last executing test programs:

16.82948699s ago: executing program 0 (id=203):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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")
lchown(&(0x7f0000000040)='./file1\x00', 0xee01, 0xee01)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x46080, 0x0)

16.544620187s ago: executing program 0 (id=204):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x2000002, &(0x7f0000001140)=ANY=[], 0xfe, 0xc3b, &(0x7f0000000cc0)="$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")
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={&(0x7f0000000180)=""/188, 0xbc, <r0=>0x0, &(0x7f0000000300)=""/117, 0x75}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
symlinkat(0x0, 0xffffffffffffff9c, 0x0) (async)
symlinkat(0x0, 0xffffffffffffff9c, 0x0)

16.258313229s ago: executing program 0 (id=206):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) (async)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000b00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
mmap$xdp(&(0x7f00006f9000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0x80000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe0200108500"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00'], 0x20}}, 0x4000000) (async)
r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) (async)
io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x60009c0e, 0x10100}, &(0x7f0000000000)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3})
syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x4, 0x312}, &(0x7f0000000200)=<r7=>0x0, &(0x7f0000000300)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async)
syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) (async)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r5, r8, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4000, @fd_index=0x7, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/8, 0x8}, {&(0x7f0000001940)=""/4096, 0x1000}], 0x2, 0x18, 0x1, {0x0, r9}}) (async)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) (async)
mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x124)

16.183749967s ago: executing program 0 (id=207):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f00000034c0)={0x2020, 0x0, 0x0, <r2=>0x0, <r3=>0x0}, 0xcac)
fchown(r0, r2, r3)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000002a00)='./mnt\x00', 0x2800c1e, &(0x7f00000000c0)={[{@test_dummy_encryption}, {@usrjquota}], [{@euid_gt={'euid>', r2}}]}, 0xff, 0x249, &(0x7f0000000500)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f00000001c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0xffffd000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020)
ioctl$TCXONC(r0, 0x540a, 0x2)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x808, &(0x7f0000000100)=ANY=[@ANYBLOB="696f636861727365743d170ddbbba28854f76e642c756d61736b3d30303030303030303030303030303030303030303030362c696f636861727365743d63703934392c6572726f72733d72656d6f756e742d726f2c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',allow_utime=00000000000000000000003,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=remount-ro,discard,errors=continue,\x00'], 0x5, 0x1510, &(0x7f00000037c0)="$eJzs3Am4TlX7MPD7Xmvt45D0dJLhsNa6N08yLCdJMiTJkCRJkmRKSDrJKwmJQ6akQxKS4ZAMh5AMJ0465nkekyTpJEmmTMn6rlN83t7qe//v/+17/a//uX/Xta9n3c/a99prP/czrL0N33UZWrNxrWoNiQj+LfjrQxIAxALAQAC4DgACACgXVy4uqz+nxKR/7yDsr/VI6tWeAbuauP7ZG9c/e+P6Z29c/+yN65+9cf2zN65/9sb1Zyw72zy94PW8Zd+N7/9nZ/z7/79IZumxX60tfWPXfyGF65+9cf3/1wr+Kztx/bM3rn/2xvXP3rj+2UGOP+3h+mdvXH/GsrOrff+Zt6u7Xe33H2OMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yx7OGsv0IBwOX21Z4XY4wxxhhjjDHG/jo+x9WeAWOMMcYYY4wxxv7/QxAgQUEAMZADYiEn5AIBANdCHrgOInA9xMENkBduhHyQHwpAQYiHQlAYNBiwQBBCESgKUbgJisHNUBxKQEkoBQ5KQwLcAmXgVigLt0E5uB3Kwx1QASpCJagMd0IVuAuqwt1QDe6B6lADakItuBdqw31QB+6HuvAA1IMHoT48BA3gYWgIj0AjeBQaw2PQBB6HptAMmkMLaPnfyn8JesDL0BN6QRL0hj7wCvSFftAfBsBAeBUGwWswGF6HZBgCQ+ENGAZvwnB4C0bASBgFb8NoeAfGwFgYB+MhBSbARHgXJsF7MBmmwFSYBqkwHWbA+zATZsFs+ADmwIcwF+bBfFgAafARLIRFkA4fw2L4BDJgCSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVtsB12wE7YBbvhU9gDn8Fe+Bz2wRf/Yv6Zf8jvioCAAgUqVBiDMRiLsZgLc2FuzI15MA9GMIJxGId5MS/mw3xYAAtgPMZjYSyMBg0SEhbBIhjFKBbDYlgci2NJLIkOHSZgApbBW7EslsVyWA7LY3msgBWxIlbGylgFq2BVrIrVsBpWx+pYE2vivXgv9sY6WAfrYl2sh/Uu357ChtgQG2EjbIyNsQk2wabYFJtjc2yJLbEVtsLW2BrbYltsh+2wPbbHREzEDtgBO2JH7ISdsDN2xi7YBbtiN+yGL+UAfBlfxl5YXfTGPtgH+2Jyjv44AAfgqzgIX8PX8HVMxiE4FN/AN/BNHI6ncQSOxFE4CquId3AMjkUS4zEFU3AiTsRJOAkn4xScgtMwFafjDJyBM3EWzsIPcA5+iB/iPJyHCzAN03AhLsJ0TMfFeAYzcAkuxWW4HFfgclyFq3EVrsV1uBY34AbchJtwC27BbbgNd+AO3IUKAD/Fz/AzTMZ9uA/34348gAfwIB7ETMzEQ3gID+NhPIJH8CgexWN4HE/gcTyFp/A0nsGzeBbP43m8gC/Ef9NoV4k1ySCyKKFEjIgRsSJW5BK5RG6RW+QReURERESciBN5RV6RT+QTBUQBES/iRWFRWBhhBIkwBgBEVERFMVFMFBfFRUlRUjjhRIJIEGVEGVFWlBXlxO2ivLhDVBAVRRtXWVQWVURbV1XcLaqJaqK6qCFqilqilqgtaos6oo6oK+qKeqKeqC8eEg1Eb+yPj4isyjQWQ7CJGIpNRTMhL32DtRLDsbVoI9qKp8RIHIHtRSuXKJ4VHcQY7Cj+Jsbi86KzGI9dxIuiq+gmuouXRA/R2vUUvcRk7C36iGnYV/QT/cUAMRNriA9wTs6a4nWRLIaIoeINsQDfFMPFW2KEGClGibfFaPGOGCPGinFivEgRE8RE8a6YJN4Tk8UUMVVME6liupgh3hczxSwxW3wg5ogPxVwxT8wXC0Sa+EgsFItEuvhYLBafiAyxRCwVy8RysUKsFKvEarFGrBXrxHqxQWwUm8RmsUVsFdvEdrFD7BS7xG7xqdgjPhN7xedin/hC7BdfigPiK3FQfC0yxTfikPhWHBbfiSPie3FU/CCOiePihDgpTokfxWlxRpwV58R58ZO4IH4WF4UXIFEKKaWSgYyROWSszClzyWtkbhlcenWvl3HyBplX3ijzyfyygCwo42UhWVhqaaSVJENZRBaVUXmTLCZvlsVlCVlSlpJOlpYJ8hZZRt4qy8rbZDl5uywv75AVZEVZSVaWd8oq8i4JkV+PUV3WkDVlLXmvrC3vk3Xk/bKufEDWkw/K+vIh2UA+LBvKR2Qj+ahsLB+TTeTjsqlsJpvLFrKlfEK2kk/K1rKNbCufku3k07K9fEYmymdlB+kvvUWel53lC7KLfFF2ld1kd/mzvCi97Cl7SYDeso98RfaV/WR/OUAOlK/KQfI1OVi+LpPlEDlUviGHyTflcPmWHCFHylHybTlaviPHyLFynBwvU+QEOVG+KyfJ9+RkOUVOldNkqpwu+18aabaU/zT/3T/IH/zL0TfJzXKL3Cq3ye1yh9wpd8ndcrfcI/fIvXKv3Cf3yf1yvzwgD8iD8qDMlJnykDwkD8vD8og8Io/Ko/KYPC7PyZPylPxRnpZn5Bl5Tp6X5+WFS68BKFRCSaVUoGJUDhWrcqpc6hqVW12r8qjrVERdr+LUDSqvulHlU/lVAVVQxatCqrDSyiirSIWqiCqqouomvPSGUSVVKeVUaZWgbvlX8lUxdbMqrkr8Jv/y/JL+ZH4tVUvVSrVSrVVr1Va1Ve1UO9VetVeJKlF1UB1UR9VRdVKdVGfVWXVRXVRX1VV1V91VD9VD9VQ9VZJKUn3UK6qv6qf6qwFqoHpVDVKD1GA1WCWrZDVUDVXD1DA1XA1XI9QINUqNUqPVaDVGjVHj1DiVolLURDVRTVKT1GQ1WU1VU1WqSlUz1Aw1U81Us9VsNUfNUXPVXDVfzVdpKk0tVAtVukpXi9VilaGWqCVqmVqmVqgVapVapdaoNWqdWqc2qA0qQ21Wm9VWtVVtV9vVTrVT7Va71R61R+1Ve9U+tU/tV/vVAXVAHVQHVabKVIfUIXVYHVZH1BF1VB1Vx9QxdUKdUKfUKXVanVZn1Vl1Xp1XF9QFdVFdzFr2BSIQgQpUEBPEBLFBbJAryBXkDnIHeYI8QSSIBHFBXJA3uDHIF+QPCgQFg/igUFA40IEJbCAuFT0a3BQUC24OigclgpJBqcAFpYOE4JagTHBrUDa4LSgX3B6UD+4IKgQVg0pB5eDOoEpwV1A1uDuoFtwTVA9qBDWDWsG9Qe3gvqBOcH9QN3ggqBc8GNQPHgoaBA8HDYNHgkbBo0Hj4LGgSfB40DRoFjQPWgQt/9LxvT+d/0nXU/fSSbq37qNf0X11P91fD9AD9at6kH5ND9av62Q9RA/Vb+hh+k09XL+lR+iRepR+W4/W7+gxeqwep8frFD1BT9Tv6kn6PT1ZT9FT9TSdqqfrGfp9PVPP0rP1B3qO/lDP1fP0fL1Ap+mP9EK9SKfrj/Vi/YnO0Ev0Ur1ML9cr9Eq9Sq/Wa/RavU6v1xv0Rr1Jb9Zb9Fa9TW/XO/ROvUvv1p/qPfozvVd/rvfpL/R+/aU+oL/SB/XXOlN/ow/pb/Vh/Z0+or/XR/UP+pg+rk/ok/qU/lGf1mf0WX1On9c/6Qv6Z31R+6zFfdbPu1FGmRgTY2JNrMllcpncJrfJY/KYiImYOBNn8pq8Jp/JZwqYAibexJvCprDJQoZMEVPERE3UFDPFTHFT3JQ0JY0zziSYBFPGlDFlTVlTzpQz5U15U8FUMJVMJXOnudPcZe4yd5u7zT3mHlPD1DC1TC1T29Q2dUwdU9fUNfVMPVPf1DcNTAPT0DQ0jUwj09g0Nk1ME9PUNDXNTXPT0rQ0rUwr09q0Nm1NW9POtDPtTXuTaBJNB9PBdDQdTSfTyXQ2nU0X08V0NV1Nd9Pd9DA9TE/T0ySZJNPH9DF9TV/T3/Q3A81AM8gMMoPNYJNsks1QM9QMM8PMcDPcjDAjzaishap5x4wxY804M96kmBQz0Uw0k8wkM9lMNlPNVJNqUs0MM8PMNDPNbDPbzDFzzFwz18w3802aSTMLzUKTbtLNYrPYZJgMs9QsNcvNcrPSrDSrzWqz1qw162G92Wg2ms1ms9lqtprtZrvZaXaa3Wa32WP2mL1mr9ln9pn9Zr85YA6Yg+agyTSZ5pA5ZA6bw+aIOWKOmqPmmDlmTpgT5pQ5ZU6b0+asOWvOm/yXfi+9ibU5bS57jc1tr7V57HX2H+MCtqCNt4VsYattPpv/N7Gx1ha3JWxJW8o6W9om2Ft+F1ewFW0lW9neaavYu2zV38W17X22jr3f1rUP2Fr23t/E9eyDtr59zDZABLDNbCPbwja2j9km9nHb1DazzW0L284+bdvbZ2yifdZ2sM/9Ll5oF9nVdo1da9fZPfYze9aes4ftd/a8/cn2tL3sQPuqHWRfs4Pt6zbZDvldPMq+bUfbd+wYO9aOs+N/F0+102yqnW5n2PftTDvrd3Ga/cjOsel2rp1n59sFv8RZc0q3H9vF9hObYZfYpXaZXW5X2JV21f+d6zK7wW60m+xu+6ndarfZ7XaH3Wl3/RJnncde+7ndZ7+wh+y39oD9yh60R2ym/eaXOOv8jtjv7VH7gz1mj9sT9qQ9ZX+0p+2ZX84/69xP2p/tRestEBKQJEUBxVAOiqWclIuuodx0LeWh6yhC11Mc3UB56UbKR/mpABWkeCpEhUmTIUtEIRWhohSlm+jyOr0klSJHpSmBbqEydCuVpduoHN1O5ekOqkAVqRJVpjupCt1FVeluqkb3UHWqQTWpFt1Ltek+qkP3U116gOrRg1SfHqIG9DA1pEeoET1KjekxakKPU1NqRs2pBbWkJ6gVPUmtqQ21paeoHT1N7ekZSqRnqQM9Rx3pb9SJnqfO9AJ1oRepK3Wj7vQS9aCXqSf1oiTqTX3oFepL/ag/DaCB9CoNotdoML1OyTSEhtIbNIzepOH0Fo2gkTSK3qbR9A6NobE0jsZTCk2gifQuTaL3aDJNoak0jVJpOs2g92kmzaLZ9AHNoQ9pLs2j+bSA0ugjWkiLKJ0+psX0CWXQElpKy2g5raCVtIpW0xpaS+toPW2gjbSJNtMW2krbaDvtoJ20i3bTp7SHPqO99Dntoy9oP31JB+grOkhfUyZ9Q4foWzpM39ER+t73oh/oGB2nE3SSTtGPdJrO0Fk6R+fpJ7pAP9NF8gQhhiKUoQqDMCbMEcaGOcNc4TVh7vDaME94XRgJrw/jwhvCvOGNYb4wf1ggLBjGh4XCwqEOTWhDCsOwSFg0jIY3hcXCm8PiYYmwZFgqdGHpMCG8JSwT3hqWDW8Ly4W3h+XDO8IKYcXwsQcqh3eGVcK7wqrh3WG18J6welgjrBnWCu8Na4f3hXXC+8O64QNh2fDBsH74UNggfDhsGD4SNgofDRuHj4VNwsfDpmGzsHnYImwZPhG2Cp8MW4dtwrbhU2G78OmwffhMmBg+G3YIn/ul/8FFf96fFPYO+4SvhK+E3t8v50cXRNOiH0UXRhdF06MfRxdHP4lmRJdEl0aXRZdHV0RXRldFV0fXRNdG10XXRzdEN0Y3Rb2vlQMcOuGkUy5wMS6Hi3U5XS53jcvtrnV53HUu4q53ce4Gl9fd6PK5/K6AK+jiXSFX2GlnnHXkQlfEFXVRd5Mr5m52xV0JV9KVcs6VdgmuhWvpWrpW7knX2rVxbd1T7in3tHvaPeOecc+6Du4519H9zXVyz7vO7gX3gnvRdXXdXHf3kuvhJuT59TOZ5Pq4Pq6v6+v6u/5uoBvoBrlBbrAb7JJdshvqhrphbpgb7oa7EW6EG+VGudFutBvjxrhxbpxLcSluopvoJrlJbrKb7Ka6qS7VpboZboab6Wa6KrN+PcpcN9fNd/NdmktzC13WmjHdLXaLXYbLcEvdUrfcLXcr3Uq32q12a91at96tdxvdRrfZbXZb3Va33W13O91Ot9vtdnv8db8O6va5/W6/O+AOuIPua5fpvnGH3LfusPvOHXHfu6PuB3fMHXcn3El3yv3oTrsz7qw75867n9wF97O76LxLiUyITIy8G5kUeS8yOTIlMjUyLZIamR6ZEXk/MjMyKzI78kFkTuTDyNzIvMj8yIJIWuSjyMLIokh65OPI4sgnkYzIksjSyLLI8siKiPeFtoa+iC/qo/4mX8zf7Iv7Er6kL+WdL+0T/C2+jL/Vl/W3+XL+dl/e3+Er+Iq+kn/cN/XNfHPfwrf0T/hW/knf2rfxbf1Tvp1/2rf3z/hE/6zv4J/zHf3ffCf/vO/sX/Bd/Iu+q+/mu/uXfA//su/pe/kk39v38a/4vr6f7+8H+IH+VT/Iv+YH+9d9sh/ih/o3/DD/ph/u3/Ij/Eg/KuZtP/ryJTKM9yl+gp/o3/WT/Ht+sp/ip/ppPtVP9zP8+36mn+Vn+w/8HP+hn+vn+fl+gU/zH/mFfpFP9x/7xf4Tn+GXXL6p7Ff6VX61X+PX+nV+vd/gN/pNfrPf4rf6bX673+F3+l1+t//U7/Gf+b3+c7/Pf+H3+y/9Af+VP+i/9pn+G3/If+sP++/8Ef+9P+p/8Mf8cX/Cn/Sn/I/+tD/jz/pz/rz/yV/wP/uL/G/WGGOMMcb+SyZcaYo/6u/9B8+Jv9u5DwBcu61g5t/3Z60o1+f7td1PxLeLAMCzvbo8cnmrXj0pKenSvhkSgqLzAC7/SVCWGLgSL4G28DQkQhso84fz7ye6nad/Mn70doBcf5cTC1fiK+N/+SfjP/HUqIXlw7Nx/4/x5wEUL3olJydciZdAW5X12AbK/sn4+Vv9k/nn/CoFoPXf5eSGK/GV+SfAk/AcJP5mT8YYY4wxxhhj7Ff9RKVOl68/L/+Nzz+6Po9XV3JywJX4n12fM8YYY4wxxhhj7Op7vlv3Z55ITGzT6V9vVP1vZXHjf2rDe4DLzygA+DcHBPiPn8WW/8ixki99dP6xa/k5H8D/jFL+FY2r/MXEGGOMMcYY+8tdWfT/9nl1tSbEGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4xlQ/+J/07sap8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdrX9nwAAAP//geYOMQ==")
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='debugfs\x00', 0x0, &(0x7f0000000100))
r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_LINKS(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r9, 0x3, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x1000}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r10, 0xc0096616, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x2e400, 0x0)

