last executing test programs:

57.282145556s ago: executing program 1 (id=30):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x2000010, &(0x7f00000013c0)=ANY=[], 0xf, 0x6a2, &(0x7f0000000100)="$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")
creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
rename(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

57.220528663s ago: executing program 1 (id=32):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r0, 0x8000000)
syz_clone(0x630051c0, 0x0, 0x22, 0x0, 0x0, 0x0)

57.057065897s ago: executing program 1 (id=36):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$kcm(r1, &(0x7f0000000ac0)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)="7e53bd3578002241000fd68808571d3c1f6a", 0x12}, {&(0x7f00000030c0)="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", 0x100f}, {&(0x7f00000000c0)="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", 0x1e1}, {&(0x7f0000002540)="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", 0xb47}, {&(0x7f00000002c0)="16f51b", 0x3}], 0x5}, 0x0)

56.972583497s ago: executing program 1 (id=39):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0xc08, &(0x7f00000002c0)={[{@allow_utime={'allow_utime', 0x3d, 0xd4}}, {@umask={'umask', 0x3d, 0x5}}, {@gid}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {}, {@umask={'umask', 0x3d, 0x1338}}, {@errors_remount}, {@errors_continue}, {@keep_last_dots}]}, 0x1, 0x1524, &(0x7f0000002280)="$eJzs3AuYTlXbOPD7XmvtMSbpaZLDsNa6N09yWCZJckiSQ5IkSZJTQtIkryQkhpyShiQkhyE5DCE5TEwa5/P5kJAkTZKE5JSs/yX8vb31fu/7fm/f67u+uX/XtS/rfva+1773cz+HvbeZ+a7zkBqNalZtQETwb8GL/yQDQCwADACA6wAgAICy8WXjL6zPKTH539sJ+3M9kna1K2BXE/c/e+P+Z2/c/+yN+5+9cf+zN+5/9sb9z964/4xlZ5umFbiel+y78P3/7Iy///8PySo15qs1pW7sAhDzz6Zw/7M37v//WcE/sxH3P3vj/mdXsVe7APa/AL//s4Mcf3cN9z974/4zlp1d7fvPV3uBSPZ+Dq72648xxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGWPZw2l+hAODy+GrXxRhjjDHGGGOMsT+Pz3G1K2CMMcYYY4wxxtj/PAQBEhQEEAM5IBZyQhwIALgWcsN1EIHrIR5ugDxwI+SFfJAfCkACFIRCoMGABYIQCkMRiMJNUBRuhmJQHEpASXBQChLhFigNt0IZuA3Kwu1QDu6A8lABKkIluBMqw11QBe6GqnAPVIPqUANqwr1QC+6D2nA/1IEHoC48CPXgIagPD0MDeAQawqPQCB6DxvA4NIGm0AyaQ4v/Vv5L0B1ehh7QE5KhF/SGV6AP9IV+0B8GwKswEF6DQfA6pMBgGAJvwFB4E4bBWzAcRsBIeBtGwTswGsbAWBgHqTAeJsC7MBHeg0kwGabAVEiDaTAd3ocZMBNmwQcwGz6EOTAX5sF8SIePYAEshAz4GBbBJ5AJi2EJLIVlsBxWwEpYBathDayFdbAeNsBG2ASbYQtshW2wHXbAp7ATPoNdsBv2wOewF774F/NP/U1+FwQEFChQocIYjMFYjMU4jMNcmAtzY26MYATjMR7zYB7Mi3kxP+bHBEzAQlgIDRokJCyMhTGKUSyKRbEYFsMSWAIdOkzERCyNt2IZLINlsSyWw3JYHitgBayElbAyVsYqWAWrYlWshtWwBtbAe/Fe7IW1sTbWwTpYF+tevj2FDbABNsSG2AgbYWNsjE2wCTbDZtgCW2BLbImtsBW2wTbYFttiO2yHSZiE7bE9dsAO2BE7YifshJ2xM3bBrtg166UcgC/jy9gTq4le2Bt7Yx9MydEP+2N/fBUH4mv4Gr6OKTgYh+Ab+Aa+icPwJA7HETgSR2Jl8Q6OxjFIYhymYipOwAk4ESfiJJyMk3EqpuE0nI7TcQbOxJn4Ac7GD/FDnItzcT6mYzouwIWYgRm4CE9hJi7GJbgUl+FyXIYrcRWuxDW4FtfgelyPG3EjbsbNuBW34nbcjp+iAsDPcDfuxhTci3txH+7D/bgfD+ABzMIsPIgH8RAewsN4GI/gETyKx/A4HsMTeAJP4ik8jafxLJ7Fc/hCwjcNPy2+OgXEBUooESNiRKyIFXEiTuQSuURukVtERETEi3iRR+QReUVekV/kFwkiQRQShYQRRpAIYwBAREVUFBVFRTFRTJQQJYQTTiSKRFFalBZlRBlRVtwuyok7RHlRQbR2lUQlUVm0cVXE3aKqqCqqieqihqgpaopaopaoLWqLOqKOqCvqinriIVFf9MJ++Ii40JlGYjA2FkOwiWgq5KVPsJZiGLYSrUUb8ZQYgcOxnWjpksSzor0YjR3EX8QYfF50EuOws3hRdBFdRTfxkuguWrkeoqeYhL1EbzEV+4i+op/oL2ZgdfEBzs5ZQ7wuUsRgMUS8Iebjm2KYeEsMFyPESPG2GCXeEaPFGDFWjBOpYryYIN4VE8V7YpKYLKaIqSJNTBPTxftihpgpZokPxGzxoZgj5op5Yr5IFx+JBWKhyBAfi0XiE5EpFoslYqlYJpaLFWKlWCVWizVirVgn1osNYqPYJDaLLWKr2Ca2ix3iU7FTfCZ2id1ij/hc7BVfiH3iS7FffCUOiK9FlvhGHBTfikPiO3FYfC+OiB/EUXFMHBc/ihPiJ3FSnBKnxRlxVvwszolfxHnhBUiUQkqpZCBjZA4ZK3PKOHmNzCWDS8/u9TJe3iDzyBtlXplP5pcFZIIsKAtJLY20kmQoC8siMipvkkXlzbKYLC5LyJLSyVIyUd4iS8tbZRl5mywrb5fl5B2yvKwgK8pK8k5ZWd4lIXJxH9VkdVlD1pT3ymS4T9aW98s68gFZVz4o68mHZH35sGwgH5EN5aOykXxMNpaPyyayqWwmm8sW8gnZUj4pW8nWso18SraVT8t28hmZJJ+V7aW/9BJ5XnaSL8jO8kXZRXaV3eQv8rz0sofsKaEXyN7yFdlH9pX9ZH85QL4qB8rX5CD5ukyRg+UQ+YYcKt+Uw+RbcrgcIUfKt+Uo+Y4cLcfIsXKcTJXj5QT5rpwo35OT5GQ5RU6VaXKa7HdppllS/sP8d/8gf9Cve98oN8nNcovcKrfJ7XKH/FTulDvlLrlL7pF75F65V+6T++R+uV8ekAdklsySB+VBeUgekoflYXlEHpFH5TF5Rv4oT8if5El5Sp6SZ+RZeVaeu/QcgEIllFRKBSpG5VCxKqeKU9eoXOpalVtdpyLqehWvblB51I0qr8qn8qsCKkEVVIWUVkZZRSpUhVURFVU34aUXjCqhSiqnSqlEdcu/kq+KqptVMVX8N/mX60v+O/W1UC1US9VStVKtVBvVRrVVbVU71U4lqSTVXrVXHVQH1VF1VJ1UJ9VZdVZdVBfVTXVT3VV31UP1UMkqWfVWr6g+qq/qp/qrAepVNVANVIPUIJWiUtQQNUQNVUPVMDVMDVfD1Ug1Uo1So9RoNVqNVWNVqkpVE9QENVFNVJPUJDVFTVFpKk1NV9PVDDVDzVKz1Gw1W81Rc9Q8NU+lq3S1QC1QGSpDLVKLVKZarBarpWqpWq6Wq5VqpVqtVqu1aq1ar9arTLVJbVJb1Ba1TW1TO9QOtVPtVLvULrVH7VF71V61T+1T+9V+dUAdUFkqSx1UB9UhdUgdVofVEXVEHVVH1XF1XJ1QJ9RJdVKdVqfVWXVWnVPn1Hl1/sJpXyACEahABTFBTBAbxAZxQVyQK8gV5A5yB5EgEsQH8UGe4MYgb5AvyB8UCBKCgkGhQAcmsIG41PRocFNQNLg5KBYUD0oEJQMXlAoSg1uC0sGtQZngtqBscHtQLrgjKB9UCCoGlYI7g8rBXUGV4O6ganBPUC2oHtQIagb3BrWC+4Lawf1BneCBoG7wYFAveCioHzwcNAgeCRoGjwaNgseCxsHjQZOgadAsaB60+FPn9/5kviddD91TJ+teurd+RffRfXU/3V8P0K/qgfo1PUi/rlP0YD1Ev6GH6jf1MP2WHq5H6JH6bT1Kv6NH6zF6rB6nU/V4PUG/qyfq9/QkPVlP0VN1mp6mp+v39Qw9U8/SH+jZ+kM9R8/V8/R8na4/0gv0Qp2hP9aL9Cc6Uy/WS/RSvUwv1yv0Sr1Kr9Zr9Fq9Tq/XG/RGvUlv1lv0Vr1Nb9c79Kd6p/5M79K79R79ud6rv9D79Jd6v/5KH9Bf6yz9jT6ov9WH9Hf6sP5eH9E/6KP6mD6uf9Qn9E/6pD6lT+sz+qz+WZ/Tv+jz2l84ub/w9W6UUSbGxJhYE2viTJzJZXKZ3Ca3iZiIiTfxJo/JY/KavCa/yW8STIIpZAqZC8iQKWwKm6iJmqKmqClmipkSpoRxxplEk2hKm9KmjCljypqyppwpZ8qb8qaiqWjuNHeau8xd5m5zt7nH3GOqm+qmpqlpaplaprapbeqYOqauqWvqmXqmvqlvGpgGpqFpaBqZRqaxaWyamCammWlmWpgWpqVpaVqZVqaNaWPamramnWlnkkySaW/amw6mg+loOppOppPpbDqbLqaL6Wa6me6mu+lhephkk2x6m96mj+lj+pl+ZoAZYAaagWaQGWRSTIoZYoaYoWaoGWaGmeFmhBl54UTVvGNGmzFmrBlnUk2qmWAmmIlmoplkJpkpZopJM2lmupluZpgZZpaZZWab2WaOmWPmmXkm3aSbBWaByTAZZpFZZDJNpllilphlZplZYVaYVWaVWWPWmHWwzmwwG8wms8lsMVvMNrPN7DA7zE6z0+wyu8wes8fsNXvNPrPP7Df7zQFzwGSZLHPQHDSHzCFz2Bw2R8wRc9QcNcfNcXPCnDAnzUlz2pw2Z02+S9+X3sTanDbOXmNz2Wttbnud/ds4vy1gE2xBW8hqm9fm+01srLXFbHFbwpa0zpayifaW38XlbQVb0Vayd9rK9i5b5XdxLXufrW3vt3XsA7amvfc3cV37oK1nH7P1EQFsU9vQNreN7GO2sX3cNrFNbTPb3La1T9t29hmbZJ+17e1zv4sX2IV2lV1t19i1dpfdbU/bM/aQ/c6etT/bHranHWBftQPta3aQfd2m2MG/i0fat+0o+44dbcfYsXbc7+IpdqpNs9PsdPu+nWFn/i5Otx/Z2TbDzrFz7Tw7/9f4Qk0Z9mO7yH5iM20AS+xSu8wutyvsyv9f61K73m6wG+1O+5ndYrfabXa73XH5RNjutnvs53av/cIetN/a/fYre8Aetln2m1/jC8d32H5vj9gf7FF7zB63P9oT9id1OfvCsf9of7HnrbdASECSFAUUQzkolnJSHF1Duehayk3XUYSup3i6gfLQjZSX8lF+KkAJVJAKkSZDlohCKkxFKEo30eXySlBJclSKEukWKk23Uhm6jcrS7VSO7qDyVIEqUiW6kyrTXVSF7qaqdA9Vo+pUg2rSvVSL7qPadD/VoQeoLj1I9eghqk8PUwN6hBrSo9SIHqPG9Dg1oabUjJpTC3qCWtKT1IpaUxt6itrS09SOnqEkepba03PUgf5CHel56kQvUGd6kbpQV+pGL1F3epl6UE9Kpl7Um16hPtSX+lF/GkCv0kB6jQbR65RCg2kIvUFD6U0aRm/RcBpBI+ltGkXv0GgaQ2NpHKXSeJpA79JEeo8m0WSaQlMpjabRdHqfZtBMmkUf0Gz6kObQXJpH8ymdPqIFtJAy6GNaRJ9QJi2mJbSUltFyWkEraRWtpjW0ltbRetpAG2kTbaYttJW20XbaQZ/STvqMdtFu2kOf0176gvbRl7SfvqID9DVl0Td0kL6lQ/QdHabvfU/6gY7SMTpOP9IJ+olO0ik6TWfoLP1M5+gXOk+eIMRQhDJUYRDGhDnC2DBnGBdeE+YKrw1zh9eFkfD6MD68IcwT3hjmDfOF+cMCYUJYMCwU6tCENqQwDAuHRcJoeFNYNLw5LBYWD0uEJUMXlgoTw1vC0uGtYZnwtrBseHtYLrwjLB9WCB97oFJ4Z1g5vCusEt4dVg3vCauF1cMaYc3w3rBWeF9YO7w/rBM+EJYJHwzrhQ+F9cOHwwbhI2HD8NGwUfhY2Dh8PGwSNg2bhc3DFuETYcvwybBV2DpsEz4Vtg2fDtuFz4RJ4bNh+/C5X9c/uPDvr08Oe4W9w1fCV0Lv75fzovOj6dGPoguiC6MZ0Y+ji6KfRDOji6NLokujy6LLoyuiK6Oroquja6Jro+ui66Mbohuj3tfMAQ6dcNIpF7gYl8PFupwuzl3jcrlrXW53nYu46128u8HlcTe6vC6fy+8KuARX0BVy2hlnHbnQFXZFXNTd5Iq6m10xV9yVcCWdc6VcomvuWrgWrqV70rVyrV0b95R7yj3tnnbPuGfcs669e851cH9xHd3zrpN7wb3gXnRdXFfXzb3kurvxuS++J5Ndb9fb9XF9XD/Xzw1wA9xAN9ANcoNciktxQ9wQN9QNdcPcMDfcDXcj3Ug3yo1yo91oN9aNdaku1U1wE9xEN9FNcpPcFDfFpbk0N91NdzPcDFd55sW9zHFz3Dw3z6W7dLfAXThnzHCL3CKX6TLdErfELXPL3Aq3wq1yq9wat8atc+vcBrfBbXKb3Ba3xW1z29wOt8PtdDvdLn/dxUndXrfP7XP73X53wH3tstw37qD71h1y37nD7nt3xP3gjrpj7rj70Z1wP7mT7pQ77c64s+5nd8794s4771Ij4yMTIu9GJkbei0yKTI5MiUyNpEWmRaZH3o/MiMyMzIp8EJkd+TAyJzI3Mi8yP5Ie+SiyILIwkhH5OLIo8kkkM7I4siSyNLIssjzifcEtoS/si/iov8kX9Tf7Yr64L+FLeudL+UR/iy/tb/Vl/G2+rL/dl/N3+PK+gq/oH/dNfFPfzDf3LfwTvqV/0rfyrX0b/5Rv65/27fwzPsk/69v753wH/xff0T/vO/kXfGf/ou/iu/pu/iXf3b/se/iePtn38r39K76P7+v7+f5+gH/VD/Sv+UH+dZ/iB/sh/g0/1L/ph/m3/HA/wo+MeduPunyJDON8qh/vJ/h3/UT/np/kJ/spfqpP89P8dP++n+Fn+ln+Az/bf+jn+Ll+np/v0/1HfoFf6DP8x36R/8Rn+sWXbyr7FX6lX+VX+zV+rV/n1/sNfqPf5Df7LX6r3+a3+x3+U7/Tf+Z3+d1+j//c7/Vf+H3+S7/ff+UP+K99lv/GH/Tf+kP+O3/Yf++P+B/8UX/MH/c/+hP+J3/Sn/Kn/Rl/1v/sz/lf/Hn+nTXGGGOMsX/K+CtD8ds1F2/n9/qDHPFXG/cGgGu3Fsj66/UXzijX5b047isS2kYA4NmenR+5vFSrlpycfGnbTAlBkbkAl/8n6IIYuBIvhjbwNCRBayj9h/X3FV3P0j+YP3o7QNxf5cTClfjK/F8CYPIfzP/EUyMXlAtPx/8X888FKFbkSk5OuBIvhja/3l9pDWX+Tv35Wv6D+nN+lQrQ6q9ycsGV+Er9ifAkPAdJv9mSMcYYY4wxxhi7qK+o2PHy9efln/j8o+vzBHUlJwdcif/R9TljjDHGGGOMMcauvue7dnvmiaSk1h3/9UGV/1bWPz1oDP9TM/PgDwfeA1x+RAHAvzkhwIWB/E8exeb/yL5SLr11/nbVsjM+gP8drfwzBlf5g4kxxhhjjDH2p7ty0v/bx9XVKogxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMuG/hN/TuxqHyNjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDF2tf2/AAAA//9IVQM5")
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})

