last executing test programs:

5m6.909238283s ago: executing program 0 (id=126):
r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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")
syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f0000000000)='./file1\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x0, 0x21d, &(0x7f00000004c0)="$eJzsmb9rFEEUx7+zu7d7BhUttLBZi4ARzN7unkoaQW1FEBJRy8OsIbrJyt0WuYBgsLHxD/AfUbjKws5GLKwsYkCwMKWNgiPzy5tkk9U7PZu8TzH7ndl5b9682byBHAiCOLBsffy6+ezq3MI5AIcxjUCPf3aHcxxr/ofnbkPL16tHHw12+2MAOB/2vd+s7wN4dcUFHiu3nH/j9vtp7XMBjtSCm3BwVutbYIhMrFygZAaGO3r4vqWLQ1rkGbtb5Iv3lvMsFk0imlQ0bYDviH97g2ERQFMvwaz4ev31B50c6CqRZ0Y0uFmn8mpUUZc/D1ub4oQuWSkQ53X76ZMN0Y/0eGzlL4GDROs2GOa1nkOAKIpC3c0Sa/+nvKF/Vx2btf8/3Unz7xIxqjg+WzvHbGLSYfzgE/Hsj3UEkxEijtGtnLBq5df4KfZIwhgxs14fx1Tu1Ij4g/415+T24E3V6tO/ztjg/52OLFwAKq/eTeX5dXvk7TUtTuzwc9rOjyXMF7jvJ6HqB/OAM3oqA+eedSu0ypWHrV5/fXZ5pbOULWWradq+GJ+P4wtpS9Zm1dbUv6asT1NW/WuoK2PXPLG4j7VOWXaTNaDsJr7pp6q1Ku78i+KLtHNk/XMw851zc73IbQd7xyPvv0DZMdmbcfcNniAIgiAIgiAIgiAIgiAIoobwvXpeVo8jQIiX0P+rZOY3sSpeekMa/AwAAP//wyRe/Q==")
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000540)={0x7, 0xc, 0x0, 0x253, 0x1, 0x18b})

5m6.849059405s ago: executing program 0 (id=127):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b0400000000000000000200000028000480240001800b000100657874686472000014000280080001400200000008000640000000020900010073797a30000000000900020073797a3200000000050007"], 0x84}}, 0x0)

5m6.796959838s ago: executing program 0 (id=128):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0xa6, 0xa2, 0x6, 0x40, 0xbb4, 0xa21, 0xe2be, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x11, 0x4, 0x1, 0xcd, 0x58, 0x27, 0x0, [], [{{0x9, 0x5, 0x8f, 0x2, 0x40, 0x9, 0x0, 0x1}}]}}]}}]}}, 0x0)

5m5.51699241s ago: executing program 0 (id=142):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@orlov}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@grpquota}, {@barrier}, {@usrjquota}, {@jqfmt_vfsold}, {@minixdf}]}, 0x3, 0x466, &(0x7f0000000340)="$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")
mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
fsync(r0)

5m5.259123839s ago: executing program 0 (id=147):
syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x17d, &(0x7f0000001ac0)="$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")
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
memfd_secret(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)}], 0x1}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030a01040000000000000000010000010900030073797a32000000000c00024000000000000000010900010073797a300000"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x34, r5, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r6 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000140)={0x1, @sliced={0xdc62, [0x200, 0xffff, 0x2efe, 0x30, 0x0, 0x80, 0x0, 0xd698, 0x7fff, 0x81, 0x800, 0x6, 0xfffe, 0x2, 0x8, 0x5195, 0x9, 0x0, 0x6404, 0x101, 0x2, 0x0, 0x7, 0xfff, 0x0, 0xfff, 0x2f5, 0x5, 0x0, 0xd5, 0x7, 0xd, 0x0, 0x3d4, 0x1004, 0x5, 0x9, 0xfff, 0x402, 0x6, 0xe, 0xfff8, 0x9, 0x3, 0x1, 0xd4, 0x1ff, 0x7]}})
execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x40900, 0x0)
ioctl$SNDCTL_TMR_TIMEBASE(r7, 0xc0045401, &(0x7f0000000940)=0x25b)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1d, 0x2, 0x8001)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)

5m4.84974442s ago: executing program 0 (id=154):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
close(r0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r1)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20)
recvmsg(r0, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x102)

5m4.415969419s ago: executing program 32 (id=154):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
close(r0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r1)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20)
recvmsg(r0, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x102)

4m42.128688042s ago: executing program 1 (id=371):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000880)={0x48, 0x2, r1, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000800)={0x48, 0x14, r2, 0x0, r1})

4m41.936723135s ago: executing program 1 (id=372):
pipe2(&(0x7f0000001180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80080)
vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0)

4m41.788663725s ago: executing program 1 (id=374):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$eJzs3V1rHFUYAOB3Nkm/tSmUoiIS6IWV2k2T+FFBsF6KFgt6X5dkGmo23ZLdlCYW2l7YG2+kCCIWxB/gvZfFP+CvKGihSAl64U1kNrPtNtnN52q2zvPAtOfMzObM2TPv2Xd2dtkACmsk+6cU8WLcjK+TiMNt2wYj3ziyst/So+uT2ZLE8vInfySR5Ota+yf5/wfzygsR8cuXESdLa9utLyzOVKrVdC6vjzZmr4zWFxZPXZqtTKfT6eXxiYkzb06Mv/P2Wz3r62vn//ru43sfnPnq+NK3Pz04cieJs3Eo39bejx242V4ZiZH8ORmKs6t2HOtBY/0k2e0DYFsG8jgfimwOOBwDedQD/383ImIZKKhE/ENBtfKA1rV9j66DnxkP31+5AFrb/8GV90ZiX/Pa6MBS8tSVUXa9O9yD9rM2fv797p1siQ3eh7jRg/YAWm7eiojTg4Nr578kn/+273TzzeP1rW6jaK8/sJvuZfnP653yn9Lj/Cc65D8HO8Tudmwc/6UHPWimqyz/e7dj/vt46hoeyGvPNXO+oeTipWp6OiKej4gTMbQ3q693P+fM0v3lbtva879sydpv5YL5cTwY3Pv0Y6YqjcpO+tzu4a2Il57kv0msmf/3NXPd1eOfPR/nN9nGsfTuK922bdz/dr3PgJd/jHi14/g/uaOVrH9/crR5Poy2zoq1/rx97Ndu7W+t/72Xjf+B9fs/nLTfr61vvY0f9v2ddtu23fN/T/Jps7wnX3et0mjMjUXsST5au378yWNb9db+Wf9PHF9//ut0/u+PiM822f/bR2933bUfxn9qS+O/9cL9D7/4vlv7mxv/N5qlE/mazcx/mz3AnTx3AAAAAAAA0G9KEXEoklL5cblUKpdXPt9xNA6UqrV64+TF2vzlqWh+V3Y4hkqtO92H2z4PMZZ/HrZVH19Vn4iIIxHxzcD+Zr08WatO7XbnAQAAAAAAAAAAAAAAAAAAoE8c7PL9/8xvA7t9dMC/zk9+Q3FtGP+9+KUnoC95/Yfi6hL/pgUoAIEOxSX+objEPxSX+IfiEv9QXOIfAAAAAAAAAAAAAAAAAAAAAAAAAAAAeur8uXPZsrz06PpkVp+6ujA/U7t6aiqtz5Rn5yfLk7W5K+XpWm26mpYna7Mb/b1qrXZlbDzmr4020npjtL6weGG2Nn+5ceHSbGU6vZAO/Se9AgAAAAAAAAAAAAAAAAAAgGdLfWFxplKtpnMKXQvvxW4fxucv7+ThSedRTto6uGJbTQz2yzAp9LSwyxMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALT5JwAA//821zOC")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}})
rmdir(&(0x7f0000000380)='./file0/../file0\x00')

4m41.5885021s ago: executing program 1 (id=377):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x583, &(0x7f0000000800)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x185093, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x152)

4m41.398057947s ago: executing program 1 (id=379):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@printk={@p, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0xf1}, {0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0x5}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4m41.069976628s ago: executing program 1 (id=386):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x65}, @initr0, @exit, @alu={0x4, 0x0, 0xa, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x94)

4m40.942155445s ago: executing program 33 (id=386):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x65}, @initr0, @exit, @alu={0x4, 0x0, 0xa, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x94)

4m26.666691841s ago: executing program 3 (id=594):
r0 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_attach_bpf(r0, 0x29, 0x4e, 0x0, 0x4)

4m26.666538879s ago: executing program 3 (id=595):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r0)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r1, 0xde5f1afd190b4725, 0x70bd2b, 0x25dfdbff}, 0x14}}, 0x40000)

4m26.59799626s ago: executing program 3 (id=596):
r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0)
writev(r0, &(0x7f0000004500)=[{&(0x7f0000004380)="cc", 0x1}], 0x1)

4m26.597658005s ago: executing program 3 (id=597):
syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000180)='./file1\x00', 0x1004000, &(0x7f0000000500)=ANY=[@ANYBLOB="6c617374626c6f636b3d30303030303030303030303030303030303030302c756e64656c6574652c756e64656c6574652c6c6f6e6761642c756e686964652c7569643d666f726765742c00020000000000002c696f636861727365743d757466382c7569643d666f726765742c696f636861727365743d64656661756c742c6e6f6164696e6963622c6e6f7374726963742c77657373696f6e3d30303030303030303030303030303030303030302c706172746974696f6e0100000030303030303030303030303030303030362c00"], 0x1, 0xc34, &(0x7f0000001bc0)="$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")
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x1)
creat(&(0x7f0000000300)='./bus\x00', 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x4, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a010000000000000030aa2ae2c084a0ea1000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]})
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80)
getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000)

4m26.483367044s ago: executing program 3 (id=599):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000080)=0x2, 0x4)

4m26.148725499s ago: executing program 3 (id=604):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x8008000000019, 0x0, 0x0)

4m26.036242091s ago: executing program 34 (id=604):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x8008000000019, 0x0, 0x0)

2m21.813647095s ago: executing program 5 (id=2667):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0)
sendmmsg(r3, &(0x7f0000000180), 0x3ef, 0x0)

2m20.965845607s ago: executing program 5 (id=2672):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0xba01}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4)
setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000140)=0x34d99cc3, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x5e}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)

2m20.879312768s ago: executing program 5 (id=2675):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63405}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0)

2m20.688985555s ago: executing program 5 (id=2681):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x11)
mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00')
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00')

2m20.624296838s ago: executing program 5 (id=2683):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg$unix(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000003c0)=""/244, 0xf4}], 0x1}}], 0x2, 0x220, 0x0)

2m20.336956531s ago: executing program 5 (id=2687):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180800000000000000000000000000008500000019000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b200000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94)

2m20.178705024s ago: executing program 35 (id=2687):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180800000000000000000000000000008500000019000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b200000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94)

1m20.886434681s ago: executing program 4 (id=3594):
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000006, 0xfffffefc, 0x6}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r0], 0x1c}}, 0x804)

1m20.816622177s ago: executing program 4 (id=3595):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r2, 0x1000}, &(0x7f00000000c0)=0x8)

1m20.816456625s ago: executing program 4 (id=3596):
ustat(0x1000, &(0x7f0000000040))

1m20.816326406s ago: executing program 4 (id=3597):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x200008, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1, 0x5511, &(0x7f00000079c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x10)
statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0xffff4a9c0080ffff, 0x0)

1m20.319749991s ago: executing program 4 (id=3606):
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_connect(0x4, 0x2d, &(0x7f00000005c0)={{0x12, 0x1, 0x110, 0x3d, 0xcf, 0x82, 0x40, 0x67b, 0x2507, 0x3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0xf3, 0xe, 0xe0, 0x2, [{{0x9, 0x4, 0x24, 0x3, 0x0, 0xac, 0xee, 0x38, 0x4}}, {{0x9, 0x4, 0x9f, 0xc, 0x0, 0x7, 0xf1, 0x69}}]}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000140)=ANY=[])

1m20.056642138s ago: executing program 4 (id=3613):
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x3800052, &(0x7f0000000600)=ANY=[], 0x1, 0x14fe, &(0x7f0000002180)="$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")
truncate(&(0x7f0000000000)='./file1\x00', 0x5e00)
truncate(&(0x7f0000000900)='./file1\x00', 0xbf39)

1m19.961384502s ago: executing program 36 (id=3613):
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x3800052, &(0x7f0000000600)=ANY=[], 0x1, 0x14fe, &(0x7f0000002180)="$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")
truncate(&(0x7f0000000000)='./file1\x00', 0x5e00)
truncate(&(0x7f0000000900)='./file1\x00', 0xbf39)

2.609576755s ago: executing program 7 (id=4618):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'bond0\x00', @ifru_names='lo\x00'})

2.609092965s ago: executing program 7 (id=4621):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x1)
r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x242, 0x161)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe89)
r3 = socket(0x1d, 0x2, 0x6)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'team_slave_0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f0000000480)="3f031c000300140006001e0089e9aaa911d7c2290f0086dd1327c9167c64114a1b6800000cc9", 0x26, 0x24000094, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=r2, 0x1e, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000000c0), 0x0, 0x0}, 0x40)
getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
ptrace$getregset(0x4205, r6, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28})

1.194810849s ago: executing program 7 (id=4635):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000002100010000000000fddbdf250a0000080000000110000000140011"], 0x30}}, 0x0)

1.105927513s ago: executing program 7 (id=4638):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TCSBRKP(r0, 0x5425, 0x40)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x15)
pselect6(0x40, &(0x7f0000000240)={0x2, 0x0, 0x7, 0x3, 0x3, 0x0, 0x100, 0x5}, &(0x7f00000000c0)={0x1d, 0xfffffffffffffffe, 0x40, 0x7eff, 0x2, 0x1, 0x0, 0x8}, 0x0, 0x0, 0x0)

880.483195ms ago: executing program 2 (id=4645):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x6, 0x1, &(0x7f00000001c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffbffd}, 0x94)

880.330327ms ago: executing program 2 (id=4646):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000001a80)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x48, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c, &(0x7f00000002c0)=[{&(0x7f00000000c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0x4, @private2, 0x4}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000140)="b220", 0x2}], 0x1}}], 0x2, 0x8001)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000380)=@sack_info={0x0, 0x2, 0x8d}, &(0x7f0000000080)=0xc)

802.943543ms ago: executing program 2 (id=4648):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x2, 0xf, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x78}, 0x1, 0x7}, 0x0)

802.718632ms ago: executing program 2 (id=4649):
r0 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @empty, 0x6}, 0x1c)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000003c0)=0x2, 0x4)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0)

738.928807ms ago: executing program 6 (id=4650):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x11)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x2)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)

738.761271ms ago: executing program 2 (id=4651):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001d00c9242bbd7000fbdbdf2507000000", @ANYRES32=r1, @ANYBLOB="80001e0a0a000200aaaaaaaaaa1b"], 0x30}, 0x1, 0x0, 0x0, 0xc0041}, 0x0)

616.561344ms ago: executing program 2 (id=4652):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
timerfd_gettime(0xffffffffffffffff, 0x0)

615.295455ms ago: executing program 6 (id=4653):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
splice(r0, 0x0, r2, 0x0, 0x10d00, 0x0)