15.222796033s ago: executing program 0 (id=209):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000800)={0x0, {0xffffffff, 0x0, 0x4, 0x3, 0x3, 0x80000001}})
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'})
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x20008c0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x3, 0x4463, &(0x7f0000004480)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fdatasync(r1)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
socket$key(0xf, 0x3, 0x2)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000900)={'syz1\x00', {0x9, 0x0, 0x6}, 0x37b4, [0xfeff, 0x4, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, 0x100, 0x1, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0xbffffffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0xffffffff, 0x0, 0xffff, 0x0, 0x20, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7, 0x200000, 0x6, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x105], [0x10, 0xffffffff, 0x7, 0x0, 0xffffffff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0xfffffffb, 0xbb, 0x1, 0xfffffffc, 0x5, 0x800, 0x0, 0xfffffffc, 0x0, 0x1100, 0x0, 0x3, 0xec6a, 0x5, 0x40000000, 0xffffffff, 0xfffffffc, 0x7fffffff, 0xfffffffd, 0x7fffffff, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x18c, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0xfffffffc, 0x100000, 0x0, 0x0, 0x4, 0x4000000, 0x80, 0x0, 0x4, 0x0, 0x7, 0x800000, 0x7], [0x10000, 0xab, 0x0, 0x0, 0xffffffff, 0x1, 0xa000000, 0x0, 0x9, 0xffff7ffd, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x52, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x520, 0xc, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xfffffffd, 0x0, 0xfffffffc, 0x2af, 0x0, 0x9, 0x0, 0x10000, 0x3, 0x0, 0x0, 0x0, 0x6, 0x400, 0x0, 0x0, 0xfffffe01, 0x82ce, 0x0, 0x3, 0x8000, 0x0, 0xff, 0x4000005, 0x0, 0x4, 0x2, 0x400000, 0x0, 0x6, 0x100, 0x0, 0x0, 0xb, 0xfbc, 0x1], [0x0, 0x0, 0x0, 0x6, 0x0, 0x401, 0x0, 0x211, 0x4, 0x0, 0x100, 0x3, 0x1, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x5, 0x7fff, 0x0, 0xd, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8000000, 0x0, 0x9, 0x3, 0x0, 0x0, 0x6, 0x9, 0x4, 0x4, 0x3, 0x0, 0x0, 0x1, 0xffffffff, 0x100, 0x4, 0x6, 0x3, 0xfffffffd, 0x53591b27, 0x3fffffd, 0x0, 0x0, 0x5, 0x400, 0x200, 0x9, 0x0, 0x0, 0x80000000, 0x1000000, 0x0, 0x5]}, 0x1c2)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000001000010400000000ffdbdf2500000084", @ANYRES32=0x0, @ANYBLOB="83200000c6010500240012800b00010067656e65766500001400028005000c00000000000800010001000000140003"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4000880)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r3, &(0x7f0000000500)=""/45, 0x2d)
getdents64(r3, 0x0, 0x18)

14.869319762s ago: executing program 0 (id=210):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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")
lchown(&(0x7f0000000040)='./file1\x00', 0xee01, 0xee01)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x46080, 0x0)

14.50269977s ago: executing program 32 (id=210):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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")
lchown(&(0x7f0000000040)='./file1\x00', 0xee01, 0xee01)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x46080, 0x0)

3.225143934s ago: executing program 1 (id=265):
ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000006c0)={0x0, 0x0, '\x00', @raw_data=[0x7, 0x8, 0x4, 0x1, 0x87, 0xfffffbff, 0x2, 0x81, 0xb8b4, 0x4, 0x9, 0x743, 0x9, 0x1, 0xc, 0xffffff80, 0xcc, 0xad9, 0x0, 0x7fff, 0x8d, 0x3, 0x65, 0x81, 0x7fff, 0xcfd, 0x8, 0x4f5, 0x8, 0x2, 0x7, 0xfffffffe]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000420033"], 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x24040004)
recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)=""/193, 0xc1}, {&(0x7f0000000000)=""/194, 0xc2}, {&(0x7f00000005c0)=""/4101, 0x1005}], 0x3}, 0x1}], 0x1, 0x2, 0x0)
r1 = userfaultfd(0x80001)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d0000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x35, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x100)
socket$inet6_sctp(0xa, 0x1, 0x84)
name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000000001010400000000141a000002000000240001801400018008000100f500000108000200e00000010c00028005000100000000001400108008000140000002000800024000000000"], 0x4c}}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x48)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setreuid(0x0, 0xee00)
setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
sendmmsg$inet(r7, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0xa5}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f00000007c0)="f2e659a0b00d26c2ee15bbdf21c625bd1e67dee03c0d5862d425c076b8577bb0b50607802b1c3ab21a39c9eb5b6ca033319be5ed6e5d21f0f39fee6a8c98dc0bc39a76bf896971072aec737f00aee7ead58ba42e1f7efe0c445b1d1d5de272c3d774e063c4ade85dd1cf6c8c85472590721bb64c154d689cec735b3ac1b8f96dedff166668803830d4d526e16c68", 0x8e}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0x53}, {&(0x7f0000000580)="b8a2f681134502fe2f602543e7bf1919be9eb6378d8fc15ac1699c0c424dc215b3ec95771fb5a5fa942353cba2caf2acea06b89d8425f97404638b33f24a9b32ab61cd414aa8acaa07ba1b0ea45b2361f8442e6af44fa5e9f10de0aa6dc5d9a9a43a20771650db53f5432f5abd100417", 0x70}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000016c0)="bbb45973eef2888793a40851db1abf4042b634df89050000002be024d4defdc143701a81e48ab4550068169a69f268d98a415db79dafa6e80d7278e49d233a2edc3e1619e54fd90ed7f37239fdb5c3db281a86c8cbaf6a8121aa76322601acb54cffcbed79577fc7b0e209b976d3af3fe1a76c0e598a45ed07c27bd415ff1a08b9f44e415c4ec3283daa820c718dabc74b1ab7b71117a999c9b52ea0", 0x9c}, {&(0x7f0000000340)='\x00', 0x1}, {&(0x7f0000000880)="87141af223663a746046bdc339de81564cdbc76b336cf021dc7c2550b78b77295a37c903f475800f412569837c24ddf6b71979c1b606045926349dcd37c3077cb901d70a559c57ff65222c60c7bb8241d643c290505f23e07dc853", 0x5b}, {&(0x7f0000000900)="11e08017bdf05fba2a819e173635d3d3e587f540a7622b34ab1069b87bf90bd82a92f94be0630ec07478c68309574d4fb0b1cb100d7d7a2461a1b6ec9df5e794356055d324ef4b72a433640925616bb2bd694ad8453d43bbbb91f97aa18dd52c9372c785e178180fe94fe7cac6ac486e131d1da39a4bab332c8a634ea393612b1be8d2b7d6dece01f6d5891bcf73f2d902c003facf086a1d84c11781cbb3ec57798068f71764c936cd63", 0xaa}, {&(0x7f00000009c0)="c71924d7ea9bc5971a0c58640e8be19cab192cbcc2e315e72c441a5b0c0bb0fa1728e32d3bd7cd210bc2e5abeba55e9d8626bc0e11a884d140c83c4d40f46ea66a5bdab9888ffe03d639b5c19ae7243b451e6572bacf66051d51b9fb2f22ca8b69f8a53f890035bcb884820df6246909e21fda8c820c1a3a1b678ebfdf", 0x7d}], 0x5}}], 0x4, 0x4000000)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80)
pipe2(&(0x7f0000001440)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x0)
splice(0xffffffffffffffff, 0x0, r9, 0x0, 0x6, 0x0)
mount$9p_fd(0x0, &(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000001940)=ANY=[@ANYRES16, @ANYRESOCT=r6, @ANYRESHEX=r8, @ANYBLOB="a762c0e4ae645b73d344e371b533fe0d0079c51cf1b76cb7d2a3d4f5fd9cf4ad44bb63f53f1ebc8fdfea292082671dd17b15b8daec301cb58785f76193ff415aba3dc706056c535ebac3e66ea9b53fe7c555082fc0023417a696e6fa24abbad165fd2563209063531bb0031eb50300430ec5c61ab8d724852e5bf3a3a076627a57ac618edc0617406baab34b8845f7f659f180f59e4c9f365f8a589453c7dd7a1059be163883a7653cca57f48c01e140a4edf79641993bc9fd701ced6ef2c1cb009643c5aa7b", @ANYRES32=r2])

3.178593272s ago: executing program 1 (id=266):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4)
write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff00000000000000050000000100000000ff0200000000000000000000000000014f194e2000109078c205000100000000"], 0x4a)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', <r3=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x3, @none, 0x0, 0x1}, 0xe)
getsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000000080)=0x4, &(0x7f00000000c0)=0x2)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000380)={[{@discard}, {@stripe={'stripe', 0x3d, 0xe}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x82}}, {@nodelalloc}, {@errors_remount}, {@orlov}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x10000000343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@abort}]}, 0xfd, 0x58f, &(0x7f00000004c0)="$eJzs3U1rG9caAOB3ZCtfzr12IIR7uyiBLJoSIsd2P1IoJF2WNjTQ7lNhKyZYjoIlh9gNNFk0m25KKJTSQOkP6L67hv6B/oBuugm0gVCCaRel4DLyyFFsSVYcpVKj54Gxz9HM6MzRmXf8zoxkBTC0jqY/chH/j4jPkojxpnmjkc08urHc2sPrs+mUxPr6+78lcWbLcyXZ77Gs8r+I+OGTiBO57e1WV1YXiuVyaSmrT9YWr0xWV1ZPXloszpfmS5enZ2ZOvzoz/cbrr/Wsry+f/+PL9+6+ffrTY2tffHv/0O0kzsbBbF7arx40caO5crT4V1bKx9ktC071oLFBkvR7A9iVkSzO85EeA8ZjJIt64Pn3cUSsA0MqEf8wpBp5QOPcfu3h9f39zUj+WQ/e2jgBaup/dh1gdOPaSOyrnxsdWEseOzNKz3cnetB+2sZ3v965nU7R+TpE07j8PNaDpoEhd+NmRJwaHd1+/Euy49/unapfPO5saxs9ug4LdOFumv8kNyK2xX9uM/+JFvnPWIvY3Y2d4z93vwfNtJXmf29Gq/xv89A1MZLV/lPP+fLJxUvl0qmI+G9EHI/83rTe6X7O6bV76+3mNed/6ZS238gFs+24P7r38XXmirXi0/S52YObES+0zH+TzfFPWox/+nqc77KNI6U7L7abt3P/n631byJeajn+j+5oJZ3vT07W94fJxl6x3e+3jvzYrv1+9z8d/wOd+z+RNN+vrT55G1/v+7PUbt5u9/89yQf18p7ssWvFWm1pKmJP8u7o2NbHpx+t26g3lk/7f/xY6/jvtP+nJ2Mfdtn/W4dvtV10EMZ/7onG/8kL99756Kv6M7XIBrsb/1fqpePZI90c/7rdwKd9/QAAAAAAAGCQ5CLiYCS5wmY5lysUNt7fcTgO5MqVau3Excry5bmof1Z2IvK5xp3u8ab3Q0xl74dt1Ke31Gci4lBEfD6yv14vzFbKc/3uPAAAAAAAAAAAAAAAAAAAAAyIsTaf/0/9MtLvrQOeufoXG+zt91YA/bDjV/734puegIG0Y/wDz62W8f/9Tx3WcGUAnhf+/sPwEv8wvMQ/DK9u4z8/vssVgYEljGF4iX8AAAAAAAAAAAAAAAAAAAAAAAAAAADoqfPnzqXT+trD67Npfe7qyvJC5erJuVJ1obC4PFuYrSxdKcxXKvPlUmG2srjT85UrlStT07F8bbJWqtYmqyurFxYry5drFy4tFudLF0p5/2wYAAAAAAAAAAAAAAAAAAAAtqmurC4Uy+XSkkLbwpkYiM14lh3csKvVRwelF4NV2Bfx795t+nxgAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAmfwcAAP//s5gzzg==")
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2a, 0x2, 0x0)
socket$unix(0x1, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x83, 0x101000)
syz_usb_disconnect(r5)
r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0)
ioctl$EVIOCRMFF(r5, 0x550c, 0x0)
syz_usb_control_io$uac1(r6, 0x0, 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io(r6, 0x0, 0x0)
syz_usb_control_io$lan78xx(r6, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN_LIVE(0xa, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)

1.396406293s ago: executing program 1 (id=277):
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ntfs3\x00', 0x200000, 0x0) (async)
r0 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$inet(r0, 0x0, 0x0) (async, rerun: 64)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r1) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20)
sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x1}], 0x1}, 0x8004) (async)
recvfrom(r2, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) (async, rerun: 32)
ioprio_set$pid(0x3, 0x0, 0x0) (async, rerun: 32)
syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") (async, rerun: 32)
r5 = open(&(0x7f0000000240)='./file1\x00', 0xcc941, 0x0) (async, rerun: 32)
r6 = open(&(0x7f0000000180)='./file1\x00', 0x185102, 0x2b)
ftruncate(r6, 0x2007ffb) (async)
sched_setscheduler(0x0, 0x1, 0x0) (async)
r7 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_CROPCAP(r7, 0xc02c563a, &(0x7f0000000040)={0x9, {0x6, 0x0, 0x6, 0x2}, {0x7, 0xcf, 0x9, 0x101}, {0xcc, 0x80000000}}) (async)
syz_usbip_server_init(0x4) (async)
syz_usb_connect(0x1, 0x2d, 0x0, 0x0) (async)
sendfile(r5, r6, 0x0, 0x1000000201001)

1.27966014s ago: executing program 1 (id=278):
r0 = syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x2000002, &(0x7f0000001140)=ANY=[], 0xfe, 0xc3b, &(0x7f0000000cc0)="$eJzs3U9sHNd9B/DfGy3Fpd1WTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIRR9C8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUWRFiOSEmV9Pjb13Z19b/a9mfWMLOi3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAiD949cLJU+lhjwIAeJAujX715Gn3fwB4rFzx//8AAAAAAAAAAAAAAHDQpSjiqUgxd2ktjVfPO+oX2303b40Nj2zdbSBVPQ9V7cuf+qnTZ85+6cWhc9282J75iP577bPx+uiVC41XZm/MzU8tLExNNsZm2hOzk1M73sNu+292vDoAjRtv3py8dm2hcfqFM3e8fGvww/4njw6eH3ruxLPdtmPDIyOjG03qve1r9z2Qju0qPA5HEScixfPf/UlqRUQRuz8W9Qd77jcbqCZxvJrE2PBINZHpdmtmsXzxcvdAFBGNnk7N7jHa+lxEre+BzmF7zYilcvjlgI+X0xuda823rk5PNS635hfbi+3ZmcupM9pyPo0o4lyKWI6I1f67d9cXRdQixbePrKWrEXGoexy+WBUGbz+OYh/nuAPlOBt9EcvFI3DODrD+KOK1SPHT947FRL7OVNeaL0S8Vub3I94p8+WIVH4wzkZ8sMXniEdTLYr4y/L8n19Lk9X1oHtdufhG4ysz12Z72navK7/k/eGuK8VDuj8MbMoH44Bfm+pRRKu64q+l+//NDgAAAAAAAAAAAAAAAAB7bSCK+EykePU//qSqK46qLv3I+aE/HPzV3prxZ+6xn7LtCxGxVOysJvdwLgy8nC6ndLtC8I2JvZ0d91KPIv401/9982EPBgAAAAAAAAAAAAAAAAAA4LFWxI8jxUvvH0vL0bumeHvmeuNK6+p0Z1XY7tq/3TXT19fX1xupk82c4zmXci7nXMm5mjOK3D9nM+d4zqWcyzlXcq7mjEO5f85mzvGcSzmXc67kXM0Ztdw/ZzPneM6lnMs5V3Ku5owDsnYvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDHSRFF/DxSfOvraylSRDQjxqOTK/0Pe3QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQKk/FfG9SNH4o+btbbWISNW/HcfKX85G83CZn4zmUJkvR/NCzlaVteY3H8L42Z2+VMSPIkV//d3bJzyf/77Os9sfg3jnGxvPPlvr5KHui4Mf9j959Mj5oZHfeGa7x2mrARy/2J65easxNjwyMtqzuZbf/ZM92wbz+xZ7M3UiYuGtt99sTU9Pzd//g/IjsIvuj9CDVHtcZupB9SBqB2IYD2fuPAbK+/8HkeJ33//P7g2/c/+vx690nt2+w8fP/mzj/v/S5h3t8P5f29wv3//Le/pW9/+nera9lH830leLqC/emOs7GlFfeOvtE+0bretT16dmzp48+eWhoS+fOdl3OKJ+rT091fNoTw4XAAAAAAAAAAAAAAAAwIOTivj9SNH60VpqRMStql5r8PzQcyeePRSHqnqrO+q2Xx+9cqHxyuyNufmphYWpycbYTHtidnJqp29Xr8q9xoZH9mUy9zTwkePvv/cO7jH+gfors3Nvzbev//Hilq8/Ub9wdWFxvjWx9csxEEVEs3fL8WrAY8Mj1aCn262ZquvlLYvpf3l9qYj/ihQTZxvp83lbrv/fXOF/R/3/0uYd7VP9/yd6tpXvmVIRP4sUv/NXz8Tnq3E+EXcds9zu7yLF8XOfy+3icNmuO4bO9wp0KgPLtv8XKf7p53e27dZDPrXR9tSOD+wjojz/RyLF9/7iO/Gbedud3/+w9fl/YvOO9un8P92z7Yk7vq9g11Mnn/8TkeLlp96N38rbPur7P7rfvXEsN779/Rz7dP4/1bNtML/vb+/N1AEAAAAAAAAAAB5pfamIv48UPxippRfztp38/b/JzTvap7//9emebZN7s17RPR/s+qACAAAAwAHRl4r4caS4vvju7RrqgTvqv3vqP39vo/5zOG16tfpzvl+rvjdgL//8r9dgft/x3U8bAAAAAAAAAAAAAAAAAAAADpSUingxr6c+XtXzT267nvpKpHj1f57P7dLRsl13HfjB6tf6pdmZExemp2cnWoutq9NTjdG51sRU2ffpSLH2t5/LfYtqffXuevOdNd431mKfjxQj/9Bt21mLvbs2+dMbbU+VbT8RKf77H+9s213H+lMbbU+Xbf8mUnztX7Zue3Sj7Zmy7XcixQ+/1ui2faJs2/1+1E9vtH1hYrbYh7MCAAAAAAAAAAAAAAAAAADA46YvFfHnkeJ/byzfruWvdWre+3qeVt75Rs96/5vcqtb5H6zW/9/u8f2s/199r8DSdu8KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfTymKeDtSzF1aSyv95fOO+sX2zM1bY8MjW3cbSFXPQ1X78qd+6vSZs196cehcNz+6/177TLw+euVC45XZG3PzUwsLU5ONsZn2xOzk1I73sNv+mx2vDkDjxps3J69dW2icfuHMHS/fGvyw/8mjg+eHnjvxbLft2PDIyGhPm1rffb/7XdI22w9HEX8dKZ7/7k/SD/ojitj9sbjHZ2e/DVSTOF5NYmx4pJrIdLs1s1i+eLl7IIqIRk+nZvcYPYBzsSvNiKVy+OWAj5fTG51rzbeuTk81LrfmF9uL7dmZy6kz2nI+jSjiXIpYjojV/rt31xdFvBkpvn1kLf1rf8Sh7nH44qXRr548vf04in2c4w6U42z0RSwXj8A5O8D6o4h/jhQ/fe9Y/Ft/RC06P/GFiNfK/H7EO9E536n8YJyN+GCLzxGPploU8f/l+T+/lt7rL68H3evKxTcaX5m5NtvTtntdeeTvDw/SAb821aOIH1ZX/LX07/67BgAAAAAAAAAAAAAAADhAivj1SPHS+8dSVR98u6a4PXO9caV1dbpT1tet/evWTK+vr683UiebOcdzLuVczrmSczVnFLl/zmaZ9fX18fx8KedyzpWcqznjUO6fs5lzPOdSzuWcKzlXc0Yt98/ZzDmecynncs6VnKs544DU7gEAAAAAAAAAAAAAAAAAAB8vRfVPim99fS2t93fWlx6PTq5YD/Rj7xcBAAD//xkH+XA=")
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = dup(r2)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
r4 = dup(r2)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x111, 0x2}}, 0x20)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x4000004, 0x1, 0x80000000, 0x0, 0xac, 0x7d, 0x5}, 0x9c)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c)
close_range(r1, 0xffffffffffffffff, 0x0)

