last executing test programs:

2m28.207834546s ago: executing program 1 (id=223):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1b, 0x4, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb5}]}, &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x66}, 0x94)

2m28.137817656s ago: executing program 1 (id=226):
io_setup(0x8, &(0x7f0000000540)=<r0=>0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x1, r1, &(0x7f0000000140)="01000000", 0x4, 0x2a21}])

2m27.988200295s ago: executing program 1 (id=231):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
syz_emit_ethernet(0x7a, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x8, 0x6, "229b34", 0x44, 0x2f, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x2, {{0x4, 0x1, 0x2, 0x0, 0x0, 0x3, 0x3, 0xc6}, 0x1, {0x5}}}, {0x8, 0x22eb, 0x1, {{0x7, 0x2, 0x3, 0x3, 0x0, 0x2, 0x7}, 0x2, {0xe978, 0x7, 0x3, 0x9, 0x0, 0x1, 0x2, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}}, 0x0)

2m27.927531343s ago: executing program 1 (id=235):
setreuid(0xffffffffffffffff, 0xee00)
setfsuid(0x0)
openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0)

2m27.926590917s ago: executing program 1 (id=237):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000440)={[{@bsdgroups}, {@noblock_validity}, {@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@debug}, {@errors_remount}]}, 0x1, 0x5fc, &(0x7f0000000600)="$eJzs3c9rHGUfAPDvzCZ5kzavaUXEFsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHTQq2FkzBg4KCiFeRXvwHvEvv3kRQb56FKlJRUOnK7M62m2Q3XdPsTpr5fGCzz/PM7D7PdydP5pmZPDsBlNZ49iON2BVx51QSMdaybDQaC8fz9W7/du109kiiVnv91ySSvKy5fpI/b88zwxHx7dGIRyur6124cvXsdLXW8F7E/sVzF/cvXLm6b/7c9JnZM7Pnpw68cPDQ5ItTB6c2JM7t+fOx4689+fH7bz8/9111XxKH4+TguzOxIo6NMh7jcScPsbV8ICIOZYk2n8vDZguEUGqV/PdxMCIej7Go1HMNYzH/UaGNA3qqVomoASWV6P9QUs1xQPPYvrvj4JM9HpX0z60jjQOg1fEPNM6NxHD92Gjb7aTlyKhxbmPHBtSf1fHPtd2fZ49Ydh7iz7tbZ2AD6ulk6XpEPNEu/qTeth31SLP402XtSCJiMiKG8va98gBtSFrSvTgPs5b1xp9GxOH8OSs/us76x1fk+x0/AOV080i+I1/Kcvf2f9nYozn+iTbjn9E2+671KHr/13n819zfD9fPkacrxmHZmOVE+7ccXFnw04fHPu1Uf+v4L3tk9TfHgv1w63rE7hXxf5AFm49/sviTNts/W+XU4e7qePX7X451WlZ0/LUbEXvaHv/cG5VmqTWuT+6fm6/OTjZ+tq3j62/e+rJT/UXHn23/bR3ib9n+6crXZZ/JxS7r+OrEjXOdlo3eN/7056Gkcbw5lJe8M724eGkqYig5nq/SUn5g7bY012m+Rxb/3mfa9/9lv//Xl7/PSPNPZhcuvnH2dqdl69n+LReT79S6bEMnWfwz99/+q/p/VvZJl3X88eblpzotWyv+kQcJDAAAAAAAAEoorV+DTdKJu+k0nZhozJd9LLal1QsLi8/OXbh8fiZib/3/IQfT5pXusUY+yfJT+f/DNvMHVuSfi4idEfFZZaSenzh9oTpTdPAAAAAAAAAAAAAAAAAAAACwSWzP5/8371P9e6Ux/x8oiV7eYA7Y3PR/KK96/191iyegDOz/obz0fygv/R/KS/+H8tL/obz0fygv/R/KS/8HAAAAgC1p59M3f0wiYumlkfojM5QvMyMItrbBohsAFKZSdAOAwty99G+wD6XT1fj/r/zLAXvfHKAASbvC+uCgtnbnv9n2lQAAAAAAAAAAAABAD+zZ1Xn+v7nBsLWZ9gfl9QDz/311ADzkfPU/lJdjfOB+s/iHOy0w/x8AAAAAAAAAAAAA+ma0/kjSiXwu8Gik6cRExP8jYkcMJnPz1dnJiHgkIn6oDP4vy08V3WgAAAAAAAAAAAAAAAAAAADYYhauXD07Xa3OXmpN/L2qZGsnmndB7UNdL8d/fFUk/f9YRiKi8I3Ss8RAS0kSsZRt+U3RsEsLsTmaUU8U/IcJAAAAAAAAAAAAAAAAAABKqGXucXu7v+hziwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg/+7d/793iaJjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTv8GAAD//7V5QCw=")
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'})

2m27.739342095s ago: executing program 1 (id=243):
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e05292a20"], 0x8)

2m22.988148093s ago: executing program 0 (id=333):
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000300)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xab4, &(0x7f0000000340)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x80086e8a, &(0x7f0000000080)={@id={0x2, 0x0, @d}})

2m22.928502621s ago: executing program 0 (id=334):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x1, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000c00)

2m22.866836492s ago: executing program 0 (id=335):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$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")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x0, 0x0, &(0x7f0000000140))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10000, 0x1d0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000002c0)=@v2={0x2, @aes256, 0x2, '\x00', @auto="894ba1af3566697af32e65a626807121"})

2m22.766436811s ago: executing program 0 (id=336):
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x195011, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
umount2(&(0x7f0000000040)='./file0/file0\x00', 0x8)

2m22.715287565s ago: executing program 0 (id=337):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r1, 0x601, 0x0, 0x0, {0x26}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8d}}, 0x4040)

2m22.517750988s ago: executing program 0 (id=341):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f00000002c0)={[{@norecovery}, {@bh}, {@resuid}, {@auto_da_alloc}]}, 0xee, 0x498, &(0x7f0000001b40)="$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")
mount$pvfs2(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x14004, &(0x7f00000001c0)=ANY=[@ANYBLOB='intr'])

2m22.489418105s ago: executing program 32 (id=341):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f00000002c0)={[{@norecovery}, {@bh}, {@resuid}, {@auto_da_alloc}]}, 0xee, 0x498, &(0x7f0000001b40)="$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")
mount$pvfs2(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x14004, &(0x7f00000001c0)=ANY=[@ANYBLOB='intr'])

2m12.716587545s ago: executing program 33 (id=243):
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e05292a20"], 0x8)

19.933216182s ago: executing program 3 (id=2133):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x40000000000000}}, [@tmpl={0x44, 0x5, [{{@in6=@mcast2, 0x0, 0x33}, 0x0, @in6=@dev, 0x4000, 0x4}]}]}, 0xfc}}, 0x0)
syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra}}}}}, 0x0)

19.932832436s ago: executing program 3 (id=2134):
write$sndseq(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x2, 0x0, 0xfc, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x1, 0x0, @time={0xffffffff}, {0x4, 0x3}, {0x0, 0x4}, @addr={0x5}}], 0x38)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

19.865232994s ago: executing program 3 (id=2135):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001900010027bd7000000000000a0000000001f9ffff0f000008001e0001000000140005"], 0x38}, 0x1, 0x0, 0x0, 0x20004844}, 0x0)

19.864547974s ago: executing program 3 (id=2136):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000040)={[{@minixdf}, {@nobarrier}, {@barrier}]}, 0x67, 0x52b, &(0x7f0000000a00)="$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")
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
write$binfmt_register(r1, &(0x7f0000000440)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

19.739113326s ago: executing program 3 (id=2137):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}]}], {0x14}}, 0xdc}}, 0x4004)
syz_emit_ethernet(0x46, &(0x7f0000000680)={@broadcast, @empty, @void, {@ipv6={0x86dd, @dccp_packet={0x7, 0x6, "4e7f17", 0x10, 0x21, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, {[], {{0x4e24, 0x4e21, 0x4, 0x1, 0x8, 0x0, 0x0, 0x0, 0x2, "9800a0", 0x3, "4935d2"}}}}}}}, 0x0)

18.711599502s ago: executing program 3 (id=2146):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000c40)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000400000002000000000000110300000001000000000000000100000d000000000000000000000000020000000000000c02000000000061"], 0x0, 0x4c, 0x0, 0x1}, 0x28)

18.38023665s ago: executing program 34 (id=2146):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000c40)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000400000002000000000000110300000001000000000000000100000d000000000000000000000000020000000000000c02000000000061"], 0x0, 0x4c, 0x0, 0x1}, 0x28)

14.870049363s ago: executing program 5 (id=2203):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000240)={0x4000, 0x1, 0x1}, 0x18, 0x0)
landlock_restrict_self(r1, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e1e, @broadcast}, 0x10)

14.869803199s ago: executing program 5 (id=2204):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a88000000060a0b040000000000000000020000005c000480580001800a000100696e6e65720000004800028008000240000000840800034000edff06080004400000000f0800014000000000240005800c0001007061796c6f6164001400028008000340000000b908000240000000040900010073797a30000000000900020073797a32"], 0xb0}}, 0x0)

14.810400359s ago: executing program 5 (id=2207):
memfd_create(&(0x7f0000000280)='\b\x9d\x06\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6\xb4\r9\xfcO\x8c=\x81\xb1\x8aSpA\xd4\x98\x85D\x89>N\x8ar\x17K\x0fK\xdaR\xe2{m\xe3\xe0\xc0tng\xbf2\xc0\xa7u\x10d\xe2)\xd4\xe2\x16\xedA\x14\xfe/\x9e\xee\xe7\xd7E\xe9 \x83\xdeNX\xec\xe66\x1b\x97\xe7\x02\x98\xf9\xb3\xf69\v\xb5$./\xfb\xf0\xb4X\xce\fO\x90\x16@\xaeHy\t\x02\xe2\x04H\xa8\xc3\xcd}\x01\x1e\xce\xben\xc2c\x91&\x96\x85\x9b\x12\xd1\x02\xf7\xeb#[\xbcm\xf7Gi\xf1\xa6\xd0]\xf40s7\xbc\xd4\x1f/\x0f\xbc\xd1\xba\x919\xa7\x197\xda\xae\xa5!2S2\xc7\xd5\x0fE\"\x17[;}\xe5\x9e\x86>\xba`L\xa5\xc7\x12\xd3\xe6\x7f\xb6\xb2#\x042\xa4\x01\xb7D\xbf\x96U\x9c\xb1\x17\x92\xaa_l!\xc9\xe5\x9b\xf0P9\x10D\xe4\xfe6\xdd~;jj\tG\x04l\x91\xc1b[\x03\xb4\x89\x11\xde_i\x8a\x12\x9a\n\x1f\xbdx\x0e\x0e\x8f]6\x17\x1c}z\xb3P\x87(yev\xc8J\x1a\xd3\xe7\x0fT\xe4\x1bf\xe0\x16\x18y\xd9\a\n\x83\xfb3\xcd\xbaG\x0fgV3G\xf4\xac\xf6\xf6\xbc|\xaa\xc1\xf6\xc9O\x15\xad\r\x00\x8dG,lP', 0x1)

14.810300373s ago: executing program 5 (id=2208):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x8)

14.734120949s ago: executing program 5 (id=2209):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, 0x40810, 0x3}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x3e8f}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x1ad0}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)

12.683154761s ago: executing program 5 (id=2234):
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
syz_pidfd_open(r0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x4)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}]}, &(0x7f0000000180)=0x10)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1)

12.60036373s ago: executing program 35 (id=2234):
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
syz_pidfd_open(r0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x4)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}]}, &(0x7f0000000180)=0x10)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1)

1.734755557s ago: executing program 4 (id=2448):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r0, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000008c0)=[{{0x3, 0x1, 0x1, 0x1}, {0x0, 0x1}}], 0x8)

1.734392377s ago: executing program 4 (id=2449):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000080)={[{@errors_remount}, {@mblk_io_submit}, {@inlinecrypt}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000000c0)={0x0, 0x8000000003ff, 0x5, 0x6, 0x1e})

1.616720735s ago: executing program 4 (id=2450):
r0 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x200c8804, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}}, 0x1c)
setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080), 0x4)

1.616313782s ago: executing program 4 (id=2451):
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e)

1.538247157s ago: executing program 6 (id=2452):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x0, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

1.484273991s ago: executing program 6 (id=2453):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0)

1.484068944s ago: executing program 6 (id=2454):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000003080), 0x101000, 0x0)
ioctl$TIOCGRS485(r0, 0x542e, &(0x7f00000030c0))

1.406668234s ago: executing program 6 (id=2455):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000305feffffff000000000000000000000000080001"], 0x20}}, 0x10094)

1.402024091s ago: executing program 4 (id=2456):
r0 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x316}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0xf0cfbc5d1cbe1900, @fd_index=0x4, 0x5, 0x0})
io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0)

1.336438344s ago: executing program 6 (id=2457):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
unshare(0x22020600)
rseq(&(0x7f0000009780), 0x994d22d65e9c1baa, 0x0, 0x0)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)

1.336047951s ago: executing program 6 (id=2458):
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0})

1.221481269s ago: executing program 2 (id=2463):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x17}]}}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x24040840}, 0x0)

1.135924347s ago: executing program 2 (id=2464):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904ff80000000fe020002000000000800040001000000", 0x24)

1.135628274s ago: executing program 4 (id=2465):
r0 = io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0x0, 0x3000})
io_uring_enter(r0, 0x0, 0xcbffffff, 0x7, &(0x7f0000000000)={[0xfffffffffffffffc]}, 0x8)

1.061380847s ago: executing program 36 (id=2465):
r0 = io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0x0, 0x3000})
io_uring_enter(r0, 0x0, 0xcbffffff, 0x7, &(0x7f0000000000)={[0xfffffffffffffffc]}, 0x8)

1.007872485s ago: executing program 2 (id=2467):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x2, &(0x7f0000000200)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x80000000}])
io_getevents(r1, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0)
io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])

834.560417ms ago: executing program 2 (id=2468):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="1c00238006001900040000"], 0x38}, 0x1, 0x0, 0x0, 0x24000801}, 0x4000)

623.156809ms ago: executing program 2 (id=2469):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002a7a3ab203512100084590000000109021b0402000000000904650200eb42f928090421"], 0x0)

0s ago: executing program 2 (id=2470):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
syz_mount_image$f2fs(&(0x7f0000000240), &(0x7f0000000180)='./file0\x00', 0x1805a, &(0x7f0000000000)=ANY=[], 0x1, 0x10661, &(0x7f0000021240)="$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")
unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x408, 0x1)
mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x5)

kernel console output (not intermixed with test programs):