490.997333ms ago: executing program 6 (id=4654):
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000f0200006706000020000000620a00ff0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c"], 0x0}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000240)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf2501000000080005000100000006000600234e0000140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e690100000001000000b6e901b9ff2f518c78042fb5427c010880"], 0x1d8}}, 0x0)

196.94539ms ago: executing program 6 (id=4655):
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001180)="390000fa461ad7e48489bffa56020040001118680907071200000f", 0x1b}], 0x1)
r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01)
setreuid(0x0, 0xee00)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0])

83.206924ms ago: executing program 6 (id=4656):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x20000)
fremovexattr(r0, &(0x7f0000002300)=@known='system.posix_acl_default\x00')

83.047298ms ago: executing program 7 (id=4657):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000040)=0x1, 0x4)

231.614µs ago: executing program 6 (id=4658):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x0, 0xa, 0x0, 0x70bd29, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0x50}}, 0x0)

0s ago: executing program 7 (id=4659):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0xfffffffd}}, 0x10)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10)
bind$tipc(r1, &(0x7f0000001680)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10)
bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10)
bind$tipc(r0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

 compat=0 ip=0x7f766958ebe9 code=0x7ffc0000
[  187.278958][   T33] audit: type=1326 audit(1755280580.101:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10379 comm="syz.2.1713" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f766958ebe9 code=0x7ffc0000
[  187.287979][   T33] audit: type=1326 audit(1755280580.111:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10379 comm="syz.2.1713" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f766958ebe9 code=0x7ffc0000
[  187.508790][T10401] netlink: 'syz.2.1722': attribute type 7 has an invalid length.
[  187.514417][T10404] bridge0: port 3(batadv1) entered blocking state
[  187.517370][T10404] bridge0: port 3(batadv1) entered disabled state
[  187.521579][T10404] batadv1: entered allmulticast mode
[  187.528222][T10404] batadv1: entered promiscuous mode
[  187.549817][T10401] : entered promiscuous mode
[  188.014902][   T13] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  188.018636][   T13] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  189.026062][   T33] kauditd_printk_skb: 6 callbacks suppressed
[  189.026078][   T33] audit: type=1326 audit(1755280581.921:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10478 comm="syz.4.1757" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758cd8ebe9 code=0x7ffc0000
[  189.080476][T10481] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  189.093756][   T33] audit: type=1326 audit(1755280581.921:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10478 comm="syz.4.1757" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758cd8ebe9 code=0x7ffc0000
[  189.094343][T10481] CIFS mount error: No usable UNC path provided in device string!
[  189.094343][T10481] 
[  189.110767][T10481] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  189.131214][   T33] audit: type=1326 audit(1755280581.941:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10478 comm="syz.4.1757" exe="/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f758cd8ebe9 code=0x7ffc0000
[  189.151636][   T33] audit: type=1326 audit(1755280581.941:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10478 comm="syz.4.1757" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758cd8ebe9 code=0x7ffc0000
[  189.175556][   T33] audit: type=1326 audit(1755280581.941:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10478 comm="syz.4.1757" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758cd8ebe9 code=0x7ffc0000
[  189.240607][T10487] overlayfs: failed to clone upperpath
[  189.300829][   T33] audit: type=1326 audit(1755280581.941:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10478 comm="syz.4.1757" exe="/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f758cd8ebe9 code=0x7ffc0000
[  189.321135][   T33] audit: type=1326 audit(1755280581.941:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10478 comm="syz.4.1757" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758cd8ebe9 code=0x7ffc0000
[  189.478197][T10497] wireguard: wg1: Could not create IPv4 socket
[  189.577097][T10505] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1769'.
[  189.623000][T10509] overlayfs: failed to clone lowerpath
[  189.963267][    T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  190.092488][    T9] usb 6-1: device descriptor read/64, error -71
[  190.332367][    T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  190.462237][    T9] usb 6-1: device descriptor read/64, error -71
[  190.572854][    T9] usb usb6-port1: attempt power cycle
[  190.857715][T10539] netlink: 'syz.2.1786': attribute type 15 has an invalid length.
[  190.913218][    T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  190.942706][    T9] usb 6-1: device descriptor read/8, error -71
[  191.256992][    T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  191.273553][    T9] usb 6-1: device descriptor read/8, error -71
[  191.382377][    T9] usb usb6-port1: unable to enumerate USB device
[  192.418281][T10564] openvswitch: netlink: IP tunnel dst address not specified
[  192.677120][   T33] audit: type=1326 audit(1755280585.571:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10573 comm="syz.2.1804" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f766958ebe9 code=0x7ffc0000
[  192.699424][   T33] audit: type=1326 audit(1755280585.571:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10573 comm="syz.2.1804" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f766958ebe9 code=0x7ffc0000
[  192.720579][   T33] audit: type=1326 audit(1755280585.591:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10573 comm="syz.2.1804" exe="/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f766958ebe9 code=0x7ffc0000
[  193.266432][T10602] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1818'.
[  193.325584][T10604] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  193.812682][    T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  193.928217][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  193.930997][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  193.963426][    T9] usb 6-1: Using ep0 maxpacket: 8
[  193.971745][    T9] usb 6-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2
[  193.975624][T10630] netlink: 'syz.4.1832': attribute type 1 has an invalid length.
[  193.975719][T10630] nbd: couldn't find a device at index 393224
[  193.995151][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.002227][    T9] usb 6-1: Product: syz
[  194.004095][    T9] usb 6-1: Manufacturer: syz
[  194.006050][    T9] usb 6-1: SerialNumber: syz
[  194.023100][    T9] usb 6-1: config 0 descriptor??
[  194.121914][T10640] tipc: Failed to remove unknown binding: 66,3,3/0:2712405090/2712405091
[  194.235621][    T9] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  195.674359][    T9] gspca_sunplus: reg_r err -71
[  195.676559][    T9] sunplus 6-1:0.0: probe with driver sunplus failed with error -71
[  195.689563][    T9] usb 6-1: USB disconnect, device number 15
[  196.330036][T10736] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1880'.
[  197.271180][T10756] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1888'.
[  197.274807][T10756] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  197.538767][T10772] overlayfs: failed to clone upperpath
[  199.297336][T10848] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1931'.
[  199.301146][T10848] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1931'.
[  199.647469][T10874] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  199.650044][T10874] IPv6: NLM_F_CREATE should be set when creating new route
[  200.053607][    T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  200.204213][    T9] usb 6-1: config 0 has an invalid interface number: 47 but max is 0
[  200.207430][    T9] usb 6-1: config 0 has no interface number 0
[  200.209821][    T9] usb 6-1: New USB device found, idVendor=0c45, idProduct=624e, bcdDevice=aa.6c
[  200.222646][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.228192][    T9] usb 6-1: config 0 descriptor??
[  200.235150][T10917] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1964'.
[  200.238564][    T9] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:624e
[  200.540403][    T9] gspca_sn9c20x: Write register 1000 failed -71
[  200.543427][    T9] gspca_sn9c20x: Device initialization failed
[  200.545988][    T9] gspca_sn9c20x 6-1:0.47: probe with driver gspca_sn9c20x failed with error -71
[  200.551094][    T9] usb 6-1: USB disconnect, device number 16
[  201.345873][T10946] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1976'.
[  201.349700][T10946] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1976'.
[  201.355245][T10946] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1976'.
[  201.359226][T10946] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1976'.
[  201.761639][T10952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1978'.
[  201.770985][T10952] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1978'.
[  202.084070][T10954] netlink: 'syz.4.1979': attribute type 5 has an invalid length.
[  202.119460][T10956] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  202.336974][T10968] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1986'.
[  202.630551][T10980] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1992'.
[  202.910178][T10995] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  202.920784][T10995] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.928525][T10995] bridge0: entered allmulticast mode
[  203.557008][T11031] overlayfs: failed to clone upperpath
[  204.045136][T11062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2032'.
[  204.255165][T11074] netlink: 'syz.2.2038': attribute type 1 has an invalid length.
[  204.411856][T11081] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2041'.
[  205.004393][T11097] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma?
[  205.189680][T11108] loop5: detected capacity change from 0 to 256
[  205.227602][T11108] FAT-fs (loop5): Directory bread(block 64) failed
[  205.232815][T11108] FAT-fs (loop5): Directory bread(block 65) failed
[  205.235346][T11108] FAT-fs (loop5): Directory bread(block 66) failed
[  205.242950][T11108] FAT-fs (loop5): Directory bread(block 67) failed
[  205.251538][T11108] FAT-fs (loop5): Directory bread(block 68) failed
[  205.255808][T11108] FAT-fs (loop5): Directory bread(block 69) failed
[  205.258745][T11108] FAT-fs (loop5): Directory bread(block 70) failed
[  205.261596][T11108] FAT-fs (loop5): Directory bread(block 71) failed
[  205.264602][T11108] FAT-fs (loop5): Directory bread(block 72) failed
[  205.267626][T11108] FAT-fs (loop5): Directory bread(block 73) failed
[  205.457234][T11118] loop5: detected capacity change from 0 to 4096
[  205.470582][T11118] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512).
[  205.499367][T11118] ntfs3(loop5): Failed to initialize $Extend/$Reparse.
[  206.119374][T11151] trusted_key: syz.2.2072 sent an empty control message without MSG_MORE.
[  206.126759][T11153] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received
[  206.505781][T11164] loop5: detected capacity change from 0 to 32768
[  207.846700][T11216] __nla_validate_parse: 2 callbacks suppressed
[  207.846711][T11216] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2102'.
[  207.855561][T11216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2102'.
[  207.997195][T11226] affs: No valid root block on device nullb0
[  208.107750][T11237] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2113'.
[  208.110144][T11238] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2111'.
[  208.265689][T11248] loop5: detected capacity change from 0 to 64
[  208.418586][T11255] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2120'.
[  208.647452][T11267] loop5: detected capacity change from 0 to 4096
[  208.661519][T11267] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  208.688357][T11267] ntfs3(loop5): ino=1a, mi_enum_attr
[  208.690600][T11267] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  208.698291][T11267] ntfs3(loop5): ino=1a, mi_enum_attr
[  208.700560][T11267] ntfs3(loop5): Failed to initialize $Extend/$Reparse.
[  209.038138][T11269] loop5: detected capacity change from 0 to 32768
[  209.055635][T11269] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  209.083720][T11269] XFS (loop5): Ending clean mount
[  209.125212][ T7601] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  209.438519][T11289] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2132'.
[  209.913352][T11314] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  210.026101][T11316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2144'.
[  210.109807][T11320] overlayfs: failed to clone upperpath
[  210.197555][T11323] netlink: 'syz.4.2148': attribute type 8 has an invalid length.
[  210.301368][T11326] netlink: 'syz.2.2149': attribute type 11 has an invalid length.
[  210.683747][T11336] loop5: detected capacity change from 0 to 4096
[  210.703643][T11336] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  210.734244][T11336] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  210.788733][T11345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2157'.
[  210.811688][ T7601] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  211.731147][T11384] netlink: 'syz.2.2174': attribute type 49 has an invalid length.
[  211.737420][T11384] netlink: 'syz.2.2174': attribute type 49 has an invalid length.
[  212.267064][T11392] netlink: 15 bytes leftover after parsing attributes in process `syz.5.2176'.
[  212.270274][T11392] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2176'.
[  212.457911][T11394] loop5: detected capacity change from 0 to 40427
[  212.462212][T11394] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  212.465290][T11394] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  212.517100][T11394] F2FS-fs (loop5): invalid crc value
[  212.574074][T11394] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  212.581519][T11394] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  212.584322][T11394] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  213.074575][   T33] kauditd_printk_skb: 2 callbacks suppressed
[  213.074591][   T33] audit: type=1800 audit(1755280605.721:429): pid=11412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2178" name="file1" dev="loop5" ino=10 res=0 errno=0
[  213.129754][T11414] __nla_validate_parse: 1 callbacks suppressed
[  213.129770][T11414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2185'.
[  213.379551][   T27] kworker/u10:0: attempt to access beyond end of device
[  213.379551][   T27] loop5: rw=1, sector=77824, nr_sectors = 4096 limit=40427
[  213.404877][   T27] kworker/u10:0: attempt to access beyond end of device
[  213.404877][   T27] loop5: rw=1, sector=49152, nr_sectors = 4096 limit=40427
[  213.421285][   T27] kworker/u10:0: attempt to access beyond end of device
[  213.421285][   T27] loop5: rw=1, sector=57344, nr_sectors = 1000 limit=40427
[  213.822581][T11454] netlink: 'syz.2.2206': attribute type 29 has an invalid length.
[  213.827405][T11454] netlink: 'syz.2.2206': attribute type 29 has an invalid length.
[  213.831639][T11454] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2206'.
[  214.172173][ T5894] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  214.323580][ T5894] usb 6-1: Using ep0 maxpacket: 32
[  214.329665][ T5894] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7
[  214.345475][ T5894] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024
[  214.359418][ T5894] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[  214.368223][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.371657][ T5894] usb 6-1: Product: syz
[  214.373681][ T5894] usb 6-1: Manufacturer: syz
[  214.375845][ T5894] usb 6-1: SerialNumber: syz
[  214.381585][ T5894] usb 6-1: config 0 descriptor??
[  214.404204][ T5894] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  214.517394][T11494] veth0_macvtap: left promiscuous mode
[  214.599226][    T9] usb 6-1: USB disconnect, device number 17
[  214.602511][ T5874] usb 6-1: Failed to submit usb control message: -71
[  214.605796][ T5874] usb 6-1: unable to send the bmi data to the device: -71
[  214.611153][ T5874] usb 6-1: unable to get target info from device
[  214.614547][ T5874] usb 6-1: could not get target info (-71)
[  214.617069][ T5874] usb 6-1: could not probe fw (-71)
[  214.727322][   T33] audit: type=1326 audit(1755280607.621:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11502 comm="syz.2.2226" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f766958ebe9 code=0x0
[  214.989008][T11517] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2232'.
[  215.155954][T11535] loop5: detected capacity change from 0 to 64
[  215.440753][T11556] dvmrp0: entered allmulticast mode
[  215.732142][    T9] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  215.840796][T11576] sctp: [Deprecated]: syz.2.2261 (pid 11576) Use of struct sctp_assoc_value in delayed_ack socket option.
[  215.840796][T11576] Use struct sctp_sack_info instead
[  215.882407][    T9] usb 6-1: Using ep0 maxpacket: 8
[  215.889688][    T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  215.895677][    T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  215.899644][    T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  215.904754][    T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  215.909486][    T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  215.916364][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.128417][    T9] usb 6-1: GET_CAPABILITIES returned 0
[  216.130342][    T9] usbtmc 6-1:16.0: can't read capabilities
[  216.174749][T11596] 9pnet_fd: Insufficient options for proto=fd
[  216.227630][T11601] netlink: 9280 bytes leftover after parsing attributes in process `syz.4.2273'.
[  216.338130][    C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  216.343739][    C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  216.347493][    C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  216.351314][    C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  216.354972][    C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  216.364586][    C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  216.382603][    C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  216.386315][    C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  216.390201][    C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  216.394066][    C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  216.397957][    C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  216.408917][    C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  216.412922][    C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  216.416618][    C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  216.420456][    C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  216.440377][    C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  216.470391][ T5911] usb 6-1: USB disconnect, device number 18
[  216.837700][T11619] ref_ctr increment failed for inode: 0x11be offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff8880235cd600
[  216.951951][T11621] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  217.128664][T11633] loop5: detected capacity change from 0 to 128
[  217.152667][T11633] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  217.158503][T11633] ext4 filesystem being mounted at /397/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  217.168913][T11633] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:375: inode #2: comm syz.5.2288: No space for directory leaf checksum. Please run e2fsck -D.
[  217.177677][T11633] EXT4-fs error (device loop5): htree_dirblock_to_tree:1051: inode #2: comm syz.5.2288: Directory block failed checksum