56.860498936s ago: executing program 1 (id=40):
r0 = socket$inet6(0xa, 0x3, 0x5)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0)

56.468272791s ago: executing program 1 (id=46):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x1, r1, 0x0, 0xfffffffffffffffe, 0xb})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000b00)={0x48, 0x1, r1, 0x0, 0xffffbffffffffffb, 0x403})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x2, r1, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000})

56.291996374s ago: executing program 32 (id=46):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x1, r1, 0x0, 0xfffffffffffffffe, 0xb})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000b00)={0x48, 0x1, r1, 0x0, 0xffffbffffffffffb, 0x403})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x2, r1, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000})

17.661528707s ago: executing program 3 (id=511):
syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0xc6, 0x1e, 0x40, 0x7c9, 0x12, 0xc2f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0xcb, 0x8e, 0x2f, 0x0, [], [{{0x9, 0x5, 0xf}}, {{0x9, 0x5, 0xd}}, {{0x9, 0x5, 0x9}}]}}]}}]}}, 0x0)

16.498945303s ago: executing program 3 (id=520):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='attr/prev\x00')
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)

16.442601543s ago: executing program 3 (id=521):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x2}]}, &(0x7f0000000040)='syzkaller\x00', 0x6, 0x29, &(0x7f0000000200)=""/41, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)

16.442362095s ago: executing program 3 (id=522):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x3810082, &(0x7f0000001880)={[{@noadinicb}, {@gid}, {@dmode={'dmode', 0x3d, 0x4}}, {@rootdir={'rootdir', 0x3d, 0x400}}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@gid_forget}, {@gid_ignore}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@longad}]}, 0xfd, 0xc32, &(0x7f0000001a40)="$eJzs3U1sXNd9N+D/uRyKI/l9KyZ2FCeNi0lbpLJiufqKqViFO6pptgFkWQjF7AJwJI7UgSmSIKlGNtKC6aaLLgIURRdZEWiNAikaGE0RdMm0LpBsvCiy6opoYSMoumCLAFkFLO6dM9KQIm1GFCVKeh6b+s3ce86dc+4Z3ysLOvcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDxe6+dP3EyPexWAAAP0sXxr5445f4PAE+Uy/7/HwAAAAAAAAAAAAAA9rsURTwdKeYurqXJ6n1X/UJn8OatidGxrasdTFXNgap8+VM/eer0mS+9NHK2lxc6Mx9R/377bLwxfvl849XZG3Pz7YWF9lRjYqZzdXaqveMj7Lb+ZseqE9C48ebNqWvXFhqnXjy9Yfet4Q+HnjoyfG7k+ePP9cpOjI6Njd8pUu8vX7vnhnRtN8PjQBRxPFK88L2fplZEFLH7c1F/sGO/2cGqE8eqTkyMjlUdme60ZhbLnZd6J6KIaPRVavbO0dZjEbXBB9qH7TUjlsrmlw0+VnZvfK4137oy3W5cas0vdhY7szOXUre1ZX8aUcTZFLEcEatDdx9uMIqoRYrvHF5LVyJioHcevlhNDN6+HcUe9nEHynY2BiOWi0dgzPaxoSji9Ujxs/eOxtV8namuNV+IeL3MH0S8U+YrEan8YpyJ+GCL7xGPploU8efl+J9bS1PV9aB3XbnwtcZXZq7N9pXtXVd+yfvDXVeKh3R/OLgpH4x9fm2qRxGt6oq/lu79NzsAAAAAAAAAAAAAAAAA3G8Ho4jPRIrX/u2PqnnFUc1LP3xu5PeH/3//nPFnP+Y4ZdkXI2Kp2Nmc3AN5YuCldCmlhzyX+ElWjyL+OM//+9bDbgwAAAAAAAAAAAAAAAAAAMATrYifRIqX3z+alqN/TfHOzPXG5daV6e6qsL21f3trpq+vr683UjebOSdzLuVczrmSczVnFLl+zmbOyZxLOZdzruRczRkDuX7OZs7JnEs5l3Ou5FzNGbVcP2cz52TOpZzLOVdyruaMfbJ2LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA46SIIn4RKb79jbUUKSKaEZPRzZWhh906AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA0lIr4fqRo/EHz9rZaRKTq366j5S9nonmgzE9Gc6TMV6J5PmerylrzWw+h/ezOYCrix5FiqP7u7QHP4z/YfXf7axDvfPPOu8/WujnQ2zn84dBTRw6fGxn7tWe3e522asCxC52Zm7caE6NjY+N9m2v50z/Zt204f25xf7pORCy89fabrenp9vy9vyi/Aruo/gi9SLUnpadeVC+iti+a8XD6zhOgvP9/ECl++/1/793wu/f/evy/7rvbd/j4+Z/cuf+/vPlAO7z/1zbXy/f/8p6+1f3/6b5tL+ffjQzWIuqLN+YGj0TUF956+3jnRut6+3p75syJE18eGfny6RODByLq1zrT7b5X9+V0AQAAAAAAAAAAAAAAADw4qYjfjRStH6+lRkTcquZrDZ8bef74cwMxUM232jBv+43xy+cbr87emJtvLyy0pxoTM52rs1PtnX5cvZruNTE6tied+VgH97j9B+uvzs69Nd+5/oeLW+4/VD9/ZWFxvnV1691xMIqIZv+WY1WDJ0bHqkZPd1ozVdVLW06m/+UNpiL+I1JcPdNIn8/b8vz/zTP8N8z/X9p8oD2a//+Jvm3lZ6ZUxM8jxW/9xbPx+aqdh+Kuc5bL/U2kOHb2c7lcHCjL9drQfa5Ad2ZgWfZ/IsU//GJj2d58yKfvlD254xP7iCjH/3Ck+P6ffTd+PW/b+PyHrcf/0OYD7dH4P9O37dCG5xXsuuvk8T8eKV55+t34jbzto57/0Xv2xtFc+PbzOfZo/D/Vt204f+5v3p+uAwAAAAAAAAAAPNIGUxF/Gyl+OFZLL+VtO/n7f1ObD7RHf//r033bpu7PekUf+2LXJxUAAAAA9onBVMRPIsX1xXdvz6HeOP+7b/7n79yZ/zmaNu2t/pzvV6rnBtzPP//rN5w/d3L33QYAAAAAAAAAAAAAAAAAAIB9JaUiXsrrqU9W8/mntl1PfSVSvPZfL+Ry6UhZrrcO/HD1a/3i7Mzx89PTs1dbi60r0+3G+Fzrarus+0ykWPvrz+W6RbW+em+9+e4a73fWYp+PFGN/1yvbXYu9tzb5M72yS+2TZdlPRIr//PuNZXvrWH/qznFPlWX/KlJ8/Z+2LnvkTtnTZdnvRooffb3RK3uoLNt7Puqn75R98epssQejAgAAAAAAAAAAAAAAAAAAwJNmMBXxp5Hiv28s357Ln9f/H+x7W3nnm33r/W9yq1rnf7ha/3+71/ey/n/1XIGl7T4VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTymKeDtSzF1cSytD5fuu+oXOzM1bE6NjW1c7mKqaA1X58qd+8tTpM196aeRsLz+6/v32mXhj/PL5xquzN+bm2wsL7anGxEzn6uxUe8dH2G39zY5VJ6Bx482bU9euLTROvXh6w+5bwx8OPXVk+NzI88ef65WdGB0bG+8rUxu850+/S9pm+4Eo4i8jxQvf+2n64VBEEbs/Fx/z3dlrB6tOHKs6MTE6VnVkutOaWSx3XuqdiCKi0Vep2TtHD2AsdqUZsVQ2v2zwsbJ743Ot+daV6XbjUmt+sbPYmZ25lLqtLfvTiCLOpojliFgduvtwg1HEm5HiO4fX0j8PRQz0zsMXL45/9cSp7dtR7GEfd6BsZ2MwYrn4qDHbosNsMBRF/GOk+Nl7R+NfhiJq0f2JL0S8XuYPIt6J7nin8otxJuIDp/WxUYsi/rcc/3Nr6b2h8nrQu65c+FrjKzPXZvvK9q4rj/z94UHa5/eTehTxo+qKv5b+1X/XAAAAAAAAAAAAAAAAAPtIEb8aKV5+/2iq5gffnlPcmbneuNy6Mt2d1teb+9ebM72+vr7eSN1s5pzMuZRzOedKztWcUeT6OZtl1tfXJ/P7pZzLOVdyruaMgVw/ZzPnZM6lnMs5V3Ku5oxarp+zmXMy51LO5ZwrOVdzxj6ZuwcAAAAAAAAAAAAAAAAAADxeiuqfFN/+xlpaH6rWlx7o7VuxHuhj7/8CAAD//0pa+Ck=")
syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file1\x00', 0x4000, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000ac0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@uuid_off}]})

16.375299393s ago: executing program 3 (id=523):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000022c0)={[{@errors_remount}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@block_validity}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0xffa1, 0xd000000, 0x100000})

16.12272157s ago: executing program 3 (id=524):
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0xffffffff, 0x1, 0x1})

16.057804759s ago: executing program 33 (id=524):
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0xffffffff, 0x1, 0x1})

3.74791311s ago: executing program 2 (id=646):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x20}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x44}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x80)

3.652598671s ago: executing program 2 (id=647):
unshare(0x4020400)
r0 = socket$unix(0x1, 0x1, 0x0)
ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff)

3.558764901s ago: executing program 2 (id=648):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x62080, 0x0)
ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000040)={'\x00', 0x4, 0x3, 0x6})

3.557106579s ago: executing program 2 (id=649):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./file0\x00', 0x80000c, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRESHEX=0x0, @ANYRES16, @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030302c6465636f6d706f73652c666f7263652c6e6f6465636f6d706f73652c626172726965722c6e6f6465636f6d706f73652c747970653db029e1c02c7569643d", @ANYRESHEX=0x0, @ANYBLOB="2c747970653dd2100d1b2c7529643dd4f81c66210bbcbf82440a104ab956f2ba5e36e41ccb1b040fa8b829b0b87078de654c66ac22aebaa2c653ef127e38e0aa2229f9cf6a8503", @ANYRESDEC, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX=0x0, @ANYRES8=0x0], 0x2, 0x6ee, &(0x7f0000032440)="$eJzs3UtoHOcdAPD/rFYrrQqOnPiRlkCWGNJSUVuyUFr1UreUokMoIT30vNhyLLyWg6QU2ZRG6ePeQ049pQfdQg8lvRvac0NKyVXHQCGXnHSqyszO7EMa7a5s2do6v5+YnW/me8w3/3nt7CAmgK+tlbmoPookVube3E6n93YXWxO7i1N5disiahFRiai2R5GsR5Z7Ix/im+nMvHzSafhf/cv5cG357c+/2vuiPVXNh6x80ldvuNrRWTv5EI2ImMjHR00e0+Inhxff197NY9sbVXcN04BdKQIXf3qiVuGJHRyx08n7+N/Z56DqJzlugTGVtK+bR8xGzETEdET7qp+fHSrPtnenb+esOwAAAAAnVT95lRf2Yz+249zT6A4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8r/L3/yf5UCnSjUiK9//X8nmRp9tzx8rwFyF+NtUeP3r6nQEAAAAAAACAp+7V/diP7ThXTB8k2TP/13qe8X8j3ovNWI2NuBrb0Yyt2IqNWIiI2Z6GatvNra2NhaxmxIUBNa/HpyU1rx/fxxunvM4AAAAAAAAAMOaG/Sf+3clOcqdI/DZWus//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgHCQRE+1RNlwo0rNRqUbEdFFuJ+LTiKidbW9PJCmb+ejZ9wMAAACeyHT/ZDI9Qp0X3o/92I5zxfRBkt3zX8rul6fjvViPrViLrWjFatzK76HTu/7K3u5ia2938V46HG33x1+eqOtZi9H+7aF8yS9nJepxO9ayOVfjZiRxkKnkrby8t7uYju+V9+uDtE/Jj3IDejPRk76Vflz+JEv/sf9XhGp79N8TrelJVY7Nmc1yJzsRmc/7ltY4X0SgPBJ9W6dsN6kOXNJCVDq//FwYvKTymH8weJ1nDpUq/eXmTByOxPWodLbQpcGRiPj23z7+5Z3W+t07tzfnxmeVSr0/tMThSCz2ROLycxSJ4eazSFzsTK/Ez+IXMRdfTr0VG7EWv4pmbMVqo8hv5vtz+jk7OFKfzfROvTWsJ+kx2eicv8r61Ii+PkUjfpqlmvFatk3PxVokcT8iVuON7O96LHTOBt0tfHGEo74ywpm2x5XvZKNOmKJ+fNm/jNbkaUnjer4nrr3n3Nksr3dON0ovlkapuNaNfj3qUf1Wnkhb+N3A68OzdjgSCz2ReOm4/aUd0j9nV5PN1vrdjTvNd0dc3uv5OD2O/jBWV4l0bV6M6XzlzmefSXZMzWd5L3WusP3xquVPXNoqR/Iuduq1j9Sfx/241Xekfj+WYimWs9KXstKTR65Yad7lTkv95/A0L/2mVe082On9vnU/Wu3vQwCMt5nvztTq/6n/s/5R/ff1O/U3p38y9YOpV2ox+Y/JH1bnJ16vvJL8NT6K33Tv/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMe3+eDh3WartbpRnqiUZyWDazVbB8WLxAaU6Usk+atyRiicbD54eDC0wcGJqbx7j1n9NBPFa/iGF24MbKf6RN1Idg5vr+nh26J4y9MIi0iOBDyt/NihK5bcnTM5BpvycKJxeg0WO2xP1sn33nrZ9pqIiLLCQ04cE6dx9gHO0rWte+9e23zw8Htr95rvrL6zuj65tLQ8v7z0xuK122ut1fn2Z0+F6hl2FjhVvV8nOmoR8erwugNe1AoAAAAAAAAAAAA8Rc/ifyHOeh0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/28rc1F9FEkszF+dT6f3dhdb6VCkuyWrEVGJiOTXEcnfI25Ee4jZnuaS45bz4dry259/tfdFt61qUb4SsXNsvdHs5EM0ImIiH59WezeHt1frJqdKspNOZNKAXSkCB2ftfwEAAP//jLTthw==")
creat(&(0x7f0000000100)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0)
preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0)

3.431918662s ago: executing program 2 (id=650):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, 0x0, &(0x7f0000000080))

2.578888308s ago: executing program 2 (id=658):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_clone(0x20042400, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x4206, r1)
tkill(r1, 0x12)
ptrace(0x4208, r1)
ptrace$PTRACE_SETSIGMASK(0x420b, r1, 0x0, 0x0)
setpgid(r0, r0)
waitid(0x2, r0, 0x0, 0x4, 0x0)
pwrite64(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0xfecc)

2.42421841s ago: executing program 34 (id=658):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_clone(0x20042400, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x4206, r1)
tkill(r1, 0x12)
ptrace(0x4208, r1)
ptrace$PTRACE_SETSIGMASK(0x420b, r1, 0x0, 0x0)
setpgid(r0, r0)
waitid(0x2, r0, 0x0, 0x4, 0x0)
pwrite64(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0xfecc)

1.452545071s ago: executing program 4 (id=664):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newtaction={0xf0, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x4, 0x8000446, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, 0xfffffffd}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x405}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8010}, 0x44830)

1.196253632s ago: executing program 4 (id=668):
r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0, 0x13f, 0xa}}, 0xfe2f)
openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r3}, 0x10)
pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0x3, 0x8, 0x2, 0xc, 0xfffffffffffffffc, 0x3}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0x400d, 0x4, 0x2, 0x466}, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f00000005c0)={0x1, 0xfffffffc, 0x0, 0x10001, 0xffffffffffffffff, 0xfffffffffffff748, 0x5, 0x9, 0x0, 0x2c, 0x1, 0x1})

1.091052713s ago: executing program 0 (id=671):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r6, 0x400448dd, &(0x7f0000001400))
sendmsg$nl_route(r0, 0x0, 0x0)

1.029704726s ago: executing program 0 (id=672):
r0 = syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$media(0x0, 0x66, 0x180502)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
get_robust_list(r0, 0x0, 0x0)

912.6785ms ago: executing program 0 (id=673):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd24, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x50200, 0x11023}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0x2}, @IFLA_BOND_ALL_SLAVES_ACTIVE={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4044810)