8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  150.743193][ T7034] RSP: 002b:00007ffffcca9fd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  150.743203][ T7034] RAX: 0000000000000000 RBX: 00007f43b5e11c05 RCX: 00007f43b5d8ff17
[  150.743209][ T7034] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffffccaa090
[  150.743213][ T7034] RBP: 00007ffffccaa090 R08: 0000000000000000 R09: 0000000000000000
[  150.743218][ T7034] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffffccab120
[  150.743224][ T7034] R13: 00007f43b5e11c05 R14: 0000000000024c5f R15: 00007ffffccab160
[  150.743231][ T7034]  </TASK>
[  150.743235][ T7034] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  150.743811][ T9547]  done
[  150.883795][ T9547] bcachefs (loop3): going read-write
[  150.889605][ T9547] bcachefs (loop3): done starting filesystem
[  150.942800][ T9547] bcachefs (loop3): inode 536870912 i_sectors underflow: 8 + -24 < 0
[  150.957449][ T9547] bcachefs (loop3): inode 536870912 i_blocks underflow: 8 + -24 < 0 (ondisk 8)
[  150.964181][   T32] bcachefs (loop3): bucket incorrectly unset in freespace btree
[  150.964197][   T32]   u64s 5 type deleted 0:30:0 len 0 ver 0, , continuing
[  150.974315][   T32] bcachefs (loop3): bucket incorrectly unset in freespace btree
[  150.974330][   T32]   u64s 5 type deleted 0:39:0 len 0 ver 0, , continuing
[  150.982517][   T32] bcachefs (loop3): bucket incorrectly unset in freespace btree
[  150.982532][   T32]   u64s 5 type deleted 0:44:0 len 0 ver 0, , continuing
[  150.989829][   T32] bcachefs (loop3): bucket incorrectly unset in freespace btree
[  150.989844][   T32]   u64s 5 type deleted 0:48:0 len 0 ver 0, , continuing
[  151.053821][ T6734] bcachefs (loop3): shutting down
[  151.055956][ T6734] bcachefs (loop3): going read-only
[  151.058089][ T6734] bcachefs (loop3): finished waiting for writes to stop
[  151.060843][ T6734] bcachefs (loop3): flushing journal and stopping allocators, journal seq 11
[  151.068924][   T32] bcachefs (loop3): bucket incorrectly unset in freespace btree
[  151.068938][   T32]   u64s 5 type deleted 0:53:0 len 0 ver 0, , continuing
[  151.083845][ T6734] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 11
[  151.089975][ T6734] bcachefs (loop3): unclean shutdown complete, journal seq 12
[  151.094310][ T6734] bcachefs (loop3): done going read-only, filesystem not clean
[  151.138661][ T6734] bcachefs (loop3): shutdown complete
[  151.141648][ T9571] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1441'.
[  151.163020][ T9571] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1441'.
[  151.724300][ T9590] 9pnet_fd: Insufficient options for proto=fd
[  152.016162][ T9602] loop3: detected capacity change from 0 to 1024
[  152.025993][ T9602] EXT4-fs (loop3): orphan cleanup on readonly fs
[  152.031278][ T9602] EXT4-fs (loop3): 1 truncate cleaned up
[  152.038894][ T9602] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  152.060195][ T6734] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.113699][ T9605] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  152.213264][ T9610] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1458'.
[  152.534119][ T9624] loop4: detected capacity change from 0 to 32768
[  152.550157][ T9624] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[  152.574664][ T7034] ocfs2: Unmounting device (7,4) on (node local)
[  153.475133][ T9642] ptrace attach of "/syz-executor exec"[9643] was attempted by "/syz-executor exec"[9642]
[  153.641915][ T9647] loop4: detected capacity change from 0 to 512
[  153.657642][ T9647] EXT4-fs warning (device loop4): ext4_multi_mount_protect:329: MMP interval 2680 higher than expected, please wait.
[  153.657642][ T9647] 
[  153.667572][ T9647] EXT4-fs warning (device loop4): ext4_multi_mount_protect:332: MMP startup interrupted, failing mount
[  153.667572][ T9647] 
[  153.858507][ T9649] loop4: detected capacity change from 0 to 32768
[  153.862542][ T9649] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1473 (9649)
[  153.981371][ T9649] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  153.985498][ T9649] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[  153.988558][ T9649] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  154.031417][ T9649] BTRFS info (device loop4): rebuilding free space tree
[  154.281535][ T9649] BTRFS info (device loop4): disabling free space tree
[  154.288809][ T9649] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  154.293573][ T9649] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  154.303238][ T9649] BTRFS info (device loop4): allowing degraded mounts
[  154.306713][ T9649] BTRFS info (device loop4): enabling ssd optimizations
[  154.310199][ T9649] BTRFS info (device loop4): enabling disk space caching
[  154.312888][ T9649] BTRFS info (device loop4): force clearing of disk cache
[  154.316309][ T9649] BTRFS info (device loop4): use zlib compression, level 3
[  154.454339][ T9671] loop3: detected capacity change from 0 to 32768
[  154.457562][ T9671] XFS: ikeep mount option is deprecated.
[  154.462264][ T9671] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  154.486156][ T9671] XFS (loop3): Ending clean mount
[  154.489467][ T9671] XFS (loop3): Quotacheck needed: Please wait.
[  154.496806][ T7034] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  154.499557][ T9671] XFS (loop3): Quotacheck: Done.
[  154.510693][ T9671] XFS (loop3): syz.3.1475 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported
[  154.538160][ T6734] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  154.865055][ T5894] usb 5-1: new full-speed USB device number 17 using dummy_hcd
[  154.895772][  T793] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  155.016904][ T5894] usb 5-1: unable to get BOS descriptor or descriptor too short
[  155.020531][ T5894] usb 5-1: not running at top speed; connect to a high speed hub
[  155.024207][ T5894] usb 5-1: config 14 has an invalid interface number: 90 but max is 0
[  155.028421][ T5894] usb 5-1: config 14 has no interface number 0
[  155.030991][ T5894] usb 5-1: config 14 interface 90 has no altsetting 0
[  155.035918][ T5894] usb 5-1: New USB device found, idVendor=041e, idProduct=400a, bcdDevice=8c.6a
[  155.039575][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.043353][ T5894] usb 5-1: Product: syz
[  155.045550][ T5894] usb 5-1: Manufacturer: syz
[  155.047943][ T5894] usb 5-1: SerialNumber: syz
[  155.055083][  T793] usb 4-1: Using ep0 maxpacket: 8
[  155.061504][  T793] usb 4-1: unable to get BOS descriptor or descriptor too short
[  155.066333][  T793] usb 4-1: config 42 has an invalid interface number: 238 but max is 0
[  155.069785][  T793] usb 4-1: config 42 has no interface number 0
[  155.072338][  T793] usb 4-1: config 42 interface 238 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  155.078133][  T793] usb 4-1: config 42 interface 238 has no altsetting 0
[  155.083351][  T793] usb 4-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice=12.b3
[  155.088032][  T793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.091734][  T793] usb 4-1: Product: syz
[  155.093617][  T793] usb 4-1: Manufacturer: syz
[  155.096352][  T793] usb 4-1: SerialNumber: syz
[  155.262498][ T5894] gspca_main: spca500-2.14.0 probing 041e:400a
[  155.267392][ T5894] usb 5-1: USB disconnect, device number 17
[  155.316890][  T793] usb 4-1: unknown interface protocol 0x16, assuming v1
[  155.326001][  T793] usb 4-1: cannot find UAC_HEADER
[  155.341490][  T793] snd-usb-audio 4-1:42.238: probe with driver snd-usb-audio failed with error -22
[  155.350849][  T793] usb 4-1: USB disconnect, device number 18
[  155.374337][ T5846] udevd[5846]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:42.238/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  156.095681][ T5946] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  156.249605][ T5946] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  156.256493][ T5946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.275385][ T5946] usb 4-1: config 0 descriptor??
[  156.285065][ T5946] gspca_main: cpia1-2.14.0 probing 0813:0001
[  156.602945][ T9729] loop4: detected capacity change from 0 to 1024
[  156.652878][ T1093] hfsplus: b-tree write err: -5, ino 4
[  156.786354][   T33] kauditd_printk_skb: 14 callbacks suppressed
[  156.786371][   T33] audit: type=1800 audit(2000000040.680:65): pid=9741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1503" name="/" dev="9p" ino=2 res=0 errno=0
[  157.030726][ T9747] loop4: detected capacity change from 0 to 1024
[  157.061333][ T9747] hfsplus: bad catalog entry type
[  157.088285][ T5946] gspca_cpia1: usb_control_msg 02, error -71
[  157.091396][ T5946] gspca_cpia1: usb_control_msg 05, error -71
[  157.092021][   T53] hfsplus: b-tree write err: -5, ino 4
[  157.096111][ T5946] gspca_cpia1: usb_control_msg 04, error -71
[  157.096145][ T5946] cpia1 4-1:0.0: probe with driver cpia1 failed with error -71
[  157.101891][ T9749] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  157.112582][ T5946] usb 4-1: USB disconnect, device number 19
[  157.197888][ T9759] fuse: Bad value for 'fd'
[  157.394063][ T9765] loop4: detected capacity change from 0 to 32768
[  157.397923][ T9765] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1515 (9765)
[  157.408224][ T9765] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  157.413319][ T9765] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  157.454165][ T9765] BTRFS info (device loop4): enabling ssd optimizations
[  157.464899][ T9765] BTRFS info (device loop4): enabling free space tree
[  157.494954][ T7034] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  157.653825][ T9801] loop3: detected capacity change from 0 to 8
[  157.663923][ T9801] SQUASHFS error: xz decompression failed, data probably corrupt
[  157.672479][ T9801] SQUASHFS error: Failed to read block 0x108: -5
[  157.674457][ T9801] SQUASHFS error: Unable to read metadata cache entry [106]
[  157.676716][ T9801] SQUASHFS error: Unable to read inode 0x11f
[  157.806082][ T5946] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  157.892471][ T9809] loop3: detected capacity change from 0 to 32768
[  157.964819][ T5946] usb 5-1: Using ep0 maxpacket: 8
[  157.971708][ T5946] usb 5-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=31.1f
[  157.976522][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.981359][ T5946] usb 5-1: Product: syz
[  157.983018][ T5946] usb 5-1: Manufacturer: syz
[  157.985793][ T5946] usb 5-1: SerialNumber: syz
[  157.989053][ T5946] usb 5-1: config 0 descriptor??
[  157.999649][ T5946]  (null): radio-mr800 - initialization failed
[  158.002096][ T5946] radio-mr800 5-1:0.0: probe with driver radio-mr800 failed with error -22
[  158.008643][ T5946] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  158.013334][ T9815] loop3: detected capacity change from 0 to 64
[  158.032616][   T33] audit: type=1800 audit(2000000041.920:66): pid=9815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1531" name="file2" dev="loop3" ino=6 res=0 errno=0
[  158.200362][ T5946] usb 5-1: USB disconnect, device number 18
[  158.340438][ T9829] loop3: detected capacity change from 0 to 32768
[  158.349196][ T9829] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  158.357503][ T9829] XFS (loop3): Ending clean mount
[  158.360056][ T9829] XFS (loop3): Quotacheck needed: Please wait.
[  158.375879][ T9829] XFS (loop3): Quotacheck: Done.
[  158.404174][ T6734] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  158.525678][ T9855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1548'.
[  158.656417][ T9853] loop3: detected capacity change from 0 to 40427
[  158.665026][ T9853] F2FS-fs (loop3): build fault injection rate: 1
[  158.673861][ T9853] F2FS-fs (loop3): build fault injection type: 0x3bfe8c
[  158.679155][ T9853] F2FS-fs (loop3): inject slab alloc in f2fs_alloc_inode of alloc_inode+0x6a/0x1b0
[  158.681962][ T9853] F2FS-fs (loop3): Failed to read F2FS meta data inode
[  159.963707][ T9890] loop4: detected capacity change from 0 to 64
[  159.990212][ T9890] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[  160.363327][ T9908] netlink: 'syz.2.1573': attribute type 1 has an invalid length.
[  160.369537][ T9907] loop4: detected capacity change from 0 to 1024
[  160.373571][ T9907] EXT4-fs: Ignoring removed orlov option
[  160.377927][ T9907] EXT4-fs: Ignoring removed nomblk_io_submit option
[  160.388398][ T9907] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  160.474679][ T7034] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.504547][ T9920] loop4: detected capacity change from 0 to 8
[  160.518879][ T9920] SQUASHFS error: Failed to read block 0x62: -5
[  160.522084][ T9920] squashfs image failed sanity check
[  160.591755][ T9926] loop4: detected capacity change from 0 to 256
[  160.604541][ T9926] FAT-fs (loop4): Directory bread(block 64) failed
[  160.616855][ T9926] FAT-fs (loop4): Directory bread(block 65) failed
[  160.624249][ T9926] FAT-fs (loop4): Directory bread(block 66) failed
[  160.630279][ T9926] FAT-fs (loop4): Directory bread(block 67) failed
[  160.633423][ T9926] FAT-fs (loop4): Directory bread(block 68) failed
[  160.638230][ T9926] FAT-fs (loop4): Directory bread(block 69) failed
[  160.641420][ T9926] FAT-fs (loop4): Directory bread(block 70) failed
[  160.644688][ T9926] FAT-fs (loop4): Directory bread(block 71) failed
[  160.662611][ T9926] FAT-fs (loop4): Directory bread(block 72) failed
[  160.668578][ T9926] FAT-fs (loop4): Directory bread(block 73) failed
[  160.894888][  T793] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  161.044845][  T793] usb 4-1: Using ep0 maxpacket: 16
[  161.051472][  T793] usb 4-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00
[  161.055717][  T793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.059149][  T793] usb 4-1: Product: syz
[  161.061342][  T793] usb 4-1: Manufacturer: syz
[  161.063364][  T793] usb 4-1: SerialNumber: syz
[  161.067018][  T793] usb 4-1: config 0 descriptor??
[  161.072604][  T793] usb-storage 4-1:0.0: USB Mass Storage device detected
[  161.079238][  T793] usb-storage 4-1:0.0: Quirks match for vid 054c pid 002e: 1
[  161.083595][  T793] usb-storage 4-1:0.0: This device (054c,002e,0500 S 04 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[  161.083595][  T793]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  161.276270][  T793] usb 4-1: USB disconnect, device number 20
[  162.193692][ T9983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1603'.
[  162.767157][ T9985] loop3: detected capacity change from 0 to 32768
[  162.772136][ T9985] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1604 (9985)
[  162.815661][ T9985] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  162.835172][ T9985] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  162.892414][ T9985] BTRFS info (device loop3): rebuilding free space tree
[  162.907873][ T9985] BTRFS info (device loop3): enabling ssd optimizations
[  162.910534][ T9985] BTRFS info (device loop3): turning on sync discard
[  162.913077][ T9985] BTRFS info (device loop3): enabling free space tree
[  162.916123][ T9985] BTRFS info (device loop3): force clearing of disk cache
[  162.918736][ T9985] BTRFS info (device loop3): enabling auto defrag
[  162.920967][ T9985] BTRFS info (device loop3): doing ref verification
[  162.924349][ T9985] BTRFS info (device loop3): max_inline set to 0
[  162.999073][ T6734] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  163.484862][ T5851] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  163.634844][ T5851] usb 4-1: Using ep0 maxpacket: 16
[  163.640126][ T5851] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  163.645274][ T5851] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  163.649963][ T5851] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  163.659651][ T5851] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  163.663896][ T5851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.668466][ T5851] usb 4-1: Product: syz
[  163.675094][ T5851] usb 4-1: Manufacturer: syz
[  163.678444][ T5851] usb 4-1: SerialNumber: syz
[  164.091460][ T5851] usb 4-1: 2:1 : format type 0 is detected, processed as PCM
[  165.017954][ T5851] usb 4-1: 2:1: cannot get freq at ep 0x82
[  165.038112][ T5851] usb 4-1: USB disconnect, device number 21
[  165.064577][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  165.337615][T10053] batadv1: entered promiscuous mode
[  165.348060][T10053] 8021q: adding VLAN 0 to HW filter on device batadv1
[  166.151254][T10071] loop4: detected capacity change from 0 to 256
[  166.744803][ T5851] usb 5-1: new full-speed USB device number 19 using dummy_hcd
[  166.949100][ T5851] usb 5-1: unable to get BOS descriptor or descriptor too short
[  166.952112][ T5851] usb 5-1: not running at top speed; connect to a high speed hub
[  166.957180][ T5851] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  166.960271][ T5851] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  166.964338][ T5851] usb 5-1: config 1 has no interface number 1
[  166.967906][ T5851] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  166.973464][ T5851] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 246, changing to 4
[  166.981323][ T5851] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  166.985894][ T5851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.989423][ T5851] usb 5-1: Product: syz
[  166.991274][ T5851] usb 5-1: Manufacturer: syz
[  166.993304][ T5851] usb 5-1: SerialNumber: syz
[  167.060352][T10095] libceph: resolve '400' (ret=-3): failed
[  167.296470][ T5851] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  167.307215][ T5851] usb 5-1: USB disconnect, device number 19
[  167.343652][ T5846] udevd[5846]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  167.627659][T10098] loop3: detected capacity change from 0 to 40427
[  167.630987][T10098] F2FS-fs (loop3): Wrong SSA boundary, start(3584) end(4096) blocks(0)
[  167.633977][T10098] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  167.637567][T10098] F2FS-fs (loop3): build fault injection type: 0x6
[  167.641793][T10098] F2FS-fs (loop3): invalid crc value
[  167.673397][T10098] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  167.687226][T10098] F2FS-fs (loop3): Start checkpoint disabled!
[  167.691363][T10098] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  167.694343][T10098] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  167.773326][ T1091] kworker/u10:5: attempt to access beyond end of device
[  167.773326][ T1091] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  167.780027][ T1091] CPU: 1 UID: 0 PID: 1091 Comm: kworker/u10:5 Not tainted syzkaller #0 PREEMPT(full) 
[  167.780048][ T1091] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  167.780060][ T1091] Workqueue: writeback wb_workfn (flush-7:3)
[  167.780086][ T1091] Call Trace:
[  167.780092][ T1091]  <TASK>
[  167.780099][ T1091]  dump_stack_lvl+0x189/0x250
[  167.780118][ T1091]  ? __pfx_dump_stack_lvl+0x10/0x10
[  167.780135][ T1091]  ? __pfx_queue_work_on+0x10/0x10
[  167.780150][ T1091]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  167.780168][ T1091]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  167.780189][ T1091]  f2fs_handle_critical_error+0x37c/0x540
[  167.780210][ T1091]  f2fs_write_end_io+0x886/0xb60
[  167.780228][ T1091]  __submit_merged_bio+0x27a/0x6a0
[  167.780249][ T1091]  __submit_merged_write_cond+0x255/0x530
[  167.780269][ T1091]  f2fs_write_data_pages+0x261d/0x3000
[  167.780299][ T1091]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  167.780322][ T1091]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  167.780346][ T1091]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  167.780368][ T1091]  ? trace_f2fs_writepages+0x7f/0x200
[  167.780407][ T1091]  ? f2fs_write_node_pages+0x478/0x6e0
[  167.780421][ T1091]  ? xa_load+0x60/0x210
[  167.780442][ T1091]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  167.780458][ T1091]  ? do_raw_spin_lock+0x121/0x290
[  167.780477][ T1091]  ? rcu_is_watching+0x15/0xb0
[  167.780489][ T1091]  ? set_shrinker_bit+0x7c/0x350
[  167.780505][ T1091]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  167.780526][ T1091]  do_writepages+0x32e/0x550
[  167.780546][ T1091]  ? unwind_next_frame+0xa5/0x2390
[  167.780566][ T1091]  __writeback_single_inode+0x145/0xff0
[  167.780585][ T1091]  ? do_raw_spin_unlock+0x4d/0x240
[  167.780602][ T1091]  writeback_sb_inodes+0x6c7/0x1010
[  167.780624][ T1091]  ? fprop_reflect_period_percpu+0x6b/0x330
[  167.780644][ T1091]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  167.780699][ T1091]  ? rcu_is_watching+0x15/0xb0
[  167.780716][ T1091]  wb_writeback+0x43b/0xaf0
[  167.780735][ T1091]  ? queue_io+0x341/0x590
[  167.780752][ T1091]  ? __pfx_wb_writeback+0x10/0x10
[  167.780771][ T1091]  ? rcu_is_watching+0x15/0xb0
[  167.780786][ T1091]  wb_workfn+0x409/0xef0
