last executing test programs:

2.261253733s ago: executing program 2 (id=407):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000004a"], 0x1c}}, 0x0)

2.260869113s ago: executing program 2 (id=408):
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x1}}, './file3\x00'})
read$FUSE(r0, &(0x7f00000014c0)={0x2020}, 0x2020)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000013c0)=ANY=[@ANYBLOB='active_logs=4,nocheckpoint_merge,nodiscard,fsync_mode=posix,background_gc=sync,fault_injection=00000000000000000016,discard,noacl,noinline_dentry,alloc_mode=default,noextent_cache,active_logs=2,fault_type=00000000000000303444,\x00', @ANYRESDEC=0x0], 0x1, 0x5514, &(0x7f0000005880)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0xbe, 0x0, &(0x7f00000007c0))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x442, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0)
syz_mount_image$exfat(0x0, &(0x7f0000000540)='./bus\x00', 0x38c180a, 0x0, 0x0, 0x0, &(0x7f0000000240))
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x20fffe82)
fallocate(r1, 0x0, 0xa20, 0x8000c65)

1.958482797s ago: executing program 2 (id=409):
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, 0x0)
r2 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, <r3=>r1})
fchmod(r3, 0x82)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x3, &(0x7f0000000180)=0x1, 0x4)
socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r5, 0x0, 0x0)
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53})
ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x12)
ioctl$UI_SET_SNDBIT(r7, 0x4004556a, 0x7)
ioctl$UI_DEV_CREATE(r7, 0x5501)

1.441174166s ago: executing program 2 (id=413):
ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, 0x0)

1.378479713s ago: executing program 2 (id=414):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000004a"], 0x1c}}, 0x0)

1.321496206s ago: executing program 2 (id=415):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000b40)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="000b02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f00000004c0)={0x20, 0x5, 0x1, 's'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

521.152093ms ago: executing program 0 (id=431):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x1, 0x20, 0x5, 0x80, {{0x20, 0x4, 0x3, 0x3d, 0x80, 0x66, 0x0, 0x9, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}, @multicast2, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @end, @timestamp_addr={0x44, 0x2c, 0x48, 0x1, 0x2, [{@multicast1, 0x857e}, {@dev={0xac, 0x14, 0x14, 0x25}, 0xffff}, {@remote, 0x40}, {@remote, 0x5}, {@private=0xa010102, 0x6}]}, @timestamp_prespec={0x44, 0x34, 0x71, 0x3, 0x4, [{@broadcast, 0x7ff}, {@multicast1, 0x5}, {@loopback}, {@local, 0x387b}, {@dev={0xac, 0x14, 0x14, 0x39}, 0xa9}, {@empty, 0x91}]}]}}}}})
r1 = socket(0x10, 0x803, 0x0)
getsockname$packet(r1, 0x0, &(0x7f0000000200))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

461.310806ms ago: executing program 1 (id=432):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001540)={0x70, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x11, 0x0, 0x1, [@generic="25b57efaa223b473fe7783bc4a506cf756740574b89d316af9b5963870ef3391f3ac176f88d6e1db9b2bb2e5c90fafb663cdebaede447dc8f6f61c6615fcf740adda4853b2d23adb37"]}, @typed={0xc, 0x5, 0x0, 0x0, @u64=0x5}]}, 0x70}}, 0x0)

461.16733ms ago: executing program 1 (id=433):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0)
clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xfffffffffffffffd, 0x4000000000008a, 0xff, 0x2000000000009, 0x4, 0x43, 0x52e6ac5d, 0x2000ffffffff, 0x9655, 0xffdffffffffffffe, 0xa, 0x9, 0x5, 0x8, 0x4, 0xcc3, 0x1, 0x85, 0x17, 0x3, 0x100000000, 0x8, 0x200000005, 0xfffffffffffffffe, 0x3, 0xa})

401.157643ms ago: executing program 0 (id=434):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94)

400.827228ms ago: executing program 1 (id=435):
creat(&(0x7f0000000380)='./file0\x00', 0x206)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r1, 0xe503, 0x0)
syz_fuse_handle_req(r1, &(0x7f0000002100)="a95ee66af223165fb85c7a063307d28ba66dd294927c55081f5012d8223e0c009905bba59fcad5c499ccbc3ecf96e9d6ab31713938d657bc1cdd65b0a8c5fbba04f0e4926fc32fede46dcf41865bc66b2b1b353824177c6ad6f47ead9c18951b761a2bf0f17b779c4ade8a3100cdb3f4925ce68a944881cad07ce81e6d4ffd31847a0453b3ce672102b33f5c46bab37c7fb678ba1908052334b225eea595ea982901991c169eb4e0fc23b2a45018e1544c308724adc81d1d22c012fe67aebc0d3157170f2a5eb586f9af8bd80fae3bc2e9bbd9b51a9c32fbc467e2b0a0a840b765938728ba3f6902046443434e9c8a539dbce61dd8fb0e6813208877ac1fc45e9fa75ea6c5e7dc23acf9bf14523cc47de600ab3807ae8162eda1c66cf41d61386817d1483e63591002fabca6c9c1b5201974ea2b404dd54d80e24beadcc9048059c4cb26225eb2ade9e189a1ff40fa7cbb917aab58dcda7cf32bf8ac69a4faaf3a67e06e8736f92700608e1bc38d092a18d914881fd0a17e65d465f0c3cbeb987ae1fda981203d792fe5708993cdf5648f94cf23024caa3fc99d7fe6a6a434d5dab60192987ec3f55bedb08c40078e2f5e1c9e0b033f48ee56d00336f997c17a2f976d57193ec8b3132e8ee249c3dcba95e737127c7e2cd8cd6eea30688d627637e82c27b26110c0c61631d0fe0eb8c600023e8e4f0fe495a8666baa4e3cf9de28e4d95d7b7edea0d8f1b19fcff477164bf6abb3d28485398e02dc4b003de2046aa16a808c077f59a35c0ee44d5e6958b57b60b5fe2980cb0f870395c904e735f7c726d48de3bc2b558bce111f913cbdc65e9a6fdd51f0cb6079a4e6048c61a4dba2fc6cce6e3b93d86e312bb43c30a01c0cfc72ebdc3e18781238b159d08ea32fd37fb352f5943b4a22133586ada296c9ec1a3580d9dd59569496194e8f87f95474263ee6313a8eac98de06426c0f5ff00fee25a915e899e9d99b4ca4d52204498a0c8f877adb92cce1010403ad8c53d6162202a09a099930fc4dfb3246f46134993aeae1e49f2e8b0ccb30ea1b09e12dafa24530b8844473ec04d666e8a7e1c89a1f552d04efe1b85a0bbcc33091460faf098625999c0061eaef184e8b02a96e6206d512870a7fe819dbebf93c00ccbf4357841dbe0343c0850cae8d8d15cfeb3da41bf5682c842f53ca5131545784f1dee5ffcf9b4ccf4cdd037a31e4efdb6524056057ba749cc4208df722c80948a486da031a50d129349fda2549157499b8ee553bd545ec411334b902720ef0a71819ffbf002742151d950df0fe8b2efb5a94133d943286c73adf359659480c438bcf1f7f1bc1ad2dbaa54548aa3d1b4ac7d17e755ca23de9f978f45edaaeff3ade5d122c6029f8406732d1c5cfef450635d3bfa323dd14397fa085e1c928ab84f604bd3c378b2368cb0bf371d41ff1e4982e413bc3f3aedf32237845def41805fe66a5239475f246b1bc91045384aac0dd7c0723c5ed4cb02ff0cd39db2b469790a57582543e5fd8edd24944795cb237b5ec6b09e62e7ec95af1560bbd455416d22accf42ad9fdd5eb9afe198e2a327f69ca3b617eae3c24c0fd7dd36fa9fb3bd111d8d7e5dcf3039fa06b8e3405cc73e90f07660b9aa9748643832784b36d2a1418a453645610fcc816c983065a44e86f3fed8ca3bd5397a1eba72c813a49f45af504f18e85fde740dfc63922baece7e5873beded5755869bebd1f984dade3856c34369529bbab5fc32294d2f68512f0d5d116521f56443637b67587372850ff34f093f7c00376bcd15b9d470502200f91d42a46e711ad001aa1135dee47ee2f38754ea50ac8c98b9cd6f1c1a00f862900af52d9e7007be27b3c095b2e0d880d6ff7fa8bece867dac7deb0080d08d7b31cb905666f36cebe4b8033460823ddfe658319bc26a72f1b55fc8bcf364271cb1f280f9f81abab630f656c1491f70412f735061fa1aaf9d0eb016cc5e7152699ed8e7ea5ff05cdb1c7b8c65ca35d18cb7409425240ede6afa92f211b59a825968b83499bc91db40509367fad75ede35c6553ebd28ef8c9f75a566d8107116af185f555cab0322c108ced7e8012c03916ebf8b563dbe818a2576111a0ff9749627acfe19ae3fdccdeab6349b5c1f106a490c1d128d640a81d8706b66e3a16ee0a4068d9e7102c7724a03ab121d7c93adcf179c5e661b9fd47546f2bc73f92e45b372fdb08d8e958610ad2c4acb1a3ad7bfa236565796b16ef1f9799084f7e60d5396a3a286d207051d325eb5282b54837fef08c7e28a5c38f7d72ad8535166d60e2893f58f704aa5152ea4a6b00b6a26825715156eea616c72c1fbaa46f3df4ebe3696164e47cade8edce9f1f7a509e30f135b3b29bfc849ad66bf05c17d6c8679234a7a53a3d8385c509eaf5709b1558434ad5f73b966c6db4eacf52509de480002b6bc6b65134d9cf378d5820bade7c0f0373b389e06c162745c0cedcea0eda0762697f0e73307cda99d95cd7d2388afcbff6370bf3ca5e3b3393bf5a00780a93699c0cfe0fbac6d809ceca12d95c8d5a9f71c236eea0851113ccecd0a6479350b0589b5bba13bbf4640779751328509f7db504c474392b83afb5bb31d4a4835d108584bbbd914e95851ec020a07d95d5dd51fa2bd3dd51bd706cf054a2b4ca0c2937639fc5a5ee3090d08bcd2335a5e6213e4a11c080373854bbfa7a96efa317884b38675a9891f3256ad8a1f74b64e3dde55e4d5c4775b7adc6ac284203aaf9f6ac12f95aaac02b09b2088ff5d53dfaabf0ce4c6958e97250c91147e266247042da5792e7097bc3210f514954b0dbb5163b1d71a0322fdb2c0d747d4754bc0a7da972b9579233ceed92741bf5b582e349b4aa5ce522d9abfba532f50d68b41e365bcf54b008c384bae1099d4d6ced5e7f4c1b05c7f7151d459ad5eb7dcad282b05a31f4530f2d628f93efad19bd239c06143483646c7b1d1614f700be8593108108a8f28152d48ecd6577bc387935552e396bc563db28454bf358d71eaabe0ebfb46226a3088d8c7ea244b99f8fa643d20fa92d9d0cfa4d6c58002eb18e6cc5c13a07237a218b09fcf16dae2812e9d68cedb4a37e49a8298c3dba5712cc84cf1df6427ecdbe2a9ba2f05951608a02ab7674c4c8bcea2832c89ee71efd66b7b72a04e7d2e6caabc3bccbd9d7ea5a8b95c1a9b8fdb9be258b8dd57e9f4e409445267b2f8a1f991ffe7a4b77c50b8845f1be30356f3de2789fcf49ba4ad46d47b78aeefee7e06ae7d386f115ce0a55bc0ee42d9765c12dcdbe540d41a781dd6d08ca45f27c4a91c65c9a9dbb90b9f9c9e60663e41260792663235e70d9bbe3c485f57522b7c3d13704f662fcc94949825316b814acccef8e18128ccf8834330caee12b376b802aa32214160622339c055d8071eb50c7281991495b72eaf132d0669c7d6b534149016e54d5cd2347121dea8ac60e7b5ca5a53acfb8233242ab6ffa6c01997244ccef3d485c6e5ac4b8a252210822265c1f6b9af893550c163a962bd2ea149a6e9b1ab913446c1a54934ce8f56426a8531df2f07fa73670b78d6213d10a0113864bb15af6568765dab324722a74c87bd18550bdb51663c9d8b6724c9dd1299019fe1d8241c7c9a0200257f3a8593b6830c9ed38ac983908242ec5fed94bc07e6f3cf0fecda556a6685d828343d7b7a2ae6a7ce25a1f0af2e565f4479f791d3bb4944803f5a76a768f3ec71e4aafd217da9d8d32aa2967fa320d67c8aed60cc4b5806439092c1a0cf511918beb0c30ff62a547f8bcea0183ed162ec5a7b2764e5ff49aa93539089ca814cee68ad100dfbfcc5617735be68bb8ea22aee333c88fde3124729047646bab77f08e33c7c70d4d6d023b3091337d0582c75206933ed52ed99bda3d4d5cf48bcc8e683b7c17a19768e8770123731d98c1691e22fc97a0c9ee27eff1ed455e839163ef0195ad8f6d3e653d88b0adaa325f8232787cf38629fc1103ae1e77d453db51f8c16299d68a3230e61138e6c716d7c981f8803c2222ec9d99f476701352bfb497a892398a3c84c87ec43c3494e70c92b8fe6351d73bbe68f73dd1d4168b3b67a277c4e85b2e2d34075dbfe23ed3d6f6520d4987b282c2710423cff7624fee0c5bf6364bcdf2734eb8465ad3abea522a5bc1dd787b812901e286788abb7db6fc25398bd4d6b78657bdf7a602b4706caac46bad88c4a0f6c15c8a60252fc53b3d496707e0857f5c5946ff5fcfa89eb816e1b96b335727f09f164136b367191ad047c3f1f3f5fd487ae535b0284e276c232ad5a6df68eaa8c74d5cde46ba3fb6abf3d42177e4466f18f7a8251f9809e39bcfe0ab07e24c4c7bbd99f70b7252d4a1a34a9aa34fa595871996f31a8e1eea0734e2e60d0871a4eb443a7d434b5a53c0bee62f388f4025ed1d413ae737a0b4d39591b9a5cfc5edefbed55ba21f480b7ecd2db6df235c9c6c2e0da1abacccfd8805839164f2493baf75df275012413bca9ebb38a1c88c600b1dac6cc82b9115ecd597b6b4ab0ae3720c6d9cf13bf96cd56e33898026e60e1b6bf1917b602171fe8bae56c7896aff9a5d65522c91f3478af5643dc563523e397b85f26a573d2d03ec2f63dc9615d3956273196cb4ca3033f1fdea6a95fc6fe95c0042caa07d37e0880a3a3053ea87f1a02e3e4cc062f642adfbd6769f2540c04a99335a0fa452559f27acb146257ae1b93f1c80cb000a71cf87b7a8555f4e77ac4ecd6411051a26b846796fd229417fc456e3e7a64a9d5232b0fa9794616a2bfc67ad9aec0cc361f3bb7dcff27d6815defa96896ad904a3d53b4f39030e3b2b786f82f5d46eda4de74a214d092f7d900a3c8575ff781ee659681d77ff348a21c0bec5ee66fa1abdc32ee75ad4a51a0a0f942c801aeb55ad9567d140e13fc3524648a231d8389c25d3c18550cbd54ef5493dc5a7f6ab8924765086a1e5b69ef6e80d5790f078e999883efbf04825c3326d3b7d54aa453988fa226b31cf19549bebbd46b54716e48c05df7655fbcefe426fd48b0e4867795d1a03df00e7da4245e95630f2cd3d1dbaae5b74ab2795f6ad5ababe632f4ae1abbc97182220a28eb1d108feb52f8326ec2b3abb0ed045fe64b8e302348d3bd561eaaa3a7f6d1aa426a5848f320f026db837d98063724d38a778cabe67caa2b8b7462523620661965fbdf41a2e835e64d484804321754f79e8b56f7af558a9007d8871fd60e2aeb697270d470394e97f43c93f6515e9941fce5c3e020148cabac9a3f257769afa92374b3a8b5420dfbeeb3f4f1d9106cf1f822791fab189d3a769438aa0b8ad58316d02eae97264e4238ea807c578fb215614d60f6d69d23c438854b0e0b47cb820e0deca03a8f5b0221f10b0e7164ca28b60f978ae82beb3fc52bf8f5f9d4bf9ea5a44014ffb3fba5604fb70db687bd7649fbb4b72d2e604b8031eec10d7fd55cf62234d1515905c4ecdcb2073ae480437e134fa65b37f5fc718ea1595510b302f5a750bada2b1b51c5d6c14da8e69f51c5454d3c15f94f5551ba41e402f98c31d8340bc24ce0c2d0857eee2e6699781434f9eca84e52e9dc0345c4c289880c3c7162772d39bfa62cfb8b401e1cf9a241e7afe1ae4fd5e224bb1f4c3c7098753b01c35f9c8fe1e0c3cbe7521b259e403006121e1c3f62d357394267e78209f31fa87e1aa87cf1054119ea364d7b9e82ae84b998860d8fa73da7cf6c58fb4bd754316c39bfdc453fcea16b73c1bc56996b22074fb4a1e944b6dc786e1f1d8460004c1b9abba76cb5ad9c02444d01b628aef339809a93696b8eedc658222b11f0ade5cad02ec734bdfae30421adc690dc0882cada0a1cf5ad9d538f0366232c7aca013ae8bafacda63dbdcf8507b911009829f2ef019e60a2b1236614b25c258ac4b05aa85d69e8cb2bff36728b967b58f70683e0f1f4408edc8c4fef715170c163324489d8fa4684579fb6f175af8ee8f387ff939b750c7dfd4ba62fe715eea3e5ac3ff7d5cf3ffcbea739b85374956b00b38d6f4519390d6b382d3a883c8bb7a62ce654c005744921a082479affd60092aaff76cafe07820c1aa10a0d5ba589eb21f48e09bf5c279c7a3ac6bdb7958cd439f54d5ad369f0eb68e090eb2a6cffbce0d5af05f7afe5336ad069482f8a765823c63a45d345a72b42d5ad50d8d73a3e7f22e717c1e2aca4786d43b0b1dd2651fa46c0a6cceaf8f57f2f132cf49112ea156f6a159978f8cf8e5e9d74caee5530d999c4d0e6e50d6c69b5c57edb78b0a63d6a06eeb499060300da73ca39199cd4bf6412d58bc9344b5cedf7800b6cd84f193a55314bfa047bb93f562955d1b4407781ebe40fef42f6e5401046866391dd9ad8b96dc6915d43d40df4d7ceb43f682afa7c0cce1f944d79e81eba4c01c64334bf50bb26db0992e9265ba022b49fec9f188ea213ee504d666544d0230b1272f5222db08aa5347e985abf2607fee7719a03a3dedea280e2bcc77737562cd18d979992dc3bb32dbcd3bbfbb5896b9d06cffef2ee68cb071e76d2b7ec5123a91fd73e6fb737d887c016782328ee5a85bff817a8f5a769205373e5c63ffb883158be34059deb0bb99960f3f0cf838efd35f265240cfede2ed447fd7ebaf92befa24c74546c3c9b93aa6ead03c7350327a3e0bd049a582028f3ca59fc9fdc2ac7819f8f92da0a48c4184f7d9abd10e7745a1af4457127f997580bbda67a56cf9bb67b5f3ce6b2b62dffc56b47c95886fcbbcf89da58ce694281a9e8bf50fd5878efc3d357e6f4994a9483ec74b536a5f8ccc714b045fcb5b896e1d998ac11e418d23028f088e99845ef0458dbf45f0bfe9a7188bda3bc07a27f25c741d414aae493b191d8721ddb60281c741bebccc12c841b07dfab15481f65e90d4337414112c9ec23bff763b1eca8a1bd6cb6c252b6531e4e096dbebae5a16120867ece7746a7b487216851ce059a8e3aa37dd4885c6b4e0b8ed807dcf62279f1de1b3b834add0ba26a1bbce31199a5b145ae456f84136887ba27b2e3c6d57f1cfedc9e7042a6c5c8d5c67c04c4a0610d09ae7c037cc1c75f355fc5033e434762aa8f4f23d28ac98409deea20c826b7a9317168ab0075503f3022ccbf2296b58bea2242082d3925d6788ef2d56c435b1db3f96a992d3854d5a9e2af29e5a7817b6c7f210ef511071c46fc3f013171d53703ed7ec6258f531c0d00782c8e2b30149e6157f0e898732bf683341a4a768c199f0f8953120e8d2e9ea791b228da103a2f67ec920560436bc306861fdb098c45ae66ebe12db1e27bc5d2e5b4fe530de58e90c2d5c4ab764cfe9312f2397dfb20468d7db6e9e0aa5765ff0bd2b1c1620671f9a9a516f405e0e8ca8c3498cadd75a76786d88a1adcfd91d2e7c302876b5c9d97d2ee8e5b51d73ff20039a3dd4ea244ec37242f3bbe6ebd7c2f9c583885274c0537ae5b3af6cdfd216a7e9c9f3638322e1d4c58c5f0ee9107bd19f50f2435642a9c584d4de9a4ac6cbe5f699144b9521f2669ab0df72a70d1af1ac9369c58bc8f23311bccc7e7b0b32b744135241c397d6796690f064c8e6df5d7593c2e7bb159bd1a7da0ee9002c0b7a52b549777def7e854acb8224d83c4ec769bf45e4c699c680243d6e2e4149341db46acc685f0650de45fcd75f4b0bfbb3eb5bce224f2c04a03b35edad303af6a2ba403abe9daed9bc170363333efbb9ab4725e453df55b3861499a7283c983db6cfacd367df13dbad52a31fce48bfd13ab9982d821ace9a998a2763d9bf4f484d46ca345d81360ea8841adaa5b45feace5db05fed42113647dcbe3c3dfd70f4b3537e77228a5218d9419a94685a504fe61a1169115536eb2682a63675a0a4debcfb29ac169e4a999206bb6d4a4cc5e508534e9ad4295f08f681071d5cdf0edd674ba2a43a60739929ff3e22cfd4675b669b78998cfac88a0392033930f2b788dbdfe11e560ec1a04be8fcde01fb3cf80d93ce1df819a21ff158dd18e9bdc759a59b9f7111245d336963a97ac8bc7c4bc2682c8273204117402f666e9bbf1f0c0edb08bf3e51270876f92067ae8d37bdbf857d4174a4a32de8459e4612ab723d5e52bfe77e44d7faf4b70d7c8102a5b3503460b0865e5ded0c0366d9dbfeb111deeb425c8878798cad64a84f2036dd9a883277a89d368d636ae34b7f9a8ee57f1e563d72645629ec94d5e763b29dfe2e2fcf699eee4224ec6a3881f892e4f3139962b7f8c397dda473c820761f82df111ee571df65e01b697287cbd8d1496cc98f462828cf22fcc14bfa4cedf934920892fac405290ab3ee7eedae9af2a1eb0f45309eec1cafec9d5f9fe10212417e89182cd22474a8b8972520b79728c8b712ee96a809b31a0c08bab2285fcff6d8b8f638f5550cea169055163017e5c3ff238fd5ba7e460b06ca7dd11fcb37829e6c71a29df07a53ecf8a041081977da88a21074dee4cf64132868a3d7c32e4efa49a71d98a4be181b681f22152bbdca36b377baf0c90f8cbf2c32f8dac624e7fa650d3aa974aba48d29b7d352557f5b2d8054c86d36363c00497a6e467ebe863890c6344a8151ca09a0012e8d0f904acba4edcc92d16e021dd24f0d58504152c62ddd21904a039222673e9b3c0a255ecb2c67d919cf50abeeb3ed8d52618d31242b274f96057ae05944ae0a367aeb6a29455c1171f69f7b138d20197216e552f1c11956a9a031539b032ff5d666b2b7203b8441d8e8c2bf325aadd08e01d3eebdcf663d318c3302130299b1cf852edec4300498ed3fc57073309f83490ffc5d2f65cf087f47790e950a6c810a50cdef1b6a4c62c0f40f3bf438d1ad1f0a04a4c28645de82c6fe6174147145ccc180e5989fd5368ea9c90b5b74cbb8acdde83a05f91b943d73f950940f4ba967767533e4093015f9e7c5c2bcf422e83af0d2b718dd15c219e1dad959f88f18b4592a20c396e3862bc8d629b50e670eab0e12460e1bd94e8d192fbbef19d5b5e7244ef274a5192f8e28b28d1ecfdbe6da5c4102f9535edf71a6f5de0f59a7290cecf062a0328154b1fa5ba4dcee2a856de908d9984914c5a05038b4678dc5b202150be8768b33d15f7d380f080ecb406be5e991d83f10f6113ec8ee18a4d269a96f4b30b84d059e6600af3fd36f0cd6afc8b9c0d7673ac8ae164a796ee21e4e1e4ba1d75c64a65de49bf755abe4aa4d832ca23c7833972e8735acb7d31969993437d2cbb7b12cfde845e0fa7a3ec6a9959cb859ae8ec8da9b9b93dfaba08b0bc092a1e75d95ded612837ef01b11d05b649ef903a065bbde06643bb2bb6d352b01b2db6b693941e4a6d955fe01c29c56dbd298146a6ab48c2ad9d0e191c4307c3a68c858f975d6da078c95eee82212b07c1c0c496771dfc29429cd3fb6d6932e3c49b77e834e1bcc15a7e2f62779c7eda7cb7339037676dbd603b46554de1ca7950e33d48e7615a7971e525696b69b1e024377d20653bcd41b530f6a764699f75a9134b4be30082ab571eab792063234db36907f6bdf8caba3e0e0f884816943418b32e3063378accf4d916e068f0b9055039e93a875cb500e25ef8258cbea70b445d3c2680c75600759e4df1270f9f79b1826909b2dfe6e7a2b58040d03e0963eb46b8c99a327a61a510c07103b23c40bccefc14e2d8b92140a7792eabc328e147dfcc87cd215a03ffb9d1a54351657ade1af17d4bb953ada02830869186cc820a44fa13325e3e53c565d7cdd5a1292de52150a144df0ed39ee23cb7a26f15ff042a797c9aa69ec8a33d9cede2f1f00c04b990025adf0813ceea6827c46c1ec46cfe6fc9294ac3d7963bbdcb7a5a75431e067c492b0c6da41606c6c82425145ec772f733afcdde02e2a422d64439ba43e080d1f79d1ab5ffa01392f4f21cb9940a1ed244ea5ff85bde6af06d72c5a54cb3c1af918fd0801f8ebdc410db560ec151eec471acd4634f781141c46569dd7abf178f286aed037fd73f4daa356e648eeeda0bc546f196b2b6319da806ef87542e3c47bc5cc54da7ae92e79420fbda44c35f38a72ea14d13df8a4c526175e7f0648151b5fa27ecd735965265e9c07e20f5f1e9cf01a9c9fa508d93cae05d0b666bf7d1a4cdec9b380dcd1694d7ffc09f06420fb2c97ccf1084bce8f30192004f055fe859e3de62ca7f77904d080fa7a6a099d8db70ef3ee82ff8b0d6e4eeee656b17463176c759dcf3d943807207df04da7c731dc2f56a5b263831ce89e4eaaad6e56e21764ca1d96f4cd6069bdfb0a278c23c92521b4a17763c926d70aa4f49cb718c90a426a64ea9c03469be5602ee34141c290375f5e98af76ea53512d32f268cbc0527dcca0ab3e2b1b76e79b4285dc09a3a7f89997da03a629b5d9f755b4ce6a4c50455011efacdc5d2c1b91db8b865c614b135db2e0f9e4cede55ae414cb1f14398a8c9a73a09d315796beb10e702bd8522b9875deff4435cc166b2a87d3d4d7d172b6290acb8e97f6b62615d4019d71324adeac0c3bc00a5650a5fcd471cf27f28a829d0fb8fdeb93b62973482fd1e7b57b3de16283501cd39f6d8986c191172394c39cdf11607f415cb171f8a9662b7990b51a1e42caa718229b34c4262b1db8fdd0c8093d62efd43d9ee3eed44f6208c7151544170c39b9f78becb55c08c597715b2f1901df6457da8e6ebc483b3bb5db68fd3c89668cafc4339a21f4b05e483570190cef51bf92ca49709ba11dc06bd305deadaed6b9f6f028bc95a92fb8385534883990332f54b71733807a1f2b8f25fdb1df88eb3b38976706d07a67f756e431546aebd4af2743f31b36038f91c00deddb1285e26297c174397126ff53433f2e184c1d4cef6b3a7bfa1862de9a1ec20869e03b69379de53d7b4311495acdf897855a9f23552a512ae9bf34a9775693d8957d9905504c089d19d7c98187e1dd671516f8d6b605941d8e7f77ab6118cc5ebeec6ca42a5f9f6818dcef7b0af9652bed27ec585f7e18e23a3b0736dee634cce14dc52656f0663eeee84ebca945e62adf94bba85942c89e328c4f35e43586af445f11b1b64945c8f4dad48f6db27c3444f016cce7feb7a438759d67cd203d9fcb3f44211f4977b5f347800f3f37b874df4ef985dc55d6a1cb3457e6c10a539f4bff7623a09ffe0761fff206afcfb5cc4b5a9fbd54f98e9a553ae59790facbda1adf615a79e439172341c3bf95b99dd8f78ff53699d110769c9731c03ad3ccd8abb8877fe84c0ab0d646ff06a49f73c42764ad003bf85703f633a9d85d0b03d3c595f9eb103a85363fb5df48e201e22d4b361bcb5de70bbaab8a02a2d3b27a5246145b2da2cc71bfa561544f7cd3cff6688a7b049ae086b43d197a61ae54d7113829e8f6afaf2414b7ac0b2f286968d2db9a4bb1b90c1ad9861dba35722483c88c63e5d77cf8b05225f31e665878f9238e55bf90f312fab7c19e400008fd67965386bbbee50999ec685fa1bb20cbf106a909a234f65de75ba4c896e218074ccdb8f75a333ed4e0c256283d1d7d326683b84ddfdb7a7b2e6dc4a93b2dbb8b37b208d4c02b6d192d28bb49ea44dfc56be4e70a3021ed442eaab2c45f832b68bf7b8600", 0x2000, &(0x7f0000006d80)={&(0x7f0000006100)={0x50, 0x0, 0x4, {0x7, 0x2d, 0xa75, 0x10000000, 0xe0b, 0x7ff, 0x4, 0x5, 0x0, 0x0, 0x80, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f00000003c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}})

