last executing test programs:

3m47.458243078s ago: executing program 32 (id=128):
r0 = socket(0x40000000015, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x2717, 0x0, &(0x7f0000000080)=0xf0ff7f)

3m16.945957208s ago: executing program 33 (id=373):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000009640), 0x802, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000098c0)={0x4, {0xa, 0x80000000, 0x9, 0x8870, 0x2, 0x1}})

2m56.801265535s ago: executing program 4 (id=559):
r0 = syz_io_uring_setup(0xc97, &(0x7f0000000700)={0x0, 0x6015, 0x800, 0xff7fffff, 0x11c}, &(0x7f00000003c0)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r3 = socket$rxrpc(0x21, 0x2, 0x2)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r3, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0, 0x10121, 0x1})
io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0)

2m56.658548493s ago: executing program 4 (id=560):
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x6)
getsockopt$ax25_int(r0, 0x101, 0x9, &(0x7f00000000c0), &(0x7f0000000100)=0x4)

2m56.599401893s ago: executing program 4 (id=561):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xf0}}, 0x0)
syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x8, 0x2b, 0x0, @private2, @local, {[], {0x0, 0x0, 0x8}}}}}}, 0x0)

2m56.472493954s ago: executing program 4 (id=562):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r2, r1, &(0x7f00000000c0)=0x58, 0xa)

2m54.52122166s ago: executing program 4 (id=568):
openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0), 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0)

2m53.361959589s ago: executing program 4 (id=573):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_SIZE={0x8}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_BYTEORDER_SREG={0x8}, @NFTA_BYTEORDER_LEN={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@newpolicy={0x1a0, 0x13, 0x831, 0x70bd28, 0x25dfdbfd, {{@in=@rand_addr=0x64010102, @in=@rand_addr=0x64010100, 0x4e23, 0x0, 0x4e24, 0x9, 0xa, 0x20, 0x20, 0x3c}, {0x8000000000, 0xfffffffffffffffb, 0x800, 0x8000, 0x4, 0x4, 0x6b06, 0x1000}, {0x9, 0xff6, 0x46, 0xfffffffffffffffb}, 0xfffffffa, 0x0, 0x0, 0x1, 0x3, 0x2}, [@migrate={0xe8, 0x11, [{@in=@private=0xa010100, @in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x33, 0x3, 0x0, 0x3503, 0xa, 0x2}, {@in=@rand_addr=0x64010101, @in=@private=0xa010100, @in=@broadcast, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x6c, 0x4, 0x0, 0x3504, 0x2, 0x2}, {@in6=@private2, @in6=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@local, 0xff, 0x5, 0x0, 0x3500, 0x2, 0xa}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x8c0}, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_io_uring_setup(0x207, &(0x7f0000000340)={0x0, 0x3444, 0x52f, 0x2, 0xa3}, 0x0, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"})
ioctl$USBDEVFS_CLEAR_HALT(r5, 0xc0105502, &(0x7f0000000340)={0x1, 0x1})
userfaultfd(0x801)
syz_open_dev$sndpcmp(0x0, 0x1, 0x50b001)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x101, 0x100}})

2m38.127322933s ago: executing program 34 (id=573):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_SIZE={0x8}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_BYTEORDER_SREG={0x8}, @NFTA_BYTEORDER_LEN={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@newpolicy={0x1a0, 0x13, 0x831, 0x70bd28, 0x25dfdbfd, {{@in=@rand_addr=0x64010102, @in=@rand_addr=0x64010100, 0x4e23, 0x0, 0x4e24, 0x9, 0xa, 0x20, 0x20, 0x3c}, {0x8000000000, 0xfffffffffffffffb, 0x800, 0x8000, 0x4, 0x4, 0x6b06, 0x1000}, {0x9, 0xff6, 0x46, 0xfffffffffffffffb}, 0xfffffffa, 0x0, 0x0, 0x1, 0x3, 0x2}, [@migrate={0xe8, 0x11, [{@in=@private=0xa010100, @in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x33, 0x3, 0x0, 0x3503, 0xa, 0x2}, {@in=@rand_addr=0x64010101, @in=@private=0xa010100, @in=@broadcast, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x6c, 0x4, 0x0, 0x3504, 0x2, 0x2}, {@in6=@private2, @in6=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@local, 0xff, 0x5, 0x0, 0x3500, 0x2, 0xa}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x8c0}, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_io_uring_setup(0x207, &(0x7f0000000340)={0x0, 0x3444, 0x52f, 0x2, 0xa3}, 0x0, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"})
ioctl$USBDEVFS_CLEAR_HALT(r5, 0xc0105502, &(0x7f0000000340)={0x1, 0x1})
userfaultfd(0x801)
syz_open_dev$sndpcmp(0x0, 0x1, 0x50b001)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x101, 0x100}})

2m1.987091453s ago: executing program 2 (id=1001):
unshare(0x22020600)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
copy_file_range(r1, 0x0, r0, 0x0, 0xfffffffffffffff8, 0x20)

2m1.880339276s ago: executing program 2 (id=1003):
r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000240)={r2, 0x0, 0x0, 0x100000, 0x0, [<r3=>0x0], [0x0, 0x0, 0x0, 0x2e7]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3, 0x0, <r4=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r4})

2m1.765775254s ago: executing program 2 (id=1006):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000801000000000000004000000850000004800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)

2m1.705189843s ago: executing program 2 (id=1008):
syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x1010006, &(0x7f0000000640)=ANY=[@ANYBLOB='quota,discard=0x000000000000aff9,iocharset=none,errors=continue,iocharset=cp869,discard=0x0000000000000005,nodiscard,uid=', @ANYRESHEX=0x0, @ANYRES8=0x0, @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0x22, 0x61b6, &(0x7f000001b700)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000000)=""/41, 0x29)

2m1.118099028s ago: executing program 2 (id=1018):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x70bd2b, 0x25dfdbff, {0x2, 0x1f, 0x0, 0xfd, r1}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_FLAGS={0x8, 0x8, 0x672}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x48010)

1m59.893676811s ago: executing program 2 (id=1025):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)={0x1c, r1, 0x8083540e3272eb67, 0x70bd2b, 0xfffffffe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000000}, 0x40840)
syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r0)

1m59.635306621s ago: executing program 35 (id=1025):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)={0x1c, r1, 0x8083540e3272eb67, 0x70bd2b, 0xfffffffe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000000}, 0x40840)
syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r0)

1m36.088382297s ago: executing program 5 (id=1250):
restart_syscall()

1m36.009144961s ago: executing program 5 (id=1251):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}], 0x2, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r2=>0x0}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000300)={r2}, 0x8)

1m35.936919326s ago: executing program 5 (id=1254):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e)
listen(r0, 0x100)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
read$eventfd(r1, &(0x7f0000000080), 0x8)

1m35.866107755s ago: executing program 5 (id=1256):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000340)={[{@shortname_winnt}, {@shortname_winnt}, {@rodir}, {@fat=@discard}, {@fat=@flush}, {@shortname_winnt}, {@numtail}, {@fat=@usefree}, {@fat=@time_offset={'time_offset', 0x3d, 0x36c}}, {@uni_xlate}, {@utf8no}, {@numtail}]}, 0x0, 0x289, &(0x7f0000000580)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100)