1.208865298s ago: executing program 2 (id=280):
mmap(&(0x7f00004f0000/0x1000)=nil, 0x1000, 0x3, 0x100010, 0xffffffffffffffff, 0xace9b000)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20)
mprotect(&(0x7f0000e1d000/0x2000)=nil, 0x2000, 0x2000000)
lsm_set_self_attr(0x64, &(0x7f0000002980)={0x68, 0x8, 0xf1, 0xd1, "188aa3520e079ea4cdce3e233662ad70357d3719ed224489be4f9b43fdf4cf39d9860bc35708efe053479547c4d98b7b94161839c8aef1a33991284fd223d156030b5f2e5d67aa022d3d4dd1bbdca59406a9ad5ffea39998eab21041396595e831b3416463565cc7d70e0512305a5708121cf071c2c1bda5425f59da5e3ce9a7ee14de69497bdef396c0919c02449b11162f6d956e18eeeef523524e770c8a755f0274a1b20aa7a3717bfbdfe5d847d06d1c8733787baf8196f9eeccf7b70c6f7033a489712cc2680386c95ce39d8520bb"}, 0xf1, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}})
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

1.049579301s ago: executing program 1 (id=281):
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0)
r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x7ff, 0x30040)
r1 = syz_io_uring_setup(0x32b0, &(0x7f0000000040)={0x0, 0x9503, 0x20, 0x1, 0x16e}, &(0x7f00000000c0), &(0x7f0000000100))
io_uring_enter(r1, 0x661e, 0x1ba8, 0x72, &(0x7f0000000140)={[0x7]}, 0x8)
rt_sigaction(0x8, &(0x7f0000000200)={&(0x7f0000000180)="0f01d9650f0fc194c4a1b174eb0fc448620b4156c401637c7a0ac4a1f1c2470c00660f7c0ac462e8f359e62e0fae6000", 0x80000000, &(0x7f00000001c0)="f043187300450f0f66fb9a660fd081563f0000420fd35de2c48281af1840a5440fc1d6642646d22fc44249de9b145ba4b666470f7d7a01", {[0x6]}}, 0x0, 0x8, &(0x7f0000000240))
mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000006)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x1)
rt_sigsuspend(&(0x7f0000000280)={[0x1]}, 0x8)
fcntl$addseals(r0, 0x409, 0x9)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r3=>r1, {0xfffffbff}}, './file0\x00'})
r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001840)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmmsg$unix(r3, &(0x7f00000018c0)=[{{&(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001780)=[{&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="2c558f073b804f37f54a74cdbcba2bb91b216cbf846473bc62831725e1d5419bbb2155b1481b2799d3cec03b2428f1e4a78aca666369cc", 0x37}, {&(0x7f00000013c0)="135b377e8db2a3d0a4c5884d62fe773950e2aef7d2fba986376518e7cbbf7217d51378bf1437dd8bc00958b7651323bbb061664dedbf6bdaf7556031e1e80c69fb83d0c787ab1e5ff70632e2c4f30335a201d6b4ca23a6cf0dedefad77ff656046fd417c3d14f1b6b43f528b3ac4192174d4c83bb8bf", 0x76}, {&(0x7f0000001440)="01b8f0f6c22f93e189b609ff7e31133ebaf571c45b76b985c4866f83f447b0e115655b8c7ab6ef72ac28a403dad198ec6b41db9f824b1989d7f7f83c6f8a7db13df4ad5a1cc4", 0x46}, {&(0x7f00000014c0)="266f30d3e6f73685678384d54c49189b4125ea633fc53423dfaeb4fb6129a7d2d532efdab7416383bbb30288186081c3cfbbeabf0803fd2f6750a716c0aa29849f54d77ac5eb5b7cad46ee4afca4fff97c2eecffe518c3ea113276b80025b1577009e5c30031d5c8a5c8b2b36c64fbecdde3bd68edff62a16cb5fd1e4892cd223853eb41a3c61fdef9694fc831d1599c9cc56c5941fbf6f85d08a82315ec4a48b05daba8a21abbdaa9411dd301746b48c702501e4d1d0b7197a3ecbb67b36a2cf7461440ea928d76fbb422132d1be64ee40784f9c4415b03c782737a473fc0122404cf9879ddd15fb9811b1796fad9c0c887a532ef64", 0xf6}, {&(0x7f00000015c0)="11aa2695cf6b9bd1000b2da92dc8e0225ccef7eabbcd8eea50ac728373e4e61cb15bc5a11a3bd4241d8b3662beed32ca78ea7190557b665c785a1610282851d2c79e66a1283a62b52c6dc6f9ffedef5a2d69b43358c4239ffb2a63eea60fc0804fb56c5a9761b93885651954741fff6a616a6b0374f26d129bc201e46df05a2d18841436838addc11e7f788942b1abbc934fd0ed09cef14b29", 0x99}, {&(0x7f0000001680)="6d2d8347c6c9d03e452c911a2977102ae6c07f46bf07205c65cef83f8259542fd980d4c2740090ead687e408db392ea90d266329fcb70f761714d179e5057f1be1e8eda8dd9d2e7c289fb6156cb3a359bb488de68c7576b0ea4097c6ef28766887cbc00c30808177dcf81a3c059c97e8a4a3a66cd3d5c44809a334d689bf708eef2e81d0191efd8acc458397e9cfde85c22ed958e10cd17f26dec244a711d2e643d4528d57f3a1610301a40b60532caffd93692d7149ea802bff315bf19cf843ab3de19db54a2eddb24fea93", 0xcc}], 0x7, &(0x7f0000001880)=[@rights={{0x1c, 0x1, 0x1, [r4, 0xffffffffffffffff, r5]}}, @rights={{0x20, 0x1, 0x1, [r0, r1, r6, r0]}}], 0x40, 0x20000800}}], 0x1, 0x4000010)
r7 = syz_open_dev$swradio(&(0x7f0000001900), 0x1, 0x2)
ioctl$VIDIOC_G_OUTPUT(r7, 0x8004562e, &(0x7f0000001940))
ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000002a40)={0x1, 0x2, 0x1000, 0x9d, &(0x7f0000001980)="74276df5e6c365c8c544262d0cae9319261bffa1443a4d246527a9453bc0e257f8a6ce00d5c43b7b82c6f59e50b4a5968eaf8b63fb32f1f47198ca90246174022a0481f5e325bf1c8d23e9b4f3153a4a588f3c77b2359b7aeacaa9031c662a35f32c4c19701a298b1be2931fe0c5f55ccb5c5310403902c614408bb0b7a38ed3a96e899c3ac3ca2cb192439003dd2d7ad798dfb9ebc6d132671f46260c", 0x1000, 0x0, &(0x7f0000001a40)="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"})
r8 = fcntl$getown(r2, 0x9)
r9 = syz_open_procfs(r8, &(0x7f0000002ac0)='schedstat\x00')
getsockopt$IP_VS_SO_GET_INFO(r5, 0x0, 0x481, &(0x7f0000002b00), &(0x7f0000002b40)=0xc)
splice(r4, &(0x7f0000002b80)=0x6, r9, &(0x7f0000002bc0), 0x5, 0x2)
fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000002c00), &(0x7f0000002c40)={'U+', 0x7}, 0x16, 0x1)
getsockname$packet(r4, &(0x7f0000002c80)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000002cc0)=0x14)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000002e40)={'syztnl0\x00', &(0x7f0000002d00)={'gretap0\x00', r10, 0x7800, 0x40, 0x9c00, 0x2, {{0x3e, 0x4, 0x2, 0x13, 0xf8, 0x67, 0x0, 0x5, 0x29, 0x0, @remote, @remote, {[@cipso={0x86, 0x45, 0x3, [{0x5, 0x11, "25fbb1989e48785f07f302f96a2172"}, {0x6, 0xd, "49357bd2dd46ed18be5150"}, {0x6, 0x4, "d3e9"}, {0x6, 0xb, "d87223094e89f368ed"}, {0x0, 0x12, "8445aac766315754bd064c056cd9e10d"}]}, @timestamp_addr={0x44, 0x2c, 0xa, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb}, {@multicast2}, {@broadcast, 0x6}, {@broadcast, 0xffffffff}, {@multicast2, 0x1e}]}, @noop, @generic={0x7, 0xb, "b508a33a6a8810a476"}, @ssrr={0x89, 0x2b, 0x97, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @local, @multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @loopback, @broadcast, @rand_addr=0x64010101]}, @timestamp_addr={0x44, 0x24, 0x18, 0x1, 0x4, [{@private=0xa010102, 0x1ff}, {@broadcast, 0x6}, {@private=0xa010102, 0x6}, {@remote, 0xa}]}, @end, @generic={0x0, 0xa, "8949597f89fbedb3"}, @timestamp_addr={0x44, 0xc, 0xa6, 0x1, 0x0, [{@empty, 0x8}]}, @end]}}}}})
r11 = accept4$ax25(r4, &(0x7f0000002e80)={{0x3, @bcast}, [@default, @default, @default, @null, @default, @remote, @remote, @bcast]}, &(0x7f0000002f00)=0x48, 0x800)
r12 = getuid()
ioctl$SIOCAX25GETUID(r11, 0x89e0, &(0x7f0000002f40)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, r12})
ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000002f80)={0x28, 0x19, 0x12, 0xa, 0x6, 0x101, 0x0, 0xc1})
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003000), r9)
sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f00000030c0)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003080)={&(0x7f0000003040)={0x28, r13, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x5f}, @void, @val={0xc, 0x99, {0x8001, 0x52}}}}, ["", "", "", ""]}, 0x28}}, 0x40000)

838.948272ms ago: executing program 3 (id=282):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20)
syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11}}}}}}}, 0x0)

787.806648ms ago: executing program 2 (id=283):
madvise(&(0x7f0000166000/0x2000)=nil, 0x2000, 0x14)
socket$kcm(0x10, 0x2, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x64040, 0xd0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x18557f, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7)
mkdirat$cgroup(r0, &(0x7f0000000100)='syz0\x00', 0x1ff)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)
madvise(&(0x7f0000ac5000/0x1000)=nil, 0x1000, 0x14)

785.680293ms ago: executing program 3 (id=284):
syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='io_uring_file_get\x00', r0, 0x0, 0xf}, 0x18)
r1 = syz_io_uring_setup(0x12b9, &(0x7f0000000140)={0x0, 0xda3a, 0x0, 0x2, 0x3a9}, &(0x7f0000000380)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0)

609.905392ms ago: executing program 2 (id=285):
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
mremap(&(0x7f00009fe000/0x1000)=nil, 0x1000, 0x1000, 0x6, &(0x7f0000ac7000/0x1000)=nil)
madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x4)
move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0)

601.027602ms ago: executing program 2 (id=286):
socket$inet6_tcp(0xa, 0x1, 0x0)
fanotify_init(0x200, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0)
socket(0x10, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xc0, 0x49, 0x7fff0000}]})
syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000500030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0)

510.007232ms ago: executing program 2 (id=287):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = dup(r1)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
r3 = dup(r1)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x111, 0x2}}, 0x20)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x4000004, 0x1, 0x80000000, 0x0, 0xac, 0x7d, 0x5}, 0x9c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c)
close_range(r0, 0xffffffffffffffff, 0x0)

429.794192ms ago: executing program 2 (id=288):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000340)='./file1\x00', 0x0, &(0x7f0000000000)={[{@space_cache_v1}, {@clear_cache}, {@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0xff, 0x50d4, &(0x7f00000051c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff)
write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x29f)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x0, 0x0, 0x100000})

318.720289ms ago: executing program 3 (id=289):
madvise(&(0x7f000098c000/0x3000)=nil, 0x3000, 0x4)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109141, 0xdf)
pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x7ff)
r1 = dup2(r0, r0)
mmap$snddsp_control(&(0x7f000098e000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r1, 0x83000000)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f000098a000/0x4000)=nil})
ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1})

209.858403ms ago: executing program 3 (id=290):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000007110b3fe8500000095c51300000000004a69b038a3996b6920a1375c4ad28b668d35670dda33161f14bf2daac9000000000000008d0e5841f36abf4676f218ff13bed72a3d96fa55862dc1ac0ed0a2def388d8abf84ec43c0e1a2eccf32074adb716292810e6f7556319147182a5b71b48cd4883279535209165d7dee8cebe571e476b277d920ba8dc24b113786c90e1f4c52afb0195a82c1596e49f1767a338406cb18b84a96b41e5532f27d7312ba64100900487a1"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)

140.092884ms ago: executing program 1 (id=291):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000227bd7000fcdbdf255e00000008000300", @ANYRES32=r1, @ANYBLOB="450119010600000008002700c6aaf49b28020000000800220195030000080022"], 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0x44880) (async)
sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000227bd7000fcdbdf255e00000008000300", @ANYRES32=r1, @ANYBLOB="450119010600000008002700c6aaf49b28020000000800220195030000080022"], 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0x44880)
syz_mount_image$ocfs2(&(0x7f0000004480), &(0x7f00000044c0)='./file1\x00', 0x1808001, &(0x7f0000000000)={[{@coherency_full}, {@noacl}, {@heartbeat_none}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x5}}, {@err_cont}, {@data_writeback}, {@journal_async_commit}, {@commit}]}, 0x1, 0x4470, &(0x7f0000008c00)="$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")
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
fsync(r2) (async)
fsync(r2)
userfaultfd(0x80001) (async)
r3 = userfaultfd(0x80001)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012bbd7000bddbdf25160000000500020000000000050004000000000005000400000000000500030001000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20000084)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r5)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000037400062c000700737b7352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a73300005000200000000000800070026090909140006"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) (async)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000037400062c000700737b7352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a73300005000200000000000800070026090909140006"], 0x78}, 0x1, 0xffffffff00000003}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x193080, 0x0)
openat$cgroup_int(r7, &(0x7f0000000300)='cpuset.memory_spread_page\x00', 0x2, 0x0)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) (async)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00009b7000/0x3000)=nil, 0x3000}, 0x5}) (async)
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00009b7000/0x3000)=nil, 0x3000}, 0x5})
r8 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x800, 0x2, 0x34f}, &(0x7f00000001c0)=<r9=>0x0, &(0x7f0000000080))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffdd, 0x0, 0x0, 0x9}, 0x94)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
io_uring_enter(r8, 0x47bc, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x207, &(0x7f0000000500)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0)
ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000180)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) (async)
ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000180)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)

76.722556ms ago: executing program 3 (id=292):
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f00000002c0)=0xfffffffe, 0x4)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) (async)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) (async)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x4, 0x2)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$radio(0x0, 0x0, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) (async)
r1 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x1, 0x39d}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) (async)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r1, 0x47ba, 0x3e80, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
syz_open_dev$dri(0x0, 0x0, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe3}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) (async)
r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x2, 0x10000, 0x4, 0x4, 0x0, 0x8, 0x7, 0xa, 0x0, 0x2, 0x1, 0x1, 0x800, 0x6, 0xb4c, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x1, 0x0, 0xfffffff8]}) (async)
getpid()

