XFS (loop4): Please unmount the filesystem and rectify the problem(s)
[  255.215668][ T8051] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  255.347515][T12383] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2359'.
[  255.356221][T12383] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2359'.
[  255.365805][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  255.369147][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  255.437231][ T5987] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  255.442426][T12390] loop5: detected capacity change from 0 to 764
[  255.545490][T12396] mmap: syz.5.2365 (12396): VmData 45854720 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  255.593947][T12386] loop4: detected capacity change from 0 to 40427
[  255.598849][ T5987] usb 2-1: config 0 has an invalid interface number: 111 but max is 0
[  255.601539][ T5987] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  255.609760][T12386] F2FS-fs (loop4): invalid crc value
[  255.611592][ T5987] usb 2-1: config 0 has no interface number 0
[  255.621548][ T5987] usb 2-1: too many endpoints for config 0 interface 111 altsetting 99: 44, using maximum allowed: 30
[  255.629782][ T5987] usb 2-1: config 0 interface 111 altsetting 99 has 0 endpoint descriptors, different from the interface descriptor's value: 44
[  255.634107][ T5987] usb 2-1: config 0 interface 111 has no altsetting 0
[  255.636437][ T5987] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[  255.639403][ T5987] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.646107][ T5987] usb 2-1: config 0 descriptor??
[  255.669913][ T5987] usb 2-1: selecting invalid altsetting 0
[  255.710447][T12386] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  255.713644][T12386] F2FS-fs (loop4): Start checkpoint disabled!
[  255.945749][T12386] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  255.947618][ T5987] usb 2-1: USB disconnect, device number 38
[  255.993555][   T28] kworker/u9:1: attempt to access beyond end of device
[  255.993555][   T28] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  255.999386][   T28] CPU: 1 UID: 0 PID: 28 Comm: kworker/u9:1 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  255.999398][   T28] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  255.999403][   T28] Workqueue: writeback wb_workfn (flush-7:4)
[  255.999416][   T28] Call Trace:
[  255.999419][   T28]  <TASK>
[  255.999422][   T28]  dump_stack_lvl+0x189/0x250
[  255.999435][   T28]  ? __pfx_dump_stack_lvl+0x10/0x10
[  255.999444][   T28]  ? __pfx_queue_work_on+0x10/0x10
[  255.999452][   T28]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  255.999461][   T28]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  255.999475][   T28]  f2fs_handle_critical_error+0x37c/0x540
[  255.999488][   T28]  f2fs_write_end_io+0x886/0xb60
[  255.999506][   T28]  __submit_merged_bio+0x27a/0x6a0
[  255.999518][   T28]  __submit_merged_write_cond+0x255/0x530
[  255.999530][   T28]  f2fs_write_data_pages+0x261d/0x3000
[  255.999556][   T28]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  255.999572][   T28]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  255.999599][   T28]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  255.999608][   T28]  ? look_up_lock_class+0x74/0x170
[  255.999621][   T28]  ? trace_f2fs_writepages+0x7f/0x200
[  255.999631][   T28]  ? f2fs_write_node_pages+0x478/0x6e0
[  255.999642][   T28]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  255.999657][   T28]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  255.999667][   T28]  do_writepages+0x32e/0x550
[  255.999680][   T28]  ? reacquire_held_locks+0x127/0x1d0
[  255.999687][   T28]  ? writeback_sb_inodes+0x384/0x1010
[  255.999700][   T28]  __writeback_single_inode+0x145/0xff0
[  255.999710][   T28]  ? do_raw_spin_unlock+0x4d/0x240
[  255.999721][   T28]  writeback_sb_inodes+0x6c7/0x1010
[  255.999742][   T28]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  255.999771][   T28]  ? rcu_is_watching+0x15/0xb0
[  255.999783][   T28]  wb_writeback+0x43b/0xaf0
[  255.999796][   T28]  ? queue_io+0x301/0x590
[  255.999807][   T28]  ? __pfx_wb_writeback+0x10/0x10
[  255.999820][   T28]  ? _raw_spin_unlock_irq+0x23/0x50
[  255.999830][   T28]  wb_workfn+0x409/0xef0
[  255.999845][   T28]  ? __pfx_wb_workfn+0x10/0x10
[  255.999855][   T28]  ? __lock_acquire+0xab9/0xd20
[  255.999870][   T28]  ? process_scheduled_works+0x9ef/0x17b0
[  255.999880][   T28]  ? _raw_spin_unlock_irq+0x23/0x50
[  255.999887][   T28]  ? process_scheduled_works+0x9ef/0x17b0
[  255.999894][   T28]  ? process_scheduled_works+0x9ef/0x17b0
[  255.999901][   T28]  process_scheduled_works+0xae1/0x17b0
[  255.999922][   T28]  ? __pfx_process_scheduled_works+0x10/0x10
[  255.999942][   T28]  worker_thread+0x8a0/0xda0
[  255.999951][   T28]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  255.999963][   T28]  ? __kthread_parkme+0x7b/0x200
[  255.999976][   T28]  kthread+0x711/0x8a0
[  255.999986][   T28]  ? __pfx_worker_thread+0x10/0x10
[  255.999993][   T28]  ? __pfx_kthread+0x10/0x10
[  256.000002][   T28]  ? _raw_spin_unlock_irq+0x23/0x50
[  256.000010][   T28]  ? lockdep_hardirqs_on+0x9c/0x150
[  256.000017][   T28]  ? __pfx_kthread+0x10/0x10
[  256.000026][   T28]  ret_from_fork+0x3fc/0x770
[  256.000042][   T28]  ? __pfx_ret_from_fork+0x10/0x10
[  256.000052][   T28]  ? __switch_to_asm+0x39/0x70
[  256.000060][   T28]  ? __switch_to_asm+0x33/0x70
[  256.000068][   T28]  ? __pfx_kthread+0x10/0x10
[  256.000078][   T28]  ret_from_fork_asm+0x1a/0x30
[  256.000095][   T28]  </TASK>
[  256.000098][   T28] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  256.508300][T12411] sg_write: process 959 (syz.5.2369) changed security contexts after opening file descriptor, this is not allowed.
[  256.551318][T12415] loop5: detected capacity change from 0 to 128
[  256.681146][T12408] loop1: detected capacity change from 0 to 32768
[  256.739368][ T6517]  loop1: p1 p3 < >
[  256.763448][T12421] loop5: detected capacity change from 0 to 32768
[  256.779555][T12408]  loop1: p1 p3 < >
[  256.828940][ T6517] udevd[6517]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  256.834680][T12421] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  256.834692][T12421]   allowing incompatible features above 0.0: (unknown version)
[  256.834697][T12421]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  256.849936][T12421] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0
[  256.852659][T12421] bcachefs (loop5): initializing new filesystem
[  256.858951][T12421] bcachefs (loop5): going read-write
[  256.862457][ T5954] udevd[5954]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  256.870329][T12421] bcachefs (loop5): marking superblocks
[  256.875193][T12421] bcachefs (loop5): initializing freespace
[  256.879328][T12421] bcachefs (loop5): done initializing freespace
[  256.882283][T12421] bcachefs (loop5): reading snapshots table
[  256.884304][T12421] bcachefs (loop5): reading snapshots done
[  256.912066][T12421] bcachefs (loop5): done starting filesystem
[  256.950722][ T5954] udevd[5954]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  256.954526][ T6517] udevd[6517]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  256.970229][ T8408] bcachefs (loop5): shutting down
[  256.971938][ T8408] bcachefs (loop5): going read-only
[  256.973690][ T8408] bcachefs (loop5): finished waiting for writes to stop
[  256.975363][T12438] loop1: detected capacity change from 0 to 512
[  256.981276][T12438] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  256.984899][ T8408] bcachefs (loop5): flushing journal and stopping allocators, journal seq 2
[  256.989054][T12438] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ce01c, mo2=0002]
[  256.991844][T12438] System zones: 1-12
[  256.993309][T12438] EXT4-fs (loop1): orphan cleanup on readonly fs
[  256.995583][T12438] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2377: invalid indirect mapped block 12 (level 1)
[  257.013176][ T8408] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 3
[  257.016586][T12438] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2377: invalid indirect mapped block 2 (level 2)
[  257.021430][ T8408] bcachefs (loop5): clean shutdown complete, journal seq 4
[  257.024333][T12438] EXT4-fs (loop1): 1 truncate cleaned up
[  257.026738][ T8408] bcachefs (loop5): marking filesystem clean
[  257.030369][T12438] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback.
[  257.050190][ T8408] bcachefs (loop5): shutdown complete
[  257.069447][ T5958] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  257.116484][T12443] loop1: detected capacity change from 0 to 128
[  257.119273][T12443] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  257.123366][T12443] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  257.160873][T12445] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  257.447520][ T5987] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  257.608741][ T5987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  257.612271][ T5987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  257.615454][ T5987] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  257.618719][ T5987] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.622621][ T5987] usb 2-1: config 0 descriptor??
[  258.005393][T12453] openvswitch: netlink: Key type 40 is out of range max 32
[  258.043917][ T5987] lg-g15 0003:046D:C222.001C: hidraw0: USB HID v10.00 Device [HID 046d:c222] on usb-dummy_hcd.1-1/input0
[  258.044086][T12454] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  258.246681][ T6014] usb 2-1: USB disconnect, device number 39
[  258.344002][T12468] loop5: detected capacity change from 0 to 40427
[  258.353929][T12468] F2FS-fs (loop5): invalid crc value
[  258.383009][T12468] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  258.386083][T12468] F2FS-fs (loop5): Start checkpoint disabled!
[  258.390834][T12468] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  258.421613][T12468] F2FS-fs (loop5): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[  258.458748][ T8311] kworker/u10:6: attempt to access beyond end of device
[  258.458748][ T8311] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  258.463188][ T8311] CPU: 0 UID: 0 PID: 8311 Comm: kworker/u10:6 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  258.463200][ T8311] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  258.463205][ T8311] Workqueue: writeback wb_workfn (flush-7:5)
[  258.463219][ T8311] Call Trace:
[  258.463222][ T8311]  <TASK>
[  258.463225][ T8311]  dump_stack_lvl+0x189/0x250
[  258.463237][ T8311]  ? __pfx_dump_stack_lvl+0x10/0x10
[  258.463268][ T8311]  ? __pfx_queue_work_on+0x10/0x10
[  258.463276][ T8311]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  258.463285][ T8311]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  258.463298][ T8311]  f2fs_handle_critical_error+0x37c/0x540
[  258.463312][ T8311]  f2fs_write_end_io+0x886/0xb60
[  258.463330][ T8311]  __submit_merged_bio+0x27a/0x6a0
[  258.463342][ T8311]  __submit_merged_write_cond+0x255/0x530
[  258.463354][ T8311]  f2fs_write_data_pages+0x261d/0x3000
[  258.463380][ T8311]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  258.463426][ T8311]  ? f2fs_write_meta_pages+0x357/0x450
[  258.463440][ T8311]  ? __lock_acquire+0xab9/0xd20
[  258.463452][ T8311]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  258.463462][ T8311]  do_writepages+0x32e/0x550
[  258.463475][ T8311]  ? reacquire_held_locks+0x127/0x1d0
[  258.463482][ T8311]  ? writeback_sb_inodes+0x384/0x1010
[  258.463495][ T8311]  __writeback_single_inode+0x145/0xff0
[  258.463505][ T8311]  ? do_raw_spin_unlock+0x4d/0x240
[  258.463515][ T8311]  writeback_sb_inodes+0x6c7/0x1010
[  258.463536][ T8311]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  258.463565][ T8311]  ? rcu_is_watching+0x15/0xb0
[  258.463577][ T8311]  wb_writeback+0x43b/0xaf0
[  258.463590][ T8311]  ? queue_io+0x301/0x590
[  258.463601][ T8311]  ? __pfx_wb_writeback+0x10/0x10
[  258.463614][ T8311]  ? _raw_spin_unlock_irq+0x23/0x50
[  258.463624][ T8311]  wb_workfn+0x409/0xef0
[  258.463638][ T8311]  ? __pfx_wb_workfn+0x10/0x10
[  258.463648][ T8311]  ? __lock_acquire+0xab9/0xd20
[  258.463664][ T8311]  ? process_scheduled_works+0x9ef/0x17b0
[  258.463674][ T8311]  ? _raw_spin_unlock_irq+0x23/0x50
[  258.463681][ T8311]  ? process_scheduled_works+0x9ef/0x17b0
[  258.463687][ T8311]  ? process_scheduled_works+0x9ef/0x17b0
[  258.463695][ T8311]  process_scheduled_works+0xae1/0x17b0
[  258.463716][ T8311]  ? __pfx_process_scheduled_works+0x10/0x10
[  258.463735][ T8311]  worker_thread+0x8a0/0xda0
[  258.463744][ T8311]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  258.463756][ T8311]  ? __kthread_parkme+0x7b/0x200
[  258.463768][ T8311]  kthread+0x711/0x8a0
[  258.463779][ T8311]  ? __pfx_worker_thread+0x10/0x10
[  258.463786][ T8311]  ? __pfx_kthread+0x10/0x10
[  258.463795][ T8311]  ? _raw_spin_unlock_irq+0x23/0x50
[  258.463803][ T8311]  ? lockdep_hardirqs_on+0x9c/0x150
[  258.463810][ T8311]  ? __pfx_kthread+0x10/0x10
[  258.463820][ T8311]  ret_from_fork+0x3fc/0x770
[  258.463829][ T8311]  ? __pfx_ret_from_fork+0x10/0x10
[  258.463839][ T8311]  ? __switch_to_asm+0x39/0x70
[  258.463847][ T8311]  ? __switch_to_asm+0x33/0x70
[  258.463855][ T8311]  ? __pfx_kthread+0x10/0x10
[  258.463865][ T8311]  ret_from_fork_asm+0x1a/0x30
[  258.463882][ T8311]  </TASK>
[  258.463885][ T8311] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  258.696940][T12472] loop5: detected capacity change from 0 to 1024
[  258.701160][T12472] EXT4-fs: Ignoring removed orlov option
[  258.702944][T12472] EXT4-fs: Ignoring removed bh option
[  258.704810][T12472] EXT4-fs: Ignoring removed bh option
[  258.722671][T12472] EXT4-fs (loop5): mounted filesystem 05000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  258.747539][ T8408] EXT4-fs (loop5): unmounting filesystem 05000000-0000-0000-0000-000000000000.