1m35.822614182s ago: executing program 5 (id=1257):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)

1m35.539225702s ago: executing program 5 (id=1260):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000040), 0x6)

1m35.43321591s ago: executing program 36 (id=1260):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000040), 0x6)

1m7.327160441s ago: executing program 0 (id=1536):
r0 = io_uring_setup(0x2410, &(0x7f0000000040)={0x0, 0x6462, 0x0, 0x3, 0x30b})
io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, 0xffffffffffffffff, 0x1)

1m7.247014331s ago: executing program 0 (id=1537):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x403, 0x70b528, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xa1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xba01, 0x0, 0x4004}, 0x810)

1m7.23829063s ago: executing program 0 (id=1538):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m7.146679694s ago: executing program 0 (id=1539):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0xfc, 0x0, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000200)={0x200000, 0x0, 0xa}, 0x18)

1m7.146165573s ago: executing program 0 (id=1540):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, 0x0, 0x0)

1m6.874369085s ago: executing program 0 (id=1541):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x400000000000}, 0x18)
r0 = io_uring_setup(0x6280, &(0x7f0000000580)={0x0, 0x90000000, 0x1, 0x0, 0x1d2})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], &(0x7f0000000200), 0x1}, 0x20)

1m6.616037007s ago: executing program 37 (id=1541):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x400000000000}, 0x18)
r0 = io_uring_setup(0x6280, &(0x7f0000000580)={0x0, 0x90000000, 0x1, 0x0, 0x1d2})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], &(0x7f0000000200), 0x1}, 0x20)

47.114388236s ago: executing program 8 (id=1720):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xaa}}, 0x8)

47.11418625s ago: executing program 8 (id=1721):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000080)=0x2, 0x8)

47.025361923s ago: executing program 8 (id=1722):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$igmp6(0xa, 0x3, 0x2)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)