0s ago: executing program 3 (id=293):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000680)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6e6f757365725f78617474722c636f686572656e63793d66756c6c2c646174613d77726974656261636b2c6c6f63616c616c6c6f633d2d303030303030303030303030303030303030312c61636c2c6e6f61636c2c6c6f63616c616c6c6f633d30303030303030303030303030303030303030302c00a89f6b8d5800aa954e6c8735dcd52921ce08462fb4ce7c1600883251443ac332f4d17b77d29867e4321610936dbc5963e9fb59a032c92e32ebffc3b739951e866d52bff6bd63136a656222062a8eea0cf97480bc8ac6c0e8a2aa38ffa8fa758cd54b9ef39a7f536d7b85173a83c34d78e210ecf4d040817bbe989e9eb015acb84bb90577b8b405a48292eeca69f5275cb7b7027d4bf643bd69b034c0221a30"], 0x1, 0x442d, &(0x7f0000004480)="$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")
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
fallocate(r0, 0x0, 0x0, 0x1000f4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={0xffffffffffffffff, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r2}, 0x20)
recvmmsg(r2, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:13978' (ED25519) to the list of known hosts.
syzkaller login: [   58.266057][ T5832] cgroup: Unknown subsys name 'net'
[   58.357410][ T5832] cgroup: Unknown subsys name 'cpuset'
[   58.362310][ T5832] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   60.096007][ T5832] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.418639][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.422418][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.425605][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.428884][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.432041][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.508397][   T56] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.512003][   T56] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.515232][   T56] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.518958][   T56] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.522443][   T56] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.575841][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.578843][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.582066][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.585269][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.588194][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.656760][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   64.775629][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.778331][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.780666][ T5846] bridge_slave_0: entered allmulticast mode
[   64.783603][ T5846] bridge_slave_0: entered promiscuous mode
[   64.787700][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.789930][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.792388][ T5846] bridge_slave_1: entered allmulticast mode
[   64.795091][ T5846] bridge_slave_1: entered promiscuous mode
[   64.842801][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.870371][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.909201][ T5846] team0: Port device team_slave_0 added
[   64.924655][ T5846] team0: Port device team_slave_1 added
[   64.958364][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.960763][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.969239][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.976831][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.979106][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.988696][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.992560][ T5854] chnl_net:caif_netlink_parms(): no params data found
[   65.123205][ T5846] hsr_slave_0: entered promiscuous mode
[   65.126614][ T5846] hsr_slave_1: entered promiscuous mode
[   65.138343][ T5857] chnl_net:caif_netlink_parms(): no params data found
[   65.168933][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.171267][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.173601][ T5854] bridge_slave_0: entered allmulticast mode
[   65.176511][ T5854] bridge_slave_0: entered promiscuous mode
[   65.180433][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.182874][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.185438][ T5854] bridge_slave_1: entered allmulticast mode
[   65.188272][ T5854] bridge_slave_1: entered promiscuous mode
[   65.252775][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.280185][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.283666][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.286543][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.289334][ T5857] bridge_slave_0: entered allmulticast mode
[   65.293128][ T5857] bridge_slave_0: entered promiscuous mode
[   65.297689][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.299961][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.303116][ T5857] bridge_slave_1: entered allmulticast mode
[   65.305851][ T5857] bridge_slave_1: entered promiscuous mode
[   65.355600][ T5854] team0: Port device team_slave_0 added
[   65.359193][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.377094][ T5854] team0: Port device team_slave_1 added
[   65.380643][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.417800][ T5857] team0: Port device team_slave_0 added
[   65.436313][ T5857] team0: Port device team_slave_1 added
[   65.438851][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.441076][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.449868][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.464781][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.466932][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.476421][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.501260][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.504026][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.511542][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.529906][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.532375][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.540139][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.592934][ T5854] hsr_slave_0: entered promiscuous mode
[   65.595935][ T5854] hsr_slave_1: entered promiscuous mode
[   65.598118][ T5854] debugfs: 'hsr0' already exists in 'hsr'
[   65.599963][ T5854] Cannot create hsr debugfs directory
[   65.605553][ T5857] hsr_slave_0: entered promiscuous mode
[   65.608176][ T5857] hsr_slave_1: entered promiscuous mode
[   65.610400][ T5857] debugfs: 'hsr0' already exists in 'hsr'
[   65.612397][ T5857] Cannot create hsr debugfs directory
[   65.665007][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.690421][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.719914][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.746284][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.888578][ T5854] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.898006][ T5854] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.920284][ T5854] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.925279][ T5854] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.962772][ T5857] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.973372][ T5857] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.980213][ T5857] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.986112][ T5857] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.004749][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.042304][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   66.060112][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.062929][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.082801][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.085625][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.160699][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.187279][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   66.195895][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.215580][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.218072][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.228246][ T5857] 8021q: adding VLAN 0 to HW filter on device team0
[   66.238217][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.241273][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.260717][  T146] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.263218][  T146] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.267823][  T146] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.270032][  T146] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.351114][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.421274][ T5846] veth0_vlan: entered promiscuous mode
[   66.437362][ T5846] veth1_vlan: entered promiscuous mode
[   66.488570][ T5846] veth0_macvtap: entered promiscuous mode
[   66.503869][ T5846] veth1_macvtap: entered promiscuous mode
[   66.512293][ T5849] Bluetooth: hci0: command tx timeout
[   66.517532][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.529666][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.536389][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.557822][ T5694] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.564862][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.573598][ T5694] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.583942][ T5694] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.591738][ T5849] Bluetooth: hci1: command tx timeout
[   66.594826][ T5694] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.617124][ T5857] veth0_vlan: entered promiscuous mode
[   66.652159][ T5857] veth1_vlan: entered promiscuous mode
[   66.656862][ T5854] veth0_vlan: entered promiscuous mode
[   66.671667][ T5849] Bluetooth: hci2: command tx timeout
[   66.677748][ T5854] veth1_vlan: entered promiscuous mode
[   66.706181][  T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.709015][  T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.744767][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.747330][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.755677][ T5854] veth0_macvtap: entered promiscuous mode
[   66.777876][ T5857] veth0_macvtap: entered promiscuous mode
[   66.787468][ T5854] veth1_macvtap: entered promiscuous mode
[   66.799861][ T5857] veth1_macvtap: entered promiscuous mode
[   66.804619][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.813031][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.821981][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.825632][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.838284][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.847268][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.849996][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.879047][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.891297][   T24] IPVS: starting estimator thread 0...
[   66.893812][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.897412][ T5911] IPVS: fo: FWM 3 0x00000003 - no destination available
[   66.924463][ T5694] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.927229][ T5694] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.933566][ T5694] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.938024][ T5694] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.975358][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.982299][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.985977][ T5912] IPVS: using max 40 ests per chain, 96000 per kthread
[   67.022506][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.024924][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.070629][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.079188][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.128198][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.131288][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.261530][ T5917] loop1: detected capacity change from 0 to 32768
[   67.265272][ T5917] =======================================================
[   67.265272][ T5917] WARNING: The mand mount option has been deprecated and
[   67.265272][ T5917]          and is ignored by this kernel. Remove the mand
[   67.265272][ T5917]          option from the mount to silence this warning.
[   67.265272][ T5917] =======================================================
[   67.340720][ T5917] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[   67.356628][   T33] audit: type=1800 audit(1759232269.436:2): pid=5917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2" name="bus" dev="loop1" ino=17058 res=0 errno=0
[   67.379158][   T33] audit: type=1800 audit(1759232269.446:3): pid=5917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2" name="bus" dev="loop1" ino=17058 res=0 errno=0
[   67.613981][ T5854] ocfs2: Unmounting device (7,1) on (node local)
[   67.748715][ T5926] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5'.
[   67.857398][ T5927] mmap: syz.1.5 (5927) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   67.919928][ T5927] loop1: detected capacity change from 0 to 8
[   67.940490][ T5927] SQUASHFS error: Unable to read directory block [629:26]
[   68.254884][ T5934] loop1: detected capacity change from 0 to 2048
[   68.267979][ T5934] UDF-fs: warning (device loop1): udf_fill_super: No fileset found
[   68.308511][ T5934] loop1: detected capacity change from 0 to 1024
[   68.314562][ T5934] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled
[   68.339927][ T5934] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   68.349046][ T5934] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.8: missing EA_INODE flag
[   68.364103][ T5934] EXT4-fs (loop1): Remounting filesystem read-only
[   68.367576][ T5934] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   68.403308][   T33] audit: type=1800 audit(1759232270.486:4): pid=5934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8" name="file3" dev="loop1" ino=16 res=0 errno=0
[   68.425129][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.534515][ T5942] loop0: detected capacity change from 0 to 512
[   68.555023][ T5942] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[   68.570635][ T5942] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.10: invalid indirect mapped block 2683928664 (level 1)
[   68.577368][ T5942] EXT4-fs (loop0): Remounting filesystem read-only
[   68.579891][ T5942] EXT4-fs (loop0): 1 truncate cleaned up
[   68.582988][ T5942] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   68.594358][ T5849] Bluetooth: hci0: command tx timeout
[   68.603523][ T5857] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.672536][ T5849] Bluetooth: hci1: command tx timeout
[   68.679884][ T5940] loop1: detected capacity change from 0 to 32768
[   68.711126][ T5940] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   68.727048][ T5940] XFS (loop1): Ending clean mount
[   68.735365][ T5849] Bluetooth: Frame is too long (len 28, expected len 4)
[   68.759628][ T5854] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   68.763968][ T5849] Bluetooth: hci2: command tx timeout
[   68.867666][ T5947] loop0: detected capacity change from 0 to 32768
[   68.905377][ T5947] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[   68.920537][ T5947] syz.0.11 uses obsolete (PF_INET,SOCK_PACKET)
[   68.932520][   T33] audit: type=1800 audit(1759232271.016:5): pid=5947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.11" name="bus" dev="loop0" ino=17058 res=0 errno=0
[   68.939979][   T33] audit: type=1800 audit(1759232271.016:6): pid=5947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.11" name="bus" dev="loop0" ino=17058 res=0 errno=0
[   69.049050][ T5857] ocfs2: Unmounting device (7,0) on (node local)
[   69.117807][ T5963] loop1: detected capacity change from 0 to 64
[   69.164773][  T146] Bluetooth: hci3: Frame reassembly failed (-84)
[   69.169165][ T5965] Bluetooth: hci3: Frame reassembly failed (-90)
[   70.177015][ T5976] loop1: detected capacity change from 0 to 32768
[   70.210107][ T5976] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   70.241030][ T5976] XFS (loop1): Ending clean mount
[   70.270399][ T5992] loop2: detected capacity change from 0 to 2048
[   70.286023][ T5992] UDF-fs: warning (device loop2): udf_fill_super: No fileset found
[   70.314777][ T5992] loop2: detected capacity change from 0 to 512
[   70.318674][ T5992] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   70.322800][ T5992] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   70.328378][ T5992] EXT4-fs (loop2): 1 truncate cleaned up
[   70.331293][ T5992] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   70.338338][ T5992] EXT4-fs error (device loop2): ext4_find_dest_de:2052: inode #2: block 13: comm syz.2.20: bad entry in directory: '.' directory cannot be the last in data block - offset=0, inode=2, rec_len=1024, size=1024 fake=1
[   70.555843][ T5854] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   70.671794][   T56] Bluetooth: hci0: command tx timeout
[   70.752165][   T56] Bluetooth: hci1: command tx timeout
[   70.764284][ T6001] loop1: detected capacity change from 0 to 4096
[   70.791274][ T6001] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   70.841634][   T56] Bluetooth: hci2: command tx timeout
[   70.997225][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.000859][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.115284][ T5846] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.216170][ T6007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23'.
[   71.221856][ T6007] netlink: 24 bytes leftover after parsing attributes in process `syz.2.23'.
[   71.225571][ T6007] netlink: 24 bytes leftover after parsing attributes in process `syz.2.23'.
[   71.241689][   T56] Bluetooth: hci3: command 0x1003 tx timeout
[   71.251101][ T5849] Bluetooth: hci3: Opcode 0x1003 failed: -110
[   71.466451][ T6013] netlink: 12 bytes leftover after parsing attributes in process `syz.0.26'.
[   71.626954][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.707922][ T6021] loop0: detected capacity change from 0 to 16
[   71.716444][ T6021] erofs (device loop0): mounted with root inode @ nid 36.
[   72.054124][ T6024] loop1: detected capacity change from 0 to 2048
[   72.103827][ T6024] UDF-fs: warning (device loop1): udf_fill_super: No fileset found
[   72.197789][ T6027] Zero length message leads to an empty skb
[   72.487925][ T6031] loop0: detected capacity change from 0 to 32768
[   72.522146][ T6031] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[   72.530516][   T33] audit: type=1800 audit(1759232274.606:7): pid=6031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.34" name="bus" dev="loop0" ino=17058 res=0 errno=0
[   72.541857][ T5913] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   72.548356][ T6040] loop2: detected capacity change from 0 to 2048
[   72.557604][   T33] audit: type=1800 audit(1759232274.606:8): pid=6031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.34" name="bus" dev="loop0" ino=17058 res=0 errno=0
[   72.566024][ T6040] UDF-fs: warning (device loop2): udf_fill_super: No fileset found
[   72.589128][ T6040] loop2: detected capacity change from 0 to 1024
[   72.593584][ T6040] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled
[   72.616707][ T6040] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   72.624246][ T6040] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.36: missing EA_INODE flag
[   72.628530][ T6040] EXT4-fs (loop2): Remounting filesystem read-only
[   72.632210][   T33] audit: type=1800 audit(1759232274.716:9): pid=6040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.36" name="file3" dev="loop2" ino=16 res=0 errno=0
[   72.652405][ T5846] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.691594][ T5913] usb 2-1: Using ep0 maxpacket: 8
[   72.699188][ T5913] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7
[   72.705503][ T5913] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[   72.708491][ T5913] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[   72.711281][ T5913] usb 2-1: Product: syz
[   72.712947][ T5913] usb 2-1: Manufacturer: syz
[   72.714518][ T5913] usb 2-1: SerialNumber: syz
[   72.751672][ T5849] Bluetooth: hci0: command tx timeout
[   72.832693][ T5849] Bluetooth: hci1: command tx timeout
[   72.911803][ T5849] Bluetooth: hci2: command tx timeout
[   73.031558][ T5913] usb 2-1: Handspring Visor / Palm OS: port 0, is for Generic use
[   73.034375][ T5913] usb 2-1: Handspring Visor / Palm OS: port 0, is for Generic use
[   73.037291][ T5913] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2
[   73.125485][ T5857] ocfs2: Unmounting device (7,0) on (node local)
[   73.133163][ T5913] visor 2-1:1.0: Handspring Visor / Palm OS converter detected
[   73.146411][ T5913] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[   73.167060][ T5913] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[   73.234349][ T6050] loop0: detected capacity change from 0 to 256
[   73.359581][ T2203] usb 2-1: USB disconnect, device number 2
[   73.363839][ T2203] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[   73.379827][ T2203] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[   73.390093][ T2203] visor 2-1:1.0: device disconnected
[   73.469678][ T6057] loop2: detected capacity change from 0 to 40427
[   73.475386][ T6057] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   73.477884][ T6057] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   73.482688][ T6057] F2FS-fs (loop2): invalid crc value
[   73.514995][ T6057] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   73.520545][ T6057] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   73.523139][ T6057] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   73.722786][ T5913] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   73.881610][ T5913] usb 1-1: Using ep0 maxpacket: 32
[   73.896791][ T5913] usb 1-1: config 8 has an invalid interface number: 183 but max is 0
[   73.900144][ T5913] usb 1-1: config 8 has an invalid interface descriptor of length 5, skipping
[   73.903760][ T5913] usb 1-1: config 8 has an invalid interface descriptor of length 5, skipping
[   73.917138][ T5913] usb 1-1: config 8 has an invalid descriptor of length 1, skipping remainder of the config
[   73.921337][ T5913] usb 1-1: config 8 has no interface number 0
[   73.929682][ T5913] usb 1-1: config 8 interface 183 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 7
[   73.943215][ T5913] usb 1-1: config 8 interface 183 has no altsetting 0
[   73.945101][ T6068] loop1: detected capacity change from 0 to 2048
[   73.959198][ T5913] usb 1-1: New USB device found, idVendor=0545, idProduct=808b, bcdDevice=69.50
[   73.961189][ T6068] UDF-fs: warning (device loop1): udf_fill_super: No fileset found
[   73.970651][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.987082][ T5913] usb 1-1: Product: syz
[   73.988900][ T5913] usb 1-1: Manufacturer: syz
[   73.991033][ T5913] usb 1-1: SerialNumber: syz
[   74.317147][ T5913] gspca_main: tv8532-2.14.0 probing 0545:808b
[   74.407645][ T5913] usb 1-1: USB disconnect, device number 2
[   74.541089][ T6073] loop1: detected capacity change from 0 to 1024
[   74.548545][ T6073] EXT4-fs: Ignoring removed orlov option
[   74.550428][ T6073] EXT4-fs: Ignoring removed nomblk_io_submit option
[   74.583525][ T6073] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   74.596588][   T33] audit: type=1800 audit(1759232276.676:10): pid=6073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.45" name="file1" dev="loop1" ino=15 res=0 errno=0
[   74.716837][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.850709][ T6081] loop1: detected capacity change from 0 to 1024
[   74.865745][ T6081] EXT4-fs: Ignoring removed nobh option
[   74.867956][ T6081] EXT4-fs: Ignoring removed bh option
[   74.900611][ T6081] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal
[   74.961100][ T6086] loop0: detected capacity change from 0 to 2048
[   74.987190][ T6086] UDF-fs: warning (device loop0): udf_fill_super: No fileset found
[   75.016867][ T6086] loop0: detected capacity change from 0 to 1024
[   75.040233][ T6086] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled
[   75.056368][ T6086] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   75.066058][   T33] audit: type=1800 audit(1759232277.146:11): pid=6086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.50" name="file3" dev="loop0" ino=16 res=0 errno=0
[   75.088608][ T5857] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.121299][ T6099] loop0: detected capacity change from 0 to 128
[   75.125551][ T6099] EXT4-fs (loop0): Test dummy encryption mode enabled
[   75.134566][ T6099] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   75.139499][ T6099] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   75.194758][ T6099] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[   75.309869][ T6110] loop2: detected capacity change from 0 to 256
[   75.316557][ T6110] exfat: Deprecated parameter 'namecase'
[   75.335174][ T6110] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[   75.776055][ T6113] loop2: detected capacity change from 0 to 1024
[   75.789693][ T6113] EXT4-fs: Ignoring removed orlov option
[   75.800612][ T6113] EXT4-fs: Ignoring removed nomblk_io_submit option
[   75.850484][ T6113] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   75.881387][   T33] audit: type=1800 audit(1759232277.956:12): pid=6113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.54" name="file1" dev="loop2" ino=15 res=0 errno=0
[   76.070038][ T5846] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.155752][ T5857] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   76.182727][ T6121] loop2: detected capacity change from 0 to 2048
[   76.195445][ T6121] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   76.212179][ T6122] netlink: 'syz.1.57': attribute type 1 has an invalid length.
[   76.228144][ T6124] netlink: 'syz.0.58': attribute type 10 has an invalid length.
[   76.231288][ T6122] netlink: 'syz.1.57': attribute type 1 has an invalid length.
[   76.247403][ T6122] netlink: 'syz.1.57': attribute type 1 has an invalid length.
[   76.250282][ T6124] macvlan0: entered promiscuous mode
[   76.275872][ T6124] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[   76.332488][ T6125] loop1: detected capacity change from 0 to 4096
[   76.340904][ T6127] process 'syz.2.59' launched './file0' with NULL argv: empty string added
[   76.599801][ T6124] loop0: detected capacity change from 0 to 40427