[  217.187575][T11633] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:375: inode #2: comm syz.5.2288: No space for directory leaf checksum. Please run e2fsck -D.
[  217.199635][T11633] EXT4-fs error (device loop5): __ext4_find_entry:1626: inode #2: comm syz.5.2288: checksumming directory block 0
[  217.218032][T11637] ip6gretap1: entered allmulticast mode
[  217.231726][ T7601] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  217.730322][T11672] loop5: detected capacity change from 0 to 128
[  217.749382][T11672] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  217.756013][T11672] ext4 filesystem being mounted at /400/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  217.790355][T11672] EXT4-fs error (device loop5): make_indexed_dir:2269: inode #2: block 18: comm syz.5.2305: bad entry in directory: rec_len is smaller than minimal - offset=988, inode=128, rec_len=9, size=1000 fake=0
[  217.804839][T11672] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.2305: dx entry: limit 0 != root limit 125
[  217.809982][T11672] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.2305: Corrupt directory, running e2fsck is recommended
[  217.846893][ T7601] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  218.110616][T11696] bridge3: entered promiscuous mode
[  218.115378][T11696] bridge3: entered allmulticast mode
[  218.222644][T11707] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.2318'.
[  218.226462][T11707] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2318'.
[  218.326322][T11713] loop5: detected capacity change from 0 to 512
[  218.385626][T11713] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  218.767431][T11731] netlink: 'syz.2.2332': attribute type 10 has an invalid length.
[  218.786364][T11731] team0: Port device dummy0 added
[  219.806226][T11745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2337'.
[  219.919313][ T7601] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.981297][T11755] loop5: detected capacity change from 0 to 16
[  219.994731][T11755] erofs (device loop5): mounted with root inode @ nid 36.
[  220.024662][T11755] syz.5.2341: attempt to access beyond end of device
[  220.024662][T11755] loop5: rw=0, sector=14546590680, nr_sectors = 8 limit=16
[  220.036472][T11755] erofs (device loop5): failed to decompress -2 in[1, 1440] out[1677]
[  220.040450][T11755] erofs (device loop5): read error -5 @ 87 of nid 36
[  220.044550][T11755] erofs (device loop5): failed to readdir of logical block 87 of nid 36
[  220.236457][T11767] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  220.342148][ T5894] usb 6-1: new low-speed USB device number 19 using dummy_hcd
[  220.512419][ T5894] usb 6-1: config 32 has 1 interface, different from the descriptor's value: 2
[  220.515621][ T5894] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10
[  220.532149][ T5894] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 255, setting to 8
[  220.536399][ T5894] usb 6-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  220.539417][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.545786][T11759] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  220.753925][ T5894] usb 6-1: string descriptor 0 read error: -71
[  220.792354][ T5894] usb 6-1: USB disconnect, device number 19
[  221.487892][   T33] audit: type=1326 audit(1755280614.371:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11834 comm="syz.2.2380" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f766958ebe9 code=0x7ffc0000
[  221.520642][   T33] audit: type=1326 audit(1755280614.371:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11834 comm="syz.2.2380" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f766958ebe9 code=0x7ffc0000
[  221.542559][   T33] audit: type=1326 audit(1755280614.401:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11834 comm="syz.2.2380" exe="/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f766958ebe9 code=0x7ffc0000
[  221.552423][   T33] audit: type=1326 audit(1755280614.401:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11834 comm="syz.2.2380" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f766958ebe9 code=0x7ffc0000
[  221.686621][T11846] loop5: detected capacity change from 0 to 512
[  221.693794][T11846] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  221.723638][T11846] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  221.728356][T11846] ext4 filesystem being mounted at /412/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  221.764560][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  221.821254][ T7601] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.076226][T11869] openvswitch: netlink: VXLAN extension 11 out of range max 1
[  222.312879][   T24] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  222.473337][   T24] usb 6-1: Using ep0 maxpacket: 16
[  222.477940][   T24] usb 6-1: config 15 has an invalid interface number: 70 but max is 0
[  222.480733][   T24] usb 6-1: config 15 has no interface number 0
[  222.491090][   T24] usb 6-1: config 15 interface 70 altsetting 1 endpoint 0x5 has invalid maxpacket 512, setting to 64
[  222.495749][   T24] usb 6-1: config 15 interface 70 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0
[  222.499227][   T24] usb 6-1: config 15 interface 70 has no altsetting 0
[  222.508914][   T24] usb 6-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=56.49
[  222.513124][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.516504][   T24] usb 6-1: Product: syz
[  222.523298][   T24] usb 6-1: Manufacturer: syz
[  222.528739][   T24] usb 6-1: SerialNumber: syz
[  222.620850][T11914] netlink: 'syz.4.2416': attribute type 3 has an invalid length.
[  222.754277][   T24] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 12 is not bulk.
[  222.772197][   T24] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 5 is not bulk.
[  222.776611][   T24] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 6 is not bulk.
[  222.780489][   T24] microtek usb (rev 0.4.3): couldn't find two input bulk endpoints. Bailing out.
[  222.799954][   T24] usb 6-1: USB disconnect, device number 20
[  222.876884][T11934] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2426'.
[  222.931798][T11936] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2427'.
[  222.951887][T11936] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2427'.
[  222.979625][T11936] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2427'.
[  223.299610][T11961] netlink: 'syz.4.2439': attribute type 7 has an invalid length.
[  223.305888][T11961] netlink: 'syz.4.2439': attribute type 8 has an invalid length.
[  223.317628][T11960] loop5: detected capacity change from 0 to 4096
[  223.321889][T11960] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  223.327889][T11960] NILFS (loop5): mounting unchecked fs
[  223.344873][T11960] NILFS (loop5): recovery complete
[  223.351209][T11962] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  223.351414][T11145] udevd[11145]: incorrect nilfs2 checksum on /dev/loop5
[  224.007451][T11977] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2445'.
[  224.513713][T12020] autofs: Bad value for 'fd'
[  224.559948][T12024] netlink: 'syz.4.2469': attribute type 1 has an invalid length.
[  225.340688][T12062] loop5: detected capacity change from 0 to 256
[  225.382620][T12062] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x9aa2f194, utbl_chksum : 0xe619d30d)
[  226.638404][T12100] netlink: 'syz.2.2498': attribute type 32 has an invalid length.
[  226.886850][T12108] overlayfs: failed to clone upperpath
[  227.350273][T12144] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2501'.
[  227.389986][T12144] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2501'.
[  227.464500][T12144] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2501'.
[  227.520569][T12144] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2501'.
[  227.606478][T12144] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2501'.
[  228.384215][T12190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2516'.
[  228.389136][T12190] netlink: 'syz.2.2516': attribute type 1 has an invalid length.
[  228.392608][T12190] netlink: 'syz.2.2516': attribute type 2 has an invalid length.
[  228.396145][T12190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2516'.
[  230.128205][T12249] loop5: detected capacity change from 0 to 32768
[  230.165421][T12249] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  230.276543][ T7601] ocfs2: Unmounting device (7,5) on (node local)
[  230.755247][T12282] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2554'.
[  230.812815][ T1152] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  230.839092][T12287] netlink: 'syz.2.2556': attribute type 2 has an invalid length.
[  230.983908][ T1152] usb 6-1: Using ep0 maxpacket: 16
[  230.991113][ T1152] usb 6-1: config 1 has an invalid interface number: 105 but max is 0
[  230.995987][ T1152] usb 6-1: config 1 has no interface number 0
[  230.998886][ T1152] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  231.003602][ T1152] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  231.012139][ T1152] usb 6-1: config 1 interface 105 has no altsetting 0
[  231.017572][ T1152] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  231.021286][ T1152] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.033067][ T1152] usb 6-1: Product: syz
[  231.034858][ T1152] usb 6-1: Manufacturer: syz
[  231.036887][ T1152] usb 6-1: SerialNumber: syz
[  231.041805][T12267] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  231.046809][T12267] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  231.463367][ T5894] IPVS: starting estimator thread 0...
[  231.518794][T12267] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  231.533543][T12267] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  231.559016][T12303] IPVS: using max 36 ests per chain, 86400 per kthread
[  232.017426][ T1152] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  232.025261][ T1152] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  232.030293][ T1152] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  232.049569][ T1152] aqc111 6-1:1.105 eth13: register 'aqc111' at usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 1e:7d:36:c9:d4:14
[  232.060278][ T1152] usb 6-1: USB disconnect, device number 21
[  232.070626][ T1152] aqc111 6-1:1.105 eth13: unregister 'aqc111' usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[  232.133819][ T1152] aqc111 6-1:1.105 eth13 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  232.137753][ T1152] aqc111 6-1:1.105 eth13 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  232.144756][ T1152] aqc111 6-1:1.105 eth13 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[  232.774385][T12350] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2584'.
[  232.973418][T12364] trusted_key: encrypted_key: key trusted:syz not found
[  232.995641][T12366] netlink: 'syz.5.2593': attribute type 1 has an invalid length.
[  233.027417][T12366] bond1: (slave gretap1): making interface the new active one
[  233.031556][T12366] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  233.056283][T12366] syz.5.2593 (12366) used greatest stack depth: 18232 bytes left
[  233.088763][   T33] audit: type=1326 audit(1755280625.981:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12320 comm="syz.4.2571" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758cd8ebe9 code=0x7fc00000
[  234.322915][T12425] loop5: detected capacity change from 0 to 32768
[  234.499509][T12425] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  234.550160][T12425] XFS (loop5): Ending clean mount
[  234.561412][T12425] XFS (loop5): Quotacheck needed: Please wait.
[  234.605498][T12425] XFS (loop5): Quotacheck: Done.
[  234.675434][ T7601] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  235.086406][ T5848] Bluetooth: hci1: unexpected event for opcode 0x0c25
[  236.835750][T12564] bond_slave_0: entered promiscuous mode
[  236.838470][T12564] bond_slave_1: entered promiscuous mode
[  236.840935][T12564] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode
[  236.866968][T12564] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  236.871231][T12564] bond_slave_0: left promiscuous mode
[  236.873642][T12564] bond_slave_1: left promiscuous mode
[  236.876034][T12564] mac80211_hwsim hwsim13 wlan1: left promiscuous mode
[  236.971392][ T5848] Bluetooth: hci0: command 0x0406 tx timeout
[  237.636160][T12598] netlink: 'syz.4.2692': attribute type 5 has an invalid length.
[  237.801105][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  237.808784][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  237.813679][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  237.819943][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  237.825718][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  238.026096][T12610] chnl_net:caif_netlink_parms(): no params data found
[  238.106702][T12610] bridge0: port 1(bridge_slave_0) entered blocking state
[  238.109747][T12610] bridge0: port 1(bridge_slave_0) entered disabled state
[  238.113183][T12610] bridge_slave_0: entered allmulticast mode
[  238.117047][T12610] bridge_slave_0: entered promiscuous mode
[  238.121752][T12610] bridge0: port 2(bridge_slave_1) entered blocking state
[  238.125163][T12610] bridge0: port 2(bridge_slave_1) entered disabled state
[  238.128093][T12610] bridge_slave_1: entered allmulticast mode
[  238.134522][T12610] bridge_slave_1: entered promiscuous mode
[  238.166635][T12610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  238.175080][T12610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  238.206065][T12610] team0: Port device team_slave_0 added
[  238.211299][T12610] team0: Port device team_slave_1 added
[  238.243942][T12610] batman_adv: batadv0: Adding interface: batadv_slave_0
[  238.246790][T12610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  238.257523][T12610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  238.264384][T12610] batman_adv: batadv0: Adding interface: batadv_slave_1
[  238.267229][T12610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  238.277911][T12610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  238.322781][T12610] hsr_slave_0: entered promiscuous mode
[  238.326074][T12610] hsr_slave_1: entered promiscuous mode
[  238.328448][T12610] debugfs: 'hsr0' already exists in 'hsr'
[  238.330427][T12610] Cannot create hsr debugfs directory
[  238.551454][T12610] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  238.564172][T12610] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  238.592621][T12610] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  238.598297][T12610] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  238.674254][T12610] bridge0: port 2(bridge_slave_1) entered blocking state
[  238.677246][T12610] bridge0: port 2(bridge_slave_1) entered forwarding state
[  238.680713][T12610] bridge0: port 1(bridge_slave_0) entered blocking state
[  238.683725][T12610] bridge0: port 1(bridge_slave_0) entered forwarding state
[  238.798898][T12610] 8021q: adding VLAN 0 to HW filter on device bond0
[  238.828488][  T732] bridge0: port 1(bridge_slave_0) entered disabled state
[  238.849893][  T732] bridge0: port 2(bridge_slave_1) entered disabled state
[  238.883836][T12610] 8021q: adding VLAN 0 to HW filter on device team0
[  238.900677][  T732] bridge0: port 1(bridge_slave_0) entered blocking state
[  238.903826][  T732] bridge0: port 1(bridge_slave_0) entered forwarding state
[  238.936132][  T732] bridge0: port 2(bridge_slave_1) entered blocking state
[  238.939177][  T732] bridge0: port 2(bridge_slave_1) entered forwarding state
[  239.176475][T12610] 8021q: adding VLAN 0 to HW filter on device batadv0
[  239.408726][T12610] veth0_vlan: entered promiscuous mode
[  239.419424][T12610] veth1_vlan: entered promiscuous mode
[  239.449424][T12610] veth0_macvtap: entered promiscuous mode
[  239.458024][T12610] veth1_macvtap: entered promiscuous mode
[  239.476125][T12610] batman_adv: batadv0: Interface activated: batadv_slave_0
[  239.486025][T12610] batman_adv: batadv0: Interface activated: batadv_slave_1
[  239.503288][   T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  239.510687][   T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  239.516156][   T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  239.538857][   T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  239.631328][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  239.637807][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  239.686463][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  239.689925][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  239.923755][ T5848] Bluetooth: hci0: command tx timeout
[  240.255171][T12687] netlink: 'syz.2.2724': attribute type 5 has an invalid length.
[  240.509311][T12702] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2730'.
[  240.549324][T12705] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4.
[  240.862218][T12724] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  241.918381][T12734] netlink: 536 bytes leftover after parsing attributes in process `syz.4.2745'.
[  242.003469][ T5848] Bluetooth: hci0: command tx timeout
[  242.171638][T12746] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  243.335482][T12765] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2759'.
[  243.339302][T12765] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2759'.
[  244.092259][ T5848] Bluetooth: hci0: command tx timeout
[  244.960930][T12831] 9pnet: p9_errstr2errno: server reported unknown error @0x0000000000000007
[  245.236804][T12846] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  246.162433][ T5848] Bluetooth: hci0: command tx timeout
[  247.289789][T12934] 9pnet_fd: Insufficient options for proto=fd
[  248.317972][T12981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2861'.
[  248.339713][T12983] Dead loop on virtual device ipvlan1, fix it urgently!
[  248.346109][T12983] Dead loop on virtual device ipvlan1, fix it urgently!
[  248.356306][T12983] syz.4.2862 (12983) used greatest stack depth: 9736 bytes left
[  249.581929][T13023] netlink: 'syz.4.2879': attribute type 11 has an invalid length.
[  250.417479][T13042] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2887'.
[  250.535318][T13048] netlink: 'syz.6.2890': attribute type 1 has an invalid length.
[  250.538671][T13048] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2890'.
[  250.544072][T13048] netlink: 'syz.6.2890': attribute type 2 has an invalid length.
[  250.550123][T13048] netlink: 'syz.6.2890': attribute type 1 has an invalid length.
[  250.556276][T13048] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2890'.
[  250.808233][T13056] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  250.932805][T13052] loop6: detected capacity change from 0 to 32768
[  251.665400][T13084] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  251.680385][   T33] audit: type=1326 audit(1755280644.561:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13057 comm="syz.4.2895" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758cd8ebe9 code=0x7fc00000
[  251.702122][   T33] audit: type=1326 audit(1755280644.561:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13057 comm="syz.4.2895" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f758cd8ebe9 code=0x7fc00000
[  251.718812][T13077] loop6: detected capacity change from 0 to 65536
[  251.736998][T13077] XFS (loop6): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  251.774426][T13077] XFS (loop6): Ending clean mount
[  251.845573][T12610] XFS (loop6): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  253.135301][T13170] veth1_macvtap: left promiscuous mode
[  253.137637][T13170] macsec0: entered promiscuous mode
[  254.714236][T13193] bridge0: port 3(erspan0) entered blocking state
[  254.717008][T13193] bridge0: port 3(erspan0) entered disabled state
[  254.720632][T13193] erspan0: entered allmulticast mode
[  254.726103][T13193] erspan0: entered promiscuous mode
[  254.728723][T13193] bridge0: port 3(erspan0) entered blocking state
[  254.731561][T13193] bridge0: port 3(erspan0) entered forwarding state
[  254.755922][T13193] erspan0: left allmulticast mode
[  254.758459][T13193] erspan0: left promiscuous mode