46.855113607s ago: executing program 8 (id=1723):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000004c, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000152,iocharset=iso8859-1,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030372c646973636172642c00214b3cf244ea5fb7437f2c69f67a093e240a6e978fa4cd2d"], 0x1, 0x14f5, &(0x7f0000001580)="$eJzs3AuYjlXXOPC99t43Y5r0NMlh2GuvmycNtkmSHBJySJIkSXJKSJokSUgMOSUNSchxkhyGkBymMWmcz4eckyavNEkSklPY/0vv+33e9+v9vr7v//b/u65v1u+69jV7zf2s9ax71lzz3PdzXfP80HNUvRb1azcjIvEvgb9+SRFCxAghhgkhbhBCBEKISvGV4q8cL6Ag5V97EvbnejT9WnfAriWef97G88/beP55G88/b+P55208/7yN55+38fwZy8u2zyl2I6+8u/j9/7yMX///F8ktP/mbjeVv7vU/SOH55208/7yN55+38fzzNp5/3sbz/9+v1n9xjOeft/H8GcvLrvX7z7yu7brWv3+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxvKGc/4qLYT4t/217osxxhhjjDHGGGN/Hp//WnfAGGOMMcYYY4yx//dASKGEFoHIJ/KLGFFAxIrrRJy4XhQUN4iIuFHEi5tEIXGzKCyKiKKimEgQxUUJYQQKK0iEoqQoJaLiFlFa3CoSRRlRVpQTTpQXSeI2UUHcLiqKO0QlcaeoLO4SVURVUU1UF3eLGuIeUVPUErXFvaKOqCvqifriPtFA3C8aigdEI/GgaCweEk3Ew6KpeEQ0E4+K5uIx0UI8LlqKJ0Qr0Vq0EW1Fu/+r/FdEX/Gq6Cf6ixQxQAwUr4lBYrAYIoaKYeJ1MVy8IUaIN0WqGClGibfEaPG2GCPeEWPFODFevCsmiIlikpgspoipIk28J6aJ98V08YGYIWaKWWK2SBdzxFzxoZgn5osF4iOxUHwsFonFYolYKjLEJyJTLBNZ4lOxXHwmssUKsVKsEqvFGrFWrBPrxQaxUWwSm8UWsVVsE9vF52KH2Cl2id1ij9gr9okvxH7xpTggvhI54uv/Yf7Z/5DfCwQIkCBBg4Z8kA9iIAZiIRbiIA4KQkGIQATiIR4KQSEoDIWhKBSFBEiAElACEBAICEpCSYhCFEpDaUiERCgLZcGBgyRIggpwO1SEilAJKkFlqAxVoCpUhepQHWpADagJNaE21IY6UAfqQT24D+6D+6EhNIRG0AgaQ2NoAk2gKTSFZtAMmkNzaAEtoCW0hFbQCtpAG2gH7aA9tIcO0AE6QSfoDJ2hC3SBZEiGrtAVukE36A7doQf0gJ7QE3pBb+gNr8Ar8Cq8Cv2hjhwAA2EgDIJBMASGwlB4HYbDG/AGvAmpMBJGwVvwFrwNY+AMjIVxMB7GQw05ESbBZCA5FdIgDabBNJgO02EGzISZMBvSYQ7MhbkwD+bDfPgIFsLH8DEshsWwFDIgAzJhGWRBFiyHs5ANK2AlrILVsAZWwzpYD+tgI2yCjbAFtsA22Aafw+ewE3bCbtgNe2EvfAFfwJfwJaRCDuTAQTgIh+AQHIbDkAu5cASOwFE4CsfgGByH43ACTsIpOAmn4TScgbNwDs7BBbgAF+GlhO+a7y2zIVXIK7TUMp/MJ2NkjIyVsTJOxsmCsqCMyIiMl/GykCwkC8vCsqgsKhNkgiwhS0iUKEmGsqQsKaMyKkvL0jJRJsqysqx00skkmSQryAqyoqwoK8k7ZWV5l6wiq8qOrrqsLmvITq6mrCVry9qyjqwr68n6sr5sIBvIhrKhbCQbycaysWwiH5ZN5QAYAo/KK5NpIUdCSzkKWsnWso1sK9+GJ2V7OQY6yI6yk3xajoOx0EW2d8nyOdlVToJu8gU5GV6UPeRU6Clflr1kb9lHviL7yg6un+wvZ8AAOVDOhkFysBwih8p5UFdemVg9+aZMlSPlKPmWXApvyzHyHTlWjpPj5btygpwoJ8nJcoqcKtPke3KafF9Olx/IGXKmnCVny3Q5R86VH8p5cr5cID+SC+XHcpFcLJfIpTJDfiIz5TKZJT+Vy+VnMluukCvlKrlarpFr5Tq5Xm6QG+UmuVlukVvlNrldfi53yJ1yl9wt98i9cp/8Qu6XX8oD8iuZI7+WB+Vf5CH5jTwsv5W58jt5RH4vj8of5DH5ozwuf5In5El5Sv4sT8tf5Bl5Vp6T5+UF+au8KC/Jy9JLoUBJpZRWgcqn8qsYVUDFqutUnLpeFVQ3qIi6UcWrm1QhdbMqrIqooqqYSlDFVQllFCqrSIWqpCqlouoWVVrdqhJVGVVWlVNOlVdJ6jZVQd2uKqo7VCV1p6qs7lJVVFVVTVVXd6sa6h5VU9VStdW9qo6qq+qp+uo+1UDdrxqqB1Qj9aBqrB5STdTDqql6RDVTj6rm6jHVQj2uWqonVCvVWrVRbVU79aRqr55SHVRH1Uk9rTqrZ1QX9axKVs+prup51U29oLqrF1UP9ZLqqV5WvVRv1UddUpeVV/1Uf5WiBqiB6jU1SA1WQ9RQNUy9roarN9QI9aZKVSPVKPWWGq3eVmPUO2qsGqfGq3fVBDVRTVKT1RQ1VaWp99Q09b6arj5QM9RMNUvNVulqjhryt0oL/hv57/+T/BG/Pfs2tV19rnaonWqX2q32qL1qn9qn9qv96oA6oHJUjjqoDqpD6pA6rA6rXJWrjqgj6qg6qo6pY+q4Oq5OqJPqvPpZnVa/qDPqrDqrzqsL6oK6+LefgdCgpVZa60Dn0/l1jC6gY/V1Ok5frwvqG3RE36jj9U26kL5ZF9ZFdFFdTCfo4rqENhq11aRDXVKX0lF9iy6tb9WJuowuq8tpp8vrJH3bv5z/R/210+10e91ed9AddCfdSXfWnXUX3UUn62TdVXfV3XQ33V131z10D91T99S9dC/dR/fRfXVf3U/30yk6RQ/Ur+lBerAeoofqYfp1PVwP1yP0CJ2qU/UoPUqP1qP1GD1Gj9Vj9Xg9Xk/QE/QkPUlP0VN0mk7T0/Q0PV1P1zP0DD1Lz9LpOl3P1XP1PD1PL9AL9EK9UC/Si/QSvURn6AydqTN1ls7Sy/Vyna1X6BV6lV6l1+g1ep1epzfoDXqT3qS36C06W2/X2/UOvUPv0rv0Hr1H79P79H69Xx/QB3SOztEH9UF9SB/Sh/Vhnatz9RF9RB/VR/UxfUwf18f1CX1Cn9Kn9Gl9Wp/RZ/Q5fU5f0Bf0RX1RX9aXr1z2BTKQgQ50kC/IF8QEMUFsEBvEBXFBwaBgEAkiQXwQHxQKbg4KB0WCokGxICEoHpQITICBDSgIg5JBqSAa3BKUDm4NEoMyQdmgXOCC8kFScFtQIbg9qBjcEVQK7gwqB3cFVYKqQbWgenB3UCO4J6gZ1ApqB/cGdYK6Qb2gfnBf0CC4P2gYPBA0Ch4MGgcPBU2Ch4OmwSNBs+DRoHnwWNAieDxoGTwRtApaB22CtkG7P7W+92eKPOX6mf4mxQwwA81rZpAZbIaYoWaYed0MN2+YEeZNk2pGmlHmLTPavG3GmHfMWDPOjDfvmglmoplkJpspZqpJM++ZaeZ9M918YGaYmWaWmW3SzRwz13xo5pn5ZoH5yCw0H5tFZrFZYpaaDPOJyTTLTJb51Cw3n5lss8KsNKvMarPGrDXrzHqzwWw0m8xms8VsNdvMdvO52WF2ml1mt9lj9pp95guz33xpDpivTI752hw0fzGHzDfmsPnW5JrvzBHzvTlqfjDHzI/muPnJnDAnzSnzszltfjFnzFlzzpw3F8yv5qK5ZC4bf+Xi/srLO2rUmA/zYQzGYCzGYhzGYUEsiBGMYDzGYyEshIWxMBbFopiACVgCS+AVhIQlsSRGMYqlsTQmYiKWxbLo0GESJmEFrIAVsSJWwkpYGStjFayC1bAa3o134z14D9bCWngv3ot1sS7Wx/rYABtgQ2yIjbARNsbG2ASbYFNsis2wGTbH5tgCW2BLbImtsBW2wTbYDtthe2yPHbADdsJO2Bk7YxfsgsmYjF2xK3bDbtgdu2MP7IE9sSf2wl7YB/tgX+yL/bAfpmAKDsSBOAgH4RAcgsNwGA7H4TgCR2AqpuIoHIWjcTSOwTE4FsfheHwXJ+BEnISTcQpOxTRMw2k4DafjdJyBM3AWzsJ0TMe5OBfn4TxcgAtwIS7ERbgIl+ASzMAMzMRMzMIsXI7LMRuzcSWuxNW4GtfiWlyP63EjbsTNuBm34lbcjttxB+7AXbgL9+Ae3If7cD/uxwN4AHMwBw/iQTyEh/AwHsZczMUjeASP4lE8hsfwOB7HE3gCT+EpPI2n8QyewXN4Di/gr3gRL+Fl9BhjpYi119k4e70taG+wMbaA/fu4qC1mE2xxW8IaW9gW+YcYrbWJtowta8tZZ8vbJHvb7+IqtqqtZqvbu20Ne4+t+bu4gb3fNrQP2Eb2QVvf3vcPcWP7kG1iH7dN7RO2mW1tm9u2toV93La0T9hWtrVtY9vazvYZ28U+a5Ptc7arff53caZdZtfbDXaj3WT32y/tOXveHrU/2Av2V9vP9rfD7Ot2uH3DjrBv2lQ78nfxePuunWAn2kl2sp1ip/4unmVn23Q7x861H9p5dv7v4gz7iV1os+wiu9gusUt/i6/0lGU/tcvtZzbbrrAr7Sq72q6xa+26f+91ld1it9ptdp/9wu6wO+0uu9vusXt/i6+cxwH7lc2xX9sj9nt7yH5jD9tjNtd+91t85fyO2R/tcfuTPWFP2lP2Z3va/mLP2LO/nf+Vc//ZXrKXrbeCgCQp0hRQPspPMVSAYuk6iqPrqSDdQBG6keLpJipEN1NhKkJFqRglUHEqQYaQLBGFVJJKUZRuodJ0KyVSGSpL5chReUqi26gC3U4V6Q6qRHdSZbqLqlBVqkbV6W6qQfdQTapFteleqkN1qR7Vp/uoAd1PDekBakQPUmN6iJrQw9SUHqFm9Cg1p8eoBT1OLekJakWtqQ21pXb0JLWnp6gDdaRO9DR1pmeoCz1LyfQcdaXnqRu9QN3pRepBL1FPepl6UW/qQ69QX3qV+lF/SqEBNJBeo0E0mIbQUBpGr9NweoNG0JuUSiNpFL1Fo+ltGkPv0FgaR+PpXZpAE2kSTaYpNJXS6D2aRu/TdPqAZtBMmkWzKZ3m0Fz6kObRfFpAH9FC+pgW0WJaQkspgz6hTFpGWfQpLafPKJtW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nT6nHbSTdtFu2kN7aR99QfvpSzpAX1EOfU0H6S90iL6hw/Qt5dJ3dIS+p6P0Ax2jH+k4/UQn6CSdop/pNP1CZ+gsnaPzdIF+pYt0iS6TJxFCKEMV6jAI84X5w5iwQBgbXhfGhdeHBcMbwkh4Yxgf3hQWCm8OC4dFwqJhsTAhLB6WCE2IoQ0pDMOSYakwGt4Slg5vDRPDMmHZsFzowvJhUnhbWCG8PawY3hFWCu8MK4d3hVXCquHjD1YP7w5rhPeENcNaYe3w3rBOWDesF9YP7wsbhPeHDcMHwkbhg2HF8KGwSfhw2DR8JGwWPho2Dx8LW4SPhy3DJ8JWYeuwTdg2bBc+GbYPnwo7hB3DTuHTYefwmbBL+GyYHD4Xdg2f/8PjKeGAcGD4Wvha6P0Dakl0aTQj+kk0M7osmhX9NLo8+lk0O7oiujK6Kro6uia6Nrouuj66Iboxuim6ObolujW6Lep9/fzCgZNOOe0Cl8/ldzGugIt117k4d70r6G5wEXeji3c3uULuZlfYFXFFXTGX4Iq7Es44dNaRC11JV8pF3S2utLvVJboyrqwr55wr75JcW9fOtXPt3VOug+voOrmn3dPuGfeMe9Y9655zXd3zrpt7wXV3L7oe7iX3knvZ9XK9XR/3iuvrXnX9XH+X4lLcQDfQDXKD3BA3xA1zw9xwN9yNcCNcqkt1o9woN9qNdmPcGDfWjXXj3Xg3wU1wk9wkN8VNcWkuzU1z09x0N93NcDPcLDfLpbt0N9fNdfPcPLfALXALExe6RW6RW+KWuAyX4TJdpstyWW65W+6yXbZb6Va61W61W+vWuvVuvdvoNrrNbrPb6ra67W672+F2uF1ul9vj9rh9bp/b7/a7A+6Ay3E57qA76A65Q+6w+9bluu/cEfe9O+p+cMfcj+64+8mdcCfdKfezO+1+cWfcWXfOnXcX3K/uorvkLjvv0iLvRaZF3o9Mj3wQmRGZGZkVmR1Jj8yJzI18GJkXmR9ZEPkosjDycWRRZHFkSWRpJCPySSQzsiySFfk0sjzyWSQ7siKyMrIqsjqyJuJ98R2hL+lL+ai/xZf2t/pEX8aX9eW88+V9kr/NV/C3+4r+Dl/J3+kr+7t8FV/VV/NP+Fa+tW/j2/p2/knf3j/lO/iOvpN/2nf2z/gu/lmf7J/zXf3zvpt/wXf3L/oe/iXf07/se/nevo9/xff1r/p+vr9P8QP8QP+aH+QH+yF+qB/mX/fD/Rt+hH/Tp/qRfpR/y4/2b/sx/h0/1o/z4/27foKf6Cf5yX6Kn+rT/Ht+mn/fT/cf+Bl+pp/lZ/t0P8fP9R/6eX6+X+A/8gv9x36RX+yX+KU+w3/iM/0yn+U/9cv9Zz7br/Ar/Sq/2q/xa/06v95v8Bv9Jr/Zb/Fb/Ta/3X/ud/idfpff7ff4vX6f/8Lv91/6A/4rn+O/9gf9X/wh/40/7L/1uf47f8R/74/6H/wx/6M/7n/yJ/xJf8r/7E/7X/wZf9af8+f9Bf+rv+gv+cv8P2uMMcYYY/8t6g+OD/gn35N/W1cMFEJcv7NY7n+subnwX/eDZULniBDiuf49H/23VadOSkrK3x6brURQarEQInI1P5+4Gq8QncQzIll0FBX+aX+DZe8L9Af1o3cKEft3OTHiany1/u3/Sf0nnx6fWTk8F/9f1F8sRGKpqzkFxNX4av2K/0n9Iu3/oP8C36QJ0eHvcuLE1fhq/STxlHheJP/DIxljjDHGGGOMsb8aLKt1/6P75yv35wn6ak5+cTX+o/tzxhhjjDHGGGOMXXsv9u7z7JPJyR2784Y3vOHNv2+u9V8mxhhjjDHG2J/t6kX/te6EMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLu/5/fJzYtT5HxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhj7Fr7PwEAAP//SOc8Mw==")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e)