328.743038ms ago: executing program 0 (id=436):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

251.048925ms ago: executing program 1 (id=437):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0)

250.83474ms ago: executing program 1 (id=438):
r0 = socket(0x10, 0x802, 0x0)
write(r0, &(0x7f0000000000)="fc0000004800071fab092504090007000aab60000a0000000008e293210001c000000000000000000a000000c0fe00ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66ff5b22a95792e2891cfded815b6ccd243f295ed94e0ad91bd0734babc7c737d670133750800000000000000000000000000a6b567b4d5715587e6d8a1ad0a4f0108", 0xfc)

187.777944ms ago: executing program 1 (id=439):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x5, 0x559a, &(0x7f0000005680)="$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")
fcntl$lock(0xffffffffffffffff, 0x5, 0x0)
syz_mount_image$exfat(0x0, &(0x7f0000000540)='./bus\x00', 0x38c180a, 0x0, 0x0, 0x0, &(0x7f0000000240))
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000006, &(0x7f0000005c00)={[{@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@umask={'umask', 0x3d, 0x2000d}}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@gid_forget}, {@volume={'volume', 0x3d, 0x3ff}}, {}, {@undelete}, {@shortad}, {@umask={'umask', 0x3d, 0x200}}, {@gid}, {@gid_ignore}, {@adinicb}]}, 0x1, 0xc32, &(0x7f0000000e00)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='A\x00', 0x1ff)
mount$bind(0x0, 0x0, 0x0, 0x3, 0x0)
r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x1e0)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x7)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0)
sendfile(r1, r2, 0x0, 0x20fffe82)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109042, 0x23)
syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f000001fc80)=ANY=[@ANYBLOB="6e616d65636173653d312c646973636172642c74696d655f6f66667365743d307830867356e0a92330303030303030303030305f6c6173745f646f74732c666d61736b3d30303030303030303030303030303030303030303030312c6b6565705f6c6173745f646f74732c696f636861727365743d6d6163726f6d616e2c6e616d65636173653d312c616c6c6f775f7574699eba15484640aa6d653d30303030303030303030303030303030303030303031372c757466382c000000"], 0x1, 0x1533, &(0x7f0000006800)="$eJzs3AucTtX6OPDnWWvtMSS9TXIZ1lrP5k0uiyTJJUkuSZIkSW4JSZIjCYkht6QhCcllSC5DSC4Tk8b9fr8kJEmTJCG5Jev/mZi/OnX+55xfnfz+Z57v5/N+Zj2z3mftZ88z73733vPyTZehNRrVrNqAiOAPwYtfEgAgFgAGAsA1ABAAQNm4snEZ89klJvyxjbA/10PJV7oCdiVx/7M27n/Wxv3P2rj/WRv3P2vj/mdt3P+sjfvPWFa2eXr+a/mRdR98/z8r4/f//yLpJcd+sbbk9V0BYv7VFO7////wD+Ry//9rBf/Kk7j/WRv3P6uKvdIFsP8F+PWfFWT7hzPc/6yN+89YVvbLe8GxcOXvR//VD4j8J/8G4ntd/Clf+f38h/vPGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4z9Bc74yxQAZI6vdF2MMcYYY4wxxhj78/hsV7oCxhhjjDHGGGOM/echCJCgIIAYyAaxkB1ygACIyZy/FuLgOsgN10MeyAv5ID/EQwEoCBoMWCAIoRAUhijcAEXgRigKxaA4lAAHJaEU3ASl4WYoA7dAWbgVysFtUB4qQEWoBLdDZbgDqsCdUBXugmpQHWpATbgbasE9UBvuhTpwH9SF+6EePAD14UFoAA9BQ3gYGsEj0BgehSbQFJpBc2jxP8p/AXrAi9ATekEC9IY+8BL0hX7QHwbAQHgZBsErMBhehUQYAkPhNRgGr8NweANGwEgYBW/CaHgLxsBYGAfjIQkmwER4GybBOzAZpsBUmAbJMB1mwLswE2bBbHgP5sD7MBfmwXxYACnwASyERZAKH8Ji+AjSYAkshWWwHFbASlgFq2ENrIV1sB42wEbYBJthC2yFbbAddsBO+Bh2wSewG/bAXvgU9sFn/2b+6b/L74qAgAIFKlQYgzEYi7GYA3NgTsyJuTAXRjCCcRiHuTE35sE8mA/zYTzGY0EsiAYNEhIWwkIYxSgWwSJYFIticSyODh2WwlJYGm/GMlgGy2JZLIflsDxWwApYCSthZayMVbAKVsWqWA2rYQ2sgXfj3dgba2NtrIN1sC7Wzbw9hQ2wATbEhtgIG2FjbIxNsAk2w2bYAltgS2yJrbAVtsE22BbbYjtsh+2xPXbADtgRO2In7ISdsTN2wS7YFbtht/QXsgG+iC9iL6wmemMf7IN9MTFbfxyAA/BlHISv4Cv4KibiEByKr+Fr+DoOx1M44sJIHIWjsLJ4C8fgWCQxHpMwCSfiRJyEk3AyTsEpOA2TcTrOwBk4E2fhLHwP5+D7+D7Ow3m4AFMwBRfiIkzFVFyMpzENl+BSXIbLcQUux1W4GlfhWlyHa3EDbsBNuAm34BbchttwB+7Aj1EB4Ce4B/dgIu7Dfbgf9+MBPIAH8SCmYzoewkN4GA/jETyCR/EoHsPjeAKP40k8iafwNJ7BM3gOz+F5fC7+q4YfF1uTCCKDEkrEiBgRK2JFDpFD5BQ5RS6RS0RERMSJOJFb5BZ5RB6RT+QT8SJeFBQFhRFGkAgzjhQiKqKiiCgiioqiorgoLpxwopQoJUqL0qKMKCPKiltFOXGbKC8qiNaukqgkKos2roq4U1QVVUU1UV3UEDVFTVFL1BK1RW1RR9QRdUVdUU88IOqL3tgfHxIZnWkkhmBjMRSbiKZCXjpCtRTDsZVoLdqIJ8RIHIHtREvXXjwtOogx2FH8TYzFZ0VnMR67iOdFV9FNdBcviB6ilespeonJ2Fv0EdOwr+gn+osBYiZWF+/hnOw1xKsiUQwRQ8VrYgG+LoaLN8QIMVKMEm+K0eItMUaMFePEeJEkJoiJ4m0xSbwjJospYqqYJpLFdDFDvCtmillitnhPzBHvi7linpgvFogU8YFYKBaJVPGhWCw+EmliiVgqlonlYoVYKVaJ1WKNWCvWifVig9goNonNYovYKraJ7WKH2Ck+FrvEJ2K32CP2ik/FPvGZ2C8+FwfEF+Kg+FKki6/EIfG1OCy+EUfEt+Ko+E4cE8fFCfG9OCl+EKfEaXFGnBXnxI/ivPhJXBBegEQppJRKBjJGZpOxMrvMIa+SOWWQefyXcfI6mVteL/PIvDKfzC/jZQFZUGpppJUkQ1lIFpZReYMsIm+URWUxWVyWkE6WlKXkTbK0vFmWkbfIsvJWWU7eJsvLCrKirCRvl5XlHRIiF7dRTVaXNWRNebdMgHtkbXmvrCPvk3Xl/bKefEDWlw/KBvIh2VA+LBvJR2Rj+ahsIpvKZrK5bCEfky3l47KVbC3byCdkW/mkbCefku3l07KD9Jd+RZ6VneVzsot8XnaV3WR3+ZO8IL3sKXtJ6A2yj3xJ9pX9ZH85QA6UL8tB8hU5WL4qE+UQOVS+JofJ1+Vw+YYcIUfKUfJNOVq+JcfIsXKcHC+T5AQ5Ub4tJ8l35GQ5RU6V02SynC77X1pptpT/NP/t38kf/PPWN8nNcovcKrfJ7XKH3Ck/lrvkLrlb7pZ75V65T+6T++V+eUAekAflQZku0+UheUgeloflEXlEHpVH5TF5XJ6V38uT8gd5Sp6Wp+VZeU6ek+cv/QxAoRJKKqUCFaOyqViVXeVQV6mc6mqVS12jIupaFaeuU7nV9SqPyqvyqfwqXhVQBZVWRllFKlSFVGEVVTfgpV8YVVyVUE6VVKXUTf9OviqiblRFVbFf5WfWl/AP6muhWqiWqqVqpVqpNqqNaqvaqnaqnWqv2qsOqoPqqDqqTqqT6qw6qy6qi+qquqruqrvqoXqonqqnSlAJqo96SfVV/VR/NUANVC+LjH0YrAarRJWohqqhapgapoar4WqEGqFGqVFqtBqtxqgxapwap5JUkpqoJqpJapKarCarqWqqSlbJaoaaoWaqmWq2mq3mqDlqrpqr5qv5KkWlqIVqoUpVqWqxWqzS1BK1RC1Ty9QKtUKtUqvUGrVGrVPr1Aa1QaWpzWqz2qq2qu1qu9qpdqpdapfarXarvWqv2qf2qf1qvzqgDqiD6qBKV+nqkDqkDqvD6og6oo6qo+qYOqZOqBPqpDqpTqlT6ow6o86pc+q8Oq8uqAsZp32BCESgAhXEBDFBbBAb5AhyBDmDnEGuIFcQCSJBXBAX5A6uD/IEeYN8Qf4gPigQFAx0YAIbiEtNjwY3BEWCG4OiQbGgeFAicEHJoFRwU1A6uDkoE9wSlA1uDcoFtwXlgwpBxaBScHtQObgjqBLcGVQN7gqqBdWDGkHN4O6gVnBPUDu4N6gT3BfUDe4P6gUPBPWDB4MGwUNBw+DhoFHwSNA4eDRoEjQNmgXNgxZ/6vren8r7uOupe+kE3Vv30S/pvrqf7q8H6IH6ZT1Iv6IH61d1oh6ih+rX9DD9uh6u39Aj9Eg9Sr+pR+u39Bg9Vo/T43WSnqAn6rf1JP2Onqyn6Kl6mk7W0/UM/a6eqWfp2fo9PUe/r+fqeXq+XqBT9Ad6oV6kU/WHerH+SKfpJXqpXqaX6xV6pV6lV+s1eq1ep9frDXqj3qQ36y16q96mt+sdeqf+WO/Sn+jdeo/eqz/V+/Rner/+XB/QX+iD+kudrr/Sh/TX+rD+Rh/R3+qj+jt9TB/XZfT3+qT+QZ/Sp/UZfVaf0z/q8/onfUH7jJP7jLd3o4wyMSbGxJpYk8PkMDlNTpPL5DIREzFxJs7kNrlNHpPH5DP5TLyJNwVNQZOBDJlCppCJmqgpYoqYoqaoKW6KG2ecKWVKmdKmtCljypiypqwpZ8qZ8qa8qWgqmtvN7eYOc4e509xp7jJ3meqmuqlpappappapbWqbOqaOqWvqmnqmnqlv6psGpoFpaBqaRqaRaWwamyamiWlmmpkWpoVpaVqaVqaVaWPamLamrWln2pn2pr3pYDqYjqaj6WQ6mc6ms+liupiupqvpbrqbHqaH6Wl6mgSTYPqYPqav6Wv6m/5moBloBplBZrAZbBJNohlqhpphZpgZboabEWakGZVxomreMmPMWDPOjDdJJslMNBPNJDPJTDaTzVQz1SSbZDPDzDAzzUwz28w2c8wcM9fMNfPNfJNiUsxCs9CkmlSz2Cw2aSbNLDVLzXKz3Kw0K81qs9qsNWvNelhvNpqNZrPZbLaarWa72W52mp1ml9lldpvdZq/Za/aZfWa/2W8OmAPmoDlo0k26OWQOmcPmsDlijpij5qg5Zo6ZE+aEOWlOmlPmlDljzphzJu+l90tvYm12m8NeZXPaq20ue439+zifzW/jbQFb0Gqbx+b9VWystUVtMVvclrDOlrSl7E2/icvbCrairWRvt5XtHbbKb+Ja9h5b295r69j7bE1796/iuvZ+W88+YusjAtimtqFtbhvZR2xj+6htYpvaZra5bWuftO3sU7a9fdp2sM/8Jl5oF9nVdo1da9fZ3XaPPWPP2sP2G3vO/mh72l52oH3ZDrKv2MH2VZtoh/wmHmXftKPtW3aMHWvH2fG/iafaaTbZTrcz7Lt2pp31mzjFfmDn2FQ7186z8+2Cn+OMmlLth3ax/cim2QCW2mV2uV1hV9pV/7fWZXaD3Wg32V32E7vVbrPb7Q67M/NE2O6xe+2ndp/9zB6yX9sD9gt70B6x6farn+OM/Ttiv7VH7Xf2mD1uT9jv7Un7g8rMztj37+1P9oL1FggJSJKigGIoG8VSdspBV1FOuppy0TUUoWspjq6j3HQ95aG8lI/yUzwVoIKkyZAlopAKUWGK0g2UWV5xKkGOSlIpuolK081Uhm6hsnQrlaPbqDxVoIpUiW6nynQHVaE7qSrdRdWoOtWgmnQ31aJ7qDbdS3XoPqpL91M9eoDq04PUgB6ihvQwNaJHqDE9Sk2oKTWj5tSCHqOW9Di1otbUhp6gtvQktaOnqD09TR3oGepIf6NO9Cx1pueoCz1PXakbdacXqAe9SD2pFyVQb+pDL1Ff6kf9aQANpJdpEL1Cg+lVSqQhNJReo2H0Og2nN2gEjaRR9CaNprdoDI2lcTSekmgCTaS3aRK9Q5NpCk2laZRM02kGvUszaRbNpvdoDr1Pc2kezacFlEIf0EJaRKn0IS2mjyiNltBSWkbLaQWtpFW0mtbQWlpH62kDbaRNtJm20FbaRttpB+2kj2kXfUK7aQ/tpU9pH31G++lzOkBf0EH6ktLpKzpEX9Nh+oaO0Le+F31Hx+g4naDv6ST9QKfoNJ2hs3SOfqTz9BNdIE8QYihCGaowCGPCbGFsmD3MEV4V5gyvDnOF14SR8NowLrwuzB1eH+YJ84b5wvxhfFggLBjq0IQ2pDAMC4WFw2h4Q1gkvDEsGhYLi4clQheWDEuFN4Wlw5vDMuEtYdnw1rBceFtYPqwQPnJfpfD2sHJ4R1glvDOsGt4VVgurhzXCmuHdYa3wnrB2eG9YJ7wvLBPeH9YLHwjrhw+GDcKHwobhw2Gj8JGwcfho2CRsGjYLm4ctwsfCluHjYauwddgmvCpsGz4ZtgufCtuHT4cdwmd+nr9/Ueb8E7+ZTwh7h33Cl8KXQu/vlfOjC6Ip0Q+iC6OLoqnRD6OLox9F06JLokujy6LLoyuiK6Oroquja6Jro+ui66Mbohujm6Le18wGDp1w0ikXuBiXzcW67C6Hu8rldFe7XO4aF3HXujh3ncvtrnd5XF6Xz+V38a6AK+i0M846cqEr5Aq7qLvBFXE3uqKumCvuSjjnSrpSrrlr4Vq4lu5x18q1dm3cE+4J96R70j3lnnJPuw7uGdfR/c11cs+6zu4595x73nV13Vx394Lr4SbkuviaTHB9XB/X1/V1/V1/N9ANdIPcIDfYDXaJLtENdUPdMDfMDXfD3Qg3wo1yo9xoN9qNcWPcODfOJbkkN9FNdJPcJDfZTXZT3VSX7JLdDDfDzXQzXeVZF7cy18118918l+JS3EKXcc6Y6ha7xS7Npbmlbqlb7pa7lW6lW+1Wu7VurVvv1ruNbqPb7Da7rW6r2+62u51up9vldrnd/pqLi7p9br/b7w64A+6g+9Klu6/cIfe1O+y+cUfct+6o+84dc8fdCfe9O+l+cKfcaXfGnXXn3I/uvPvJXXDeJUUmRCZG3o5MirwTmRyZEpkamRZJjkyPzIi8G5kZmRWZHXkvMifyfmRuZF5kfmRBJCXyQWRhZFEkNfJhZHHko0haZElkaWRZZHlkRcT7AltDX8gX9lF/gy/ib/RFfTFf3Jfwzpf0pfxNvvTFutO8v9WX87f58r6Cr+gf9U18U9/MN/ct/GO+pX/ct/KtfRv/hG/rn/Tt/FO+vX/ad/DP+I7+b76Tf9Z39s/5Lv5539V38939C76Hf9H39L18gu/t+/iXfF/fz/f3A/xA/7If5F/xg/2rPtEP8UP9a36Yf90P92/4EX6kHxXzph+deYkM432Sn+An+rf9JP+On+yn+Kl+mk/20/0M/66f6Wf52f49P8e/7+f6eX6+X+BT/Ad+oV/kU/2HfrH/yKf5JZk3jf1Kv8qv9mv8Wr/Or/cb/Ea/yW/2W/xWv81v9zv8Tv+x3+U/8bv9Hr/Xf+r3+c/8fv+5P+C/8Af9lz7df+UP+a/9Yf+NP+K/9Uf9d/6YP+5P+O/9Sf+DP+VP+zP+rD/nf/Tn/U/+Av+bNcYYY4yxf8mEy0Px65mLt/N7/06O+MWT+wDA1dvyp/9yPuOMcn2ei+N+Ij424+vTvbo8lPmoVi0hIeHSc9MkBIXnAWT+JSjDzx89uBQvgTbwJLSH1lD6d+vvJ7qdo3+yfvRWgBy/yMkoKDO+vP7nAJjwO+s/9sSoheXCM3H/j/XnARQtfDknO1yOl0Cbn++vtIYy/6D+vC3/Sf3Zv0gCaPWLnJxwOb5cfyl4HJ6B9r96JmOMMcYYY4wxdlE/UbFT5vVn5ic+f+/6PF5dzskGl+N/dn3OGGOMMcYYY4yxK+/Zbt2feqx9+9ad/v1Blf9R1r88aAz/qZV58LsD7wEyv6MA4A8uCJAxkH/lXmz5S7aVeOml8/dTy8/6AP53tPLPGFzhAxNjjDHGGGPsT3f5pP/X31dXqiDGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYYywL+iv+O7ErvY+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcbYlfZ/AgAA//+1tfsI")
creat(0x0, 0x105)
syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40))
mknodat$loop(r0, 0x0, 0x80, 0x0)

187.517269ms ago: executing program 0 (id=440):
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, 0x0, 0x0)

121.469779ms ago: executing program 0 (id=441):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x2210088, &(0x7f0000003f80)=ANY=[], 0x1, 0x334, &(0x7f0000000ac0)="$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")