[  254.762549][T13193] bridge0: port 3(erspan0) entered disabled state
[  255.383117][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  255.389944][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  255.684202][   T33] audit: type=1804 audit(1755280648.571:438): pid=13217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.2963" name="/newroot/32/bus/file0" dev="overlay" ino=191 res=1 errno=0
[  255.693312][T13217] evm: overlay not supported
[  256.057620][T13236] loop6: detected capacity change from 0 to 164
[  256.097794][T13236] iso9660: Corrupted directory entry in block 4 of inode 1792
[  256.523607][T13251] loop6: detected capacity change from 0 to 1024
[  256.556627][T13251] hfsplus: failed to load root directory
[  258.131000][T13304] netlink: 'syz.2.3005': attribute type 1 has an invalid length.
[  258.166768][T13304] 8021q: adding VLAN 0 to HW filter on device bond3
[  258.171031][T13304] bond2: (slave bond3): making interface the new active one
[  258.174652][T13304] bond2: (slave bond3): Enslaving as an active interface with an up link
[  258.482525][ T5848] Bluetooth: hci0: command tx timeout
[  259.000185][   T33] audit: type=1804 audit(1755280651.891:439): pid=13328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3014" name="file0" dev="tmpfs" ino=4784 res=1 errno=0
[  259.177768][T13337] Dead loop on virtual device ipvlan1, fix it urgently!
[  260.180005][T13357] openvswitch: netlink: IP tunnel dst address not specified
[  261.416338][T13387] loop6: detected capacity change from 0 to 32768
[  261.439111][T13387] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3040 (13387)
[  261.468591][T13387] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  261.472979][T13387] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm
[  261.476602][T13387] BTRFS info (device loop6): using free-space-tree
[  261.656713][T12610] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  261.745345][ T5848] Bluetooth: hci1: unexpected event for opcode 0x080d
[  261.848061][T13433] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3051'.
[  261.883175][T13435] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3055'.
[  261.886231][T13435] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3055'.
[  263.022857][T13478] netlink: 165 bytes leftover after parsing attributes in process `syz.6.3074'.
[  263.836026][T13504] tmpfs: Bad value for 'mpol'
[  264.291835][T13527] netlink: 'syz.6.3096': attribute type 1 has an invalid length.
[  265.216887][T13570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3117'.
[  265.224676][T13570] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3117'.
[  265.456660][T13592] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  265.766341][ T5848] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  265.770226][ T5848] Bluetooth: hci1: Injecting HCI hardware error event
[  265.776287][ T5848] Bluetooth: hci1: hardware error 0x00
[  266.530593][   T33] audit: type=1326 audit(1755280659.421:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13651 comm="syz.4.3154" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758cd8ebe9 code=0x7ffc0000
[  266.540738][   T33] audit: type=1326 audit(1755280659.421:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13651 comm="syz.4.3154" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758cd8ebe9 code=0x7ffc0000
[  266.553052][   T33] audit: type=1326 audit(1755280659.431:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13651 comm="syz.4.3154" exe="/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f758cd8ebe9 code=0x7ffc0000
[  266.561925][   T33] audit: type=1326 audit(1755280659.431:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13651 comm="syz.4.3154" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758cd8ebe9 code=0x7ffc0000
[  266.576935][   T33] audit: type=1326 audit(1755280659.431:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13651 comm="syz.4.3154" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758cd8ebe9 code=0x7ffc0000
[  266.699586][T13660] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  267.016922][T13669] sch_tbf: burst 3 is lower than device lo mtu (81) !
[  267.842562][ T5848] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  268.090824][T13695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3173'.
[  268.101889][T13697] rdma_op ffff88812048a1f0 conn xmit_rdma 0000000000000000
[  270.180620][T13756] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3197'.
[  270.306408][T13759] netlink: 'syz.6.3198': attribute type 2 has an invalid length.
[  270.766653][T13784] loop6: detected capacity change from 0 to 64
[  271.022344][T13800] netlink: 'syz.6.3218': attribute type 1 has an invalid length.
[  271.025895][T13800] netlink: 1284 bytes leftover after parsing attributes in process `syz.6.3218'.
[  272.108726][T13841] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3236'.
[  272.519627][T13859] loop6: detected capacity change from 0 to 2048
[  272.537618][T13859] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  272.549907][T13859] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  272.656218][T13867] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3245'.
[  273.371067][T12610] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.414068][T13886] overlayfs: failed to clone upperpath
[  274.248926][T13927] loop6: detected capacity change from 0 to 32768
[  274.255192][T13927] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3275 (13927)
[  274.280661][T13927] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  274.289925][T13927] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm
[  274.295005][T13927] BTRFS info (device loop6): using free-space-tree
[  274.329586][   T33] audit: type=1326 audit(1755280667.221:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13889 comm="syz.4.3257" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758cd8ebe9 code=0x7fc00000
[  274.468777][T12610] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  275.017125][T13972] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3287'.
[  275.799767][T13993] netlink: 'syz.6.3297': attribute type 10 has an invalid length.
[  275.804710][T13993] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3297'.
[  275.807948][T13993] bond0: option arp_all_targets: invalid value (196616)
[  275.972212][T13996] loop6: detected capacity change from 0 to 40427
[  275.980230][T13996] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  275.982951][T13996] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  275.988851][T13996] F2FS-fs (loop6): invalid crc value
[  276.033196][T13996] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  276.128260][T13996] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  276.130795][T13996] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  276.623118][T14010] f2fs: Unknown parameter '01777777777777777777777	Z* m.Dc8'@C9G9?9S{1Jլ5æԌqqY糔'
[  276.634403][   T33] audit: type=1800 audit(1755280669.521:446): pid=14010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3298" name="file1" dev="loop6" ino=10 res=0 errno=0
[  277.383606][T14034] Bluetooth: MGMT ver 1.23
[  277.559663][T14038] loop6: detected capacity change from 0 to 32768
[  277.563937][T14038] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3315 (14038)
[  277.578019][T14043] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24
[  277.581777][T14038] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  277.588319][T14038] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm
[  277.591369][T14038] BTRFS info (device loop6): using free-space-tree
[  277.965847][T14038] BTRFS info (device loop6): checking UUID tree
[  278.072660][T12610] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  278.800197][T14094] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  278.958439][T14106] netlink: 'syz.2.3338': attribute type 10 has an invalid length.
[  278.975196][T14106] team0: Port device syz_tun added
[  279.006758][T14102] loop6: detected capacity change from 0 to 32768
[  281.669231][T14177] netlink: zone id is out of range
[  281.671871][T14177] netlink: zone id is out of range
[  281.675245][T14177] netlink: zone id is out of range
[  281.677757][T14177] netlink: zone id is out of range
[  281.680115][T14177] netlink: zone id is out of range
[  281.686087][T14177] netlink: zone id is out of range
[  281.690817][T14177] netlink: zone id is out of range
[  281.694990][T14177] netlink: zone id is out of range
[  281.698569][T14177] netlink: zone id is out of range
[  281.700724][T14177] netlink: zone id is out of range
[  281.764784][T14181] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  282.065347][T14198] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3373'.
[  282.428112][T14224] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3385'.
[  282.434794][T14224] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3385'.
[  282.448210][T14224] ip6gretap0: entered promiscuous mode
[  282.451964][T14224] syz_tun: entered promiscuous mode
[  283.257938][T14234] loop6: detected capacity change from 0 to 32768
[  283.261028][T14234] XFS: noattr2 mount option is deprecated.
[  283.272494][T14234] XFS (loop6): attr2 and noattr2 cannot both be specified.
[  283.565574][T14249] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3397'.
[  285.140622][    C0] vxcan1: j1939_tp_rxtimer: 0xffff888038b7b000: rx timeout, send abort
[  285.543498][T14304] netlink: 'syz.2.3423': attribute type 13 has an invalid length.
[  285.546756][T14304] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.3423'.
[  285.574790][T14306] overlayfs: conflicting options: nfs_export=on,index=off
[  285.645811][    C0] vxcan1: j1939_tp_rxtimer: 0xffff888038b7b000: abort rx timeout. Force session deactivation
[  287.307515][T14357] bridge0: port 1(bridge_slave_0) entered blocking state
[  287.310470][T14357] bridge0: port 1(bridge_slave_0) entered forwarding state
[  287.326205][T14357] net_ratelimit: 4 callbacks suppressed
[  287.326209][T14357] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  287.376087][T14359] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  287.537500][T14373] loop6: detected capacity change from 0 to 16
[  287.540764][T14371] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  287.547692][T14373] erofs (device loop6): mounted with root inode @ nid 36.
[  287.557795][T14373] erofs (device loop6): readahead error at folio 2 @ nid 89
[  287.561055][T14373] erofs (device loop6): readahead error at folio 1 @ nid 89
[  287.581818][T14373] erofs (device loop6): read error -117 @ 1 of nid 89
[  287.585361][   T33] audit: type=1800 audit(1755280680.481:447): pid=14373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3452" name="file3" dev="loop6" ino=89 res=0 errno=0
[  287.586139][T14373] erofs (device loop6): read error -117 @ 1 of nid 89
[  287.596985][T14373] erofs (device loop6): read error -117 @ 1 of nid 89
[  287.847340][T14399] netlink: 'syz.2.3465': attribute type 7 has an invalid length.
[  287.969810][T14392] loop6: detected capacity change from 0 to 40427
[  287.974220][T14392] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504)
[  287.978849][T14392] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  287.986525][T14392] F2FS-fs (loop6): build fault injection rate: 17008
[  287.990206][T14392] F2FS-fs (loop6): build fault injection type: 0x5
[  287.997801][T14392] F2FS-fs (loop6): invalid crc value
[  288.047260][T14392] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  288.062509][T14392] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  288.068366][T14392] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  288.144900][   T52] kworker/u9:2: attempt to access beyond end of device
[  288.144900][   T52] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  288.158282][   T52] CPU: 0 UID: 0 PID: 52 Comm: kworker/u9:2 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  288.158319][   T52] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  288.158328][   T52] Workqueue: writeback wb_workfn (flush-7:6)
[  288.158349][   T52] Call Trace:
[  288.158355][   T52]  <TASK>
[  288.158361][   T52]  dump_stack_lvl+0x189/0x250
[  288.158375][   T52]  ? __pfx_dump_stack_lvl+0x10/0x10
[  288.158384][   T52]  ? __pfx_queue_work_on+0x10/0x10
[  288.158392][   T52]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  288.158402][   T52]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  288.158416][   T52]  f2fs_handle_critical_error+0x37c/0x540
[  288.158429][   T52]  f2fs_write_end_io+0x886/0xb60
[  288.158444][   T52]  __submit_merged_bio+0x27a/0x6a0
[  288.158457][   T52]  __submit_merged_write_cond+0x255/0x530
[  288.158469][   T52]  f2fs_write_data_pages+0x261d/0x3000
[  288.158493][   T52]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  288.158510][   T52]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  288.158531][   T52]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  288.158546][   T52]  ? trace_f2fs_writepages+0x7f/0x200
[  288.158568][   T52]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  288.158579][   T52]  do_writepages+0x32e/0x550
[  288.158591][   T52]  ? reacquire_held_locks+0x127/0x1d0
[  288.158599][   T52]  ? writeback_sb_inodes+0x384/0x1010
[  288.158612][   T52]  __writeback_single_inode+0x145/0xff0
[  288.158621][   T52]  ? do_raw_spin_unlock+0x4d/0x240
[  288.158634][   T52]  writeback_sb_inodes+0x6c7/0x1010
[  288.158662][   T52]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  288.158701][   T52]  ? rcu_is_watching+0x15/0xb0
[  288.158718][   T52]  wb_writeback+0x43b/0xaf0
[  288.158735][   T52]  ? queue_io+0x321/0x590
[  288.158751][   T52]  ? __pfx_wb_writeback+0x10/0x10
[  288.158767][   T52]  ? _raw_spin_unlock_irq+0x23/0x50
[  288.158782][   T52]  wb_workfn+0x409/0xef0
[  288.158805][   T52]  ? __pfx_wb_workfn+0x10/0x10
[  288.158821][   T52]  ? __lock_acquire+0xab9/0xd20
[  288.158837][   T52]  ? process_scheduled_works+0x9ef/0x17b0
[  288.158853][   T52]  ? _raw_spin_unlock_irq+0x23/0x50
[  288.158873][   T52]  ? process_scheduled_works+0x9ef/0x17b0
[  288.158883][   T52]  ? process_scheduled_works+0x9ef/0x17b0
[  288.158895][   T52]  process_scheduled_works+0xae1/0x17b0
[  288.158923][   T52]  ? __pfx_process_scheduled_works+0x10/0x10
[  288.158937][   T52]  worker_thread+0x8a0/0xda0
[  288.158950][   T52]  ? __kthread_parkme+0x7b/0x200
[  288.158982][   T52]  kthread+0x711/0x8a0
[  288.158993][   T52]  ? __pfx_worker_thread+0x10/0x10
[  288.159000][   T52]  ? __pfx_kthread+0x10/0x10
[  288.159009][   T52]  ? _raw_spin_unlock_irq+0x23/0x50
[  288.159018][   T52]  ? lockdep_hardirqs_on+0x9c/0x150
[  288.159027][   T52]  ? __pfx_kthread+0x10/0x10
[  288.159036][   T52]  ret_from_fork+0x3fc/0x770
[  288.159045][   T52]  ? __pfx_ret_from_fork+0x10/0x10
[  288.159055][   T52]  ? __switch_to_asm+0x39/0x70
[  288.159064][   T52]  ? __switch_to_asm+0x33/0x70
[  288.159072][   T52]  ? __pfx_kthread+0x10/0x10
[  288.159081][   T52]  ret_from_fork_asm+0x1a/0x30
[  288.159097][   T52]  </TASK>
[  288.160001][   T52] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  288.285643][T14392] VFS:Filesystem freeze failed
[  288.410159][ T2205] libceph: connect (1)[c::]:6789 error -101
[  288.416381][ T2205] libceph: mon0 (1)[c::]:6789 connect error
[  288.425503][ T2205] libceph: connect (1)[c::]:6789 error -101
[  288.428131][ T2205] libceph: mon0 (1)[c::]:6789 connect error
[  288.454142][ T2205] libceph: connect (1)[c::]:6789 error -101
[  288.461350][ T2205] libceph: mon0 (1)[c::]:6789 connect error
[  288.600814][T14426] syzkaller1: entered promiscuous mode
[  288.604606][T14426] syzkaller1: entered allmulticast mode
[  288.686680][   T24] libceph: connect (1)[c::]:6789 error -101
[  288.689743][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  288.697005][T14428] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3475'.
[  288.722449][   T24] libceph: connect (1)[c::]:6789 error -101
[  288.725345][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  289.224345][   T24] libceph: connect (1)[c::]:6789 error -101
[  289.228182][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  289.249480][T14443] lo speed is unknown, defaulting to 1000
[  289.252201][T14443] lo speed is unknown, defaulting to 1000
[  289.261005][T14443] lo speed is unknown, defaulting to 1000
[  289.328506][T14443] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  289.417451][T14443] lo speed is unknown, defaulting to 1000
[  289.421169][T14443] lo speed is unknown, defaulting to 1000
[  289.424968][T14443] lo speed is unknown, defaulting to 1000
[  289.428609][T14443] lo speed is unknown, defaulting to 1000
[  289.448069][   T24] libceph: connect (1)[c::]:6789 error -101
[  289.457328][T14415] ceph: No mds server is up or the cluster is laggy
[  289.461111][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  289.461264][T14418] ceph: No mds server is up or the cluster is laggy
[  289.657637][T14455] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3486'.
[  289.805665][T14463] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3490'.
[  291.611892][T14533] xt_socket: unknown flags 0x50
[  291.912502][T14560] cgroup: noprefix used incorrectly
[  291.960417][T14563] netlink: 'syz.2.3537': attribute type 5 has an invalid length.
[  292.040961][T14549] loop6: detected capacity change from 0 to 32768
[  293.457086][T14596] loop6: detected capacity change from 0 to 32768
[  293.553284][T14596] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  293.553298][T14596]   allowing incompatible features above 0.0: (unknown version)
[  293.553303][T14596]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  293.568671][T14596] bcachefs (loop6): Using encoding defined by superblock: utf8-12.1.0
[  293.571667][T14596] bcachefs (loop6): initializing new filesystem
[  293.579402][T14596] bcachefs (loop6): going read-write
[  294.084906][T14596] bcachefs (loop6): marking superblocks
[  294.098360][T14596] bcachefs (loop6): initializing freespace
[  294.105326][T14596] bcachefs (loop6): done initializing freespace
[  294.109269][T14596] bcachefs (loop6): reading snapshots table
[  294.111633][T14596] bcachefs (loop6): reading snapshots done
[  294.145698][T14596] bcachefs (loop6): done starting filesystem
[  294.295114][T12610] bcachefs (loop6): shutting down
[  294.305310][T12610] bcachefs (loop6): going read-only
[  294.307696][T12610] bcachefs (loop6): finished waiting for writes to stop
[  294.318848][T12610] bcachefs (loop6): flushing journal and stopping allocators, journal seq 2
[  294.396498][T12610] bcachefs (loop6): flushing journal and stopping allocators complete, journal seq 3
[  294.403770][T12610] bcachefs (loop6): clean shutdown complete, journal seq 4
[  294.406707][T12610] bcachefs (loop6): marking filesystem clean
[  294.426015][T12610] bcachefs (loop6): shutdown complete
[  294.972013][T14644] netlink: 'syz.2.3565': attribute type 21 has an invalid length.
[  295.967044][ T5848] Bluetooth: hci0: link tx timeout
[  295.970552][ T5848] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  295.976069][   T54] Bluetooth: hci0: link tx timeout
[  295.978142][   T54] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  295.983456][   T54] Bluetooth: hci0: link tx timeout
[  295.985793][   T54] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  295.989998][   T54] Bluetooth: hci0: link tx timeout
[  295.993651][   T54] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  295.996852][   T54] Bluetooth: hci0: link tx timeout
[  295.999064][   T54] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  296.002571][   T54] Bluetooth: hci0: link tx timeout
[  296.004834][   T54] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  296.007960][   T54] Bluetooth: hci0: link tx timeout
[  296.009961][   T54] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  296.013915][   T54] Bluetooth: hci0: link tx timeout
[  296.015947][   T54] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  296.019145][   T54] Bluetooth: hci0: link tx timeout
[  296.025017][   T54] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  296.294221][   T33] audit: type=1326 audit(1755280907.155:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14670 comm="syz.4.3576" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758cd8ebe9 code=0x7fc00000