[  258.791571][T12478] netlink: 'syz.1.2394': attribute type 11 has an invalid length.
[  258.791911][T12479] loop5: detected capacity change from 0 to 1024
[  258.794017][T12478] netlink: 'syz.1.2394': attribute type 11 has an invalid length.
[  258.794031][T12478] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2394'.
[  258.814501][T12479] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  258.830032][   T33] audit: type=1800 audit(2000000119.320:66): pid=12479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2393" name="file2" dev="loop5" ino=16 res=0 errno=0
[  258.836011][T12483] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2395'.
[  258.854861][ T8408] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  258.926146][T12489] syz_tun: entered promiscuous mode
[  258.930162][T12489] syz_tun: left promiscuous mode
[  259.153778][T12499] loop5: detected capacity change from 0 to 32768
[  259.187096][T12505] loop1: detected capacity change from 0 to 32768
[  259.192045][T12499] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  259.224389][T12505] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  259.235297][T12505] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  259.238326][T12499] XFS (loop5): Ending clean mount
[  259.242693][T12499] XFS (loop5): Quotacheck needed: Please wait.
[  259.244455][T12505] XFS (loop1): Starting recovery (logdev: internal)
[  259.252832][T12505] XFS (loop1): Ending recovery (logdev: internal)
[  259.255949][T12505] XFS (loop1): Quotacheck needed: Please wait.
[  259.266958][T12499] XFS (loop5): Quotacheck: Done.
[  259.300538][T12505] XFS (loop1): Quotacheck: Done.
[  259.330658][ T8408] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  259.350367][ T5958] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  259.500550][T12531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2412'.
[  259.511336][T12533] serio: Serial port ptm0
[  259.531171][T12531] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  259.544171][T12531] macvtap1: entered allmulticast mode
[  259.546145][T12531] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  259.572676][T12531] netdevsim netdevsim4 netdevsim0: left allmulticast mode
[  259.575213][T12531] netdevsim netdevsim4 netdevsim0: left promiscuous mode
[  259.575332][T12541] loop5: detected capacity change from 0 to 8
[  259.587094][T12541] SQUASHFS error: lzo decompression failed, data probably corrupt
[  259.590949][T12541] SQUASHFS error: Failed to read block 0x144: -5
[  259.597602][T12541] SQUASHFS error: Unable to read metadata cache entry [142]
[  259.600020][T12541] SQUASHFS error: Unable to read inode 0x11f
[  260.828736][T12562] loop4: detected capacity change from 0 to 32768
[  260.849058][T12562] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  260.864747][T12562] XFS (loop4): Ending clean mount
[  260.883560][ T8051] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  262.267085][T12590] netlink: 'syz.1.2432': attribute type 83 has an invalid length.
[  262.486946][T12600] loop1: detected capacity change from 0 to 32768
[  262.572104][T12602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2438'.
[  262.575381][T12602] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0)
[  262.578840][T12602] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535
[  263.802758][T12625] loop5: detected capacity change from 0 to 1024
[  263.959531][ T1091] hfsplus: b-tree write err: -5, ino 4
[  264.146478][T12633] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  264.153712][T12633] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  264.665909][T12642] loop1: detected capacity change from 0 to 4096
[  264.673815][T12642] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[  264.952582][T12648] loop1: detected capacity change from 0 to 4096
[  264.960396][T12648] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  264.970512][T12648] ntfs3(loop1): ino=19, mi_enum_attr
[  264.972274][T12648] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  264.979653][T12648] ntfs3(loop1): failed to convert "076c" to cp949
[  264.982186][T12648] ntfs3(loop1): ino=20, mi_enum_attr
[  265.048965][T12655] loop1: detected capacity change from 0 to 512
[  265.063390][T12655] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  265.068923][T12655] ext4 filesystem being mounted at /876/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  265.099223][ T5958] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.243020][T12668] usb usb9: usbfs: process 12668 (syz.1.2464) did not claim interface 0 before use
[  265.598657][ T5987] usb 2-1: new full-speed USB device number 40 using dummy_hcd
[  265.769295][ T5987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  265.772753][ T5987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  265.775883][ T5987] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  265.778999][ T5987] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.783996][ T5987] usb 2-1: config 0 descriptor??
[  265.814753][T12680] libceph: resolve '4' (ret=-3): failed
[  265.836748][T12682] loop5: detected capacity change from 0 to 1024
[  265.841480][T12682] EXT4-fs: Ignoring removed nobh option
[  265.843313][T12682] EXT4-fs: Ignoring removed bh option
[  265.863352][T12682] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  265.871864][T12682] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt.
[  265.894008][ T8408] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.982324][T12691] netlink: 'syz.5.2474': attribute type 2 has an invalid length.
[  265.984811][T12691] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.2474'.
[  265.988311][T12691] nbd: must specify at least one socket
[  266.095870][T12699] tmpfs: Bad value for 'mpol'
[  266.139602][T12703] loop5: detected capacity change from 0 to 1024
[  266.160590][T12703] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2480'.
[  266.204648][ T5987] savu 0003:1E7D:2D5A.001D: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0
[  266.459558][ T5987] usb 2-1: USB disconnect, device number 40
[  266.527799][ T6014] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  266.680699][ T6014] usb 6-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  266.683760][ T6014] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.686372][ T6014] usb 6-1: Product: syz
[  266.688288][ T6014] usb 6-1: Manufacturer: syz
[  266.689797][ T6014] usb 6-1: SerialNumber: syz
[  266.692917][ T6014] usb 6-1: config 0 descriptor??
[  266.698345][ T6014] gspca_main: sonixb-2.14.0 probing 0c45:6005
[  266.900681][ T6014] sonixb 6-1:0.0: Error reading register 00: -71
[  266.909792][ T6014] usb 6-1: USB disconnect, device number 27
[  266.984422][T12716] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  267.254038][T12726] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  267.952521][T12752] loop1: detected capacity change from 0 to 128
[  267.959501][T12752] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  267.963717][T12752] ext4 filesystem being mounted at /893/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  267.970406][T12752] EXT4-fs warning (device loop1): verify_group_input:137: Cannot add at group 123 (only 1 groups)
[  267.986778][ T5958] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  268.015620][T12755] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2501'.
[  268.163588][T12767] loop1: detected capacity change from 0 to 4096
[  268.166314][T12767] EXT4-fs: Ignoring removed mblk_io_submit option
[  268.169357][T12767] EXT4-fs (loop1): Test dummy encryption mode enabled
[  268.174459][T12767] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  268.194627][T12767] futex_wake_op: syz.1.2507 tries to shift op by -1; fix this program
[  268.780977][T12783] loop5: detected capacity change from 0 to 2048
[  268.785675][T12783] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  268.789974][ T6517] udevd[6517]: incorrect nilfs2 checksum on /dev/loop5
[  268.790497][T12783] NILFS (loop5): mounting unchecked fs
[  268.799140][ T6517] udevd[6517]: incorrect nilfs2 checksum on /dev/loop5
[  268.804934][T12783] NILFS (loop5): recovery complete
[  268.808322][T12784] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  268.990666][ T5958] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  269.107369][ T5988] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  269.117815][T12796] loop1: detected capacity change from 0 to 256
[  269.126218][T12796] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  269.280068][ T5988] usb 6-1: Using ep0 maxpacket: 8
[  269.326233][ T5988] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  269.329217][ T5988] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  269.332092][ T5988] usb 6-1: Product: syz
[  269.333926][ T5988] usb 6-1: Manufacturer: syz
[  269.335508][ T5988] usb 6-1: SerialNumber: syz
[  269.343406][ T5988] usb 6-1: config 0 descriptor??
[  269.349642][ T5988] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  269.656275][T12807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2524'.
[  269.660348][T12807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2524'.
[  269.803514][ T5236] Bluetooth: hci0: link tx timeout
[  269.805849][ T5236] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  270.172754][T12821] loop4: detected capacity change from 0 to 16
[  270.182027][T12821] erofs (device loop4): mounted with root inode @ nid 36.
[  270.630371][T12834] loop1: detected capacity change from 0 to 16
[  270.633014][T12834] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  270.664924][T12834] cramfs: Error -3 while decompressing!
[  270.678092][T12834] cramfs: ffffffff99be45d8(42)->ffff8880363d4000(4096)
[  270.699502][T12838] loop4: detected capacity change from 0 to 4096
[  270.723344][T12838] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  270.740506][T12838] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #15: comm syz.4.2539: corrupted inode contents
[  270.746028][T12838] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #15: comm syz.4.2539: mark_inode_dirty error
[  270.755502][T12838] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #15: comm syz.4.2539: corrupted inode contents
[  270.760419][T12838] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #15: comm syz.4.2539: mark_inode_dirty error
[  270.764129][T12838] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #15: comm syz.4.2539: corrupted inode contents
[  270.768618][T12838] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #15: comm syz.4.2539: mark_inode_dirty error
[  270.772855][T12838] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #15: comm syz.4.2539: corrupted inode contents
[  270.792759][T12838] EXT4-fs error (device loop4): ext4_truncate:4666: inode #15: comm syz.4.2539: mark_inode_dirty error
[  270.796739][T12838] EXT4-fs error (device loop4) in ext4_setattr:6071: Corrupt filesystem
[  270.807629][T12838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  271.012357][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.068401][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.133546][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.192293][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.213045][   T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  271.217133][   T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  271.220999][   T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  271.224148][   T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  271.228725][   T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  271.376550][ T5988] gspca_sonixj: reg_w1 err -71
[  271.427366][ T5988] sonixj 6-1:0.0: probe with driver sonixj failed with error -71
[  271.432578][ T5988] usb 6-1: USB disconnect, device number 28
[  271.632127][   T13] bond0 (unregistering): Released all slaves
[  271.639190][   T13] bond1 (unregistering): Released all slaves
[  271.719031][   T13] IPVS: stopping master sync thread 10122 ...
[  271.763627][T12856] chnl_net:caif_netlink_parms(): no params data found
[  271.820707][T12856] bridge0: port 1(bridge_slave_0) entered blocking state
[  271.831726][T12856] bridge0: port 1(bridge_slave_0) entered disabled state
[  271.834771][T12856] bridge_slave_0: entered allmulticast mode
[  271.837554][   T53] Bluetooth: hci0: command 0x0406 tx timeout
[  271.838680][T12856] bridge_slave_0: entered promiscuous mode
[  271.843103][T12856] bridge0: port 2(bridge_slave_1) entered blocking state
[  271.845620][T12856] bridge0: port 2(bridge_slave_1) entered disabled state
[  271.850523][T12856] bridge_slave_1: entered allmulticast mode
[  271.853542][T12856] bridge_slave_1: entered promiscuous mode
[  271.920851][T12856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  271.939083][   T13] hsr_slave_0: left promiscuous mode
[  271.942188][   T13] hsr_slave_1: left promiscuous mode
[  271.949381][   T13] veth1_macvtap: left promiscuous mode
[  271.951242][   T13] veth0_macvtap: left promiscuous mode
[  271.953232][   T13] veth1_vlan: left promiscuous mode
[  271.954949][   T13] veth0_vlan: left promiscuous mode
[  272.355753][T12888] loop5: detected capacity change from 0 to 32768
[  272.596211][T12890] loop5: detected capacity change from 0 to 40427
[  272.599860][T12890] F2FS-fs: heap/no_heap options were deprecated
[  272.603286][T12890] F2FS-fs (loop5): invalid crc value
[  272.607436][T12890] F2FS-fs (loop5): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root
[  272.646833][T12890] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  272.650392][T12890] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  272.831617][T12895] program syz.5.2559 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.844389][T12856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  272.900143][T12856] team0: Port device team_slave_0 added
[  272.903864][T12856] team0: Port device team_slave_1 added
[  272.964125][T12856] batman_adv: batadv0: Adding interface: batadv_slave_0
[  272.966438][T12856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  272.984184][T12856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  273.015124][T12856] batman_adv: batadv0: Adding interface: batadv_slave_1
[  273.017774][T12856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  273.026444][T12908] tmpfs: Bad value for 'mpol'
[  273.040074][T12856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  273.105077][T12856] hsr_slave_0: entered promiscuous mode
[  273.111636][T12856] hsr_slave_1: entered promiscuous mode
[  273.151782][T12913] loop5: detected capacity change from 0 to 4096
[  273.158791][T12913] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512).