0s ago: executing program 0 (id=442):
r0 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @loopback}, 0x10)
listen(r0, 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./ceph_mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='127.0.0.1:6789:/\x00', &(0x7f0000000100)='./ceph_mnt\x00', &(0x7f0000000300)='ceph\x00', 0x0, &(0x7f0000000400)='abort_on_full,ms_mode=legacy,nocephx_sign_messages,nocrc,mount_timeout=2\x00')
r1 = accept4$inet(r0, 0x0, 0x0, 0x0)
write(r1, &(0x7f0000000500)='ceph v027', 0x9)
write(r1, &(0x7f0000000600)='\x00'/272, 0x110)
write(r1, &(0x7f0000000800)="01ffff7fffffffff3f00"/26, 0x1a)
write(r1, &(0x7f0000000900)="070100000000000000000000000000000029000000010018000000000000000000000000000100000000000000000100000000000000000000000000000000000000000000000000000000000000b0e68b83000000000000000000", 0x5b)
nanosleep(&(0x7f0000000a00)={0x1}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:11679' (ED25519) to the list of known hosts.
syzkaller login: [   41.965195][ T5532] cgroup: Unknown subsys name 'net'
[   42.072557][ T5532] cgroup: Unknown subsys name 'cpuset'
[   42.080225][ T5532] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   43.589966][ T5532] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   47.794300][ T5593] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   47.796190][ T5593] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   47.796629][ T5593] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   47.798357][ T5593] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   47.798766][ T5593] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   47.840870][ T4993] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   47.844271][ T5600] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   47.844394][ T5600] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   47.848221][ T4993] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   47.848401][ T4993] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   47.851484][ T4993] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   47.856797][ T5604] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   47.857261][ T5604] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   47.858368][   T56] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   47.859195][   T56] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   48.423073][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.423545][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.423644][ T5592] bridge_slave_0: entered allmulticast mode
[   48.424458][ T5592] bridge_slave_0: entered promiscuous mode
[   48.427727][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.427796][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.428021][ T5592] bridge_slave_1: entered allmulticast mode
[   48.428717][ T5592] bridge_slave_1: entered promiscuous mode
[   48.443994][ T5592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   48.445501][ T5592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   48.481589][ T5592] team0: Port device team_slave_0 added
[   48.483404][ T5592] team0: Port device team_slave_1 added
[   48.508642][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.508705][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.508777][ T5592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.516724][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.516736][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.516751][ T5592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.584420][ T5592] hsr_slave_0: entered promiscuous mode
[   48.585278][ T5592] hsr_slave_1: entered promiscuous mode
[   48.646948][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.647444][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.647645][ T5597] bridge_slave_0: entered allmulticast mode
[   48.649302][ T5597] bridge_slave_0: entered promiscuous mode
[   48.651450][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.651503][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.651555][ T5597] bridge_slave_1: entered allmulticast mode
[   48.652426][ T5597] bridge_slave_1: entered promiscuous mode
[   48.705431][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.708844][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.711845][ T5596] bridge_slave_0: entered allmulticast mode
[   48.716528][ T5596] bridge_slave_0: entered promiscuous mode
[   48.731003][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   48.732970][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   48.744238][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.746964][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.747641][ T5596] bridge_slave_1: entered allmulticast mode
[   48.749059][ T5596] bridge_slave_1: entered promiscuous mode
[   48.787174][ T5597] team0: Port device team_slave_0 added
[   48.803695][ T5597] team0: Port device team_slave_1 added
[   48.807221][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   48.809760][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   48.865090][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.865148][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.865204][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.868269][ T5596] team0: Port device team_slave_0 added
[   48.871458][ T5596] team0: Port device team_slave_1 added
[   48.892743][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.892785][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.892821][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.908597][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.908640][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.908850][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.910108][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.910115][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.910124][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.960632][ T5597] hsr_slave_0: entered promiscuous mode
[   48.963239][ T5597] hsr_slave_1: entered promiscuous mode
[   48.965511][ T5597] debugfs: 'hsr0' already exists in 'hsr'
[   48.967524][ T5597] Cannot create hsr debugfs directory
[   48.990095][ T5596] hsr_slave_0: entered promiscuous mode
[   48.991001][ T5596] hsr_slave_1: entered promiscuous mode
[   48.991541][ T5596] debugfs: 'hsr0' already exists in 'hsr'
[   48.991554][ T5596] Cannot create hsr debugfs directory
[   49.113010][ T5592] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   49.120187][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   49.145335][ T5592] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   49.149987][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   49.175355][ T5592] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   49.180486][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   49.183395][ T5592] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   49.189055][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   49.254191][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.254773][ T5592] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.255311][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.255395][ T5592] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.271696][ T5597] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   49.279945][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   49.283675][ T5597] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   49.290518][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   49.294340][ T5597] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   49.299398][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   49.311918][ T5597] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   49.317436][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   49.340779][ T1110] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.344803][ T1110] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.389089][ T5596] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   49.394115][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   49.394516][ T5596] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   49.398825][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   49.404750][ T5596] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   49.409714][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   49.410200][ T5596] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   49.414600][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   49.454849][ T5592] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.471262][ T5592] 8021q: adding VLAN 0 to HW filter on device team0
[   49.479641][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.479722][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.483287][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.483326][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.557231][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.583830][ T5597] 8021q: adding VLAN 0 to HW filter on device team0
[   49.591842][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.601929][   T29] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.602047][   T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.620038][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.620158][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.633978][ T5596] 8021q: adding VLAN 0 to HW filter on device team0
[   49.649729][   T85] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.649820][   T85] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.672140][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.672254][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.817080][   T56] Bluetooth: hci0: command tx timeout
[   49.898294][   T56] Bluetooth: hci1: command tx timeout
[   49.898858][   T56] Bluetooth: hci2: command tx timeout
[   49.944924][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.989677][ T5592] veth0_vlan: entered promiscuous mode
[   50.001004][ T5592] veth1_vlan: entered promiscuous mode
[   50.034420][ T5592] veth0_macvtap: entered promiscuous mode
[   50.038923][ T5592] veth1_macvtap: entered promiscuous mode
[   50.059649][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0
[   50.067619][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1
[   50.088374][ T5649] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.088676][ T5649] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.089072][ T5649] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.187415][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.187485][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.211550][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0
[   50.236439][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0
[   50.244843][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.245000][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.257116][ T5649] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.300006][ T5597] veth0_vlan: entered promiscuous mode
[   50.310549][ T5597] veth1_vlan: entered promiscuous mode
[   50.311235][ T5592] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   50.323721][ T5596] veth0_vlan: entered promiscuous mode
[   50.339975][ T5596] veth1_vlan: entered promiscuous mode
[   50.358616][ T5596] veth0_macvtap: entered promiscuous mode
[   50.372505][ T5596] veth1_macvtap: entered promiscuous mode
[   50.397768][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0
[   50.421606][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1
[   50.434042][ T5597] veth0_macvtap: entered promiscuous mode
[   50.470391][ T5597] veth1_macvtap: entered promiscuous mode
[   50.518628][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0
[   50.538148][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1
[   50.551747][   T85] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.551781][   T85] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.643014][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.643076][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.662611][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.662661][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.733077][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.733142][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.736110][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.736434][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.736580][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.736602][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.736624][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.736644][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.736664][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.736686][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   51.010038][ T5711] loop0: detected capacity change from 0 to 4096
[   51.011496][ T5711] =======================================================
[   51.011496][ T5711] WARNING: The mand mount option has been deprecated and
[   51.011496][ T5711]          and is ignored by this kernel. Remove the mand
[   51.011496][ T5711]          option from the mount to silence this warning.
[   51.011496][ T5711] =======================================================
[   51.025172][ T5711] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[   51.092347][ T5717] Cannot find set identified by id 0 to match
[   51.092959][ T5711] ntfs3(loop0): $Secure::$SDH is corrupted.
[   51.093024][ T5711] ntfs3(loop0): Failed to initialize $Secure (-22).
[   51.265148][ T5721] loop1: detected capacity change from 0 to 4096
[   51.298502][ T5721] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[   51.322386][ T5721] ntfs3(loop1): Failed to initialize $Extend/$Reparse.
[   51.581664][ T5735] netlink: 'syz.2.13': attribute type 21 has an invalid length.
[   51.581763][ T5735] netlink: 128 bytes leftover after parsing attributes in process `syz.2.13'.
[   51.590183][ T5735] netlink: 'syz.2.13': attribute type 4 has an invalid length.
[   51.590241][ T5735] netlink: 'syz.2.13': attribute type 3 has an invalid length.
[   51.592044][ T5735] netlink: 3 bytes leftover after parsing attributes in process `syz.2.13'.
[   51.592247][ T5735] Zero length message leads to an empty skb
[   51.753370][ T5743] loop1: detected capacity change from 0 to 128
[   51.760682][ T5743] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[   51.764737][ T5743] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   51.788664][   T34] audit: type=1326 audit(1790263325.019:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5740 comm="syz.2.14" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d0379e159 code=0x7fc00000
[   51.896093][ T5593] Bluetooth: hci0: command tx timeout
[   51.911427][ T5727] loop0: detected capacity change from 0 to 40427
[   51.922379][ T5727] F2FS-fs (loop0): build fault injection rate: 14
[   51.922445][ T5727] F2FS-fs (loop0): build fault injection type: 0x30e4
[   51.923846][ T5727] F2FS-fs (loop0): invalid crc value
[   51.948748][ T5727] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa62/0x1940
[   51.978745][ T5593] Bluetooth: hci2: command tx timeout
[   51.979050][   T56] Bluetooth: hci1: command tx timeout
[   52.019196][ T5727] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   52.024432][ T5727] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   52.038547][ T5727] F2FS-fs (loop0): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x9ee/0x1ee0
[   52.050785][ T5727] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of f2fs_find_data_folio+0x3a3/0x6d0
[   52.080994][ T5592] syz-executor: attempt to access beyond end of device
[   52.080994][ T5592] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   52.081468][ T5592] CPU: 0 UID: 0 PID: 5592 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   52.081485][ T5592] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   52.081494][ T5592] Call Trace:
[   52.081499][ T5592]  <TASK>
[   52.081505][ T5592]  dump_stack_lvl+0xe8/0x150
[   52.081529][ T5592]  f2fs_stop_checkpoint+0x3f6/0x5d0
[   52.081548][ T5592]  f2fs_write_end_bio+0x1211/0x16e0
[   52.081568][ T5592]  ? blkg_put+0x22/0x240
[   52.081593][ T5592]  __submit_merged_bio+0x258/0x6a0
[   52.081608][ T5592]  ? rcu_is_watching+0x16/0xb0
[   52.081627][ T5592]  __submit_merged_write_cond+0x3c9/0x4e0
[   52.081648][ T5592]  ? __pfx___submit_merged_write_cond+0x10/0x10
[   52.081680][ T5592]  f2fs_write_data_pages+0x2a27/0x36f0
[   52.081696][ T5592]  ? __lock_acquire+0x6df/0x2e50
[   52.081732][ T5592]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   52.081746][ T5592]  ? is_bpf_text_address+0x26/0x2b0
[   52.081769][ T5592]  ? arch_stack_walk+0xfb/0x150
[   52.081803][ T5592]  ? add_lock_to_list+0xc7/0x100
[   52.081820][ T5592]  ? lockdep_unlock+0x5c/0xd0
[   52.081836][ T5592]  ? __lock_acquire+0x14b9/0x2e50
[   52.081896][ T5592]  ? do_raw_spin_lock+0x12b/0x2f0
[   52.081920][ T5592]  ? do_raw_spin_unlock+0x4d/0x200
[   52.081934][ T5592]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   52.081949][ T5592]  do_writepages+0x338/0x560
[   52.081975][ T5592]  ? do_raw_spin_unlock+0x4d/0x200
[   52.081994][ T5592]  filemap_fdatawrite+0x1e9/0x2f0
[   52.082008][ T5592]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   52.082048][ T5592]  ? do_raw_spin_unlock+0x4d/0x200
[   52.082067][ T5592]  f2fs_sync_dirty_inodes+0x30e/0x830
[   52.082096][ T5592]  f2fs_write_checkpoint+0xa3d/0x2710
[   52.082112][ T5592]  ? __lock_acquire+0x6df/0x2e50
[   52.082144][ T5592]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   52.082195][ T5592]  kill_f2fs_super+0x2dd/0x700
[   52.082217][ T5592]  ? __pfx_kill_f2fs_super+0x10/0x10
[   52.082240][ T5592]  ? call_rcu+0x64d/0x8b0
[   52.082254][ T5592]  ? lockdep_hardirqs_on+0x7b/0x110
[   52.082279][ T5592]  deactivate_locked_super+0xbc/0x110