284.601456ms ago: executing program 0 (id=674):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0)
close(0x3)
epoll_create1(0x0)
write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz0\x00', {0x7, 0x1, 0x2, 0x3}, 0x2, [0x5, 0x5, 0x81, 0x8, 0x4, 0x1000, 0x50000, 0x1, 0x10001, 0xffffa103, 0x3, 0x6, 0x6, 0x6, 0x7, 0x3, 0x6, 0x0, 0x40, 0x5, 0x800, 0x3eb, 0xb8f, 0x3, 0x400, 0xc, 0x800006, 0x0, 0xfffffffa, 0xdc, 0xffffffff, 0xa1bc, 0x200, 0x7, 0x6, 0x5, 0x3, 0x1, 0x0, 0x8, 0x2, 0x400, 0x7a08, 0x200, 0x3, 0x6, 0x7ff, 0x7f, 0x1c, 0x7, 0xe, 0x9, 0x5, 0xa, 0x3, 0x2, 0xf7, 0xfff, 0x71, 0x5, 0x1ac0, 0x4f, 0x6, 0x8], [0x5, 0x3ff, 0x6, 0xea, 0x3, 0x0, 0xcd, 0x1c5936c5, 0x9, 0xfffffff8, 0x4, 0x1, 0x7, 0x6, 0xa, 0x4, 0x2, 0x4, 0x5, 0x2, 0x0, 0x6, 0x9, 0x1, 0x9, 0x6, 0x5e5893ee, 0xfffffff7, 0x9, 0x10000, 0x3, 0x8001, 0x2e6d, 0x7ff, 0x1, 0x1000, 0x877, 0x9, 0x8, 0x8, 0x80000000, 0xfff, 0x5, 0x7, 0x8, 0x5, 0x75da, 0x2, 0x5, 0xe8, 0x3, 0x9, 0x101, 0x7, 0xb99c, 0x2, 0x1, 0x4, 0x4, 0x1, 0x1, 0x9, 0x2, 0xc406], [0x80000001, 0x0, 0x9, 0x9, 0x0, 0xb9, 0x897, 0x5, 0x0, 0x4, 0x2, 0x5, 0x3, 0x9, 0x9, 0x7, 0x9, 0x61, 0x6, 0x8, 0x9, 0x8, 0x2, 0x6, 0x8001, 0x4, 0xc, 0x80000000, 0x7fffffff, 0x1, 0x1, 0xffffffff, 0x8, 0x3, 0x2, 0x5, 0x3, 0x2, 0x1, 0x24, 0x9, 0x2000000, 0x6, 0xff, 0x7, 0x3eef6cc9, 0x1, 0x7, 0x7, 0x8bd, 0x9, 0xfffffff9, 0x80000001, 0x5, 0xffffff1d, 0x6, 0x1, 0xa, 0xfff, 0x0, 0x1, 0x1, 0x19ee, 0xfffffff9], [0x0, 0x10, 0x101, 0x2, 0x4, 0x9c500, 0xef, 0x8, 0xc61, 0x7, 0xd, 0x358, 0xd567, 0x1d5, 0xc8b, 0x658, 0xcbfd, 0x101, 0x6, 0x5, 0xb, 0x5, 0x40000006, 0x3, 0x75d6, 0xb26, 0x3ff, 0xa, 0x9, 0x0, 0x1, 0xf412, 0x2, 0x2, 0x2, 0x3, 0x3, 0x9, 0x3, 0x5, 0x3, 0x3, 0xfffffff3, 0x8000, 0x6, 0x6, 0xffbf, 0x80, 0xf, 0xfff, 0xfff, 0xffff, 0xfffffffe, 0x80, 0xb975, 0x5, 0x6, 0xa, 0xffff58ee, 0x2, 0x2530, 0x4, 0x26da282, 0x7fffffff]}, 0x45c)

280.244643ms ago: executing program 4 (id=675):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @empty}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x881)
r1 = dup(r0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x85, &(0x7f0000000540)={0x0, 0x88, "0200000000000000703fcd09bdf0b493d4323725cdcff2eae49f89843a5318d5ba093aa761132b512e8c4eb4eb76aa3f3069d1d5a64a2c75a2d59986feff48dc51b23de50b4c052630642b3348c700b558041310b18d364b87808f6ec3b597fae6ac116b5bc6c564f98676e592103c268225b716a73e58c8c8f8ec21e15e7a5d6743243dfde8a664"}, &(0x7f00000000c0)=0x90)

212.28597ms ago: executing program 0 (id=676):
ioperm(0x700, 0x8000, 0x2)

212.203457ms ago: executing program 0 (id=677):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)

102.137795ms ago: executing program 4 (id=678):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0x200000, &(0x7f0000000340)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '866'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@uni_xlateno}, {@numtail}, {@shortname_mixed}, {@utf8no}, {@shortname_win95}, {@shortname_win95}, {@rodir}]}, 0x81, 0x29b, &(0x7f0000000580)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

82.455439ms ago: executing program 4 (id=679):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000140)=0x3, 0x4)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000240)=':', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c)
sendto$inet6(r0, &(0x7f0000003ac0)="efc177", 0x3, 0x40000, 0x0, 0x0)