[  296.308646][   T33] audit: type=1326 audit(1755280907.155:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14670 comm="syz.4.3576" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f758cd8ebe9 code=0x7fc00000
[  296.318354][   T33] audit: type=1326 audit(1755280907.155:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14670 comm="syz.4.3576" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758cd8ebe9 code=0x7fc00000
[  296.327715][   T33] audit: type=1326 audit(1755280907.155:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14670 comm="syz.4.3576" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758cd8ebe9 code=0x7fc00000
[  296.338654][   T33] audit: type=1326 audit(1755280907.155:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14670 comm="syz.4.3576" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758cd8ebe9 code=0x7fc00000
[  296.667061][   T33] audit: type=1326 audit(1755280907.155:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14670 comm="syz.4.3576" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758cd8ebe9 code=0x7fc00000
[  296.674803][   T33] audit: type=1326 audit(1755280907.155:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14670 comm="syz.4.3576" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758cd8ebe9 code=0x7fc00000
[  296.682281][   T33] audit: type=1326 audit(1755280907.155:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14670 comm="syz.4.3576" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758cd8ebe9 code=0x7fc00000
[  296.689582][   T33] audit: type=1326 audit(1755280907.155:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14670 comm="syz.4.3576" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758cd8ebe9 code=0x7fc00000
[  296.697532][   T33] audit: type=1326 audit(1755280907.155:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14670 comm="syz.4.3576" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758cd8ebe9 code=0x7fc00000
[  296.731980][T14704] netdevsim netdevsim2: Firmware load for '../file0/../file0/../file0' refused, path contains '..' component
[  297.676351][ T5910] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.774600][ T5910] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.840828][ T5910] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.918966][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  297.928773][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  297.928959][ T5910] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.934315][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  297.940192][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  297.943361][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  297.999557][T14752] lo speed is unknown, defaulting to 1000
[  298.002738][   T54] Bluetooth: hci0: command 0x0406 tx timeout
[  298.187556][T14752] chnl_net:caif_netlink_parms(): no params data found
[  298.228140][ T5910] bridge_slave_1: left allmulticast mode
[  298.230183][ T5910] bridge_slave_1: left promiscuous mode
[  298.253191][ T5910] bridge0: port 2(bridge_slave_1) entered disabled state
[  298.266931][ T5910] bridge_slave_0: left allmulticast mode
[  298.269854][ T5910] bridge_slave_0: left promiscuous mode
[  298.274249][ T5910] bridge0: port 1(bridge_slave_0) entered disabled state
[  298.707514][ T5910] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  298.713319][ T5910] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  298.718598][ T5910] bond0 (unregistering): Released all slaves
[  298.800786][T14770] netlink: 'syz.2.3617': attribute type 3 has an invalid length.
[  298.805387][T14770] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3617'.
[  298.870848][T14752] bridge0: port 1(bridge_slave_0) entered blocking state
[  298.874157][T14752] bridge0: port 1(bridge_slave_0) entered disabled state
[  298.880622][T14752] bridge_slave_0: entered allmulticast mode
[  298.893611][T14752] bridge_slave_0: entered promiscuous mode
[  298.917555][T14752] bridge0: port 2(bridge_slave_1) entered blocking state
[  298.920153][T14752] bridge0: port 2(bridge_slave_1) entered disabled state
[  298.926870][T14752] bridge_slave_1: entered allmulticast mode
[  298.929814][T14752] bridge_slave_1: entered promiscuous mode
[  299.022780][T14752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  299.028090][T14752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  299.049140][T14752] team0: Port device team_slave_0 added
[  299.055889][T14752] team0: Port device team_slave_1 added
[  299.116832][T14752] batman_adv: batadv0: Adding interface: batadv_slave_0
[  299.126962][T14752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  299.138110][T14752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  299.146868][ T5910] hsr_slave_0: left promiscuous mode
[  299.149490][ T5910] hsr_slave_1: left promiscuous mode
[  299.158909][ T5910] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  299.162015][ T5910] batman_adv: batadv0: Removing interface: batadv_slave_0
[  299.169503][ T5910] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  299.173036][ T5910] batman_adv: batadv0: Removing interface: batadv_slave_1
[  299.193273][ T5910] veth1_macvtap: left promiscuous mode
[  299.195730][ T5910] veth0_macvtap: left allmulticast mode
[  299.198130][ T5910] veth0_macvtap: left promiscuous mode
[  299.200730][ T5910] veth1_vlan: left promiscuous mode
[  299.205825][ T5910] veth0_vlan: left promiscuous mode
[  299.301801][ T5910] team0 (unregistering): Port device batadv1 removed
[  299.723130][ T5910] team0 (unregistering): Port device team_slave_1 removed
[  299.782147][ T5910] team0 (unregistering): Port device team_slave_0 removed
[  300.005043][ T5848] Bluetooth: hci2: command tx timeout
[  300.377533][T14752] batman_adv: batadv0: Adding interface: batadv_slave_1
[  300.380566][T14752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  300.396240][T14752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  300.548016][T14752] hsr_slave_0: entered promiscuous mode
[  300.551260][T14752] hsr_slave_1: entered promiscuous mode
[  300.557793][T14752] debugfs: 'hsr0' already exists in 'hsr'
[  300.573042][T14752] Cannot create hsr debugfs directory
[  300.986177][T14824] loop6: detected capacity change from 0 to 2048
[  300.997809][T14824] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  301.092014][ T5910] IPVS: stop unused estimator thread 0...
[  301.191148][T14752] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  301.197267][T14752] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  301.213312][T14752] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  301.234175][T14752] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  301.399993][T14852] trusted_key: encrypted_key: insufficient parameters specified
[  301.483506][T14752] 8021q: adding VLAN 0 to HW filter on device bond0
[  301.526868][T14859] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3643'.
[  301.537656][T14752] 8021q: adding VLAN 0 to HW filter on device team0
[  301.559801][ T3717] bridge0: port 1(bridge_slave_0) entered blocking state
[  301.562686][ T3717] bridge0: port 1(bridge_slave_0) entered forwarding state
[  301.589341][ T3717] bridge0: port 2(bridge_slave_1) entered blocking state
[  301.592462][ T3717] bridge0: port 2(bridge_slave_1) entered forwarding state
[  301.677708][T14869] loop6: detected capacity change from 0 to 512
[  301.681357][T14869] EXT4-fs: Ignoring removed bh option
[  301.692044][T14869] EXT4-fs: Ignoring removed mblk_io_submit option
[  301.719697][T14869] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  301.732809][T14869] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  301.758661][T14869] EXT4-fs error (device loop6): __ext4_get_inode_loc:4861: comm syz.6.3648: Invalid inode table block 0 in block_group 0
[  301.769187][T14869] EXT4-fs (loop6): Remounting filesystem read-only
[  301.771657][T14869] EXT4-fs (loop6): get root inode failed
[  301.776579][T14869] EXT4-fs (loop6): mount failed
[  301.924857][T14883] loop6: detected capacity change from 0 to 512
[  301.933895][T14883] EXT4-fs: Ignoring removed i_version option
[  301.946690][T14883] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  301.968481][T14883] EXT4-fs (loop6): 1 truncate cleaned up
[  301.972130][T14883] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  302.017750][T14883] EXT4-fs warning (device loop6): ext4_group_extend:1886: will only finish group (8193 blocks, 7937 new)
[  302.024951][T14752] 8021q: adding VLAN 0 to HW filter on device batadv0
[  302.032636][T14883] EXT4-fs warning (device loop6): ext4_group_extend:1891: can't read last block, resize aborted
[  302.084094][ T5848] Bluetooth: hci2: command tx timeout
[  302.109511][T12610] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  302.450281][T14752] veth0_vlan: entered promiscuous mode
[  302.459390][T14752] veth1_vlan: entered promiscuous mode
[  302.485127][T14752] veth0_macvtap: entered promiscuous mode
[  302.496787][T14752] veth1_macvtap: entered promiscuous mode
[  302.520864][T14752] batman_adv: batadv0: Interface activated: batadv_slave_0
[  302.527906][T14752] batman_adv: batadv0: Interface activated: batadv_slave_1
[  302.610465][ T5910] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  302.617217][ T5910] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  302.620640][ T5910] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  302.666058][ T5874] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  302.849370][ T3717] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  302.852722][ T3717] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  302.969613][  T732] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  303.002090][  T732] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  303.270021][T14943] dns_resolver: Unsupported content type (218)
[  303.666082][T14953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  303.720236][   T33] kauditd_printk_skb: 56 callbacks suppressed
[  303.720246][   T33] audit: type=1326 audit(1755280914.614:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14977 comm="syz.7.3676" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1dff78ebe9 code=0x0
[  304.163282][ T5848] Bluetooth: hci2: command tx timeout
[  304.629647][T14999] loop7: detected capacity change from 0 to 256
[  304.676854][T14999] exFAT-fs (loop7): error, The cluster chain has a loop
[  304.679425][T14999] exFAT-fs (loop7): failed to count the number of clusters in root
[  304.682190][T14999] exFAT-fs (loop7): failed to recognize exfat type
[  306.164940][T15043] netlink: 'syz.6.3700': attribute type 3 has an invalid length.
[  306.170735][T15043] netlink: 236 bytes leftover after parsing attributes in process `syz.6.3700'.
[  306.222076][T15046] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3702'.
[  306.250102][ T5848] Bluetooth: hci2: command tx timeout
[  306.770595][T15078] netlink: 'syz.2.3715': attribute type 13 has an invalid length.
[  306.865900][T15076] loop7: detected capacity change from 0 to 32768
[  306.883001][T15076] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  306.908437][T15078] bridge0: port 2(bridge_slave_1) entered disabled state
[  306.911870][T15078] bridge0: port 1(bridge_slave_0) entered disabled state
[  306.918054][T15076] XFS (loop7): Ending clean mount
[  306.928253][T15076] XFS (loop7): Quotacheck needed: Please wait.
[  306.971523][T15076] XFS (loop7): Quotacheck: Done.
[  306.993752][T14752] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  307.169218][T15078] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  307.189087][T15078] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  307.374784][T15096] loop7: detected capacity change from 0 to 1024
[  307.429892][T15096] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  307.461771][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  307.466276][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  307.471381][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  307.478879][ T5874] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  307.483751][T15096] EXT4-fs error (device loop7): __ext4_remount:6736: comm syz.7.3719: Abort forced by user
[  307.490030][T15096] EXT4-fs (loop7): Remounting filesystem read-only
[  307.492205][T15096] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000.
[  307.515458][T15101] af_packet: tpacket_rcv: packet too big, clamped from 4 to 4294967272. macoff=96
[  307.544774][T14752] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  307.939022][T15126] loop6: detected capacity change from 0 to 1024
[  307.949593][T15126] EXT4-fs: inline encryption not supported
[  307.960008][T15126] EXT4-fs: Ignoring removed i_version option
[  307.969287][T15126] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  307.991335][T15126] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 2: comm syz.6.3732: lblock 2 mapped to illegal pblock 2 (length 1)
[  308.001181][T15126] Quota error (device loop6): qtree_write_dquot: dquota write failed
[  308.005617][T15126] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.3732: lblock 0 mapped to illegal pblock 48 (length 1)
[  308.010949][T15126] Quota error (device loop6): v2_write_file_info: Can't write info structure
[  308.016608][T15126] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.3732: Failed to acquire dquot type 0
[  308.021444][T15126] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  308.028540][T15126] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.3732: mark_inode_dirty error
[  308.035753][T15126] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  308.039506][T15126] EXT4-fs (loop6): 1 orphan inode deleted
[  308.042290][T15126] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  308.097262][T12610] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  308.118403][   T52] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u9:2: lblock 1 mapped to illegal pblock 1 (length 1)
[  308.129286][   T52] Quota error (device loop6): remove_tree: Can't read quota data block 1
[  308.133098][   T52] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u9:2: Failed to release dquot type 0
[  308.146971][T12610] EXT4-fs error (device loop6): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0
[  308.156867][T12610] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  308.160626][T12610] EXT4-fs error (device loop6): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error
[  308.493219][T15145] ip6gre1: entered promiscuous mode
[  308.620221][T15156] loop6: detected capacity change from 0 to 1024
[  308.648092][T15156] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  308.653373][T15156] ext4 filesystem being mounted at /255/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  308.670663][T15156] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: block 3: comm syz.6.3746: lblock 3 mapped to illegal pblock 3 (length 13)
[  308.680650][T15156] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[  308.686375][T15156] EXT4-fs (loop6): This should not happen!! Data will be lost
[  308.686375][T15156] 
[  308.697193][T15156] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #15: block 3: comm syz.6.3746: lblock 3 mapped to illegal pblock 3 (length 1)
[  308.707045][T15156] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #15: block 3: comm syz.6.3746: lblock 3 mapped to illegal pblock 3 (length 1)
[  308.713395][T15156] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #15: block 3: comm syz.6.3746: lblock 3 mapped to illegal pblock 3 (length 1)
[  308.722116][T15156] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #15: block 3: comm syz.6.3746: lblock 3 mapped to illegal pblock 3 (length 1)
[  308.728836][T15156] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #15: block 3: comm syz.6.3746: lblock 3 mapped to illegal pblock 3 (length 1)
[  308.735392][T15156] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #15: block 3: comm syz.6.3746: lblock 3 mapped to illegal pblock 3 (length 1)
[  308.742185][T15156] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #15: block 3: comm syz.6.3746: lblock 3 mapped to illegal pblock 3 (length 1)
[  308.750116][T15156] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #15: block 3: comm syz.6.3746: lblock 3 mapped to illegal pblock 3 (length 1)
[  308.760133][T15159] EXT4-fs error (device loop6): ext4_ext_remove_space:2955: inode #15: comm syz.6.3746: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  308.804047][T12610] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  309.169202][   T12] bond0: (slave bond_slave_1): link status definitely down, disabling slave
[  310.227214][T15192] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3759'.
[  310.231154][T15192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3759'.
[  312.410359][T15268] netlink: 'syz.2.3790': attribute type 10 has an invalid length.
[  312.415696][T15268] veth0_vlan: left promiscuous mode
[  312.418998][T15268] veth0_vlan: entered promiscuous mode
[  312.422097][T15268] team0: Device veth0_vlan failed to register rx_handler
[  312.573652][T15279] netlink: 248 bytes leftover after parsing attributes in process `syz.7.3795'.
[  312.581544][T15279] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3795'.
[  312.640616][T15281] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  312.644028][T15281] overlayfs: failed to set xattr on upper
[  312.650996][T15281] overlayfs: ...falling back to redirect_dir=nofollow.
[  312.686485][T15285] ucma_write: process 64 (syz.7.3798) changed security contexts after opening file descriptor, this is not allowed.
[  312.871166][T15297] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3804'.
[  313.049089][T15305] loop6: detected capacity change from 0 to 4096
[  313.077373][T15305] ntfs3(loop6): ino=3, ntfs_set_state failed, -22.
[  313.081603][T15305] ntfs3(loop6): Failed to initialize $Extend/$ObjId.
[  313.918123][   T26] ntfs3(loop6): ino=3, ntfs3_write_inode failed, -22.
[  313.922394][T12610] ntfs3(loop6): ino=3, ntfs_set_state failed, -22.
[  313.925986][T12610] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  313.930277][T12610] ntfs3(loop6): ino=3, ntfs_set_state failed, -22.
[  313.934053][   T61] ntfs3(loop6): ino=3, ntfs3_write_inode failed, -22.
[  314.162174][T15332] loop6: detected capacity change from 0 to 128
[  314.316088][T15343] netlink: 'syz.2.3819': attribute type 83 has an invalid length.
[  314.393297][T15341] loop6: detected capacity change from 0 to 32768
[  314.403011][T15341] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3817 (15341)
[  314.426652][T15341] BTRFS info (device loop6): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  314.430070][T15341] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm
[  314.433216][T15341] BTRFS info (device loop6): using free-space-tree
[  314.568215][T12610] BTRFS info (device loop6): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  315.119349][T15387] loop6: detected capacity change from 0 to 512
[  315.122394][T15387] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  315.140395][T15387] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=800ec018, mo2=0082]
[  315.151415][T15387] EXT4-fs (loop6): 1 truncate cleaned up
[  315.157722][T15387] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  315.168658][   T33] audit: type=1800 audit(1755280926.063:515): pid=15387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3828" name="bus" dev="loop6" ino=18 res=0 errno=0
[  315.209613][T12610] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  315.280620][T15396] loop6: detected capacity change from 0 to 2048
[  315.309967][T15396] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  315.354036][   T52] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  315.365230][   T52] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  315.370251][   T52] EXT4-fs (loop6): This should not happen!! Data will be lost
[  315.370251][   T52] 
[  315.377933][   T52] EXT4-fs (loop6): Total free blocks count 0
[  315.380098][   T52] EXT4-fs (loop6): Free/Dirty block details
[  315.382599][   T52] EXT4-fs (loop6): free_blocks=4096
[  315.385244][   T52] EXT4-fs (loop6): dirty_blocks=512
[  315.387117][   T52] EXT4-fs (loop6): Block reservation details
[  315.389425][   T52] EXT4-fs (loop6): i_reserved_data_blocks=32
[  315.392401][   T52] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28