[   52.082296][ T5592]  cleanup_mnt+0x3d3/0x460
[   52.082314][ T5592]  task_work_run+0x1d9/0x270
[   52.082327][ T5592]  ? __pfx_task_work_run+0x10/0x10
[   52.082343][ T5592]  exit_to_user_mode_loop+0x204/0x770
[   52.082354][ T5592]  ? rcu_is_watching+0x16/0xb0
[   52.082367][ T5592]  do_syscall_64+0x328/0x520
[   52.082381][ T5592]  ? trace_irq_disable+0x3b/0x140
[   52.082392][ T5592]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   52.082406][ T5592]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   52.082416][ T5592] RIP: 0033:0x7faaa779f397
[   52.082428][ T5592] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[   52.082437][ T5592] RSP: 002b:00007ffd1a185978 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   52.082460][ T5592] RAX: 0000000000000000 RBX: 00007faaa78344bb RCX: 00007faaa779f397
[   52.082468][ T5592] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd1a185a30
[   52.082475][ T5592] RBP: 00007ffd1a185a30 R08: 00007ffd1a186a30 R09: 00000000ffffffff
[   52.082483][ T5592] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd1a186ac0
[   52.082490][ T5592] R13: 00007faaa78344bb R14: 000000000000cae3 R15: 00007ffd1a186b00
[   52.082511][ T5592]  </TASK>
[   52.084832][ T5592] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   52.423558][ T5762] loop1: detected capacity change from 0 to 4096
[   52.429147][ T5762] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   52.429212][ T5762] EXT4-fs (loop1): Test dummy encryption mode enabled
[   52.432316][ T5762] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[   52.432412][ T5762] System zones: 0-5
[   52.450411][ T5762] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.475900][ T5762] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-lib"
[   52.476366][ T5762] EXT4-fs error (device loop1): __ext4_new_inode:1083: comm syz.1.23: reserved inode found cleared - inode=18
[   52.513225][ T5596] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.520421][   T34] audit: type=1326 audit(1790263325.749:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5740 comm="syz.2.14" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7d0379e159 code=0x7fc00000
[   52.814729][   T34] audit: type=1400 audit(1790263326.039:4): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="foo" pid=5777 comm="syz.2.28" name="foo" offset=81
[   53.463335][ T5799] loop0: detected capacity change from 0 to 4096
[   53.467733][ T5799] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[   53.484311][ T5799] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[   53.495503][ T5799] ntfs3(loop0): Failed to load $Extend (-2).
[   53.497881][ T5799] ntfs3(loop0): Failed to initialize $Extend.
[   53.839525][ T5819] mmap: syz.1.46 (5819) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   53.954725][ T5811] loop0: detected capacity change from 0 to 40427
[   53.971601][ T5811] F2FS-fs (loop0): Image doesn't support compression
[   53.974809][ T5811] F2FS-fs (loop0): build fault injection type: 0x4
[   53.985981][ T5593] Bluetooth: hci0: command tx timeout
[   53.991139][ T5811] F2FS-fs (loop0): invalid crc value
[   54.056673][ T5593] Bluetooth: hci2: command tx timeout
[   54.084097][ T5811] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   54.090070][ T5811] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   54.101640][ T5811] syz.0.45: attempt to access beyond end of device
[   54.101640][ T5811] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   54.107684][ T5811] CPU: 1 UID: 0 PID: 5811 Comm: syz.0.45 Not tainted syzkaller #0 PREEMPT(full) 
[   54.107732][ T5811] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   54.107744][ T5811] Call Trace:
[   54.107751][ T5811]  <TASK>
[   54.107759][ T5811]  dump_stack_lvl+0xe8/0x150
[   54.107795][ T5811]  f2fs_stop_checkpoint+0x3f6/0x5d0
[   54.107813][ T5811]  f2fs_write_end_bio+0x1211/0x16e0
[   54.107829][ T5811]  ? blkg_put+0x22/0x240
[   54.107891][ T5811]  __submit_merged_bio+0x258/0x6a0
[   54.107909][ T5811]  ? rcu_is_watching+0x16/0xb0
[   54.107924][ T5811]  __submit_merged_write_cond+0x3c9/0x4e0
[   54.107944][ T5811]  ? __pfx___submit_merged_write_cond+0x10/0x10
[   54.107975][ T5811]  f2fs_write_data_pages+0x2a27/0x36f0
[   54.107993][ T5811]  ? __lock_acquire+0x6df/0x2e50
[   54.108032][ T5811]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   54.108107][ T5811]  ? rcu_is_watching+0x16/0xb0
[   54.108121][ T5811]  ? __pfx_hlock_conflict+0x10/0x10
[   54.108136][ T5811]  ? __bfs+0x153/0x290
[   54.108148][ T5811]  ? __pfx_hlock_conflict+0x10/0x10
[   54.108175][ T5811]  ? lockdep_unlock+0x5c/0xd0
[   54.108192][ T5811]  ? __lock_acquire+0x14b9/0x2e50
[   54.108224][ T5811]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   54.108241][ T5811]  do_writepages+0x338/0x560
[   54.108268][ T5811]  ? do_raw_spin_unlock+0x4d/0x200
[   54.108288][ T5811]  filemap_fdatawrite+0x1e9/0x2f0
[   54.108304][ T5811]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   54.108348][ T5811]  ? do_raw_spin_unlock+0x4d/0x200
[   54.108368][ T5811]  f2fs_sync_dirty_inodes+0x30e/0x830
[   54.108396][ T5811]  f2fs_write_checkpoint+0xa3d/0x2710
[   54.108437][ T5811]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   54.108479][ T5811]  ? __pfx_down_write+0x10/0x10
[   54.108498][ T5811]  ? rcu_is_watching+0x16/0xb0
[   54.108518][ T5811]  f2fs_issue_checkpoint+0x424/0x6f0
[   54.108540][ T5811]  ? __pfx_hlock_conflict+0x10/0x10
[   54.108560][ T5811]  ? __pfx_f2fs_issue_checkpoint+0x10/0x10
[   54.108581][ T5811]  ? check_path+0x21/0x40
[   54.108595][ T5811]  ? check_noncircular+0xdb/0x150
[   54.108616][ T5811]  ? lockdep_unlock+0x5c/0xd0
[   54.108634][ T5811]  ? __lock_acquire+0x14b9/0x2e50
[   54.108682][ T5811]  ? f2fs_sync_fs+0x1f2/0x3c0
[   54.108698][ T5811]  f2fs_mkdir+0x51b/0x640
[   54.108713][ T5811]  ? d_alloc+0x144/0x190
[   54.108736][ T5811]  ? __pfx_f2fs_mkdir+0x10/0x10
[   54.108749][ T5811]  ? generic_permission+0x2bf/0x670
[   54.108771][ T5811]  ? bpf_lsm_inode_mkdir+0x9/0x20
[   54.108797][ T5811]  vfs_mkdir+0x40c/0x620
[   54.108817][ T5811]  filename_mkdirat+0x285/0x510
[   54.108835][ T5811]  ? __pfx_filename_mkdirat+0x10/0x10
[   54.108886][ T5811]  ? do_getname+0x151/0x250
[   54.108907][ T5811]  __se_sys_mkdirat+0x35/0x150
[   54.108923][ T5811]  do_syscall_64+0x166/0x520
[   54.108943][ T5811]  ? trace_irq_disable+0x3b/0x140
[   54.108957][ T5811]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   54.108976][ T5811]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   54.108990][ T5811] RIP: 0033:0x7faaa779cfc7
[   54.109006][ T5811] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   54.109018][ T5811] RSP: 002b:00007faaa86d6e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[   54.109035][ T5811] RAX: ffffffffffffffda RBX: 00007faaa86d6ee0 RCX: 00007faaa779cfc7
[   54.109045][ T5811] RDX: 00000000000001ff RSI: 00002000000005c0 RDI: 00000000ffffff9c
[   54.109054][ T5811] RBP: 0000200000000b00 R08: 0000200000000140 R09: 0000000000000000
[   54.109063][ T5811] R10: 0000200000000b00 R11: 0000000000000246 R12: 00002000000005c0
[   54.109072][ T5811] R13: 00007faaa86d6ea0 R14: 0000000000000000 R15: 0000000000000000
[   54.109097][ T5811]  </TASK>
[   54.139964][ T5811] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   54.634050][ T5839] loop1: detected capacity change from 0 to 512
[   55.017221][ T5593] Bluetooth: hci1: command tx timeout
[   56.058171][ T5593] Bluetooth: hci0: command tx timeout
[   56.136520][ T5593] Bluetooth: hci2: command tx timeout
[   56.620701][ T5851] loop0: detected capacity change from 0 to 256
[   56.652017][ T5851] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[   56.658786][ T5851] exFAT-fs (loop0): failed to test first cluster bit of root dir(5)
[   56.713672][ T5845] loop2: detected capacity change from 0 to 40427
[   56.732516][ T5845] F2FS-fs (loop2): build fault injection rate: 14
[   56.732562][ T5845] F2FS-fs (loop2): build fault injection type: 0x30e4
[   56.733489][ T5845] F2FS-fs (loop2): invalid crc value
[   56.740273][ T5845] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa62/0x1940
[   56.788595][ T5845] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   56.791986][ T5845] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   56.796077][ T5845] F2FS-fs (loop2): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x9ee/0x1ee0
[   56.809400][ T5845] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_find_data_folio+0x3a3/0x6d0
[   56.839248][ T5597] syz-executor: attempt to access beyond end of device
[   56.839248][ T5597] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   56.840186][ T5597] CPU: 0 UID: 0 PID: 5597 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   56.840225][ T5597] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   56.840234][ T5597] Call Trace:
[   56.840240][ T5597]  <TASK>
[   56.840246][ T5597]  dump_stack_lvl+0xe8/0x150
[   56.840267][ T5597]  f2fs_stop_checkpoint+0x3f6/0x5d0
[   56.840286][ T5597]  f2fs_write_end_bio+0x1211/0x16e0
[   56.840304][ T5597]  ? blkg_put+0x22/0x240
[   56.840327][ T5597]  __submit_merged_bio+0x258/0x6a0
[   56.840340][ T5597]  ? rcu_is_watching+0x16/0xb0
[   56.840358][ T5597]  __submit_merged_write_cond+0x3c9/0x4e0
[   56.840374][ T5597]  ? __pfx___submit_merged_write_cond+0x10/0x10
[   56.840405][ T5597]  f2fs_write_data_pages+0x2a27/0x36f0
[   56.840444][ T5597]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   56.840457][ T5597]  ? is_bpf_text_address+0x26/0x2b0
[   56.840474][ T5597]  ? arch_stack_walk+0xfb/0x150
[   56.840527][ T5597]  ? add_lock_to_list+0xc7/0x100
[   56.840543][ T5597]  ? lockdep_unlock+0x5c/0xd0
[   56.840556][ T5597]  ? __lock_acquire+0x14b9/0x2e50
[   56.840583][ T5597]  ? do_raw_spin_lock+0x12b/0x2f0
[   56.840606][ T5597]  ? do_raw_spin_unlock+0x4d/0x200
[   56.840622][ T5597]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   56.840638][ T5597]  do_writepages+0x338/0x560
[   56.840663][ T5597]  ? do_raw_spin_unlock+0x4d/0x200
[   56.840681][ T5597]  filemap_fdatawrite+0x1e9/0x2f0
[   56.840696][ T5597]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   56.840729][ T5597]  ? do_raw_spin_unlock+0x4d/0x200
[   56.840747][ T5597]  f2fs_sync_dirty_inodes+0x30e/0x830
[   56.840772][ T5597]  f2fs_write_checkpoint+0xa3d/0x2710
[   56.840787][ T5597]  ? __lock_acquire+0x6df/0x2e50
[   56.840818][ T5597]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   56.840885][ T5597]  kill_f2fs_super+0x2dd/0x700
[   56.840908][ T5597]  ? __pfx_kill_f2fs_super+0x10/0x10
[   56.840931][ T5597]  ? call_rcu+0x64d/0x8b0
[   56.840944][ T5597]  ? lockdep_hardirqs_on+0x7b/0x110
[   56.840970][ T5597]  deactivate_locked_super+0xbc/0x110
[   56.840984][ T5597]  cleanup_mnt+0x3d3/0x460
[   56.841004][ T5597]  task_work_run+0x1d9/0x270
[   56.841020][ T5597]  ? __pfx_task_work_run+0x10/0x10
[   56.841038][ T5597]  exit_to_user_mode_loop+0x204/0x770
[   56.841050][ T5597]  ? rcu_is_watching+0x16/0xb0
[   56.841067][ T5597]  do_syscall_64+0x328/0x520
[   56.841082][ T5597]  ? trace_irq_disable+0x3b/0x140
[   56.841094][ T5597]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   56.841107][ T5597]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   56.841116][ T5597] RIP: 0033:0x7f7d0379f397
[   56.841129][ T5597] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[   56.841139][ T5597] RSP: 002b:00007ffd39be9238 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   56.841154][ T5597] RAX: 0000000000000000 RBX: 00007f7d038344bb RCX: 00007f7d0379f397
[   56.841162][ T5597] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd39be92f0
[   56.841169][ T5597] RBP: 00007ffd39be92f0 R08: 00007ffd39bea2f0 R09: 00000000ffffffff
[   56.841177][ T5597] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd39bea380
[   56.841185][ T5597] R13: 00007f7d038344bb R14: 000000000000dd7c R15: 00007ffd39bea3c0
[   56.841204][ T5597]  </TASK>
[   56.962637][ T5597] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   57.538906][ T5865] loop2: detected capacity change from 0 to 128
[   57.550826][ T5865] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only
[   57.551291][ T5865] hpfs: filesystem error: improperly stopped
[   57.551301][ T5865] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   57.551308][ T5865] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories
[   57.551312][ T5865] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2
[   57.589884][   T76] I/O error, dev loop2, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2
[   58.048996][ T5656] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   58.219920][ T5656] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   58.228267][ T5656] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   58.237213][ T5656] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   58.250700][ T5656] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[   58.250753][ T5656] usb 1-1: Product: syz
[   58.250784][ T5656] usb 1-1: Manufacturer: syz
[   58.336736][ T5656] hub 1-1:4.0: USB hub found
[   58.517912][ T5656] hub 1-1:4.0: 11 ports detected
[   58.520213][ T5656] hub 1-1:4.0: insufficient power available to use all downstream ports
[   58.731791][ T5656] hub 1-1:4.0: config failed, can't get hub status (err -71)
[   58.786163][ T5656] usb 1-1: USB disconnect, device number 2
[   59.033512][ T5656] libceph: connect (1)[c::]:6789 error -101
[   59.037357][ T5656] libceph: mon0 (1)[c::]:6789 connect error
[   59.130732][ T5921] loop1: detected capacity change from 0 to 4096
[   59.138456][ T5921] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[   59.160153][ T5921] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[   59.165073][ T5921] ntfs3(loop1): ino=1a, mi_enum_attr
[   59.167627][ T5921] ntfs3(loop1): Failed to initialize $Extend/$ObjId.
[   59.281751][ T5927] netlink: 20 bytes leftover after parsing attributes in process `syz.1.89'.
[   59.301364][ T5656] libceph: connect (1)[c::]:6789 error -101
[   59.301637][ T5656] libceph: mon0 (1)[c::]:6789 connect error
[   59.806135][ T5656] libceph: connect (1)[c::]:6789 error -101
[   59.808817][ T5656] libceph: mon0 (1)[c::]:6789 connect error
[   59.827663][ T5913] ceph: No mds server is up or the cluster is laggy
[   59.875752][  T990] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   60.026618][  T990] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   60.028141][  T990] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   60.028164][  T990] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   60.030214][  T990] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[   60.030233][  T990] usb 2-1: Product: syz
[   60.030243][  T990] usb 2-1: Manufacturer: syz
[   60.044073][  T990] hub 2-1:4.0: USB hub found
[   60.247550][  T990] hub 2-1:4.0: 11 ports detected
[   60.248095][  T990] hub 2-1:4.0: insufficient power available to use all downstream ports
[   60.418570][ T5950] sctp: [Deprecated]: syz.0.98 (pid 5950) Use of int in max_burst socket option.
[   60.418570][ T5950] Use struct sctp_assoc_value instead
[   60.458378][  T990] hub 2-1:4.0: config failed, can't get hub status (err -71)
[   60.465060][ T5952] loop2: detected capacity change from 0 to 16
[   60.493503][ T5952] erofs (device loop2): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk!
[   60.501531][ T5952] erofs (device loop2): mounted with root inode @ nid 36.
[   60.512338][  T990] usb 2-1: USB disconnect, device number 2
[   60.539300][ T5952] syz.2.99: attempt to access beyond end of device
[   60.539300][ T5952] loop2: rw=0, sector=131157, nr_sectors = 1 limit=16
[   60.544907][ T5952] syz.2.99: attempt to access beyond end of device
[   60.544907][ T5952] loop2: rw=0, sector=46, nr_sectors = 1 limit=16
[   60.550041][ T5952] erofs (device loop2): read error -5 @ 0 of nid 36
[   60.610417][ T5958] loop0: detected capacity change from 0 to 512
[   60.717409][ T5962] netlink: 'syz.2.104': attribute type 1 has an invalid length.
[   60.807640][ T5962] bond1: entered promiscuous mode
[   60.808591][ T5962] 8021q: adding VLAN 0 to HW filter on device bond1
[   60.896514][ T5962] bond1: (slave bridge1): making interface the new active one
[   60.899902][ T5962] bridge1: entered promiscuous mode
[   60.905093][ T5962] bond1: (slave bridge1): Enslaving as an active interface with an up link
[   61.028285][ T5967] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   62.923405][ T5992] xt_hashlimit: size too large, truncated to 1048576
[   63.292240][ T6010] CIFS: Attempting to mount //127.0.0.1/share
[   63.320144][ T6010] CIFS: VFS: Error connecting to socket. Aborting operation.
[   63.320232][ T6010] CIFS: VFS: cifs_mount failed w/return code = -111
[   63.464210][   T34] audit: type=1326 audit(1790263336.689:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6014 comm="syz.1.125" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32ef59e159 code=0x7fc00000
[   63.473877][   T34] audit: type=1326 audit(1790263336.699:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6014 comm="syz.1.125" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f32ef59e159 code=0x7fc00000
[   64.233713][ T6044] overlayfs: failed lookup in lower (newroot/47, name='file0', err=-40): overlapping layers
[   64.396400][ T5656] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   64.545602][ T5656] usb 3-1: Using ep0 maxpacket: 16
[   64.546123][ T5656] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[   64.547065][ T5656] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   64.547078][ T5656] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[   64.547086][ T5656] usb 3-1: config 0 interface 0 has no altsetting 0
[   64.547100][ T5656] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   64.549349][ T5656] usb 3-1: config 0 descriptor??