0s ago: executing program 4 (id=680):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000000, 0x10012, r0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:25831' (ED25519) to the list of known hosts.
syzkaller login: [   55.855206][ T5831] cgroup: Unknown subsys name 'net'
[   56.019682][ T5831] cgroup: Unknown subsys name 'cpuset'
[   56.025995][ T5831] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.593902][ T5831] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   62.478717][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   62.482249][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   62.485168][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   62.488683][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   62.496220][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   62.507949][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   62.516900][ T5236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   62.527907][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   62.535699][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   62.539584][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   62.658195][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   62.661736][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   62.669411][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   62.676699][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   62.680419][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   62.692535][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   62.820191][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.823801][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.828034][ T5845] bridge_slave_0: entered allmulticast mode
[   62.832121][ T5845] bridge_slave_0: entered promiscuous mode
[   62.853930][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.857339][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.860443][ T5845] bridge_slave_1: entered allmulticast mode
[   62.864377][ T5845] bridge_slave_1: entered promiscuous mode
[   62.914012][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.922182][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.959273][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   62.969971][ T5845] team0: Port device team_slave_0 added
[   62.980026][ T5845] team0: Port device team_slave_1 added
[   63.019286][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.022340][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.033595][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.041555][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.044582][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.055906][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.170411][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.173458][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.176890][ T5849] bridge_slave_0: entered allmulticast mode
[   63.180847][ T5849] bridge_slave_0: entered promiscuous mode
[   63.211114][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.214221][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.217366][ T5849] bridge_slave_1: entered allmulticast mode
[   63.221272][ T5849] bridge_slave_1: entered promiscuous mode
[   63.247736][ T5845] hsr_slave_0: entered promiscuous mode
[   63.251131][ T5845] hsr_slave_1: entered promiscuous mode
[   63.315743][ T5857] chnl_net:caif_netlink_parms(): no params data found
[   63.335977][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.361870][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.411833][ T5849] team0: Port device team_slave_0 added
[   63.440492][ T5849] team0: Port device team_slave_1 added
[   63.484992][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.488007][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.490866][ T5857] bridge_slave_0: entered allmulticast mode
[   63.494202][ T5857] bridge_slave_0: entered promiscuous mode
[   63.510680][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.513695][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.525365][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.532231][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.535110][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.538914][ T5857] bridge_slave_1: entered allmulticast mode
[   63.542395][ T5857] bridge_slave_1: entered promiscuous mode
[   63.563267][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.566110][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.576879][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.597279][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.620027][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.677406][ T5857] team0: Port device team_slave_0 added
[   63.681723][ T5857] team0: Port device team_slave_1 added
[   63.700004][ T5849] hsr_slave_0: entered promiscuous mode
[   63.703188][ T5849] hsr_slave_1: entered promiscuous mode
[   63.707567][ T5849] debugfs: 'hsr0' already exists in 'hsr'
[   63.709928][ T5849] Cannot create hsr debugfs directory
[   63.732688][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.735367][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.746409][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.772190][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.774965][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.790925][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.860637][ T5857] hsr_slave_0: entered promiscuous mode
[   63.863022][ T5857] hsr_slave_1: entered promiscuous mode
[   63.865162][ T5857] debugfs: 'hsr0' already exists in 'hsr'
[   63.868696][ T5857] Cannot create hsr debugfs directory
[   63.895186][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   63.919224][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   63.940792][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   63.952436][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   64.133275][ T5849] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.144109][ T5849] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.152744][ T5849] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.161349][ T5849] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.232389][ T5857] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   64.240712][ T5857] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   64.248503][ T5857] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   64.252813][ T5857] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   64.289887][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.318991][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   64.345005][  T571] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.348108][  T571] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.367656][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.377748][  T571] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.380176][  T571] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.406124][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   64.425471][  T571] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.427878][  T571] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.436250][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.441694][ T5845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   64.448692][ T2992] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.451733][ T2992] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.475191][ T5857] 8021q: adding VLAN 0 to HW filter on device team0
[   64.492861][ T2992] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.496015][ T2992] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.518335][ T2992] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.521490][ T2992] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.586636][ T5852] Bluetooth: hci1: command tx timeout
[   64.589272][ T5852] Bluetooth: hci0: command tx timeout
[   64.660411][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.736097][   T55] Bluetooth: hci2: command tx timeout
[   64.752130][ T5845] veth0_vlan: entered promiscuous mode
[   64.758188][ T5845] veth1_vlan: entered promiscuous mode
[   64.783820][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.800032][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.808611][ T5845] veth0_macvtap: entered promiscuous mode
[   64.814880][ T5845] veth1_macvtap: entered promiscuous mode
[   64.832450][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.843117][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.861682][ T5869] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.868156][ T5869] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.873246][ T5849] veth0_vlan: entered promiscuous mode
[   64.887450][ T5867] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.890466][ T5867] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.911145][ T5849] veth1_vlan: entered promiscuous mode
[   64.945280][ T5857] veth0_vlan: entered promiscuous mode
[   64.977286][ T5857] veth1_vlan: entered promiscuous mode
[   64.995303][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.006353][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.033286][ T5849] veth0_macvtap: entered promiscuous mode
[   65.041123][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.043245][ T5849] veth1_macvtap: entered promiscuous mode
[   65.044394][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.060055][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.069023][ T5857] veth0_macvtap: entered promiscuous mode
[   65.072734][ T5857] veth1_macvtap: entered promiscuous mode
[   65.078816][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.083836][ T5869] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.093121][ T5869] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.114115][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.115096][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   65.125160][ T5869] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.130846][ T5869] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.140922][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.158861][ T5867] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.162680][ T5867] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.213175][ T5867] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.221230][ T5867] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.254906][ T2992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.260442][ T2992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.279623][ T2992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.282646][ T2992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.315055][ T5913] loop0: detected capacity change from 0 to 1024
[   65.365968][ T2236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.368604][ T2236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.382376][ T5913] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   65.462801][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.467778][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.922344][ T5922] loop1: detected capacity change from 0 to 40427
[   65.928819][ T5922] F2FS-fs: Quota file already specified
[   66.103668][ T5928] loop1: detected capacity change from 0 to 2048
[   66.128350][ T5928] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   66.434431][ T5933] loop1: detected capacity change from 0 to 32768
[   66.437886][ T5933] =======================================================
[   66.437886][ T5933] WARNING: The mand mount option has been deprecated and
[   66.437886][ T5933]          and is ignored by this kernel. Remove the mand
[   66.437886][ T5933]          option from the mount to silence this warning.
[   66.437886][ T5933] =======================================================
[   66.468466][ T5933] bcachefs: bch2_fs_parse_param() Error parsing option gc_reserve_bytes: option_value
[   66.656191][   T55] Bluetooth: hci0: command tx timeout
[   66.658061][   T55] Bluetooth: hci1: command tx timeout
[   66.710141][ T5941] loop0: detected capacity change from 0 to 32768
[   66.740958][ T5947] loop2: detected capacity change from 0 to 512
[   66.756546][ T5947] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   66.783940][ T5947] EXT4-fs (loop2): 1 orphan inode deleted
[   66.795214][ T5947] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   66.807093][ T5947] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   66.807293][   T24] IPVS: starting estimator thread 0...
[   66.811498][ T2236] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   66.814223][ T5954] IPVS: sed: SCTP 172.20.20.187:0 - no destination available
[   66.817203][ T5852] Bluetooth: hci2: command tx timeout
[   66.834826][ T2236] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u9:4: Failed to release dquot type 1
[   66.869303][ T5857] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.905552][ T5955] IPVS: using max 80 ests per chain, 192000 per kthread
[   67.232647][ T5987] loop1: detected capacity change from 0 to 1024
[   67.529886][ T6004] raw_sendmsg: syz.1.36 forgot to set AF_INET. Fix it!
[   67.568473][ T6007] loop1: detected capacity change from 0 to 256
[   67.584543][ T6007] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[   67.739335][ T6005] loop0: detected capacity change from 0 to 32768
[   67.745997][ T6005] bcachefs (/dev/loop0): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section
[   67.745997][ T6005] clean (size 2912):
[   67.745997][ T6005] flags:          0
[   67.745997][ T6005] journal_seq:    8
[   67.745997][ T6005] prio_ptrs: 
[   67.745997][ T6005] usage: type=key_version v=0
[   67.745997][ T6005] usage: type=reserved v=0
[   67.745997][ T6005] usage: type=reserved v=0
[   67.745997][ T6005] usage: type=reserved v=0
[   67.745997][ T6005] usage: type=reserved v=0
[   67.745997][ T6005] data_usage: btree: 1/1 [0]=2816
[   67.745997][ T6005] data_usage: journal: 1/1 [0]=0
[   67.745997][ T6005] data_usage: user: 1/1 [0]=32
[   67.745997][ T6005] dev_usage: dev=0  
[   67.745997][ T6005]   free: buckets=83 sectors=0 fragmented=0
[   67.745997][ T6005]   sb: buckets=25 sectors=6152 fragmented=248
[   67.745997][ T6005]   journal: buckets=8 sectors=2048 fragmented=0
[   67.745997][ T6005]   btree: buckets=11 sectors=2816 fragmented=0
[   67.745997][ T6005]   user: buckets=1 sectors=32 fragmented=224
[   67.745997][ T6005]   cached: buckets=0 sectors=0 fragmented=0
[   67.745997][ T6005]   parity: buckets=0 sectors=0 fragmented=0
[   67.745997][ T6005]   stripe: buckets=0 sectors=0 fragmented=0
[   67.745997][ T6005]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[   67.745997][ T6005]   need_discard: buckets=0 sectors=0 fragmented=0
[   67.745997][ T6005] clock: read=0
[   67.745997][ T6005] clock: write=1288
[   67.745997][ T6005] btree_root: btree=extents level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 249e7ae2af8ee3
[   67.746099][ T6005] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[   67.869523][ T6011] loop2: detected capacity change from 0 to 512
[   67.883615][ T6011] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   67.903335][ T6011] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   67.911562][ T6011] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   67.964005][ T5857] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.108818][ T5869] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.175282][ T5869] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.228535][ T5869] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.310864][ T5869] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.316408][    T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   68.489924][    T9] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[   68.493793][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   68.500577][ T5869] bridge_slave_1: left allmulticast mode
[   68.503071][ T5869] bridge_slave_1: left promiscuous mode
[   68.516613][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.522213][    T9] usb 3-1: config 0 descriptor??
[   68.541482][    T9] gspca_main: cpia1-2.14.0 probing 0813:0001
[   68.550170][ T5869] bridge_slave_0: left allmulticast mode
[   68.553812][ T5869] bridge_slave_0: left promiscuous mode
[   68.564165][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.657838][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   68.663830][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   68.667335][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   68.670589][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   68.673520][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   68.738350][   T55] Bluetooth: hci0: command tx timeout
[   68.888587][ T5869] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   68.894566][ T5869] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   68.895527][   T55] Bluetooth: hci2: command tx timeout
[   68.902549][ T5869] bond0 (unregistering): Released all slaves
[   69.215809][ T6033] chnl_net:caif_netlink_parms(): no params data found
[   69.255659][ T5912] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   69.264700][ T5869] hsr_slave_0: left promiscuous mode
[   69.269509][ T5869] hsr_slave_1: left promiscuous mode
[   69.272324][ T5869] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   69.277558][ T5869] batman_adv: batadv0: Removing interface: batadv_slave_0
[   69.281730][ T5869] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   69.284914][ T5869] batman_adv: batadv0: Removing interface: batadv_slave_1
[   69.302340][ T5869] veth1_macvtap: left promiscuous mode
[   69.304900][ T5869] veth0_macvtap: left promiscuous mode
[   69.307695][ T5869] veth1_vlan: left promiscuous mode
[   69.310234][ T5869] veth0_vlan: left promiscuous mode
[   69.337685][    T9] gspca_cpia1: usb_control_msg 02, error -71
[   69.340872][    T9] gspca_cpia1: usb_control_msg 05, error -71
[   69.343595][    T9] gspca_cpia1: usb_control_msg 04, error -71
[   69.346773][    T9] cpia1 3-1:0.0: probe with driver cpia1 failed with error -71
[   69.353632][    T9] usb 3-1: USB disconnect, device number 2
[   69.405582][ T5912] usb 1-1: Using ep0 maxpacket: 32
[   69.409438][ T5912] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[   69.412509][ T5912] usb 1-1: config 0 has no interface number 0
[   69.422827][ T5912] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[   69.427341][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   69.430493][ T5912] usb 1-1: Product: syz
[   69.431911][ T5912] usb 1-1: Manufacturer: syz
[   69.433568][ T5912] usb 1-1: SerialNumber: syz
[   69.438557][ T5912] usb 1-1: config 0 descriptor??
[   69.449707][ T5912] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[   69.676850][ T5912] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[   69.690256][ T5869] team0 (unregistering): Port device team_slave_1 removed
[   69.692562][ T5912] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[   69.747095][ T5869] team0 (unregistering): Port device team_slave_0 removed
[   70.062061][    C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[   70.065326][ T5912] usb 1-1: USB disconnect, device number 2
[   70.094451][ T5912] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[   70.106922][ T5912] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[   70.115919][ T5912] quatech2 1-1:0.51: device disconnected
[   70.214844][ T6060] bond0: option xmit_hash_policy: invalid value (8)
[   70.221393][ T6033] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.234667][ T6033] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.238438][ T6033] bridge_slave_0: entered allmulticast mode
[   70.244759][ T6033] bridge_slave_0: entered promiscuous mode
[   70.256081][ T6033] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.258359][ T6033] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.272104][ T6033] bridge_slave_1: entered allmulticast mode
[   70.277457][ T6033] bridge_slave_1: entered promiscuous mode
[   70.358363][ T6033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.368132][ T6033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.421901][ T6033] team0: Port device team_slave_0 added
[   70.428471][ T6033] team0: Port device team_slave_1 added
[   70.469146][ T6033] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.471468][ T6033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.491353][ T6033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.499674][ T6033] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.503825][ T6033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.517564][ T6033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.623557][ T5869] IPVS: stop unused estimator thread 0...
[   70.632689][ T6033] hsr_slave_0: entered promiscuous mode
[   70.636173][ T6033] hsr_slave_1: entered promiscuous mode
[   70.646975][ T6033] debugfs: 'hsr0' already exists in 'hsr'
[   70.649466][ T6033] Cannot create hsr debugfs directory
[   70.745885][   T55] Bluetooth: hci1: command tx timeout
[   70.816508][   T55] Bluetooth: hci0: command tx timeout
[   70.841869][ T6033] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   70.861903][ T6033] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   70.867974][ T6033] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   70.880800][ T6033] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   70.943609][ T6033] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.946758][ T6033] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.949597][ T6033] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.952286][ T6033] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.978320][   T55] Bluetooth: hci2: command tx timeout
[   71.002389][ T6033] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.013221][ T2992] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.029057][ T2992] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.050808][ T6033] 8021q: adding VLAN 0 to HW filter on device team0
[   71.085110][ T2992] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.089017][ T2992] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.110158][ T2992] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.112533][ T2992] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.139810][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.141974][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.199008][ T6033] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   71.209261][ T6113] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.74' sets config #1
[   71.374941][ T6126] loop0: detected capacity change from 0 to 2048
[   71.388995][ T6033] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.429932][ T6130] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   71.439080][ T6033] veth0_vlan: entered promiscuous mode
[   71.443584][ T6033] veth1_vlan: entered promiscuous mode
[   71.461955][ T6033] veth0_macvtap: entered promiscuous mode
[   71.466102][ T6033] veth1_macvtap: entered promiscuous mode
[   71.480153][ T6033] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.486399][ T6033] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.492437][ T5869] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.507005][ T5869] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.521788][ T5869] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.525391][ T5869] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.531645][ T6130] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[   71.539807][ T6130] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4)
[   71.646356][ T6133] loop2: detected capacity change from 0 to 32768
[   71.651389][ T6133] (syz.2.80,6133,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   71.656662][ T6133] (syz.2.80,6133,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   71.667316][ T6133] JBD2: Ignoring recovery information on journal
[   71.688583][ T6133] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   71.703131][ T6130] Remounting filesystem read-only
[   71.719637][ T5845] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer
[   71.738607][ T6133] ocfs2: Unmounting device (7,2) on (node local)
[   71.819621][ T2236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.822210][ T2236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.856249][ T2992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.858913][ T2992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.489629][ T6159] loop0: detected capacity change from 0 to 40427
[   72.501667][ T6159] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[   72.510503][ T6159] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   72.518694][ T6159] F2FS-fs (loop0): invalid crc value
[   72.527690][ T6159] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[   72.556555][ T6159] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   72.562076][ T6159] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   72.564550][ T6159] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   72.580977][   T33] audit: type=1800 audit(1755076343.430:2): pid=6159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.84" name="bus" dev="loop0" ino=10 res=0 errno=0
[   72.825663][   T55] Bluetooth: hci1: command tx timeout
[   73.850016][ T6184] loop2: detected capacity change from 0 to 32768
[   73.881495][ T6184] XFS: noikeep mount option is deprecated.
[   73.992637][ T6184] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   74.191102][ T6184] XFS (loop2): Ending clean mount
[   74.235578][ T6184] XFS (loop2): Quotacheck needed: Please wait.
[   74.305797][ T6184] XFS (loop2): Quotacheck: Done.
[   74.493509][ T5857] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   74.885796][   T24] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[   74.895808][   T55] Bluetooth: hci1: command tx timeout
[   75.093049][   T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84
[   75.111937][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 47999, setting to 64
[   75.133946][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   75.146114][   T24] usb 4-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1
[   75.149737][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   75.152870][   T24] usb 4-1: Product: syz
[   75.154511][   T24] usb 4-1: Manufacturer: syz
[   75.172431][   T24] usb 4-1: SerialNumber: syz
[   75.178911][   T24] usb 4-1: config 0 descriptor??
[   75.181562][ T6222] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   75.225075][   T24] option 4-1:0.0: GSM modem (1-port) converter detected
[   75.481680][    T9] usb 4-1: USB disconnect, device number 2
[   75.515981][    T9] option 4-1:0.0: device disconnected
[   75.713152][ T6240] loop2: detected capacity change from 0 to 2048
[   75.770500][ T6241] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   75.825480][   T33] audit: type=1800 audit(1755076346.660:3): pid=6240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.103" name="file2" dev="loop2" ino=16 res=0 errno=0
[   75.837402][ T6241] NILFS (loop2): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3)
[   75.841869][ T6241] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=16)
[   75.848085][ T6241] Remounting filesystem read-only
[   75.880245][ T6240] NILFS (loop2): error -2 truncating bmap (ino=16)
[   75.944815][ T5857] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer
[   76.110751][ T6246] netlink: 28 bytes leftover after parsing attributes in process `syz.3.105'.
[   76.111200][ T6244] loop2: detected capacity change from 0 to 4096
[   76.189663][ T6250] netlink: 16 bytes leftover after parsing attributes in process `syz.0.106'.
[   76.225499][   T33] audit: type=1804 audit(1755076347.070:4): pid=6244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.104" name="/newroot/39/file0/file0" dev="loop2" ino=0 res=1 errno=0
[   76.308560][ T6252] netlink: 16 bytes leftover after parsing attributes in process `syz.3.108'.