[  167.780804][ T1091]  ? __pfx_wb_workfn+0x10/0x10
[  167.780816][ T1091]  ? rcu_is_watching+0x15/0xb0
[  167.780831][ T1091]  ? rcu_is_watching+0x15/0xb0
[  167.780846][ T1091]  ? process_scheduled_works+0x9ef/0x17b0
[  167.780860][ T1091]  ? rcu_is_watching+0x15/0xb0
[  167.780871][ T1091]  ? lock_acquire+0x5f/0x360
[  167.780901][ T1091]  ? rcu_is_watching+0x15/0xb0
[  167.780914][ T1091]  ? process_scheduled_works+0x9ef/0x17b0
[  167.780928][ T1091]  ? process_scheduled_works+0x9ef/0x17b0
[  167.780940][ T1091]  process_scheduled_works+0xae1/0x17b0
[  167.780960][ T1091]  ? __pfx_process_scheduled_works+0x10/0x10
[  167.780979][ T1091]  worker_thread+0x8a0/0xda0
[  167.781005][ T1091]  kthread+0x711/0x8a0
[  167.781021][ T1091]  ? __pfx_worker_thread+0x10/0x10
[  167.781047][ T1091]  ? __pfx_kthread+0x10/0x10
[  167.781079][ T1091]  ? rcu_is_watching+0x15/0xb0
[  167.781091][ T1091]  ? __pfx_kthread+0x10/0x10
[  167.781107][ T1091]  ret_from_fork+0x3fc/0x770
[  167.781122][ T1091]  ? __pfx_ret_from_fork+0x10/0x10
[  167.781136][ T1091]  ? __switch_to_asm+0x39/0x70
[  167.781154][ T1091]  ? __switch_to_asm+0x33/0x70
[  167.781170][ T1091]  ? __pfx_kthread+0x10/0x10
[  167.781186][ T1091]  ret_from_fork_asm+0x1a/0x30
[  167.781207][ T1091]  </TASK>
[  167.781928][ T1091] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  168.053016][T10105] loop4: detected capacity change from 0 to 32768
[  168.469399][T10129] loop4: detected capacity change from 0 to 32768
[  168.589778][T10158] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1667'.
[  168.637697][T10150] loop3: detected capacity change from 0 to 32768
[  168.642950][T10129] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[  168.659662][T10150] debugfs: 'B1DE653C5FFC4D88B33B244AAB9EB3E9' already exists in 'ocfs2'
[  168.667271][T10150] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  168.780887][ T7034] ocfs2: Unmounting device (7,4) on (node local)
[  170.012332][ T6734] ocfs2: Unmounting device (7,3) on (node local)
[  170.492004][T10201] loop3: detected capacity change from 0 to 40427
[  170.540268][T10201] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  170.546988][T10201] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  170.608972][T10201] F2FS-fs (loop3): Inconsistent error blkaddr:5633, sit bitmap:0
[  170.611991][T10201] CPU: 1 UID: 0 PID: 10201 Comm: syz.3.1680 Not tainted syzkaller #0 PREEMPT(full) 
[  170.612005][T10201] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  170.612012][T10201] Call Trace:
[  170.612017][T10201]  <TASK>
[  170.612022][T10201]  dump_stack_lvl+0x189/0x250
[  170.612053][T10201]  ? __pfx_dump_stack_lvl+0x10/0x10
[  170.612063][T10201]  ? rcu_is_watching+0x15/0xb0
[  170.612072][T10201]  ? __pfx_f2fs_get_dnode_of_data+0x10/0x10
[  170.612083][T10201]  ? lock_release+0x4b/0x3e0
[  170.612095][T10201]  ? rcu_read_lock_held+0xa/0x50
[  170.612105][T10201]  __f2fs_is_valid_blkaddr+0xd84/0x14f0
[  170.612120][T10201]  f2fs_map_blocks+0xd84/0x4130
[  170.612139][T10201]  ? __pfx_f2fs_map_blocks+0x10/0x10
[  170.612150][T10201]  ? xas_start+0x3b3/0x770
[  170.612161][T10201]  ? xa_load+0x60/0x210
[  170.612172][T10201]  ? lock_release+0x4b/0x3e0
[  170.612184][T10201]  ? xa_load+0x1ea/0x210
[  170.612196][T10201]  f2fs_mpage_readpages+0xcb2/0x1ac0
[  170.612209][T10201]  ? __pfx_f2fs_mpage_readpages+0x10/0x10
[  170.612218][T10201]  ? __folio_batch_add_and_move+0x20a/0xd20
[  170.612226][T10201]  ? rcu_is_watching+0x15/0xb0
[  170.612236][T10201]  ? f2fs_readahead+0x177/0x330
[  170.612248][T10201]  read_pages+0x17a/0x580
[  170.612261][T10201]  ? __pfx_read_pages+0x10/0x10
[  170.612273][T10201]  ? filemap_add_folio+0x1af/0x270
[  170.612285][T10201]  page_cache_ra_unbounded+0x6b0/0x7b0
[  170.612300][T10201]  f2fs_readdir+0x49b/0xa60
[  170.612310][T10201]  ? __pfx_f2fs_readdir+0x10/0x10
[  170.612317][T10201]  ? rcu_is_watching+0x15/0xb0
[  170.612327][T10201]  ? down_read_killable+0x1d1/0x350
[  170.612335][T10201]  iterate_dir+0x399/0x570
[  170.612345][T10201]  __se_sys_getdents64+0xe4/0x260
[  170.612355][T10201]  ? __pfx___se_sys_getdents64+0x10/0x10
[  170.612365][T10201]  ? __pfx_filldir64+0x10/0x10
[  170.612374][T10201]  ? rcu_is_watching+0x15/0xb0
[  170.612382][T10201]  ? rcu_is_watching+0x15/0xb0
[  170.612405][T10201]  do_syscall_64+0xfa/0x3b0
[  170.612417][T10201]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.612425][T10201]  ? exc_page_fault+0x9f/0xf0
[  170.612435][T10201]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.612443][T10201] RIP: 0033:0x7f7bf9d8ebe9
[  170.612452][T10201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  170.612480][T10201] RSP: 002b:00007f7bfab9e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[  170.612492][T10201] RAX: ffffffffffffffda RBX: 00007f7bf9fb5fa0 RCX: 00007f7bf9d8ebe9
[  170.612499][T10201] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
[  170.612504][T10201] RBP: 00007f7bf9e11e19 R08: 0000000000000000 R09: 0000000000000000
[  170.612510][T10201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  170.612516][T10201] R13: 00007f7bf9fb6038 R14: 00007f7bf9fb5fa0 R15: 00007ffdb4878bd8
[  170.612525][T10201]  </TASK>
[  170.613841][T10201] F2FS-fs (loop3): Inconsistent error blkaddr:5633, sit bitmap:0
[  170.716269][T10201] CPU: 1 UID: 0 PID: 10201 Comm: syz.3.1680 Not tainted syzkaller #0 PREEMPT(full) 
[  170.716290][T10201] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  170.716299][T10201] Call Trace:
[  170.716306][T10201]  <TASK>
[  170.716312][T10201]  dump_stack_lvl+0x189/0x250
[  170.716335][T10201]  ? __pfx_dump_stack_lvl+0x10/0x10
[  170.716352][T10201]  ? __pfx_f2fs_get_dnode_of_data+0x10/0x10
[  170.716401][T10201]  ? __filemap_get_folio+0x79f/0xaf0
[  170.716417][T10201]  ? __pfx_f2fs_lookup_read_extent_cache_block+0x10/0x10
[  170.716440][T10201]  ? filemap_get_entry+0xad/0x2f0
[  170.716451][T10201]  __f2fs_is_valid_blkaddr+0xd84/0x14f0
[  170.716505][T10201]  f2fs_get_read_data_folio+0x3d2/0x7d0
[  170.716525][T10201]  ? __pfx_folio_mark_accessed+0x10/0x10
[  170.716543][T10201]  ? __pfx_f2fs_get_read_data_folio+0x10/0x10
[  170.716566][T10201]  ? __filemap_get_folio+0x79f/0xaf0
[  170.716582][T10201]  f2fs_find_data_folio+0x195/0x3c0
[  170.716602][T10201]  f2fs_readdir+0x4b0/0xa60
[  170.716622][T10201]  ? __pfx_f2fs_readdir+0x10/0x10
[  170.716635][T10201]  ? rcu_is_watching+0x15/0xb0
[  170.716655][T10201]  ? down_read_killable+0x1d1/0x350
[  170.716680][T10201]  iterate_dir+0x399/0x570
[  170.716701][T10201]  __se_sys_getdents64+0xe4/0x260
[  170.716722][T10201]  ? __pfx___se_sys_getdents64+0x10/0x10
[  170.716740][T10201]  ? __pfx_filldir64+0x10/0x10
[  170.716758][T10201]  ? rcu_is_watching+0x15/0xb0
[  170.716774][T10201]  ? rcu_is_watching+0x15/0xb0
[  170.716788][T10201]  do_syscall_64+0xfa/0x3b0
[  170.716811][T10201]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.716826][T10201]  ? exc_page_fault+0x9f/0xf0
[  170.716845][T10201]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.717025][T10201] RIP: 0033:0x7f7bf9d8ebe9
[  170.717045][T10201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  170.717063][T10201] RSP: 002b:00007f7bfab9e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[  170.717083][T10201] RAX: ffffffffffffffda RBX: 00007f7bf9fb5fa0 RCX: 00007f7bf9d8ebe9
[  170.717096][T10201] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
[  170.717107][T10201] RBP: 00007f7bf9e11e19 R08: 0000000000000000 R09: 0000000000000000
[  170.717119][T10201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  170.717130][T10201] R13: 00007f7bf9fb6038 R14: 00007f7bf9fb5fa0 R15: 00007ffdb4878bd8
[  170.717147][T10201]  </TASK>
[  170.717445][T10217] F2FS-fs (loop3): Inconsistent error blkaddr:5633, sit bitmap:0
[  170.835812][T10217] CPU: 0 UID: 0 PID: 10217 Comm: syz.3.1680 Not tainted syzkaller #0 PREEMPT(full) 
[  170.835853][T10217] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  170.835865][T10217] Call Trace:
[  170.835871][T10217]  <TASK>
[  170.835892][T10217]  dump_stack_lvl+0x189/0x250
[  170.835918][T10217]  ? __pfx_dump_stack_lvl+0x10/0x10
[  170.835935][T10217]  ? __pfx_f2fs_get_dnode_of_data+0x10/0x10
[  170.835955][T10217]  ? __filemap_get_folio+0x79f/0xaf0
[  170.835970][T10217]  ? __pfx_f2fs_lookup_read_extent_cache_block+0x10/0x10
[  170.835993][T10217]  ? filemap_get_entry+0xad/0x2f0
[  170.836008][T10217]  __f2fs_is_valid_blkaddr+0xd84/0x14f0
[  170.836033][T10217]  f2fs_get_read_data_folio+0x3d2/0x7d0
[  170.836053][T10217]  ? __pfx_folio_mark_accessed+0x10/0x10
[  170.836069][T10217]  ? __pfx_f2fs_get_read_data_folio+0x10/0x10
[  170.836090][T10217]  ? __filemap_get_folio+0x79f/0xaf0
[  170.836106][T10217]  f2fs_find_data_folio+0x195/0x3c0
[  170.836127][T10217]  f2fs_readdir+0x4b0/0xa60
[  170.836147][T10217]  ? __pfx_f2fs_readdir+0x10/0x10
[  170.836159][T10217]  ? rcu_is_watching+0x15/0xb0
[  170.836178][T10217]  ? down_read_killable+0x1d1/0x350
[  170.836193][T10217]  iterate_dir+0x399/0x570
[  170.836211][T10217]  ? 0xffffffff81000000
[  170.836223][T10217]  __se_sys_getdents+0xe4/0x250
[  170.836242][T10217]  ? __pfx___se_sys_getdents+0x10/0x10
[  170.836259][T10217]  ? __pfx_filldir+0x10/0x10
[  170.836276][T10217]  ? 0xffffffff81000000
[  170.836286][T10217]  ? rcu_is_watching+0x15/0xb0
[  170.836300][T10217]  ? rcu_is_watching+0x15/0xb0
[  170.836314][T10217]  do_syscall_64+0xfa/0x3b0
[  170.836335][T10217]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.836350][T10217]  ? exc_page_fault+0x9f/0xf0
[  170.836369][T10217]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.836384][T10217] RIP: 0033:0x7f7bf9d8ebe9
[  170.836396][T10217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  170.836411][T10217] RSP: 002b:00007f7bfab7d038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[  170.836429][T10217] RAX: ffffffffffffffda RBX: 00007f7bf9fb6090 RCX: 00007f7bf9d8ebe9
[  170.836439][T10217] RDX: 0000000000000058 RSI: ffffffff81000000 RDI: 0000000000000006
[  170.836482][T10217] RBP: 00007f7bf9e11e19 R08: 0000000000000000 R09: 0000000000000000
[  170.836492][T10217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  170.836501][T10217] R13: 00007f7bf9fb6128 R14: 00007f7bf9fb6090 R15: 00007ffdb4878bd8
[  170.836516][T10217]  ? 0xffffffff81000000
[  170.836529][T10217]  </TASK>
[  170.993298][ T6734] syz-executor: attempt to access beyond end of device
[  170.993298][ T6734] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  171.002867][ T6734] CPU: 1 UID: 0 PID: 6734 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  171.002898][ T6734] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  171.002904][ T6734] Call Trace:
[  171.002908][ T6734]  <TASK>
[  171.002912][ T6734]  dump_stack_lvl+0x189/0x250
[  171.002927][ T6734]  ? __pfx_dump_stack_lvl+0x10/0x10
[  171.002937][ T6734]  ? __pfx_queue_work_on+0x10/0x10
[  171.002947][ T6734]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  171.002958][ T6734]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  171.002969][ T6734]  f2fs_handle_critical_error+0x37c/0x540
[  171.002982][ T6734]  f2fs_write_end_io+0x886/0xb60
[  171.002993][ T6734]  __submit_merged_bio+0x27a/0x6a0
[  171.003004][ T6734]  __submit_merged_write_cond+0x255/0x530
[  171.003015][ T6734]  f2fs_write_data_pages+0x261d/0x3000
[  171.003025][ T6734]  ? lock_release+0x4b/0x3e0
[  171.003036][ T6734]  ? lock_release+0x4b/0x3e0
[  171.003052][ T6734]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  171.003072][ T6734]  ? __mod_zone_page_state+0xd7/0x140
[  171.003085][ T6734]  ? folios_put_refs+0x560/0x640
[  171.003095][ T6734]  ? __pfx_folios_put_refs+0x10/0x10
[  171.003103][ T6734]  ? rcu_is_watching+0x15/0xb0
[  171.003111][ T6734]  ? lru_add+0xa2f/0xd80
[  171.003118][ T6734]  ? lru_add+0x198/0xd80
[  171.003125][ T6734]  ? folio_batch_move_lru+0x319/0x3a0
[  171.003134][ T6734]  ? filemap_get_folios_tag+0xed/0x630
[  171.003141][ T6734]  ? rcu_is_watching+0x15/0xb0
[  171.003149][ T6734]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  171.003160][ T6734]  do_writepages+0x32e/0x550
[  171.003171][ T6734]  ? rcu_is_watching+0x15/0xb0
[  171.003178][ T6734]  ? do_raw_spin_unlock+0x4d/0x240
[  171.003188][ T6734]  filemap_fdatawrite+0x199/0x240
[  171.003199][ T6734]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  171.003216][ T6734]  ? rcu_is_watching+0x15/0xb0
[  171.003224][ T6734]  ? do_raw_spin_unlock+0x4d/0x240
[  171.003234][ T6734]  f2fs_sync_dirty_inodes+0x31f/0x830
[  171.003244][ T6734]  f2fs_write_checkpoint+0x95a/0x1df0
[  171.003256][ T6734]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  171.003273][ T6734]  ? kill_f2fs_super+0x298/0x6c0
[  171.003282][ T6734]  kill_f2fs_super+0x2c3/0x6c0
[  171.003290][ T6734]  ? __pfx_kill_f2fs_super+0x10/0x10
[  171.003297][ T6734]  ? radix_tree_delete_item+0x2b6/0x400
[  171.003308][ T6734]  ? shrinker_free+0x2ce/0x3e0
[  171.003316][ T6734]  deactivate_locked_super+0xbc/0x130
[  171.003326][ T6734]  cleanup_mnt+0x425/0x4c0
[  171.003336][ T6734]  task_work_run+0x1d4/0x260
[  171.003346][ T6734]  ? __pfx_task_work_run+0x10/0x10
[  171.003355][ T6734]  ? __x64_sys_umount+0x122/0x160
[  171.003365][ T6734]  ? __pfx___x64_sys_umount+0x10/0x10
[  171.003375][ T6734]  ? rcu_is_watching+0x15/0xb0
[  171.003383][ T6734]  exit_to_user_mode_loop+0xec/0x110
[  171.003393][ T6734]  do_syscall_64+0x2bd/0x3b0
[  171.003404][ T6734]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.003412][ T6734]  ? exc_page_fault+0x9f/0xf0
[  171.003421][ T6734]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.003429][ T6734] RIP: 0033:0x7f7bf9d8ff17
[  171.003459][ T6734] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  171.003467][ T6734] RSP: 002b:00007ffdb4877e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  171.003476][ T6734] RAX: 0000000000000000 RBX: 00007f7bf9e11c05 RCX: 00007f7bf9d8ff17
[  171.003481][ T6734] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdb4877f20
[  171.003486][ T6734] RBP: 00007ffdb4877f20 R08: 0000000000000000 R09: 0000000000000000
[  171.003491][ T6734] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdb4878fb0
[  171.003496][ T6734] R13: 00007f7bf9e11c05 R14: 0000000000029af8 R15: 00007ffdb4878ff0
[  171.003505][ T6734]  </TASK>
[  171.004033][ T6734] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  171.521222][T10227] wg1: entered promiscuous mode
[  171.523291][T10227] wg1: entered allmulticast mode
[  172.153577][T10231] loop3: detected capacity change from 0 to 32768
[  172.172659][T10231] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  172.224440][T10231] XFS (loop3): Ending clean mount
[  172.260525][ T6734] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  172.412783][T10257] loop4: detected capacity change from 0 to 512
[  172.426775][T10260] loop3: detected capacity change from 0 to 1024
[  172.429165][T10257] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.1701: corrupted in-inode xattr: invalid ea_ino
[  172.436526][T10257] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1701: couldn't read orphan inode 15 (err -117)
[  172.441988][T10257] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  172.459248][T10260] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  172.474452][ T7034] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.493428][ T6734] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.089854][T10291] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1711'.
[  173.606071][T10305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1719'.
[  173.633820][T10305] bond1: entered promiscuous mode
[  173.637201][T10305] bond1: entered allmulticast mode
[  173.643205][T10305] 8021q: adding VLAN 0 to HW filter on device bond1
[  173.755502][T10314] loop4: detected capacity change from 0 to 128
[  173.759204][T10314] affs: Invalid blocksize (512, 1024, 2048, 4096 allowed)
[  173.790934][T10316] tmpfs: Bad value for 'mpol'
[  174.118943][T10344] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  174.129689][T10344] bond0: (slave lo): Error: Device can not be enslaved while up
[  174.498704][T10355] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  175.046799][T10365] loop3: detected capacity change from 0 to 128
[  175.061523][T10365] syz.3.1747: attempt to access beyond end of device
[  175.061523][T10365] loop3: rw=2049, sector=145, nr_sectors = 3 limit=128
[  175.130295][T10365] syz.3.1747: attempt to access beyond end of device
[  175.130295][T10365] loop3: rw=2049, sector=153, nr_sectors = 8 limit=128
[  175.136068][T10365] syz.3.1747: attempt to access beyond end of device
[  175.136068][T10365] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128
[  175.141689][T10365] syz.3.1747: attempt to access beyond end of device
[  175.141689][T10365] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128
[  175.148008][T10365] syz.3.1747: attempt to access beyond end of device
[  175.148008][T10365] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128
[  175.154566][T10365] syz.3.1747: attempt to access beyond end of device
[  175.154566][T10365] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128
[  175.155196][ T5946] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  175.169950][T10365] syz.3.1747: attempt to access beyond end of device
[  175.169950][T10365] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128
[  175.176647][T10365] syz.3.1747: attempt to access beyond end of device
[  175.176647][T10365] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128
[  175.188976][T10365] syz.3.1747: attempt to access beyond end of device
[  175.188976][T10365] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128
[  175.199304][T10374] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1751'.
[  175.202999][T10374] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1751'.
[  175.208239][T10374] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1751'.
[  175.259963][T10378] netlink: 'syz.2.1753': attribute type 1 has an invalid length.
[  175.328896][ T5946] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  175.332572][ T5946] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  175.336985][ T5946] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  175.340667][ T5946] usb 5-1: config 1 has no interface number 1
[  175.343045][ T5946] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  175.351182][ T5946] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  175.358008][ T5946] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  175.361819][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.365639][ T5946] usb 5-1: Product: syz
[  175.367368][ T5946] usb 5-1: Manufacturer: syz
[  175.374785][ T5946] usb 5-1: SerialNumber: syz
[  175.435476][  T793] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  175.491031][T10396] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1762'.
[  175.495091][T10396] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1762'.
[  175.600401][  T793] usb 4-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30
[  175.610843][  T793] usb 4-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1
[  175.617203][  T793] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  175.622235][  T793] usb 4-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101
[  175.628594][  T793] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  175.632863][  T793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.641478][ T5946] usb 5-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[  175.645783][ T5946] usb 5-1: MIDIStreaming interface descriptor not found
[  175.664992][ T5946] usb 5-1: USB disconnect, device number 20
[  175.679868][T10047] udevd[10047]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  175.748483][T10404] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1764'.
[  176.080505][  T793] ath6kl: Failed to submit usb control message: -71
[  176.083164][  T793] ath6kl: unable to send the bmi data to the device: -71
[  176.086009][  T793] ath6kl: Unable to send get target info: -71
[  176.088749][  T793] ath6kl: Failed to init ath6kl core: -71
[  176.091890][  T793] ath6kl_usb 4-1:4.0: probe with driver ath6kl_usb failed with error -71
[  176.097563][  T793] usb 4-1: USB disconnect, device number 22
[  176.428014][   T80] kworker/u9:3: attempt to access beyond end of device
[  176.428014][   T80] loop3: rw=1, sector=153, nr_sectors = 1 limit=128
[  176.432941][   T80] Buffer I/O error on dev loop3, logical block 153, lost async page write
[  176.464425][T10408] loop4: detected capacity change from 0 to 32768
[  176.500600][T10408] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  176.519530][T10408] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  176.561715][ T7034] ocfs2: Unmounting device (7,4) on (node local)
[  176.717349][T10418] loop4: detected capacity change from 0 to 4096
[  176.733856][T10418] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  176.742478][T10422] loop3: detected capacity change from 0 to 512