[   76.608665][ T6124] F2FS-fs (loop0): invalid crc value
[   76.742793][ T6124] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   76.764495][ T6124] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   76.806544][ T6143] loop1: detected capacity change from 0 to 4096
[   76.842268][ T6143] netlink: 'syz.1.62': attribute type 8 has an invalid length.
[   76.842595][ T6145] loop2: detected capacity change from 0 to 1024
[   76.849997][ T6143] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9)
[   76.852616][ T6143] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   76.853182][ T6145] EXT4-fs: Ignoring removed orlov option
[   76.856957][ T6143] vhci_hcd vhci_hcd.0: Device attached
[   76.864288][ T6146] vhci_hcd: connection closed
[   76.865863][ T5875] vhci_hcd: stop threads
[   76.869725][ T5875] vhci_hcd: release socket
[   76.870598][ T6145] EXT4-fs: Ignoring removed nomblk_io_submit option
[   76.875730][ T5875] vhci_hcd: disconnect device
[   76.907355][ T6145] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   76.919974][   T33] audit: type=1800 audit(1759232278.996:13): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.63" name="file1" dev="loop2" ino=15 res=0 errno=0
[   76.969894][ T5846] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.028854][ T6154] netlink: 32 bytes leftover after parsing attributes in process `syz.2.64'.
[   77.296016][ T6163] loop0: detected capacity change from 0 to 128
[   77.301220][ T6163] vfat: Unknown parameter '18446744073709551615"	9)&7ީV1Kg|sdS:ӳW@q'h{Հ4E>#NrRb'
[   77.504938][ T6169] netlink: 'syz.1.68': attribute type 1 has an invalid length.
[   77.507845][ T6169] netlink: 'syz.1.68': attribute type 1 has an invalid length.
[   77.549229][ T6169] loop1: detected capacity change from 0 to 4096
[   77.686708][ T6168] loop2: detected capacity change from 0 to 32768
[   77.703952][ T6168] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.69 (6168)
[   77.741924][ T6168] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   77.745343][ T6168] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[   77.882411][ T6168] BTRFS info (device loop2): enabling ssd optimizations
[   77.889098][ T6168] BTRFS info (device loop2): enabling free space tree
[   77.933909][ T6168] netlink: 28 bytes leftover after parsing attributes in process `syz.2.69'.
[   78.158883][ T6187] loop0: detected capacity change from 0 to 32768
[   78.262265][ T5913] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   78.423804][ T5913] usb 3-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config
[   78.427633][ T5913] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   78.435284][ T5913] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   78.439058][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.443066][ T5913] usb 3-1: Product: syz
[   78.445503][ T5913] usb 3-1: Manufacturer: syz
[   78.447549][ T5913] usb 3-1: SerialNumber: syz
[   78.688147][ T5913] usb 3-1: 0:2 : does not exist
[   78.699344][ T5913] usb 3-1: Audio class v2/v3 interfaces need an interface association
[   78.725029][ T5913] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22
[   78.733806][ T5913] usb 3-1: USB disconnect, device number 2
[   78.763194][ T5850] udevd[5850]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   79.210122][ T6204] comedi comedi3: pcl812: I/O port conflict (0xfffffffffffffff7,16)
[   79.270532][ T5846] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   79.407536][ T6211] loop1: detected capacity change from 0 to 1024
[   79.410200][ T6211] EXT4-fs: Ignoring removed orlov option
[   79.429433][ T6211] EXT4-fs: Ignoring removed nomblk_io_submit option
[   79.517276][ T6213] input: syz1 as /devices/virtual/input/input4
[   79.531697][ T2203] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   79.597006][ T6222] all (unregistering): Released all slaves
[   79.687219][ T2203] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.17
[   79.701055][ T2203] usb 1-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3
[   79.712448][ T2203] usb 1-1: Product: syz
[   79.714112][ T2203] usb 1-1: Manufacturer: syz
[   79.715826][ T2203] usb 1-1: SerialNumber: syz
[   79.732836][ T2203] usb 1-1: config 0 descriptor??
[   79.745594][ T2203] ch341 1-1:0.0: ch341-uart converter detected
[   79.817764][ T6235] loop1: detected capacity change from 0 to 1024
[   79.837021][ T6235] EXT4-fs: Ignoring removed orlov option
[   79.839063][ T6235] EXT4-fs: Ignoring removed nomblk_io_submit option
[   80.392126][ T2203] usb 1-1: failed to send control message: -71
[   80.395120][ T2203] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[   80.430331][ T2203] usb 1-1: USB disconnect, device number 3
[   80.458376][ T2203] ch341 1-1:0.0: device disconnected
[   80.712507][ T6245] netlink: 'syz.2.87': attribute type 2 has an invalid length.
[   80.715814][ T6245] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.87'.
[   80.719549][ T6245] nbd: must specify at least one socket
[   81.236897][    T9] cfg80211: failed to load regulatory.db
[   81.291605][ T2203] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   81.324415][ T6260] loop1: detected capacity change from 0 to 2048
[   81.368175][ T6260] loop1: detected capacity change from 0 to 1024
[   81.403010][ T6256] loop0: detected capacity change from 0 to 32768
[   81.416842][ T6256] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[   81.433371][   T33] audit: type=1800 audit(1759232283.516:14): pid=6256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.90" name="bus" dev="loop0" ino=17058 res=0 errno=0
[   81.442555][ T2203] usb 3-1: Using ep0 maxpacket: 8
[   81.449017][ T2203] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[   81.453892][ T2203] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[   81.459465][ T2203] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   81.464847][ T2203] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.479298][   T33] audit: type=1800 audit(1759232283.556:15): pid=6256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.90" name="bus" dev="loop0" ino=17058 res=0 errno=0
[   81.603158][ T5857] ocfs2: Unmounting device (7,0) on (node local)
[   81.829835][ T6279] loop1: detected capacity change from 0 to 128
[   82.598934][ T6290] loop0: detected capacity change from 0 to 2048
[   82.623196][ T6290] UDF-fs: warning (device loop0): udf_fill_super: No fileset found
[   82.661213][ T6290] loop0: detected capacity change from 0 to 1024
[   82.668474][ T6290] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled
[   82.700071][ T6290] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   82.707818][ T6290] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.100: missing EA_INODE flag
[   82.715484][ T6290] EXT4-fs (loop0): Remounting filesystem read-only
[   82.715778][ T6292] loop1: detected capacity change from 0 to 256
[   82.719008][   T33] audit: type=1800 audit(1759232284.796:16): pid=6290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.100" name="file3" dev="loop0" ino=16 res=0 errno=0
[   82.766397][ T5857] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.877171][ T6299] comedi comedi3: pcl812: I/O port conflict (0xfffffffffffffff7,16)
[   83.031723][   T47] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   83.181499][   T47] usb 2-1: Using ep0 maxpacket: 16
[   83.301948][ T6301] loop0: detected capacity change from 0 to 40427
[   83.325511][   T47] usb 2-1: unable to get BOS descriptor or descriptor too short
[   83.332896][   T47] usb 2-1: config 15 has an invalid interface number: 174 but max is 0
[   83.336052][   T47] usb 2-1: config 15 has no interface number 0
[   83.338135][   T47] usb 2-1: config 15 interface 174 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0
[   83.341356][   T47] usb 2-1: config 15 interface 174 altsetting 1 bulk endpoint 0x8 has invalid maxpacket 32
[   83.344702][   T47] usb 2-1: config 15 interface 174 altsetting 1 endpoint 0xA has invalid maxpacket 512, setting to 64
[   83.348242][   T47] usb 2-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64
[   83.352718][   T47] usb 2-1: config 15 interface 174 has no altsetting 0
[   83.355796][   T47] usb 2-1: language id specifier not provided by device, defaulting to English
[   83.360926][   T47] usb 2-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d
[   83.363926][   T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.366458][   T47] usb 2-1: Product: syz
[   83.367806][   T47] usb 2-1: Manufacturer: syz
[   83.369312][   T47] usb 2-1: SerialNumber: syz
[   83.381205][ T6292] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   83.648745][   T47] sierra 2-1:15.174: Sierra USB modem converter detected
[   83.658473][   T47] usb 2-1: Sierra USB modem converter now attached to ttyUSB0
[   83.670933][   T47] usb 2-1: Sierra USB modem converter now attached to ttyUSB1
[   83.682480][   T47] usb 2-1: USB disconnect, device number 3
[   83.694351][   T47] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[   83.703828][   T47] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1
[   83.709772][   T47] sierra 2-1:15.174: device disconnected
[   83.772920][ T6310] netlink: 'syz.1.106': attribute type 1 has an invalid length.
[   83.775596][ T6310] netlink: 'syz.1.106': attribute type 1 has an invalid length.
[   83.859334][ T6310] loop1: detected capacity change from 0 to 4096
[   84.122066][    T9] usb 3-1: USB disconnect, device number 3
[   84.428704][ T6312] loop2: detected capacity change from 0 to 32768
[   84.608580][ T6321] comedi comedi3: pcl812: I/O port conflict (0xfffffffffffffff7,16)
[   84.699109][ T6324] loop0: detected capacity change from 0 to 256
[   84.719806][ T6324] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[   84.765743][ T6324] exFAT-fs (loop0): IO charset cp9	 not found
[   84.827571][ T6328] 8021q: VLANs not supported on gre0
[   85.119209][ T6328] loop2: detected capacity change from 0 to 40427
[   85.122369][ T5847] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   85.123081][ T6328] F2FS-fs (loop2): Image doesn't support compression
[   85.127654][ T6328] F2FS-fs (loop2): build fault injection rate: 690
[   85.129905][ T6328] F2FS-fs (loop2): build fault injection type: 0x35f7
[   85.139239][ T6328] F2FS-fs (loop2): invalid crc value
[   85.176897][ T6332] loop1: detected capacity change from 0 to 512
[   85.202646][ T6328] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   85.206459][ T6328] F2FS-fs (loop2): Start checkpoint disabled!
[   85.213805][ T6328] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0
[   85.216967][ T6328] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   85.244225][ T6328] syz.2.113: attempt to access beyond end of device
[   85.244225][ T6328] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   85.361533][ T5847] usb 1-1: Using ep0 maxpacket: 8
[   85.365231][ T5847] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7
[   85.370246][ T5847] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[   85.373643][ T5847] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[   85.376592][ T5847] usb 1-1: Product: syz
[   85.378036][ T5847] usb 1-1: Manufacturer: syz
[   85.379732][ T5847] usb 1-1: SerialNumber: syz
[   85.466218][ T6340] loop1: detected capacity change from 0 to 2048
[   85.477581][ T6328] F2FS-fs (loop2): access invalid blkaddr:4043309056
[   85.482464][ T6328] CPU: 1 UID: 0 PID: 6328 Comm: syz.2.113 Not tainted syzkaller #0 PREEMPT(full) 
[   85.482484][ T6328] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   85.482493][ T6328] Call Trace:
[   85.482510][ T6328]  <TASK>
[   85.482525][ T6328]  dump_stack_lvl+0x189/0x250
[   85.482549][ T6328]  ? __pfx_dump_stack_lvl+0x10/0x10
[   85.482566][ T6328]  ? __pfx_f2fs_get_dnode_of_data+0x10/0x10
[   85.482592][ T6328]  ? kasan_save_track+0x3e/0x80
[   85.482606][ T6328]  ? __kasan_slab_alloc+0x6c/0x80
[   85.482624][ T6328]  __f2fs_is_valid_blkaddr+0xe52/0x14f0
[   85.482646][ T6328]  f2fs_map_blocks+0xd84/0x4130
[   85.482691][ T6328]  ? __pfx_f2fs_map_blocks+0x10/0x10
[   85.482707][ T6328]  ? xa_load+0x60/0x210
[   85.482735][ T6328]  ? xa_load+0x1ea/0x210
[   85.482759][ T6328]  f2fs_mpage_readpages+0xc1b/0x1ba0
[   85.482793][ T6328]  ? __pfx_f2fs_mpage_readpages+0x10/0x10
[   85.482816][ T6328]  ? __folio_batch_add_and_move+0x192/0xc60
[   85.482848][ T6328]  ? f2fs_readahead+0x177/0x330
[   85.482865][ T6328]  read_pages+0x17a/0x580
[   85.482885][ T6328]  ? __pfx_read_pages+0x10/0x10
[   85.482906][ T6328]  ? filemap_add_folio+0x35f/0x540
[   85.482928][ T6328]  page_cache_ra_unbounded+0x75e/0x9a0
[   85.482958][ T6328]  f2fs_readdir+0x49b/0xa60
[   85.482992][ T6328]  ? __pfx_f2fs_readdir+0x10/0x10
[   85.483021][ T6328]  ? down_read_killable+0x1d1/0x350
[   85.483044][ T6328]  iterate_dir+0x399/0x570
[   85.483062][ T6328]  __se_sys_getdents64+0xe4/0x260
[   85.483080][ T6328]  ? __pfx___se_sys_getdents64+0x10/0x10
[   85.483093][ T6328]  ? __pfx_filldir64+0x10/0x10
[   85.483122][ T6328]  ? do_syscall_64+0xbe/0xfa0
[   85.483143][ T6328]  do_syscall_64+0xfa/0xfa0
[   85.483158][ T6328]  ? lockdep_hardirqs_on+0x9c/0x150
[   85.483174][ T6328]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   85.483187][ T6328]  ? exc_page_fault+0xab/0x100
[   85.483205][ T6328]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   85.483217][ T6328] RIP: 0033:0x7f0e2438ec29
[   85.483229][ T6328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   85.483239][ T6328] RSP: 002b:00007f0e25159038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[   85.483255][ T6328] RAX: ffffffffffffffda RBX: 00007f0e245d5fa0 RCX: 00007f0e2438ec29
[   85.483265][ T6328] RDX: 0000000000001000 RSI: 0000200000000f80 RDI: 000000000000000b
[   85.483274][ T6328] RBP: 00007f0e24411e41 R08: 0000000000000000 R09: 0000000000000000
[   85.483282][ T6328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   85.483291][ T6328] R13: 00007f0e245d6038 R14: 00007f0e245d5fa0 R15: 00007ffccf56f298
[   85.483315][ T6328]  </TASK>
[   85.488643][ T6328] syz.2.113: attempt to access beyond end of device
[   85.488643][ T6328] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[   85.585011][ T5847] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use
[   85.586994][ T6328] syz.2.113: attempt to access beyond end of device
[   85.586994][ T6328] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427
[   85.591011][ T5847] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use
[   85.607893][ T5847] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2
[   85.639205][   T27] kworker/u10:0: attempt to access beyond end of device
[   85.639205][   T27] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[   85.645552][   T27] CPU: 1 UID: 0 PID: 27 Comm: kworker/u10:0 Not tainted syzkaller #0 PREEMPT(full) 
[   85.645569][   T27] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   85.645578][   T27] Workqueue: writeback wb_workfn (flush-7:2)
[   85.645604][   T27] Call Trace:
[   85.645610][   T27]  <TASK>
[   85.645616][   T27]  dump_stack_lvl+0x189/0x250
[   85.645637][   T27]  ? __pfx_dump_stack_lvl+0x10/0x10
[   85.645651][   T27]  ? __pfx_queue_work_on+0x10/0x10
[   85.645662][   T27]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   85.645678][   T27]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   85.645701][   T27]  f2fs_handle_critical_error+0x37c/0x540
[   85.645717][   T27]  f2fs_write_end_io+0x886/0xb60
[   85.645735][   T27]  __submit_merged_bio+0x27a/0x6a0
[   85.645746][   T27]  __submit_merged_write_cond+0x255/0x530
[   85.645762][   T27]  f2fs_write_data_pages+0x261d/0x3000
[   85.645788][   T27]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   85.645803][   T27]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[   85.645831][   T27]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[   85.645845][   T27]  ? trace_f2fs_writepages+0x7f/0x200
[   85.645854][   T27]  ? f2fs_write_node_pages+0x478/0x6e0
[   85.645868][   T27]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[   85.645882][   T27]  ? __lock_acquire+0xab9/0xd20
[   85.645897][   T27]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   85.645906][   T27]  do_writepages+0x32e/0x550
[   85.645917][   T27]  ? reacquire_held_locks+0x127/0x1d0
[   85.645924][   T27]  ? writeback_sb_inodes+0x384/0x1010
[   85.645936][   T27]  __writeback_single_inode+0x145/0xff0
[   85.645945][   T27]  ? do_raw_spin_unlock+0x4d/0x240
[   85.645955][   T27]  writeback_sb_inodes+0x6c7/0x1010
[   85.645977][   T27]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   85.646006][   T27]  ? rcu_is_watching+0x15/0xb0
[   85.646018][   T27]  wb_writeback+0x43b/0xaf0
[   85.646031][   T27]  ? queue_io+0x301/0x590
[   85.646040][   T27]  ? __pfx_wb_writeback+0x10/0x10
[   85.646052][   T27]  ? _raw_spin_unlock_irq+0x23/0x50
[   85.646063][   T27]  wb_workfn+0x409/0xef0
[   85.646082][   T27]  ? __pfx_wb_workfn+0x10/0x10
[   85.646101][   T27]  ? __lock_acquire+0xab9/0xd20
[   85.646117][   T27]  ? process_scheduled_works+0x9ef/0x17b0
[   85.646132][   T27]  ? _raw_spin_unlock_irq+0x23/0x50
[   85.646139][   T27]  ? process_scheduled_works+0x9ef/0x17b0
[   85.646149][   T27]  ? process_scheduled_works+0x9ef/0x17b0
[   85.646161][   T27]  process_scheduled_works+0xae1/0x17b0
[   85.646187][   T27]  ? __pfx_process_scheduled_works+0x10/0x10
[   85.646207][   T27]  worker_thread+0x8a0/0xda0
[   85.646232][   T27]  kthread+0x711/0x8a0
[   85.646243][   T27]  ? __pfx_worker_thread+0x10/0x10
[   85.646254][   T27]  ? __pfx_kthread+0x10/0x10
[   85.646264][   T27]  ? _raw_spin_unlock_irq+0x23/0x50
[   85.646276][   T27]  ? lockdep_hardirqs_on+0x9c/0x150
[   85.646287][   T27]  ? __pfx_kthread+0x10/0x10
[   85.646297][   T27]  ret_from_fork+0x4bc/0x870
[   85.646316][   T27]  ? __pfx_ret_from_fork+0x10/0x10
[   85.646363][   T27]  ? __switch_to_asm+0x39/0x70
[   85.646374][   T27]  ? __switch_to_asm+0x33/0x70
[   85.646382][   T27]  ? __pfx_kthread+0x10/0x10
[   85.646391][   T27]  ret_from_fork_asm+0x1a/0x30
[   85.646410][   T27]  </TASK>
[   85.646413][   T27] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   85.786411][ T5847] visor 1-1:1.0: Handspring Visor / Palm OS converter detected
[   85.807666][ T5847] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[   85.813554][ T5847] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[   85.881656][ T6346] loop1: detected capacity change from 0 to 2048
[   85.989517][    T9] usb 1-1: USB disconnect, device number 4
[   85.995081][    T9] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[   86.003171][    T9] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[   86.009264][    T9] visor 1-1:1.0: device disconnected
[   86.054134][ T6348] comedi comedi3: pcl812: I/O port conflict (0xfffffffffffffff7,16)
[   86.211576][ T5847] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   86.381525][ T5847] usb 2-1: Using ep0 maxpacket: 16
[   86.391293][ T5847] usb 2-1: config 0 has an invalid interface number: 191 but max is 0
[   86.395205][ T5847] usb 2-1: config 0 has no interface number 0
[   86.399748][ T5847] usb 2-1: config 0 interface 191 has no altsetting 0
[   86.407094][ T5847] usb 2-1: New USB device found, idVendor=046d, idProduct=c281, bcdDevice=c2.08
[   86.411109][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.415523][ T5847] usb 2-1: Product: syz
[   86.420931][ T5847] usb 2-1: Manufacturer: syz
[   86.424457][ T5847] usb 2-1: SerialNumber: syz
[   86.438230][ T5847] usb 2-1: config 0 descriptor??
[   86.546559][ T6369] netlink: 12 bytes leftover after parsing attributes in process `syz.2.128'.
[   86.551076][ T6369] loop2: detected capacity change from 0 to 64
[   86.649090][ T5847] usb 2-1: USB disconnect, device number 4
[   86.667132][ T6371] loop0: detected capacity change from 0 to 8
[   86.686463][ T6371] SQUASHFS error: lzo decompression failed, data probably corrupt
[   86.701046][ T6371] SQUASHFS error: Failed to read block 0x91: -5
[   86.705190][ T6371] SQUASHFS error: Unable to read metadata cache entry [8f]
[   86.707955][ T6371] SQUASHFS error: Unable to read inode 0x11f
[   87.028938][ T6375] loop2: detected capacity change from 0 to 2048
[   87.041295][ T6375] UDF-fs: warning (device loop2): udf_fill_super: No fileset found
[   87.171041][ T6375] loop2: detected capacity change from 0 to 1024
[   87.303339][ T6375] hfsplus: xattr search failed
[   87.571051][ T6380] loop2: detected capacity change from 0 to 1024
[   87.596462][ T6377] loop1: detected capacity change from 0 to 32768
[   87.613100][ T6377] cgroup: Unknown subsys name 'pcr'
[   87.616791][ T6380] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   88.335485][ T6380] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.704986][ T6387] loop1: detected capacity change from 0 to 32768
[   89.354565][ T6396] loop1: detected capacity change from 0 to 1024
[   89.358511][ T6396] EXT4-fs: Ignoring removed orlov option
[   89.360490][ T6396] EXT4-fs: Ignoring removed nomblk_io_submit option
[   89.423248][ T6398] 8021q: VLANs not supported on gre0
[   89.490155][ T6400] loop2: detected capacity change from 0 to 512
[   89.502727][ T6400] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[   89.510325][ T6400] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[   89.520609][ T6400] EXT4-fs (loop2): 1 truncate cleaned up
[   89.524245][ T6400] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   89.541255][ T6400] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   89.653040][ T6398] loop1: detected capacity change from 0 to 40427
[   89.790128][ T6398] loop1: detected capacity change from 0 to 4096
[   90.063795][ T5913] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   90.112088][ T6410] loop1: detected capacity change from 0 to 32768
[   90.129352][ T5846] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.231507][ T5913] usb 1-1: Using ep0 maxpacket: 8
[   90.247851][ T5913] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   90.251946][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   90.255618][ T5913] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[   90.277377][ T5913] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   90.283522][ T5913] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b
[   90.286797][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   90.289712][ T5913] usb 1-1: SerialNumber: syz
[   90.299948][ T5913] usb 1-1: config 0 descriptor??
[   90.303968][ T5913] hso 1-1:0.0: Can't find BULK OUT endpoint
[   90.484022][ T6426] loop1: detected capacity change from 0 to 2048
[   90.493959][ T6428] 8021q: VLANs not supported on gre0
[   90.576327][    T9] usb 1-1: USB disconnect, device number 5
[   91.011620][ T6428] loop2: detected capacity change from 0 to 40427
[   91.025345][ T6428] F2FS-fs (loop2): Image doesn't support compression
[   91.028059][ T6428] F2FS-fs (loop2): build fault injection rate: 690
[   91.030685][ T6428] F2FS-fs (loop2): build fault injection type: 0x35f7
[   91.044273][ T6428] F2FS-fs (loop2): invalid crc value
[   91.195494][ T6428] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   91.200497][ T6428] F2FS-fs (loop2): Start checkpoint disabled!
[   91.205538][ T6428] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0
[   91.210036][ T6428] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   91.226285][ T6428] syz.2.148: attempt to access beyond end of device
[   91.226285][ T6428] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   91.548213][ T6428] F2FS-fs (loop2): access invalid blkaddr:4043309056
[   91.550669][ T6428] CPU: 1 UID: 0 PID: 6428 Comm: syz.2.148 Not tainted syzkaller #0 PREEMPT(full) 
[   91.550681][ T6428] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   91.550687][ T6428] Call Trace:
[   91.550692][ T6428]  <TASK>
[   91.550696][ T6428]  dump_stack_lvl+0x189/0x250
[   91.550728][ T6428]  ? __pfx_dump_stack_lvl+0x10/0x10
[   91.550738][ T6428]  ? __pfx_f2fs_get_dnode_of_data+0x10/0x10
[   91.550757][ T6428]  __f2fs_is_valid_blkaddr+0xe52/0x14f0
[   91.550770][ T6428]  f2fs_map_blocks+0xd84/0x4130
[   91.550829][ T6428]  ? __pfx_f2fs_map_blocks+0x10/0x10
[   91.550838][ T6428]  ? xa_load+0x60/0x210
[   91.550856][ T6428]  ? xa_load+0x1ea/0x210
[   91.550868][ T6428]  f2fs_mpage_readpages+0xc1b/0x1ba0
[   91.550889][ T6428]  ? __pfx_f2fs_mpage_readpages+0x10/0x10
[   91.550901][ T6428]  ? __folio_batch_add_and_move+0x192/0xc60
[   91.550920][ T6428]  ? f2fs_readahead+0x177/0x330
[   91.550930][ T6428]  read_pages+0x17a/0x580
[   91.550942][ T6428]  ? __pfx_read_pages+0x10/0x10
[   91.550968][ T6428]  ? filemap_add_folio+0x35f/0x540
[   91.550981][ T6428]  page_cache_ra_unbounded+0x75e/0x9a0
[   91.550999][ T6428]  f2fs_readdir+0x49b/0xa60
[   91.551020][ T6428]  ? __pfx_f2fs_readdir+0x10/0x10
[   91.551037][ T6428]  ? down_read_killable+0x1d1/0x350
[   91.551050][ T6428]  iterate_dir+0x399/0x570
[   91.551061][ T6428]  __se_sys_getdents64+0xe4/0x260
[   91.551070][ T6428]  ? __pfx___se_sys_getdents64+0x10/0x10
[   91.551077][ T6428]  ? __pfx_filldir64+0x10/0x10
[   91.551089][ T6428]  ? do_syscall_64+0xbe/0xfa0
[   91.551100][ T6428]  do_syscall_64+0xfa/0xfa0
[   91.551109][ T6428]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.551116][ T6428]  ? asm_sysvec_call_function_single+0x1a/0x20
[   91.551126][ T6428]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.551133][ T6428] RIP: 0033:0x7f0e2438ec29
[   91.551141][ T6428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   91.551148][ T6428] RSP: 002b:00007f0e25159038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[   91.551158][ T6428] RAX: ffffffffffffffda RBX: 00007f0e245d5fa0 RCX: 00007f0e2438ec29
[   91.551163][ T6428] RDX: 0000000000001000 RSI: 0000200000000f80 RDI: 000000000000000a
[   91.551168][ T6428] RBP: 00007f0e24411e41 R08: 0000000000000000 R09: 0000000000000000
[   91.551172][ T6428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   91.551176][ T6428] R13: 00007f0e245d6038 R14: 00007f0e245d5fa0 R15: 00007ffccf56f298
[   91.551190][ T6428]  </TASK>
[   91.654840][ T6428] syz.2.148: attempt to access beyond end of device
[   91.654840][ T6428] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[   91.659761][ T6428] syz.2.148: attempt to access beyond end of device
[   91.659761][ T6428] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427
[   91.748001][   T28] kworker/u9:1: attempt to access beyond end of device