[   76.320664][ T6257] netlink: 'syz.2.110': attribute type 6 has an invalid length.
[   76.323801][ T6257] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.110'.
[   76.369284][ T6259] loop2: detected capacity change from 0 to 512
[   76.381074][ T6259] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   76.391927][ T6259] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ce01c, mo2=0002]
[   76.395363][ T6259] System zones: 1-12
[   76.401811][ T6259] EXT4-fs (loop2): orphan cleanup on readonly fs
[   76.408799][ T6259] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.111: invalid indirect mapped block 12 (level 1)
[   76.416996][ T6259] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.111: invalid indirect mapped block 2 (level 2)
[   76.424239][ T6259] EXT4-fs (loop2): 1 truncate cleaned up
[   76.430573][ T6259] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback.
[   76.462813][ T5857] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[   76.976253][   T55] Bluetooth: hci1: command tx timeout
[   77.257771][ T6302] loop0: detected capacity change from 0 to 1024
[   77.270973][ T6302] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   77.291380][ T6302] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #11: comm syz.0.124: missing EA_INODE flag
[   77.298502][ T6302] EXT4-fs (loop0): Remounting filesystem read-only
[   77.300838][ T6302] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   77.337773][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.542285][ T6325] netlink: 32 bytes leftover after parsing attributes in process `syz.0.134'.
[   77.561109][ T6325] Zero length message leads to an empty skb
[   77.592144][ T6328] loop3: detected capacity change from 0 to 512
[   77.614384][ T6328] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.136: bad orphan inode 13
[   77.622089][ T6329] netlink: 20 bytes leftover after parsing attributes in process `syz.2.135'.
[   77.625211][ T6328] ext4_test_bit(bit=12, block=4) = 1
[   77.627785][ T6328] is_bad_inode(inode)=0
[   77.629956][ T6328] NEXT_ORPHAN(inode)=0
[   77.633537][ T6328] max_ino=32
[   77.634982][ T6328] i_nlink=1
[   77.641023][ T6328] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   77.663568][ T6328] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.136: Unrecognised inode hash code 20
[   77.675609][ T6328] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.136: Corrupt directory, running e2fsck is recommended
[   77.689578][ T6328] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 13: comm syz.3.136: path /15/file0: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[   77.706381][ T6336] netlink: 'syz.0.139': attribute type 2 has an invalid length.
[   77.717908][ T6328] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.3.136: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[   77.756188][ T6033] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.787300][ T6339] unsupported nla_type 52263
[   77.814679][ T6339] loop0: detected capacity change from 0 to 65
[   77.835869][ T6339] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing
[   77.845743][ T6339] BFS-fs: bfs_fill_super(): NOTE: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anyway
[   77.926603][ T6342] [U] 
[   77.988857][ T6345] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   78.412266][ T6358] loop3: detected capacity change from 0 to 1024
[   78.426305][ T6358] EXT4-fs: Ignoring removed oldalloc option
[   78.455109][ T6358] EXT4-fs: Ignoring removed bh option
[   78.501161][ T6358] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   78.556252][ T6358] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.149: Allocating blocks 497-513 which overlap fs metadata
[   78.568006][ T6358] EXT4-fs (loop3): pa ffff88802b8dd658: logic 1, phys. 449, len 4
[   78.570789][ T6358] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 2, pa_free 3
[   78.732149][ T6033] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.826542][ T6368] loop2: detected capacity change from 0 to 1764
[   79.161323][ T6373] loop3: detected capacity change from 0 to 8192
[   79.208422][ T5851]  loop3: p1[EZD] p2 p3 p4
[   79.220388][ T5851] loop3: p3 start 117772289 is beyond EOD, truncated
[   79.222599][ T5851] loop3: p4 size 262144 extends beyond EOD, truncated
[   79.247756][ T6373]  loop3: p1[EZD] p2 p3 p4
[   79.287890][ T6373] loop3: p3 start 117772289 is beyond EOD, truncated
[   79.291463][ T6373] loop3: p4 size 262144 extends beyond EOD, truncated
[   79.428008][ T6383] netlink: 'syz.2.158': attribute type 3 has an invalid length.
[   79.447642][ T6385] openvswitch: netlink: IP tunnel dst address not specified
[   79.488829][ T5846] udevd[5846]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[   79.493785][ T5851] udevd[5851]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[   79.497568][ T5853] udevd[5853]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[   80.848896][ T6418] loop0: detected capacity change from 0 to 65536
[   80.986449][ T6418] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   81.117121][ T6418] XFS (loop0): Ending clean mount
[   81.199932][   T33] audit: type=1800 audit(1755076352.050:5): pid=6418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.170" name="file2" dev="loop0" ino=42 res=0 errno=0
[   81.366806][   T33] audit: type=1800 audit(1755076352.200:6): pid=6436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.173" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[   81.439148][ T6438] bfs: Unknown parameter 'ip6_vti0'
[   81.828891][ T1271] cfg80211: failed to load regulatory.db
[   82.097778][ T6448] loop2: detected capacity change from 0 to 512
[   82.101005][ T6448] EXT4-fs: Ignoring removed nomblk_io_submit option
[   82.131627][ T6448] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[   82.141528][ T5845] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   82.147732][ T6448] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[   82.155218][ T6448] EXT4-fs (loop2): Remounting filesystem read-only
[   82.168419][ T6448] EXT4-fs (loop2): 1 truncate cleaned up
[   82.171857][ T6448] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   82.286212][ T5857] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.471988][ T6461] loop3: detected capacity change from 0 to 4096
[   82.486776][ T6461] ntfs3(loop3): Unsupported bytes per MFT record 8192.
[   82.490401][ T6461] ntfs3(loop3): try to read out of volume at offset 0x1ffe00
[   82.560549][ T6471] loop2: detected capacity change from 0 to 1024
[   82.585163][ T6471] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   82.620170][ T6471] EXT4-fs error (device loop2): __ext4_remount:6736: comm syz.2.186: Abort forced by user
[   82.629194][ T6471] EXT4-fs (loop2): Remounting filesystem read-only
[   82.632006][ T6471] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000.
[   82.711632][ T5857] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.834501][   T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   82.840181][   T33] audit: type=1326 audit(1755076353.680:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6492 comm="syz.0.196" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6a458ebe9 code=0x7ffc0000
[   82.881326][   T24] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   82.886321][   T33] audit: type=1326 audit(1755076353.680:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6492 comm="syz.0.196" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6a458ebe9 code=0x7ffc0000
[   82.908638][   T33] audit: type=1326 audit(1755076353.710:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6492 comm="syz.0.196" exe="/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7fc6a458ebe9 code=0x7ffc0000
[   82.928421][   T33] audit: type=1326 audit(1755076353.720:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6492 comm="syz.0.196" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6a458ebe9 code=0x7ffc0000
[   82.939150][   T33] audit: type=1326 audit(1755076353.720:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6492 comm="syz.0.196" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6a458ebe9 code=0x7ffc0000
[   82.957237][ T6500] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5
[   83.285947][   T51] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[   83.357131][ T6526] loop3: detected capacity change from 0 to 2048
[   83.447516][   T51] usb 1-1: not running at top speed; connect to a high speed hub
[   83.451262][   T51] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   83.454843][   T51] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   83.458113][   T51] usb 1-1: config 1 has no interface number 1
[   83.460112][   T51] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[   83.464243][   T51] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4
[   83.473638][   T51] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   83.476994][   T51] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.479730][   T51] usb 1-1: Product: syz
[   83.481178][   T51] usb 1-1: Manufacturer: syz
[   83.482634][   T51] usb 1-1: SerialNumber: syz
[   83.521297][ T6526]  loop3: p1 < > p4
[   83.521297][ T6526]  p4: <solaris:  cannot handle version 793669 vtoc>
[   83.531494][ T6526] loop3: p4 size 722688 extends beyond EOD, truncated
[   83.856500][   T51] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor
[   83.889003][   T51] usb 1-1: USB disconnect, device number 3
[   84.302912][ T6556] loop2: detected capacity change from 0 to 2048
[   84.314006][ T6558] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   84.354384][ T6558] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[   84.358749][ T6558] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4)
[   84.362634][ T6558] Remounting filesystem read-only
[   84.364951][ T5857] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer
[   84.814565][ T6572] loop0: detected capacity change from 0 to 64
[   85.095968][   T51] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   85.241553][ T6567] Process accounting resumed
[   85.265573][   T51] usb 3-1: Using ep0 maxpacket: 8
[   85.272853][   T51] usb 3-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11
[   85.281662][   T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.284994][   T51] usb 3-1: Product: syz
[   85.289644][   T51] usb 3-1: Manufacturer: syz
[   85.291550][   T51] usb 3-1: SerialNumber: syz
[   85.296166][ T6593] support for the xor transformation has been removed.
[   85.297233][   T51] usb 3-1: config 0 descriptor??
[   85.304300][   T51] gspca_main: vc032x-2.14.0 probing 046d:0896
[   85.516350][   T51] gspca_vc032x: reg_r err -71
[   85.521259][   T51] vc032x 3-1:0.0: probe with driver vc032x failed with error -71
[   85.532358][   T51] usb 3-1: USB disconnect, device number 3
[   85.581630][ T6612] loop0: detected capacity change from 0 to 1024
[   85.600999][ T6612] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   85.664802][ T6612] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   86.001235][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.751336][ T6646] loop0: detected capacity change from 0 to 2048
[   86.757856][ T6646] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[   86.763993][ T6646] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   86.814771][ T6650] loop3: detected capacity change from 0 to 4096
[   86.830456][ T6652] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   86.919328][ T6659] netlink: 'syz.0.263': attribute type 10 has an invalid length.
[   86.941327][ T6659] team0: Port device wlan1 added
[   87.214394][ T6661] loop3: detected capacity change from 0 to 40427
[   87.221312][ T6661] F2FS-fs (loop3): Image doesn't support compression
[   87.224272][ T6661] F2FS-fs (loop3): build fault injection rate: 693
[   87.230314][ T6661] F2FS-fs (loop3): invalid crc value
[   87.277025][ T6661] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   87.282763][ T6661] F2FS-fs (loop3): Start checkpoint disabled!
[   87.290762][ T6661] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[   87.314642][ T1089] kworker/u10:5: attempt to access beyond end of device
[   87.314642][ T1089] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   87.320536][ T1089] CPU: 1 UID: 0 PID: 1089 Comm: kworker/u10:5 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[   87.320555][ T1089] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   87.320563][ T1089] Workqueue: writeback wb_workfn (flush-7:3)
[   87.320584][ T1089] Call Trace:
[   87.320590][ T1089]  <TASK>
[   87.320595][ T1089]  dump_stack_lvl+0x189/0x250
[   87.320611][ T1089]  ? __pfx_dump_stack_lvl+0x10/0x10
[   87.320625][ T1089]  ? __pfx_queue_work_on+0x10/0x10
[   87.320635][ T1089]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   87.320649][ T1089]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   87.320698][ T1089]  f2fs_handle_critical_error+0x37c/0x540
[   87.320716][ T1089]  f2fs_write_end_io+0x886/0xb60
[   87.320745][ T1089]  __submit_merged_bio+0x27a/0x6a0
[   87.320764][ T1089]  __submit_merged_write_cond+0x255/0x530
[   87.320784][ T1089]  f2fs_write_data_pages+0x261d/0x3000
[   87.320818][ T1089]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   87.320843][ T1089]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[   87.320887][ T1089]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[   87.320911][ T1089]  ? trace_f2fs_writepages+0x7f/0x200
[   87.320922][ T1089]  ? f2fs_write_node_pages+0x478/0x6e0
[   87.320938][ T1089]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[   87.320964][ T1089]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   87.320979][ T1089]  do_writepages+0x32e/0x550
[   87.320998][ T1089]  ? reacquire_held_locks+0x127/0x1d0
[   87.321009][ T1089]  ? writeback_sb_inodes+0x384/0x1010
[   87.321030][ T1089]  __writeback_single_inode+0x145/0xff0
[   87.321043][ T1089]  ? do_raw_spin_unlock+0x4d/0x240
[   87.321056][ T1089]  writeback_sb_inodes+0x6c7/0x1010
[   87.321091][ T1089]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   87.321138][ T1089]  ? rcu_is_watching+0x15/0xb0
[   87.321152][ T1089]  wb_writeback+0x43b/0xaf0
[   87.321173][ T1089]  ? queue_io+0x391/0x590
[   87.321190][ T1089]  ? __pfx_wb_writeback+0x10/0x10
[   87.321210][ T1089]  ? _raw_spin_unlock_irq+0x23/0x50
[   87.321227][ T1089]  wb_workfn+0x409/0xef0
[   87.321247][ T1089]  ? __pfx_wb_workfn+0x10/0x10
[   87.321260][ T1089]  ? __lock_acquire+0xab9/0xd20
[   87.321284][ T1089]  ? process_scheduled_works+0x9ef/0x17b0
[   87.321301][ T1089]  ? _raw_spin_unlock_irq+0x23/0x50
[   87.321311][ T1089]  ? process_scheduled_works+0x9ef/0x17b0
[   87.321321][ T1089]  ? process_scheduled_works+0x9ef/0x17b0
[   87.321333][ T1089]  process_scheduled_works+0xae1/0x17b0
[   87.321361][ T1089]  ? __pfx_process_scheduled_works+0x10/0x10
[   87.321392][ T1089]  worker_thread+0x8a0/0xda0
[   87.321425][ T1089]  kthread+0x711/0x8a0
[   87.321443][ T1089]  ? __pfx_worker_thread+0x10/0x10
[   87.321454][ T1089]  ? __pfx_kthread+0x10/0x10
[   87.321468][ T1089]  ? _raw_spin_unlock_irq+0x23/0x50
[   87.321476][ T1089]  ? lockdep_hardirqs_on+0x9c/0x150
[   87.321487][ T1089]  ? __pfx_kthread+0x10/0x10
[   87.321501][ T1089]  ret_from_fork+0x3fc/0x770
[   87.321515][ T1089]  ? __pfx_ret_from_fork+0x10/0x10
[   87.321537][ T1089]  ? __switch_to_asm+0x39/0x70
[   87.321550][ T1089]  ? __switch_to_asm+0x33/0x70
[   87.321562][ T1089]  ? __pfx_kthread+0x10/0x10
[   87.321575][ T1089]  ret_from_fork_asm+0x1a/0x30
[   87.321598][ T1089]  </TASK>
[   87.321603][ T1089] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[   87.825158][ T6699] warning: `syz.2.280' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   87.898942][ T6707] loop3: detected capacity change from 0 to 1024
[   87.903165][ T6707] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[   87.908549][ T6707] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   87.919290][ T6707] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   87.940309][ T6033] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.143251][ T6726] Bluetooth: MGMT ver 1.23
[   88.186211][   T33] audit: type=1326 audit(1755076359.040:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6730 comm="syz.2.294" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f598d98ebe9 code=0x0
[   88.195258][ T6731] loop0: detected capacity change from 0 to 4096
[   88.202948][ T6731] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   88.285694][ T5929] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   89.153603][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.159392][ T5929] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255
[   89.164679][ T5929] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0
[   89.170183][ T5929] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   89.174323][ T5929] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   89.181145][ T5929] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[   89.185089][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.190524][ T5929] usb 4-1: config 0 descriptor??
[   89.194643][ T5929] usb-storage 4-1:0.0: USB Mass Storage device detected
[   89.204882][ T5929] usb-storage 4-1:0.0: Quirks match for vid 1908 pid 1315: 20000
[   89.215631][ T6742] : renamed from veth0_vlan (while UP)
[   89.403583][ T5929] usb 4-1: USB disconnect, device number 3
[   89.933226][ T6751] loop3: detected capacity change from 0 to 64
[   90.575591][ T6770] netlink: del zone limit has 4 unknown bytes
[   90.862112][ T6778] capability: warning: `syz.0.312' uses 32-bit capabilities (legacy support in use)
[   91.016121][ T6782] loop0: detected capacity change from 0 to 2048
[   91.023311][ T6782] EXT4-fs warning (device loop0): ext4_multi_mount_protect:318: fsck is running on the filesystem
[   91.028000][ T6782] EXT4-fs warning (device loop0): ext4_multi_mount_protect:318: MMP failure info: last update time: 1669132791, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4
[   91.038176][ T6786] loop3: detected capacity change from 0 to 256
[   91.043608][ T6786] exFAT-fs (loop3): bogus data start sector
[   91.053729][ T6786] exFAT-fs (loop3): failed to read boot sector
[   91.059794][ T6786] exFAT-fs (loop3): failed to recognize exfat type
[   91.602167][ T6812] Driver unsupported XDP return value 0 on prog  (id 28) dev N/A, expect packet loss!
[   91.681843][ T6818] loop3: detected capacity change from 0 to 512
[   91.701052][ T6818] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.330: casefold flag without casefold feature
[   91.705310][ T6818] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.330: couldn't read orphan inode 15 (err -117)
[   91.713842][ T6818] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   91.772640][ T6033] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.803724][ T6828] loop0: detected capacity change from 0 to 2048
[   91.809074][ T6828] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   91.927281][ T6830] loop3: detected capacity change from 0 to 32768
[   91.930677][ T6830] bcachefs (/dev/loop3): error validating superblock: Invalid superblock section journal_v2: journal buckets entry with bad nr: 21474967553+0
[   91.930677][ T6830] journal_v2 (size 2912):
[   91.930677][ T6830] Buckets:  0-10 21474902017-21474902025 21474967553-21474967553 21474836481-21474836481 21491613697-21491613697 21508390913-21508390913 21525168129-21525168129 25769803778-25769806594 65795-25769869573 0-65794 25769803778-25769803794 65796-34359804197 0-0 0-83 0-0 25-6177 248-256 2048-2048 11-2827 0-1 16-256 0-0 0-0 0-0 0-0 0-0 0-0 0-0 0-30064771074 0-0 30064771074-30064771075 1280-4294968587 1179915-1179915 18446744069414584320-18446744069414584319 18446744073709551615-18446744073709551615 14322110933576210885-14322110933576210901 0-0 110593-4295143436 1179915-1179915 18446744069414584320-18446744069414584319 18446744073709551615-18446744073709551615 8469488994664696954-8469488994664696978 0-0 155649-4295254028 393483-459019 18446744069414584320-18446744069414584319 18446744073709551615-18446744073709551615 11142619451731364831-11142619451731364
[   91.930779][ T6830] bcachefs: bch2_fs_get_tree() error: invalid_sb_journal
[   92.144772][ T6850] loop3: detected capacity change from 0 to 128
[   92.150490][ T6850] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   92.154701][ T6850] ext4 filesystem being mounted at /90/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   92.170944][ T6033] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   92.208348][ T6853] loop3: detected capacity change from 0 to 1024
[   92.229977][ T6853] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   92.305541][ T5912] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   92.467464][ T5912] usb 3-1: New USB device found, idVendor=0c45, idProduct=62a0, bcdDevice=a8.22
[   92.470717][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.477699][ T5912] usb 3-1: config 0 descriptor??
[   92.488557][ T5912] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62a0
[   92.695047][ T5912] gspca_sn9c20x: Write register 1000 failed -71
[   92.699455][ T5912] gspca_sn9c20x: Device initialization failed
[   92.701750][ T5912] gspca_sn9c20x 3-1:0.0: probe with driver gspca_sn9c20x failed with error -71
[   92.711282][ T5912] usb 3-1: USB disconnect, device number 4
[   93.085529][   T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   93.265814][   T24] usb 1-1: Using ep0 maxpacket: 32
[   93.277155][   T24] usb 1-1: config 0 has an invalid interface number: 89 but max is 0
[   93.279945][   T24] usb 1-1: config 0 has no interface number 0
[   93.282013][   T24] usb 1-1: config 0 interface 89 has no altsetting 0
[   93.288079][   T24] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[   93.291195][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.294005][   T24] usb 1-1: Product: syz
[   93.298387][   T24] usb 1-1: Manufacturer: syz
[   93.301762][   T24] usb 1-1: SerialNumber: syz
[   93.313407][   T24] usb 1-1: config 0 descriptor??
[   93.324556][   T24] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[   93.327889][   T24] em28xx 1-1:0.89: Video interface 89 found: bulk
[   93.376069][ T6033] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.432761][ T6867] loop2: detected capacity change from 0 to 8
[   93.524611][ T6873] loop3: detected capacity change from 0 to 512
[   93.544287][ T6873] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   93.552594][ T6873] ext4 filesystem being mounted at /94/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[   93.565073][ T6873] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #4: comm syz.3.354: corrupted inode contents
[   93.573613][ T6873] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #4: comm syz.3.354: mark_inode_dirty error
[   93.582512][ T6873] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #4: comm syz.3.354: corrupted inode contents
[   93.589170][ T6873] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #4: comm syz.3.354: mark_inode_dirty error
[   93.594870][ T6873] Quota error (device loop3): write_blk: dquota write failed
[   93.598942][ T6873] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5
[   93.602708][ T6873] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[   93.609514][ T6873] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.354: Failed to acquire dquot type 1
[   93.649499][ T6033] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.940463][   T24] em28xx 1-1:0.89: unknown em28xx chip ID (0)
[   94.014836][ T6905] netlink: 12 bytes leftover after parsing attributes in process `syz.3.368'.
[   94.155710][ T5929] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   94.285017][ T6908] loop3: detected capacity change from 0 to 32768
[   94.291441][ T6908] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.369 (6908)
[   94.307387][ T6908] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   94.312256][ T6908] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[   94.316378][ T6908] BTRFS info (device loop3): disk space caching is enabled
[   94.319584][ T6908] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   94.325616][ T5929] usb 3-1: Using ep0 maxpacket: 16
[   94.333239][ T5929] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[   94.339337][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[   94.342883][ T5929] usb 3-1: Product: syz
[   94.344819][ T5929] usb 3-1: Manufacturer: syz
[   94.353013][ T5929] usb 3-1: SerialNumber: syz
[   94.359995][ T5929] usb 3-1: config 0 descriptor??
[   94.368575][ T6908] BTRFS info (device loop3): rebuilding free space tree
[   94.394114][ T6908] BTRFS info (device loop3): disabling free space tree
[   94.396971][ T6908] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   94.400574][ T6908] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   94.458629][ T6033] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   94.556491][   T24] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[   94.560086][   T24] em28xx 1-1:0.89: board has no eeprom
[   94.574727][ T5929] usb 3-1: USB disconnect, device number 5
[   94.629819][   T24] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67)
[   94.632881][   T24] em28xx 1-1:0.89: analog set to bulk mode.
[   94.636463][  T792] em28xx 1-1:0.89: Registering V4L2 extension
[   94.637763][ T6931] netlink: 40 bytes leftover after parsing attributes in process `syz.3.373'.
[   94.648916][   T24] usb 1-1: USB disconnect, device number 4
[   94.652433][   T24] em28xx 1-1:0.89: Disconnecting em28xx
[   94.678037][  T792] em28xx 1-1:0.89: Config register raw data: 0xffffffed
[   94.681847][  T792] em28xx 1-1:0.89: AC97 chip type couldn't be determined
[   94.687372][  T792] em28xx 1-1:0.89: No AC97 audio processor
[   94.698738][  T792] usb 1-1: Decoder not found
[   94.700690][  T792] em28xx 1-1:0.89: failed to create media graph
[   94.704110][  T792] em28xx 1-1:0.89: V4L2 device video103 deregistered
[   94.712261][  T792] em28xx 1-1:0.89: Registering snapshot button...
[   94.716421][  T792] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input6
[   94.727987][  T792] em28xx 1-1:0.89: Remote control support is not available for this card.
[   94.732777][   T24] em28xx 1-1:0.89: Closing input extension
[   94.736265][   T24] em28xx 1-1:0.89: Deregistering snapshot button
[   94.751810][   T24] em28xx 1-1:0.89: Freeing device
[   94.823910][ T6940] loop6: detected capacity change from 0 to 524287999
[   94.828194][ T6940] Buffer I/O error on dev loop6, logical block 0, async page read
[   94.831657][ T6940] Buffer I/O error on dev loop6, logical block 0, async page read
[   94.835052][ T6940] Buffer I/O error on dev loop6, logical block 0, async page read
[   94.839167][ T6940] Buffer I/O error on dev loop6, logical block 0, async page read
[   94.842481][ T6940] Buffer I/O error on dev loop6, logical block 0, async page read
[   94.847365][ T6940] Buffer I/O error on dev loop6, logical block 0, async page read
[   94.850799][ T6940] Buffer I/O error on dev loop6, logical block 0, async page read
[   94.854148][ T6940] Buffer I/O error on dev loop6, logical block 0, async page read
[   94.857597][ T6940] ldm_validate_partition_table(): Disk read failed.
[   94.860407][ T6940] Buffer I/O error on dev loop6, logical block 0, async page read
[   94.863848][ T6940] Buffer I/O error on dev loop6, logical block 0, async page read
[   94.868911][ T6940] Dev loop6: unable to read RDB block 0
[   94.871604][ T6940]  loop6: unable to read partition table
[   94.874744][ T6940] loop_reread_partitions: partition scan of loop6 (3xC) failed (rc=-5)
[   95.148547][ T6959] loop2: detected capacity change from 0 to 1024
[   95.167549][ T6959] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   95.180740][ T6959] EXT4-fs error (device loop2): ext4_free_inode:354: comm syz.2.386: bit already cleared for inode 15
[   95.209955][ T5857] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.251025][ T6969] loop0: detected capacity change from 0 to 512