[  273.277658][ T5236] Bluetooth: hci2: command tx timeout
[  273.307520][T12856] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  273.314307][T12856] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  273.320429][T12856] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  273.330556][T12856] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  273.390930][T12856] 8021q: adding VLAN 0 to HW filter on device bond0
[  273.403956][T12856] 8021q: adding VLAN 0 to HW filter on device team0
[  273.412480][T12190] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.414782][T12190] bridge0: port 1(bridge_slave_0) entered forwarding state
[  273.420913][T12190] bridge0: port 2(bridge_slave_1) entered blocking state
[  273.423206][T12190] bridge0: port 2(bridge_slave_1) entered forwarding state
[  273.535555][T12856] 8021q: adding VLAN 0 to HW filter on device batadv0
[  273.660102][T12856] veth0_vlan: entered promiscuous mode
[  273.665198][T12856] veth1_vlan: entered promiscuous mode
[  273.683491][T12856] veth0_macvtap: entered promiscuous mode
[  273.687776][T12856] veth1_macvtap: entered promiscuous mode
[  273.696696][T12856] batman_adv: batadv0: Interface activated: batadv_slave_0
[  273.712101][T12856] batman_adv: batadv0: Interface activated: batadv_slave_1
[  273.719307][   T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  273.722241][   T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  273.725967][   T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  273.729042][   T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  273.784054][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  273.786690][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  273.803791][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  273.806393][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  274.560448][T12983] loop5: detected capacity change from 0 to 128
[  275.017554][T13003] loop4: detected capacity change from 0 to 1024
[  275.357784][ T5236] Bluetooth: hci2: command tx timeout
[  275.647630][ T5314] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  275.797443][ T5314] usb 6-1: Using ep0 maxpacket: 32
[  275.801024][ T5314] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  275.803956][ T5314] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  275.814569][ T5314] usb 6-1: config 0 descriptor??
[  275.822349][ T5314] gspca_main: sunplus-2.14.0 probing 041e:400b
[  275.883031][T13028] loop4: detected capacity change from 0 to 32768
[  275.885527][T13028] XFS: ikeep mount option is deprecated.
[  275.894690][T13028] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  275.920864][T13028] XFS (loop4): Ending clean mount
[  275.923487][T13028] XFS (loop4): Quotacheck needed: Please wait.
[  275.947470][T13028] XFS (loop4): Quotacheck: Done.
[  276.369830][T13047] loop6: detected capacity change from 0 to 1024
[  276.416885][T13047] hfsplus: request for non-existent node 24 in B*Tree
[  276.422277][T13047] hfsplus: request for non-existent node 24 in B*Tree
[  276.662096][T13053] loop6: detected capacity change from 0 to 64
[  276.999783][ T8051] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  277.120420][T13062] loop4: detected capacity change from 0 to 512
[  277.130046][T13062] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  277.156240][T13062] EXT4-fs (loop4): 1 truncate cleaned up
[  277.160501][T13062] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  277.179195][ T8051] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.223790][T13058] loop6: detected capacity change from 0 to 32768
[  277.298691][T13058] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  277.306623][ T5314] gspca_sunplus: reg_w_riv err -71
[  277.309625][ T5314] sunplus 6-1:0.0: probe with driver sunplus failed with error -71
[  277.316332][ T5314] usb 6-1: USB disconnect, device number 29
[  277.341940][T12856] ocfs2: Unmounting device (7,6) on (node local)
[  277.417521][T13073] IPVS: fo: SCTP 172.20.20.187:0 - no destination available
[  277.440240][T12858] IPVS: starting estimator thread 0...
[  277.538328][T13074] IPVS: using max 79 ests per chain, 189600 per kthread
[  277.607448][ T5236] Bluetooth: hci2: command tx timeout
[  277.774123][T13092] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2604'.
[  277.801390][T13094] loop6: detected capacity change from 0 to 512
[  277.815195][T13094] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  277.819827][T13094] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  277.838865][T12856] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.975444][T13105] loop5: detected capacity change from 0 to 2048
[  277.985965][T13105] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  277.996644][T13106] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  278.772823][T13134] loop4: detected capacity change from 0 to 32768
[  278.858381][ T5236] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[  278.862060][ T5236] CPU: 1 UID: 0 PID: 5236 Comm: kworker/u11:1 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  278.862073][ T5236] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  278.862078][ T5236] Workqueue: hci1 hci_rx_work
[  278.862090][ T5236] Call Trace:
[  278.862094][ T5236]  <TASK>
[  278.862098][ T5236]  dump_stack_lvl+0x189/0x250
[  278.862111][ T5236]  ? __pfx_dump_stack_lvl+0x10/0x10
[  278.862121][ T5236]  ? __pfx__printk+0x10/0x10
[  278.862160][ T5236]  ? kernfs_path_from_node+0x250/0x290
[  278.862168][ T5236]  ? kernfs_path_from_node+0x2f/0x290
[  278.862178][ T5236]  sysfs_create_dir_ns+0x259/0x280
[  278.862187][ T5236]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  278.862197][ T5236]  ? do_raw_spin_unlock+0x4d/0x240
[  278.862208][ T5236]  kobject_add_internal+0x59f/0xb40
[  278.862222][ T5236]  kobject_add+0x155/0x220
[  278.862234][ T5236]  ? __pfx_kobject_add+0x10/0x10
[  278.862244][ T5236]  ? _raw_spin_unlock+0x28/0x50
[  278.862253][ T5236]  ? get_device_parent+0x366/0x3a0
[  278.862285][ T5236]  device_add+0x408/0xb50
[  278.862297][ T5236]  hci_conn_add_sysfs+0xd5/0x1e0
[  278.862309][ T5236]  le_conn_complete_evt+0xc3a/0x1220
[  278.862324][ T5236]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  278.862335][ T5236]  ? __mutex_unlock_slowpath+0x1a1/0x760
[  278.862347][ T5236]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  278.862356][ T5236]  ? skb_pull_data+0xfb/0x200
[  278.862366][ T5236]  hci_le_enh_conn_complete_evt+0x189/0x470
[  278.862375][ T5236]  ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10
[  278.862386][ T5236]  hci_event_packet+0x78f/0x1200
[  278.862398][ T5236]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  278.862407][ T5236]  ? __pfx_hci_event_packet+0x10/0x10
[  278.862419][ T5236]  ? kcov_remote_start+0x4d3/0x7f0
[  278.862428][ T5236]  ? lockdep_hardirqs_on+0x90/0x150
[  278.862438][ T5236]  ? hci_send_to_monitor+0xe2/0x570
[  278.862448][ T5236]  hci_rx_work+0x46a/0xe80
[  278.862458][ T5236]  ? process_scheduled_works+0x9ef/0x17b0
[  278.862466][ T5236]  process_scheduled_works+0xae1/0x17b0
[  278.862485][ T5236]  ? __pfx_process_scheduled_works+0x10/0x10
[  278.862503][ T5236]  worker_thread+0x8a0/0xda0
[  278.862521][ T5236]  kthread+0x711/0x8a0
[  278.862531][ T5236]  ? __pfx_worker_thread+0x10/0x10
[  278.862538][ T5236]  ? __pfx_kthread+0x10/0x10
[  278.862547][ T5236]  ? _raw_spin_unlock_irq+0x23/0x50
[  278.862554][ T5236]  ? lockdep_hardirqs_on+0x9c/0x150
[  278.862562][ T5236]  ? __pfx_kthread+0x10/0x10
[  278.862570][ T5236]  ret_from_fork+0x3fc/0x770
[  278.862580][ T5236]  ? __pfx_ret_from_fork+0x10/0x10
[  278.862590][ T5236]  ? __switch_to_asm+0x39/0x70
[  278.862598][ T5236]  ? __switch_to_asm+0x33/0x70
[  278.862606][ T5236]  ? __pfx_kthread+0x10/0x10
[  278.862615][ T5236]  ret_from_fork_asm+0x1a/0x30
[  278.862631][ T5236]  </TASK>
[  278.862683][ T5236] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  278.997411][ T6014] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  279.008843][ T5236] Bluetooth: hci1: failed to register connection device
[  279.148928][ T6014] usb 7-1: config 0 has an invalid interface number: 110 but max is 0
[  279.151484][ T6014] usb 7-1: config 0 has no interface number 0
[  279.153429][ T6014] usb 7-1: config 0 interface 110 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64
[  279.158336][ T6014] usb 7-1: config 0 interface 110 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 10
[  279.163109][ T6014] usb 7-1: config 0 interface 110 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  279.167064][ T6014] usb 7-1: config 0 interface 110 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  279.172701][ T6014] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=17.65
[  279.182269][ T6014] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.186560][ T6014] usb 7-1: config 0 descriptor??
[  279.191594][T13136] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  279.195282][ T6014] adutux 7-1:0.110: interrupt endpoints not found
[  279.387660][T13147] loop4: detected capacity change from 0 to 512
[  279.396646][ T6014] usb 7-1: USB disconnect, device number 2
[  279.410914][T13147] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  279.415020][T13147] ext4 filesystem being mounted at /577/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  279.435207][ T8051] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  279.687382][ T5236] Bluetooth: hci2: command tx timeout
[  280.207289][   T60] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  280.358875][   T60] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  280.361928][   T60] usb 6-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00
[  280.365238][   T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.370583][   T60] usb 6-1: config 0 descriptor??
[  280.781054][   T60] zydacron 0003:13EC:0006.001E: invalid report_size -1021686408
[  280.783724][   T60] zydacron 0003:13EC:0006.001E: item 0 4 1 7 parsing failed
[  280.786343][   T60] zydacron 0003:13EC:0006.001E: parse failed
[  280.788454][   T60] zydacron 0003:13EC:0006.001E: probe with driver zydacron failed with error -22
[  280.980550][ T6014] usb 6-1: USB disconnect, device number 30
[  281.037278][T13169] loop6: detected capacity change from 0 to 32768
[  281.040285][T13169] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2636 (13169)
[  281.047282][T13169] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  281.050805][T13169] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm
[  281.054289][T13169] BTRFS info (device loop6): using free-space-tree
[  281.113041][T12856] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  281.807447][ T6014] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  281.969851][ T6014] usb 6-1: config 0 has an invalid interface number: 69 but max is 0
[  281.972615][ T6014] usb 6-1: config 0 has no interface number 0
[  281.974677][ T6014] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  281.978258][ T6014] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  281.983664][ T6014] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  281.986677][ T6014] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  281.989571][ T6014] usb 6-1: Product: syz
[  281.990903][ T6014] usb 6-1: Manufacturer: syz
[  281.992439][ T6014] usb 6-1: SerialNumber: syz
[  281.995261][ T6014] usb 6-1: config 0 descriptor??
[  281.998597][T13195] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  282.001927][ T6014] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  282.006425][ T6014] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  282.411862][  T793] usb 6-1: USB disconnect, device number 31
[  282.416184][  T793] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  282.421742][  T793] cyberjack 6-1:0.69: device disconnected
[  282.476495][T13210] loop6: detected capacity change from 0 to 40427
[  282.485018][T13210] F2FS-fs (loop6): Image doesn't support compression
[  282.487404][T13210] F2FS-fs (loop6): build fault injection rate: 690
[  282.490741][T13210] F2FS-fs (loop6): invalid crc value
[  282.528168][T13210] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  282.531744][T13210] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  282.567443][ T1091] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  282.768034][T13218] loop4: detected capacity change from 0 to 256
[  282.806338][T13218] FAT-fs (loop4): Directory bread(block 64) failed
[  282.808797][T13218] FAT-fs (loop4): Directory bread(block 65) failed
[  282.811740][T13218] FAT-fs (loop4): Directory bread(block 66) failed
[  282.813995][T13218] FAT-fs (loop4): Directory bread(block 67) failed
[  282.816480][T13218] FAT-fs (loop4): Directory bread(block 68) failed
[  282.818786][T13218] FAT-fs (loop4): Directory bread(block 69) failed
[  282.821223][T13218] FAT-fs (loop4): Directory bread(block 70) failed
[  282.823424][T13218] FAT-fs (loop4): Directory bread(block 71) failed
[  282.825778][T13218] FAT-fs (loop4): Directory bread(block 72) failed
[  282.828169][T13218] FAT-fs (loop4): Directory bread(block 73) failed
[  283.108654][T13236] bond0: option xmit_hash_policy: invalid value (8)
[  283.195603][T13244] loop5: detected capacity change from 0 to 1024
[  283.201833][T13244] EXT4-fs: Ignoring removed bh option
[  283.224274][T13244] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  283.254142][ T8408] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  283.277547][ T6014] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  283.447397][ T6014] usb 7-1: Using ep0 maxpacket: 16
[  283.451788][ T6014] usb 7-1: config 0 has an invalid interface number: 131 but max is 0
[  283.454482][ T6014] usb 7-1: config 0 has no interface number 0
[  283.456713][ T6014] usb 7-1: config 0 interface 131 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  283.462289][ T6014] usb 7-1: New USB device found, idVendor=0856, idProduct=ac29, bcdDevice=b6.9e
[  283.465688][ T6014] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.471684][ T6014] usb 7-1: config 0 descriptor??