[   91.748001][   T28] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[   91.752806][ T6443] loop0: detected capacity change from 0 to 64
[   91.754723][   T28] CPU: 0 UID: 0 PID: 28 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) 
[   91.754739][   T28] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   91.754747][   T28] Workqueue: writeback wb_workfn (flush-7:2)
[   91.754815][   T28] Call Trace:
[   91.754821][   T28]  <TASK>
[   91.754828][   T28]  dump_stack_lvl+0x189/0x250
[   91.754849][   T28]  ? __pfx_dump_stack_lvl+0x10/0x10
[   91.754864][   T28]  ? __pfx_queue_work_on+0x10/0x10
[   91.754875][   T28]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   91.754891][   T28]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   91.754916][   T28]  f2fs_handle_critical_error+0x37c/0x540
[   91.754937][   T28]  f2fs_write_end_io+0x886/0xb60
[   91.754968][   T28]  __submit_merged_bio+0x27a/0x6a0
[   91.754985][   T28]  __submit_merged_write_cond+0x255/0x530
[   91.755007][   T28]  f2fs_write_data_pages+0x261d/0x3000
[   91.755045][   T28]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   91.755069][   T28]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[   91.755112][   T28]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[   91.755133][   T28]  ? trace_f2fs_writepages+0x7f/0x200
[   91.755145][   T28]  ? f2fs_write_node_pages+0x478/0x6e0
[   91.755166][   T28]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[   91.755185][   T28]  ? __lock_acquire+0xab9/0xd20
[   91.755204][   T28]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   91.755218][   T28]  do_writepages+0x32e/0x550
[   91.755237][   T28]  ? reacquire_held_locks+0x127/0x1d0
[   91.755247][   T28]  ? writeback_sb_inodes+0x384/0x1010
[   91.755269][   T28]  __writeback_single_inode+0x145/0xff0
[   91.755284][   T28]  ? do_raw_spin_unlock+0x4d/0x240
[   91.755302][   T28]  writeback_sb_inodes+0x6c7/0x1010
[   91.755339][   T28]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   91.755385][   T28]  ? rcu_is_watching+0x15/0xb0
[   91.755407][   T28]  wb_writeback+0x43b/0xaf0
[   91.755429][   T28]  ? queue_io+0x301/0x590
[   91.755446][   T28]  ? __pfx_wb_writeback+0x10/0x10
[   91.755468][   T28]  ? _raw_spin_unlock_irq+0x23/0x50
[   91.755487][   T28]  wb_workfn+0x409/0xef0
[   91.755521][   T28]  ? __pfx_wb_workfn+0x10/0x10
[   91.755544][   T28]  ? __lock_acquire+0xab9/0xd20
[   91.755570][   T28]  ? process_scheduled_works+0x9ef/0x17b0
[   91.755594][   T28]  ? _raw_spin_unlock_irq+0x23/0x50
[   91.755607][   T28]  ? process_scheduled_works+0x9ef/0x17b0
[   91.755647][   T28]  ? process_scheduled_works+0x9ef/0x17b0
[   91.755666][   T28]  process_scheduled_works+0xae1/0x17b0
[   91.755712][   T28]  ? __pfx_process_scheduled_works+0x10/0x10
[   91.755747][   T28]  worker_thread+0x8a0/0xda0
[   91.755795][   T28]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   91.755823][   T28]  ? __kthread_parkme+0x7b/0x200
[   91.755846][   T28]  kthread+0x711/0x8a0
[   91.755864][   T28]  ? __pfx_worker_thread+0x10/0x10
[   91.755882][   T28]  ? __pfx_kthread+0x10/0x10
[   91.755898][   T28]  ? _raw_spin_unlock_irq+0x23/0x50
[   91.755912][   T28]  ? lockdep_hardirqs_on+0x9c/0x150
[   91.755925][   T28]  ? __pfx_kthread+0x10/0x10
[   91.755940][   T28]  ret_from_fork+0x4bc/0x870
[   91.755961][   T28]  ? __pfx_ret_from_fork+0x10/0x10
[   91.755986][   T28]  ? __switch_to_asm+0x39/0x70
[   91.756001][   T28]  ? __switch_to_asm+0x33/0x70
[   91.756015][   T28]  ? __pfx_kthread+0x10/0x10
[   91.756030][   T28]  ret_from_fork_asm+0x1a/0x30
[   91.756062][   T28]  </TASK>
[   91.757293][   T28] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   92.073258][ T6448] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   92.833111][    T9] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[   92.854914][ T6447] cgroup: fork rejected by pids controller in /syz1
[   92.960585][ T6518] loop1: detected capacity change from 0 to 128
[   92.983611][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   92.987617][    T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   93.009210][    T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   93.012966][ T5847] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   93.016132][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.019241][    T9] usb 3-1: Product: syz
[   93.020824][    T9] usb 3-1: Manufacturer: syz
[   93.022546][    T9] usb 3-1: SerialNumber: syz
[   93.173947][ T5847] usb 1-1: descriptor type invalid, skip
[   93.177199][ T5847] usb 1-1: config 0 has no interfaces?
[   93.181010][ T5847] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=df.40
[   93.183922][ T5847] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[   93.186955][ T5847] usb 1-1: Product: syz
[   93.188599][ T5847] usb 1-1: SerialNumber: syz
[   93.195089][ T5847] usb 1-1: config 0 descriptor??
[   93.230583][ T6486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.161'.
[   93.237348][ T6486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.161'.
[   93.247881][    T9] usb 3-1: 0:2 : does not exist
[   93.262255][    T9] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[   93.286158][    T9] usb 3-1: USB disconnect, device number 4
[   93.315375][ T5850] udevd[5850]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   93.534633][ T6505] loop0: detected capacity change from 0 to 32768
[   93.564260][ T6505] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[   93.572830][ T6505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   93.577294][ T6505] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   93.585065][ T6505] cgroup: none used incorrectly
[   93.594856][   T33] audit: type=1800 audit(1759232295.676:17): pid=6505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.165" name="bus" dev="loop0" ino=17058 res=0 errno=0
[   93.603403][   T33] audit: type=1800 audit(1759232295.686:18): pid=6505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.165" name="bus" dev="loop0" ino=17058 res=0 errno=0
[   93.619064][ T2203] usb 1-1: USB disconnect, device number 6
[   93.795097][ T6526] netlink: 'syz.2.169': attribute type 1 has an invalid length.
[   93.797555][ T6526] netlink: 'syz.2.169': attribute type 1 has an invalid length.
[   93.800407][ T6526] netlink: 'syz.2.169': attribute type 1 has an invalid length.
[   93.828409][ T6526] loop2: detected capacity change from 0 to 4096
[   94.121186][ T6537] loop1: detected capacity change from 0 to 2048
[   94.140285][ T6537] loop1: detected capacity change from 0 to 1024
[   94.152245][ T2203] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   94.222866][ T5857] ocfs2: Unmounting device (7,0) on (node local)
[   94.311637][ T2203] usb 3-1: Using ep0 maxpacket: 8
[   94.314925][ T2203] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[   94.317772][ T2203] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[   94.321187][ T2203] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   94.334753][ T2203] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.591671][ T6549] loop0: detected capacity change from 0 to 40427
[   94.594976][ T6549] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[   94.597344][ T6549] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   94.600930][ T6549] F2FS-fs (loop0): invalid crc value
[   94.607787][ T6557] loop1: detected capacity change from 0 to 2048
[   94.633062][ T6549] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   94.637707][ T6549] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   94.639925][ T6549] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   94.858320][ T6567] loop1: detected capacity change from 0 to 2048
[   94.919734][ T6567] loop1: detected capacity change from 0 to 1024
[   96.415064][ T6575] loop1: detected capacity change from 0 to 32768
[   96.974169][ T5909] usb 3-1: USB disconnect, device number 5
[   97.077249][ T6592] loop2: detected capacity change from 0 to 2048
[   97.110444][ T6592] UDF-fs: warning (device loop2): udf_fill_super: No fileset found
[   97.140996][ T6592] loop2: detected capacity change from 0 to 1024
[   97.155286][ T6592] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled
[   97.189104][ T6592] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   97.201084][ T6592] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.189: missing EA_INODE flag
[   97.209492][ T6592] EXT4-fs (loop2): Remounting filesystem read-only
[   97.217353][   T33] audit: type=1800 audit(1759234877.295:19): pid=6592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.189" name="file3" dev="loop2" ino=16 res=0 errno=0
[   97.263754][ T5846] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.769400][ T6604] loop0: detected capacity change from 0 to 32768
[   97.802186][ T6604] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[   97.876613][   T33] audit: type=1800 audit(1759234877.925:20): pid=6604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.192" name="bus" dev="loop0" ino=17058 res=0 errno=0
[   97.903715][   T33] audit: type=1800 audit(1759234877.925:21): pid=6604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.192" name="bus" dev="loop0" ino=17058 res=0 errno=0
[   98.087949][ T5857] ocfs2: Unmounting device (7,0) on (node local)
[   98.716251][ T6617] loop0: detected capacity change from 0 to 2048
[   98.746484][ T6617] UDF-fs: warning (device loop0): udf_fill_super: No fileset found
[   98.771074][ T5913] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   98.801252][ T6617] loop0: detected capacity change from 0 to 1024
[   98.814305][ T6617] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled
[   98.863499][ T6617] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   98.890437][ T6617] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.196: missing EA_INODE flag
[   98.908831][ T6617] EXT4-fs (loop0): Remounting filesystem read-only
[   98.921279][ T5913] usb 3-1: Using ep0 maxpacket: 8
[   98.923597][   T33] audit: type=1800 audit(1759234878.995:22): pid=6617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.196" name="file3" dev="loop0" ino=16 res=0 errno=0
[   98.938791][ T5913] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[   98.941986][ T5913] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[   98.948867][ T5913] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   98.955211][ T5857] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.956820][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.193877][ T6584] loop1: detected capacity change from 0 to 262144
[   99.374363][ T6636] loop0: detected capacity change from 0 to 32768
[   99.404129][ T6636] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   99.421561][ T6636] input: syz1 as /devices/virtual/input/input5
[   99.505671][ T5857] ocfs2: Unmounting device (7,0) on (node local)
[   99.629597][ T6644] loop1: detected capacity change from 0 to 32768
[   99.636794][ T6644] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.202 (6644)
[   99.645990][ T6644] BTRFS error: failed to open device for path /dev/loop1 with flags 0x23: -13
[   99.682729][ T6648] loop0: detected capacity change from 0 to 1024
[   99.687950][ T6648] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled
[   99.720096][ T6648] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   99.736138][ T6648] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.203: missing EA_INODE flag
[   99.743223][ T6648] EXT4-fs (loop0): Remounting filesystem read-only
[   99.752290][   T33] audit: type=1800 audit(1759234879.825:23): pid=6648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.203" name="file3" dev="loop0" ino=16 res=0 errno=0
[   99.778270][ T5857] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.887481][ T6653] loop0: detected capacity change from 0 to 2048
[   99.931105][ T6653] UDF-fs: warning (device loop0): udf_fill_super: No fileset found
[  100.030766][ T6657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.205'.
[  100.048806][ T6657] netlink: 16 bytes leftover after parsing attributes in process `syz.1.205'.
[  100.152423][ T6664] loop0: detected capacity change from 0 to 128
[  100.155818][ T6664] ext4: Unknown parameter 'euid>00000000000980643439'
[  100.434076][ T6667] loop0: detected capacity change from 0 to 256
[  100.473239][ T6667] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  100.906221][ T6671] netlink: 'syz.1.208': attribute type 1 has an invalid length.
[  100.909366][ T6671] netlink: 'syz.1.208': attribute type 1 has an invalid length.
[  100.947674][ T6671] loop1: detected capacity change from 0 to 4096
[  101.476346][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.559566][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.580153][    T9] usb 3-1: USB disconnect, device number 6
[  101.662983][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.758873][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.935581][ T6674] loop2: detected capacity change from 0 to 256
[  101.956458][ T6674] exFAT-fs (loop2): invalid fs_name
[  101.963431][ T6674] exFAT-fs (loop2): failed to read boot sector
[  101.965203][ T6676] netlink: 16 bytes leftover after parsing attributes in process `syz.1.213'.
[  101.965916][ T6674] exFAT-fs (loop2): failed to recognize exfat type
[  101.969123][ T6676] netlink: 32 bytes leftover after parsing attributes in process `syz.1.213'.
[  101.980275][ T6676] netlink: 288 bytes leftover after parsing attributes in process `syz.1.213'.
[  101.985053][ T6676] netlink: 32 bytes leftover after parsing attributes in process `syz.1.213'.
[  101.995754][   T12] bridge_slave_1: left allmulticast mode
[  101.997889][   T12] bridge_slave_1: left promiscuous mode
[  102.000404][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.297145][   T56] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  102.300743][   T56] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  102.304070][   T56] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  102.306984][   T56] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  102.310049][   T56] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  102.431765][   T12] bridge_slave_0: left allmulticast mode
[  102.434084][   T12] bridge_slave_0: left promiscuous mode
[  102.436490][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.847154][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  102.853981][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  102.864231][   T12] bond0 (unregistering): (slave macvlan0): Releasing backup interface
[  102.883483][   T12] bond0 (unregistering): Released all slaves
[  103.089917][ T6696] net veth1_virt_wifi : renamed from virt_wifi0
[  103.189797][ T6690] loop2: detected capacity change from 0 to 32768
[  103.247076][ T6690] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  103.264322][ T6690] input: syz1 as /devices/virtual/input/input6
[  103.321724][ T6690] OCFS2: ERROR (device loop2): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list
[  103.339334][ T6690] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  103.346763][ T6690] OCFS2: File system is now read-only.
[  103.349732][ T6690] (syz.2.216,6690,0):ocfs2_find_leaf:1948 ERROR: status = -30
[  103.349809][   T12] hsr_slave_0: left promiscuous mode
[  103.354843][ T6690] (syz.2.216,6690,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30
[  103.354917][   T12] hsr_slave_1: left promiscuous mode
[  103.359952][ T6690] (syz.2.216,6690,0):ocfs2_get_clusters:634 ERROR: status = -30
[  103.362855][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  103.362883][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  103.368772][ T6690] (syz.2.216,6690,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30
[  103.369472][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  103.374211][ T6690] (syz.2.216,6690,0):ocfs2_read_virt_blocks:1005 ERROR: status = -30
[  103.376314][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  103.376922][ T6690] (syz.2.216,6690,0):ocfs2_read_dir_block:511 ERROR: status = -30
[  103.406321][   T12] veth1_macvtap: left promiscuous mode
[  103.408654][   T12] veth0_macvtap: left promiscuous mode
[  103.421643][   T12] veth1_vlan: left promiscuous mode
[  103.423531][   T12] veth0_vlan: left promiscuous mode
[  103.429530][ T6708] loop1: detected capacity change from 0 to 32768
[  103.434672][ T6708] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.219 (6708)
[  103.439061][ T6708] BTRFS error: failed to open device for path /dev/loop1 with flags 0x23: -13
[  103.473391][ T5846] ocfs2: Unmounting device (7,2) on (node local)
[  103.832848][ T6720] loop2: detected capacity change from 0 to 32768
[  103.864795][ T6720] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  103.897696][ T6720] XFS (loop2): Ending clean mount
[  104.009027][   T12] team0 (unregistering): Port device team_slave_1 removed
[  104.035858][   T12] team0 (unregistering): Port device team_slave_0 removed
[  104.316706][ T6720] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  104.328920][ T6682] chnl_net:caif_netlink_parms(): no params data found
[  104.350485][   T56] Bluetooth: hci2: command tx timeout
[  104.366243][ T5846] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  104.537376][ T6734] loop1: detected capacity change from 0 to 1024
[  104.660652][ T6682] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.670548][ T6682] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.673510][ T6682] bridge_slave_0: entered allmulticast mode
[  104.677630][ T6682] bridge_slave_0: entered promiscuous mode
[  104.683254][ T6682] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.686432][ T6682] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.696770][ T6682] bridge_slave_1: entered allmulticast mode
[  104.702153][ T6682] bridge_slave_1: entered promiscuous mode
[  104.826903][ T6682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  104.842164][ T6682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  104.935133][ T6682] team0: Port device team_slave_0 added
[  104.952007][ T6682] team0: Port device team_slave_1 added
[  105.003271][ T6682] batman_adv: batadv0: Adding interface: batadv_slave_0
[  105.005868][ T6682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  105.024368][ T6682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  105.041190][ T6682] batman_adv: batadv0: Adding interface: batadv_slave_1
[  105.043427][ T6682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  105.060561][ T6682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  105.116229][ T6682] hsr_slave_0: entered promiscuous mode
[  105.118630][ T6682] hsr_slave_1: entered promiscuous mode
[  105.122052][ T6682] debugfs: 'hsr0' already exists in 'hsr'
[  105.123735][ T6682] Cannot create hsr debugfs directory
[  105.327426][ T6755] loop2: detected capacity change from 0 to 32768
[  105.357241][ T6755] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  105.374933][ T6755] input: syz1 as /devices/virtual/input/input7
[  105.376140][ T6682] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  105.386091][ T6755] OCFS2: ERROR (device loop2): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list
[  105.393851][ T6755] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  105.397611][ T6755] OCFS2: File system is now read-only.
[  105.399764][ T6755] (syz.2.225,6755,1):ocfs2_find_leaf:1948 ERROR: status = -30
[  105.409221][ T6755] (syz.2.225,6755,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30
[  105.420415][ T6755] (syz.2.225,6755,0):ocfs2_get_clusters:634 ERROR: status = -30
[  105.422962][ T6755] (syz.2.225,6755,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30
[  105.442520][ T6755] (syz.2.225,6755,0):ocfs2_read_virt_blocks:1005 ERROR: status = -30
[  105.445241][ T6755] (syz.2.225,6755,0):ocfs2_read_dir_block:511 ERROR: status = -30
[  105.458967][ T6682] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  105.464726][ T6682] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  105.469745][ T6682] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  105.494964][ T6757] loop1: detected capacity change from 0 to 32768
[  105.523396][ T5846] ocfs2: Unmounting device (7,2) on (node local)
[  105.642345][ T6682] 8021q: adding VLAN 0 to HW filter on device bond0
[  105.663043][ T6682] 8021q: adding VLAN 0 to HW filter on device team0
[  105.679151][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.681516][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  105.686720][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.688968][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  105.772236][ T6757] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  105.869588][ T6682] 8021q: adding VLAN 0 to HW filter on device batadv0
[  105.911504][ T6795] 8021q: VLANs not supported on gre0
[  105.944874][ T6682] veth0_vlan: entered promiscuous mode
[  105.954589][ T6682] veth1_vlan: entered promiscuous mode
[  105.985192][ T6682] veth0_macvtap: entered promiscuous mode
[  105.989564][ T6682] veth1_macvtap: entered promiscuous mode
[  106.009307][ T6682] batman_adv: batadv0: Interface activated: batadv_slave_0
[  106.024008][ T6682] batman_adv: batadv0: Interface activated: batadv_slave_1
[  106.043418][ T5875] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.046193][ T5875] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.053860][ T5875] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.056780][ T5875] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.166204][ T6795] loop2: detected capacity change from 0 to 40427
[  106.178454][ T6795] F2FS-fs (loop2): Image doesn't support compression
[  106.181527][ T6795] F2FS-fs (loop2): build fault injection rate: 690
[  106.183940][ T6795] F2FS-fs (loop2): build fault injection type: 0x35f7
[  106.187237][ T6795] F2FS-fs (loop2): invalid crc value
[  106.196544][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.199561][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.243753][ T6795] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  106.247774][ T6795] F2FS-fs (loop2): Start checkpoint disabled!
[  106.253729][ T6795] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0
[  106.256733][ T6795] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  106.268797][ T6795] syz.2.229: attempt to access beyond end of device
[  106.268797][ T6795] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  106.274912][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.277925][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.278662][ T6793] loop1: detected capacity change from 0 to 32768
[  106.291116][ T6795] F2FS-fs (loop2): access invalid blkaddr:4043309056
[  106.293828][ T6795] CPU: 1 UID: 0 PID: 6795 Comm: syz.2.229 Not tainted syzkaller #0 PREEMPT(full) 
[  106.293847][ T6795] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  106.293856][ T6795] Call Trace:
[  106.293863][ T6795]  <TASK>
[  106.293870][ T6795]  dump_stack_lvl+0x189/0x250
[  106.293893][ T6795]  ? __pfx_dump_stack_lvl+0x10/0x10
[  106.293909][ T6795]  ? __pfx_f2fs_get_dnode_of_data+0x10/0x10
[  106.293936][ T6795]  ? kasan_save_track+0x3e/0x80
[  106.293950][ T6795]  ? __kasan_slab_alloc+0x6c/0x80
[  106.293969][ T6795]  __f2fs_is_valid_blkaddr+0xe52/0x14f0
[  106.293992][ T6795]  f2fs_map_blocks+0xd84/0x4130
[  106.294039][ T6795]  ? __pfx_f2fs_map_blocks+0x10/0x10
[  106.294055][ T6795]  ? xa_load+0x60/0x210
[  106.294084][ T6795]  ? xa_load+0x1ea/0x210
[  106.294106][ T6795]  f2fs_mpage_readpages+0xc1b/0x1ba0
[  106.294142][ T6795]  ? __pfx_f2fs_mpage_readpages+0x10/0x10
[  106.294164][ T6795]  ? __folio_batch_add_and_move+0x192/0xc60
[  106.294197][ T6795]  ? f2fs_readahead+0x177/0x330
[  106.294215][ T6795]  read_pages+0x17a/0x580
[  106.294235][ T6795]  ? __pfx_read_pages+0x10/0x10
[  106.294257][ T6795]  ? filemap_add_folio+0x35f/0x540
[  106.294278][ T6795]  page_cache_ra_unbounded+0x75e/0x9a0
[  106.294312][ T6795]  f2fs_readdir+0x49b/0xa60
[  106.294347][ T6795]  ? __pfx_f2fs_readdir+0x10/0x10
[  106.294376][ T6795]  ? down_read_killable+0x1d1/0x350
[  106.294400][ T6795]  iterate_dir+0x399/0x570
[  106.294445][ T6795]  __se_sys_getdents64+0xe4/0x260
[  106.294464][ T6795]  ? __pfx___se_sys_getdents64+0x10/0x10
[  106.294484][ T6795]  ? __pfx_filldir64+0x10/0x10
[  106.294506][ T6795]  ? do_syscall_64+0xbe/0xfa0
[  106.294526][ T6795]  do_syscall_64+0xfa/0xfa0
[  106.294542][ T6795]  ? lockdep_hardirqs_on+0x9c/0x150
[  106.294558][ T6795]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.294571][ T6795]  ? exc_page_fault+0xab/0x100
[  106.294589][ T6795]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.294602][ T6795] RIP: 0033:0x7f0e2438ec29
[  106.294615][ T6795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  106.294627][ T6795] RSP: 002b:00007f0e25159038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[  106.294642][ T6795] RAX: ffffffffffffffda RBX: 00007f0e245d5fa0 RCX: 00007f0e2438ec29
[  106.294652][ T6795] RDX: 0000000000001000 RSI: 0000200000000f80 RDI: 0000000000000008
[  106.294661][ T6795] RBP: 00007f0e24411e41 R08: 0000000000000000 R09: 0000000000000000
[  106.294669][ T6795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  106.294677][ T6795] R13: 00007f0e245d6038 R14: 00007f0e245d5fa0 R15: 00007ffccf56f298
[  106.294702][ T6795]  </TASK>
[  106.299581][ T6795] syz.2.229: attempt to access beyond end of device
[  106.299581][ T6795] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  106.411364][ T6795] syz.2.229: attempt to access beyond end of device
[  106.411364][ T6795] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  106.430738][   T56] Bluetooth: hci2: command tx timeout
[  106.448183][  T146] kworker/u9:3: attempt to access beyond end of device
[  106.448183][  T146] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  106.460282][  T146] CPU: 0 UID: 0 PID: 146 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) 
[  106.460295][  T146] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  106.460300][  T146] Workqueue: writeback wb_workfn (flush-7:2)
[  106.460319][  T146] Call Trace:
[  106.460323][  T146]  <TASK>
[  106.460327][  T146]  dump_stack_lvl+0x189/0x250
[  106.460339][  T146]  ? __pfx_dump_stack_lvl+0x10/0x10
[  106.460348][  T146]  ? __pfx_queue_work_on+0x10/0x10
[  106.460354][  T146]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  106.460364][  T146]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  106.460377][  T146]  f2fs_handle_critical_error+0x37c/0x540