[   95.259897][ T6969] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.390: casefold flag without casefold feature
[   95.265753][ T6969] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.390: couldn't read orphan inode 15 (err -117)
[   95.272143][ T6969] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   95.284909][ T6971] loop3: detected capacity change from 0 to 512
[   95.296988][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.303237][ T6971] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   95.307490][ T6971] EXT4-fs (loop3): orphan cleanup on readonly fs
[   95.310518][ T6971] Quota error (device loop3): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6).
[   95.315124][ T6971] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   95.321559][ T6971] EXT4-fs (loop3): Cannot turn on quotas: error -117
[   95.323594][ T6979] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.392'.
[   95.325714][ T6971] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.391: bg 0: block 40: padding at end of block bitmap is not set
[   95.332675][ T6971] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem
[   95.338487][ T6971] EXT4-fs (loop3): 1 truncate cleaned up
[   95.341988][ T6971] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   95.364893][ T6033] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.583450][ T6997] syz.0.401 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   95.638108][ T1271] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   95.796463][ T1271] usb 4-1: Using ep0 maxpacket: 32
[   95.802840][ T1271] usb 4-1: New USB device found, idVendor=04e2, idProduct=1403, bcdDevice=1c.b2
[   95.806866][ T1271] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.809588][ T1271] usb 4-1: Product: syz
[   95.811075][ T1271] usb 4-1: Manufacturer: syz
[   95.812806][ T1271] usb 4-1: SerialNumber: syz
[   95.816011][ T1271] usb 4-1: config 0 descriptor??
[   95.819948][ T1271] xr_serial 4-1:0.0: invalid descriptor buffer length
[   95.866526][ T5929] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   96.025213][ T1271] usb 4-1: USB disconnect, device number 4
[   96.035540][ T5929] usb 1-1: Using ep0 maxpacket: 16
[   96.039437][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   96.043753][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   96.047524][ T5929] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   96.052387][ T5929] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   96.056028][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.061144][ T5929] usb 1-1: config 0 descriptor??
[   96.208040][   T33] audit: type=1326 audit(1755076367.060:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7004 comm="syz.2.405" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f598d98ebe9 code=0x0
[   96.471036][ T5929] microsoft 0003:045E:07DA.0002: unbalanced delimiter at end of report description
[   96.474958][ T5929] microsoft 0003:045E:07DA.0002: parse failed
[   96.477597][ T5929] microsoft 0003:045E:07DA.0002: probe with driver microsoft failed with error -22
[   96.681563][ T5912] usb 1-1: USB disconnect, device number 5
[   97.266154][ T7019] loop2: detected capacity change from 0 to 32768
[   97.269803][ T7019] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.410 (7019)
[   97.279128][ T7019] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   97.283749][ T7019] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[   97.287662][ T7019] BTRFS info (device loop2): using free-space-tree
[   97.290340][ T7023] program syz.0.412 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   97.384376][ T5857] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   97.419303][ T7041] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   97.426409][ T7041] batadv_slave_0: entered promiscuous mode
[   97.628209][ T7043] loop3: detected capacity change from 0 to 128
[   98.200676][ T7053] loop3: detected capacity change from 0 to 32768
[   98.214815][ T7053] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[   98.247361][ T7053] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[   98.288388][ T7053] __find_get_block_slow() failed. block=504403158265495552, b_blocknr=0, b_state=0x00000019, b_size=512, device loop3 blocksize: 512
[   98.293261][ T7053] grow_buffers: requested out-of-range block 504403158265495552 for device loop3
[   98.300553][ T7053] (syz.3.419,7053,0):ocfs2_read_blocks:239 ERROR: status = -12
[   98.303451][ T7053] (syz.3.419,7053,0):ocfs2_search_chain:1852 ERROR: status = -12
[   98.307084][ T7053] (syz.3.419,7053,0):ocfs2_search_chain:1940 ERROR: status = -12
[   98.309953][ T7053] (syz.3.419,7053,0):ocfs2_claim_suballoc_bits:2010 ERROR: status = -12
[   98.312786][ T7053] (syz.3.419,7053,0):ocfs2_claim_suballoc_bits:2063 ERROR: status = -12
[   98.316516][ T7053] (syz.3.419,7053,0):__ocfs2_claim_clusters:2438 ERROR: status = -12
[   98.322178][ T7053] (syz.3.419,7053,0):__ocfs2_claim_clusters:2446 ERROR: status = -12
[   98.325879][ T7053] (syz.3.419,7053,0):ocfs2_local_alloc_new_window:1199 ERROR: status = -12
[   98.329575][ T7053] (syz.3.419,7053,0):ocfs2_local_alloc_new_window:1224 ERROR: status = -12
[   98.333221][ T7053] (syz.3.419,7053,0):ocfs2_local_alloc_slide_window:1298 ERROR: status = -12
[   98.337800][ T7053] (syz.3.419,7053,0):ocfs2_local_alloc_slide_window:1317 ERROR: status = -12
[   98.343230][ T7053] (syz.3.419,7053,0):ocfs2_reserve_local_alloc_bits:672 ERROR: status = -12
[   98.347103][ T7053] (syz.3.419,7053,0):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -12
[   98.351248][ T7053] (syz.3.419,7053,0):ocfs2_reserve_clusters_with_limit:1172 ERROR: status = -12
[   98.355012][ T7053] (syz.3.419,7053,0):ocfs2_reserve_clusters_with_limit:1221 ERROR: status = -12
[   98.358943][ T7053] (syz.3.419,7053,0):ocfs2_mknod:360 ERROR: status = -12
[   98.362878][ T7053] (syz.3.419,7053,0):ocfs2_mknod:505 ERROR: status = -12
[   98.366447][ T7053] (syz.3.419,7053,0):ocfs2_mkdir:661 ERROR: status = -12
[   98.468550][ T6033] ocfs2: Unmounting device (7,3) on (node local)
[   98.744808][ T7067] loop3: detected capacity change from 0 to 1024
[   98.789575][ T7067] hfsplus: bad catalog entry type
[   98.836206][ T2236] hfsplus: b-tree write err: -5, ino 4
[   99.021216][ T7081] loop2: detected capacity change from 0 to 512
[   99.024184][ T7081] EXT4-fs (loop2): external journal device major/minor numbers have changed
[   99.031209][ T7081] EXT4-fs (loop2): failed to open journal device unknown-block(8,0) -16
[   99.066066][ T7083] openvswitch: netlink: IP tunnel dst address not specified
[   99.095574][ T1271] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   99.111152][ T7085] loop2: detected capacity change from 0 to 4096
[   99.113810][ T7073] loop0: detected capacity change from 0 to 40427
[   99.114063][ T7085] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[   99.118093][ T7073] F2FS-fs (loop0): invalid crc value
[   99.128881][ T7085] ntfs3(loop2): ino=1a, mi_enum_attr
[   99.131236][ T7085] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[   99.135030][ T7085] ntfs3(loop2): ino=1a, mi_enum_attr
[   99.136970][ T7085] ntfs3(loop2): Failed to initialize $Extend/$Reparse.
[   99.155878][ T7073] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[   99.159385][ T7073] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   99.209653][ T7093] loop2: detected capacity change from 0 to 16
[   99.229396][ T7093] erofs (device loop2): mounted with root inode @ nid 36.
[   99.249531][ T1271] usb 4-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 185
[   99.253573][ T1271] usb 4-1: config 0 interface 0 has no altsetting 0
[   99.260975][ T1271] usb 4-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3
[   99.265656][ T1271] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.268883][ T1271] usb 4-1: Product: syz
[   99.270667][ T1271] usb 4-1: Manufacturer: syz
[   99.273065][ T1271] usb 4-1: SerialNumber: syz
[   99.287727][ T1271] usb 4-1: config 0 descriptor??
[   99.292494][ T7071] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   99.301672][ T1271] keyspan 4-1:0.0: Keyspan 2 port adapter converter detected
[   99.305063][ T1271] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7
[   99.312164][ T1271] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81
[   99.315355][ T1271] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1
[   99.318770][ T1271] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2
[   99.321999][ T1271] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85
[   99.325175][ T1271] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5
[   99.337510][ T1271] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[   99.343196][ T1271] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83
[   99.346650][ T1271] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 3
[   99.350043][ T1271] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4
[   99.353320][ T1271] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 86
[   99.358223][ T1271] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 6
[   99.362687][ T1271] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[   99.709935][ T5929] usb 4-1: USB disconnect, device number 5
[   99.801980][ T5929] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[   99.840211][ T5929] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[   99.843829][ T5929] keyspan 4-1:0.0: device disconnected
[  100.510140][ T7114] loop3: detected capacity change from 0 to 32768
[  100.520267][ T7114] XFS (loop3): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  100.540046][ T7114] XFS (loop3): Ending clean mount
[  100.543066][ T7114] XFS (loop3): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xe0, xfs_finobt block 0x20 
[  100.548666][ T7114] XFS (loop3): Unmount and run xfs_repair
[  100.551182][ T7114] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  100.554240][ T7114] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff  FIB3............
[  100.558145][ T7114] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40  ....... .......@
[  100.562045][ T7114] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a  ...B..N....xv...
[  100.566036][ T7114] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37  .......F......@7
[  100.569808][ T7114] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00  ................
[  100.573525][ T7114] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00  ................
[  100.578220][ T7114] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  100.581826][ T7114] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  100.586195][ T7114] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x20 len 8 error 74
[  100.591370][ T7114] XFS (loop3): Failed to initialize disk quotas, err -117.
[  100.615826][ T5912] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[  100.619490][ T6033] XFS (loop3): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  100.628850][ T6033] XFS (loop3): Uncorrected metadata errors detected; please run xfs_repair.
[  100.767547][ T5912] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  100.771045][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.781176][ T5912] usb 3-1: config 0 descriptor??
[  100.784816][ T5912] cp210x 3-1:0.0: cp210x converter detected
[  100.803112][ T7134] loop0: detected capacity change from 0 to 128
[  100.880249][ T7136] loop0: detected capacity change from 0 to 512
[  100.890944][ T7136] EXT4-fs (loop0): invalid inodes per group: 0
[  100.890944][ T7136] 
[  101.188899][ T7156] binder: 7154:7156 ioctl c0306201 200000000240 returned -14
[  101.195232][ T5912] cp210x 3-1:0.0: failed to get vendor val 0x370c size 13: -32
[  101.206809][ T5912] cp210x 3-1:0.0: GPIO initialisation failed: -32
[  101.211520][ T5912] usb 3-1: cp210x converter now attached to ttyUSB0
[  101.221200][ T5912] usb 3-1: USB disconnect, device number 6
[  101.235337][ T5912] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  101.238903][ T5912] cp210x 3-1:0.0: device disconnected
[  101.291586][ T7165] loop0: detected capacity change from 0 to 256
[  101.294901][ T7165] exfat: Deprecated parameter 'utf8'
[  101.298876][ T7165] exfat: Deprecated parameter 'utf8'
[  101.301120][ T7165] exfat: Deprecated parameter 'utf8'
[  101.310728][ T7165] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x743489c8, utbl_chksum : 0xe619d30d)
[  101.400502][ T7173] loop3: detected capacity change from 0 to 2048
[  101.413071][ T7176] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  101.424093][ T7173] NILFS (loop3): failed to count free inodes: err=-34
[  101.455647][ T7178] netlink: 108 bytes leftover after parsing attributes in process `syz.0.469'.
[  101.726803][ T5912] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  101.775165][ T7201] loop0: detected capacity change from 0 to 2048
[  101.779058][ T7201] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  101.791508][ T7202] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  101.800904][   T33] audit: type=1800 audit(1755076372.650:14): pid=7201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.475" name="file1" dev="loop0" ino=15 res=0 errno=0
[  101.802100][ T7201] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  101.817565][ T7201] Remounting filesystem read-only
[  101.886709][ T5912] usb 4-1: Using ep0 maxpacket: 8
[  101.897370][ T5912] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  101.901236][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 255, changing to 11
[  101.906999][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 59391, setting to 1024
[  101.919313][ T5912] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  101.922798][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.928205][ T5912] usb 4-1: Product: syz
[  101.930352][ T5912] usb 4-1: Manufacturer: syz
[  101.932137][ T5912] usb 4-1: SerialNumber: syz
[  101.936755][ T5912] usb 4-1: config 0 descriptor??
[  101.940238][ T7180] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  102.005679][ T7199] loop2: detected capacity change from 0 to 32768
[  102.010634][ T7199] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.474 (7199)
[  102.018531][ T7199] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  102.022886][ T7199] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  102.026254][ T7199] BTRFS info (device loop2): using free-space-tree
[  102.054388][ T7224] program syz.0.478 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  102.149319][ T5909] usb 4-1: USB disconnect, device number 6
[  102.621583][ T5857] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  102.830671][ T7230] loop2: detected capacity change from 0 to 8192
[  102.848547][ T7230] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  103.038530][ T7242] 9pnet_fd: p9_fd_create_tcp (7242): problem connecting socket to 127.0.0.1
[  103.522268][ T7240] loop2: detected capacity change from 0 to 32768
[  103.531430][ T7240] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.483 (7240)
[  103.547507][ T7240] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  103.552200][ T7240] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  103.557081][ T7240] BTRFS info (device loop2): using free-space-tree
[  103.686502][ T7240] BTRFS info (device loop2): rebuilding free space tree
[  103.861353][ T5857] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  104.410118][ T7271] netlink: 'syz.0.493': attribute type 3 has an invalid length.
[  104.685523][ T5912] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  104.846677][ T5912] usb 1-1: Using ep0 maxpacket: 8
[  104.853276][ T5912] usb 1-1: config 150 has an invalid interface number: 204 but max is 1
[  104.857279][ T5912] usb 1-1: config 150 has no interface number 0
[  104.858387][ T7279] netlink: 'syz.2.492': attribute type 1 has an invalid length.
[  104.859643][ T5912] usb 1-1: config 150 interface 204 has no altsetting 0
[  104.859664][ T5912] usb 1-1: config 150 interface 1 has no altsetting 0
[  104.862131][ T7279] netlink: 'syz.2.492': attribute type 2 has an invalid length.
[  104.866665][ T5912] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  104.867496][ T7279] netlink: 1172 bytes leftover after parsing attributes in process `syz.2.492'.
[  104.869490][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.884179][ T5912] usb 1-1: Product: syz
[  104.885718][ T5912] usb 1-1: Manufacturer: syz
[  104.887240][ T5912] usb 1-1: SerialNumber: syz
[  105.096545][ T5912] xr_serial 1-1:150.204: xr_serial converter detected
[  105.899126][ T5912] xr_serial ttyUSB0: Failed to set reg 0x0e: -71
[  105.901987][ T5912] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  105.909022][ T5912] usb 1-1: USB disconnect, device number 6
[  105.912790][ T5912] xr_serial 1-1:150.204: device disconnected
[  106.201907][ T7302] syzkaller1: entered promiscuous mode
[  106.204208][ T7302] syzkaller1: entered allmulticast mode
[  106.528358][ T5912] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  106.695552][ T5912] usb 3-1: Using ep0 maxpacket: 8
[  106.703645][ T5912] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  106.708968][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.712982][ T5912] usb 3-1: Product: syz
[  106.715381][ T5912] usb 3-1: Manufacturer: syz
[  106.717117][ T5912] usb 3-1: SerialNumber: syz
[  106.721428][ T5912] usb 3-1: config 0 descriptor??
[  106.741005][ T7313] loop0: detected capacity change from 0 to 32768
[  106.765669][ T7313] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  106.785968][ T7313] process 'syz.0.510' launched './file0' with NULL argv: empty string added
[  106.820865][ T5845] ocfs2: Unmounting device (7,0) on (node local)
[  106.940833][ T5912] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  107.085603][   T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  107.238996][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  107.242921][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  107.246680][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  107.256792][   T10] usb 4-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4
[  107.260500][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.263812][   T10] usb 4-1: Product: syz
[  107.265783][   T10] usb 4-1: Manufacturer: syz
[  107.267757][   T10] usb 4-1: SerialNumber: syz
[  107.274254][   T10] usb 4-1: config 0 descriptor??
[  107.487456][   T24] usb 4-1: USB disconnect, device number 7
[  107.792163][ T7322] binder: 7321:7322 ioctl c018620c 2000000000c0 returned -22
[  107.849995][ T1271] kernel write not supported for file /binder/transactions (pid: 1271 comm: kworker/0:2)
[  107.911537][ T7330] loop0: detected capacity change from 0 to 256
[  107.955140][ T5912] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  107.959554][ T5912] usb 3-1: USB disconnect, device number 7
[  108.087206][ T7340] loop3: detected capacity change from 0 to 2048
[  108.094811][ T7340] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  108.109353][ T7340] overlayfs: upper fs needs to support d_type.
[  108.114546][ T7340] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  108.117557][ T7340] overlayfs: failed to set xattr on upper
[  108.119878][ T7340] overlayfs: ...falling back to redirect_dir=nofollow.
[  108.122642][ T7340] overlayfs: ...falling back to index=off.
[  108.151318][ T6033] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh
[  108.156182][ T6033] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh
[  108.215567][   T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  108.362722][   T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.378651][   T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  108.395494][   T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  108.400977][   T24] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  108.404632][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  108.408069][   T24] usb 1-1: SerialNumber: syz
[  108.433000][   T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.515759][   T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.620697][   T24] usb 1-1: 0:2 : does not exist
[  108.626673][   T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.632629][   T24] usb 1-1: USB disconnect, device number 7
[  108.692231][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  108.698485][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  108.703121][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  108.707557][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  108.710971][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  108.745677][ T5912] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  108.751849][   T13] bridge_slave_1: left allmulticast mode
[  108.754183][   T13] bridge_slave_1: left promiscuous mode
[  108.757629][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.774704][   T13] bridge_slave_0: left allmulticast mode
[  108.778842][   T13] bridge_slave_0: left promiscuous mode
[  108.781286][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.911513][ T5912] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  108.915178][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.918894][ T5912] usb 3-1: Product: syz
[  108.920533][ T5912] usb 3-1: Manufacturer: syz
[  108.922280][ T5912] usb 3-1: SerialNumber: syz
[  108.930090][ T5912] usb 3-1: config 0 descriptor??
[  108.934063][ T5912] ch341 3-1:0.0: ch341-uart converter detected
[  109.100058][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  109.104977][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  109.110425][   T13] bond0 (unregistering): Released all slaves
[  109.169812][ T7350] capability: warning: `syz.0.528' uses deprecated v2 capabilities in a way that may be insecure
[  109.362091][ T7346] chnl_net:caif_netlink_parms(): no params data found
[  109.452166][   T13] hsr_slave_0: left promiscuous mode
[  109.455245][   T13] hsr_slave_1: left promiscuous mode
[  109.459338][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  109.462254][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  109.467005][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  109.469829][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  109.487820][   T13] veth1_macvtap: left promiscuous mode
[  109.489753][   T13] veth0_macvtap: left promiscuous mode
[  109.492300][   T13] veth1_vlan: left promiscuous mode
[  109.494023][   T13] veth0_vlan: left promiscuous mode
[  109.544301][ T5912] usb 3-1: failed to send control message: -71
[  109.546652][ T5912] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[  109.557023][ T5912] usb 3-1: USB disconnect, device number 8
[  109.563291][ T5912] ch341 3-1:0.0: device disconnected
[  109.928732][   T13] team0 (unregistering): Port device team_slave_1 removed
[  109.948508][   T13] team0 (unregistering): Port device team_slave_0 removed
[  110.270903][ T7346] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.277883][ T7346] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.287015][ T7346] bridge_slave_0: entered allmulticast mode
[  110.298245][ T7346] bridge_slave_0: entered promiscuous mode
[  110.304817][ T7346] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.310096][ T7346] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.313099][ T7346] bridge_slave_1: entered allmulticast mode
[  110.319610][ T7346] bridge_slave_1: entered promiscuous mode
[  110.360133][ T7346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  110.364986][ T7346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  110.390399][ T7346] team0: Port device team_slave_0 added
[  110.395144][ T7346] team0: Port device team_slave_1 added
[  110.418541][ T7346] batman_adv: batadv0: Adding interface: batadv_slave_0
[  110.421182][ T7346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  110.433503][ T7346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  110.441019][ T7346] batman_adv: batadv0: Adding interface: batadv_slave_1
[  110.443740][ T7346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  110.456896][ T7346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  110.502654][ T7346] hsr_slave_0: entered promiscuous mode
[  110.506411][ T7346] hsr_slave_1: entered promiscuous mode
[  110.509416][ T7346] debugfs: 'hsr0' already exists in 'hsr'
[  110.511646][ T7346] Cannot create hsr debugfs directory
[  110.692294][ T7346] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  110.702481][ T7346] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  110.713155][ T7346] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  110.721695][ T7346] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  110.766225][ T5852] Bluetooth: hci1: command tx timeout
[  110.842327][ T7346] 8021q: adding VLAN 0 to HW filter on device bond0
[  110.873612][ T7346] 8021q: adding VLAN 0 to HW filter on device team0
[  110.892225][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.894690][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  110.911888][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.914235][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  110.929708][ T7376] loop0: detected capacity change from 0 to 131072
[  110.934017][ T7376] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0)
[  110.937000][ T7376] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  110.940770][ T7376] F2FS-fs (loop0): invalid crc value
[  110.975308][ T7376] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  110.983156][ T7376] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  110.986185][ T7376] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  110.989029][ T5912] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  111.100520][ T7346] 8021q: adding VLAN 0 to HW filter on device batadv0
[  111.146777][ T5912] usb 3-1: Using ep0 maxpacket: 8
[  111.156707][ T5912] usb 3-1: config 135 has an invalid interface number: 230 but max is 0
[  111.159528][ T5912] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  111.163341][ T5912] usb 3-1: config 135 has no interface number 0
[  111.175454][ T5912] usb 3-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30
[  111.179202][ T5912] usb 3-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53
[  111.183451][ T5912] usb 3-1: config 135 interface 230 has no altsetting 0
[  111.198291][ T5912] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  111.201212][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.203782][ T5912] usb 3-1: Product: syz
[  111.205169][ T5912] usb 3-1: Manufacturer: syz
[  111.215651][ T5912] usb 3-1: SerialNumber: syz
[  111.220686][ T5912] usb 3-1: Found UVC 0.00 device syz (18ec:3288)
[  111.222655][ T5912] usb 3-1: No valid video chain found.
[  111.289342][ T7346] veth0_vlan: entered promiscuous mode
[  111.298525][ T7346] veth1_vlan: entered promiscuous mode
[  111.327498][ T7346] veth0_macvtap: entered promiscuous mode
[  111.334940][ T7346] veth1_macvtap: entered promiscuous mode
[  111.353176][ T7346] batman_adv: batadv0: Interface activated: batadv_slave_0
[  111.363160][ T7346] batman_adv: batadv0: Interface activated: batadv_slave_1
[  111.374457][ T7398] ieee802154 phy0 wpan0: encryption failed: -22
[  111.375761][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  111.380231][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  111.383111][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  111.396549][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  111.428824][ T5912] usb 3-1: USB disconnect, device number 9
[  111.439832][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.442932][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.473499][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.477488][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.885610][ T5912] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  112.014983][ T7419] loop0: detected capacity change from 0 to 256
[  112.035535][ T5912] usb 5-1: Using ep0 maxpacket: 8