[  283.680039][ T6014] mos7840 7-1:0.131: missing endpoints
[  283.683399][ T6014] usb 7-1: USB disconnect, device number 3
[  283.722436][T13264] loop4: detected capacity change from 0 to 2048
[  283.741599][T13264] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  283.752381][T13264] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.2664: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  283.776954][ T8051] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  283.801762][T13269] netlink: 'syz.4.2665': attribute type 9 has an invalid length.
[  283.875577][T13275] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2668'.
[  283.963031][T13283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2672'.
[  284.014902][T13287] loop4: detected capacity change from 0 to 2048
[  284.051874][T13287] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  284.062697][T13287] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2674: bg 0: block 408: padding at end of block bitmap is not set
[  284.068549][T13287] EXT4-fs (loop4): Remounting filesystem read-only
[  284.071833][T13287] EXT4-fs warning (device loop4): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed
[  284.087516][ T8051] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.276433][T13303] loop5: detected capacity change from 0 to 128
[  284.279854][T13303] EXT4-fs: Ignoring removed nobh option
[  284.281749][T13302] loop6: detected capacity change from 0 to 2048
[  284.300988][ T5954]  loop6: p2 < > p3 < p5 > p4
[  284.302567][ T5954] loop6: partition table partially beyond EOD, truncated
[  284.306223][T13303] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  284.309014][ T5954] loop6: p2 start 4278190080 is beyond EOD, truncated
[  284.312905][T13303] ext4 filesystem being mounted at /539/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  284.317745][ T5954] loop6: p4 size 8192 extends beyond EOD, truncated
[  284.321094][ T5954] loop6: p5 size 8192 extends beyond EOD, truncated
[  284.522160][T13302]  loop6: p2 < > p3 < p5 > p4
[  284.523860][T13302] loop6: partition table partially beyond EOD, truncated
[  284.528300][T13302] loop6: p2 start 4278190080 is beyond EOD, truncated
[  284.531503][T13302] loop6: p4 size 8192 extends beyond EOD, truncated
[  284.534394][T13302] loop6: p5 size 8192 extends beyond EOD, truncated
[  284.545952][ T8408] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  284.609621][ T5954] udevd[5954]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory
[  284.610324][ T6482] udevd[6482]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory
[  284.614499][ T6517] udevd[6517]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[  284.629609][ T6517] udevd[6517]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[  284.630603][ T6482] udevd[6482]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory
[  284.634920][ T5954] udevd[5954]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory
[  284.817249][ T5987] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  284.967687][ T5987] usb 7-1: Using ep0 maxpacket: 32
[  284.974371][ T5987] usb 7-1: config 0 has an invalid interface number: 216 but max is 0
[  284.977061][ T5987] usb 7-1: config 0 has no interface number 0
[  284.981581][ T5987] usb 7-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02
[  284.984589][ T5987] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.987479][ T5987] usb 7-1: Product: syz
[  284.988869][ T5987] usb 7-1: Manufacturer: syz
[  284.990406][ T5987] usb 7-1: SerialNumber: syz
[  284.993151][ T5987] usb 7-1: config 0 descriptor??
[  285.205066][ T5314] usb 7-1: USB disconnect, device number 4
[  285.458791][T13318] binder: 13317:13318 ioctl c0306201 200000000480 returned -14
[  285.795481][T13333] (syz.6.2691,13333,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  285.799658][T13333] (syz.6.2691,13333,0):ocfs2_fill_super:1177 ERROR: status = -22
[  285.949585][T13341] dummy0: entered promiscuous mode
[  285.953489][T13341] dummy0: left promiscuous mode
[  286.068465][T13345] loop6: detected capacity change from 0 to 512
[  286.073465][T13345] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[  286.290853][T13355] loop6: detected capacity change from 0 to 32768
[  286.302350][T13355] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  286.314318][T13355] (syz.6.2702,13355,1):ocfs2_find_entry:1094 ERROR: status = -117
[  286.317054][T13355] (syz.6.2702,13355,1):ocfs2_find_entry:1094 ERROR: status = -117
[  286.322694][T13355] (syz.6.2702,13355,1):ocfs2_symlink:2080 ERROR: status = -117
[  286.349652][T12856] (syz-executor,12856,0):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 76
[  286.355279][T12856] ocfs2: Unmounting device (7,6) on (node local)
[  287.367006][T13402] loop4: detected capacity change from 0 to 2048
[  287.411971][T13402] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  287.429211][   T33] audit: type=1800 audit(2000000147.930:67): pid=13402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2714" name="bus" dev="loop4" ino=18 res=0 errno=0
[  287.506161][ T8051] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  287.624355][T13421] tmpfs: Bad value for 'nr_inodes'
[  287.687023][T13426] loop4: detected capacity change from 0 to 4096
[  287.697468][T13426] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  287.710820][T13429] loop5: detected capacity change from 0 to 1024
[  287.739388][   T26] hfsplus: b-tree write err: -5, ino 4
[  288.189815][T13436] loop5: detected capacity change from 0 to 32768
[  288.210870][T13436] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  288.221583][T13436] XFS (loop5): Ending clean mount
[  288.224260][T13436] XFS (loop5): Quotacheck needed: Please wait.
[  288.246000][T13436] XFS (loop5): Quotacheck: Done.
[  288.261880][ T8408] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  288.556070][T13469] loop5: detected capacity change from 0 to 4096
[  289.487875][T13488] tracefs: Invalid uid '0x00000000ffffffff'
[  289.595980][T13496] loop5: detected capacity change from 0 to 16
[  289.605350][T13496] erofs (device loop5): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk!
[  289.614805][T13496] erofs (device loop5): mounted with root inode @ nid 36.
[  289.817372][T13498] syz.5.2743: attempt to access beyond end of device
[  289.817372][T13498] loop5: rw=0, sector=1152, nr_sectors = 257 limit=16
[  289.825249][T13498] erofs (device loop5): read error -5 @ 0 of nid 36
[  290.586973][T13506] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  290.644157][T13507] bpq0: entered allmulticast mode
[  290.799309][T13516] loop6: detected capacity change from 0 to 1024
[  290.891289][   T53] Bluetooth: hci2: command 0x0405 tx timeout
[  291.998926][T13531] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  292.028967][T13534] loop4: detected capacity change from 0 to 164
[  292.063228][T12858] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  292.193323][T13546] loop4: detected capacity change from 0 to 16
[  292.221778][T13546] erofs (device loop4): negative i_size @ nid 36
[  292.222200][T13548] loop6: detected capacity change from 0 to 512
[  292.233240][T12858] usb 6-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[  292.236201][T12858] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.245247][T13548] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  292.252102][T12858] usb 6-1: config 0 descriptor??
[  292.265408][T13548] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002]
[  292.271650][T13548] EXT4-fs (loop6): failed to initialize system zone (-117)
[  292.274142][T13548] EXT4-fs (loop6): mount failed
[  292.590312][  T793] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  292.808199][  T793] usb 7-1: Using ep0 maxpacket: 16
[  292.828243][T12858] hackrf 6-1:0.0: Board ID: 00
[  292.832133][T12858] hackrf 6-1:0.0: Firmware version: 
[  292.835924][  T793] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  292.853544][  T793] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  292.870670][  T793] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  292.875365][  T793] usb 7-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  292.883816][  T793] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.912318][T12858] hackrf 6-1:0.0: Registered as swradio24
[  292.915830][  T793] usb 7-1: config 0 descriptor??
[  292.919069][T12858] videodev: could not get a free minor
[  292.921069][T12858] hackrf 6-1:0.0: Failed to register as video device (-23)
[  292.926818][  T793] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input24
[  292.940733][T12858] hackrf 6-1:0.0: probe with driver hackrf failed with error -23
[  293.032347][  T793] usb 6-1: USB disconnect, device number 32
[  293.131558][ T5942] usb 7-1: USB disconnect, device number 5
[  293.558285][T13575] loop5: detected capacity change from 0 to 128
[  293.561371][T13575] EXT4-fs (loop5): Test dummy encryption mode enabled
[  293.565455][T13575] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  293.570928][T13575] ext4 filesystem being mounted at /570/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  293.595657][ T8408] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  293.795877][T13590] loop5: detected capacity change from 0 to 512
[  293.854533][T13592] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2781'.
[  293.986263][T13604] Bluetooth: hci0: unsupported parameter 60160
[  293.990000][T13604] Bluetooth: hci0: invalid length 0, exp 2 for type 0
[  294.259989][T13610] sock: sock_set_timeout: `syz.4.2789' (pid 13610) tries to set negative timeout
[  294.585811][T13622] loop6: detected capacity change from 0 to 512
[  294.622678][T13622] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  294.626917][T13622] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  294.636699][T13622] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #12: comm syz.6.2795: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  294.658429][T12856] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  294.692715][T13626] loop6: detected capacity change from 0 to 512
[  294.713529][T13626] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  294.719375][T13626] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002]
[  294.722246][T13626] EXT4-fs (loop6): orphan cleanup on readonly fs
[  294.726505][T13626] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2796: bg 0: block 361: padding at end of block bitmap is not set
[  294.734009][T13626] EXT4-fs (loop6): Remounting filesystem read-only
[  294.736587][T13626] EXT4-fs (loop6): 1 truncate cleaned up
[  294.739309][T13626] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  294.870803][ T5314] kernel read not supported for file /dsp1 (pid: 5314 comm: kworker/0:3)
[  294.958029][T13633] EXT4-fs warning (device loop6): dx_probe:861: inode #2: comm syz.6.2796: dx entry: limit 0 != root limit 125
[  294.962548][T13633] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.2796: Corrupt directory, running e2fsck is recommended
[  294.970171][T13633] EXT4-fs warning (device loop6): dx_probe:861: inode #2: comm syz.6.2796: dx entry: limit 0 != root limit 125
[  294.974095][T13633] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.2796: Corrupt directory, running e2fsck is recommended
[  294.980180][T13633] EXT4-fs warning (device loop6): dx_probe:861: inode #2: comm syz.6.2796: dx entry: limit 0 != root limit 125
[  294.984094][T13633] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.2796: Corrupt directory, running e2fsck is recommended
[  294.990972][T13633] EXT4-fs warning (device loop6): dx_probe:861: inode #2: comm syz.6.2796: dx entry: limit 0 != root limit 125
[  294.994885][T13633] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.2796: Corrupt directory, running e2fsck is recommended
[  295.112386][T12856] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  295.225792][T13639] loop5: detected capacity change from 0 to 4096
[  295.255238][T13644] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  295.396284][T13646] loop6: detected capacity change from 0 to 32768
[  295.408435][T13646] (syz.6.2804,13646,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  295.412904][T13646] (syz.6.2804,13646,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  295.431239][T13646] JBD2: Ignoring recovery information on journal
[  295.457632][T13646] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  295.476361][T13646] ocfs2: Unmounting device (7,6) on (node local)
[  295.795384][T13674] ip6gretap0: entered promiscuous mode
[  295.798536][T13674] vlan2: entered promiscuous mode
[  297.183269][T13709] loop5: detected capacity change from 0 to 512
[  297.194263][T13709] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  297.229381][T13709] EXT4-fs (loop5): 1 truncate cleaned up
[  297.231976][T13709] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  297.270584][ T8408] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  297.278287][T13716] loop6: detected capacity change from 0 to 2048
[  297.283560][T13716] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[  297.296246][ T6517] udevd[6517]: incorrect nilfs2 checksum on /dev/loop6
[  297.298315][T13717] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  297.389000][T13723] loop6: detected capacity change from 0 to 2048
[  297.396951][T13723] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  297.462490][T13731] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2839'.
[  297.481879][T13733] ip6gre1: entered allmulticast mode
[  297.690657][T13753] loop6: detected capacity change from 0 to 512
[  297.694638][T13753] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.2847: Invalid inode bitmap blk 4 in block_group 0
[  297.708184][T13753] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  297.725715][T13753] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters
[  297.734071][T13753] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.2847: Invalid inode bitmap blk 4 in block_group 0
[  297.740946][T13753] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem
[  297.769550][T12856] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  297.775612][T13755] delete_channel: no stack
[  297.854907][T13766] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2853'.
[  297.896795][ T5314] kernel write not supported for file /register (pid: 5314 comm: kworker/0:3)
[  297.945437][T13773] loop6: detected capacity change from 0 to 16
[  297.951165][T13773] erofs (device loop6): mounted with root inode @ nid 36.