[  106.460389][  T146]  f2fs_write_end_io+0x886/0xb60
[  106.460442][  T146]  __submit_merged_bio+0x27a/0x6a0
[  106.460454][  T146]  __submit_merged_write_cond+0x255/0x530
[  106.460475][  T146]  f2fs_write_data_pages+0x261d/0x3000
[  106.460498][  T146]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  106.460513][  T146]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  106.460537][  T146]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  106.460551][  T146]  ? trace_f2fs_writepages+0x7f/0x200
[  106.460559][  T146]  ? f2fs_write_node_pages+0x478/0x6e0
[  106.460573][  T146]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  106.460586][  T146]  ? __lock_acquire+0xab9/0xd20
[  106.460600][  T146]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  106.460609][  T146]  do_writepages+0x32e/0x550
[  106.460619][  T146]  ? reacquire_held_locks+0x127/0x1d0
[  106.460626][  T146]  ? writeback_sb_inodes+0x384/0x1010
[  106.460638][  T146]  __writeback_single_inode+0x145/0xff0
[  106.460646][  T146]  ? do_raw_spin_unlock+0x4d/0x240
[  106.460657][  T146]  writeback_sb_inodes+0x6c7/0x1010
[  106.460676][  T146]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  106.460701][  T146]  ? rcu_is_watching+0x15/0xb0
[  106.460712][  T146]  wb_writeback+0x43b/0xaf0
[  106.460724][  T146]  ? queue_io+0x301/0x590
[  106.460733][  T146]  ? __pfx_wb_writeback+0x10/0x10
[  106.460744][  T146]  ? _raw_spin_unlock_irq+0x23/0x50
[  106.460754][  T146]  wb_workfn+0x409/0xef0
[  106.460772][  T146]  ? __pfx_wb_workfn+0x10/0x10
[  106.460785][  T146]  ? __lock_acquire+0xab9/0xd20
[  106.460799][  T146]  ? process_scheduled_works+0x9ef/0x17b0
[  106.460813][  T146]  ? _raw_spin_unlock_irq+0x23/0x50
[  106.460820][  T146]  ? process_scheduled_works+0x9ef/0x17b0
[  106.460830][  T146]  ? process_scheduled_works+0x9ef/0x17b0
[  106.460842][  T146]  process_scheduled_works+0xae1/0x17b0
[  106.460865][  T146]  ? __pfx_process_scheduled_works+0x10/0x10
[  106.460884][  T146]  worker_thread+0x8a0/0xda0
[  106.460906][  T146]  kthread+0x711/0x8a0
[  106.460916][  T146]  ? __pfx_worker_thread+0x10/0x10
[  106.460927][  T146]  ? __pfx_kthread+0x10/0x10
[  106.460936][  T146]  ? _raw_spin_unlock_irq+0x23/0x50
[  106.460943][  T146]  ? lockdep_hardirqs_on+0x9c/0x150
[  106.460951][  T146]  ? __pfx_kthread+0x10/0x10
[  106.460959][  T146]  ret_from_fork+0x4bc/0x870
[  106.460972][  T146]  ? __pfx_ret_from_fork+0x10/0x10
[  106.460986][  T146]  ? __switch_to_asm+0x39/0x70
[  106.460995][  T146]  ? __switch_to_asm+0x33/0x70
[  106.461003][  T146]  ? __pfx_kthread+0x10/0x10
[  106.461011][  T146]  ret_from_fork_asm+0x1a/0x30
[  106.461028][  T146]  </TASK>
[  106.461032][  T146] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  106.649663][ T6805] loop1: detected capacity change from 0 to 2048
[  106.653689][ T6805] udf: Unknown parameter '<X'y̗y>gZ󛏠@*Ǒbέ@ݭAwu@oO>to<}iЙq1>2::ַɾeytXx7ZQ~0_ԋEE3M(G}?{7}w?[7mk|/[bidQ_>7p8[:['
[  107.117480][ T6809] loop2: detected capacity change from 0 to 1024
[  107.123676][ T6809] EXT4-fs: Ignoring removed orlov option
[  107.146129][ T6809] EXT4-fs: Ignoring removed nomblk_io_submit option
[  107.182576][ T6809] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  107.204886][   T33] audit: type=1800 audit(1759234887.286:24): pid=6809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.230" name="file1" dev="loop2" ino=15 res=0 errno=0
[  107.503968][ T5846] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.832373][ T6814] loop3: detected capacity change from 0 to 32768
[  107.851690][ T6824] 8021q: VLANs not supported on gre0
[  107.860766][ T6814] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  107.887705][ T6814] XFS (loop3): Ending clean mount
[  107.899665][ T6814] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  107.936719][ T6682] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  108.211438][ T6824] loop2: detected capacity change from 0 to 40427
[  108.214683][ T6824] F2FS-fs (loop2): Image doesn't support compression
[  108.216783][ T6824] F2FS-fs (loop2): build fault injection rate: 690
[  108.218787][ T6824] F2FS-fs (loop2): build fault injection type: 0x35f7
[  108.222510][ T6824] F2FS-fs (loop2): invalid crc value
[  108.258735][ T6824] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  108.262991][ T6824] F2FS-fs (loop2): Start checkpoint disabled!
[  108.266078][ T6824] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0
[  108.269176][ T6824] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  108.281166][ T6824] F2FS-fs (loop2): access invalid blkaddr:4043309056
[  108.283462][ T6824] CPU: 0 UID: 0 PID: 6824 Comm: syz.2.235 Not tainted syzkaller #0 PREEMPT(full) 
[  108.283473][ T6824] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  108.283478][ T6824] Call Trace:
[  108.283482][ T6824]  <TASK>
[  108.283486][ T6824]  dump_stack_lvl+0x189/0x250
[  108.283502][ T6824]  ? __pfx_dump_stack_lvl+0x10/0x10
[  108.283512][ T6824]  ? __pfx_f2fs_get_dnode_of_data+0x10/0x10
[  108.283528][ T6824]  ? kasan_save_track+0x3e/0x80
[  108.283536][ T6824]  ? __kasan_slab_alloc+0x6c/0x80
[  108.283547][ T6824]  __f2fs_is_valid_blkaddr+0xe52/0x14f0
[  108.283560][ T6824]  f2fs_map_blocks+0xd84/0x4130
[  108.283587][ T6824]  ? __pfx_f2fs_map_blocks+0x10/0x10
[  108.283600][ T6824]  ? xa_load+0x60/0x210
[  108.283625][ T6824]  ? xa_load+0x1ea/0x210
[  108.283646][ T6824]  f2fs_mpage_readpages+0xc1b/0x1ba0
[  108.283680][ T6824]  ? __pfx_f2fs_mpage_readpages+0x10/0x10
[  108.283700][ T6824]  ? __folio_batch_add_and_move+0x192/0xc60
[  108.283734][ T6824]  ? f2fs_readahead+0x177/0x330
[  108.283752][ T6824]  read_pages+0x17a/0x580
[  108.283772][ T6824]  ? __pfx_read_pages+0x10/0x10
[  108.283793][ T6824]  ? filemap_add_folio+0x35f/0x540
[  108.283814][ T6824]  page_cache_ra_unbounded+0x75e/0x9a0
[  108.283842][ T6824]  f2fs_readdir+0x49b/0xa60
[  108.283863][ T6824]  ? __pfx_f2fs_readdir+0x10/0x10
[  108.283880][ T6824]  ? down_read_killable+0x1d1/0x350
[  108.283893][ T6824]  iterate_dir+0x399/0x570
[  108.283904][ T6824]  __se_sys_getdents64+0xe4/0x260
[  108.283913][ T6824]  ? __pfx___se_sys_getdents64+0x10/0x10
[  108.283921][ T6824]  ? __pfx_filldir64+0x10/0x10
[  108.283934][ T6824]  ? do_syscall_64+0xbe/0xfa0
[  108.283945][ T6824]  do_syscall_64+0xfa/0xfa0
[  108.283953][ T6824]  ? lockdep_hardirqs_on+0x9c/0x150
[  108.283962][ T6824]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.283969][ T6824]  ? exc_page_fault+0xab/0x100
[  108.283989][ T6824]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.283997][ T6824] RIP: 0033:0x7f0e2438ec29
[  108.284005][ T6824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  108.284011][ T6824] RSP: 002b:00007f0e25159038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[  108.284020][ T6824] RAX: ffffffffffffffda RBX: 00007f0e245d5fa0 RCX: 00007f0e2438ec29
[  108.284026][ T6824] RDX: 0000000000001000 RSI: 0000200000000f80 RDI: 0000000000000008
[  108.284031][ T6824] RBP: 00007f0e24411e41 R08: 0000000000000000 R09: 0000000000000000
[  108.284036][ T6824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  108.284041][ T6824] R13: 00007f0e245d6038 R14: 00007f0e245d5fa0 R15: 00007ffccf56f298
[  108.284055][ T6824]  </TASK>
[  108.284894][ T6824] syz.2.235: attempt to access beyond end of device
[  108.284894][ T6824] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  108.372953][ T6824] syz.2.235: attempt to access beyond end of device
[  108.372953][ T6824] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  108.394521][   T27] kworker/u10:0: attempt to access beyond end of device
[  108.394521][   T27] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  108.401042][ T5913] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[  108.405020][   T27] CPU: 1 UID: 0 PID: 27 Comm: kworker/u10:0 Not tainted syzkaller #0 PREEMPT(full) 
[  108.405038][   T27] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  108.405046][   T27] Workqueue: writeback wb_workfn (flush-7:2)
[  108.405073][   T27] Call Trace:
[  108.405080][   T27]  <TASK>
[  108.405086][   T27]  dump_stack_lvl+0x189/0x250
[  108.405107][   T27]  ? __pfx_dump_stack_lvl+0x10/0x10
[  108.405122][   T27]  ? __pfx_queue_work_on+0x10/0x10
[  108.405133][   T27]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  108.405149][   T27]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  108.405173][   T27]  f2fs_handle_critical_error+0x37c/0x540
[  108.405195][   T27]  f2fs_write_end_io+0x886/0xb60
[  108.405250][   T27]  __submit_merged_bio+0x27a/0x6a0
[  108.405271][   T27]  __submit_merged_write_cond+0x255/0x530
[  108.405299][   T27]  f2fs_write_data_pages+0x261d/0x3000
[  108.405342][   T27]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  108.405370][   T27]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  108.405417][   T27]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  108.405431][   T27]  ? look_up_lock_class+0x74/0x170
[  108.405454][   T27]  ? trace_f2fs_writepages+0x7f/0x200
[  108.405470][   T27]  ? f2fs_write_node_pages+0x478/0x6e0
[  108.405494][   T27]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  108.405518][   T27]  ? __lock_acquire+0xab9/0xd20
[  108.405541][   T27]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  108.405558][   T27]  do_writepages+0x32e/0x550
[  108.405575][   T27]  ? reacquire_held_locks+0x127/0x1d0
[  108.405586][   T27]  ? writeback_sb_inodes+0x384/0x1010
[  108.405608][   T27]  __writeback_single_inode+0x145/0xff0
[  108.405624][   T27]  ? do_raw_spin_unlock+0x4d/0x240
[  108.405642][   T27]  writeback_sb_inodes+0x6c7/0x1010
[  108.405679][   T27]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  108.405730][   T27]  ? rcu_is_watching+0x15/0xb0
[  108.405752][   T27]  wb_writeback+0x43b/0xaf0
[  108.405773][   T27]  ? queue_io+0x301/0x590
[  108.405791][   T27]  ? __pfx_wb_writeback+0x10/0x10
[  108.405812][   T27]  ? _raw_spin_unlock_irq+0x23/0x50
[  108.405832][   T27]  wb_workfn+0x409/0xef0
[  108.405864][   T27]  ? __pfx_wb_workfn+0x10/0x10
[  108.405887][   T27]  ? __lock_acquire+0xab9/0xd20
[  108.405915][   T27]  ? process_scheduled_works+0x9ef/0x17b0
[  108.405939][   T27]  ? _raw_spin_unlock_irq+0x23/0x50
[  108.405951][   T27]  ? process_scheduled_works+0x9ef/0x17b0
[  108.405969][   T27]  ? process_scheduled_works+0x9ef/0x17b0
[  108.405998][   T27]  process_scheduled_works+0xae1/0x17b0
[  108.406042][   T27]  ? __pfx_process_scheduled_works+0x10/0x10
[  108.406076][   T27]  worker_thread+0x8a0/0xda0
[  108.406118][   T27]  kthread+0x711/0x8a0
[  108.406137][   T27]  ? __pfx_worker_thread+0x10/0x10
[  108.406155][   T27]  ? __pfx_kthread+0x10/0x10
[  108.406172][   T27]  ? _raw_spin_unlock_irq+0x23/0x50
[  108.406185][   T27]  ? lockdep_hardirqs_on+0x9c/0x150
[  108.406199][   T27]  ? __pfx_kthread+0x10/0x10
[  108.406235][   T27]  ret_from_fork+0x4bc/0x870
[  108.406257][   T27]  ? __pfx_ret_from_fork+0x10/0x10
[  108.406282][   T27]  ? __switch_to_asm+0x39/0x70
[  108.406297][   T27]  ? __switch_to_asm+0x33/0x70
[  108.406311][   T27]  ? __pfx_kthread+0x10/0x10
[  108.406326][   T27]  ret_from_fork_asm+0x1a/0x30
[  108.406358][   T27]  </TASK>
[  108.406365][   T27] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  108.520124][   T56] Bluetooth: hci2: command tx timeout
[  108.535028][ T6841] loop1: detected capacity change from 0 to 32768
[  108.611613][ T5913] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  108.622976][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.632082][ T5913] usb 4-1: Product: syz
[  108.636730][ T5913] usb 4-1: Manufacturer: syz
[  108.641649][ T5913] usb 4-1: SerialNumber: syz
[  108.650980][ T5913] usb 4-1: config 0 descriptor??
[  108.679775][   T33] audit: type=1800 audit(1759234888.757:25): pid=6841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.239" name="bus" dev="tmpfs" ino=567 res=0 errno=0
[  108.854930][ T5913] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  108.925988][ T6845] tipc: Started in network mode
[  108.927965][ T6845] tipc: Node identity 2a1bb73daf6a, cluster identity 4711
[  108.932466][ T6845] tipc: Enabled bearer <eth:bridge_slave_0>, priority 10
[  109.753922][ T6866] loop1: detected capacity change from 0 to 1024
[  109.756415][ T6866] EXT4-fs: Ignoring removed orlov option
[  109.758474][ T6866] EXT4-fs: Ignoring removed nomblk_io_submit option
[  109.977673][ T6869] loop1: detected capacity change from 0 to 32768
[  110.002861][ T6869] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.246 (6869)
[  110.013160][ T6869] BTRFS error: failed to open device for path /dev/loop1 with flags 0x23: -13
[  110.036194][ T6870] loop2: detected capacity change from 0 to 32768
[  110.062046][ T5909] tipc: Node number set to 2238822205
[  110.085764][ T6870] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[  110.101355][   T33] audit: type=1800 audit(1759234890.177:26): pid=6870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.247" name="bus" dev="loop2" ino=17058 res=0 errno=0
[  110.149460][ T5846] ocfs2: Unmounting device (7,2) on (node local)
[  110.370093][ T6886] loop1: detected capacity change from 0 to 4096
[  110.420689][ T6891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.254'.
[  110.429967][ T6891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.254'.
[  110.434844][ T6891] netlink: 'syz.2.254': attribute type 6 has an invalid length.
[  110.590207][ T5849] Bluetooth: hci2: command tx timeout
[  110.742053][ T6898] loop1: detected capacity change from 0 to 32768
[  110.908867][ T6888] loop2: detected capacity change from 0 to 32768
[  110.915938][ T6888] ocfs2: Unknown parameter 'icl'
[  111.392440][ T5913] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  111.405735][ T5913] usb 4-1: USB disconnect, device number 2
[  111.440783][ T6904] 8021q: VLANs not supported on gre0
[  111.757993][ T6910] netlink: 'syz.1.261': attribute type 1 has an invalid length.
[  111.761279][ T6910] netlink: 'syz.1.261': attribute type 1 has an invalid length.
[  111.847829][ T6910] loop1: detected capacity change from 0 to 4096
[  112.026649][ T6913] Bluetooth: MGMT ver 1.23
[  112.043955][ T6913] netlink: 'syz.3.262': attribute type 1 has an invalid length.
[  112.046460][ T6913] netlink: 216 bytes leftover after parsing attributes in process `syz.3.262'.
[  112.097315][ T6904] loop2: detected capacity change from 0 to 40427
[  112.105257][ T6904] F2FS-fs (loop2): Image doesn't support compression
[  112.108103][ T6904] F2FS-fs (loop2): build fault injection rate: 690
[  112.111598][ T6904] F2FS-fs (loop2): build fault injection type: 0x35f7
[  112.122344][ T6904] F2FS-fs (loop2): invalid crc value
[  112.226111][ T6904] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  112.233499][ T6904] F2FS-fs (loop2): Start checkpoint disabled!
[  112.238542][ T6904] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0
[  112.242512][ T6904] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  112.261625][ T6904] syz.2.259: attempt to access beyond end of device
[  112.261625][ T6904] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  112.426535][ T6915] loop3: detected capacity change from 0 to 32768
[  112.479485][ T6915] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  112.573504][ T6915] XFS (loop3): Ending clean mount
[  112.997165][ T6927] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12)
[  112.999825][ T6927] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  113.081759][ T6927] vhci_hcd vhci_hcd.0: Device attached
[  113.269493][ T5913] vhci_hcd: vhci_device speed not set
[  113.274367][ T6930] vhci_hcd: connection closed
[  113.277063][   T12] vhci_hcd: stop threads
[  113.287074][   T12] vhci_hcd: release socket
[  113.302627][   T12] vhci_hcd: disconnect device
[  113.321621][ T6936] loop1: detected capacity change from 0 to 1024
[  113.338373][ T6936] EXT4-fs: Ignoring removed orlov option
[  113.341879][ T5913] usb 39-1: new full-speed USB device number 2 using vhci_hcd
[  113.344238][ T5913] usb 39-1: enqueue for inactive port 0
[  113.355937][ T6936] ext4: Bad value for 'auto_da_alloc'
[  113.419419][ T5913] vhci_hcd: vhci_device speed not set
[  113.515905][ T6931] loop2: detected capacity change from 0 to 32768
[  113.545295][ T6931] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[  113.582205][   T33] audit: type=1800 audit(1759234893.657:27): pid=6931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.264" name="bus" dev="loop2" ino=17058 res=0 errno=0
[  113.635026][ T5846] ocfs2: Unmounting device (7,2) on (node local)
[  113.831382][ T6682] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  113.849688][   T47] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  113.883097][ T6942] loop2: detected capacity change from 0 to 1024
[  113.915378][ T6942] EXT4-fs: Ignoring removed orlov option
[  113.917446][ T6942] EXT4-fs: Ignoring removed nomblk_io_submit option
[  113.958394][ T6942] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  113.966476][   T33] audit: type=1800 audit(1759234894.047:28): pid=6942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.269" name="file1" dev="loop2" ino=15 res=0 errno=0
[  114.019212][   T47] usb 2-1: Using ep0 maxpacket: 8
[  114.025884][   T47] usb 2-1: config 0 has an invalid interface number: 194 but max is 0
[  114.028537][   T47] usb 2-1: config 0 has no interface number 0
[  114.029599][ T5846] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.039438][   T47] usb 2-1: too many endpoints for config 0 interface 194 altsetting 102: 57, using maximum allowed: 30
[  114.043578][   T47] usb 2-1: config 0 interface 194 altsetting 102 has 0 endpoint descriptors, different from the interface descriptor's value: 57
[  114.048340][   T47] usb 2-1: config 0 interface 194 has no altsetting 0
[  114.063540][   T47] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  114.075320][   T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.078510][   T47] usb 2-1: Product: syz
[  114.093613][   T47] usb 2-1: Manufacturer: syz
[  114.099976][   T47] usb 2-1: SerialNumber: syz
[  114.103157][ T6951] loop2: detected capacity change from 0 to 2048
[  114.108557][ T6951] UDF-fs: warning (device loop2): udf_fill_super: No fileset found
[  114.113455][   T47] usb 2-1: config 0 descriptor??
[  114.324006][ T6947] loop3: detected capacity change from 0 to 32768
[  114.332602][ T6936] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  114.349320][ T6947] BTRFS info: device /dev/loop3 (7:3) using temp-fsid 60a90f39-570f-4778-a848-d99d41dfcc1e
[  114.355188][   T47] usb 2-1: USB disconnect, device number 5
[  114.372606][ T6947] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.268 (6947)
[  114.413709][ T6947] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  114.429280][ T6947] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  114.432551][ T6947] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  114.494560][ T6954] loop2: detected capacity change from 0 to 32768
[  114.572922][ T6947] BTRFS info (device loop3): rebuilding free space tree
[  114.610119][ T6947] BTRFS info (device loop3): disabling free space tree
[  114.612506][ T6947] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  114.616036][ T6947] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  114.633837][ T6947] BTRFS info (device loop3): enabling ssd optimizations
[  114.637506][ T6947] BTRFS info (device loop3): enabling disk space caching
[  114.643143][ T6947] BTRFS info (device loop3): force clearing of disk cache
[  114.646303][ T6947] BTRFS info (device loop3): use zstd compression, level 3
[  114.726331][ T6682] BTRFS info (device loop3): last unmount of filesystem 60a90f39-570f-4778-a848-d99d41dfcc1e
[  114.741667][ T6971] loop2: detected capacity change from 0 to 32768
[  114.768271][ T6971] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[  114.833129][ T5846] ocfs2: Unmounting device (7,2) on (node local)
[  115.024714][ T6986] ntfs3(nullb0): Primary boot signature is not NTFS.
[  115.027748][ T6986] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  115.102186][ T6993] loop1: detected capacity change from 0 to 2048
[  115.177829][   T33] audit: type=1400 audit(1759234895.247:29): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=6994 comm="syz.2.280"
[  115.178501][ T6995] 9pnet_fd: Insufficient options for proto=fd
[  115.298449][ T6996] netlink: 28 bytes leftover after parsing attributes in process `syz.3.276'.
[  115.316334][ T6996] loop3: detected capacity change from 0 to 1024
[  115.373085][ T6996] hfsplus: cannot replace xattr
[  115.587692][ T7004] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  116.316663][ T7019] loop2: detected capacity change from 0 to 32768
[  116.352978][ T7019] BTRFS info: device /dev/loop2 (7:2) using temp-fsid 02aeff52-1d05-423a-a25f-ea44dc7992f9
[  116.356545][ T7019] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.288 (7019)
[  116.416641][ T7019] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  116.420999][ T7019] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  116.424174][ T7019] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  116.624681][ T7019] BTRFS info (device loop2): rebuilding free space tree
[  116.640099][ T7019] BTRFS info (device loop2): disabling free space tree
[  116.643033][ T7019] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  116.649312][ T7019] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  116.668969][ T7019] BTRFS info (device loop2): enabling ssd optimizations
[  116.669623][ T7032] loop1: detected capacity change from 0 to 32768
[  116.673099][ T7019] BTRFS info (device loop2): enabling disk space caching
[  116.688886][ T7019] BTRFS info (device loop2): force clearing of disk cache
[  116.691542][ T7019] BTRFS info (device loop2): use zstd compression, level 3
[  116.705930][ T7032] ocfs2: Readonly device (7,1) detected. Cluster services will not be used for this mount. Recovery will be skipped.
[  116.723629][ T7032] ocfs2: Mounting device (7,1) on (node local, slot 65535) with writeback data mode.
[  116.756897][ T7032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.291'.
[  116.770580][ T7060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.291'.
[  116.822049][ T5854] INFO: trying to register non-static key.
[  116.823999][ T5854] The code is fine but needs lockdep annotation, or maybe
[  116.826239][ T5854] you didn't initialize this object before use?
[  116.829263][ T5854] turning off the locking correctness validator.
[  116.831342][ T5854] CPU: 1 UID: 0 PID: 5854 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  116.831357][ T5854] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  116.831364][ T5854] Call Trace:
[  116.831370][ T5854]  <TASK>
[  116.831376][ T5854]  dump_stack_lvl+0x189/0x250
[  116.831394][ T5854]  ? rcu_is_watching+0x15/0xb0
[  116.831406][ T5854]  ? __pfx_dump_stack_lvl+0x10/0x10
[  116.831419][ T5854]  ? __pfx__printk+0x10/0x10
[  116.831463][ T5854]  ? __is_module_percpu_address+0x39b/0x3f0
[  116.831476][ T5854]  ? is_module_address+0x17/0xf0
[  116.831491][ T5854]  assign_lock_key+0x133/0x150
[  116.831500][ T5854]  register_lock_class+0x105/0x320
[  116.831512][ T5854]  __lock_acquire+0x99/0xd20
[  116.831521][ T5854]  ? ktime_get+0x3e/0x1f0
[  116.831529][ T5854]  ? ocfs2_mark_lockres_freeing+0x125/0x580
[  116.831539][ T5854]  lock_acquire+0x120/0x360
[  116.831548][ T5854]  ? ocfs2_mark_lockres_freeing+0x125/0x580
[  116.831560][ T5854]  _raw_spin_lock_irqsave+0xa7/0xf0
[  116.831568][ T5854]  ? ocfs2_mark_lockres_freeing+0x125/0x580
[  116.831577][ T5854]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  116.831585][ T5854]  ? ktime_get+0x1cb/0x1f0
[  116.831593][ T5854]  ocfs2_mark_lockres_freeing+0x125/0x580
[  116.831603][ T5854]  ? __pfx_ocfs2_mark_lockres_freeing+0x10/0x10
[  116.831612][ T5854]  ? lockdep_hardirqs_on+0x9c/0x150
[  116.831622][ T5854]  ? ocfs2_journal_shutdown+0x64b/0xaf0
[  116.831634][ T5854]  ? __pfx_ocfs2_journal_shutdown+0x10/0x10
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  116.831646][ T5854]  ocfs2_dlm_shutdown+0x3a/0x240
[  116.831656][ T5854]  ocfs2_dismount_volume+0x46a/0x8d0
[  116.831665][ T5854]  ? __pfx_ocfs2_dismount_volume+0x10/0x10
[  116.831672][ T5854]  ? __pfx_evict_inodes+0x10/0x10
[  116.831683][ T5854]  ? __pfx_ocfs2_put_super+0x10/0x10
[  116.831690][ T5854]  generic_shutdown_super+0x135/0x2c0
[  116.831697][ T5854]  kill_block_super+0x44/0x90
[  116.831705][ T5854]  deactivate_locked_super+0xbc/0x130
[  116.831716][ T5854]  cleanup_mnt+0x425/0x4c0
[  116.831727][ T5854]  ? lockdep_hardirqs_on+0x9c/0x150
[  116.831735][ T5854]  task_work_run+0x1d4/0x260
[  116.831745][ T5854]  ? __pfx_task_work_run+0x10/0x10
[  116.831752][ T5854]  ? __x64_sys_umount+0x122/0x160
[  116.831760][ T5854]  ? exit_to_user_mode_loop+0x40/0x130
[  116.831770][ T5854]  exit_to_user_mode_loop+0xe9/0x130
[  116.831779][ T5854]  do_syscall_64+0x2bd/0xfa0
[  116.831790][ T5854]  ? lockdep_hardirqs_on+0x9c/0x150
[  116.831801][ T5854]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.831811][ T5854]  ? exc_page_fault+0xab/0x100
[  116.831823][ T5854]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.831830][ T5854] RIP: 0033:0x7fddd1b8ff57
[  116.831839][ T5854] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  116.831845][ T5854] RSP: 002b:00007ffd76a4b768 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  116.831853][ T5854] RAX: 0000000000000000 RBX: 00007fddd1c11c2d RCX: 00007fddd1b8ff57
[  116.831858][ T5854] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd76a4b820
[  116.831862][ T5854] RBP: 00007ffd76a4b820 R08: 0000000000000000 R09: 0000000000000000
[  116.831867][ T5854] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd76a4c8b0
[  116.831871][ T5854] R13: 00007fddd1c11c2d R14: 000000000001c7e3 R15: 00007ffd76a4c8f0
[  116.831878][ T5854]  </TASK>
[  116.832224][ T7039] loop3: detected capacity change from 0 to 32768
[  116.837928][ T5846] BTRFS info (device loop2): last unmount of filesystem 02aeff52-1d05-423a-a25f-ea44dc7992f9
[  116.899684][ T5854] ocfs2: Unmounting device (7,1) on (node local)
[  116.960721][ T7039] JBD2: journal reset failed
[  116.962563][ T7039] (syz.3.293,7039,0):ocfs2_journal_load:1167 ERROR: Failed to load journal!
[  116.965844][ T7039] (syz.3.293,7039,0):ocfs2_check_volume:2376 ERROR: ocfs2 journal load failed! -4