[  316.076900][ T5848] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  316.082643][ T5848] Bluetooth: hci2: Injecting HCI hardware error event
[  316.088913][   T54] Bluetooth: hci2: hardware error 0x00
[  316.675225][T15435] loop7: detected capacity change from 0 to 8192
[  316.708920][T13721]  loop7: AHDI p1 p2
[  316.710829][T13721] loop7: p1 size 2164260863 extends beyond EOD, truncated
[  316.729525][T15435]  loop7: AHDI p1 p2
[  316.731357][T15435] loop7: p1 size 2164260863 extends beyond EOD, truncated
[  316.815943][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  316.818427][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  316.836777][T13721] udevd[13721]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory
[  316.863993][T15440] loop7: detected capacity change from 0 to 128
[  316.930428][T15444] program syz.7.3840 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  316.968126][T15446] loop7: detected capacity change from 0 to 64
[  318.327395][   T54] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  318.341406][T15507] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  318.344704][ T2205] IPVS: starting estimator thread 0...
[  318.449327][T15510] IPVS: using max 78 ests per chain, 187200 per kthread
[  318.815614][T15534] loop6: detected capacity change from 0 to 32768
[  318.822340][T15534] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3880 (15534)
[  318.835417][T15534] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  318.839753][T15534] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm
[  318.843454][T15534] BTRFS info (device loop6): using free-space-tree
[  318.913664][T12610] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  319.580145][T15562] bond4: entered promiscuous mode
[  319.587270][T15562] bond4: entered allmulticast mode
[  319.590590][T15562] 8021q: adding VLAN 0 to HW filter on device bond4
[  320.650616][   T33] audit: type=1326 audit(1755280931.542:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15586 comm="syz.6.3897" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d91d8ebe9 code=0x7ffc0000
[  320.680128][T15589] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  320.685504][   T33] audit: type=1326 audit(1755280931.542:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15586 comm="syz.6.3897" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d91d8ebe9 code=0x7ffc0000
[  320.705427][   T33] audit: type=1326 audit(1755280931.542:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15586 comm="syz.6.3897" exe="/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f9d91d8ebe9 code=0x7ffc0000
[  320.731403][   T33] audit: type=1326 audit(1755280931.542:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15586 comm="syz.6.3897" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d91d8ebe9 code=0x7ffc0000
[  320.749798][   T33] audit: type=1326 audit(1755280931.542:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15586 comm="syz.6.3897" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d91d8ebe9 code=0x7ffc0000
[  321.180594][T15617] loop6: detected capacity change from 0 to 512
[  321.219353][T15617] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.3912: invalid indirect mapped block 4294967295 (level 1)
[  321.242566][T15617] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.3912: invalid indirect mapped block 4294967295 (level 1)
[  321.250519][T15617] EXT4-fs (loop6): 2 truncates cleaned up
[  321.254186][T15617] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  321.263518][T15617] EXT4-fs error (device loop6): empty_inline_dir:1760: inode #12: block 7: comm syz.6.3912: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=4278190093, rec_len=255, size=60 fake=0
[  321.275540][T15617] EXT4-fs warning (device loop6): empty_inline_dir:1767: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60
[  321.303218][T12610] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  321.537151][T15635] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  321.550589][T15635] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  321.731491][T15633] loop6: detected capacity change from 0 to 32768
[  321.742010][T15633] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3919 (15633)
[  321.892104][T15633] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  321.909936][T15633] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm
[  321.913445][T15633] BTRFS info (device loop6): using free-space-tree
[  322.280194][T15651] loop7: detected capacity change from 0 to 32768
[  322.301838][   T33] audit: type=1800 audit(1755280933.192:521): pid=15651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3927" name="file1" dev="loop7" ino=7 res=0 errno=0
[  322.368015][T12610] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  322.600462][T15651] ERROR: (device loop7): dbAdjCtl: the maximum free buddy is not the old root
[  322.600462][T15651] 
[  322.604998][T15651] ERROR: (device loop7): remounting filesystem as read-only
[  323.667523][T15720] loop7: detected capacity change from 0 to 32768
[  323.681522][T15720] ocfs2: Slot 0 on device (7,7) was already allocated to this node!
[  323.694648][T15720] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  323.701099][T15730] netlink: 'syz.2.3954': attribute type 1 has an invalid length.
[  323.707846][T15730] netlink: 'syz.2.3954': attribute type 1 has an invalid length.
[  323.810640][T14752] ocfs2: Unmounting device (7,7) on (node local)
[  326.711722][T15781] loop7: detected capacity change from 0 to 32768
[  326.752622][T15781] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  326.796087][T15781] XFS (loop7): Ending clean mount
[  326.825632][T14752] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  327.230081][T15805] loop7: detected capacity change from 0 to 40427
[  327.233298][T15805] F2FS-fs: Quota file already specified
[  327.284094][T15809] loop7: detected capacity change from 0 to 2048
[  327.290433][T15809] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found!
[  327.314764][T15809] UDF-fs: unknown compression code (0)
[  328.077254][T15848] loop7: detected capacity change from 0 to 128
[  328.101606][T15848] hpfs: Bad magic ... probably not HPFS
[  328.390843][T15851] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.4004'.
[  328.875001][T15862] overlayfs: failed to clone upperpath
[  330.365551][T15888] loop7: detected capacity change from 0 to 4096
[  330.379158][T15888] ntfs3: Unknown parameter 'Y'
[  330.442391][T15894] netlink: 748 bytes leftover after parsing attributes in process `syz.7.4023'.
[  330.448865][T15894] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  330.739464][T15909] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4030'.
[  330.935643][T15914] loop7: detected capacity change from 0 to 8192
[  330.998808][T15914] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 2074)
[  331.002137][T15914] FAT-fs (loop7): Filesystem has been set read-only
[  332.975504][T15934] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4040'.
[  333.251081][T15943] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.4044'.
[  333.397939][T15953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4049'.
[  334.505588][T15983] overlayfs: failed to clone upperpath
[  334.564657][T15986] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  334.700257][T15998] netlink: 'syz.6.4071': attribute type 1 has an invalid length.
[  334.702838][T15998] nbd: couldn't find device at index 20
[  335.502574][T16007] netlink: 284 bytes leftover after parsing attributes in process `syz.6.4074'.
[  336.520922][T16037] loop7: detected capacity change from 0 to 32768
[  336.701059][T16055] loop7: detected capacity change from 0 to 1024
[  336.745822][T16055] hfsplus: request for non-existent node 16777216 in B*Tree
[  336.751747][T16055] hfsplus: request for non-existent node 16777216 in B*Tree
[  336.755381][T16055] hfsplus: request for non-existent node 16777216 in B*Tree
[  336.763387][T16055] hfsplus: request for non-existent node 16777216 in B*Tree
[  336.774264][T16055] hfsplus: request for non-existent node 16777216 in B*Tree
[  336.780064][T16055] hfsplus: request for non-existent node 16777216 in B*Tree
[  336.796325][T16058] hfsplus: request for non-existent node 16777216 in B*Tree
[  336.804178][T16058] hfsplus: request for non-existent node 16777216 in B*Tree
[  336.810022][T16058] hfsplus: request for non-existent node 16777216 in B*Tree
[  336.813002][T16058] hfsplus: request for non-existent node 16777216 in B*Tree
[  336.816201][T16058] hfsplus: request for non-existent node 16777216 in B*Tree
[  336.822910][T16058] hfsplus: request for non-existent node 16777216 in B*Tree
[  336.826256][T16058] hfsplus: request for non-existent node 16777216 in B*Tree
[  336.830741][T16058] hfsplus: request for non-existent node 16777216 in B*Tree
[  336.834081][T16058] hfsplus: request for non-existent node 16777216 in B*Tree
[  336.838911][T16058] hfsplus: request for non-existent node 16777216 in B*Tree
[  336.844352][T16058] hfsplus: request for non-existent node 16777216 in B*Tree
[  336.848617][T16058] hfsplus: request for non-existent node 16777216 in B*Tree
[  336.851690][T16058] hfsplus: request for non-existent node 16777216 in B*Tree
[  336.855059][T16058] hfsplus: request for non-existent node 16777216 in B*Tree
[  336.860898][T16058] hfsplus: request for non-existent node 16777216 in B*Tree
[  336.864026][T16058] hfsplus: request for non-existent node 16777216 in B*Tree
[  336.868410][T16058] hfsplus: request for non-existent node 16777216 in B*Tree
[  336.877239][T16058] hfsplus: request for non-existent node 16777216 in B*Tree
[  336.880768][T16058] hfsplus: request for non-existent node 16777216 in B*Tree
[  336.884018][T16058] hfsplus: request for non-existent node 16777216 in B*Tree
[  336.887392][T16058] hfsplus: request for non-existent node 16777216 in B*Tree
[  336.890424][T16058] hfsplus: request for non-existent node 16777216 in B*Tree
[  336.893541][T16058] hfsplus: request for non-existent node 16777216 in B*Tree
[  336.896679][T16058] hfsplus: request for non-existent node 16777216 in B*Tree
[  336.900029][T16058] hfsplus: request for non-existent node 16777216 in B*Tree
[  336.903384][T16058] hfsplus: request for non-existent node 16777216 in B*Tree
[  336.905994][T16058] hfsplus: request for non-existent node 16777216 in B*Tree
[  336.909362][T16058] hfsplus: request for non-existent node 16777216 in B*Tree
[  336.912909][T16058] hfsplus: request for non-existent node 16777216 in B*Tree
[  336.915218][T16058] hfsplus: request for non-existent node 16777216 in B*Tree
[  336.921156][T16058] hfsplus: request for non-existent node 16777216 in B*Tree
[  336.923434][T16058] hfsplus: request for non-existent node 16777216 in B*Tree
[  336.925771][T16058] hfsplus: request for non-existent node 16777216 in B*Tree
[  336.928467][T16058] hfsplus: request for non-existent node 16777216 in B*Tree
[  336.930797][T16058] hfsplus: request for non-existent node 16777216 in B*Tree
[  336.933141][T16058] hfsplus: request for non-existent node 16777216 in B*Tree
[  336.936615][   T33] audit: type=1800 audit(1755280947.820:522): pid=16058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4096" name="file1" dev="loop7" ino=20 res=0 errno=0
[  336.991416][T16061] loop7: detected capacity change from 0 to 256
[  336.994146][T16061] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  336.999706][T16061] exFAT-fs (loop7): Medium has reported failures. Some data may be lost.
[  337.005827][T16061] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  337.075303][T16061] sd 0:0:0:0: PR command failed: 1026
[  337.077267][T16061] sd 0:0:0:0: Sense Key : Illegal Request [current] 
[  337.079391][T16061] sd 0:0:0:0: Add. Sense: Invalid command operation code
[  337.178718][T16064] loop7: detected capacity change from 0 to 4096
[  337.184160][T16064] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[  337.229326][T16064] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4099'.
[  337.380407][T16072] loop7: detected capacity change from 0 to 256
[  337.643981][T16092] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253
[  337.646508][T16092] PKCS7: Only support pkcs7_signedData type
[  337.682778][T16094] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4114'.
[  337.967046][T16106] overlayfs: failed to clone upperpath
[  338.025226][T16112] loop7: detected capacity change from 0 to 64
[  338.042653][T16112] syz.7.4123: attempt to access beyond end of device
[  338.042653][T16112] loop7: rw=2049, sector=268435468, nr_sectors = 2 limit=64
[  338.840279][T16141] netlink: 180 bytes leftover after parsing attributes in process `syz.2.4137'.
[  339.496331][T16160] loop7: detected capacity change from 0 to 256
[  339.504157][T16160] exfat: Deprecated parameter 'utf8'
[  339.506460][T16160] exfat: Deprecated parameter 'namecase'
[  339.509390][T16160] exfat: Deprecated parameter 'utf8'
[  339.511736][T16160] exfat: Deprecated parameter 'utf8'
[  339.523396][T16160] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e8072e, utbl_chksum : 0xe619d30d)
[  339.691372][T16170] loop7: detected capacity change from 0 to 16
[  339.694683][T16170] erofs (device loop7): mounted with root inode @ nid 36.
[  339.813097][    T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  339.836246][    T9] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  339.844523][T16176] loop6: detected capacity change from 0 to 128
[  340.233766][T16187] netlink: 'syz.7.4157': attribute type 2 has an invalid length.
[  340.513842][T16191] loop7: detected capacity change from 0 to 40427
[  340.529187][T16191] F2FS-fs (loop7): extra_attr or flexible_inline_xattr feature is off
[  340.752138][T16197] loop7: detected capacity change from 0 to 32768
[  340.759378][T16197] XFS: ikeep mount option is deprecated.
[  340.771542][T16197] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  340.794918][T16197] XFS (loop7): Ending clean mount
[  340.799831][T16197] XFS (loop7): Quotacheck needed: Please wait.
[  340.835411][T16197] XFS (loop7): Quotacheck: Done.
[  340.882579][T14752] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  340.999392][   T33] audit: type=1326 audit(1755280951.853:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16206 comm="syz.2.4164" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f766958ebe9 code=0x0
[  341.248234][T16221] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4170'.
[  341.253906][T16221] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  341.256936][T16221] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  342.030029][T16260] netlink: 'syz.2.4188': attribute type 5 has an invalid length.
[  342.131132][T16267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4192'.
[  342.561507][T16287] loop7: detected capacity change from 0 to 2048
[  342.588574][T16290] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  342.616931][T16290] NILFS (loop7): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  342.624121][T16290] NILFS error (device loop7): nilfs_bmap_propagate: broken bmap (inode number=4)
[  342.646632][T16290] Remounting filesystem read-only
[  342.776032][T16305] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  343.029442][T16313] sctp: [Deprecated]: syz.7.4213 (pid 16313) Use of int in max_burst socket option deprecated.
[  343.029442][T16313] Use struct sctp_assoc_value instead
[  343.580141][T16325] loop6: detected capacity change from 0 to 512
[  343.590603][T16325] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2
[  343.595219][T16325] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2
[  343.601670][T16325] EXT4-fs (loop6): 1 truncate cleaned up
[  343.608376][T16325] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  343.625159][T16325] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  343.639130][T16325] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  343.663175][T12610] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  343.855193][T16335] tmpfs: Unknown parameter 'no'
[  343.923307][T16341] netlink: 'syz.7.4227': attribute type 2 has an invalid length.
[  343.926402][T16341] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.4227'.
[  343.939108][T16341] nbd: must specify at least one socket
[  344.017980][   T33] audit: type=1804 audit(1755280954.669:524): pid=16349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4228" name="cgroup.controllers" dev="tmpfs" ino=9034 res=1 errno=0
[  344.049375][   T33] audit: type=1800 audit(1755280954.678:525): pid=16349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4228" name="cgroup.controllers" dev="tmpfs" ino=9034 res=0 errno=0
[  344.057350][   T33] audit: type=1800 audit(1755280954.678:526): pid=16349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4228" name="cgroup.controllers" dev="tmpfs" ino=9034 res=0 errno=0
[  345.430220][T16402] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4253'.
[  345.574889][T16412] netlink: 'syz.7.4259': attribute type 29 has an invalid length.
[  347.122776][T16452] gfs2: not a GFS2 filesystem
[  347.169302][T16454] loop7: detected capacity change from 0 to 256
[  347.180455][T16454] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d)
[  347.601884][T16462] loop7: detected capacity change from 0 to 4096
[  347.605964][T16462] ntfs3(loop7): Different NTFS sector size (2048) and media sector size (512).
[  347.621882][T16462] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  347.628342][T16462] ntfs3(loop7): Failed to initialize $Secure::$SII (-22).
[  347.630623][T16462] ntfs3(loop7): Failed to initialize $Secure (-22).
[  348.857514][T16516] netlink: 'syz.2.4308': attribute type 27 has an invalid length.
[  349.552225][T16523] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4310'.
[  349.976598][T16531] netlink: 'syz.2.4312': attribute type 6 has an invalid length.
[  350.163849][T16529] loop6: detected capacity change from 0 to 32768
[  350.167250][T16529] bcachefs: bch2_fs_parse_param() Error parsing option gc_reserve_bytes: option_value
[  351.412462][T16562] loop6: detected capacity change from 0 to 1024
[  351.436151][T16562] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  351.471457][T12610] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  351.737948][T16584] netlink: 'syz.2.4335': attribute type 2 has an invalid length.
[  352.998164][T16607] loop6: detected capacity change from 0 to 32768
[  353.007863][T16607] XFS: attr2 mount option is deprecated.
[  353.083730][T16607] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  353.173725][T16607] XFS (loop6): Ending clean mount
[  353.177947][T16607] XFS (loop6): Quotacheck needed: Please wait.
[  353.223070][T16607] XFS (loop6): Quotacheck: Done.
[  353.287378][T12610] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  353.595895][T16640] .: renamed from bond0 (while UP)
[  353.835758][T16654] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.4362'.
[  354.154713][T16650] loop7: detected capacity change from 0 to 32768
[  354.202038][T16650] find_entry called with index >= next_index
[  354.204341][T16650] find_entry called with index >= next_index
[  354.206494][T16650] find_entry called with index >= next_index
[  354.218962][T16650] ERROR: (device loop7): jfs_readdir: JFS:Dtree error: ino = 2, bn=48, index = 1
[  354.218962][T16650] 
[  354.251788][T16650] ERROR: (device loop7): remounting filesystem as read-only
[  354.254723][T16650] ERROR: (device loop7): jfs_readdir: JFS:Dtree error: ino = 2, bn=48, index = 3
[  354.254723][T16650] 
[  354.271197][T16650] ERROR: (device loop7): jfs_readdir: JFS:Dtree error: ino = 2, bn=48, index = 4
[  354.271197][T16650] 
[  354.320591][T16663] lo speed is unknown, defaulting to 1000
[  354.715752][T16668] loop7: detected capacity change from 0 to 512
[  354.722589][T16668] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  354.755080][T16668] EXT4-fs error (device loop7): ext4_iget_extra_inode:5104: inode #15: comm syz.7.4367: corrupted in-inode xattr: e_value out of bounds
[  354.760718][T16668] EXT4-fs (loop7): Remounting filesystem read-only
[  354.772666][T16668] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  354.854463][T14752] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  355.703574][T16698] 9pnet: Could not find request transport: f0xffffffffffffffff0xffffffffffffffffWN%/`ְfp7.O3̒0͹:xޙS