[  298.024622][T13777] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(12)
[  298.026744][T13777] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  298.030769][T13777] vhci_hcd vhci_hcd.0: Device attached
[  298.034150][T13777] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(14)
[  298.036318][T13777] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  298.042127][T13777] vhci_hcd vhci_hcd.0: Device attached
[  298.046983][T13777] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  298.052923][T13777] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(18)
[  298.055093][T13777] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  298.057887][T13777] vhci_hcd vhci_hcd.0: Device attached
[  298.060704][T13777] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(20)
[  298.062892][T13777] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  298.065517][T13777] vhci_hcd vhci_hcd.0: Device attached
[  298.069003][T13777] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  298.071977][T13777] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  298.074978][T13777] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  298.079608][T13777] vhci_hcd vhci_hcd.0: pdev(5) rhport(7) sockfd(28)
[  298.081796][T13777] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  298.084339][T13777] vhci_hcd vhci_hcd.0: Device attached
[  298.091862][T13785] vhci_hcd: connection closed
[  298.092495][T13780] vhci_hcd: connection closed
[  298.095205][T13778] vhci_hcd: connection closed
[  298.164052][T13789] erofs (device loop6): inline data across blocks @ nid 36
[  298.168151][T13789] syz.6.2856: attempt to access beyond end of device
[  298.168151][T13789] loop6: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16
[  298.175601][T13783] vhci_hcd: connection closed
[  298.267299][T12858] usb 43-1: new low-speed USB device number 2 using vhci_hcd
[  298.284161][T13779] vhci_hcd: sendmsg failed!, ret=-32 for 48
[  298.286151][ T5969] vhci_hcd: stop threads
[  298.290435][T13787] vhci_hcd: connection closed
[  298.291478][ T5969] vhci_hcd: release socket
[  298.297659][ T5969] vhci_hcd: disconnect device
[  298.301418][ T5969] vhci_hcd: stop threads
[  298.303945][ T5969] vhci_hcd: release socket
[  298.305709][ T5969] vhci_hcd: disconnect device
[  298.307839][ T5969] vhci_hcd: stop threads
[  298.309288][ T5969] vhci_hcd: release socket
[  298.311281][ T5969] vhci_hcd: disconnect device
[  298.313487][ T5969] vhci_hcd: stop threads
[  298.315069][ T5969] vhci_hcd: release socket
[  298.316518][ T5969] vhci_hcd: disconnect device
[  298.319254][ T5969] vhci_hcd: stop threads
[  298.320749][ T5969] vhci_hcd: release socket
[  298.323599][ T5969] vhci_hcd: disconnect device
[  298.902524][T13812] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2869'.
[  298.905678][T13812] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614)
[  298.905999][T13806] loop5: detected capacity change from 0 to 32768
[  298.909685][T13812] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  298.912610][T13806] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2866 (13806)
[  298.924363][T13806] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  298.929188][T13806] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm
[  298.937410][T13806] BTRFS info (device loop5): using free-space-tree
[  299.068893][ T8408] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  301.296163][ T5969] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.373817][ T5969] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.452270][ T5969] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.513359][ T5969] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.692885][ T5969] bridge_slave_1: left allmulticast mode
[  301.694832][ T5969] bridge_slave_1: left promiscuous mode
[  301.707897][ T5969] bridge0: port 2(bridge_slave_1) entered disabled state
[  301.718789][ T5969] bridge_slave_0: left allmulticast mode
[  301.720693][ T5969] bridge_slave_0: left promiscuous mode
[  301.722752][ T5969] bridge0: port 1(bridge_slave_0) entered disabled state
[  301.882909][ T5236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  301.892346][ T5236] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  301.904666][ T5236] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  301.924487][ T5236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  301.927386][ T5236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  302.231856][ T5969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  302.239087][ T5969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  302.247540][ T5969] bond0 (unregistering): Released all slaves
[  302.473909][T13929] input: syz0 as /devices/virtual/input/input25
[  302.776937][T13905] chnl_net:caif_netlink_parms(): no params data found
[  302.798791][T13941] loop4: detected capacity change from 0 to 4096
[  302.803484][T13941] ntfs3: Invalid value for dmask.
[  302.892470][ T5969] hsr_slave_0: left promiscuous mode
[  302.900916][ T5969] hsr_slave_1: left promiscuous mode
[  302.905217][ T5969] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  302.911249][ T5969] batman_adv: batadv0: Removing interface: batadv_slave_0
[  302.914204][ T5969] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  302.916745][ T5969] batman_adv: batadv0: Removing interface: batadv_slave_1
[  302.933608][ T5969] veth1_macvtap: left promiscuous mode
[  302.935570][ T5969] veth0_macvtap: left promiscuous mode
[  302.938260][ T5969] veth1_vlan: left promiscuous mode
[  302.940599][ T5969] veth0_vlan: left promiscuous mode
[  303.325081][ T5969] team0 (unregistering): Port device team_slave_1 removed
[  303.355745][ T5969] team0 (unregistering): Port device team_slave_0 removed
[  303.427349][T12858] vhci_hcd: vhci_device speed not set
[  303.695506][T13952] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2920'.
[  303.706406][T13905] bridge0: port 1(bridge_slave_0) entered blocking state
[  303.718423][T13905] bridge0: port 1(bridge_slave_0) entered disabled state
[  303.720887][T13905] bridge_slave_0: entered allmulticast mode
[  303.723921][T13905] bridge_slave_0: entered promiscuous mode
[  303.736507][T13905] bridge0: port 2(bridge_slave_1) entered blocking state
[  303.739351][T13905] bridge0: port 2(bridge_slave_1) entered disabled state
[  303.742808][T13905] bridge_slave_1: entered allmulticast mode
[  303.746405][T13905] bridge_slave_1: entered promiscuous mode
[  303.884724][T13905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  303.913129][T13905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  304.005112][   T53] Bluetooth: hci2: command tx timeout
[  304.238777][T13905] team0: Port device team_slave_0 added
[  304.242458][T13905] team0: Port device team_slave_1 added
[  304.300395][T13905] batman_adv: batadv0: Adding interface: batadv_slave_0
[  304.307962][T13905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  304.336198][T13905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  304.350536][T13905] batman_adv: batadv0: Adding interface: batadv_slave_1
[  304.353874][T13905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  304.365172][T13905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  304.386411][T13979] loop5: detected capacity change from 0 to 4096
[  304.404485][T13979] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512).
[  304.441406][T13905] hsr_slave_0: entered promiscuous mode
[  304.443617][T13905] hsr_slave_1: entered promiscuous mode
[  304.556458][T13992] loop4: detected capacity change from 0 to 1024
[  304.631469][T13995] netlink: 'syz.4.2934': attribute type 11 has an invalid length.
[  304.636100][T13995] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2934'.
[  304.709234][  T793] usb usb44-port1: attempt power cycle
[  304.810080][T14005] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  304.981942][T13905] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  304.986294][T13905] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  304.992339][T13905] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  304.996625][T13905] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  305.045458][T13905] 8021q: adding VLAN 0 to HW filter on device bond0
[  305.054739][T13905] 8021q: adding VLAN 0 to HW filter on device team0
[  305.063267][ T6586] bridge0: port 1(bridge_slave_0) entered blocking state
[  305.065565][ T6586] bridge0: port 1(bridge_slave_0) entered forwarding state
[  305.073596][ T6586] bridge0: port 2(bridge_slave_1) entered blocking state
[  305.075975][ T6586] bridge0: port 2(bridge_slave_1) entered forwarding state
[  305.186425][T13905] 8021q: adding VLAN 0 to HW filter on device batadv0
[  305.274908][  T793] usb usb44-port1: unable to enumerate USB device
[  305.301955][T13905] veth0_vlan: entered promiscuous mode
[  305.311823][T13905] veth1_vlan: entered promiscuous mode
[  305.328945][T13905] veth0_macvtap: entered promiscuous mode
[  305.332886][T13905] veth1_macvtap: entered promiscuous mode
[  305.342288][T13905] batman_adv: batadv0: Interface activated: batadv_slave_0
[  305.351415][T13905] batman_adv: batadv0: Interface activated: batadv_slave_1
[  305.362014][   T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  305.364933][   T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  305.382391][   T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  305.385127][   T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  305.491034][T13520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  305.493614][T13520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  305.524067][T13520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  305.526578][T13520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  305.659114][T14068] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow
[  306.077435][   T53] Bluetooth: hci2: command tx timeout
[  306.150698][T14075] loop6: detected capacity change from 0 to 32768
[  306.204453][T14075]  loop6: p2 p3 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 
[  307.391653][ T6517] udevd[6517]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  307.440745][ T6323] udevd[6323]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory
[  307.445513][ T6063] udevd[6063]: inotify_add_watch(7, /dev/loop6p9, 10) failed: No such file or directory
[  307.445629][ T6483] udevd[6483]: inotify_add_watch(7, /dev/loop6p10, 10) failed: No such file or directory
[  307.455561][ T6488] udevd[6488]: inotify_add_watch(7, /dev/loop6p8, 10) failed: No such file or directory
[  307.465012][   T33] audit: type=1326 audit(2000000167.960:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14100 comm="syz.5.2948" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a1b8ebe9 code=0x7fc00000
[  307.469294][ T6482] udevd[6482]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory
[  307.473834][ T5951] udevd[5951]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory
[  307.480077][ T6489] udevd[6489]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory
[  307.489261][ T5954] udevd[5954]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[  307.497674][T14107] udevd[14107]: inotify_add_watch(7, /dev/loop6p12, 10) failed: No such file or directory
[  307.520918][   T33] audit: type=1326 audit(2000000167.960:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14100 comm="syz.5.2948" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd9a1b8ebe9 code=0x7fc00000
[  307.535893][   T33] audit: type=1326 audit(2000000167.960:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14100 comm="syz.5.2948" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a1b8ebe9 code=0x7fc00000
[  307.568718][   T33] audit: type=1326 audit(2000000167.960:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14100 comm="syz.5.2948" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a1b8ebe9 code=0x7fc00000
[  307.595470][   T33] audit: type=1326 audit(2000000167.960:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14100 comm="syz.5.2948" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a1b8ebe9 code=0x7fc00000
[  307.686609][   T33] audit: type=1326 audit(2000000167.960:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14100 comm="syz.5.2948" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a1b8ebe9 code=0x7fc00000
[  307.722181][   T33] audit: type=1326 audit(2000000167.960:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14100 comm="syz.5.2948" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a1b8ebe9 code=0x7fc00000
[  307.766525][   T33] audit: type=1326 audit(2000000167.960:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14100 comm="syz.5.2948" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a1b8ebe9 code=0x7fc00000
[  307.805605][   T33] audit: type=1326 audit(2000000167.960:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14100 comm="syz.5.2948" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a1b8ebe9 code=0x7fc00000
[  307.861514][   T33] audit: type=1326 audit(2000000167.960:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14100 comm="syz.5.2948" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a1b8ebe9 code=0x7fc00000
[  308.157367][   T53] Bluetooth: hci2: command tx timeout
[  308.257943][ T5942] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  308.462953][ T5942] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  308.470470][ T5942] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  308.487997][ T5942] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  308.491628][ T5942] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  308.508761][ T5942] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.528112][T14115] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  308.689809][T14128] loop6: detected capacity change from 0 to 164
[  308.695451][T14128] isofs: Unable to find the ".." directory for NFS.
[  308.886165][T14136] trusted_key: encrypted_key: master key parameter 'user:' is invalid
[  308.939428][ T5942] aiptek 6-1:17.0: Aiptek using 400 ms programming speed
[  308.942694][ T5942] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input26
[  308.969809][ T5942] usb 6-1: USB disconnect, device number 33
[  308.971858][    C0] aiptek 6-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  308.990656][T14142] loop6: detected capacity change from 0 to 256
[  309.931489][T14153] loop6: detected capacity change from 0 to 512
[  309.954557][T14153] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  309.960662][T14153] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  310.237820][   T53] Bluetooth: hci2: command tx timeout
[  311.597585][T13905] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  311.994363][T14181] loop6: detected capacity change from 0 to 32768
[  312.001591][T14181] ERROR: (device loop6): diAllocBit: iag inconsistent
[  312.001591][T14181] 
[  312.011515][T14181] ERROR: (device loop6): remounting filesystem as read-only
[  312.013990][T14181] ialloc: diAlloc returned -5!
[  312.084483][T14195] loop5: detected capacity change from 0 to 1024
[  312.782861][T14221] loop4: detected capacity change from 0 to 40427
[  312.785769][T14221] F2FS-fs: heap/no_heap options were deprecated
[  312.793937][T14221] F2FS-fs (loop4): Image doesn't support compression
[  312.798530][T14221] F2FS-fs (loop4): invalid crc value
[  312.829550][T14221] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  312.832759][T14221] F2FS-fs (loop4): Start checkpoint disabled!