[  112.041661][ T5912] usb 5-1: config 0 has an invalid interface number: 52 but max is 0
[  112.047833][ T7419] FAT-fs (loop0): Directory bread(block 64) failed
[  112.051512][ T5912] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  112.056647][ T7419] FAT-fs (loop0): Directory bread(block 65) failed
[  112.059361][ T7419] FAT-fs (loop0): Directory bread(block 66) failed
[  112.062086][ T5912] usb 5-1: config 0 has no interface number 0
[  112.064621][ T5912] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  112.069070][ T7419] FAT-fs (loop0): Directory bread(block 67) failed
[  112.072050][ T5912] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  112.077444][ T5912] usb 5-1: config 0 interface 52 has no altsetting 0
[  112.086621][ T5912] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[  112.090460][ T5912] usb 5-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0
[  112.093791][ T5912] usb 5-1: Manufacturer: syz
[  112.104832][ T5912] usb 5-1: config 0 descriptor??
[  112.109348][ T5912] hub 5-1:0.52: bad descriptor, ignoring hub
[  112.112506][ T5912] hub 5-1:0.52: probe with driver hub failed with error -5
[  112.142852][ T7419] FAT-fs (loop0): Directory bread(block 68) failed
[  112.147894][ T7419] FAT-fs (loop0): Directory bread(block 69) failed
[  112.150770][ T7419] FAT-fs (loop0): Directory bread(block 70) failed
[  112.153680][ T7419] FAT-fs (loop0): Directory bread(block 71) failed
[  112.157128][ T7419] FAT-fs (loop0): Directory bread(block 72) failed
[  112.160007][ T7419] FAT-fs (loop0): Directory bread(block 73) failed
[  112.269639][ T7426] loop0: detected capacity change from 0 to 512
[  112.272417][ T7426] EXT4-fs: Ignoring removed nomblk_io_submit option
[  112.499781][ T7426] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  112.505197][ T7426] ext4 filesystem being mounted at /182/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  112.519645][ T5912] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.52/input/input7
[  112.535988][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.629889][   T33] audit: type=1326 audit(1755076383.480:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.0.553" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc6a458ebe9 code=0x0
[  112.805948][ T7348] usb 5-1: USB disconnect, device number 2
[  112.816582][ T5852] Bluetooth: hci1: command tx timeout
[  113.099182][ T7448] loop2: detected capacity change from 0 to 64
[  113.104143][ T7448] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  113.109395][ T7448] BFS-fs: bfs_iget(): Bad inode number loop2:00000002
[  113.149044][ T7450] loop2: detected capacity change from 0 to 128
[  113.156712][ T7450] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  113.163113][ T7450] ext4 filesystem being mounted at /181/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  113.195497][ T5857] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  113.279114][ T7458] loop4: detected capacity change from 0 to 128
[  113.391468][ T7462] loop2: detected capacity change from 0 to 4096
[  113.396258][ T7462] ntfs3(loop2): ino=3, Correct links count -> 2.
[  113.559592][ T7476] loop2: detected capacity change from 0 to 256
[  113.574265][ T7476] FAT-fs (loop2): Directory bread(block 64) failed
[  113.577903][ T7476] FAT-fs (loop2): Directory bread(block 65) failed
[  113.580609][ T7476] FAT-fs (loop2): Directory bread(block 66) failed
[  113.583321][ T7476] FAT-fs (loop2): Directory bread(block 67) failed
[  113.588795][ T7476] FAT-fs (loop2): Directory bread(block 68) failed
[  113.591543][ T7476] FAT-fs (loop2): Directory bread(block 69) failed
[  113.594325][ T7476] FAT-fs (loop2): Directory bread(block 70) failed
[  113.597085][ T7476] FAT-fs (loop2): Directory bread(block 71) failed
[  113.600892][ T7476] FAT-fs (loop2): Directory bread(block 72) failed
[  113.603722][ T7476] FAT-fs (loop2): Directory bread(block 73) failed
[  113.717391][ T7480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.573'.
[  113.755678][ T7348] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  113.774161][ T7482] loop2: detected capacity change from 0 to 2048
[  113.782926][ T7482] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  113.791221][ T7468] loop4: detected capacity change from 0 to 40427
[  113.792649][ T7482] syz.2.574: attempt to access beyond end of device
[  113.792649][ T7482] loop2: rw=0, sector=111568486480, nr_sectors = 2 limit=2048
[  113.795521][ T7468] F2FS-fs (loop4): build fault injection rate: 14
[  113.799304][ T7482] NILFS (loop2): I/O error reading meta-data file (ino=4, block-offset=0)
[  113.801762][ T7468] F2FS-fs (loop4): build fault injection type: 0xe
[  113.806605][ T7468] F2FS-fs (loop4): invalid crc value
[  113.809517][ T7482] NILFS (loop2): error -5 while loading last checkpoint (checkpoint number=2)
[  113.811023][ T7468] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970
[  113.818718][ T7468] F2FS-fs (loop4): inject kvmalloc in f2fs_kvmalloc of f2fs_fill_super+0x4462/0x6ff0
[  113.822679][ T7468] F2FS-fs (loop4): Failed to initialize F2FS node manager (-12)
[  113.905621][ T7348] usb 1-1: Using ep0 maxpacket: 32
[  113.921900][ T7348] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  113.931320][ T7348] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  113.942533][ T7348] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.949785][ T7348] usb 1-1: Product: syz
[  113.954074][ T7348] usb 1-1: Manufacturer: syz
[  113.967697][ T7348] usb 1-1: SerialNumber: syz
[  113.998452][ T7348] usb 1-1: config 0 descriptor??
[  114.011008][ T7348] cdc_ether 1-1:0.0: skipping garbage
[  114.016073][ T7348] usb 1-1: bad CDC descriptors
[  114.024361][ T7348] usb 1-1: unsupported MDLM descriptors
[  114.189748][ T7487] loop4: detected capacity change from 0 to 4096
[  114.196488][ T7487] ntfs3(loop4): ino=3, Correct links count -> 2.
[  114.554744][ T1271] usb 1-1: USB disconnect, device number 8
[  114.625633][ T7348] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  114.792123][ T7348] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  114.795347][ T7348] usb 5-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82
[  114.807478][ T7348] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.812972][ T7348] usb 5-1: config 0 descriptor??
[  114.819663][ T7348] smsusb:smsusb_probe: board id=8, interface number 0
[  114.822044][ T7348] smsusb:smsusb_probe: Device initialized with return code -19
[  114.898889][ T5852] Bluetooth: hci1: command tx timeout
[  115.093376][ T5929] usb 5-1: USB disconnect, device number 3
[  115.802688][ T7530] loop4: detected capacity change from 0 to 1024
[  115.806304][ T7530] EXT4-fs: Ignoring removed nobh option
[  115.810065][ T7530] EXT4-fs: Ignoring removed bh option
[  115.831328][ T7530] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  115.846385][ T7530] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt.
[  115.878932][ T7346] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.010867][ T7538] syz.4.596 uses obsolete (PF_INET,SOCK_PACKET)
[  116.018874][ T7538] syzkaller1: entered promiscuous mode
[  116.021143][ T7538] syzkaller1: entered allmulticast mode
[  116.424404][ T7553] netlink: 'syz.2.602': attribute type 21 has an invalid length.
[  116.427249][ T7553] netlink: 156 bytes leftover after parsing attributes in process `syz.2.602'.
[  116.460198][ T7553] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  116.463497][ T7553] overlayfs: failed to set xattr on upper
[  116.466076][ T7553] overlayfs: ...falling back to redirect_dir=nofollow.
[  116.468896][ T7553] overlayfs: ...falling back to index=off.
[  116.471354][ T7553] overlayfs: ...falling back to uuid=null.
[  116.612471][ T7559] IPVS: length: 140 != 8
[  116.976122][ T5852] Bluetooth: hci1: command tx timeout
[  117.245711][ T7567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.608'.
[  119.086404][ T7603] loop2: detected capacity change from 0 to 4096
[  119.103796][ T7608] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  119.120816][ T7603] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[  119.128643][ T7603] Remounting filesystem read-only
[  119.172878][ T7610] loop4: detected capacity change from 0 to 4096
[  119.384783][ T7610] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  119.391382][ T7610] ntfs3(loop4): Failed to load $Extend (-22).
[  119.395757][ T7610] ntfs3(loop4): Failed to initialize $Extend.
[  119.413770][ T7610] ntfs3(loop4): ino=1b, "file0" ntfs_readdir
[  119.461973][ T7615] loop4: detected capacity change from 0 to 164
[  119.473242][ T7615] ISOFS: unable to read i-node block
[  119.480590][ T7615] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  119.496058][   T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  119.553560][ T7623] netlink: 'syz.2.633': attribute type 21 has an invalid length.
[  119.567781][ T7623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.633'.
[  119.594291][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  119.600187][ T7623] netlink: 'syz.2.633': attribute type 21 has an invalid length.
[  119.605014][ T7623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.633'.
[  119.610567][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  119.615211][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  119.625321][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  119.657355][   T10] usb 1-1: config 0 has an invalid interface number: 171 but max is 0
[  119.660912][   T10] usb 1-1: config 0 has no interface number 0
[  119.663413][   T10] usb 1-1: config 0 interface 171 has no altsetting 0
[  119.673444][   T10] usb 1-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67
[  119.681261][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.684224][   T10] usb 1-1: Product: syz
[  119.687621][   T10] usb 1-1: Manufacturer: syz
[  119.691396][   T10] usb 1-1: SerialNumber: syz
[  119.700882][   T10] usb 1-1: config 0 descriptor??
[  119.769039][ T7621] loop4: detected capacity change from 0 to 32768
[  119.776584][ T7621] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  119.791197][ T7621] XFS (loop4): Ending clean mount
[  119.969422][   T10] dvb_usb_m920x 1-1:0.171: probe with driver dvb_usb_m920x failed with error -71
[  119.975572][   T10] usb 1-1: USB disconnect, device number 9
[  120.411786][ T7637] syz.4.632 (7637) used greatest stack depth: 19336 bytes left
[  120.499179][ T7346] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  120.625902][ T7649] loop0: detected capacity change from 0 to 2048
[  120.632771][ T7650] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  120.645321][ T7649] NILFS (loop0): error -2 truncating bmap (ino=16)
[  120.660357][ T7650] NILFS (loop0): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3)
[  120.663870][ T7650] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=16)
[  120.668579][ T7650] Remounting filesystem read-only
[  120.670484][ T5845] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer
[  120.985216][ T7667] loop2: detected capacity change from 0 to 1024
[  121.030368][ T5857] hfsplus: bad catalog entry type
[  121.031795][ T7659] loop4: detected capacity change from 0 to 40427
[  121.036501][ T7659] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  121.039951][ T7659] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  121.049096][ T7659] F2FS-fs (loop4): invalid crc value
[  121.105285][ T7659] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  121.111022][ T7659] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  121.114194][ T7659] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  121.164453][   T53] kworker/u9:3: attempt to access beyond end of device
[  121.164453][   T53] loop4: rw=1, sector=45096, nr_sectors = 16 limit=40427
[  121.527251][ T7653] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  121.529598][ T7653] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  121.572075][ T7653] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  121.574377][ T7653] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  121.807082][ T5912] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  121.837611][ T7686] loop0: detected capacity change from 0 to 736
[  121.871554][ T1089] hfsplus: b-tree write err: -5, ino 4
[  121.910706][ T7688] /dev/nullb0: Can't open blockdev
[  121.922270][ T5869] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  121.934154][ T5869] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.991974][ T5912] usb 5-1: not running at top speed; connect to a high speed hub
[  122.015549][ T5912] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  122.018153][ T5869] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  122.023697][ T5869] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.030193][ T5912] usb 5-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=ec.57
[  122.034001][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.041585][ T5912] usb 5-1: Product: syz
[  122.043379][ T5912] usb 5-1: Manufacturer: syz
[  122.045343][ T5912] usb 5-1: SerialNumber: syz
[  122.106540][ T5869] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  122.109854][ T5869] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.263455][ T5912] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner
[  122.283307][ T5869] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  122.288666][ T5869] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.297642][ T2397] pvrusb2: Invalid write control endpoint
[  122.298352][ T5912] usb 5-1: USB disconnect, device number 4
[  122.394263][ T7694] loop0: detected capacity change from 0 to 256
[  122.413214][ T7694] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  122.551680][ T2397] pvrusb2: Invalid write control endpoint
[  122.562546][ T2397] pvrusb2: Invalid write control endpoint
[  122.570019][ T2397] pvrusb2: Invalid write control endpoint
[  122.574974][ T2397] pvrusb2: Invalid write control endpoint
[  122.588272][ T2397] pvrusb2: Invalid write control endpoint
[  122.594011][ T2397] pvrusb2: Invalid write control endpoint
[  122.600236][ T2397] pvrusb2: Invalid write control endpoint
[  122.606283][ T2397] pvrusb2: Invalid write control endpoint
[  122.613860][ T2397] pvrusb2: Invalid write control endpoint
[  122.620305][ T2397] pvrusb2: Invalid write control endpoint
[  122.627644][ T2397] pvrusb2: Invalid write control endpoint
[  122.635490][ T2397] pvrusb2: Invalid write control endpoint
[  122.644096][ T2397] pvrusb2: Invalid write control endpoint
[  122.650219][ T2397] pvrusb2: Invalid write control endpoint
[  122.652191][ T2397] pvrusb2: Invalid write control endpoint
[  122.654084][ T2397] pvrusb2: Invalid write control endpoint
[  122.661390][ T2397] pvrusb2: Invalid write control endpoint
[  122.663293][ T2397] pvrusb2: Invalid write control endpoint
[  122.665169][ T2397] pvrusb2: Invalid write control endpoint
[  122.676440][ T2397] pvrusb2: Invalid write control endpoint
[  122.678309][ T2397] pvrusb2: Invalid write control endpoint
[  122.680194][ T2397] pvrusb2: Invalid write control endpoint
[  122.681966][ T2397] pvrusb2: Invalid write control endpoint
[  122.683806][ T2397] pvrusb2: Invalid write control endpoint
[  122.705866][ T2397] pvrusb2: Invalid write control endpoint
[  122.708542][ T2397] pvrusb2: Invalid write control endpoint
[  122.710972][ T2397] pvrusb2: Invalid write control endpoint
[  122.713504][ T2397] pvrusb2: Invalid write control endpoint
[  122.716225][ T2397] pvrusb2: Invalid write control endpoint
[  122.716608][ T5869] bridge_slave_1: left allmulticast mode
[  122.718801][ T2397] pvrusb2: Invalid write control endpoint
[  122.723500][ T2397] pvrusb2: Invalid write control endpoint
[  122.725710][ T5869] bridge_slave_1: left promiscuous mode
[  122.726253][ T2397] pvrusb2: Invalid write control endpoint
[  122.728732][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  122.732293][ T2397] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  122.737572][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.748255][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  122.752862][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  122.756959][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  122.760563][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  122.769706][ T5869] bridge_slave_0: left allmulticast mode
[  122.770425][ T2397] cs53l32a 2-0011: chip found @ 0x22 (pvrusb2_a)
[  122.774495][ T5869] bridge_slave_0: left promiscuous mode
[  122.774955][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  122.777920][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.780670][ T2397] pvrusb2: Invalid write control endpoint
[  122.786030][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  122.788194][ T2397] pvrusb2: Invalid write control endpoint
[  122.792672][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  122.794483][ T2397] pvrusb2: Invalid write control endpoint
[  122.798294][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  122.801997][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  122.802692][ T2397] pvrusb2: Invalid write control endpoint
[  122.811199][ T2397] pvrusb2: Invalid write control endpoint
[  122.814052][ T2397] pvrusb2: Invalid write control endpoint
[  122.830679][ T2397] pvrusb2: Invalid write control endpoint
[  122.833449][ T2397] pvrusb2: Invalid write control endpoint
[  122.836996][ T2397] pvrusb2: Invalid write control endpoint
[  122.839485][ T2397] pvrusb2: Invalid write control endpoint
[  122.842056][ T2397] pvrusb2: Invalid write control endpoint
[  122.844507][ T2397] pvrusb2: Invalid write control endpoint
[  122.847165][ T2397] pvrusb2: Invalid write control endpoint
[  122.849614][ T2397] pvrusb2: Invalid write control endpoint
[  122.851796][ T2397] pvrusb2: Invalid write control endpoint
[  122.853736][ T2397] pvrusb2: Invalid write control endpoint
[  122.856947][ T2397] pvrusb2: Invalid write control endpoint
[  122.858879][ T2397] pvrusb2: Invalid write control endpoint
[  122.860814][ T2397] pvrusb2: Invalid write control endpoint
[  122.862768][ T2397] pvrusb2: Invalid write control endpoint
[  122.864892][ T2397] pvrusb2: Invalid write control endpoint
[  122.870270][ T2397] pvrusb2: Attached sub-driver cs53l32a
[  122.883681][ T2397] pvrusb2: Invalid write control endpoint
[  122.886410][ T2397] pvrusb2: Invalid write control endpoint
[  122.888323][ T2397] pvrusb2: Invalid write control endpoint
[  122.890141][ T2397] pvrusb2: Invalid write control endpoint
[  122.891933][ T2397] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  122.898254][ T2397] pvrusb2: Device being rendered inoperable
[  122.900212][ T2397] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules.
[  122.906784][ T2397] pvrusb2: You need to resolve the failing condition before this driver can function.  There should be some earlier messages giving more information about the problem.
[  123.178152][ T5869] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  123.184678][ T5869] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  123.192871][ T5869] bond0 (unregistering): Released all slaves
[  123.207708][ T5869] bond1 (unregistering): Released all slaves
[  123.450356][ T7721] 8021q: adding VLAN 0 to HW filter on device bond1
[  123.462777][ T7721] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  123.471422][ T7721] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  123.488616][ T7695] chnl_net:caif_netlink_parms(): no params data found
[  123.530289][ T5869] hsr_slave_0: left promiscuous mode
[  123.532626][ T5869] hsr_slave_1: left promiscuous mode
[  123.534923][ T5869] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  123.538075][ T5869] batman_adv: batadv0: Removing interface: batadv_slave_0
[  123.541129][ T5869] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  123.543622][ T5869] batman_adv: batadv0: Removing interface: batadv_slave_1
[  123.555066][ T5869] veth1_macvtap: left promiscuous mode
[  123.558505][   T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  123.566120][ T5869] veth0_macvtap: left promiscuous mode
[  123.568418][ T5869] veth1_vlan: left promiscuous mode
[  123.570247][ T5869] veth0_vlan: left promiscuous mode
[  123.667117][   T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  123.845289][ T5869] team0 (unregistering): Port device team_slave_1 removed
[  123.879242][ T5869] team0 (unregistering): Port device team_slave_0 removed
[  124.218919][ T7695] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.222094][ T7695] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.229659][ T7695] bridge_slave_0: entered allmulticast mode
[  124.236147][ T7695] bridge_slave_0: entered promiscuous mode
[  124.241454][ T7695] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.244592][ T7695] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.248674][ T7695] bridge_slave_1: entered allmulticast mode
[  124.253234][ T7695] bridge_slave_1: entered promiscuous mode
[  124.321047][ T7695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  124.341846][ T7695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  124.389916][ T7744] loop4: detected capacity change from 0 to 256
[  124.515325][ T7695] team0: Port device team_slave_0 added
[  124.522495][ T7695] team0: Port device team_slave_1 added
[  124.556877][ T5869] ------------[ cut here ]------------
[  124.559658][ T5869] WARNING: CPU: 0 PID: 5869 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x81/0x100
[  124.563980][ T5869] Modules linked in:
[  124.566650][ T5869] CPU: 0 UID: 0 PID: 5869 Comm: kworker/u8:4 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  124.572566][ T5869] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  124.577350][ T5869] Workqueue: netns cleanup_net
[  124.579455][ T5869] RIP: 0010:xfrm6_tunnel_net_exit+0x81/0x100
[  124.582045][ T5869] Code: b5 40 e0 f7 4b 83 3c 2c 00 75 19 e8 09 d6 7c f7 49 81 fd f8 07 00 00 74 1d e8 fb d5 7c f7 49 83 c5 08 eb c9 e8 f0 d5 7c f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  124.590353][ T5869] RSP: 0018:ffffc90003acf8b0 EFLAGS: 00010293
[  124.592935][ T5869] RAX: ffffffff8a42d5c0 RBX: ffff888022780000 RCX: ffff888108d89cc0
[  124.596303][ T5869] RDX: 0000000000000000 RSI: ffffffff8d9b4449 RDI: ffff888022780000
[  124.599720][ T5869] RBP: ffffc90003acf9b0 R08: ffffffff8fa34237 R09: 1ffffffff1f46846
[  124.603130][ T5869] R10: dffffc0000000000 R11: fffffbfff1f46847 R12: ffff888022780000
[  124.606286][ T5869] R13: 0000000000000000 R14: ffff88802711a440 R15: dffffc0000000000
[  124.609449][ T5869] FS:  0000000000000000(0000) GS:ffff8880b8624000(0000) knlGS:0000000000000000
[  124.613152][ T5869] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  124.615997][ T5869] CR2: 0000200000000080 CR3: 000000002e89e000 CR4: 00000000000006f0
[  124.619262][ T5869] Call Trace:
[  124.620719][ T5869]  <TASK>
[  124.621980][ T5869]  ops_undo_list+0x49a/0x990
[  124.623950][ T5869]  ? __pfx_ops_undo_list+0x10/0x10
[  124.626258][ T5869]  ? do_raw_spin_unlock+0x4d/0x240
[  124.628471][ T5869]  cleanup_net+0x4c5/0x800
[  124.630416][ T5869]  ? __pfx_cleanup_net+0x10/0x10
[  124.632569][ T5869]  ? _raw_spin_unlock_irq+0x23/0x50
[  124.634793][ T5869]  ? process_scheduled_works+0x9ef/0x17b0
[  124.637414][ T5869]  ? process_scheduled_works+0x9ef/0x17b0
[  124.639825][ T5869]  process_scheduled_works+0xae1/0x17b0
[  124.642199][ T5869]  ? __pfx_process_scheduled_works+0x10/0x10
[  124.644754][ T5869]  worker_thread+0x8a0/0xda0
[  124.646891][ T5869]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  124.649696][ T5869]  ? __kthread_parkme+0x7b/0x200
[  124.651845][ T5869]  kthread+0x711/0x8a0
[  124.653638][ T5869]  ? __pfx_worker_thread+0x10/0x10
[  124.656043][ T5869]  ? __pfx_kthread+0x10/0x10
[  124.658005][ T5869]  ? _raw_spin_unlock_irq+0x23/0x50
[  124.660147][ T5869]  ? lockdep_hardirqs_on+0x9c/0x150
[  124.662293][ T5869]  ? __pfx_kthread+0x10/0x10
[  124.664237][ T5869]  ret_from_fork+0x3fc/0x770
[  124.666304][ T5869]  ? __pfx_ret_from_fork+0x10/0x10
[  124.668549][ T5869]  ? __switch_to_asm+0x39/0x70
[  124.670591][ T5869]  ? __switch_to_asm+0x33/0x70
[  124.672632][ T5869]  ? __pfx_kthread+0x10/0x10
[  124.674590][ T5869]  ret_from_fork_asm+0x1a/0x30
[  124.676715][ T5869]  </TASK>
[  124.678085][ T5869] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  124.681210][ T5869] CPU: 0 UID: 0 PID: 5869 Comm: kworker/u8:4 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  124.686463][ T5869] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  124.690621][ T5869] Workqueue: netns cleanup_net
[  124.692745][ T5869] Call Trace:
[  124.694220][ T5869]  <TASK>
[  124.695534][ T5869]  dump_stack_lvl+0x99/0x250
[  124.697541][ T5869]  ? __asan_memcpy+0x40/0x70
[  124.699494][ T5869]  ? __pfx_dump_stack_lvl+0x10/0x10
[  124.701664][ T5869]  ? __pfx__printk+0x10/0x10
[  124.703638][ T5869]  vpanic+0x281/0x750
[  124.705337][ T5869]  ? __pfx__printk+0x10/0x10
[  124.707303][ T5869]  ? __pfx_vpanic+0x10/0x10
[  124.709249][ T5869]  ? is_bpf_text_address+0x292/0x2b0
[  124.711462][ T5869]  panic+0xb9/0xc0
[  124.713067][ T5869]  ? __pfx_panic+0x10/0x10
[  124.714979][ T5869]  __warn+0x31b/0x4b0
[  124.716748][ T5869]  ? xfrm6_tunnel_net_exit+0x81/0x100
[  124.719028][ T5869]  ? xfrm6_tunnel_net_exit+0x81/0x100
[  124.721385][ T5869]  report_bug+0x2be/0x4f0
[  124.723242][ T5869]  ? xfrm6_tunnel_net_exit+0x81/0x100
[  124.725565][ T5869]  ? xfrm6_tunnel_net_exit+0x81/0x100
[  124.727896][ T5869]  ? xfrm6_tunnel_net_exit+0x83/0x100
[  124.730215][ T5869]  handle_bug+0x84/0x160
[  124.732079][ T5869]  exc_invalid_op+0x1a/0x50
[  124.734056][ T5869]  asm_exc_invalid_op+0x1a/0x20
[  124.736184][ T5869] RIP: 0010:xfrm6_tunnel_net_exit+0x81/0x100
[  124.738755][ T5869] Code: b5 40 e0 f7 4b 83 3c 2c 00 75 19 e8 09 d6 7c f7 49 81 fd f8 07 00 00 74 1d e8 fb d5 7c f7 49 83 c5 08 eb c9 e8 f0 d5 7c f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  124.746917][ T5869] RSP: 0018:ffffc90003acf8b0 EFLAGS: 00010293
[  124.749460][ T5869] RAX: ffffffff8a42d5c0 RBX: ffff888022780000 RCX: ffff888108d89cc0
[  124.752917][ T5869] RDX: 0000000000000000 RSI: ffffffff8d9b4449 RDI: ffff888022780000
[  124.756287][ T5869] RBP: ffffc90003acf9b0 R08: ffffffff8fa34237 R09: 1ffffffff1f46846
[  124.759646][ T5869] R10: dffffc0000000000 R11: fffffbfff1f46847 R12: ffff888022780000
[  124.762968][ T5869] R13: 0000000000000000 R14: ffff88802711a440 R15: dffffc0000000000
[  124.766325][ T5869]  ? xfrm6_tunnel_net_exit+0x80/0x100
[  124.768626][ T5869]  ops_undo_list+0x49a/0x990
[  124.770624][ T5869]  ? __pfx_ops_undo_list+0x10/0x10
[  124.772854][ T5869]  ? do_raw_spin_unlock+0x4d/0x240
[  124.775000][ T5869]  cleanup_net+0x4c5/0x800
[  124.776897][ T5869]  ? __pfx_cleanup_net+0x10/0x10
[  124.779037][ T5869]  ? _raw_spin_unlock_irq+0x23/0x50
[  124.781263][ T5869]  ? process_scheduled_works+0x9ef/0x17b0
[  124.783687][ T5869]  ? process_scheduled_works+0x9ef/0x17b0
[  124.786146][ T5869]  process_scheduled_works+0xae1/0x17b0
[  124.788580][ T5869]  ? __pfx_process_scheduled_works+0x10/0x10
[  124.791198][ T5869]  worker_thread+0x8a0/0xda0
[  124.793244][ T5869]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  124.795924][ T5869]  ? __kthread_parkme+0x7b/0x200
[  124.798011][ T5869]  kthread+0x711/0x8a0
[  124.799768][ T5869]  ? __pfx_worker_thread+0x10/0x10
[  124.801920][ T5869]  ? __pfx_kthread+0x10/0x10
[  124.803939][ T5869]  ? _raw_spin_unlock_irq+0x23/0x50
[  124.806185][ T5869]  ? lockdep_hardirqs_on+0x9c/0x150
[  124.808446][ T5869]  ? __pfx_kthread+0x10/0x10
[  124.810498][ T5869]  ret_from_fork+0x3fc/0x770
[  124.812573][ T5869]  ? __pfx_ret_from_fork+0x10/0x10
[  124.814792][ T5869]  ? __switch_to_asm+0x39/0x70
[  124.816838][ T5869]  ? __switch_to_asm+0x33/0x70
[  124.818838][ T5869]  ? __pfx_kthread+0x10/0x10
[  124.820846][ T5869]  ret_from_fork_asm+0x1a/0x30
[  124.822959][ T5869]  </TASK>
[  124.825135][ T5869] Kernel Offset: disabled
[  124.827027][ T5869] Rebooting in 86400 seconds..