[  357.130544][T16728] team0: entered allmulticast mode
[  357.132807][T16728] team_slave_0: entered allmulticast mode
[  357.135339][T16728] team_slave_1: entered allmulticast mode
[  357.139196][T16728] dummy0: entered allmulticast mode
[  357.142600][T16728] syz_tun: entered allmulticast mode
[  357.145823][T16728] team0: left allmulticast mode
[  357.150881][T16728] team_slave_0: left allmulticast mode
[  357.152729][T16728] team_slave_1: left allmulticast mode
[  357.155763][T16728] dummy0: left allmulticast mode
[  357.157501][T16728] syz_tun: left allmulticast mode
[  357.173858][T16726] lo speed is unknown, defaulting to 1000
[  357.643315][T16737] loop6: detected capacity change from 0 to 32768
[  357.672322][T16737] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  357.701002][T16737] XFS (loop6): Ending clean mount
[  357.711747][T16737] XFS (loop6): Quotacheck needed: Please wait.
[  357.732684][T16758] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  357.739352][T16758] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  357.789107][T16737] XFS (loop6): Quotacheck: Done.
[  357.835770][T12610] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  357.850905][T16762] loop7: detected capacity change from 0 to 2048
[  357.935737][T16762] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  358.434301][T16771] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4406'.
[  358.669749][T16769] bond2: entered promiscuous mode
[  358.672189][T16769] 8021q: adding VLAN 0 to HW filter on device bond2
[  359.028392][T16779] loop7: detected capacity change from 0 to 128
[  359.079100][T16779] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  359.091382][T16779] ext4 filesystem being mounted at /239/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  359.145279][T16779] fscrypt (loop7, inode 12): Unsupported encryption flags (0x08)
[  359.536750][T16785] random: crng reseeded on system resumption
[  359.848171][T16792] loop6: detected capacity change from 0 to 2048
[  359.923204][T14752] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  360.104524][T16801] loop6: detected capacity change from 0 to 2048
[  360.108761][T16801] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  360.112365][T16801] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found
[  360.114837][T16801] UDF-fs: Scanning with blocksize 512 failed
[  360.125875][T16801] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  360.169266][T16803] loop6: detected capacity change from 0 to 64
[  360.287249][T16809] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4421'.
[  360.292874][T16809] veth0_to_bond: entered allmulticast mode
[  360.484300][T16813] loop6: detected capacity change from 0 to 32768
[  360.500564][T16813] jfs_lookup: iget failed on inum 4
[  360.503768][T16813] jfs_lookup: iget failed on inum 4
[  360.942001][T16826] loop6: detected capacity change from 0 to 32768
[  360.948038][T16826] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.4429 (16826)
[  360.967003][T16826] BTRFS info (device loop6): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  360.970944][T16826] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm
[  360.985384][T16826] BTRFS info (device loop6): using free-space-tree
[  361.136504][T12610] BTRFS info (device loop6): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  361.546812][T16855] loop6: detected capacity change from 0 to 32768
[  361.554089][T16855] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.4435 (16855)
[  361.565563][T16855] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  361.569960][T16855] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm
[  361.573792][T16855] BTRFS info (device loop6): using free-space-tree
[  361.741591][T12610] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  362.158627][T16897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4448'.
[  362.166760][T16897] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4448'.
[  363.222686][T16924] ./file0: Can't open blockdev
[  363.271002][T16926] loop7: detected capacity change from 0 to 2048
[  363.280974][T16926] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024)
[  363.287731][T16926] NILFS (loop7): mounting unchecked fs
[  363.287737][T13721] udevd[13721]: incorrect nilfs2 checksum on /dev/loop7
[  363.296493][T13721] udevd[13721]: incorrect nilfs2 checksum on /dev/loop7
[  363.302904][T16926] NILFS (loop7): recovery complete
[  363.306230][T16927] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  363.325793][T16926] NILFS error (device loop7): nilfs_readdir: zero-length directory entry
[  363.342844][T16926] Remounting filesystem read-only
[  363.364996][T14752] NILFS (loop7): disposed unprocessed dirty file(s) when detaching log writer
[  363.661533][T16931] loop7: detected capacity change from 0 to 32768
[  365.028121][T16949] syz.7.4472: attempt to access beyond end of device
[  365.028121][T16949] nbd7: rw=0, sector=2, nr_sectors = 2 limit=0
[  365.032602][T16949] syz.7.4472: attempt to access beyond end of device
[  365.032602][T16949] nbd7: rw=0, sector=16, nr_sectors = 2 limit=0
[  366.116893][T16982] loop6: detected capacity change from 0 to 1024
[  366.164224][T16982] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  366.262197][T16982] EXT4-fs (loop6): shut down requested (2)
[  366.322970][T12610] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  366.699541][T17004] loop7: detected capacity change from 0 to 256
[  366.887376][T17008] loop7: detected capacity change from 0 to 32768
[  366.902894][T17008] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.4497 (17008)
[  366.920162][T17008] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  366.924217][T17008] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm
[  366.927426][T17008] BTRFS info (device loop7): using free-space-tree
[  366.987358][T17008] BTRFS info (device loop7): rebuilding free space tree
[  367.055891][T17038] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4504'.
[  367.058514][T14752] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  367.059651][T17038] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  367.575758][T17069] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4516'.
[  368.826962][T17091] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4526'.
[  369.194764][   T33] audit: type=1326 audit(1755280978.213:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17107 comm="syz.2.4534" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f766958ebe9 code=0x7ffc0000
[  369.204507][   T33] audit: type=1326 audit(1755280978.213:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17107 comm="syz.2.4534" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f766958ebe9 code=0x7ffc0000
[  369.217287][   T33] audit: type=1326 audit(1755280978.213:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17107 comm="syz.2.4534" exe="/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f766958ebe9 code=0x7ffc0000
[  369.226323][   T33] audit: type=1326 audit(1755280978.213:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17107 comm="syz.2.4534" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f766958ebe9 code=0x7ffc0000
[  369.236316][   T33] audit: type=1326 audit(1755280978.213:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17107 comm="syz.2.4534" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f766958ebe9 code=0x7ffc0000
[  370.071019][T17125] mmap: syz.2.4542 (17125): VmData 37470208 exceed data ulimit 9868. Update limits or use boot option ignore_rlimit_data.
[  370.637423][T17145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4552'.
[  371.018050][T17157] loop7: detected capacity change from 0 to 32768
[  371.036336][T17157] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.4558 (17157)
[  371.071653][T17157] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  371.076199][T17157] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm
[  371.086400][T17157] BTRFS info (device loop7): disk space caching is enabled
[  371.091836][T17157] BTRFS warning (device loop7): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  371.170370][T17157] BTRFS info (device loop7): rebuilding free space tree
[  371.206257][T17157] BTRFS info (device loop7): disabling free space tree
[  371.209341][T17157] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  371.214892][T17157] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  371.235541][   T33] audit: type=1800 audit(1755280980.121:532): pid=17157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4558" name="bus" dev="loop7" ino=263 res=0 errno=0
[  371.320327][T14752] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  371.501882][T17189] netlink: 112 bytes leftover after parsing attributes in process `syz.7.4566'.
[  371.507644][T17189] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  371.550624][T17191] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  371.880509][T17197] loop7: detected capacity change from 0 to 32768
[  371.893746][T17197] bcachefs (/dev/loop7): error validating superblock: Invalid superblock section members_v1: device 0: too many buckets (got 16981954538416098692, max 2147483583)
[  371.893746][T17197] members_v1 (size 152):
[  371.893746][T17197] Device:                        0
[  371.893746][T17197]   Label:                       invalid label 98
[  371.893746][T17197]   UUID:                        88000000-0000-0000-7af6-772b00de4159
[  371.893746][T17197]   Size:                        0
[  371.893746][T17197]   read errors:                 0
[  371.893746][T17197]   write errors:                0
[  371.893746][T17197]   checksum errors:             0
[  371.893746][T17197]   seqread iops:                1611530240
[  371.893746][T17197]   seqwrite iops:               0
[  371.893746][T17197]   randread iops:               0
[  371.893746][T17197]   randwrite iops:              0
[  371.893746][T17197]   Bucket size:                 0
[  371.893746][T17197]   First bucket:                128
[  371.893746][T17197]   Buckets:                     16981954538416098692
[  371.893746][T17197]   Last mount:                  34376515584
[  371.893746][T17197]   Last superblock write:       0
[  371.893746][T17197]   State:                       spare
[  371.893746][T17197]   Data allowed:                free,sb,journal
[  371.893746][T17197]   Has data:                    journal,btree,user
[  371.893746][T17197]   Btree allocated bitmap blocksize:1
[  371.893746][T17197]   Btree allocated bitmap:      00000000000000000
[  371.893885][T17197] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  372.069506][T17205] loop7: detected capacity change from 0 to 2048
[  372.074330][T17205] EXT4-fs: Ignoring removed mblk_io_submit option
[  372.077149][T17205] EXT4-fs: Ignoring removed bh option
[  372.090550][T17205] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  372.108117][T17205] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  372.116655][T17205] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 155 with max blocks 1 with error 28
[  372.122123][T17205] EXT4-fs (loop7): This should not happen!! Data will be lost
[  372.122123][T17205] 
[  372.126822][T17205] EXT4-fs (loop7): Total free blocks count 0
[  372.129448][T17205] EXT4-fs (loop7): Free/Dirty block details
[  372.131928][T17205] EXT4-fs (loop7): free_blocks=2415919104
[  372.134484][T17205] EXT4-fs (loop7): dirty_blocks=32
[  372.137763][T17205] EXT4-fs (loop7): Block reservation details
[  372.140631][T17205] EXT4-fs (loop7): i_reserved_data_blocks=2
[  372.168043][   T26] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  372.453721][T17218] loop7: detected capacity change from 0 to 512
[  372.460598][T17218] EXT4-fs: Ignoring removed nobh option
[  372.489552][T17218] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.4579: iget: bad i_size value: 38620345925642
[  372.493959][T17218] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.4579: couldn't read orphan inode 15 (err -117)
[  372.500040][T17218] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  372.533415][T14752] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  372.936696][   T33] audit: type=1800 audit(1755280981.702:533): pid=17240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4588" name="bus" dev="ramfs" ino=38807 res=0 errno=0
[  373.082332][T17247] netlink: 'syz.2.4591': attribute type 16 has an invalid length.
[  373.085177][T17247] netlink: 'syz.2.4591': attribute type 17 has an invalid length.
[  373.115663][T17249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4592'.
[  373.609626][T17269] netlink: 'syz.6.4601': attribute type 21 has an invalid length.
[  373.615080][T17269] netlink: 'syz.6.4601': attribute type 6 has an invalid length.
[  373.617946][T17269] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4601'.
[  374.887952][T17302] netlink: 'syz.2.4614': attribute type 1 has an invalid length.
[  374.906921][T17302] 8021q: adding VLAN 0 to HW filter on device bond5
[  374.981510][T17302] team0: Port device dummy0 removed
[  374.988111][T17302] bond5: (slave dummy0): making interface the new active one
[  374.994579][T17302] bond5: (slave dummy0): Enslaving as an active interface with an up link
[  375.089285][T17312] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  375.094919][T17312] bond0: (slave lo): Error: Device can not be enslaved while up
[  375.504502][T17325] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4624'.
[  376.000709][T17329] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4626'.
[  376.877482][T17372] loop6: detected capacity change from 0 to 512
[  376.887679][T17372] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  376.916948][T17372] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  376.944534][T12610] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  376.963340][T17381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4651'.
[  376.994703][T17383] can0: slcan on ttyS3.
[  377.044085][T17383] can0 (unregistered): slcan off ttyS3.
[  377.065148][T17383] can0: slcan on ttyS3.
[  377.145887][T17387] netlink: 'syz.6.4653': attribute type 5 has an invalid length.
[  377.572404][T17397] program syz.6.4655 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  377.598842][T17353] can0 (unregistered): slcan off ttyS3.
[  377.766876][T17412] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI
[  377.770974][T17412] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  377.773827][T17412] CPU: 0 UID: 0 PID: 17412 Comm: syz.7.4660 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  377.779305][T17412] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  377.783462][T17412] RIP: 0010:__xfrm_state_insert+0x1011/0x1450
[  377.785808][T17412] Code: 18 00 74 08 4c 89 ef e8 8d 42 02 f8 4d 89 65 00 41 80 3c 1e 00 74 08 48 89 ef e8 8a 41 02 f8 4c 8b 75 00 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 61 42 02 f8 4d 89 2e 41 80 3c 1f 00
[  377.791866][T17412] RSP: 0018:ffffc9000783f0e8 EFLAGS: 00010246
[  377.794174][T17412] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000080000
[  377.797360][T17412] RDX: ffffc9000abb9000 RSI: 0000000000000445 RDI: 0000000000000446
[  377.800352][T17412] RBP: ffff88803bd05fb0 R08: ffff888109bc9cc0 R09: 0000000000000002
[  377.803424][T17412] R10: 000000000000000a R11: 0000000000000002 R12: ffff88803bd07aa8
[  377.806550][T17412] R13: ffff88803bd05fa8 R14: 0000000000000000 R15: 1ffff110077a0f56
[  377.809806][T17412] FS:  00007f1e005116c0(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  377.813659][T17412] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  377.816479][T17412] CR2: 0000200000000300 CR3: 0000000120a3c000 CR4: 00000000000006f0
[  377.819845][T17412] Call Trace:
[  377.820930][T17412]  <TASK>
[  377.821931][T17412]  ? xfrm_state_insert+0x44/0x60
[  377.823728][T17412]  xfrm_state_insert+0x54/0x60
[  377.825478][T17412]  ipcomp4_init_state+0x673/0xb20
[  377.827270][T17412]  __xfrm_init_state+0xa76/0x13f0
[  377.829027][T17412]  ? __xfrm_init_state+0x7ef/0x13f0
[  377.831086][T17412]  xfrm_add_sa+0x2f5b/0x4070
[  377.832964][T17412]  ? __pfx_xfrm_add_sa+0x10/0x10
[  377.834928][T17412]  ? apparmor_capable+0x137/0x1b0
[  377.836909][T17412]  ? __nla_parse+0x40/0x60
[  377.838644][T17412]  xfrm_user_rcv_msg+0x7a3/0xab0
[  377.840528][T17412]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  377.842375][T17412]  ? __pfx___mutex_trylock_common+0x10/0x10
[  377.844817][T17412]  ? rcu_is_watching+0x15/0xb0
[  377.846658][T17412]  ? trace_contention_end+0x39/0x120
[  377.848724][T17412]  ? __mutex_lock+0x335/0x1360
[  377.850477][T17412]  netlink_rcv_skb+0x208/0x470
[  377.852170][T17412]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  377.853991][T17412]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  377.855786][T17412]  ? netlink_deliver_tap+0x2e/0x1b0
[  377.857695][T17412]  ? netlink_deliver_tap+0x2e/0x1b0
[  377.859718][T17412]  xfrm_netlink_rcv+0x79/0x90
[  377.861756][T17412]  netlink_unicast+0x82f/0x9e0
[  377.863818][T17412]  ? __pfx_netlink_unicast+0x10/0x10
[  377.866060][T17412]  ? netlink_sendmsg+0x642/0xb30
[  377.868133][T17412]  ? skb_put+0x11b/0x210
[  377.869955][T17412]  netlink_sendmsg+0x805/0xb30
[  377.872072][T17412]  ? __pfx_netlink_sendmsg+0x10/0x10
[  377.874327][T17412]  ? aa_sock_msg_perm+0xf1/0x1d0
[  377.876421][T17412]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  377.878541][T17412]  ? __pfx_netlink_sendmsg+0x10/0x10
[  377.880719][T17412]  __sock_sendmsg+0x21c/0x270
[  377.882582][T17412]  ____sys_sendmsg+0x505/0x830
[  377.884674][T17412]  ? __pfx_____sys_sendmsg+0x10/0x10
[  377.886492][T17412]  ? import_iovec+0x74/0xa0
[  377.888084][T17412]  ___sys_sendmsg+0x21f/0x2a0
[  377.889674][T17412]  ? __pfx____sys_sendmsg+0x10/0x10
[  377.891378][T17412]  ? __fget_files+0x2a/0x420
[  377.892931][T17412]  ? __fget_files+0x3a0/0x420
[  377.894973][T17412]  __x64_sys_sendmsg+0x19b/0x260
[  377.896694][T17412]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  377.898453][T17412]  ? rcu_is_watching+0x15/0xb0
[  377.900059][T17412]  ? do_syscall_64+0xbe/0x3b0
[  377.901647][T17412]  do_syscall_64+0xfa/0x3b0
[  377.903243][T17412]  ? lockdep_hardirqs_on+0x9c/0x150
[  377.904922][T17412]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.907328][T17412]  ? exc_page_fault+0x9f/0xf0
[  377.908960][T17412]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.911167][T17412] RIP: 0033:0x7f1dff78ebe9
[  377.912693][T17412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  377.919096][T17412] RSP: 002b:00007f1e00511038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  377.921908][T17412] RAX: ffffffffffffffda RBX: 00007f1dff9b5fa0 RCX: 00007f1dff78ebe9
[  377.924547][T17412] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003
[  377.927170][T17412] RBP: 00007f1dff811e19 R08: 0000000000000000 R09: 0000000000000000
[  377.930220][T17412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  377.933282][T17412] R13: 00007f1dff9b6038 R14: 00007f1dff9b5fa0 R15: 00007ffdbdb38638
[  377.936101][T17412]  </TASK>
[  377.937360][T17412] Modules linked in:
[  377.938992][T17412] ---[ end trace 0000000000000000 ]---
[  377.941043][T17412] RIP: 0010:__xfrm_state_insert+0x1011/0x1450
[  377.943274][T17412] Code: 18 00 74 08 4c 89 ef e8 8d 42 02 f8 4d 89 65 00 41 80 3c 1e 00 74 08 48 89 ef e8 8a 41 02 f8 4c 8b 75 00 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 61 42 02 f8 4d 89 2e 41 80 3c 1f 00
[  377.950465][T17412] RSP: 0018:ffffc9000783f0e8 EFLAGS: 00010246
[  377.952712][T17412] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000080000
[  377.955529][T17412] RDX: ffffc9000abb9000 RSI: 0000000000000445 RDI: 0000000000000446
[  377.958583][T17412] RBP: ffff88803bd05fb0 R08: ffff888109bc9cc0 R09: 0000000000000002
[  377.961641][T17412] R10: 000000000000000a R11: 0000000000000002 R12: ffff88803bd07aa8
[  377.964804][T17412] R13: ffff88803bd05fa8 R14: 0000000000000000 R15: 1ffff110077a0f56
[  377.967790][T17412] FS:  00007f1e005116c0(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  377.970831][T17412] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  377.972987][T17412] CR2: 0000200000000300 CR3: 0000000120a3c000 CR4: 00000000000006f0
[  377.975548][T17412] Kernel panic - not syncing: Fatal exception in interrupt
[  377.978550][T17412] Kernel Offset: disabled
[  377.980008][T17412] Rebooting in 86400 seconds..