[  312.835543][T14221] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  312.871256][   T28] kworker/u9:1: attempt to access beyond end of device
[  312.871256][   T28] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  312.876372][   T28] CPU: 0 UID: 0 PID: 28 Comm: kworker/u9:1 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  312.876384][   T28] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  312.876389][   T28] Workqueue: writeback wb_workfn (flush-7:4)
[  312.876403][   T28] Call Trace:
[  312.876406][   T28]  <TASK>
[  312.876409][   T28]  dump_stack_lvl+0x189/0x250
[  312.876422][   T28]  ? __pfx_dump_stack_lvl+0x10/0x10
[  312.876431][   T28]  ? __pfx_queue_work_on+0x10/0x10
[  312.876440][   T28]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  312.876448][   T28]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  312.876462][   T28]  f2fs_handle_critical_error+0x37c/0x540
[  312.876475][   T28]  f2fs_write_end_io+0x886/0xb60
[  312.876494][   T28]  __submit_merged_bio+0x27a/0x6a0
[  312.876506][   T28]  __submit_merged_write_cond+0x255/0x530
[  312.876518][   T28]  f2fs_write_data_pages+0x261d/0x3000
[  312.876543][   T28]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  312.876560][   T28]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  312.876587][   T28]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  312.876596][   T28]  ? look_up_lock_class+0x74/0x170
[  312.876612][   T28]  ? trace_f2fs_writepages+0x7f/0x200
[  312.876622][   T28]  ? f2fs_write_node_pages+0x478/0x6e0
[  312.876633][   T28]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  312.876648][   T28]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  312.876658][   T28]  do_writepages+0x32e/0x550
[  312.876670][   T28]  ? reacquire_held_locks+0x127/0x1d0
[  312.876678][   T28]  ? writeback_sb_inodes+0x384/0x1010
[  312.876691][   T28]  __writeback_single_inode+0x145/0xff0
[  312.876700][   T28]  ? do_raw_spin_unlock+0x4d/0x240
[  312.876711][   T28]  writeback_sb_inodes+0x6c7/0x1010
[  312.876732][   T28]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  312.876761][   T28]  ? rcu_is_watching+0x15/0xb0
[  312.876774][   T28]  wb_writeback+0x43b/0xaf0
[  312.876794][   T28]  ? queue_io+0x301/0x590
[  312.876804][   T28]  ? __pfx_wb_writeback+0x10/0x10
[  312.876818][   T28]  ? _raw_spin_unlock_irq+0x23/0x50
[  312.876828][   T28]  wb_workfn+0x409/0xef0
[  312.876843][   T28]  ? __pfx_wb_workfn+0x10/0x10
[  312.876853][   T28]  ? __lock_acquire+0xab9/0xd20
[  312.876868][   T28]  ? process_scheduled_works+0x9ef/0x17b0
[  312.876879][   T28]  ? _raw_spin_unlock_irq+0x23/0x50
[  312.876886][   T28]  ? process_scheduled_works+0x9ef/0x17b0
[  312.876892][   T28]  ? process_scheduled_works+0x9ef/0x17b0
[  312.876900][   T28]  process_scheduled_works+0xae1/0x17b0
[  312.876921][   T28]  ? __pfx_process_scheduled_works+0x10/0x10
[  312.876963][   T28]  worker_thread+0x8a0/0xda0
[  312.876974][   T28]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  312.876986][   T28]  ? __kthread_parkme+0x7b/0x200
[  312.876999][   T28]  kthread+0x711/0x8a0
[  312.877010][   T28]  ? __pfx_worker_thread+0x10/0x10
[  312.877017][   T28]  ? __pfx_kthread+0x10/0x10
[  312.877026][   T28]  ? _raw_spin_unlock_irq+0x23/0x50
[  312.877034][   T28]  ? lockdep_hardirqs_on+0x9c/0x150
[  312.877041][   T28]  ? __pfx_kthread+0x10/0x10
[  312.877050][   T28]  ret_from_fork+0x3fc/0x770
[  312.877060][   T28]  ? __pfx_ret_from_fork+0x10/0x10
[  312.877070][   T28]  ? __switch_to_asm+0x39/0x70
[  312.877078][   T28]  ? __switch_to_asm+0x33/0x70
[  312.877086][   T28]  ? __pfx_kthread+0x10/0x10
[  312.877096][   T28]  ret_from_fork_asm+0x1a/0x30
[  312.877112][   T28]  </TASK>
[  312.877116][   T28] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  313.411131][T14253] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3006'.
[  313.443283][T14253] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  313.446027][T14253] batman_adv: batadv0: Removing interface: batadv_slave_0
[  313.604988][T14253] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  313.609727][   T28] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  313.630015][T14253] batman_adv: batadv0: Removing interface: batadv_slave_1
[  313.655139][T14257] veth0_to_team: entered promiscuous mode
[  313.657142][T14257] veth0_to_team: entered allmulticast mode
[  314.964628][T14307] loop6: detected capacity change from 0 to 512
[  314.971057][T14307] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  314.996018][T14307] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  315.001878][T14307] ext4 filesystem being mounted at /32/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  315.120099][T13905] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  315.443526][T14316] unsupported nla_type 52263
[  315.625723][T14325] loop4: detected capacity change from 0 to 512
[  315.631751][T14325] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  315.647653][ T5314] usb 7-1: new low-speed USB device number 6 using dummy_hcd
[  315.655737][T14325] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.3028: bg 0: block 104: invalid block bitmap
[  315.663724][T14325] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  315.666785][T14325] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.3028: invalid indirect mapped block 1 (level 1)
[  315.672310][T14325] EXT4-fs (loop4): 1 truncate cleaned up
[  315.675910][T14325] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  315.713309][ T8051] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  315.799125][ T5314] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  315.799147][ T5314] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  315.807031][ T5314] usb 7-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47
[  315.807044][ T5314] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  315.817738][ T5314] usb 7-1: config 0 descriptor??
[  315.819770][ T5314] qmi_wwan 7-1:0.0: probe with driver qmi_wwan failed with error -22
[  316.031283][ T5314] usb 7-1: USB disconnect, device number 6
[  316.735858][T14356] loop5: detected capacity change from 0 to 2048
[  316.745263][T14356] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  316.800712][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  316.802855][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  316.810565][T14360] /dev/nullb0: Can't open blockdev
[  316.833518][T14362] loop5: detected capacity change from 0 to 512
[  316.853998][T14362] EXT4-fs (loop5): 1 orphan inode deleted
[  316.856529][T14362] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  316.862112][T14362] ext4 filesystem being mounted at /689/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  316.873394][   T35] __quota_error: 57 callbacks suppressed
[  316.873402][   T35] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  316.879415][   T35] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u10:1: Failed to release dquot type 1
[  316.886271][ T8408] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  316.907680][ T5314] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  316.919248][T14366] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3046'.
[  317.067387][ T5314] usb 7-1: Using ep0 maxpacket: 32
[  317.070507][ T5314] usb 7-1: config index 0 descriptor too short (expected 35577, got 27)
[  317.074323][ T5314] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  317.077462][ T5314] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92
[  317.080542][ T5314] usb 7-1: config 1 has no interface number 0
[  317.082901][ T5314] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  317.087038][ T5314] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  317.090456][ T5314] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  317.094870][ T5314] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  317.098555][ T5314] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  317.107475][ T5314] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found
[  317.308485][ T5314] snd_usb_pod 7-1:1.1: cannot start listening: -90
[  317.311026][ T5314] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected
[  317.313655][ T5314] snd_usb_pod 7-1:1.1: probe with driver snd_usb_pod failed with error -90
[  318.157384][ T5314] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  318.307404][ T5314] usb 6-1: Using ep0 maxpacket: 16
[  318.311359][ T5314] usb 6-1: unable to get BOS descriptor or descriptor too short
[  318.315484][ T5314] usb 6-1: config 8 has an invalid interface number: 132 but max is 0
[  318.319154][ T5314] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  318.323357][ T5314] usb 6-1: config 8 has no interface number 0
[  318.325989][ T5314] usb 6-1: config 8 interface 132 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  318.330895][ T5314] usb 6-1: config 8 interface 132 has no altsetting 0
[  318.334937][ T5314] usb 6-1: New USB device found, idVendor=07cf, idProduct=1001, bcdDevice=8f.8b
[  318.338534][ T5314] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  318.341180][ T5314] usb 6-1: Product: syz
[  318.342567][ T5314] usb 6-1: Manufacturer: syz
[  318.344213][ T5314] usb 6-1: SerialNumber: syz
[  318.552328][ T5314] usb-storage 6-1:8.132: USB Mass Storage device detected
[  318.568569][ T5314] usb-storage 6-1:8.132: Quirks match for vid 07cf pid 1001: a
[  318.620029][ T5314] usb 6-1: USB disconnect, device number 34
[  318.926143][T14401] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3057'.
[  319.259010][T14414] loop4: detected capacity change from 0 to 32768
[  319.261939][T14414] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3062 (14414)
[  319.267985][T14414] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  319.272335][T14414] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  319.275257][T14414] BTRFS info (device loop4): disk space caching is enabled
[  319.278222][T14414] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  319.323790][T14414] BTRFS info (device loop4): rebuilding free space tree
[  319.332104][T14414] BTRFS info (device loop4): disabling free space tree
[  319.334729][T14414] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  319.338737][T14414] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  319.366989][ T8051] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  319.457778][ T5988] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  319.490202][T14437] loop4: detected capacity change from 0 to 256
[  319.641412][ T5988] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  319.644683][ T5988] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7
[  319.649072][ T5988] usb 6-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00
[  319.652548][ T5988] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.660234][ T5988] usb 6-1: config 0 descriptor??
[  319.781621][ T5314] usb 7-1: USB disconnect, device number 7
[  320.071928][T14450] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3072'.
[  320.093419][ T5988] wacom 0003:056A:0045.001F: Unknown device_type for 'HID 056a:0045'. Assuming pen.
[  320.103825][ T5988] wacom 0003:056A:0045.001F: hidraw0: USB HID v0.00 Device [HID 056a:0045] on usb-dummy_hcd.5-1/input0
[  320.120613][ T5988] input: Wacom Intuos2 12x18 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:0045.001F/input/input27
[  320.268148][T14455] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  320.313355][ T5314] usb 6-1: USB disconnect, device number 35
[  320.357728][ T6517] udevd[6517]: setting mode of /dev/input/event3 to 020660 failed: No such file or directory
[  320.368613][ T6517] udevd[6517]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory
[  320.549721][T14461] loop6: detected capacity change from 0 to 1024
[  320.568868][T14461] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  320.573018][T14461] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  320.586210][   T33] audit: type=1800 audit(2000000181.080:135): pid=14461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3077" name="file1" dev="loop6" ino=15 res=0 errno=0
[  320.596268][T14461] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: comm syz.6.3077: lblock 0 mapped to illegal pblock 0 (length 6)
[  320.607128][T14461] EXT4-fs error (device loop6): ext4_ext_remove_space:2955: inode #15: comm syz.6.3077: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  320.683629][T13905] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  321.513345][T14492] loop6: detected capacity change from 0 to 8192
[  321.564441][T14494] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3091'.
[  321.608961][T14498] tipc: Invalid UDP bearer configuration
[  321.608986][T14498] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  322.226752][T14511] loop5: detected capacity change from 0 to 32768
[  322.511201][T14515] loop4: detected capacity change from 0 to 32768
[  322.546904][   T33] audit: type=1800 audit(2000000183.040:136): pid=14515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3099" name="file1" dev="loop4" ino=4 res=0 errno=0
[  322.562375][T14515] ERROR: (device loop4): xtSearch: xt_getpage: xtree page corrupt
[  322.562375][T14515] 
[  322.571512][T14515] ERROR: (device loop4): remounting filesystem as read-only
[  322.574009][T14515] xtLookup: xtSearch returned -5
[  322.588314][T14515] ERROR: (device loop4): xtSearch: xt_getpage: xtree page corrupt
[  322.588314][T14515] 
[  322.591864][T14515] xtLookup: xtSearch returned -5
[  322.594278][T14515] ERROR: (device loop4): xtTruncate: xt_getpage: xtree page corrupt
[  322.594278][T14515] 
[  322.597566][T14517] loop5: detected capacity change from 0 to 4096
[  322.607031][T14517] ntfs3(loop5): try to read out of volume at offset 0x3fffffc0c00
[  322.609783][T14517] ntfs3(loop5): try to read out of volume at offset 0x3fffffc0c00
[  322.612776][T14517] ntfs3(loop5): try to read out of volume at offset 0x3fffffc0c00
[  322.615584][T14517] ntfs3(loop5): try to read out of volume at offset 0x3fffffc0c00
[  322.620281][T14517] ntfs3(loop5): try to read out of volume at offset 0x3fffffc1c00
[  322.623108][T14517] ntfs3(loop5): try to read out of volume at offset 0x3fffffc2c00
[  322.625968][T14517] ntfs3(loop5): try to read out of volume at offset 0x3fffffc4c00
[  322.631654][T14517] ntfs3(loop5): try to read out of volume at offset 0x3fffffc8c00
[  322.634494][T14517] ntfs3(loop5): try to read out of volume at offset 0x3fffffd0c00
[  322.638369][T14517] ntfs3(loop5): try to read out of volume at offset 0x3fffffe0c00
[  323.138975][T14533] loop4: detected capacity change from 0 to 256
[  323.141448][T14533] vfat: Unexpected value for 'sys_immutable'
[  324.051730][T14557] loop5: detected capacity change from 0 to 2048
[  324.065703][T14562] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  324.448191][ T5314] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  324.609706][ T5314] usb 7-1: config 0 has too many interfaces: 204, using maximum allowed: 32
[  324.612631][ T5314] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 204
[  324.615623][ T5314] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  324.627645][ T5314] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  324.638161][ T5314] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  324.648180][ T5314] usb 7-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[  324.651741][ T5314] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  324.662726][ T5314] usb 7-1: config 0 descriptor??