46.77713726s ago: executing program 8 (id=1724):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0x4)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8)
sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0xf2e7}, 0x8)

46.488651794s ago: executing program 8 (id=1725):
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})
setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x9)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

46.420251966s ago: executing program 38 (id=1725):
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})
setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x9)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

34.984075791s ago: executing program 7 (id=1823):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '\x00'}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x300}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

34.904850458s ago: executing program 7 (id=1826):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@assoc={0x10, 0x117, 0x4, 0x7fffffff}], 0x10}, 0x48005)

34.840140992s ago: executing program 7 (id=1829):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe4b, 0xffffff99, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd65e0ffff00122c00631177fbac14030a44079f03fe8000ff80000000000000000008ffff3a050b038da1880b251810a59d943be3f4aed50ea5a6b8686731cb89ef77523c899b699eeaa0eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000380)="b101000000353b", &(0x7f0000000000), 0x0, 0x700}, 0x2c)

34.734742271s ago: executing program 7 (id=1831):
syz_mount_image$exfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x1000000, &(0x7f00000001c0)=ANY=[@ANYBLOB='fmask=00000000000000000000002,utf8,errors=continue,errors=continue,umask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYBLOB=',namecase=1,iocharset=cp861,gid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x152d, &(0x7f00000034c0)="$eJzs3AuYTtUaOPD3XWvtMSS+JrkMa6138yWXZZIklyS5JEklSXJLSJrkSEJiCEkakpBchiSGkFwmJo37/X5JSJImSXLLLVn/Z8Lf6dT5dy79j/OceX/Psx/rtfZa+93f+13W3jPzfddlSK3Gtas3JCL4t+CFf5IAIBYABgBAXgAIAKB8XPm4rP6cEpP+vYOwP9dDqVc6A3Ylcf2zN65/9sb1z964/tkb1z974/pnb1z/7I3rz1h2tnFqoWt4y74b3//Pzvjz/39IZpkxX60uc11XgJh/dAjXP3vj+v/PCv6Rnbj+2RvXP7uKvdIJsP8C/PrPDnL83R6uf/bG9WcsO7vS95+v9AaR/7LH4HDOC4X5T50/Y4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDH2H3DaX6YA4FL7SufFGGOMMcYYY4yxP4/PcaUzYIwxxhhjjDHG2P9/CAIkKAggBnJALOSEXCAA4GrIA3khAtdAHFwL+eA6yA8FoCAUgngoDEVAgwELBCEUhWIQheuhONwAJaAklILS4KAMJMCNUBZugnJwM5SHW6AC3AoVoRJUhipwG1SF26Ea3AHV4U6oATWhFtSGu6AO3A114R6oB/dCfbgP7ocHoAE8CA3hIWgED0NjeASawKPQFJpBc2gBLf+l8S9AD3gRekIvSILe0Adegr7QD/rDyzAAXoGB8CoMgtcgGQbDEHgdhsIbMAzehOEwAkbCWzAK3obRMAbGwjhIgfEwAd6BifAuTIL3YDJMgVSYCtPgfZgOM2AmfACz4EOYDXNgLsyDNPgI5sMCSIePYSF8AhmwCBbDElgKy2A5rICVsApWwxpYC+tgPWyAjbAJNsMW2ArbYDt8CjvgM9gJu2A3fA574It/cvypvxnfFQEBBQpUqDAGYzAWYzEX5sLcmBvzYB6MYATjMA7zYT7Mj/mxIBbEeIzHIlgEDRokJCyKRTGKUSyOxbEElsBSWAodOkzABCyLN2E5LIflsTxWwApYESthJayCVbAqVsVqWA2rY3WsgTWwFtbCu/Au7I11sS7Ww3pYH+tfuj2FDbEhNsJG2BgbYxNsgk2xKTbH5tgSW2IrbIWtsTW2xbbYDtthe2yPiZiIHbADdsSO2Ak7YWfsjF2wC3bFbtgt84UcgC/ii9gLa4je2Af7YF9MztEfX8aX8RUciK/iq/gaJuNgHIKv4+v4Bg7DkzgcR+BIHIlVxds4GscgiXGYgik4ASfgRJyIWYm+h1MwFafiNJyG03EGzsAPcBZ+iB/iHJyD8zAN03A+LsB0TMeFeAozcBEuxiW4FJfhUlyBK3EFrsY1uBrX4TrcgBtwE27CLbgFt+E2/BQVAH6Gu3AXJuMe3IN7cS/uw324H/djJmbiATyAB/EgHsJDeBgP4xE8isfwKJ7AE3gST+FpPI1n8Syew+fiv2n0aclVySCyKKFEjIgRsSJW5BK5RG6RW+QReURERESciBP5RD6RX+QXBUVBES/iRRFRRBhhBIkwBgBEVERFcVFclBAlRClRSjjhRIJIEGVFWVFOlBPlxS2igrhVVBSVRBtXRVQRVUVbV03cIaqL6qKGqClqidqitqgj6oi6oq6oJ+qJ+qK+uF88IBqI3tgfHxJZlWksBmMTMQSbimZCXnwHayWGYWvRRrQVT4gROBzbi1YuUTwtOojR2FH8RYzBZ0VnMQ67iOdFV9FNdBcviB6itespeolJ2Fv0EVOwr+gn+ouXxXSsKT7AWTlriddEshgshojXxTx8QwwTb4rhYoQYKd4So8TbYrQYI8aKcSJFjBcTxDtionhXTBLvicliikgVU8U08b6YLmaImeIDMUt8KGaLOWKumCfSxEdivlgg0sXHYqH4RGSIRWKxWCKWimViuVghVopVYrVYI9aKdWK92CA2ik1is4iFrWKb2C4+FTvEZ2Kn2CV2i8/FHvGF2Cu+FPvEV2K/+Fpkim/EAfGtOCi+E4fE9+Kw+EEcEUfFMXFcnBA/ipPilDgtzoiz4idxTvwszgsvQKIUUkolAxkjc8hYmVPmklfJ3DK4+OheI+PktTKfvE7mlwVkQVlIxsvCsojU0kgrSYayqCwmo/J6WVzeIEvIkrKULC2dLCMT5I2yrLxJlpM3y/LyFllB3iorykqysqwib5NV5e0SIheOUUPWlLVkbXmXTIK7ZV15j6wn75X15X3yfvmAbCAflA3lQ7KRfFg2lo/IJvJR2VQ2k81lC9lSPiZbycdla9lGtpVPyHbySdlePiUT5dOyg/QXnyLPys7yOdlFPi+7ym6yu/xZnpde9pS9JPQG2Ue+JPvKfrJ/LADIV+RA+aocJF+TyXKwHCJfl0PlG3KYfFMOlyPkSPmWHCXflqPlGDlWjpMpcrycIN+RE+W7cpJ8T06WU2SqnCr7ywG/zDRTyj8c/87vjB/0y9E3yI1yk9wst8itcpvcLj+VO+QOuVPulLvlbrlH7pF75V65T+6T++V+mSkz5QF5QB6UB+UheUgeloflEXlUnpHH5Qn5ozwpT8lT8ow8K8/KcxcfA1CohJJKqUDFqBwqVuVUudRVKre6WuVReVVEXaPi1LUqn7pO5VcFVEFVSMWrwqqI0sooq0iFqqgqpqLqerz4hFGlVGnlVBmVoG78Z8ar4uoGVUKV/NX4S/kl/Z38WqqWqpVqpVqr1qqtaqvaqXaqvWqvElWi6qA6qI6qo+qkOqnOqrPqorqorqqr6q66qx6qh+qpeqoklaT6qJdUX9VP9VcvqwHqFTVQDVSD1CCVrJLVEDVEDVVD1TA1TA1Xw9VINVKNUqPUaDVajVVjVYpKURPUBDVRTVST1CQ1WU1WqSpVTVPT1HQ1Xc1UM9UsNUvNVrPVXDVXpak0NV/NV+kqXS1UC1WGWqQWqSVqiVqmlqkVaoVapVapNWqNWqfWqQy1UW1Um9VmtVVtVdvVdrVD7VA7xU61W+1We9QetVftVfvUPrVf7VeZKlMdUAfUQXVQHVKH1GF1WB1RR9QxdUydUCfUSXVSnVan1Vl1Vp1T59R5dT5r2ReIQAQqUEFMEBPEBrFBriBXkDvIHeQJ8gSRIBLEBXFBvuC6IH9QICgYFArig8JBkUAHJrCBuFj0aHB9UDy4ISgRlAxKBaUDF5QJEoIbg7LBTUG54OagfHBLUCG4NagYVAoqB1WC24Kqwe1BteCOoHpwZ1AjqBnUCmoHdwV1gruDusE9Qb3g3qB+cF9wf/BA0CB4MGgYPBQ0Ch4OGgePBE2CR4OmQbOgedAiaPmnzu/9yQKPu566l07SvXUf/ZLuq/vp/vplPUC/ogfqV/Ug/ZpO1oP1EP26Hqrf0MP0m3q4HqFH6rf0KP22Hq3H6LF6nE7R4/UE/Y6eqN/Vk/R7erKeolP1VD1Nv6+n6xl6pv5Az9If6tl6jp6r5+k0/ZGerxfodP2xXqg/0Rl6kV6sl+ileplerlfolXqVXq3X6LV6nV6vN+iNepPerLforXqb3q4/1Tv0Z3qn3qV368/1Hv2F3qu/1Pv0V3q//lpn6m/0Af2tPqi/04f09/qw/kEf0Uf1MX1cn9A/6pP6lD6tz+iz+id9Tv+sz2uftbjP+ng3yigTY2JMrIk1uUwuk9vkNnlMHhMxERNn4kw+k8/kN/lNQVPQxJt4U8QUMVnIkClqipqoiZriprgpYUqYUqaUccaZBJNgypqyppwpZ8qb8qaCqWAqmoqmsqlsbjO3mdvN7eYOc4e509xpapqaprapbeqYOqauqWvqmXqmvqlv7jf3mwamgWloGppGppFpbBqbJqaJaWqamuamuWlpWppWppVpbVqbtqataWfamfamvUk0iaaD6WA6mo6mk+lkOpvOpovpYrqarqa76W56mB6mp+lpkkyS6WP6mL6mr+lv+psBZoAZaAaaQWaQSTbJZogZYoaaoWaYGWaGmxFmZNZC1bxtRpsxZqwZZ1JMiplgJpiJZqKZZCaZyWaySTWpZpqZZqab6WammWlmmVlmtplt5pq5Js2kmflmvkk36WahWWgyTIZZbBabpWapWW6Wm5VmpVltVpu1sNasN+vNRrPRbDabzVaz1Ww3280Os8PsNDvNbrPb7DF7zF6z1+wz+8x+s99kmkxzwBwwB81Bc8gcMofNYXPEHDHHzDFzwpwwJ81Jc9qcNmdNgYufl97E2pw2l73K5rZX2zw2r/3buKAtZONtYVvEapvfFvhVbKy1JWxJW8qWts6WsQn2xt/EFW0lW9lWsbfZqvZ2W+03cR17t61r77H17L22tr3rV3F9e5/NWp00QASwzWwj28I2to/YJvZR29Q2s81tC9vOPmnb26dson3adrDP/CaebxfYlXaVXW3X2J12lz1tz9iD9jt71v5ke9pedoB9xQ60r9pB9jWbbAf/Jh5p37Kj7Nt2tB1jx9pxv4kn2yk21U610+z7drqd8Zs4zX5kZ9l0O9vOsXPtvF/irJzS7cd2of3EZtgAFtsldqldZpfbFZdy9XntOrvebrA77Gd2s91it9ptdvulhbDdZXfbz+0e+4U9YL+1++xXdr89ZDPtN7/EWed3yH5vD9sf7BF71B6zx+0J+6O6NDrr3I/bn+156y0QEpAkRQHFUA6KpZyUi66i3HQ15aG8FKFrKI6upXx0HeWnAlSQClE8FaYipMmQJaKQilIxitL1dCm9UlSaHJWhBLqRytJNVI5upvJ0C1WgW6kiVaLKVIVuo6p0O1WjO6g63Uk1qCbVotp0F9Whu6ku3UP16F6qT/fR/fQANaAHqSE9RI3oYWpMj1ATepSaUjNqTi2oJT1Grehxak1tqC09Qe3oSWpPT1EiPU0d6BnqSH+hTvQsdabnqAs9T12pG3WnF6gHvUg9qRclUW/qQy9RX+pH/ellGkCv0EB6lQbRa5RMg2kIvU5D6Q0aRm/ScBpBI+ktGkVv02gaQ2NpHKXQeJpA79BEepcm0Xs0maZQKk2lafQ+TacZNJM+oFn0Ic2mOTSX5lEafUTzaQGl08e0kD6hDFpEi2kJLaVltJxW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nT6lHfQZ7aRdtJs+pz30BSF9SfvoK9pPX1MmfUMH6Fs6SN/RIfre96If6AgdpWN0nE7Qj3SSTtFpOkNn6Sc6Rz/TefIEIYYilKEKgzAmzBHGhjnDXOFVYe7w6jBPmDeMhNeEceG1Yb7wujB/WCAsGBYK48PCYZFQhya0IYVhWDQsFkbD68Pi4Q1hibBkWCosHbqwTJgQ3hiWDW8Ky4U3h+XDW8IK4a1hxbBS+Mi9VcLbwqrh7WG18I6wenhnWCOsGdYKa4d3hXXCu8O64T1hvfDesFx4X3h/+EDYIHwwbBg+FDYKHw4bh4+ETcJHw6Zhs7B52CJsGT4WtgofD1uHbcK24RNhu/DJsH34VJgYPh12CJ/5pf++BX+/PynsHfYJXwpfCr2/R86NzoumRT+Kzo8uiKZHP44ujH4SzYguii6OLokujS6LLo+uiK6Mroqujq6Jro2ui66Pboh6XzsHOHTCSadc4GJcDhfrcrpc7iqX213t8ri8LuKucXHuWpfPXefyuwKuoCvk4l1hV8RpZ5x15EJX1BVzUXe9K+5ucCVcSVfKlXbOlXEJroVr6Vq6Vu5x19q1cW3dE+4J96R70j3lnnJPuw7uGdfR/cV1cs+6zu4595x73nV13Vx394Lr4cbnufCaTHJ9XB/X1/V1/V1/N8ANcAPdQDfIDXLJLtkNcUPcUDfUDXPD3HA33I10I90oN8qNdqPdWDfWpbgUN8FNcBPdRDfJTXKT3WSX6lLdNDfNTXfTXdUZF44y2812c91cl+bS3HyXtWZMdwvdQpfhMtxit9gtdUvdcrfcrXQr3Wq32q11a916t95tdBvdZrfZbXVb3Xa33e1wO9xOn/fCpG6P2+v2un1un9vvvnaZ7ht3wH3rDrrv3CH3vTvsfnBH3FF3zB13J9yP7qQ75U67M+6s+8mdcz+78867lMj4yITIO5GJkXcjkyLvRSZHpkRSI1Mj0yLvR6ZHZkRmRj6IzIp8GJkdmROZG5kXSYt8FJkfWRBJj3wcWRj5JJIRWRRZHFkSWRpZFvG+8ObQF/XFfNRf74v7G3wJX9KX8qW982V8gr/Rl/U3+XL+Zl/e3+Ir+Ft9RV/JV/aP+qa+mW/uW/iW/jHfyj/uW/s2vq1/wrfzT/r2/imf6J/2HfwzvqP/i+/kn/Wd/XO+i3/ed/XdfHf/gu/hX/Q9fS+f5Hv7Pv4l39f38/39y36Af8UP9K/6Qf41n+wH+yH+dT/Uv+GH+Tf9cD/Cj4x5y4+6dIkM43yKH+8n+Hf8RP+un+Tf85P9FJ/qp/pp/n0/3c/wM/0Hfpb/0M/2c/xcP8+n+Y/8fL/Ap/uP/UL/ic/wiy7dVPbL/Qq/0q/yq/0av9av8+v9Br/Rb/Kb/Ra/1W/z2/2nfof/zO/0u/xu/7nf47/we/2Xfp//yu/3X/tM/40/4L/1B/13/pD/3h/2P/gj/qg/5o/7E/5Hf9Kf8qf9GX/W/+TP+Z/9ef6bNcYYY4yxf8j4y03x654Lt/N7/84Y8Vc79wGAq7cUyvzr/qwV5dr8F9r9RHy7CAA83avLQ5e2GjWSkpIu7pshISg2B+DST4KyxMDleBG0hSchEdpA2d/Nv5/odpb+YP7oLQC5/mpMLFyOL8//JQAm/c78jz0xcn6F8HTc/2P+OQAlil0ekxMux4ug7S/3V9pAub+Tf4FWf5B/zq9SAFr/1ZjccDm+nH8CPA7PQOKv9mSMMcYYY4wxxi7oJyp3unT9eek3Pn/v+jxeXR6TAy7Hf3R9zhhjjDHGGGOMsSvv2W7dn3osMbFNp3++Ue2P91H/2sy/NJrAv5oYN/6lhvcA/7dwAPBvTgiQ1ZD/ybPY9B85VvLFl87fdi094wP47yjln9G4wm9MjDHGGGOMsT/d5UX/r/9fXamEGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yxbOjf/Y43+Ae+pe9KnyNjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDF2pf2fAAAA//+Bqfni")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)