VM DIAGNOSIS:
09:13:14  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000032 RBX=0000000000000032 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90003acf050
R8 =ffff888106e18237 R9 =1ffff11020dc3046 R10=dffffc0000000000 R11=ffffffff854e72a0
R12=dffffc0000000000 R13=ffffffff99af18c5 R14=ffffffff99de64e0 R15=0000000000000000
RIP=ffffffff854e731c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8624000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000080 CR3=000000002e89e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ff00000000000000 0000000000000000 XMM05=0000000000000000 00007f6694e12e53
XMM06=0000000000000000 00007f6694e12e4d XMM07=0000000000000000 00007f6694e12e61
XMM08=0000000000000000 00007f6694e12ee7 XMM09=0000000000000000 00007f6694e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=0000000000000001 RCX=0000000000000000 RDX=0000000000000000
RSI=ffff8881083b6158 RDI=ffff8881083b5640 RBP=0000000000000000 RSP=ffffc90003afec08
R8 =0000000000000000 R9 =ffffffff8172c195 R10=ffffc90003afee58 R11=ffffffff81ac3890
R12=0000000000020007 R13=0000000000000001 R14=ffff8881083b6158 R15=f3bdb8da139c9a9a
RIP=ffffffff819d65fa RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fc6a54556c0 ffffffff 00c00000
GS =0000 ffff8881a3c24000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b32418ff8 CR3=00000001058ce000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fc6a4787498 00007fc6a4787470 XMM03=00007fc6a47874a8 00007fc6a47874a0
XMM04=00007fc6a52ed100 00007fc6a4787460 XMM05=00007fc6a4787478 00007fc6a47874c0
XMM06=00007fc6a47874b8 00007fc6a47874b0 XMM07=00007fc6a47874a8 00007fc6a47874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fc6a4612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