[  176.745561][T10422] EXT4-fs: Ignoring removed nomblk_io_submit option
[  176.748004][T10422] EXT4-fs (loop3): Test dummy encryption mode enabled
[  176.764080][T10418] ntfs3(loop4): ino=2, mi_enum_attr
[  176.772686][T10418] ntfs3(loop4): Failed to load $LogFile (-22).
[  176.776406][T10422] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 17. Delete some EAs or run e2fsck.
[  176.785443][T10422] EXT4-fs (loop3): 1 truncate cleaned up
[  176.787913][T10422] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  176.917393][T10435] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  176.925623][T10435] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  177.148654][T10455] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1780'.
[  177.242450][T10455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1780'.
[  177.459840][T10468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1786'.
[  177.482904][ T6734] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.520910][   T33] audit: type=1326 audit(2000000061.410:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10475 comm="syz.3.1790" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf9d8ebe9 code=0x7ffc0000
[  177.532548][   T33] audit: type=1326 audit(2000000061.410:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10475 comm="syz.3.1790" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf9d8ebe9 code=0x7ffc0000
[  177.542675][   T33] audit: type=1326 audit(2000000061.430:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10475 comm="syz.3.1790" exe="/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f7bf9d8ebe9 code=0x7ffc0000
[  177.549458][   T33] audit: type=1326 audit(2000000061.430:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10475 comm="syz.3.1790" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf9d8ebe9 code=0x7ffc0000
[  177.557259][   T33] audit: type=1326 audit(2000000061.430:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10475 comm="syz.3.1790" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf9d8ebe9 code=0x7ffc0000
[  177.696720][T10492] loop3: detected capacity change from 0 to 512
[  177.699948][T10492] EXT4-fs (loop3): Test dummy encryption mode enabled
[  177.702512][T10492] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  177.709790][T10492] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.1797: bad orphan inode 131083
[  177.714589][T10492] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  177.828078][T10492] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[  177.923398][ T6734] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.370406][T10508] netlink: 'syz.2.1801': attribute type 1 has an invalid length.
[  178.384218][T10508] 8021q: adding VLAN 0 to HW filter on device bond1
[  178.399004][T10508] bond1: (slave geneve2): making interface the new active one
[  178.402408][T10508] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  178.405802][ T5946] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  178.407996][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  178.411511][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  178.417332][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  178.421475][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  178.557604][ T5946] usb 4-1: descriptor type invalid, skip
[  178.561238][ T5946] usb 4-1: config 0 has no interfaces?
[  178.565602][ T5946] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=df.40
[  178.573923][ T5946] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  178.662639][T10515] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  178.883205][ T5946] usb 4-1: Product: syz
[  178.885706][ T5946] usb 4-1: SerialNumber: syz
[  178.889166][ T5946] usb 4-1: config 0 descriptor??
[  178.913111][T10517] bond_slave_0: entered promiscuous mode
[  178.915612][T10517] bond_slave_1: entered promiscuous mode
[  178.918221][T10517] macsec1: entered allmulticast mode
[  178.920395][T10517] bond0: entered allmulticast mode
[  178.922641][T10517] bond_slave_0: entered allmulticast mode
[  178.925977][T10517] bond_slave_1: entered allmulticast mode
[  178.931077][T10517] bond0: left allmulticast mode
[  178.933419][T10517] bond_slave_0: left allmulticast mode
[  178.936267][T10517] bond_slave_1: left allmulticast mode
[  178.938536][T10517] bond_slave_0: left promiscuous mode
[  178.940892][T10517] bond_slave_1: left promiscuous mode
[  179.110740][ T5946] usb 4-1: USB disconnect, device number 23
[  179.128429][T10523] loop4: detected capacity change from 0 to 8
[  179.131539][T10523] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  180.012648][T10552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1819'.
[  180.033045][T10552] bond0: (slave bond_slave_1): Releasing backup interface
[  180.385929][T10579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1832'.
[  180.974412][T10596] orangefs_devreq_open: device cannot be opened in blocking mode
[  181.117493][T10604] loop4: detected capacity change from 0 to 256
[  181.172126][T10608] loop3: detected capacity change from 0 to 1024
[  181.202456][   T33] audit: type=1326 audit(2000000065.090:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10609 comm="syz.4.1845" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43b5d8ebe9 code=0x7ffc0000
[  181.215581][T10610] loop4: detected capacity change from 0 to 512
[  181.220825][   T33] audit: type=1326 audit(2000000065.110:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10609 comm="syz.4.1845" exe="/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f43b5d8ebe9 code=0x7ffc0000
[  181.229498][T10608] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  181.241721][T10608] ext4 filesystem being mounted at /435/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  181.248601][   T33] audit: type=1326 audit(2000000065.110:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10609 comm="syz.4.1845" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f43b5d8ec23 code=0x7ffc0000
[  181.260764][T10610] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  181.267025][   T33] audit: type=1326 audit(2000000065.110:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10609 comm="syz.4.1845" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f43b5d8d69f code=0x7ffc0000
[  181.274909][   T33] audit: type=1326 audit(2000000065.110:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10609 comm="syz.4.1845" exe="/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f43b5d8ec77 code=0x7ffc0000
[  181.283326][T10610] ext4 filesystem being mounted at /404/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  181.306812][ T6734] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  181.311920][ T7034] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.569936][T10623] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1847'.
[  181.985147][T10641] loop3: detected capacity change from 0 to 512
[  181.995138][T10641] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  182.001098][T10641] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.694184][T10656] loop4: detected capacity change from 0 to 32768
[  182.709828][T10656] XFS (loop4): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  182.797567][T10656] XFS (loop4): Ending clean mount
[  182.819052][ T7034] XFS (loop4): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  183.040273][T10671] overlayfs: failed to clone upperpath
[  183.188895][T10684] loop4: detected capacity change from 0 to 128
[  183.207597][T10684] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  183.215088][T10684] ext4 filesystem being mounted at /410/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  183.241865][ T7034] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  183.251049][T10690] loop3: detected capacity change from 0 to 128
[  183.269612][T10690] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  183.280034][T10690] ext4 filesystem being mounted at /445/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  183.333816][ T6734] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  183.341361][T10695] netlink: 'syz.4.1875': attribute type 10 has an invalid length.
[  183.370949][T10695] veth0_vlan: left promiscuous mode
[  183.376131][T10695] veth0_vlan: entered promiscuous mode
[  183.383252][T10695] team0: Device veth0_vlan failed to register rx_handler
[  183.561571][T10709] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1882'.
[  184.032821][T10714] loop3: detected capacity change from 0 to 32768
[  184.067617][T10714] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  184.067640][T10714]   allowing incompatible features above 0.0: (unknown version)
[  184.067648][T10714]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  184.084424][T10714] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  184.090212][T10714] bcachefs (loop3): initializing new filesystem
[  184.097794][T10714] bcachefs (loop3): going read-write
[  184.101466][T10714] bcachefs (loop3): marking superblocks
[  184.107399][T10714] bcachefs (loop3): initializing freespace
[  184.112079][T10714] bcachefs (loop3): done initializing freespace
[  184.117051][T10714] bcachefs (loop3): reading snapshots table
[  184.119340][T10714] bcachefs (loop3): reading snapshots done
[  184.128112][T10714] bcachefs (loop3): done starting filesystem
[  184.162096][ T6734] bcachefs (loop3): shutting down
[  184.163846][ T6734] bcachefs (loop3): going read-only
[  184.165455][ T6734] bcachefs (loop3): finished waiting for writes to stop
[  184.168011][ T6734] bcachefs (loop3): flushing journal and stopping allocators, journal seq 2
[  184.178393][ T6734] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3
[  184.182938][ T6734] bcachefs (loop3): clean shutdown complete, journal seq 4
[  184.186224][ T6734] bcachefs (loop3): marking filesystem clean
[  184.197334][ T6734] bcachefs (loop3): shutdown complete
[  184.375698][T10737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1891'.
[  184.435013][T10741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1893'.
[  184.517760][T10746] netlink: 'syz.4.1895': attribute type 1 has an invalid length.
[  184.520660][T10746] netlink: 'syz.4.1895': attribute type 1 has an invalid length.
[  184.721702][T10758] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1901'.
[  184.875009][T10765] overlayfs: failed to resolve './file0': -2
[  185.441182][T10794] loop3: detected capacity change from 0 to 8
[  185.703741][T10796] loop3: detected capacity change from 0 to 40427
[  185.711700][T10796] F2FS-fs (loop3): build fault injection rate: 14
[  185.714036][T10796] F2FS-fs (loop3): build fault injection type: 0x3bfe8c
[  185.718071][T10796] F2FS-fs (loop3): invalid crc value
[  185.720951][    C1] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  185.727832][    C1] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  185.767726][T10796] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  185.771215][T10796] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  185.775573][T10796] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  185.782955][T10796] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  185.787182][T10796] F2FS-fs (loop3): inject dquot initialize in f2fs_dquot_initialize of f2fs_new_inode+0x509/0x1050
[  185.801038][ T6734] syz-executor: attempt to access beyond end of device
[  185.801038][ T6734] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  185.806637][ T6734] CPU: 1 UID: 0 PID: 6734 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  185.806659][ T6734] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  185.806668][ T6734] Call Trace:
[  185.806674][ T6734]  <TASK>
[  185.806680][ T6734]  dump_stack_lvl+0x189/0x250
[  185.806704][ T6734]  ? __pfx_dump_stack_lvl+0x10/0x10
[  185.806719][ T6734]  ? __pfx_queue_work_on+0x10/0x10
[  185.806732][ T6734]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  185.806750][ T6734]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  185.806771][ T6734]  f2fs_handle_critical_error+0x37c/0x540
[  185.806791][ T6734]  f2fs_write_end_io+0x886/0xb60
[  185.806806][ T6734]  __submit_merged_bio+0x27a/0x6a0
[  185.806823][ T6734]  __submit_merged_write_cond+0x255/0x530
[  185.806843][ T6734]  f2fs_write_data_pages+0x261d/0x3000
[  185.806862][ T6734]  ? arch_stack_walk+0xfc/0x150
[  185.806881][ T6734]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  185.806892][ T6734]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  185.806904][ T6734]  ? rcu_is_watching+0x15/0xb0
[  185.806920][ T6734]  ? folios_put_refs+0x559/0x640
[  185.806931][ T6734]  ? __pfx_folios_put_refs+0x10/0x10
[  185.806939][ T6734]  ? rcu_is_watching+0x15/0xb0
[  185.806945][ T6734]  ? lru_add+0xa2f/0xd80
[  185.806953][ T6734]  ? lru_add+0x198/0xd80
[  185.806960][ T6734]  ? do_raw_spin_lock+0x121/0x290
[  185.806972][ T6734]  ? do_raw_spin_unlock+0x4d/0x240
[  185.806981][ T6734]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  185.806992][ T6734]  do_writepages+0x32e/0x550
[  185.807003][ T6734]  ? rcu_is_watching+0x15/0xb0
[  185.807011][ T6734]  ? do_raw_spin_unlock+0x4d/0x240
[  185.807020][ T6734]  filemap_fdatawrite+0x199/0x240
[  185.807032][ T6734]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  185.807050][ T6734]  ? rcu_is_watching+0x15/0xb0
[  185.807058][ T6734]  ? do_raw_spin_unlock+0x4d/0x240
[  185.807068][ T6734]  f2fs_sync_dirty_inodes+0x31f/0x830
[  185.807079][ T6734]  f2fs_write_checkpoint+0x95a/0x1df0
[  185.807091][ T6734]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  185.807108][ T6734]  ? kill_f2fs_super+0x298/0x6c0
[  185.807117][ T6734]  kill_f2fs_super+0x2c3/0x6c0
[  185.807125][ T6734]  ? __pfx_kill_f2fs_super+0x10/0x10
[  185.807131][ T6734]  ? radix_tree_delete_item+0x2b6/0x400
[  185.807143][ T6734]  ? shrinker_free+0x2ce/0x3e0
[  185.807151][ T6734]  deactivate_locked_super+0xbc/0x130
[  185.807161][ T6734]  cleanup_mnt+0x425/0x4c0
[  185.807171][ T6734]  task_work_run+0x1d4/0x260
[  185.807181][ T6734]  ? __pfx_task_work_run+0x10/0x10
[  185.807190][ T6734]  ? __x64_sys_umount+0x122/0x160
[  185.807200][ T6734]  ? __pfx___x64_sys_umount+0x10/0x10
[  185.807210][ T6734]  ? rcu_is_watching+0x15/0xb0
[  185.807218][ T6734]  exit_to_user_mode_loop+0xec/0x110
[  185.807230][ T6734]  do_syscall_64+0x2bd/0x3b0
[  185.807242][ T6734]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.807249][ T6734]  ? exc_page_fault+0x9f/0xf0
[  185.807259][ T6734]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.807266][ T6734] RIP: 0033:0x7f7bf9d8ff17
[  185.807275][ T6734] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  185.807282][ T6734] RSP: 002b:00007ffdb4877e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  185.807292][ T6734] RAX: 0000000000000000 RBX: 00007f7bf9e11c05 RCX: 00007f7bf9d8ff17
[  185.807297][ T6734] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdb4877f20
[  185.807302][ T6734] RBP: 00007ffdb4877f20 R08: 0000000000000000 R09: 0000000000000000
[  185.807307][ T6734] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdb4878fb0
[  185.807312][ T6734] R13: 00007f7bf9e11c05 R14: 000000000002d446 R15: 00007ffdb4878ff0
[  185.807321][ T6734]  </TASK>
[  185.807325][ T6734] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  186.229754][T10808] lo: entered promiscuous mode
[  186.231981][T10808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  186.307428][T10813] loop3: detected capacity change from 0 to 512
[  186.314201][T10813] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  186.319088][T10813] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002]
[  186.323896][T10813] EXT4-fs (loop3): orphan cleanup on readonly fs
[  186.327396][T10813] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1923: bg 0: block 361: padding at end of block bitmap is not set
[  186.332997][T10813] EXT4-fs (loop3): Remounting filesystem read-only
[  186.337839][T10813] EXT4-fs (loop3): 1 truncate cleaned up
[  186.340651][T10813] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  186.372180][T10818] netlink: 'syz.2.1925': attribute type 13 has an invalid length.
[  186.438427][T10818] bridge0: left promiscuous mode
[  186.444457][T10818] 8021q: adding VLAN 0 to HW filter on device bond0
[  186.448729][T10818] 8021q: adding VLAN 0 to HW filter on device team0
[  186.455880][T10818] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  186.534647][T10820] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.1923: dx entry: limit 0 != root limit 125
[  186.538592][T10820] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1923: Corrupt directory, running e2fsck is recommended
[  186.543508][T10820] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.1923: dx entry: limit 0 != root limit 125
[  186.547478][T10820] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1923: Corrupt directory, running e2fsck is recommended
[  186.552501][T10820] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.1923: dx entry: limit 0 != root limit 125
[  186.556472][T10820] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1923: Corrupt directory, running e2fsck is recommended
[  186.806652][ T6734] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  187.145132][ T5946] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  187.305542][ T5946] usb 4-1: Using ep0 maxpacket: 8
[  187.317318][ T5946] usb 4-1: unable to get BOS descriptor or descriptor too short
[  187.322504][ T5946] usb 4-1: config 5 has an invalid interface number: 128 but max is 0
[  187.325798][ T5946] usb 4-1: config 5 has no interface number 0
[  187.337668][ T5946] usb 4-1: config 5 interface 128 has no altsetting 0
[  187.344094][ T5946] usb 4-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=5f.dc
[  187.349224][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.352877][ T5946] usb 4-1: Product: syz
[  187.355124][ T5946] usb 4-1: Manufacturer: syz
[  187.357447][ T5946] usb 4-1: SerialNumber: syz
[  187.602621][ T5946] iowarrior 4-1:5.128: no interrupt-out endpoint found
[  187.617432][ T5946] usb 4-1: USB disconnect, device number 24
[  187.832087][    T9] IPVS: starting estimator thread 0...
[  187.936241][T10835] IPVS: using max 75 ests per chain, 180000 per kthread
[  188.040934][T10846] overlayfs: failed to clone upperpath
[  188.189374][T10855] loop3: detected capacity change from 0 to 16
[  188.195933][T10855] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  188.207566][T10858] openvswitch: netlink: Tunnel attr 171 out of range max 16
[  188.264041][T10861] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1945'.
[  188.284043][T10861] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1945'.
[  188.303208][T10861] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1945'.
[  188.307060][T10861] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1945'.
[  188.314506][T10866] loop4: detected capacity change from 0 to 128
[  188.494930][T10868] loop3: detected capacity change from 0 to 32768
[  188.505464][T10868] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1948 (10868)
[  188.518116][T10868] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  188.522262][T10868] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  188.576818][T10868] BTRFS info (device loop3): rebuilding free space tree
[  188.582626][T10868] BTRFS info (device loop3): allowing degraded mounts
[  188.585569][T10868] BTRFS info (device loop3): enabling ssd optimizations
[  188.589656][T10868] BTRFS info (device loop3): enabling free space tree
[  188.595363][T10868] BTRFS info (device loop3): force clearing of disk cache
[  188.597573][T10868] BTRFS info (device loop3): use zstd compression, level 3
[  188.608515][T10897] Driver unsupported XDP return value 0 on prog  (id 170) dev N/A, expect packet loss!
[  188.627073][T10868] BTRFS info (device loop3): max_inline set to 0
[  188.706783][ T6734] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  188.864127][   T33] kauditd_printk_skb: 14 callbacks suppressed
[  188.864175][   T33] audit: type=1326 audit(2000000072.270:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10913 comm="syz.2.1962" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517a38ebe9 code=0x7ffc0000
[  188.919978][   T33] audit: type=1326 audit(2000000072.279:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10913 comm="syz.2.1962" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517a38ebe9 code=0x7ffc0000
[  188.929363][   T33] audit: type=1326 audit(2000000072.279:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10913 comm="syz.2.1962" exe="/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f517a38ebe9 code=0x7ffc0000
[  188.976595][   T33] audit: type=1326 audit(2000000072.279:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10913 comm="syz.2.1962" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517a38ebe9 code=0x7ffc0000
[  188.995792][   T33] audit: type=1326 audit(2000000072.279:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10913 comm="syz.2.1962" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517a38ebe9 code=0x7ffc0000