VM DIAGNOSIS:
17:59:28  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000000 RDX=00000000000003f9
RSI=0000000000001645 RDI=0000000000001646 RBP=00000000000003f9 RSP=ffffc9000783e870
R8 =0000000000000001 R9 =0000000000000000 R10=dffffc0000000000 R11=ffffffff854f0370
R12=dffffc0000000000 R13=dffffc0000000000 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854f03ec RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f1e005116c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000300 CR3=0000000120a3c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f1dff987498 00007f1dff987470 XMM03=00007f1dff9874a8 00007f1dff9874a0
XMM04=00007f1e004ed100 00007f1dff987460 XMM05=00007f1dff987478 00007f1dff9874c0
XMM06=00007f1dff9874b8 00007f1dff9874b0 XMM07=00007f1dff9874a8 00007f1dff9874a0
XMM08=0000000000000000 00007f1dff812ee7 XMM09=0000000000000000 00007f1dff812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=ffff88802bca6140 RCX=ffffffff8b7bee5c RDX=0000000000000000
RSI=0000000000000004 RDI=ffff88802bca6140 RBP=ffffc900001e09b8 RSP=ffffc900001e0888
R8 =ffff88802bca6143 R9 =1ffff11005794c28 R10=dffffc0000000000 R11=ffffed1005794c29
R12=1ffff9200003c120 R13=0000000000000001 R14=ffffc900001e0920 R15=1ffff11005794c28
RIP=ffffffff82230100 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f4e99cfe380 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005555653e2588 CR3=00000000357bc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f XMM01=0000000000000000 0000000000000000
XMM02=ffff000000000000 ffffffffffffff00 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