34.674397943s ago: executing program 7 (id=1834):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000)
sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0)

34.343770043s ago: executing program 7 (id=1842):
syz_mount_image$vfat(&(0x7f0000000a40), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x35a, &(0x7f0000000b00)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x17a)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

34.202075501s ago: executing program 39 (id=1842):
syz_mount_image$vfat(&(0x7f0000000a40), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x35a, &(0x7f0000000b00)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x17a)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

31.317240401s ago: executing program 6 (id=1874):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x0, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050011006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="02040000000000004e464c4f4700000000000000000000000000000000000000000000000000000050000000000000000100000007000300000000005cae641872319dfae5a988272763a36abcf1f74cfd4bf988531a30a528c1c044813d8205fd8b1fdf1c2ccd79b5fb7f9e096fbd1c7eeee4b6646c0b2fc39d3fe20000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000ffffffffffff0000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff00000000"]}, 0x296)

31.244746162s ago: executing program 6 (id=1876):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x1411, 0x105, 0x70bd2a}, 0x10}}, 0x0)

31.132404303s ago: executing program 6 (id=1878):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000})
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, 0x0, 0x0, 0x1, 0x1000)
msgsnd(r0, &(0x7f0000000040)={0x2}, 0x8, 0x0)

31.004643513s ago: executing program 6 (id=1880):
syz_mount_image$cramfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="00af268263b121dc03d7d9b98b9cdb76841d31005b31fdfd141b652968fbeae7aac982a517703dc5950f6728aecf5ec337b119ffd66d0a02970718ba573db352906385cece74366e628b6a775c9a6f6fff046416c6240e39a647186c4cf0b360bd17d4cdbd912dc61fd24e6f17d8"], 0x1, 0x152, &(0x7f00000007c0)="$eJzs0E1LKnEUx/Hf3Bnlcq/eBzKwFia0aEjMacRatdBIEtKBwk0rwSYKFCOhXBrRrkXQ1oXlVnwLlrWxRgh7E23cBS0n/o7Rw67977MZ5nsOh2FWlnoqgoAMx3KpuLdvlsvmVnDdSCc3ntrtuOhuAD8/zZ39qziwI54KMDgCRL7xAtu7BXMuXyqI90EcUAEkfjtdg7P7SzSf0+YhSaKp00Bn3Gn6aO9ji47apAIk/r7fsy+AGXHv/9s94BlApRZquZCxbNu2xfeepEJTY5LTm3cZq5sKzwbMUz050fD4ZWTN20skhvPHSDf8EGk1+z0rvWakjV5U1xeimqJpsb5xb6Vi1TMoq54DYPPLPTf8ASULHEvA+XA2uJa8ADr1F6P4Z7E++tfVQzkISJVaPud3NXK+fz8gq5BARERERERERERERERERET0Xa8BAAD//wFeZcY=")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f00000001c0)='./file0\x00')
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f0000000240)=ANY=[], 0x25, 0x2)

30.837459099s ago: executing program 6 (id=1882):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000180)='./bus\x00', 0x804, &(0x7f0000000280)={[{@rodir}, {@numtail}, {@utf8no}, {@uni_xlateno}, {@shortname_mixed}, {@utf8no}, {@shortname_winnt}, {@utf8no}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '866'}}, {@fat=@check_strict}, {@utf8}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@utf8no}, {@rodir}]}, 0x1, 0x27b, &(0x7f0000000640)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)

29.934479473s ago: executing program 6 (id=1891):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_int(r0, 0x6, 0x17, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000003c0)=0x560, 0x4)

29.754886145s ago: executing program 40 (id=1891):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_int(r0, 0x6, 0x17, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000003c0)=0x560, 0x4)

3.984438487s ago: executing program 9 (id=2166):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002340)=@base={0xe, 0x4, 0x4, 0x12}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r2, &(0x7f0000000440)}, 0x20)

3.747713881s ago: executing program 9 (id=2167):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000940)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='contention_begin\x00', r0}, 0x18)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="540000001000"], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040040)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40)

3.482561463s ago: executing program 9 (id=2170):
r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x200011, &(0x7f0000000100)={[{@jqfmt_vfsold}, {@usrquota}]}, 0x0, 0x252, &(0x7f0000000600)="$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")
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000040)=0x8)

3.432333814s ago: executing program 9 (id=2171):
syz_emit_ethernet(0x46, &(0x7f0000000180)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2a}, {[@lsrr={0x83, 0x7, 0xd7, [@multicast2]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)

3.002237033s ago: executing program 9 (id=2172):
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
listen(r1, 0x786)
ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x9)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x10044, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

2.42483496s ago: executing program 1 (id=2176):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0)
r3 = socket(0x11, 0xa, 0x0)
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7)
r4 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
openat$cgroup_subtree(r5, 0x0, 0x2, 0x0)
bind$can_raw(r3, &(0x7f0000000000), 0x10)
getsockname$packet(r3, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000002f3144e8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0)
ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r6, &(0x7f00000000c0), 0x2c8, 0x0)

2.087607898s ago: executing program 9 (id=2177):
setsockopt(0xffffffffffffffff, 0xffffffff, 0x3, &(0x7f0000000100)="c45af4c808491b8b217ae099c9a1c053d126f7526ee61c056f", 0x19)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)