[   64.601880][ T6054] loop1: detected capacity change from 0 to 32768
[   64.610740][ T6054] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.143 (6054)
[   64.653731][ T6054] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   64.657708][ T6054] BTRFS info (device loop1): using xxhash64 checksum algorithm
[   64.747198][ T6054] BTRFS info (device loop1): setting nodatasum
[   64.747247][ T6054] BTRFS info (device loop1): allowing degraded mounts
[   64.751940][ T6054] BTRFS info (device loop1): turning on async discard
[   64.752010][ T6054] BTRFS info (device loop1): enabling free space tree
[   64.752019][ T6054] BTRFS info (device loop1): force zlib compression, level 3
[   64.760492][ T6073] xt_hashlimit: size too large, truncated to 1048576
[   64.809786][ T5596] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   64.982277][ T5656] usbhid 3-1:0.0: can't add hid device: -71
[   64.982363][ T5656] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[   65.001327][ T5656] usb 3-1: USB disconnect, device number 2
[   65.181517][ T6095] process 'syz.0.151' launched './file2' with NULL argv: empty string added
[   65.247438][   T34] audit: type=1326 audit(1790263338.479:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.1.152" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f32ef59e159 code=0x0
[   65.665344][ T6125] sg_read: process 96 (syz.0.162) changed security contexts after opening file descriptor, this is not allowed.
[   66.114961][ T6137] loop2: detected capacity change from 0 to 2048
[   66.123947][ T6137] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities
[   66.239577][ T6143] netlink: 20 bytes leftover after parsing attributes in process `syz.2.171'.
[   66.372735][ T6150] No control pipe specified
[   66.399576][ T6139] loop1: detected capacity change from 0 to 32768
[   66.473491][ T6139] JBD2: Ignoring recovery information on journal
[   66.478162][ T6139] jbd2_journal_bmap: journal block not found at offset 32 on loop1-75
[   66.478405][ T6139] JBD2: bad block at offset 32
[   66.494075][ T6139] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   66.568228][ T5596] ocfs2: Unmounting device (7,1) on (node local)
[   66.615493][ T6160] xt_hashlimit: size too large, truncated to 1048576
[   66.809432][ T6176] tmpfs: Bad value for 'mpol'
[   66.901514][ T6182] loop2: detected capacity change from 0 to 1756
[   66.904915][ T6182] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[   66.905436][ T6182] UDF-fs: Scanning with blocksize 512 failed
[   66.911297][ T6182] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[   66.911307][ T6182] UDF-fs: Scanning with blocksize 1024 failed
[   66.913666][ T6182] UDF-fs: INFO Mounting volume 'CDROM', timestamp 2022/11/22 15:59 (1000)
[   66.993952][ T6184] sch_fq: defrate 4294964870 ignored.
[   67.007003][ T5656] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[   67.026716][ T6186] loop2: detected capacity change from 0 to 512
[   67.039008][ T6166] loop0: detected capacity change from 0 to 40427
[   67.048524][ T6166] F2FS-fs (loop0): build fault injection rate: 14
[   67.049575][ T6186] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.190: corrupted in-inode xattr: invalid ea_ino
[   67.049732][ T6186] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   67.053070][ T6186] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.190: couldn't read orphan inode 15 (err -117)
[   67.053199][ T6186] loop2: lost filesystem error report for type 5 error -117
[   67.059558][ T6186] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   67.073380][ T6166] F2FS-fs (loop0): build fault injection type: 0x30e4
[   67.077262][ T6166] F2FS-fs (loop0): invalid crc value
[   67.082863][ T6166] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa62/0x1940
[   67.122349][ T6166] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   67.130512][ T6166] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   67.150010][ T6166] F2FS-fs (loop0): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x9ee/0x1ee0
[   67.159164][ T5597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.181065][ T5656] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   67.182197][ T5656] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   67.182219][ T5656] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   67.183813][ T5656] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[   67.183831][ T5656] usb 2-1: Product: syz
[   67.183840][ T5656] usb 2-1: Manufacturer: syz
[   67.211756][ T5656] hub 2-1:4.0: USB hub found
[   67.265288][ T5593] Bluetooth: hci2: connection err: -111
[   67.414386][ T5656] hub 2-1:4.0: config failed, can't read hub descriptor (err -22)
[   67.436683][ T5656] usb 2-1: USB disconnect, device number 3
[   67.705626][ T6215] netlink: 'syz.0.199': attribute type 1 has an invalid length.
[   67.720205][ T6215] bond1: entered promiscuous mode
[   67.721214][ T6215] 8021q: adding VLAN 0 to HW filter on device bond1
[   67.928937][ T6218] loop0: detected capacity change from 0 to 32768
[   67.985245][ T6218] ialloc: diAlloc returned -5!
[   68.011759][ T6226] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[   68.080667][ T6230] xt_hashlimit: size too large, truncated to 1048576
[   68.391371][ T6235] loop0: detected capacity change from 0 to 32768
[   68.516518][ T5705] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   68.702105][ T5705] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[   68.708654][ T5705] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   68.708714][ T5705] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   68.708809][ T5705] usb 3-1: config 0 interface 0 has no altsetting 0
[   68.708859][ T5705] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   68.726749][ T5705] usb 3-1: config 0 descriptor??
[   68.760192][ T6268] FAULT_INJECTION: forcing a failure.
[   68.760192][ T6268] name failslab, interval 1, probability 0, space 0, times 1
[   68.760258][ T6268] CPU: 0 UID: 0 PID: 6268 Comm: syz.0.223 Not tainted syzkaller #0 PREEMPT(full) 
[   68.760292][ T6268] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   68.760301][ T6268] Call Trace:
[   68.760306][ T6268]  <TASK>
[   68.760313][ T6268]  dump_stack_lvl+0xe8/0x150
[   68.760338][ T6268]  should_fail_ex+0x410/0x560
[   68.760363][ T6268]  should_failslab+0xa8/0x100
[   68.760380][ T6268]  ? security_file_alloc+0x34/0x310
[   68.760400][ T6268]  kmem_cache_alloc_noprof+0xa1/0x600
[   68.760419][ T6268]  ? rcu_is_watching+0x16/0xb0
[   68.760435][ T6268]  ? security_file_alloc+0x34/0x310
[   68.760457][ T6268]  security_file_alloc+0x34/0x310
[   68.760476][ T6268]  init_file+0x90/0x2b0
[   68.760499][ T6268]  alloc_empty_file+0x74/0x1d0
[   68.760515][ T6268]  alloc_file_pseudo+0x115/0x1e0
[   68.760533][ T6268]  ? __pfx_alloc_file_pseudo+0x10/0x10
[   68.760549][ T6268]  ? _raw_spin_unlock+0x28/0x50
[   68.760569][ T6268]  anon_inode_getfile_fmode+0xb0/0x1c0
[   68.760587][ T6268]  do_signalfd4+0x1a5/0x3f0
[   68.760602][ T6268]  __x64_sys_signalfd4+0x15a/0x1a0
[   68.760617][ T6268]  ? __pfx___x64_sys_signalfd4+0x10/0x10
[   68.760636][ T6268]  do_syscall_64+0x166/0x520
[   68.760651][ T6268]  ? trace_irq_disable+0x3b/0x140
[   68.760663][ T6268]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.760678][ T6268]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.760690][ T6268] RIP: 0033:0x7faaa779e159
[   68.760702][ T6268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   68.760711][ T6268] RSP: 002b:00007faaa86d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000121
[   68.760726][ T6268] RAX: ffffffffffffffda RBX: 00007faaa7a25fa0 RCX: 00007faaa779e159
[   68.760735][ T6268] RDX: 0000000000000008 RSI: 0000200000000000 RDI: ffffffffffffffff
[   68.760744][ T6268] RBP: 00007faaa783506b R08: 0000000000000000 R09: 0000000000000000
[   68.760751][ T6268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   68.760758][ T6268] R13: 00007faaa7a26038 R14: 00007faaa7a25fa0 R15: 00007ffd1a186708
[   68.760806][ T6268]  </TASK>
[   69.139708][ T5705] hid (null): global environment stack underflow
[   69.142456][ T5705] hid (null): bogus close delimiter
[   69.150674][ T5705] hid-multitouch 0003:0EEF:72C4.0001: global environment stack underflow
[   69.157295][ T5705] hid-multitouch 0003:0EEF:72C4.0001: item 0 4 1 11 parsing failed
[   69.158313][ T5705] hid-multitouch 0003:0EEF:72C4.0001: probe with driver hid-multitouch failed with error -22
[   69.345834][   T25] usb 3-1: USB disconnect, device number 3
[   69.414537][   T34] audit: type=1326 audit(1790263342.639:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6279 comm="syz.1.229" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32ef59e159 code=0x7fc00000
[   69.425449][   T34] audit: type=1326 audit(1790263342.659:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6279 comm="syz.1.229" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f32ef59e159 code=0x7fc00000
[   69.874266][ T6297] overlayfs: failed to resolve './bus': -2
[   69.879957][ T6297] overlayfs: overlapping lowerdir path
[   69.978109][ T6300] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[   70.465668][ T5656] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   70.615682][ T5656] usb 2-1: Using ep0 maxpacket: 16
[   70.617698][ T5656] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[   70.618809][ T5656] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[   70.618829][ T5656] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   70.620959][ T5656] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   70.620975][ T5656] usb 2-1: Product: syz
[   70.620984][ T5656] usb 2-1: Manufacturer: syz
[   70.620993][ T5656] usb 2-1: SerialNumber: syz
[   70.629756][ T5656] usb 2-1: config 0 descriptor??
[   70.636746][ T5656] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[   70.636797][ T5656] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[   71.240961][ T5656] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[   71.241599][ T5656] em28xx 2-1:0.0: Config register raw data: 0xfffffffb
[   71.418620][ T6333] loop0: detected capacity change from 0 to 40427
[   71.419482][ T1381] ieee802154 phy0 wpan0: encryption failed: -22
[   71.419890][ T1381] ieee802154 phy1 wpan1: encryption failed: -22
[   71.429423][ T6333] F2FS-fs (loop0): build fault injection rate: 14
[   71.431603][ T6333] F2FS-fs (loop0): build fault injection type: 0x30e4
[   71.434550][ T6333] F2FS-fs (loop0): invalid crc value
[   71.443391][ T6333] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa62/0x1940
[   71.477789][ T6333] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   71.481819][ T6333] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   71.557218][   T25] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   71.717647][   T25] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice= 1.08
[   71.722094][   T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   71.722155][   T25] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 8
[   71.733441][   T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.733489][   T25] usb 3-1: Product: syz
[   71.733530][   T25] usb 3-1: Manufacturer: syz
[   71.733554][   T25] usb 3-1: SerialNumber: syz
[   71.769187][ T5593] Bluetooth: hci0: connection err: -111
[   71.865804][ T5656] em28xx 2-1:0.0: AC97 command still being executed: not handled properly!
[   71.865844][ T5656] em28xx 2-1:0.0: Unknown AC97 audio processor detected!
[   72.047182][ T5656] em28xx 2-1:0.0: couldn't setup AC97 register 2
[   72.049998][ T5656] em28xx 2-1:0.0: couldn't setup AC97 register 4
[   72.053350][ T5656] em28xx 2-1:0.0: couldn't setup AC97 register 6
[   72.056461][ T5656] em28xx 2-1:0.0: couldn't setup AC97 register 54
[   72.058603][ T5656] em28xx 2-1:0.0: couldn't setup AC97 register 56
[   72.064434][ T5656] usb 2-1: USB disconnect, device number 4
[   72.160272][   T25] ath6kl: Failed to submit usb control message: -71
[   72.160348][   T25] ath6kl: unable to send the bmi data to the device: -71
[   72.163032][   T25] ath6kl: Unable to send get target info: -71
[   72.165030][   T25] ath6kl: Failed to init ath6kl core: -71
[   72.167802][   T25] ath6kl_usb 3-1:1.0: probe with driver ath6kl_usb failed with error -71
[   72.176087][   T25] usb 3-1: USB disconnect, device number 4
[   72.621517][ T6361] overlayfs: failed to resolve './file0': -2
[   72.647652][ T6363] loop0: detected capacity change from 0 to 2048
[   72.651396][ T6363] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities
[   72.744406][ T6366] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   72.805201][ T6371] loop2: detected capacity change from 0 to 256
[   73.065973][   T25] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   73.085394][ T6389] loop2: detected capacity change from 0 to 1024
[   73.119864][ T6391] loop0: detected capacity change from 0 to 512
[   73.335968][   T25] usb 2-1: Using ep0 maxpacket: 16
[   73.336565][   T25] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[   73.337457][   T25] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[   73.337486][   T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   73.339383][   T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.339421][   T25] usb 2-1: Product: syz
[   73.339460][   T25] usb 2-1: Manufacturer: syz
[   73.339491][   T25] usb 2-1: SerialNumber: syz
[   73.382235][   T25] usb 2-1: config 0 descriptor??
[   73.386978][   T25] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[   73.387022][   T25] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[   73.457858][ T6399] loop2: detected capacity change from 0 to 8192
[   73.511042][ T6399]  loop2: p1 p2 p3
[   73.518476][ T6399] loop2: partition table partially beyond EOD, truncated
[   73.519160][ T6399] loop2: p1 start 68157184 is beyond EOD, truncated
[   73.641610][ T6399] I/O error, dev loop2, sector 127 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 2
[   73.983373][ T5595] udevd[5595]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[   73.991135][ T5881] udevd[5881]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[   74.029262][   T25] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[   74.033148][   T25] em28xx 2-1:0.0: Config register raw data: 0xfffffffb
[   74.275910][ T5656] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   74.437736][ T5656] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[   74.440353][ T5656] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   74.440510][ T5656] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   74.440540][ T5656] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.464243][ T5656] usb 3-1: config 0 descriptor??
[   74.653338][   T25] em28xx 2-1:0.0: Unknown AC97 audio processor detected!
[   74.654960][   T25] em28xx 2-1:0.0: couldn't setup AC97 register 2
[   74.655458][   T25] em28xx 2-1:0.0: couldn't setup AC97 register 4
[   74.655727][   T25] em28xx 2-1:0.0: couldn't setup AC97 register 6
[   74.656514][   T25] em28xx 2-1:0.0: couldn't setup AC97 register 54
[   74.658036][   T25] em28xx 2-1:0.0: couldn't setup AC97 register 56
[   74.662718][   T25] usb 2-1: USB disconnect, device number 5
[   74.903991][ T5656] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0
[   74.906504][ T5656] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0
[   74.906518][ T5656] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0
[   74.906586][ T5656] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0
[   74.906598][ T5656] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0
[   74.906651][ T5656] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0
[   74.906662][ T5656] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0
[   74.932626][ T5656] arvo 0003:1E7D:30D4.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0
[   75.103644][ T5656] usb 3-1: USB disconnect, device number 5
[   75.249515][ T5593] Bluetooth: hci1: connection err: -111
[   75.392304][ T6409] loop0: detected capacity change from 0 to 512
[   75.412132][ T6409] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   75.429158][ T6409] EXT4-fs error (device loop0): ext4_quota_enable:7256: comm syz.0.280: Bad quota inum: 2, type: 1
[   75.430413][ T6409] EXT4-fs warning (device loop0): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix.
[   75.443664][ T6409] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[   75.446731][ T6409] EXT4-fs error (device loop0): ext4_quota_enable:7256: comm syz.0.280: Bad quota inum: 2, type: 1
[   75.447184][ T6409] EXT4-fs warning (device loop0): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix.
[   75.462648][ T5592] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[   75.916203][   T25] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   75.964528][   T34] audit: type=1326 audit(1790263349.189:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6427 comm="syz.1.291" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f32ef59e159 code=0x0
[   76.067642][   T25] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[   76.072389][   T25] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[   76.072643][   T25] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[   76.072658][   T25] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[   76.072671][   T25] usb 3-1: config 220 has no interface number 2
[   76.072713][   T25] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[   76.072730][   T25] usb 3-1: config 220 interface 0 has no altsetting 0
[   76.072783][   T25] usb 3-1: config 220 interface 76 has no altsetting 0
[   76.072796][   T25] usb 3-1: config 220 interface 1 has no altsetting 0
[   76.087399][   T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.087419][   T25] usb 3-1: Product: syz
[   76.087428][   T25] usb 3-1: Manufacturer: syz