[  189.028015][T10925] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1967'.
[  189.099892][T10934] mkiss: ax0: crc mode is auto.
[  189.235402][T10946] trusted_key: syz.3.1978 sent an empty control message without MSG_MORE.
[  189.293463][T10952] binfmt_misc: register: failed to install interpreter file ./file0
[  189.391919][T10954] loop4: detected capacity change from 0 to 8192
[  189.403183][T10954] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  189.429292][T10954] ntfs3(loop4): Failed to initialize $Extend/$Reparse.
[  189.442277][T10954] ntfs3(loop4): ino=5, mi_enum_attr
[  190.177971][T11007] loop4: detected capacity change from 0 to 256
[  190.186313][T11007] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  190.196342][T11007] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  190.202461][T11007] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x43c9847d, utbl_chksum : 0xe619d30d)
[  190.315310][T11011] capability: warning: `syz.4.2009' uses 32-bit capabilities (legacy support in use)
[  190.444393][T11017] loop4: detected capacity change from 0 to 1024
[  191.671338][T11058] loop3: detected capacity change from 0 to 4096
[  191.758802][   T33] audit: type=1800 audit(2000000074.992:96): pid=11058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2031" name="bus" dev="loop3" ino=33 res=0 errno=0
[  191.843993][T11066] loop3: detected capacity change from 0 to 1024
[  191.882382][T11069] loop4: detected capacity change from 0 to 128
[  191.886664][T11069] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  191.894359][T11069] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  192.010885][T11075] netlink: 'syz.3.2038': attribute type 3 has an invalid length.
[  192.015952][T11075] netlink: 'syz.3.2038': attribute type 1 has an invalid length.
[  192.019715][T11075] netlink: 198116 bytes leftover after parsing attributes in process `syz.3.2038'.
[  193.355714][T11100] loop3: detected capacity change from 0 to 32768
[  193.466217][T11115] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  193.702512][T11100] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode.
[  193.756957][ T6734] ocfs2: Unmounting device (7,3) on (node local)
[  193.898399][T11126] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2060'.
[  193.902136][T11126] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2060'.
[  194.064249][T11128] loop3: detected capacity change from 0 to 32768
[  194.075235][T11128] JBD2: Ignoring recovery information on journal
[  194.095417][T11128] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  194.135892][ T6734] ocfs2: Unmounting device (7,3) on (node local)
[  194.466530][T11152] delete_channel: no stack
[  194.568833][T11163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2077'.
[  194.572165][T11163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2077'.
[  194.635892][T11170] loop4: detected capacity change from 0 to 1024
[  194.649491][T11170] EXT4-fs: Ignoring removed orlov option
[  194.654854][T11170] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[  194.659963][T11170] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  194.666145][T11170] EXT4-fs (loop4): invalid journal inode
[  194.669795][T11170] EXT4-fs (loop4): can't get journal size
[  194.677941][T11170] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  194.698509][ T7034] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.930995][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  194.933715][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  195.451871][ T5946] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  195.624166][ T5946] usb 4-1: Using ep0 maxpacket: 16
[  195.633767][ T5946] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  195.639950][ T5946] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  195.646342][ T5946] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  195.653078][ T5946] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  195.658320][ T5946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.673556][ T5946] usb 4-1: config 0 descriptor??
[  196.114398][ T5946] microsoft 0003:045E:07DA.0006: ignoring exceeding usage max
[  196.118350][ T5946] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  196.120832][ T5946] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  196.123736][ T5946] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  196.130487][ T5946] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  196.134343][ T5946] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  196.138207][ T5946] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  196.141660][ T5946] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  196.144991][ T5946] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  196.148358][ T5946] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  196.151682][ T5946] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  196.331680][ T5946] microsoft 0003:045E:07DA.0006: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  196.336050][ T5946] microsoft 0003:045E:07DA.0006: no inputs found
[  196.338628][ T5946] microsoft 0003:045E:07DA.0006: could not initialize ff, continuing anyway
[  196.548931][  T793] usb 4-1: USB disconnect, device number 25
[  196.691397][T11247] loop4: detected capacity change from 0 to 1024
[  196.699428][T11247] EXT4-fs: Ignoring removed bh option
[  196.728094][T11247] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  196.740476][   T33] audit: type=1800 audit(2000000079.650:97): pid=11247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2116" name="file1" dev="loop4" ino=15 res=0 errno=0
[  196.779900][ T7034] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.935283][T11260] loop4: detected capacity change from 0 to 64
[  196.949219][T11260] BFS-fs: bfs_fill_super(): Last block not available on loop4: 163903
[  197.132282][T11274] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  197.305775][T11286] netlink: 'syz.3.2134': attribute type 29 has an invalid length.
[  197.368827][T11290] loop3: detected capacity change from 0 to 512
[  197.378787][T11290] EXT4-fs (loop3): orphan cleanup on readonly fs
[  197.382073][T11290] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.2136: bad orphan inode 13
[  197.386511][T11290] ext4_test_bit(bit=12, block=18) = 1
[  197.390849][T11290] is_bad_inode(inode)=0
[  197.394923][T11290] NEXT_ORPHAN(inode)=2130706432
[  197.397102][T11290] max_ino=32
[  197.398870][T11290] i_nlink=1
[  197.401075][T11290] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  197.411181][T11290] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  197.421218][T11290] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2136: bg 0: block 248: padding at end of block bitmap is not set
[  197.427210][T11290] Quota error (device loop3): write_blk: dquota write failed
[  197.431843][T11290] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  197.436561][T11290] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.2136: Failed to acquire dquot type 1
[  197.442662][T11290] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  197.463861][ T6734] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 12
[  197.469349][ T6734] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 12
[  197.917464][T11294] ieee802154 phy0 wpan0: encryption failed: -22
[  197.993595][T11300] loop4: detected capacity change from 0 to 2048
[  197.998164][T11300] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  198.088678][   T33] audit: type=1800 audit(2000000080.913:98): pid=11301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2141" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=1438 res=0 errno=0
[  198.436495][ T5238] Bluetooth: hci0: command 0x0000 tx timeout
[  198.482122][ T6734] syz-executor (6734) used greatest stack depth: 17320 bytes left
[  198.524263][ T5738] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.588425][ T5738] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.659492][ T5738] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.750079][ T5738] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.039046][ T5738] bridge_slave_1: left allmulticast mode
[  199.041792][ T5738] bridge_slave_1: left promiscuous mode
[  199.055530][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.109100][ T5738] bridge_slave_0: left allmulticast mode
[  199.111029][ T5738] bridge_slave_0: left promiscuous mode
[  199.113330][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.249352][ T5854] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  199.252212][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  199.254620][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  199.257186][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  199.259813][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  199.500698][ T5738] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  199.510512][ T5738] bond0 (unregistering): Released all slaves
[  199.520587][ T5738] bond1 (unregistering): Released all slaves
[  199.762607][T11317] chnl_net:caif_netlink_parms(): no params data found
[  199.841078][ T5738] hsr_slave_0: left promiscuous mode
[  199.843903][ T5738] hsr_slave_1: left promiscuous mode
[  199.844318][T11353] loop4: detected capacity change from 0 to 512
[  199.848052][ T5738] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  199.854762][ T5738] batman_adv: batadv0: Removing interface: batadv_slave_1
[  199.871303][ T5738] veth1_macvtap: left promiscuous mode
[  199.871827][T11353] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  199.873456][ T5738] veth0_macvtap: left promiscuous mode
[  199.873545][ T5738] veth1_vlan: left promiscuous mode
[  199.882716][T11353] ext4 filesystem being mounted at /509/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  199.883790][ T5738] veth0_vlan: left promiscuous mode
[  199.916957][ T7034] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.015851][ T5738] team0 (unregistering): Port device team_slave_1 removed
[  200.028845][ T5738] team0 (unregistering): Port device team_slave_0 removed
[  200.064181][T11362] loop4: detected capacity change from 0 to 128
[  200.075826][T11362] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  200.080282][T11362] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  200.219146][T11317] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.235562][T11317] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.247726][T11317] bridge_slave_0: entered allmulticast mode
[  200.255880][T11317] bridge_slave_0: entered promiscuous mode
[  200.268477][T11317] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.283176][T11372] loop4: detected capacity change from 0 to 1024
[  200.286293][T11317] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.289456][T11317] bridge_slave_1: entered allmulticast mode
[  200.313417][T11317] bridge_slave_1: entered promiscuous mode
[  200.332030][   T33] audit: type=1326 audit(2000000083.008:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11375 comm="syz.2.2168" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f517a38ebe9 code=0x0
[  200.333339][T11372] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  200.382767][T11317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  200.388292][T11317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  200.398611][T11372] EXT4-fs error (device loop4): ext4_generic_delete_entry:2668: inode #2: block 16: comm syz.4.2166: bad entry in directory: inode out of bounds - offset=12, inode=1282, rec_len=12, size=1024 fake=1
[  200.417547][T11372] EXT4-fs error (device loop4) in ext4_delete_entry:2739: Corrupt filesystem
[  200.427412][T11372] EXT4-fs warning (device loop4): ext4_rename_delete:3731: inode #2: comm syz.4.2166: Deleting old file: nlink 4, error=-117
[  200.445055][T11317] team0: Port device team_slave_0 added
[  200.453971][T11317] team0: Port device team_slave_1 added
[  200.482394][ T7034] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.492315][T11317] batman_adv: batadv0: Adding interface: batadv_slave_0
[  200.495333][T11317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  200.510415][T11317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  200.521724][T11317] batman_adv: batadv0: Adding interface: batadv_slave_1
[  200.530577][T11317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  200.545744][T11317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  200.598837][T11317] hsr_slave_0: entered promiscuous mode
[  200.601814][T11317] hsr_slave_1: entered promiscuous mode
[  200.766014][T11317] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  200.771239][T11317] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  200.776546][T11317] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  200.781064][T11317] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  200.835124][T11317] 8021q: adding VLAN 0 to HW filter on device bond0
[  200.849388][T11317] 8021q: adding VLAN 0 to HW filter on device team0
[  200.862780][  T187] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.866633][  T187] bridge0: port 1(bridge_slave_0) entered forwarding state
[  200.875710][  T187] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.877976][  T187] bridge0: port 2(bridge_slave_1) entered forwarding state
[  200.959005][ T5946] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  200.994875][T11317] 8021q: adding VLAN 0 to HW filter on device batadv0
[  201.122854][ T5946] usb 5-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c
[  201.125925][T11317] veth0_vlan: entered promiscuous mode
[  201.128508][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.132495][ T5946] usb 5-1: Product: syz
[  201.134593][ T5946] usb 5-1: Manufacturer: syz
[  201.136641][ T5946] usb 5-1: SerialNumber: syz
[  201.144016][ T5946] usb 5-1: config 0 descriptor??
[  201.146518][T11317] veth1_vlan: entered promiscuous mode
[  201.174376][T11317] veth0_macvtap: entered promiscuous mode
[  201.180544][T11317] veth1_macvtap: entered promiscuous mode
[  201.195146][T11317] batman_adv: batadv0: Interface activated: batadv_slave_0
[  201.202990][T11317] batman_adv: batadv0: Interface activated: batadv_slave_1
[  201.211345][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  201.216915][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  201.220971][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  201.228910][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  201.314598][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  201.318630][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  201.344409][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  201.348772][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  201.427989][ T5238] Bluetooth: hci0: command tx timeout
[  201.478494][T11439] loop5: detected capacity change from 0 to 4096
[  201.483965][T11439] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  201.503079][T11439] ntfs3(loop5): Failed to load $Extend (-22).
[  201.505823][T11439] ntfs3(loop5): Failed to initialize $Extend.
[  201.694821][T11451] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2184'.
[  201.784298][T11454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  202.019284][ T5946] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  202.026387][ T5946] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  202.030695][ T5946] asix 5-1:0.0: probe with driver asix failed with error -71
[  202.038737][ T5946] usb 5-1: USB disconnect, device number 21
[  203.309546][ T1272] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  203.469886][ T1272] usb 5-1: Using ep0 maxpacket: 32
[  203.475337][ T1272] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  203.484180][ T1272] usb 5-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.40
[  203.487571][ T1272] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.490799][ T1272] usb 5-1: Product: syz
[  203.492668][ T1272] usb 5-1: Manufacturer: syz
[  203.494846][ T1272] usb 5-1: SerialNumber: syz
[  203.502198][ T1272] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input9
[  203.719715][ T5278] bcm5974 5-1:1.0: could not read from device
[  203.724756][ T5278] bcm5974 5-1:1.0: could not read from device
[  203.726363][ T1272] usb 5-1: USB disconnect, device number 22
[  204.097457][T11537] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  204.504494][   T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.804068][ T5854] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  204.807236][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  204.810314][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  204.813800][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  204.821443][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  204.929766][T11557] chnl_net:caif_netlink_parms(): no params data found
[  204.971504][T11557] bridge0: port 1(bridge_slave_0) entered blocking state
[  204.974320][T11557] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.977517][T11557] bridge_slave_0: entered allmulticast mode
[  204.980813][T11557] bridge_slave_0: entered promiscuous mode
[  204.984498][T11557] bridge0: port 2(bridge_slave_1) entered blocking state
[  204.988056][T11557] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.990699][T11557] bridge_slave_1: entered allmulticast mode
[  204.993751][T11557] bridge_slave_1: entered promiscuous mode
[  205.015663][T11557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  205.021243][T11557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  205.037150][T11557] team0: Port device team_slave_0 added
[  205.041824][T11557] team0: Port device team_slave_1 added
[  205.063796][T11557] batman_adv: batadv0: Adding interface: batadv_slave_0
[  205.067520][T11557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  205.079095][T11557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  205.085017][T11557] batman_adv: batadv0: Adding interface: batadv_slave_1
[  205.094714][T11557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  205.108601][T11557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  205.120223][T11566] fuse: Bad value for 'fd'
[  205.143735][T11557] hsr_slave_0: entered promiscuous mode
[  205.147041][T11557] hsr_slave_1: entered promiscuous mode
[  205.151426][T11557] debugfs: 'hsr0' already exists in 'hsr'
[  205.154065][T11557] Cannot create hsr debugfs directory
[  205.239165][T11557] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  205.247340][T11557] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  205.252906][T11557] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  205.257930][T11557] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  205.280617][T11557] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.283587][T11557] bridge0: port 2(bridge_slave_1) entered forwarding state
[  205.286761][T11557] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.290046][T11557] bridge0: port 1(bridge_slave_0) entered forwarding state
[  205.332390][T11557] 8021q: adding VLAN 0 to HW filter on device bond0
[  205.345222][   T40] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.348890][   T40] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.363446][T11557] 8021q: adding VLAN 0 to HW filter on device team0
[  205.375852][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.378801][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  205.392655][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.395643][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  205.569645][T11557] 8021q: adding VLAN 0 to HW filter on device batadv0
[  205.613652][   T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.665841][   T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.737438][   T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.754224][T11557] veth0_vlan: entered promiscuous mode
[  205.770580][T11557] veth1_vlan: entered promiscuous mode
[  205.788227][T11557] veth0_macvtap: entered promiscuous mode
[  205.797694][T11557] veth1_macvtap: entered promiscuous mode
[  205.822574][T11557] batman_adv: batadv0: Interface activated: batadv_slave_0
[  205.861328][T11557] batman_adv: batadv0: Interface activated: batadv_slave_1
[  205.890748][ T5738] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  205.895874][ T5738] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  205.931445][ T5738] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  205.937321][ T5738] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  205.950204][   T13] bridge_slave_1: left allmulticast mode
[  205.952534][   T13] bridge_slave_1: left promiscuous mode
[  205.954958][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.962963][   T13] bridge_slave_0: left allmulticast mode
[  205.965214][   T13] bridge_slave_0: left promiscuous mode
[  205.967532][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.992037][T11608] loop4: detected capacity change from 0 to 1024