[  324.916396][T14622] loop5: detected capacity change from 0 to 256
[  324.923959][T14622] exfat: Deprecated parameter 'namecase'
[  324.926402][T14622] exfat: Deprecated parameter 'utf8'
[  324.940325][T14622] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  325.075515][ T5314] input: HID 28bd:0909 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:28BD:0909.0020/input/input31
[  325.109597][ T5314] uclogic 0003:28BD:0909.0020: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.6-1/input0
[  325.288788][T14579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  325.303540][T14579] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  325.329339][ T5314] usb 7-1: USB disconnect, device number 8
[  325.362556][T14615] loop4: detected capacity change from 0 to 262144
[  325.380096][T14615] F2FS-fs (loop4): invalid crc value
[  325.409418][T14615] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  325.412617][T14615] F2FS-fs (loop4): Start checkpoint disabled!
[  325.423516][T14615] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  325.888574][   T33] audit: type=1326 audit(2000000186.390:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14634 comm="syz.5.3149" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a1b8ebe9 code=0x7ffc0000
[  325.895613][   T33] audit: type=1326 audit(2000000186.390:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14634 comm="syz.5.3149" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a1b8ebe9 code=0x7ffc0000
[  325.911260][   T33] audit: type=1326 audit(2000000186.390:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14634 comm="syz.5.3149" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a1b8ebe9 code=0x7ffc0000
[  325.919066][   T33] audit: type=1326 audit(2000000186.390:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14634 comm="syz.5.3149" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a1b8ebe9 code=0x7ffc0000
[  325.926358][   T33] audit: type=1326 audit(2000000186.390:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14634 comm="syz.5.3149" exe="/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7fd9a1b8ebe9 code=0x7ffc0000
[  325.935275][   T33] audit: type=1326 audit(2000000186.390:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14634 comm="syz.5.3149" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a1b8ebe9 code=0x7ffc0000
[  325.944458][   T33] audit: type=1326 audit(2000000186.390:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14634 comm="syz.5.3149" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a1b8ebe9 code=0x7ffc0000
[  325.954049][   T33] audit: type=1326 audit(2000000186.390:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14634 comm="syz.5.3149" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a1b8ebe9 code=0x7ffc0000
[  325.962615][   T33] audit: type=1326 audit(2000000186.390:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14634 comm="syz.5.3149" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd9a1b8ebe9 code=0x7ffc0000
[  325.971622][T14638] loop4: detected capacity change from 0 to 4096
[  325.982682][T14638] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  325.990315][T14638] ntfs3(loop4): Failed to load $Extend (-22).
[  325.992757][T14638] ntfs3(loop4): Failed to initialize $Extend.
[  326.004335][   T53] Bluetooth: hci1: unexpected event for opcode 0x0c25
[  326.117274][ T5988] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  326.162138][T14641] loop4: detected capacity change from 0 to 32768
[  326.171473][T14641] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  326.184663][T14641] XFS (loop4): Corruption warning: Metadata has LSN (1:384) ahead of current LSN (1:128). Please unmount and run xfs_repair (>= v4.3) to resolve.
[  326.190506][T14641] XFS (loop4): log mount/recovery failed: error -22
[  326.203013][T14641] XFS (loop4): log mount failed
[  326.281768][ T5988] usb 7-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee
[  326.284767][ T5988] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.299998][ T5988] usb 7-1: config 0 descriptor??
[  326.308053][ T5988] usb 7-1: selecting invalid altsetting 1
[  326.321086][T14651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3152'.
[  326.346586][T14653] usb usb1: usbfs: process 14653 (syz.4.3153) did not claim interface 0 before use
[  326.352298][ T5988] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22
[  326.519922][ T5988] usb 7-1: USB disconnect, device number 9
[  326.530534][T14667] Bluetooth: MGMT ver 1.23
[  326.772322][T14676] 8021q: adding VLAN 0 to HW filter on device bond2
[  327.431045][T14698] netlink: 'syz.6.3174': attribute type 11 has an invalid length.
[  327.570742][T14700] loop6: detected capacity change from 0 to 2048
[  327.574152][T14700] EXT4-fs: Ignoring removed bh option
[  327.619411][T14700] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  327.685996][T13905] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  327.830204][T14696] loop5: detected capacity change from 0 to 40427
[  327.836464][T14696] F2FS-fs (loop5): build fault injection rate: 16
[  327.839197][T14696] F2FS-fs (loop5): build fault injection type: 0x3bfe8e
[  327.846763][T14696] F2FS-fs (loop5): invalid crc value
[  327.850278][    C1] F2FS-fs (loop5): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  327.853686][T14696] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-5)
[  328.158252][T14722] loop5: detected capacity change from 0 to 128
[  328.161441][T14722] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  328.165586][T14722] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  328.308605][T12858] usb 7-1: new low-speed USB device number 10 using dummy_hcd
[  328.375808][  T138] Bluetooth: hci3: Frame reassembly failed (-84)
[  328.479806][T12858] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  328.485282][T12858] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  328.496068][T12858] usb 7-1: config 0 descriptor??
[  329.409424][T14739] loop5: detected capacity change from 0 to 2048
[  329.431534][T14739] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  329.440895][T14739] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  329.448304][T14739] EXT4-fs (loop5): Remounting filesystem read-only
[  329.463124][ T8408] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  329.887297][  T793] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  330.037226][  T793] usb 6-1: Using ep0 maxpacket: 32
[  330.040363][  T793] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  330.043368][  T793] usb 6-1: config 0 interface 0 has no altsetting 1
[  330.046305][  T793] usb 6-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00
[  330.049712][  T793] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  330.052295][  T793] usb 6-1: SerialNumber: syz
[  330.055172][  T793] usb 6-1: config 0 descriptor??
[  330.059101][  T793] usb-storage 6-1:0.0: USB Mass Storage device detected
[  330.064397][  T793] usb-storage 6-1:0.0: Quirks match for vid 152d pid 0539: 4000000
[  330.264149][ T5314] usb 6-1: USB disconnect, device number 36
[  330.327324][   T53] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  330.423938][T14759] loop4: detected capacity change from 0 to 2048
[  330.426594][T14759] EXT4-fs: Ignoring removed bh option
[  330.442079][T14759] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  330.451711][T14759] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  330.459013][T14759] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28
[  330.462992][T14759] EXT4-fs (loop4): This should not happen!! Data will be lost
[  330.462992][T14759] 
[  330.466355][T14759] EXT4-fs (loop4): Total free blocks count 0
[  330.470584][T14759] EXT4-fs (loop4): Free/Dirty block details
[  330.472503][T14759] EXT4-fs (loop4): free_blocks=2415919104
[  330.474443][T14759] EXT4-fs (loop4): dirty_blocks=48
[  330.476095][T14759] EXT4-fs (loop4): Block reservation details
[  330.479057][T14759] EXT4-fs (loop4): i_reserved_data_blocks=3
[  330.493233][ T8051] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  331.167518][ T5314] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  331.317603][ T5314] usb 6-1: Using ep0 maxpacket: 16
[  331.322497][ T5314] usb 6-1: config 0 has an invalid interface number: 214 but max is 0
[  331.325390][ T5314] usb 6-1: config 0 has no interface number 0
[  331.328967][ T5314] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11
[  331.332725][ T5314] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024
[  331.336763][T12858] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  331.340654][T12858] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9
[  331.343159][ T5314] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  331.345122][T12858] asix 7-1:0.0: probe with driver asix failed with error -71
[  331.349790][ T5314] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3
[  331.351601][T12858] usb 7-1: USB disconnect, device number 10
[  331.354649][ T5314] usb 6-1: Manufacturer: syz
[  331.356196][ T5314] usb 6-1: SerialNumber: syz
[  331.382724][ T5314] usb 6-1: config 0 descriptor??
[  331.389518][T14774] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  331.839675][ T5314] usbtouchscreen 6-1:0.214: probe with driver usbtouchscreen failed with error -71
[  331.844496][ T5314] usb 6-1: USB disconnect, device number 37
[  331.905390][T14793] netlink: 'syz.4.3213': attribute type 11 has an invalid length.
[  331.909486][T14793] netlink: 149476 bytes leftover after parsing attributes in process `syz.4.3213'.
[  331.950560][T14792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  331.959172][T14795] loop6: detected capacity change from 0 to 64
[  331.980659][T14797] loop4: detected capacity change from 0 to 2048
[  332.002455][T14797] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  332.021485][T14797] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  332.048660][ T8051] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  332.141599][T14804] loop4: detected capacity change from 0 to 4096
[  332.156800][T14805] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  332.166538][T14804] NILFS error (device loop4): nilfs_readdir: zero-length directory entry
[  332.175571][T14804] Remounting filesystem read-only
[  332.302999][ T5969] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.391150][   T33] kauditd_printk_skb: 6 callbacks suppressed
[  332.391160][   T33] audit: type=1326 audit(2000000192.890:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14815 comm="syz.4.3225" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f731078ebe9 code=0x7ffc0000
[  332.426658][   T33] audit: type=1326 audit(2000000192.890:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14815 comm="syz.4.3225" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f731078ebe9 code=0x7ffc0000
[  332.434402][   T33] audit: type=1326 audit(2000000192.890:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14815 comm="syz.4.3225" exe="/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7f731078ebe9 code=0x7ffc0000
[  332.442128][   T33] audit: type=1326 audit(2000000192.890:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14815 comm="syz.4.3225" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f731078ebe9 code=0x7ffc0000
[  332.449439][   T33] audit: type=1326 audit(2000000192.890:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14815 comm="syz.4.3225" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f731078ebe9 code=0x7ffc0000
[  332.450634][T14819] loop4: detected capacity change from 0 to 2048
[  332.467617][T14820] loop5: detected capacity change from 0 to 256
[  332.468242][ T5969] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.482148][T14820] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  332.488240][T14821] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  332.504237][T14820] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  332.506413][T14819] NILFS error (device loop4): nilfs_check_folio: bad entry in directory #12: rec_len is smaller than minimal - offset=1024, inode=0, rec_len=0, name_len=0
[  332.510182][T14820] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  332.529355][T14819] Remounting filesystem read-only
[  332.555677][ T5969] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.562733][   T33] audit: type=1804 audit(2000000193.060:157): pid=14820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.3226" name="/newroot/754/bus/bus" dev="loop5" ino=1048727 res=1 errno=0
[  332.602285][T14823] tipc: Started in network mode
[  332.603927][T14823] tipc: Node identity , cluster identity 4711
[  332.605880][T14823] tipc: Failed to set node id, please configure manually
[  332.613582][T14823] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  332.621737][ T5236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  332.625740][ T5236] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  332.637389][ T5236] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  332.648633][ T5236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  332.661711][ T5236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  332.734375][ T5969] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.969750][ T5969] bridge_slave_1: left allmulticast mode
[  332.978137][ T5969] bridge_slave_1: left promiscuous mode