[   76.087437][   T25] usb 3-1: SerialNumber: syz
[   76.311990][   T25] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[   76.312076][   T25] uvcvideo 3-1:220.0: No valid video chain found.
[   76.312468][   T25] usb 3-1: selecting invalid altsetting 0
[   76.326112][   T25] usb 3-1: selecting invalid altsetting 0
[   76.326180][   T25] usbtest 3-1:220.1: probe with driver usbtest failed with error -22
[   76.328163][   T25] usb 3-1: USB disconnect, device number 6
[   76.500001][ T6436] block nbd0: shutting down sockets
[   76.541119][    T9] cfg80211: failed to load regulatory.db
[   76.566895][ T6438] input: syz0 as /devices/virtual/input/input4
[   76.889172][ T6450] loop2: detected capacity change from 0 to 256
[   76.899926][ T6450] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe69f4e8a, utbl_chksum : 0x7319d30d)
[   77.016176][ T5658] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   77.096300][ T6460] FAULT_INJECTION: forcing a failure.
[   77.096300][ T6460] name failslab, interval 1, probability 0, space 0, times 0
[   77.100822][ T6460] CPU: 0 UID: 0 PID: 6460 Comm: syz.2.305 Not tainted syzkaller #0 PREEMPT(full) 
[   77.100852][ T6460] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   77.100859][ T6460] Call Trace:
[   77.100864][ T6460]  <TASK>
[   77.100869][ T6460]  dump_stack_lvl+0xe8/0x150
[   77.100906][ T6460]  should_fail_ex+0x410/0x560
[   77.100922][ T6460]  should_failslab+0xa8/0x100
[   77.100935][ T6460]  __kmalloc_noprof+0xfe/0x720
[   77.100949][ T6460]  ? prepare_creds+0x30/0x820
[   77.100958][ T6460]  ? security_prepare_creds+0x52/0x360
[   77.100973][ T6460]  ? security_prepare_creds+0x52/0x360
[   77.100985][ T6460]  ? kmem_cache_alloc_noprof+0x156/0x600
[   77.100998][ T6460]  security_prepare_creds+0x52/0x360
[   77.101012][ T6460]  prepare_creds+0x57d/0x820
[   77.101022][ T6460]  __sys_setresuid+0x62f/0xc40
[   77.101035][ T6460]  do_syscall_64+0x166/0x520
[   77.101046][ T6460]  ? trace_irq_disable+0x3b/0x140
[   77.101054][ T6460]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.101064][ T6460]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.101072][ T6460] RIP: 0033:0x7f7d0379e159
[   77.101082][ T6460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   77.101089][ T6460] RSP: 002b:00007f7d0473f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000075
[   77.101101][ T6460] RAX: ffffffffffffffda RBX: 00007f7d03a25fa0 RCX: 00007f7d0379e159
[   77.101107][ T6460] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01
[   77.101112][ T6460] RBP: 00007f7d0383506b R08: 0000000000000000 R09: 0000000000000000
[   77.101118][ T6460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   77.101125][ T6460] R13: 00007f7d03a26038 R14: 00007f7d03a25fa0 R15: 00007ffd39be9fc8
[   77.101137][ T6460]  </TASK>
[   77.185633][ T5658] usb 1-1: Using ep0 maxpacket: 16
[   77.185706][   T25] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[   77.190427][ T5658] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[   77.196577][ T5658] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[   77.196618][ T5658] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   77.206443][ T5658] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.206481][ T5658] usb 1-1: Product: syz
[   77.206524][ T5658] usb 1-1: Manufacturer: syz
[   77.206548][ T5658] usb 1-1: SerialNumber: syz
[   77.216112][ T5658] usb 1-1: config 0 descriptor??
[   77.222644][ T5658] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[   77.227605][ T5658] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[   77.338710][   T25] usb 2-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.00
[   77.340116][   T25] usb 2-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   77.340139][   T25] usb 2-1: config 0 interface 0 has no altsetting 0
[   77.340162][   T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.344437][   T25] usb 2-1: config 0 descriptor??
[   77.361100][ T6471] loop2: detected capacity change from 0 to 4096
[   77.510214][ T6473] loop2: detected capacity change from 0 to 4096
[   77.756598][   T25] logitech-djreceiver 0003:046D:C70E.0003: unknown main item tag 0x3
[   77.756673][   T25] logitech-djreceiver 0003:046D:C70E.0003: ignoring exceeding usage max
[   77.759829][   T25] logitech-djreceiver 0003:046D:C70E.0003: hidraw0: USB HID v0.01 Device [HID 046d:c70e] on usb-dummy_hcd.1-1/input0
[   77.834323][ T5658] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[   77.841040][ T5658] em28xx 1-1:0.0: Config register raw data: 0xfffffffb
[   77.963794][    T9] usb 2-1: USB disconnect, device number 6
[   78.449414][ T5658] em28xx 1-1:0.0: Unknown AC97 audio processor detected!
[   78.457331][ T5658] em28xx 1-1:0.0: couldn't setup AC97 register 2
[   78.460823][ T5658] em28xx 1-1:0.0: couldn't setup AC97 register 4
[   78.463829][ T5658] em28xx 1-1:0.0: couldn't setup AC97 register 6
[   78.466865][ T5658] em28xx 1-1:0.0: couldn't setup AC97 register 54
[   78.471950][ T5658] em28xx 1-1:0.0: couldn't setup AC97 register 56
[   78.479037][ T5658] usb 1-1: USB disconnect, device number 3
[   78.541679][ T6482] batadv_slave_1: entered promiscuous mode
[   78.543397][ T6481] batadv_slave_1: left promiscuous mode
[   79.000216][ T6500] loop0: detected capacity change from 0 to 4096
[   79.147821][ T6506] loop0: detected capacity change from 0 to 4096
[   79.348099][   T34] audit: type=1326 audit(1790263352.579:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6511 comm="syz.1.329" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f32ef59e159 code=0x0
[   79.624246][ T6520] CIFS: Attempting to mount //127.0.0.1/share
[   80.206931][ T6516] block nbd0: shutting down sockets
[   80.443236][ T6523] loop1: detected capacity change from 0 to 32768
[   80.459837][ T6523] jfs_lookup: iget failed on inum 4
[   80.466790][ T6520] CIFS: VFS: cifs_mount failed w/return code = -112
[   80.612205][ T6537] overlayfs: overlapping lowerdir path
[   80.684161][ T6541] loop2: detected capacity change from 0 to 1024
[   80.856273][ T6554] loop0: detected capacity change from 0 to 1764
[   80.859552][ T6554] iso9660: Bad value for 'gid'
[   80.861517][ T6554] iso9660: Bad value for 'gid'
[   81.072659][ T6568] netlink: 12 bytes leftover after parsing attributes in process `syz.2.355'.
[   81.072757][ T6568] openvswitch: netlink: Missing key (keys=c0, expected=40300)
[   81.076319][ T5658] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[   81.117361][ T6570] loop2: detected capacity change from 0 to 1024
[   81.135822][   T25] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   81.229848][ T5658] usb 2-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.00
[   81.234641][ T5658] usb 2-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   81.234707][ T5658] usb 2-1: config 0 interface 0 has no altsetting 0
[   81.234780][ T5658] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.242002][ T5658] usb 2-1: config 0 descriptor??
[   81.286405][   T25] usb 1-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d
[   81.291029][   T25] usb 1-1: config index 0 descriptor too short (expected 7768, got 18)
[   81.294419][   T25] usb 1-1: config 0 has an invalid interface number: 71 but max is 0
[   81.297793][   T25] usb 1-1: config 0 has no interface number 0
[   81.300295][   T25] usb 1-1: too many endpoints for config 0 interface 71 altsetting 245: 118, using maximum allowed: 30
[   81.300317][   T25] usb 1-1: config 0 interface 71 altsetting 245 has 0 endpoint descriptors, different from the interface descriptor's value: 118
[   81.300332][   T25] usb 1-1: config 0 interface 71 has no altsetting 0
[   81.300352][   T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.316117][   T25] usb 1-1: config 0 descriptor??
[   81.435637][    T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   81.525800][   T25] usb 1-1: string descriptor 0 read error: -71
[   81.526435][   T25] ftdi_sio 1-1:0.71: FTDI USB Serial Device converter detected
[   81.527382][   T25] ftdi_sio ttyUSB0: unknown device type: 0x524d
[   81.529428][   T25] usb 1-1: USB disconnect, device number 4
[   81.530390][   T25] ftdi_sio 1-1:0.71: device disconnected
[   81.587454][    T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[   81.591970][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   81.592026][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   81.592110][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.597684][    T9] usb 3-1: config 0 descriptor??
[   81.658329][ T5658] logitech-djreceiver 0003:046D:C70E.0004: unknown main item tag 0x3
[   81.658497][ T5658] logitech-djreceiver 0003:046D:C70E.0004: ignoring exceeding usage max
[   81.667077][ T5658] logitech-djreceiver 0003:046D:C70E.0004: hidraw0: USB HID v0.01 Device [HID 046d:c70e] on usb-dummy_hcd.1-1/input0
[   81.862095][  T990] usb 2-1: USB disconnect, device number 7
[   82.013841][    T9] usbhid 3-1:0.0: can't add hid device: -71
[   82.013916][    T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[   82.020020][    T9] usb 3-1: USB disconnect, device number 7
[   82.296810][  T990] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   82.399323][ T6576] overlayfs: overlapping lowerdir path
[   82.446306][  T990] usb 1-1: Using ep0 maxpacket: 32
[   82.450797][  T990] usb 1-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00
[   82.456734][  T990] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   82.456795][  T990] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.471520][  T990] usb 1-1: config 0 descriptor??
[   82.594462][ T6586] loop2: detected capacity change from 0 to 8
[   82.633947][ T6586] SQUASHFS error: Unable to read inode 0x0
[   82.892756][  T990] usbhid 1-1:0.0: can't add hid device: -71
[   82.892858][  T990] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[   82.903296][ T6596] capability: warning: `syz.1.369' uses 32-bit capabilities (legacy support in use)
[   82.910735][  T990] usb 1-1: USB disconnect, device number 5
[   82.923540][ T6598] loop2: detected capacity change from 0 to 16
[   82.940123][ T6598] erofs (device loop2): mounted with root inode @ nid 36.
[   83.238900][ T6613] mac80211_hwsim hwsim1 wlan1: entered promiscuous mode
[   83.446738][ T6623] trusted_key: encrypted_key: insufficient parameters specified
[   83.469484][ T6623] trusted_key: encrypted_key: keylen parameter is missing
[   83.640144][ T6636] CIFS: Attempting to mount //127.0.0.1/share
[   83.643940][ T6636] CIFS: VFS: Error connecting to socket. Aborting operation.
[   83.652890][ T6636] CIFS: VFS: cifs_mount failed w/return code = -111
[   83.959679][ T6657] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   83.959846][ T6657] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   84.056045][ T5705] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[   84.068065][ T6664] loop1: detected capacity change from 0 to 1024
[   84.208440][ T5705] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   84.214197][ T5705] usb 1-1: config 0 has an invalid interface number: 3 but max is 0
[   84.214269][ T5705] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   84.214309][ T5705] usb 1-1: config 0 has no interface number 0
[   84.227260][ T5705] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[   84.227297][ T5705] usb 1-1: Product: syz
[   84.227340][ T5705] usb 1-1: Manufacturer: syz
[   84.227364][ T5705] usb 1-1: SerialNumber: syz
[   84.236147][ T5705] usb 1-1: config 0 descriptor??
[   84.439875][ T6668] loop1: detected capacity change from 0 to 32768
[   84.448864][ T6668] jfs_lookup: iget failed on inum 4
[   84.471416][ T5705] usb 1-1: USB disconnect, device number 6
[   84.828628][ T6688] loop2: detected capacity change from 0 to 1024
[   85.084037][ T6692] loop2: detected capacity change from 0 to 40427
[   85.087396][ T6692] F2FS-fs (loop2): build fault injection rate: 14
[   85.087445][ T6692] F2FS-fs (loop2): build fault injection type: 0x30e4
[   85.087920][ T6692] F2FS-fs (loop2): invalid crc value
[   85.092083][ T6692] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa62/0x1940
[   85.134903][ T6692] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   85.139885][ T6692] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   85.145111][ T6692] F2FS-fs (loop2): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x9ee/0x1ee0
[   85.153226][ T6692] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_find_data_folio+0x3a3/0x6d0
[   85.157353][ T6692] F2FS-fs (loop2): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x110/0xab0
[   85.177540][ T5597] syz-executor: attempt to access beyond end of device
[   85.177540][ T5597] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[   85.178135][ T5597] CPU: 0 UID: 0 PID: 5597 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   85.178169][ T5597] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   85.178176][ T5597] Call Trace:
[   85.178180][ T5597]  <TASK>
[   85.178184][ T5597]  dump_stack_lvl+0xe8/0x150
[   85.178201][ T5597]  f2fs_stop_checkpoint+0x3f6/0x5d0
[   85.178212][ T5597]  f2fs_write_end_bio+0x1211/0x16e0
[   85.178224][ T5597]  ? blkg_put+0x22/0x240
[   85.178238][ T5597]  __submit_merged_bio+0x258/0x6a0
[   85.178247][ T5597]  ? rcu_is_watching+0x16/0xb0
[   85.178258][ T5597]  __submit_merged_write_cond+0x3c9/0x4e0
[   85.178270][ T5597]  ? __pfx___submit_merged_write_cond+0x10/0x10
[   85.178287][ T5597]  f2fs_write_data_pages+0x2a27/0x36f0
[   85.178297][ T5597]  ? is_bpf_text_address+0x292/0x2b0
[   85.178318][ T5597]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   85.178343][ T5597]  ? __pfx_hlock_conflict+0x10/0x10
[   85.178352][ T5597]  ? __bfs+0x153/0x290
[   85.178359][ T5597]  ? __pfx_hlock_conflict+0x10/0x10
[   85.178374][ T5597]  ? lockdep_unlock+0x5c/0xd0
[   85.178384][ T5597]  ? __lock_acquire+0x14b9/0x2e50
[   85.178400][ T5597]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   85.178410][ T5597]  do_writepages+0x338/0x560
[   85.178426][ T5597]  ? do_raw_spin_unlock+0x4d/0x200
[   85.178437][ T5597]  filemap_fdatawrite+0x1e9/0x2f0
[   85.178447][ T5597]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   85.178470][ T5597]  ? do_raw_spin_unlock+0x4d/0x200
[   85.178482][ T5597]  f2fs_sync_dirty_inodes+0x30e/0x830
[   85.178498][ T5597]  f2fs_write_checkpoint+0xa3d/0x2710
[   85.178508][ T5597]  ? __lock_acquire+0x6df/0x2e50
[   85.178526][ T5597]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   85.178572][ T5597]  kill_f2fs_super+0x2dd/0x700
[   85.178587][ T5597]  ? __pfx_kill_f2fs_super+0x10/0x10
[   85.178602][ T5597]  ? call_rcu+0x64d/0x8b0
[   85.178610][ T5597]  ? lockdep_hardirqs_on+0x7b/0x110
[   85.178626][ T5597]  deactivate_locked_super+0xbc/0x110
[   85.178638][ T5597]  cleanup_mnt+0x3d3/0x460
[   85.178650][ T5597]  task_work_run+0x1d9/0x270
[   85.178660][ T5597]  ? __pfx_task_work_run+0x10/0x10
[   85.178672][ T5597]  exit_to_user_mode_loop+0x204/0x770
[   85.178679][ T5597]  ? rcu_is_watching+0x16/0xb0
[   85.178713][ T5597]  do_syscall_64+0x328/0x520
[   85.178726][ T5597]  ? trace_irq_disable+0x3b/0x140
[   85.178733][ T5597]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   85.178743][ T5597]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   85.178750][ T5597] RIP: 0033:0x7f7d0379f397
[   85.178759][ T5597] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[   85.178765][ T5597] RSP: 002b:00007ffd39be9238 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   85.178775][ T5597] RAX: 0000000000000000 RBX: 00007f7d038344bb RCX: 00007f7d0379f397
[   85.178780][ T5597] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd39be92f0
[   85.178784][ T5597] RBP: 00007ffd39be92f0 R08: 00007ffd39bea2f0 R09: 00000000ffffffff
[   85.178790][ T5597] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd39bea380
[   85.178794][ T5597] R13: 00007f7d038344bb R14: 0000000000014c32 R15: 00007ffd39bea3c0
[   85.178806][ T5597]  </TASK>
[   85.186301][ T5597] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   85.186347][ T5597] CPU: 1 UID: 0 PID: 5597 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   85.186361][ T5597] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   85.186369][ T5597] Call Trace:
[   85.186375][ T5597]  <TASK>
[   85.186381][ T5597]  dump_stack_lvl+0xe8/0x150
[   85.186404][ T5597]  f2fs_stop_checkpoint+0x3f6/0x5d0
[   85.186423][ T5597]  f2fs_write_end_bio+0x1211/0x16e0
[   85.186456][ T5597]  __submit_merged_bio+0x258/0x6a0
[   85.186471][ T5597]  ? rcu_is_watching+0x16/0xb0
[   85.186490][ T5597]  __submit_merged_write_cond+0x3c9/0x4e0
[   85.186511][ T5597]  ? __pfx___submit_merged_write_cond+0x10/0x10
[   85.186541][ T5597]  f2fs_write_data_pages+0x2a27/0x36f0
[   85.186558][ T5597]  ? is_bpf_text_address+0x292/0x2b0
[   85.186594][ T5597]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   85.186638][ T5597]  ? __pfx_hlock_conflict+0x10/0x10
[   85.186652][ T5597]  ? __bfs+0x153/0x290
[   85.186663][ T5597]  ? __pfx_hlock_conflict+0x10/0x10
[   85.186718][ T5597]  ? lockdep_unlock+0x5c/0xd0
[   85.186736][ T5597]  ? __lock_acquire+0x14b9/0x2e50
[   85.186766][ T5597]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   85.186784][ T5597]  do_writepages+0x338/0x560
[   85.186811][ T5597]  ? do_raw_spin_unlock+0x4d/0x200
[   85.186831][ T5597]  filemap_fdatawrite+0x1e9/0x2f0
[   85.186847][ T5597]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   85.186890][ T5597]  ? do_raw_spin_unlock+0x4d/0x200
[   85.186910][ T5597]  f2fs_sync_dirty_inodes+0x30e/0x830
[   85.186938][ T5597]  f2fs_write_checkpoint+0xa3d/0x2710
[   85.186954][ T5597]  ? __lock_acquire+0x6df/0x2e50
[   85.186987][ T5597]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   85.187040][ T5597]  kill_f2fs_super+0x2dd/0x700
[   85.187063][ T5597]  ? __pfx_kill_f2fs_super+0x10/0x10