[  206.021731][T11608] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  206.036549][T11608] ext4 filesystem being mounted at /541/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  206.094823][ T7034] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.163269][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  206.169988][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  206.174843][   T13] bond0 (unregistering): Released all slaves
[  206.268457][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  206.280100][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  206.326960][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  206.330975][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  206.418160][   T13] hsr_slave_0: left promiscuous mode
[  206.431565][   T13] hsr_slave_1: left promiscuous mode
[  206.434612][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  206.437693][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  206.446090][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  206.449158][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  206.459005][   T13] veth1_macvtap: left promiscuous mode
[  206.461397][   T13] veth0_macvtap: left promiscuous mode
[  206.467357][   T13] veth1_vlan: left promiscuous mode
[  206.470058][   T13] veth0_vlan: left promiscuous mode
[  206.478518][T11619] loop4: detected capacity change from 0 to 40427
[  206.482537][T11619] F2FS-fs (loop4): Invalid log blocks per segment (83886089)
[  206.487685][T11619] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  206.492086][T11619] F2FS-fs (loop4): invalid crc value
[  206.541227][T11619] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  206.545686][T11619] F2FS-fs (loop4): Start checkpoint disabled!
[  206.552150][T11619] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  206.555270][T11619] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  206.677830][   T13] team0 (unregistering): Port device team_slave_1 removed
[  206.704539][   T13] team0 (unregistering): Port device team_slave_0 removed
[  206.987590][ T5238] Bluetooth: hci0: command tx timeout
[  207.012676][   T33] audit: type=1326 audit(2000000089.247:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11653 comm="syz.6.2258" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f967e78ebe9 code=0x7ffc0000
[  207.031641][   T33] audit: type=1326 audit(2000000089.247:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11653 comm="syz.6.2258" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f967e78ebe9 code=0x7ffc0000
[  207.050283][   T33] audit: type=1326 audit(2000000089.247:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11653 comm="syz.6.2258" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f967e78d550 code=0x7ffc0000
[  207.068164][   T33] audit: type=1326 audit(2000000089.247:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11653 comm="syz.6.2258" exe="/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f967e790417 code=0x7ffc0000
[  207.078489][   T33] audit: type=1326 audit(2000000089.247:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11653 comm="syz.6.2258" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f967e78ebe9 code=0x7ffc0000
[  207.098758][   T33] audit: type=1326 audit(2000000089.247:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11653 comm="syz.6.2258" exe="/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f967e790417 code=0x7ffc0000
[  207.138077][   T33] audit: type=1326 audit(2000000089.247:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11653 comm="syz.6.2258" exe="/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f967e78d84a code=0x7ffc0000
[  207.169719][   T33] audit: type=1326 audit(2000000089.247:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11653 comm="syz.6.2258" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f967e78ebe9 code=0x7ffc0000
[  207.178016][   T33] audit: type=1326 audit(2000000089.247:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11653 comm="syz.6.2258" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f967e78ebe9 code=0x7ffc0000
[  207.244943][T11668] comedi comedi2: fl512: I/O port conflict (0x1009e1,16)
[  207.366113][T11680] loop4: detected capacity change from 0 to 256
[  207.366713][T11660] loop6: detected capacity change from 0 to 32768
[  207.387550][T11660] bcachefs: bch2_fs_parse_param() Error parsing option move_bytes_in_flight: option_value
[  207.601060][T11699] tipc: Started in network mode
[  207.602588][T11699] tipc: Node identity 4ecf4db540bb, cluster identity 4711
[  207.604837][T11699] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  207.616714][T11701] mkiss: ax0: crc mode is auto.
[  207.624815][T11699] syzkaller0: MTU too low for tipc bearer
[  207.627007][T11699] tipc: Disabling bearer <eth:syzkaller0>
[  207.721549][T11704] loop4: detected capacity change from 0 to 4096
[  207.758585][T11704] ntfs3(loop4): It is recommened to use chkdsk.
[  207.768295][T11704] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00
[  207.783858][T11704] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00
[  207.793030][T11704] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00
[  207.801613][T11704] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00
[  207.804921][T11704] ntfs3(loop4): try to read out of volume at offset 0x3fffffc1c00
[  207.808337][T11704] ntfs3(loop4): try to read out of volume at offset 0x3fffffc2c00
[  207.813367][T11704] ntfs3(loop4): try to read out of volume at offset 0x3fffffc4c00
[  207.817139][T11704] ntfs3(loop4): try to read out of volume at offset 0x3fffffc8c00
[  207.821584][T11704] ntfs3(loop4): try to read out of volume at offset 0x3fffffd0c00
[  207.951687][T11720] loop6: detected capacity change from 0 to 64
[  207.963519][T11720] syz.6.2282: attempt to access beyond end of device
[  207.963519][T11720] loop6: rw=0, sector=268435468, nr_sectors = 2 limit=64
[  207.967985][T11720] Buffer I/O error on dev loop6, logical block 134217734, async page read
[  207.973903][T11720] syz.6.2282: attempt to access beyond end of device
[  207.973903][T11720] loop6: rw=0, sector=268435468, nr_sectors = 2 limit=64
[  207.981170][T11720] Buffer I/O error on dev loop6, logical block 134217734, async page read
[  208.056361][T11728] Bluetooth: MGMT ver 1.23
[  208.091889][T11732] netlink: 'syz.4.2289': attribute type 4 has an invalid length.
[  208.251448][   T33] audit: type=1326 audit(2000000090.426:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11748 comm="syz.2.2299" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517a38ebe9 code=0x7ffc0000
[  208.297792][T11754] loop6: detected capacity change from 0 to 1024
[  208.301419][T11754] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  208.305939][T11754] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  208.321485][T11754] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  208.332754][T11754] EXT4-fs (loop6): orphan cleanup on readonly fs
[  208.338009][T11754] EXT4-fs error (device loop6): ext4_free_blocks:6696: comm syz.6.2300: Freeing blocks not in datazone - block = 0, count = 4096
[  208.348278][T11754] EXT4-fs (loop6): Remounting filesystem read-only
[  208.358257][T11754] EXT4-fs (loop6): 1 orphan inode deleted
[  208.366614][T11754] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  208.395701][T11557] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.427765][T11766] netlink: 'syz.6.2304': attribute type 1 has an invalid length.
[  208.463878][T11766] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2304'.
[  208.871365][ T5238] Bluetooth: Unexpected start frame (len 18)
[  209.210890][ T5238] Bluetooth: hci0: command tx timeout
[  209.253341][T11780] loop6: detected capacity change from 0 to 32768
[  209.271829][T11780] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode.
[  209.302337][T11557] ocfs2: Unmounting device (7,6) on (node local)
[  209.613785][T11805] ptrace attach of "/syz-executor exec"[5850] was attempted by ""[11805]
[  209.765274][T11802] loop4: detected capacity change from 0 to 32768
[  209.768975][T11802] XFS: noikeep mount option is deprecated.
[  209.796711][T11802] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  209.818145][T11802] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  209.828302][T11802] XFS (loop4): Starting recovery (logdev: internal)
[  209.893841][T11828] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2327'.
[  209.917664][T11802] XFS (loop4): Ending recovery (logdev: internal)
[  209.981313][ T7034] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  210.344653][T11844] loop4: detected capacity change from 0 to 40427
[  210.352726][T11844] F2FS-fs (loop4): build fault injection rate: 14
[  210.364126][T11842] loop6: detected capacity change from 0 to 40427
[  210.365966][T11844] F2FS-fs (loop4): build fault injection type: 0x3bfe8c
[  210.370752][T11844] F2FS-fs (loop4): invalid crc value
[  210.389203][T11842] F2FS-fs (loop6): Small segment_count (9 < 1 * 24)
[  210.391365][T11842] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  210.395330][    C0] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  210.402691][    C0] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  210.442654][T11842] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  210.442853][T11844] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  210.450286][T11844] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  210.455083][T11842] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  210.458358][T11842] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  210.461177][T11844] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  210.484781][T11557] syz-executor: attempt to access beyond end of device
[  210.484781][T11557] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  210.490203][T11557] CPU: 0 UID: 0 PID: 11557 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  210.490222][T11557] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  210.490231][T11557] Call Trace:
[  210.490237][T11557]  <TASK>
[  210.490243][T11557]  dump_stack_lvl+0x189/0x250
[  210.490265][T11557]  ? __pfx_dump_stack_lvl+0x10/0x10
[  210.490280][T11557]  ? __pfx_queue_work_on+0x10/0x10
[  210.490294][T11557]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  210.490312][T11557]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  210.490333][T11557]  f2fs_handle_critical_error+0x37c/0x540
[  210.490354][T11557]  f2fs_write_end_io+0x886/0xb60
[  210.490373][T11557]  __submit_merged_bio+0x27a/0x6a0
[  210.490394][T11557]  __submit_merged_write_cond+0x255/0x530
[  210.490413][T11557]  f2fs_write_data_pages+0x261d/0x3000
[  210.490446][T11557]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  210.490471][T11557]  ? arch_stack_walk+0xfc/0x150
[  210.490497][T11557]  ? __mod_zone_page_state+0xd7/0x140
[  210.490518][T11557]  ? folios_put_refs+0x560/0x640
[  210.490538][T11557]  ? __pfx_folios_put_refs+0x10/0x10
[  210.490552][T11557]  ? rcu_is_watching+0x15/0xb0
[  210.490592][T11557]  ? lru_add+0xa2f/0xd80
[  210.490626][T11557]  ? lru_add+0x198/0xd80
[  210.490637][T11557]  ? folio_batch_move_lru+0x319/0x3a0
[  210.490649][T11557]  ? filemap_get_folios_tag+0xed/0x630
[  210.490660][T11557]  ? rcu_is_watching+0x15/0xb0
[  210.490674][T11557]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  210.490694][T11557]  do_writepages+0x32e/0x550
[  210.490712][T11557]  ? rcu_is_watching+0x15/0xb0
[  210.490725][T11557]  ? do_raw_spin_unlock+0x4d/0x240
[  210.490742][T11557]  filemap_fdatawrite+0x199/0x240
[  210.490760][T11557]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  210.490788][T11557]  ? rcu_is_watching+0x15/0xb0
[  210.490801][T11557]  ? do_raw_spin_unlock+0x4d/0x240
[  210.490816][T11557]  f2fs_sync_dirty_inodes+0x31f/0x830
[  210.490833][T11557]  f2fs_write_checkpoint+0x95a/0x1df0
[  210.490854][T11557]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  210.490879][T11557]  ? rcu_is_watching+0x15/0xb0
[  210.490891][T11557]  ? kill_f2fs_super+0x298/0x6c0
[  210.490906][T11557]  kill_f2fs_super+0x2c3/0x6c0
[  210.490921][T11557]  ? __pfx_kill_f2fs_super+0x10/0x10
[  210.490932][T11557]  ? radix_tree_delete_item+0x2b6/0x400
[  210.490953][T11557]  ? shrinker_free+0x2ce/0x3e0
[  210.490967][T11557]  deactivate_locked_super+0xbc/0x130
[  210.490984][T11557]  cleanup_mnt+0x425/0x4c0
[  210.490999][T11557]  task_work_run+0x1d4/0x260
[  210.491017][T11557]  ? __pfx_task_work_run+0x10/0x10
[  210.491040][T11557]  ? __x64_sys_umount+0x122/0x160
[  210.491057][T11557]  ? __pfx___x64_sys_umount+0x10/0x10
[  210.491074][T11557]  ? rcu_is_watching+0x15/0xb0
[  210.491088][T11557]  exit_to_user_mode_loop+0xec/0x110
[  210.491107][T11557]  do_syscall_64+0x2bd/0x3b0
[  210.491127][T11557]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.491140][T11557]  ? exc_page_fault+0x9f/0xf0
[  210.491157][T11557]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.491171][T11557] RIP: 0033:0x7f967e78ff17
[  210.491184][T11557] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  210.491197][T11557] RSP: 002b:00007ffc7eb59d68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  210.491212][T11557] RAX: 0000000000000000 RBX: 00007f967e811c05 RCX: 00007f967e78ff17
[  210.491222][T11557] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc7eb59e20
[  210.491231][T11557] RBP: 00007ffc7eb59e20 R08: 0000000000000000 R09: 0000000000000000
[  210.491239][T11557] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc7eb5aeb0
[  210.491249][T11557] R13: 00007f967e811c05 R14: 0000000000032e74 R15: 00007ffc7eb5aef0
[  210.491264][T11557]  </TASK>
[  210.491271][T11557] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  210.499520][T11844] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  210.654989][T11854] F2FS-fs (loop4): inject dquot initialize in f2fs_dquot_initialize of f2fs_new_inode+0x509/0x1050
[  210.667272][T11844] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  210.673744][T11844] syz.4.2331: attempt to access beyond end of device
[  210.673744][T11844] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  210.690784][T11844] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of f2fs_mpage_readpages+0x18df/0x1ac0
[  210.696100][T11844] syz.4.2331: attempt to access beyond end of device
[  210.696100][T11844] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  210.730277][T11844] F2FS-fs (loop4): inject dquot initialize in f2fs_dquot_initialize of __f2fs_tmpfile+0x77/0x360
[  210.749172][T11844] overlayfs: upper fs does not support tmpfile.
[  210.754149][T11844] F2FS-fs (loop4): inject dquot initialize in f2fs_dquot_initialize of f2fs_new_inode+0x509/0x1050
[  210.783337][T11860] netlink: 'syz.2.2341': attribute type 3 has an invalid length.
[  210.785932][T11860] netlink: 'syz.2.2341': attribute type 1 has an invalid length.
[  210.788519][T11860] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.2341'.
[  210.802330][ T7034] F2FS-fs (loop4): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0xab1/0x1cf0
[  210.814137][ T7034] F2FS-fs (loop4): inconsistent node block, node_type:0, nid:11, node_footer[nid:11,ino:3,ofs:2041,cpver:0,blkaddr:0]
[  210.821867][ T7034] syz-executor: attempt to access beyond end of device
[  210.821867][ T7034] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  210.829368][ T7034] CPU: 1 UID: 0 PID: 7034 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  210.829386][ T7034] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  210.829392][ T7034] Call Trace:
[  210.829396][ T7034]  <TASK>
[  210.829401][ T7034]  dump_stack_lvl+0x189/0x250
[  210.829417][ T7034]  ? __pfx_dump_stack_lvl+0x10/0x10
[  210.829427][ T7034]  ? __pfx_queue_work_on+0x10/0x10
[  210.829435][ T7034]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  210.829447][ T7034]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  210.829459][ T7034]  f2fs_handle_critical_error+0x37c/0x540
[  210.829473][ T7034]  f2fs_write_end_io+0x886/0xb60
[  210.829485][ T7034]  __submit_merged_bio+0x27a/0x6a0
[  210.829497][ T7034]  __submit_merged_write_cond+0x255/0x530
[  210.829508][ T7034]  f2fs_write_data_pages+0x261d/0x3000
[  210.829520][ T7034]  ? rcu_is_watching+0x15/0xb0
[  210.829599][ T7034]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  210.829623][ T7034]  ? __mod_zone_page_state+0xd7/0x140
[  210.829637][ T7034]  ? folios_put_refs+0x560/0x640
[  210.829649][ T7034]  ? __pfx_folios_put_refs+0x10/0x10
[  210.829658][ T7034]  ? rcu_is_watching+0x15/0xb0
[  210.829666][ T7034]  ? lru_add+0xa2f/0xd80
[  210.829674][ T7034]  ? lru_add+0x198/0xd80
[  210.829682][ T7034]  ? do_raw_spin_lock+0x121/0x290
[  210.829695][ T7034]  ? do_raw_spin_unlock+0x4d/0x240
[  210.829706][ T7034]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  210.829719][ T7034]  do_writepages+0x32e/0x550
[  210.829731][ T7034]  ? rcu_is_watching+0x15/0xb0
[  210.829740][ T7034]  ? do_raw_spin_unlock+0x4d/0x240
[  210.829750][ T7034]  filemap_fdatawrite+0x199/0x240
[  210.829761][ T7034]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  210.829781][ T7034]  ? rcu_is_watching+0x15/0xb0
[  210.829789][ T7034]  ? do_raw_spin_unlock+0x4d/0x240
[  210.829799][ T7034]  f2fs_sync_dirty_inodes+0x31f/0x830
[  210.829810][ T7034]  f2fs_write_checkpoint+0x95a/0x1df0
[  210.829824][ T7034]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  210.829842][ T7034]  ? kill_f2fs_super+0x298/0x6c0
[  210.829851][ T7034]  kill_f2fs_super+0x2c3/0x6c0
[  210.829860][ T7034]  ? __pfx_kill_f2fs_super+0x10/0x10
[  210.829866][ T7034]  ? radix_tree_delete_item+0x2b6/0x400
[  210.829879][ T7034]  ? shrinker_free+0x2ce/0x3e0
[  210.829889][ T7034]  deactivate_locked_super+0xbc/0x130
[  210.829899][ T7034]  cleanup_mnt+0x425/0x4c0
[  210.829909][ T7034]  task_work_run+0x1d4/0x260
[  210.829921][ T7034]  ? __pfx_task_work_run+0x10/0x10
[  210.829930][ T7034]  ? __x64_sys_umount+0x122/0x160
[  210.829940][ T7034]  ? __pfx___x64_sys_umount+0x10/0x10
[  210.829961][ T7034]  ? rcu_is_watching+0x15/0xb0
[  210.829974][ T7034]  exit_to_user_mode_loop+0xec/0x110
[  210.829992][ T7034]  do_syscall_64+0x2bd/0x3b0
[  210.830007][ T7034]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.830015][ T7034]  ? exc_page_fault+0x9f/0xf0
[  210.830026][ T7034]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.830034][ T7034] RIP: 0033:0x7f43b5d8ff17
[  210.830043][ T7034] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  210.830051][ T7034] RSP: 002b:00007ffffcca9fd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  210.830062][ T7034] RAX: 0000000000000000 RBX: 00007f43b5e11c05 RCX: 00007f43b5d8ff17
[  210.830068][ T7034] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffffccaa090
[  210.830073][ T7034] RBP: 00007ffffccaa090 R08: 0000000000000000 R09: 0000000000000000
[  210.830078][ T7034] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffffccab120
[  210.830083][ T7034] R13: 00007f43b5e11c05 R14: 0000000000032f6a R15: 00007ffffccab160
[  210.830093][ T7034]  </TASK>
[  210.830097][ T7034] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  211.027235][T11876] loop6: detected capacity change from 0 to 512
[  211.065884][T11876] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  211.097075][T11876] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  211.101902][T11876] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  211.115610][T11876] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  211.158566][T11876] EXT4-fs (loop6): Remounting filesystem read-only
[  211.341124][T11557] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  211.398763][T11887] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2342'.
[  211.416960][T11885] loop6: detected capacity change from 0 to 4096
[  211.425377][T11885] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512).
[  211.435210][ T5238] Bluetooth: hci0: command tx timeout
[  212.544728][T11949] loop4: detected capacity change from 0 to 256
[  212.557351][T11949] FAT-fs (loop4): Directory bread(block 64) failed
[  212.560189][T11949] FAT-fs (loop4): Directory bread(block 65) failed
[  212.563301][T11949] FAT-fs (loop4): Directory bread(block 66) failed
[  212.566531][T11949] FAT-fs (loop4): Directory bread(block 67) failed
[  212.572941][T11949] FAT-fs (loop4): Directory bread(block 68) failed
[  212.582365][T11949] FAT-fs (loop4): Directory bread(block 69) failed
[  212.584902][T11949] FAT-fs (loop4): Directory bread(block 70) failed
[  212.587069][T11949] FAT-fs (loop4): Directory bread(block 71) failed
[  212.599051][T11949] FAT-fs (loop4): Directory bread(block 72) failed
[  212.601497][T11949] FAT-fs (loop4): Directory bread(block 73) failed
[  212.628764][T11956] netlink: 'syz.2.2378': attribute type 7 has an invalid length.
[  212.634740][T11956] netlink: 'syz.2.2378': attribute type 8 has an invalid length.
[  212.723269][T11964] loop4: detected capacity change from 0 to 128
[  212.741508][T11964] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only