[  332.982360][ T5969] bridge0: port 2(bridge_slave_1) entered disabled state
[  333.033008][ T5969] bridge_slave_0: left allmulticast mode
[  333.034862][ T5969] bridge_slave_0: left promiscuous mode
[  333.036709][ T5969] bridge0: port 1(bridge_slave_0) entered disabled state
[  333.044958][T14843] loop4: detected capacity change from 0 to 512
[  333.069201][T14843] EXT4-fs: Ignoring removed nomblk_io_submit option
[  333.085284][T14843] EXT4-fs (loop4): Test dummy encryption mode enabled
[  333.110388][T14843] EXT4-fs (loop4): 1 truncate cleaned up
[  333.131698][T14843] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  333.669863][ T5969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  333.674139][ T5969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  333.680412][ T5969] bond0 (unregistering): Released all slaves
[  333.689741][T14824] chnl_net:caif_netlink_parms(): no params data found
[  333.809107][ T8051] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  333.862905][T14824] bridge0: port 1(bridge_slave_0) entered blocking state
[  333.865211][T14824] bridge0: port 1(bridge_slave_0) entered disabled state
[  333.876093][T14824] bridge_slave_0: entered allmulticast mode
[  333.883883][T14824] bridge_slave_0: entered promiscuous mode
[  333.915719][T14824] bridge0: port 2(bridge_slave_1) entered blocking state
[  333.918109][T14824] bridge0: port 2(bridge_slave_1) entered disabled state
[  333.920608][T14824] bridge_slave_1: entered allmulticast mode
[  333.923204][T14824] bridge_slave_1: entered promiscuous mode
[  333.952128][T14866] loop4: detected capacity change from 0 to 1024
[  333.979511][T14824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  333.995020][T14824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  334.066637][T14824] team0: Port device team_slave_0 added
[  334.068807][ T6014] usb 6-1: new full-speed USB device number 38 using dummy_hcd
[  334.075576][T14824] team0: Port device team_slave_1 added
[  334.108158][T14824] batman_adv: batadv0: Adding interface: batadv_slave_0
[  334.110472][T14824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  334.124006][T14824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  334.133615][ T5969] hsr_slave_0: left promiscuous mode
[  334.135934][ T5969] hsr_slave_1: left promiscuous mode
[  334.139568][ T5969] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  334.142113][ T5969] batman_adv: batadv0: Removing interface: batadv_slave_0
[  334.145043][ T5969] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  334.148049][ T5969] batman_adv: batadv0: Removing interface: batadv_slave_1
[  334.161014][ T5969] veth1_macvtap: left promiscuous mode
[  334.162965][ T5969] veth0_macvtap: left promiscuous mode
[  334.164963][ T5969] veth1_vlan: left promiscuous mode
[  334.166879][ T5969] veth0_vlan: left promiscuous mode
[  334.220314][ T6014] usb 6-1: unable to get BOS descriptor or descriptor too short
[  334.223409][ T6014] usb 6-1: not running at top speed; connect to a high speed hub
[  334.243339][ T6014] usb 6-1: config 6 has an invalid interface number: 30 but max is 0
[  334.246010][ T6014] usb 6-1: config 6 has no interface number 0
[  334.255939][ T6014] usb 6-1: config 6 interface 30 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64
[  334.262807][ T6014] usb 6-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=1e.11
[  334.265842][ T6014] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.268552][ T6014] usb 6-1: Product: syz
[  334.270065][ T6014] usb 6-1: Manufacturer: syz
[  334.271646][ T6014] usb 6-1: SerialNumber: syz
[  334.282005][T14860] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  334.494968][ T6014] usbtest 6-1:6.30: usb test device
[  334.496865][ T6014] usbtest 6-1:6.30: full-speed {control in/out bulk-out iso-out} tests (+alt)
[  334.503141][ T6014] usb 6-1: USB disconnect, device number 38
[  334.549678][ T5969] team0 (unregistering): Port device team_slave_1 removed
[  334.582198][ T5969] team0 (unregistering): Port device team_slave_0 removed
[  334.722476][   T53] Bluetooth: hci2: command tx timeout
[  334.952115][T14824] batman_adv: batadv0: Adding interface: batadv_slave_1
[  334.954376][T14824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  334.965897][T14883] /dev/nullb0: Can't open blockdev
[  334.969070][T14824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  335.070057][T14824] hsr_slave_0: entered promiscuous mode
[  335.070474][T14824] hsr_slave_1: entered promiscuous mode
[  335.234750][T14904] loop5: detected capacity change from 0 to 1024
[  335.282321][T14904] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  335.300283][T14904] ext4 filesystem being mounted at /762/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  335.323210][ T5969] ------------[ cut here ]------------
[  335.325140][ T5969] WARNING: CPU: 0 PID: 5969 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x270/0x2f0
[  335.328707][ T5969] Modules linked in:
[  335.331315][ T5969] CPU: 0 UID: 0 PID: 5969 Comm: kworker/u8:3 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  335.335799][ T5969] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  335.339538][ T5969] Workqueue: netns cleanup_net
[  335.341520][ T5969] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[  335.343595][ T5969] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 78 d6 01 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 26 94 e2 f7 e8 31 63 9e f7 90 <0f> 0b 90 e9 fd fd ff ff e8 23 63 9e f7 90 0f 0b 90 e9 60 fe ff ff
[  335.350333][ T5969] RSP: 0018:ffffc9000365f898 EFLAGS: 00010293
[  335.352791][ T5969] RAX: ffffffff8a21487f RBX: ffff8880322a0000 RCX: ffff888021cbd640
[  335.355666][ T5969] RDX: 0000000000000000 RSI: ffffffff8dba348c RDI: ffff888021cbd640
[  335.358718][ T5969] RBP: ffffc9000365f9b0 R08: ffffffff8fa34337 R09: 1ffffffff1f46866
[  335.361559][ T5969] R10: dffffc0000000000 R11: fffffbfff1f46867 R12: ffffffff8f62d360
[  335.364356][ T5969] R13: 1ffff920006cbf40 R14: ffff8880322a1480 R15: dffffc0000000000
[  335.367073][ T5969] FS:  0000000000000000(0000) GS:ffff8880b8623000(0000) knlGS:0000000000000000
[  335.370272][ T5969] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  335.372522][ T5969] CR2: 0000563bb038f000 CR3: 000000010b262000 CR4: 00000000000006f0
[  335.375256][ T5969] Call Trace:
[  335.376460][ T5969]  <TASK>
[  335.377695][ T5969]  xfrm_net_exit+0x2d/0x70
[  335.379292][ T5969]  ops_undo_list+0x49a/0x990
[  335.380923][ T5969]  ? __pfx_ops_undo_list+0x10/0x10
[  335.382732][ T5969]  ? do_raw_spin_unlock+0x4d/0x240
[  335.384661][ T5969]  cleanup_net+0x4c5/0x800
[  335.386228][ T5969]  ? __pfx_cleanup_net+0x10/0x10
[  335.388174][ T5969]  ? _raw_spin_unlock_irq+0x23/0x50
[  335.389994][ T5969]  ? process_scheduled_works+0x9ef/0x17b0
[  335.391965][ T5969]  ? process_scheduled_works+0x9ef/0x17b0
[  335.393922][ T5969]  process_scheduled_works+0xae1/0x17b0
[  335.395852][ T5969]  ? __pfx_process_scheduled_works+0x10/0x10
[  335.398098][ T5969]  worker_thread+0x8a0/0xda0
[  335.399703][ T5969]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  335.401880][ T5969]  ? __kthread_parkme+0x7b/0x200
[  335.403926][ T5969]  kthread+0x711/0x8a0
[  335.405362][ T5969]  ? __pfx_worker_thread+0x10/0x10
[  335.407253][ T5969]  ? __pfx_kthread+0x10/0x10
[  335.408942][ T5969]  ? _raw_spin_unlock_irq+0x23/0x50
[  335.410780][ T5969]  ? lockdep_hardirqs_on+0x9c/0x150
[  335.412646][ T5969]  ? __pfx_kthread+0x10/0x10
[  335.414306][ T5969]  ret_from_fork+0x3fc/0x770
[  335.415978][ T5969]  ? __pfx_ret_from_fork+0x10/0x10
[  335.417834][ T5969]  ? __switch_to_asm+0x39/0x70
[  335.419398][ T5969]  ? __switch_to_asm+0x33/0x70
[  335.421115][ T5969]  ? __pfx_kthread+0x10/0x10
[  335.422725][ T5969]  ret_from_fork_asm+0x1a/0x30
[  335.424459][ T5969]  </TASK>
[  335.425559][ T5969] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  335.427999][ T5969] CPU: 0 UID: 0 PID: 5969 Comm: kworker/u8:3 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  335.432035][ T5969] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  335.435383][ T5969] Workqueue: netns cleanup_net
[  335.437010][ T5969] Call Trace:
[  335.438143][ T5969]  <TASK>
[  335.439149][ T5969]  dump_stack_lvl+0x99/0x250
[  335.440699][ T5969]  ? __asan_memcpy+0x40/0x70
[  335.442267][ T5969]  ? __pfx_dump_stack_lvl+0x10/0x10
[  335.444017][ T5969]  ? __pfx__printk+0x10/0x10
[  335.445576][ T5969]  vpanic+0x281/0x750
[  335.446939][ T5969]  ? __pfx__printk+0x10/0x10
[  335.448494][ T5969]  ? __pfx_vpanic+0x10/0x10
[  335.450033][ T5969]  ? is_bpf_text_address+0x292/0x2b0
[  335.451802][ T5969]  panic+0xb9/0xc0
[  335.453084][ T5969]  ? __pfx_panic+0x10/0x10
[  335.454589][ T5969]  __warn+0x31b/0x4b0
[  335.455897][ T5969]  ? xfrm_state_fini+0x270/0x2f0
[  335.457523][ T5969]  ? xfrm_state_fini+0x270/0x2f0
[  335.459187][ T5969]  report_bug+0x2be/0x4f0
[  335.460633][ T5969]  ? xfrm_state_fini+0x270/0x2f0
[  335.462295][ T5969]  ? xfrm_state_fini+0x270/0x2f0
[  335.463956][ T5969]  ? xfrm_state_fini+0x272/0x2f0
[  335.465608][ T5969]  handle_bug+0x84/0x160
[  335.467055][ T5969]  exc_invalid_op+0x1a/0x50
[  335.468580][ T5969]  asm_exc_invalid_op+0x1a/0x20
[  335.470220][ T5969] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[  335.472061][ T5969] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 78 d6 01 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 26 94 e2 f7 e8 31 63 9e f7 90 <0f> 0b 90 e9 fd fd ff ff e8 23 63 9e f7 90 0f 0b 90 e9 60 fe ff ff
[  335.478309][ T5969] RSP: 0018:ffffc9000365f898 EFLAGS: 00010293
[  335.480337][ T5969] RAX: ffffffff8a21487f RBX: ffff8880322a0000 RCX: ffff888021cbd640
[  335.482968][ T5969] RDX: 0000000000000000 RSI: ffffffff8dba348c RDI: ffff888021cbd640
[  335.485606][ T5969] RBP: ffffc9000365f9b0 R08: ffffffff8fa34337 R09: 1ffffffff1f46866
[  335.488235][ T5969] R10: dffffc0000000000 R11: fffffbfff1f46867 R12: ffffffff8f62d360
[  335.490728][ T5969] R13: 1ffff920006cbf40 R14: ffff8880322a1480 R15: dffffc0000000000
[  335.493214][ T5969]  ? xfrm_state_fini+0x26f/0x2f0
[  335.494774][ T5969]  ? xfrm_state_fini+0x26f/0x2f0
[  335.496345][ T5969]  xfrm_net_exit+0x2d/0x70
[  335.497765][ T5969]  ops_undo_list+0x49a/0x990
[  335.499288][ T5969]  ? __pfx_ops_undo_list+0x10/0x10
[  335.500950][ T5969]  ? do_raw_spin_unlock+0x4d/0x240
[  335.502640][ T5969]  cleanup_net+0x4c5/0x800
[  335.504055][ T5969]  ? __pfx_cleanup_net+0x10/0x10
[  335.505611][ T5969]  ? _raw_spin_unlock_irq+0x23/0x50
[  335.507317][ T5969]  ? process_scheduled_works+0x9ef/0x17b0
[  335.509253][ T5969]  ? process_scheduled_works+0x9ef/0x17b0
[  335.511153][ T5969]  process_scheduled_works+0xae1/0x17b0
[  335.513021][ T5969]  ? __pfx_process_scheduled_works+0x10/0x10
[  335.515028][ T5969]  worker_thread+0x8a0/0xda0
[  335.516577][ T5969]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  335.518682][ T5969]  ? __kthread_parkme+0x7b/0x200
[  335.520340][ T5969]  kthread+0x711/0x8a0
[  335.521708][ T5969]  ? __pfx_worker_thread+0x10/0x10
[  335.523383][ T5969]  ? __pfx_kthread+0x10/0x10
[  335.524895][ T5969]  ? _raw_spin_unlock_irq+0x23/0x50
[  335.526552][ T5969]  ? lockdep_hardirqs_on+0x9c/0x150
[  335.528227][ T5969]  ? __pfx_kthread+0x10/0x10
[  335.529711][ T5969]  ret_from_fork+0x3fc/0x770
[  335.531237][ T5969]  ? __pfx_ret_from_fork+0x10/0x10
[  335.532939][ T5969]  ? __switch_to_asm+0x39/0x70
[  335.534540][ T5969]  ? __switch_to_asm+0x33/0x70
[  335.536156][ T5969]  ? __pfx_kthread+0x10/0x10
[  335.537704][ T5969]  ret_from_fork_asm+0x1a/0x30
[  335.539324][ T5969]  </TASK>
[  335.541015][ T5969] Kernel Offset: disabled
[  335.542476][ T5969] Rebooting in 86400 seconds..

VM DIAGNOSIS:
09:43:51  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000001 RBX=ffffffff95a817d0 RCX=ffffffff8b7b4e5c RDX=0000000000000000
RSI=0000000000000004 RDI=ffffffff95a817d0 RBP=ffffc9000365ef38 RSP=ffffc9000365ee40
R8 =ffffffff95a817d3 R9 =1ffffffff2b502fa R10=dffffc0000000000 R11=fffffbfff2b502fb
R12=1ffff920006cbdd0 R13=0000000000000001 R14=ffffc9000365eea0 R15=1ffffffff2b502fa
RIP=ffffffff8b7b4e57 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000563bb038f000 CR3=000000010b262000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ffffffffffff0000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=000000ff00000000 0000000000000000 XMM05=0000000000000000 00007fd9a29ce6e0
XMM06=00007fd9a29ce6e0 00007fd9a29ce560 XMM07=00007fd9a29ce5a0 00007fd9a29ce580
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007fd9a1c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=ffff88801daa4980 RCX=dffffc0000000000 RDX=0000000000000000
RSI=ffffffff823b4f40 RDI=ffff88801daa4998 RBP=dffffc0000000000 RSP=ffffc90007977490
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=fffff52000f2ee94
R12=ffff88801daa49c0 R13=ffffffff823b4f40 R14=ffff88801daa4998 R15=ffff888116b4d460
RIP=ffffffff8b78c120 RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555562e49500 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3221eff8 CR3=0000000121dd2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 ff00000000000000 XMM05=0000000000000021 0000000000302f2e
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffffff000000 XMM09=363a312d362f312d 362f366273752f35
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