VM DIAGNOSIS:
11:38:39  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81f97c7f RBX=ffff888106ca1d00 RCX=ffff888106ca1d00 RDX=0000000000000002
RSI=0000000000000000 RDI=0000000000000000 RBP=ffffc90006f0fc58 RSP=ffffc90006f0fb18
R8 =ffff888106ca1d07 R9 =1ffff11020d943a0 R10=dffffc0000000000 R11=ffffed1020d943a1
R12=dffffc0000000000 R13=0000000000fb9000 R14=0000000000001000 R15=0000000000000000
RIP=ffffffff81c05b5c RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f16e76426c0 ffffffff 00c00000
GS =0000 ffff8880b83fc000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055690ee21950 CR3=000000011e862000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffff000000000000 0000000000ff0000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000065 RBX=0000000000000065 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900041271b0
R8 =ffff888106b60237 R9 =1ffff11020d6c046 R10=dffffc0000000000 R11=ffffffff8556cf10
R12=dffffc0000000000 R13=ffffffff99d19916 R14=ffffffff9a00f5a0 R15=0000000000000000
RIP=ffffffff8556cf8c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555558b9b500 ffffffff 00c00000
GS =0000 ffff8881a39fc000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f8175b153f1 CR3=000000010f032000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffff000000000000 0000000000ff0000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