[  212.751230][T11964] hpfs: filesystem error: improperly stopped
[  212.753698][T11964] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  212.757033][T11964] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories
[  212.766563][T11964] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2
[  212.909578][T11978] netlink: 'syz.2.2389': attribute type 11 has an invalid length.
[  212.917948][T11982] netlink: 'syz.4.2390': attribute type 12 has an invalid length.
[  212.922824][T11982] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2390'.
[  213.146085][T12002] nbd: device at index 4 is going down
[  213.254533][T12014] loop4: detected capacity change from 0 to 1024
[  213.264320][T12014] EXT4-fs: Ignoring removed bh option
[  213.278013][T12014] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  213.312707][T12014] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt.
[  213.335639][ T7034] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.462416][T12031] loop6: detected capacity change from 0 to 16
[  213.501560][T12031] erofs (device loop6): mounted with root inode @ nid 36.
[  213.681068][ T5238] Bluetooth: hci0: command tx timeout
[  214.334771][T12090] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  214.390432][T12094] syzkaller1: tun_chr_ioctl cmd 26130
[  214.507227][T12098] program syz.6.2434 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  215.282846][ T5238] Bluetooth: hci1: command tx timeout
[  215.422738][T12130] bridge0: port 1(bridge_slave_0) entered listening state
[  215.532165][T12136] loop4: detected capacity change from 0 to 512
[  215.535816][T12136] EXT4-fs: Ignoring removed mblk_io_submit option
[  215.538524][T12136] EXT4-fs: inline encryption not supported
[  215.542456][T12136] EXT4-fs: Ignoring removed mblk_io_submit option
[  215.549171][T12136] EXT4-fs (loop4): Test dummy encryption mode enabled
[  215.552822][T12136] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  215.560608][T12136] EXT4-fs (loop4): 1 truncate cleaned up
[  215.565319][T12136] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  215.590429][ T7034] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.642265][T12141] loop4: detected capacity change from 0 to 512
[  215.651657][T12141] EXT4-fs: Ignoring removed nobh option
[  215.681968][T12141] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.2451: corrupted inode contents
[  215.691242][T12141] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.2451: mark_inode_dirty error
[  215.698457][T12141] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.2451: corrupted inode contents
[  215.708687][T12141] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.2451: mark_inode_dirty error
[  215.718091][T12141] __quota_error: 7 callbacks suppressed
[  215.718110][T12141] Quota error (device loop4): write_blk: dquota write failed
[  215.724974][T12141] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  215.731071][T12141] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.2451: Failed to acquire dquot type 0
[  215.738050][T12141] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2451: corrupted inode contents
[  215.744766][T12141] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.2451: mark_inode_dirty error
[  215.749792][T12141] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2451: corrupted inode contents
[  215.757856][T12141] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.2451: mark_inode_dirty error
[  215.763478][T12141] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2451: corrupted inode contents
[  215.771485][T12141] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem
[  215.776704][T12141] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2451: corrupted inode contents
[  215.782215][T12141] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.2451: mark_inode_dirty error
[  215.790404][T12141] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem
[  215.795536][T12141] EXT4-fs (loop4): 1 truncate cleaned up
[  215.800570][T12141] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  215.804991][T12141] ext4 filesystem being mounted at /597/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  215.963080][T12159] netlink: 'syz.2.2460': attribute type 5 has an invalid length.
[  215.965858][T12159] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.2460'.
[  216.068946][ T7034] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.074717][   T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.081368][ T7034] syz-executor (7034) used greatest stack depth: 16384 bytes left
[  216.126871][   T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.163864][   T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.170106][ T5894] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  216.229397][   T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.325725][   T13] bridge_slave_1: left allmulticast mode
[  216.328222][   T13] bridge_slave_1: left promiscuous mode
[  216.335482][ T5894] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  216.339562][ T5894] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  216.346299][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.361613][ T5854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  216.365019][ T5894] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.367300][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  216.369727][   T13] bridge_slave_0: left allmulticast mode
[  216.375394][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  216.377709][ T5894] usb 7-1: config 0 descriptor??
[  216.381086][   T13] bridge_slave_0: left promiscuous mode
[  216.385804][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.391905][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  216.394026][ T5894] pwc: Askey VC010 type 2 USB webcam detected.
[  216.400458][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  216.521181][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  216.527274][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  216.531957][   T13] bond0 (unregistering): Released all slaves
[  216.616509][   T13] tipc: Disabling bearer <udp:syz2>
[  216.622767][   T13] tipc: Left network mode
[  216.713810][T12172] chnl_net:caif_netlink_parms(): no params data found
[  216.759640][   T13] hsr_slave_0: left promiscuous mode
[  216.761936][   T13] hsr_slave_1: left promiscuous mode
[  216.764243][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  216.768189][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  216.775602][   T13] veth1_macvtap: left promiscuous mode
[  216.777397][   T13] veth0_macvtap: left promiscuous mode
[  216.831090][ T5894] pwc: recv_control_msg error -32 req 02 val 2b00
[  216.835157][ T5894] pwc: recv_control_msg error -32 req 02 val 2700
[  216.838508][ T5894] pwc: recv_control_msg error -32 req 02 val 2c00
[  216.841902][ T5894] pwc: recv_control_msg error -32 req 04 val 1000
[  216.845520][ T5894] pwc: recv_control_msg error -32 req 04 val 1300
[  216.850042][ T5894] pwc: recv_control_msg error -32 req 04 val 1400
[  216.853890][ T5894] pwc: recv_control_msg error -32 req 02 val 2000
[  216.858617][ T5894] pwc: recv_control_msg error -32 req 02 val 2100
[  216.862294][ T5894] pwc: recv_control_msg error -32 req 04 val 1500
[  216.866180][ T5894] pwc: recv_control_msg error -32 req 02 val 2500
[  216.870786][ T5894] pwc: recv_control_msg error -32 req 02 val 2400
[  216.873993][ T5894] pwc: recv_control_msg error -32 req 02 val 2600
[  216.877413][ T5894] pwc: recv_control_msg error -32 req 02 val 2900
[  216.905534][   T13] team0 (unregistering): Port device team_slave_1 removed
[  216.917258][   T13] team0 (unregistering): Port device team_slave_0 removed
[  217.022461][T12172] bridge0: port 1(bridge_slave_0) entered blocking state
[  217.025750][T12172] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.028779][T12172] bridge_slave_0: entered allmulticast mode
[  217.032125][T12172] bridge_slave_0: entered promiscuous mode
[  217.041697][T12172] bridge0: port 2(bridge_slave_1) entered blocking state
[  217.044853][T12172] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.048140][T12172] bridge_slave_1: entered allmulticast mode
[  217.051471][T12172] bridge_slave_1: entered promiscuous mode
[  217.072338][T12172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  217.079638][T12172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  217.095944][ T5894] pwc: recv_control_msg error -71 req 04 val 1100
[  217.102558][ T5894] pwc: recv_control_msg error -71 req 04 val 1200
[  217.108855][ T5894] pwc: Registered as video103.
[  217.116019][ T5894] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input10
[  217.134616][ T5894] usb 7-1: USB disconnect, device number 2
[  217.139649][T12172] team0: Port device team_slave_0 added
[  217.154765][T12172] team0: Port device team_slave_1 added
[  217.169680][ T5847] udevd[5847]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory
[  217.199031][T12172] batman_adv: batadv0: Adding interface: batadv_slave_0
[  217.201760][T12172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  217.228136][T12172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  217.236762][T12172] batman_adv: batadv0: Adding interface: batadv_slave_1
[  217.240362][T12172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  217.253376][T12172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  217.285624][T12172] hsr_slave_0: entered promiscuous mode
[  217.288975][T12172] hsr_slave_1: entered promiscuous mode
[  217.465635][T12172] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  217.487695][T12172] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  217.503135][T12172] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  217.514693][   T13] ==================================================================
[  217.518330][   T13] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x666/0xca0
[  217.521487][   T13] Write of size 8 at addr ffff88811af64da8 by task kworker/u8:1/13
[  217.524820][   T13] 
[  217.526490][   T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
[  217.526508][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  217.526519][   T13] Workqueue: netns cleanup_net
[  217.526544][   T13] Call Trace:
[  217.526551][   T13]  <TASK>
[  217.526558][   T13]  dump_stack_lvl+0x189/0x250
[  217.526575][   T13]  ? __virt_addr_valid+0x1c8/0x5c0
[  217.526592][   T13]  ? rcu_is_watching+0x15/0xb0
[  217.526606][   T13]  ? __pfx_dump_stack_lvl+0x10/0x10
[  217.526622][   T13]  ? rcu_is_watching+0x15/0xb0
[  217.526633][   T13]  ? lock_release+0x4b/0x3e0
[  217.526655][   T13]  ? __virt_addr_valid+0x1c8/0x5c0
[  217.526669][   T13]  ? __virt_addr_valid+0x4a5/0x5c0
[  217.526684][   T13]  print_report+0xca/0x240
[  217.526696][   T13]  ? __xfrm_state_delete+0x666/0xca0
[  217.526716][   T13]  kasan_report+0x118/0x150
[  217.526733][   T13]  ? __xfrm_state_delete+0x666/0xca0
[  217.526752][   T13]  __xfrm_state_delete+0x666/0xca0
[  217.526775][   T13]  xfrm_state_flush+0x45f/0x770
[  217.526798][   T13]  xfrm6_tunnel_net_exit+0x3c/0x100
[  217.526813][   T13]  ops_undo_list+0x49a/0x990
[  217.526864][   T13]  ? __pfx_ops_undo_list+0x10/0x10
[  217.526886][   T13]  ? do_raw_spin_unlock+0x4d/0x240
[  217.526905][   T13]  cleanup_net+0x4c5/0x800
[  217.526926][   T13]  ? __pfx_cleanup_net+0x10/0x10
[  217.526947][   T13]  ? rcu_is_watching+0x15/0xb0
[  217.526961][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  217.526975][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  217.526989][   T13]  process_scheduled_works+0xae1/0x17b0
[  217.527012][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  217.527032][   T13]  worker_thread+0x8a0/0xda0
[  217.527081][   T13]  kthread+0x711/0x8a0
[  217.527102][   T13]  ? __pfx_worker_thread+0x10/0x10
[  217.527116][   T13]  ? __pfx_kthread+0x10/0x10
[  217.527133][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  217.527151][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  217.527169][   T13]  ? __pfx_kthread+0x10/0x10
[  217.527186][   T13]  ret_from_fork+0x3fc/0x770
[  217.527203][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  217.527219][   T13]  ? __switch_to_asm+0x39/0x70
[  217.527246][   T13]  ? __switch_to_asm+0x33/0x70
[  217.527263][   T13]  ? __pfx_kthread+0x10/0x10
[  217.527294][   T13]  ret_from_fork_asm+0x1a/0x30
[  217.527318][   T13]  </TASK>
[  217.527324][   T13] 
[  217.619885][   T13] Allocated by task 10353:
[  217.621623][   T13]  kasan_save_track+0x3e/0x80
[  217.623440][   T13]  __kasan_slab_alloc+0x6c/0x80
[  217.625123][   T13]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  217.627294][   T13]  xfrm_state_alloc+0x24/0x2f0
[  217.629311][   T13]  __find_acq_core+0x8a7/0x1c00
[  217.631324][   T13]  xfrm_find_acq+0x78/0xa0
[  217.633023][   T13]  xfrm_alloc_userspi+0x6b3/0xc90
[  217.634913][   T13]  xfrm_user_rcv_msg+0x7a3/0xab0
[  217.636589][   T13]  netlink_rcv_skb+0x208/0x470
[  217.638921][   T13]  xfrm_netlink_rcv+0x79/0x90
[  217.640852][   T13]  netlink_unicast+0x82f/0x9e0
[  217.642810][   T13]  netlink_sendmsg+0x805/0xb30
[  217.644487][   T13]  __sock_sendmsg+0x21c/0x270
[  217.646011][   T13]  ____sys_sendmsg+0x505/0x830
[  217.647765][   T13]  ___sys_sendmsg+0x21f/0x2a0
[  217.649790][   T13]  __x64_sys_sendmsg+0x19b/0x260
[  217.652083][   T13]  do_syscall_64+0xfa/0x3b0
[  217.653959][   T13]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.656340][   T13] 
[  217.657333][   T13] Freed by task 5894:
[  217.658940][   T13]  kasan_save_track+0x3e/0x80
[  217.661016][   T13]  kasan_save_free_info+0x46/0x50
[  217.663394][   T13]  __kasan_slab_free+0x5b/0x80
[  217.665396][   T13]  kmem_cache_free+0x18f/0x400
[  217.667356][   T13]  xfrm_state_gc_task+0x52d/0x6b0
[  217.669421][   T13]  process_scheduled_works+0xae1/0x17b0
[  217.671616][   T13]  worker_thread+0x8a0/0xda0
[  217.673534][   T13]  kthread+0x711/0x8a0
[  217.675328][   T13]  ret_from_fork+0x3fc/0x770
[  217.677411][   T13]  ret_from_fork_asm+0x1a/0x30
[  217.679597][   T13] 
[  217.680666][   T13] The buggy address belongs to the object at ffff88811af64d80
[  217.680666][   T13]  which belongs to the cache xfrm_state of size 928
[  217.686077][   T13] The buggy address is located 40 bytes inside of
[  217.686077][   T13]  freed 928-byte region [ffff88811af64d80, ffff88811af65120)
[  217.691599][   T13] 
[  217.692662][   T13] The buggy address belongs to the physical page:
[  217.695289][   T13] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88811af64d80 pfn:0x11af64
[  217.699605][   T13] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  217.703121][   T13] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  217.706255][   T13] page_type: f5(slab)
[  217.707876][   T13] raw: 057ff00000000040 ffff88801d7d6280 dead000000000122 0000000000000000
[  217.711228][   T13] raw: ffff88811af64d80 00000000800e000b 00000000f5000000 0000000000000000
[  217.714242][   T13] head: 057ff00000000040 ffff88801d7d6280 dead000000000122 0000000000000000
[  217.717516][   T13] head: ffff88811af64d80 00000000800e000b 00000000f5000000 0000000000000000
[  217.720414][   T13] head: 057ff00000000002 ffffea00046bd901 00000000ffffffff 00000000ffffffff
[  217.723769][   T13] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  217.727350][   T13] page dumped because: kasan: bad access detected
[  217.729849][   T13] page_owner tracks the page as allocated
[  217.731841][   T13] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6151, tgid 6142 (syz.0.109), ts 61900155363, free_ts 61424986343
[  217.738372][   T13]  post_alloc_hook+0x240/0x2a0
[  217.740450][   T13]  get_page_from_freelist+0x21e4/0x22c0
[  217.742199][   T13]  __alloc_frozen_pages_noprof+0x181/0x370
[  217.744466][   T13]  alloc_pages_mpol+0x232/0x4a0
[  217.746258][   T13]  allocate_slab+0x8a/0x370
[  217.748122][   T13]  ___slab_alloc+0xbeb/0x1410
[  217.749861][   T13]  kmem_cache_alloc_noprof+0x283/0x3c0
[  217.751732][   T13]  xfrm_state_alloc+0x24/0x2f0
[  217.753361][   T13]  __find_acq_core+0x8a7/0x1c00
[  217.754903][   T13]  xfrm_find_acq+0x78/0xa0
[  217.756365][   T13]  xfrm_alloc_userspi+0x6b3/0xc90
[  217.757963][   T13]  xfrm_user_rcv_msg+0x7a3/0xab0
[  217.759893][   T13]  netlink_rcv_skb+0x208/0x470
[  217.761844][   T13]  xfrm_netlink_rcv+0x79/0x90
[  217.763792][   T13]  netlink_unicast+0x82f/0x9e0
[  217.765549][   T13]  netlink_sendmsg+0x805/0xb30
[  217.767382][   T13] page last free pid 6125 tgid 6124 stack trace:
[  217.769511][   T13]  __free_frozen_pages+0xbc4/0xd30
[  217.771366][   T13]  stack_depot_save_flags+0x436/0x860
[  217.773509][   T13]  kasan_save_track+0x4f/0x80
[  217.774939][   T13]  __kasan_slab_alloc+0x6c/0x80
[  217.776707][   T13]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  217.779126][   T13]  kmalloc_reserve+0xbd/0x290
[  217.780940][   T13]  __alloc_skb+0x142/0x2d0
[  217.782879][   T13]  skb_copy+0x188/0x800
[  217.784996][   T13]  mac80211_hwsim_tx_frame_no_nl+0xcd3/0x11c0
[  217.787720][   T13]  mac80211_hwsim_tx+0x1855/0x25d0
[  217.790276][   T13]  ieee80211_handle_wake_tx_queue+0x191/0x2a0
[  217.792746][   T13]  ieee80211_queue_skb+0x1a31/0x21c0
[  217.794421][   T13]  ieee80211_tx+0x297/0x420
[  217.796280][   T13]  __ieee80211_subif_start_xmit+0xccf/0x1610
[  217.798769][   T13]  ieee80211_subif_start_xmit+0xe0/0x510
[  217.801189][   T13]  dev_hard_start_xmit+0x2d7/0x830
[  217.803351][   T13] 
[  217.804139][   T13] Memory state around the buggy address:
[  217.805891][   T13]  ffff88811af64c80: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  217.808360][   T13]  ffff88811af64d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  217.810882][   T13] >ffff88811af64d80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  217.813569][   T13]                                   ^
[  217.815270][   T13]  ffff88811af64e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  217.817866][   T13]  ffff88811af64e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  217.820798][   T13] ==================================================================
[  217.824400][   T13] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  217.827358][   T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
[  217.831863][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  217.836221][   T13] Workqueue: netns cleanup_net
[  217.837731][   T13] Call Trace:
[  217.839164][   T13]  <TASK>
[  217.840093][   T13]  dump_stack_lvl+0x99/0x250
[  217.841538][   T13]  ? __asan_memcpy+0x40/0x70
[  217.843271][   T13]  ? __pfx_dump_stack_lvl+0x10/0x10
[  217.845640][   T13]  ? __pfx__printk+0x10/0x10
[  217.847864][   T13]  vpanic+0x281/0x750
[  217.849456][   T13]  ? __pfx_print_hex_dump+0x10/0x10
[  217.851235][   T13]  ? __pfx_vpanic+0x10/0x10
[  217.852824][   T13]  ? rcu_is_watching+0x15/0xb0
[  217.855176][   T13]  panic+0xb9/0xc0
[  217.856782][   T13]  ? __pfx_panic+0x10/0x10
[  217.858395][   T13]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  217.860520][   T13]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  217.863001][   T13]  ? __xfrm_state_delete+0x666/0xca0
[  217.865212][   T13]  check_panic_on_warn+0x89/0xb0
[  217.866916][   T13]  ? __xfrm_state_delete+0x666/0xca0
[  217.868913][   T13]  end_report+0x78/0x160
[  217.870509][   T13]  kasan_report+0x129/0x150
[  217.872132][   T13]  ? __xfrm_state_delete+0x666/0xca0
[  217.873977][   T13]  __xfrm_state_delete+0x666/0xca0
[  217.875919][   T13]  xfrm_state_flush+0x45f/0x770
[  217.877827][   T13]  xfrm6_tunnel_net_exit+0x3c/0x100
[  217.880214][   T13]  ops_undo_list+0x49a/0x990
[  217.881898][   T13]  ? __pfx_ops_undo_list+0x10/0x10
[  217.883661][   T13]  ? do_raw_spin_unlock+0x4d/0x240
[  217.885729][   T13]  cleanup_net+0x4c5/0x800
[  217.887519][   T13]  ? __pfx_cleanup_net+0x10/0x10
[  217.889181][   T13]  ? rcu_is_watching+0x15/0xb0
[  217.890793][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  217.892893][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  217.895436][   T13]  process_scheduled_works+0xae1/0x17b0
[  217.897554][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  217.900691][   T13]  worker_thread+0x8a0/0xda0
[  217.902654][   T13]  kthread+0x711/0x8a0
[  217.904065][   T13]  ? __pfx_worker_thread+0x10/0x10
[  217.906032][   T13]  ? __pfx_kthread+0x10/0x10
[  217.907947][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  217.910060][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  217.912646][   T13]  ? __pfx_kthread+0x10/0x10
[  217.914742][   T13]  ret_from_fork+0x3fc/0x770
[  217.916774][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  217.918867][   T13]  ? __switch_to_asm+0x39/0x70
[  217.920826][   T13]  ? __switch_to_asm+0x33/0x70
[  217.922774][   T13]  ? __pfx_kthread+0x10/0x10
[  217.924851][   T13]  ret_from_fork_asm+0x1a/0x30
[  217.926812][   T13]  </TASK>
[  217.928820][   T13] Kernel Offset: disabled
[  217.930660][   T13] Rebooting in 86400 seconds..