[   85.187110][ T5597]  ? call_rcu+0x64d/0x8b0
[   85.187125][ T5597]  ? lockdep_hardirqs_on+0x7b/0x110
[   85.187152][ T5597]  deactivate_locked_super+0xbc/0x110
[   85.187171][ T5597]  cleanup_mnt+0x3d3/0x460
[   85.187212][ T5597]  task_work_run+0x1d9/0x270
[   85.187237][ T5597]  ? __pfx_task_work_run+0x10/0x10
[   85.187258][ T5597]  exit_to_user_mode_loop+0x204/0x770
[   85.187271][ T5597]  ? rcu_is_watching+0x16/0xb0
[   85.187289][ T5597]  do_syscall_64+0x328/0x520
[   85.187306][ T5597]  ? trace_irq_disable+0x3b/0x140
[   85.187318][ T5597]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   85.187335][ T5597]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   85.187348][ T5597] RIP: 0033:0x7f7d0379f397
[   85.187361][ T5597] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[   85.187372][ T5597] RSP: 002b:00007ffd39be9238 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   85.187387][ T5597] RAX: 0000000000000000 RBX: 00007f7d038344bb RCX: 00007f7d0379f397
[   85.187395][ T5597] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd39be92f0
[   85.187403][ T5597] RBP: 00007ffd39be92f0 R08: 00007ffd39bea2f0 R09: 00000000ffffffff
[   85.187411][ T5597] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd39bea380
[   85.187419][ T5597] R13: 00007f7d038344bb R14: 0000000000014c32 R15: 00007ffd39bea3c0
[   85.187439][ T5597]  </TASK>
[   85.188080][ T5597] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   85.214301][    T9] loop2: lost filesystem error report for type 5 error -108
[   85.410684][ T6697] loop0: detected capacity change from 0 to 8192
[   85.415417][ T6699] loop1: detected capacity change from 0 to 1024
[   85.454583][ T6697]  loop0: p1 p2 p3
[   85.454645][ T6697] loop0: partition table partially beyond EOD, truncated
[   85.455231][ T6697] loop0: p1 start 68157184 is beyond EOD, truncated
[   85.541366][ T5595] udevd[5595]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[   85.543544][ T6560] udevd[6560]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[   85.610676][ T6701] input: syz0 as /devices/virtual/input/input5
[   85.672062][ T6703] lo: entered promiscuous mode
[   85.796377][ T6703] tunl0: entered promiscuous mode
[   85.801530][ T6703] gre0: entered promiscuous mode
[   85.821051][ T6703] gretap0: entered promiscuous mode
[   85.834099][ T6703] erspan0: entered promiscuous mode
[   85.840144][ T6703] ip_vti0: entered promiscuous mode
[   85.841390][ T6703] ip6_vti0: entered promiscuous mode
[   85.843152][ T6703] sit0: entered promiscuous mode
[   85.851881][ T6703] ip6tnl0: entered promiscuous mode
[   85.863742][ T6703] ip6gre0: entered promiscuous mode
[   85.870364][ T6703] syz_tun: entered promiscuous mode
[   85.874520][ T6703] ip6gretap0: entered promiscuous mode
[   85.878590][ T6703] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.879957][ T6703] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.883417][ T6703] bridge0: entered promiscuous mode
[   85.891257][ T6703] vcan0: entered promiscuous mode
[   85.893676][ T6703] bond0: entered promiscuous mode
[   85.893776][ T6703] bond_slave_0: entered promiscuous mode
[   85.893985][ T6703] bond_slave_1: entered promiscuous mode
[   85.907111][ T6703] team0: entered promiscuous mode
[   85.909317][ T6703] team_slave_0: entered promiscuous mode
[   85.911927][ T6703] team_slave_1: entered promiscuous mode
[   85.920921][ T6703] dummy0: entered promiscuous mode
[   85.929637][ T6703] nlmon0: entered promiscuous mode
[   85.933144][ T6703] batadv0: entered promiscuous mode
[   85.940514][ T6703] vxcan0: entered promiscuous mode
[   85.943407][ T6703] vxcan1: entered promiscuous mode
[   85.947468][ T6703] veth0: entered promiscuous mode
[   85.952276][ T6703] veth1: entered promiscuous mode
[   85.961608][ T6703] wg0: entered promiscuous mode
[   85.967609][ T6703] wg1: entered promiscuous mode
[   85.972974][ T6703] wg2: entered promiscuous mode
[   85.979501][ T6703] veth0_to_bridge: entered promiscuous mode
[   85.987099][ T6703] veth1_to_bridge: entered promiscuous mode
[   85.997391][ T6703] veth0_to_bond: entered promiscuous mode
[   86.004513][ T6703] veth1_to_bond: entered promiscuous mode
[   86.010677][ T6703] veth0_to_team: entered promiscuous mode
[   86.017815][ T6703] veth1_to_team: entered promiscuous mode
[   86.024968][ T6703] veth0_to_batadv: entered promiscuous mode
[   86.032787][ T6703] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   86.036261][ T6703] batadv_slave_0: entered promiscuous mode
[   86.041230][ T6703] veth1_to_batadv: entered promiscuous mode
[   86.047348][ T6703] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   86.050529][ T6703] batadv_slave_1: entered promiscuous mode
[   86.054962][ T6703] xfrm0: entered promiscuous mode
[   86.060943][ T6703] veth0_to_hsr: entered promiscuous mode
[   86.069790][ T6703] veth1_to_hsr: entered promiscuous mode
[   86.078031][ T6703] hsr0: entered promiscuous mode
[   86.082902][ T6703] veth1_virt_wifi: entered promiscuous mode
[   86.085753][  T990] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   86.089615][ T6703] veth0_virt_wifi: entered promiscuous mode
[   86.095458][ T6703] virt_wifi0: entered promiscuous mode
[   86.104031][ T6703] vlan0: entered promiscuous mode
[   86.107383][ T6703] vlan1: entered promiscuous mode
[   86.113748][ T6703] macvlan0: entered promiscuous mode
[   86.116710][ T6703] macvlan1: entered promiscuous mode
[   86.120808][ T6703] ipvlan0: entered promiscuous mode
[   86.120923][ T6703] ipvlan1: entered promiscuous mode
[   86.129232][ T6703] macvtap0: entered promiscuous mode
[   86.140094][ T6703] macsec0: entered promiscuous mode
[   86.150676][ T6703] geneve0: entered promiscuous mode
[   86.159636][ T6703] geneve1: entered promiscuous mode
[   86.171788][ T6703] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   86.190830][ T6703] netdevsim netdevsim1 netdevsim1: entered promiscuous mode
[   86.200563][ T6703] netdevsim netdevsim1 netdevsim2: entered promiscuous mode
[   86.204404][ T6703] netdevsim netdevsim1 netdevsim3: entered promiscuous mode
[   86.217141][ T6703] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   86.228287][ T6703] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[   86.232149][ T6703] vsockmon0: entered promiscuous mode
[   86.236261][ T5649] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.243552][  T990] usb 3-1: Using ep0 maxpacket: 16
[   86.247312][ T5649] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.247357][ T5649] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.247415][ T5649] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.247978][  T990] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[   86.248996][  T990] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[   86.249009][  T990] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   86.250759][  T990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.250769][  T990] usb 3-1: Product: syz
[   86.250775][  T990] usb 3-1: Manufacturer: syz
[   86.250780][  T990] usb 3-1: SerialNumber: syz
[   86.253870][  T990] usb 3-1: config 0 descriptor??
[   86.255656][  T990] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[   86.255669][  T990] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[   86.410618][ T6720] netlink: 12 bytes leftover after parsing attributes in process `syz.0.419'.
[   86.410758][ T6720] netlink: 59 bytes leftover after parsing attributes in process `syz.0.419'.
[   86.634142][ T6738] Bluetooth: MGMT ver 1.23
[   86.870212][  T990] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[   86.870751][  T990] em28xx 3-1:0.0: Config register raw data: 0xfffffffb
[   87.051358][ T6763] loop0: detected capacity change from 0 to 128
[   87.061621][ T6763] FAT-fs (loop0): count of clusters too big (652550)
[   87.061781][ T6763] FAT-fs (loop0): Can't find a valid FAT filesystem
[   87.090585][ T6759] loop1: detected capacity change from 0 to 32768
[   87.094373][ T6759] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.439 (6759)
[   87.114823][ T6759] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   87.120730][ T6759] BTRFS info (device loop1): using blake2b checksum algorithm
[   87.191782][ T6759] BTRFS info (device loop1): enabling ssd optimizations
[   87.196501][ T6759] BTRFS info (device loop1): turning on async discard
[   87.196943][ T6759] BTRFS info (device loop1): enabling free space tree
[   87.197011][ T6759] BTRFS info (device loop1): use zstd compression, level 3
[   87.245333][    T9] ------------[ cut here ]------------
[   87.245380][    T9] con->v1.connect_seq != le32_to_cpu(con->v1.in_reply.connect_seq)
[   87.245423][    T9] WARNING: net/ceph/messenger_v1.c:902 at ceph_con_v1_try_read+0x3335/0x6eb0, CPU#0: kworker/0:0/9
[   87.253611][    T9] Modules linked in:
[   87.255200][    T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) 
[   87.258405][    T9] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   87.262252][    T9] Workqueue: ceph-msgr ceph_con_workfn
[   87.264019][    T9] RIP: 0010:ceph_con_v1_try_read+0x3335/0x6eb0
[   87.266092][    T9] Code: 45 31 e4 e9 3f d1 ff ff e8 88 fe 20 f6 90 0f 0b 90 e9 cd d3 ff ff e8 7a fe 20 f6 90 0f 0b 90 e9 dd e6 ff ff e8 6c fe 20 f6 90 <0f> 0b 90 e9 f4 e7 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 30 d1
[   87.272446][    T9] RSP: 0018:ffffc900000e7160 EFLAGS: 00010293
[   87.274370][    T9] RAX: ffffffff8ba6b844 RBX: 0000000000000001 RCX: ffff888102ebda00
[   87.277367][    T9] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[   87.280424][    T9] RBP: ffffc900000e7a58 R08: ffff888102ebda00 R09: 0000000000000009
[   87.283326][    T9] R10: 000000000000000d R11: 0000000000000000 R12: ffff88816b594418
[   87.286583][    T9] R13: fffff5200001ce6c R14: dffffc0000000000 R15: 0000000000000000
[   87.289214][    T9] FS:  0000000000000000(0000) GS:ffff88818d6da000(0000) knlGS:0000000000000000
[   87.292512][    T9] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   87.294495][    T9] CR2: 00007faaa86b5ff8 CR3: 0000000165f28000 CR4: 00000000000006f0
[   87.296972][    T9] Call Trace:
[   87.298013][    T9]  <TASK>
[   87.298994][    T9]  ? __pfx_ceph_con_v1_try_read+0x10/0x10
[   87.300947][    T9]  ? reacquire_held_locks+0x117/0x1a0
[   87.303029][    T9]  ? __release_sock+0x303/0x390
[   87.304917][    T9]  ? tcp_sendmsg+0x39/0x50
[   87.306895][    T9]  ? __local_bh_enable_ip+0xd6/0x140
[   87.309014][    T9]  ? lockdep_hardirqs_on+0x7b/0x110
[   87.311035][    T9]  ? __pfx_inet_sendmsg+0x10/0x10
[   87.312997][    T9]  ? rcu_is_watching+0x16/0xb0
[   87.314848][    T9]  ? __pfx_inet_sendmsg+0x10/0x10
[   87.316988][    T9]  ? sock_sendmsg_nosec+0xc2/0x180
[   87.319085][    T9]  ? sock_sendmsg+0x1ca/0x2d0
[   87.320462][   T34] audit: type=1800 audit(1790263360.549:12): pid=6759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.439" name="file1" dev="loop1" ino=260 res=0 errno=0
[   87.329097][    T9]  ? __pfx_sock_sendmsg+0x10/0x10
[   87.331120][    T9]  ? iov_iter_kvec+0xb8/0x180
[   87.332990][    T9]  ? ceph_con_flag_clear+0x38/0x50
[   87.335027][    T9]  ? ceph_con_v1_try_write+0x3808/0x3dc0
[   87.337318][    T9]  ? __lock_acquire+0x6df/0x2e50
[   87.339270][    T9]  ? __lock_acquire+0x6df/0x2e50
[   87.341243][    T9]  ? __mutex_trylock_common+0x15f/0x270
[   87.343411][    T9]  ? __pfx___mutex_trylock_common+0x10/0x10
[   87.345839][    T9]  ? rcu_is_watching+0x16/0xb0
[   87.347739][    T9]  ? trace_contention_end+0x3d/0x140
[   87.349810][    T9]  ? __mutex_lock+0x30b/0x1550
[   87.351701][    T9]  ? __lock_acquire+0x6df/0x2e50
[   87.353627][    T9]  ? timerqueue_linked_add+0x287/0x2e0
[   87.355923][    T9]  ? ceph_con_workfn+0x3b/0x14a0
[   87.357852][    T9]  ? __pfx___mutex_lock+0x10/0x10
[   87.359838][    T9]  ? do_raw_spin_lock+0x12b/0x2f0
[   87.362126][    T9]  ? lock_acquire+0x115/0x350
[   87.363862][    T9]  ceph_con_workfn+0x208/0x14a0
[   87.366139][    T9]  ? rcu_is_watching+0x16/0xb0
[   87.368027][    T9]  ? process_scheduled_works+0x97a/0x1630
[   87.370192][    T9]  process_scheduled_works+0xc3d/0x1630
[   87.372245][    T9]  ? __pfx_process_scheduled_works+0x10/0x10
[   87.374565][    T9]  ? assign_work+0x3cf/0x5d0
[   87.376476][    T9]  worker_thread+0xa47/0xfb0
[   87.378361][    T9]  kthread+0x38b/0x480
[   87.380012][    T9]  ? __pfx_worker_thread+0x10/0x10
[   87.382039][    T9]  ? __pfx_kthread+0x10/0x10
[   87.383780][    T9]  ret_from_fork+0x514/0xb70
[   87.385708][    T9]  ? __pfx_ret_from_fork+0x10/0x10
[   87.387783][    T9]  ? __switch_to+0xc89/0x1420
[   87.389631][    T9]  ? __pfx_kthread+0x10/0x10
[   87.391459][    T9]  ret_from_fork_asm+0x1a/0x30
[   87.393372][    T9]  </TASK>
[   87.394620][    T9] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   87.397448][    T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) 
[   87.400994][    T9] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   87.404994][    T9] Workqueue: ceph-msgr ceph_con_workfn
[   87.407130][    T9] Call Trace:
[   87.408476][    T9]  <TASK>
[   87.409648][    T9]  vpanic+0x56d/0xa60
[   87.411210][    T9]  ? __pfx__printk+0x10/0x10
[   87.412990][    T9]  ? __pfx_vpanic+0x10/0x10
[   87.414772][    T9]  ? is_bpf_text_address+0x292/0x2b0
[   87.416756][    T9]  ? is_bpf_text_address+0x26/0x2b0
[   87.418762][    T9]  panic+0xc5/0xd0
[   87.420218][    T9]  ? __pfx_panic+0x10/0x10
[   87.421944][    T9]  ? ret_from_fork_asm+0x1a/0x30
[   87.423946][    T9]  __warn+0x315/0x4c0
[   87.425497][    T9]  ? ceph_con_v1_try_read+0x3335/0x6eb0
[   87.427655][    T9]  ? ceph_con_v1_try_read+0x3335/0x6eb0
[   87.429814][    T9]  __report_bug+0x276/0x570
[   87.431491][    T9]  ? ceph_con_v1_try_read+0x3335/0x6eb0
[   87.433606][    T9]  ? __pfx___report_bug+0x10/0x10
[   87.435583][    T9]  ? tcp_recvmsg+0x213/0x7f0
[   87.437380][    T9]  ? __local_bh_enable_ip+0xd6/0x140
[   87.439355][    T9]  ? lockdep_hardirqs_on+0x7b/0x110
[   87.441383][    T9]  ? tcp_recvmsg+0x213/0x7f0
[   87.443178][    T9]  ? tcp_recvmsg+0x288/0x7f0
[   87.444929][    T9]  ? worker_thread+0xa47/0xfb0
[   87.446742][    T9]  ? kthread+0x38b/0x480
[   87.448485][    T9]  ? ceph_con_v1_try_read+0x3335/0x6eb0
[   87.450637][    T9]  report_bug+0x16b/0x220
[   87.452402][    T9]  ? ceph_con_v1_try_read+0x3335/0x6eb0
[   87.454593][    T9]  ? ceph_con_v1_try_read+0x3337/0x6eb0
[   87.456748][    T9]  handle_bug+0x9c/0x200
[   87.458402][    T9]  exc_invalid_op+0x1a/0x50
[   87.460167][    T9]  asm_exc_invalid_op+0x1a/0x20
[   87.462131][    T9] RIP: 0010:ceph_con_v1_try_read+0x3335/0x6eb0
[   87.464585][    T9] Code: 45 31 e4 e9 3f d1 ff ff e8 88 fe 20 f6 90 0f 0b 90 e9 cd d3 ff ff e8 7a fe 20 f6 90 0f 0b 90 e9 dd e6 ff ff e8 6c fe 20 f6 90 <0f> 0b 90 e9 f4 e7 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 30 d1
[   87.472467][    T9] RSP: 0018:ffffc900000e7160 EFLAGS: 00010293
[   87.474983][    T9] RAX: ffffffff8ba6b844 RBX: 0000000000000001 RCX: ffff888102ebda00
[   87.478253][    T9] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[   87.481519][    T9] RBP: ffffc900000e7a58 R08: ffff888102ebda00 R09: 0000000000000009
[   87.484844][    T9] R10: 000000000000000d R11: 0000000000000000 R12: ffff88816b594418
[   87.488151][    T9] R13: fffff5200001ce6c R14: dffffc0000000000 R15: 0000000000000000
[   87.491397][    T9]  ? ceph_con_v1_try_read+0x3334/0x6eb0
[   87.493553][    T9]  ? __pfx_ceph_con_v1_try_read+0x10/0x10
[   87.495933][    T9]  ? reacquire_held_locks+0x117/0x1a0
[   87.498180][    T9]  ? __release_sock+0x303/0x390
[   87.500232][    T9]  ? tcp_sendmsg+0x39/0x50
[   87.502107][    T9]  ? __local_bh_enable_ip+0xd6/0x140
[   87.504314][    T9]  ? lockdep_hardirqs_on+0x7b/0x110
[   87.506536][    T9]  ? __pfx_inet_sendmsg+0x10/0x10
[   87.508667][    T9]  ? rcu_is_watching+0x16/0xb0
[   87.510734][    T9]  ? __pfx_inet_sendmsg+0x10/0x10
[   87.512852][    T9]  ? sock_sendmsg_nosec+0xc2/0x180
[   87.515021][    T9]  ? sock_sendmsg+0x1ca/0x2d0
[   87.516991][    T9]  ? __pfx_sock_sendmsg+0x10/0x10
[   87.519012][    T9]  ? iov_iter_kvec+0xb8/0x180
[   87.521003][    T9]  ? ceph_con_flag_clear+0x38/0x50
[   87.523165][    T9]  ? ceph_con_v1_try_write+0x3808/0x3dc0
[   87.525411][    T9]  ? __lock_acquire+0x6df/0x2e50
[   87.527470][    T9]  ? __lock_acquire+0x6df/0x2e50
[   87.529481][    T9]  ? __mutex_trylock_common+0x15f/0x270
[   87.531784][    T9]  ? __pfx___mutex_trylock_common+0x10/0x10
[   87.534269][    T9]  ? rcu_is_watching+0x16/0xb0
[   87.536266][    T9]  ? trace_contention_end+0x3d/0x140
[   87.538386][    T9]  ? __mutex_lock+0x30b/0x1550
[   87.540257][    T9]  ? __lock_acquire+0x6df/0x2e50
[   87.542179][    T9]  ? timerqueue_linked_add+0x287/0x2e0
[   87.544421][    T9]  ? ceph_con_workfn+0x3b/0x14a0
[   87.546518][    T9]  ? __pfx___mutex_lock+0x10/0x10
[   87.548701][    T9]  ? do_raw_spin_lock+0x12b/0x2f0
[   87.550856][    T9]  ? lock_acquire+0x115/0x350
[   87.552847][    T9]  ceph_con_workfn+0x208/0x14a0
[   87.554920][    T9]  ? rcu_is_watching+0x16/0xb0
[   87.556953][    T9]  ? process_scheduled_works+0x97a/0x1630
[   87.559238][    T9]  process_scheduled_works+0xc3d/0x1630
[   87.561541][    T9]  ? __pfx_process_scheduled_works+0x10/0x10
[   87.564052][    T9]  ? assign_work+0x3cf/0x5d0
[   87.565935][    T9]  worker_thread+0xa47/0xfb0
[   87.567871][    T9]  kthread+0x38b/0x480
[   87.569564][    T9]  ? __pfx_worker_thread+0x10/0x10
[   87.571706][    T9]  ? __pfx_kthread+0x10/0x10
[   87.573618][    T9]  ret_from_fork+0x514/0xb70
[   87.576192][    T9]  ? __pfx_ret_from_fork+0x10/0x10
[   87.578081][    T9]  ? __switch_to+0xc89/0x1420
[   87.579816][    T9]  ? __pfx_kthread+0x10/0x10
[   87.581358][    T9]  ret_from_fork_asm+0x1a/0x30
[   87.583276][    T9]  </TASK>
[   87.585393][    T9] Kernel Offset: disabled
[   87.587081][    T9] Rebooting in 86400 seconds..