VM DIAGNOSIS:
02:57:10  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000107090
R8 =ffff888106f18237 R9 =1ffff11020de3046 R10=dffffc0000000000 R11=ffffffff854f1c80
R12=dffffc0000000000 R13=ffffffff99afa8d0 R14=ffffffff99def3e0 R15=0000000000000000
RIP=ffffffff854f1cfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fbb0306fdd3 CR3=000000003cce6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f517a412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=ffff888136640000 RCX=ffffffff819e033d RDX=0000000000000000
RSI=0000000000000004 RDI=ffff888136640000 RBP=ffffc900066076f0 RSP=ffffc90006607438
R8 =ffff888136640003 R9 =1ffff11026cc8000 R10=dffffc0000000000 R11=ffffed1026cc8001
R12=dffffc0000000000 R13=ffffea0004977540 R14=ffff888136640004 R15=ffffc9000660775c
RIP=ffffffff819e0351 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f517b26f6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f5173fff000 CR3=0000000106ebc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=00007f517b26e5a0 00007f517b26e580
XMM02=00007f517b26e6e0 00007f517b26e560 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00007f517b26e5a0 XMM05=0000000000000000 00007f517b26e6e0
XMM06=00007f517b26e6e0 00007f517b26e560 XMM07=00007f517b26e5a0 00007f517b26e580
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f517a412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