1.220807075s ago: executing program 1 (id=2180):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
getrandom(&(0x7f0000000000)=""/64, 0x40, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0xcc, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0xfffffde6, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @multicast1}, {0x0, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x38, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}]}]}]}, 0xcc}}, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00')
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil)
syz_open_procfs(0x0, &(0x7f0000000440)='net/route\x00')
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r5)
sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000002a000000080058000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000e82b5febaae56ed343508b043e2013fc6a92338bcc1382273a2c03b6ec09260080ad9fcdd710c76719b15428bce5b8f07345c412349d73041ae51778c62aed1fe7cde7a67b308872459f48bf2793f5c4f1852e11cf6f6f59a58cb74731476ecc8a70165f474b860ffb19e460c2f8564c5d88591c736b6acce1b9a04f514831b674ee70e1e348f9d814d921e839dc07c5b5ca989c9185f3fa710ed05ca56061834eb0c777218a1b8733266aeb2d2823e208"], 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = socket(0x10, 0x3, 0x0)
recvmmsg(r7, &(0x7f00000021c0), 0x5b, 0x40, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'bridge0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x4b, 0x1, 0x7, {0xb, @sctp_ip4_spec={@local, @empty, 0x4e21, 0x4a20}, {0x0, @multicast, 0x56bd, 0xf8d, [0xfffffffc, 0x4]}, @esp_ip6_spec={@mcast2, @loopback, 0x2, 0xe}, {0x0, @remote, 0x3, 0x3524, [0xffffffff, 0x4]}, 0x0, 0x2}}})

261.987691ms ago: executing program 3 (id=2183):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)={0x50, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}]}, 0x50}}, 0x0)

260.427953ms ago: executing program 1 (id=2184):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x200, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_to_team\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000180)="0b041000e0ff020002004788aa96a13bb1000000000088641100", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14)

206.520813ms ago: executing program 3 (id=2185):
statx(0xffffffffffffff9c, &(0x7f0000008a40)='\x00', 0x5500, 0x100, 0x0)

132.544071ms ago: executing program 3 (id=2186):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000001100)={'security\x00', 0x2, [{}, {}]}, 0x48)

132.33841ms ago: executing program 1 (id=2187):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18)
r1 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x1, 0x807bb5448e0096bf)
ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000140)={0x0, 0x0})

82.778728ms ago: executing program 3 (id=2188):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000040)="1c3513000000", 0x0, 0x400, 0x0, 0x0, 0x0})

82.480675ms ago: executing program 1 (id=2189):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_pressure(r0, &(0x7f0000000140)='cpu.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r1, &(0x7f00000001c0)={'full', 0x20, 0x6, 0x20, 0xfffda}, 0x41)
close(0x4)

82.406762ms ago: executing program 3 (id=2190):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
getrusage(0xffffffffffffffff, &(0x7f0000000000))

259.838µs ago: executing program 1 (id=2191):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0x96}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}}, 0x0)

0s ago: executing program 3 (id=2192):
r0 = socket$inet(0x2, 0x2, 0x1)
bind$unix(r0, &(0x7f0000000640)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

kernel console output (not intermixed with test programs):

lan: left promiscuous mode
[  216.809816][ T5859] veth0_vlan: left promiscuous mode
[  217.111339][ T5884] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  217.265510][ T5884] usb 1-1: Using ep0 maxpacket: 8
[  217.288110][ T5884] usb 1-1: unable to get BOS descriptor or descriptor too short
[  217.309334][ T5884] usb 1-1: unable to read config index 0 descriptor/start: -71
[  217.312332][ T5884] usb 1-1: can't read configurations, error -71
[  217.359533][ T9861] loop6: detected capacity change from 0 to 4096
[  217.363167][ T9861] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512).
[  217.407216][ T9861] ntfs3(loop6): ino=1a, mi_enum_attr
[  217.409287][ T9861] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  217.412375][ T9861] ntfs3(loop6): Failed to initialize $Extend/$ObjId.
[  217.792691][ T5859] team0 (unregistering): Port device team_slave_1 removed
[  217.861675][ T5859] team0 (unregistering): Port device team_slave_0 removed
[  218.028159][   T55] Bluetooth: hci1: command tx timeout
[  218.601088][ T9885] loop7: detected capacity change from 0 to 256
[  218.793815][ T9888] loop7: detected capacity change from 0 to 256
[  218.828374][ T9888] exFAT-fs (loop7): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d)
[  218.861795][ T9888] exFAT-fs (loop7): error, invalid access to FAT free cluster (entry 0x00000008)
[  218.868576][   T33] audit: type=1800 audit(218.713:75): pid=9888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1303" name="file1" dev="loop7" ino=1048646 res=0 errno=0
[  218.886873][ T9888] exFAT-fs (loop7): error, failed to bmap (inode : ffff88802b75a188 iblock : 8, err : -5)
[  218.891537][ T9888] exFAT-fs (loop7): error, invalid access to FAT free cluster (entry 0x00000008)
[  218.895035][ T9888] exFAT-fs (loop7): write: fail to zero from 10 to 8192(-5)
[  218.964744][ T9884] loop6: detected capacity change from 0 to 32768
[  218.969222][ T9884] XFS: noikeep mount option is deprecated.
[  219.051773][ T9884] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  219.182852][ T9884] XFS (loop6): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  219.222908][ T9884] XFS (loop6): Starting recovery (logdev: internal)
[  219.276702][ T9884] XFS (loop6): Ending recovery (logdev: internal)
[  219.459053][ T9021] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  219.913384][ T9908] netlink: 'syz.7.1309': attribute type 21 has an invalid length.
[  219.922528][ T9908] netlink: 128 bytes leftover after parsing attributes in process `syz.7.1309'.
[  219.927754][ T9908] netlink: 'syz.7.1309': attribute type 4 has an invalid length.
[  219.930928][ T9908] netlink: 'syz.7.1309': attribute type 3 has an invalid length.
[  219.934225][ T9908] netlink: 3 bytes leftover after parsing attributes in process `syz.7.1309'.
[  220.095490][   T55] Bluetooth: hci1: command tx timeout
[  220.496295][   T24] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  220.540132][ T9921] loop0: detected capacity change from 0 to 256
[  220.562047][ T9921] FAT-fs (loop0): Directory bread(block 64) failed
[  220.564671][ T9921] FAT-fs (loop0): Directory bread(block 65) failed
[  220.573054][ T9921] FAT-fs (loop0): Directory bread(block 66) failed
[  220.578044][ T9921] FAT-fs (loop0): Directory bread(block 67) failed
[  220.580654][ T9921] FAT-fs (loop0): Directory bread(block 68) failed
[  220.583260][ T9921] FAT-fs (loop0): Directory bread(block 69) failed
[  220.588137][ T9921] FAT-fs (loop0): Directory bread(block 70) failed
[  220.590698][ T9921] FAT-fs (loop0): Directory bread(block 71) failed
[  220.593210][ T9921] FAT-fs (loop0): Directory bread(block 72) failed
[  220.597666][ T9921] FAT-fs (loop0): Directory bread(block 73) failed
[  220.647684][   T24] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  220.652825][   T24] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  220.660612][   T24] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  220.667947][   T24] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  220.671494][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.674752][   T24] usb 7-1: Product: syz
[  220.676720][   T24] usb 7-1: Manufacturer: syz
[  220.680805][   T24] usb 7-1: SerialNumber: syz
[  220.685862][   T24] usb 7-1: config 0 descriptor??
[  220.689131][ T9916] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  220.692920][ T9916] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  220.693682][ T1091] kworker/u9:5: attempt to access beyond end of device
[  220.693682][ T1091] loop0: rw=1, sector=1224, nr_sectors = 544 limit=256
[  220.699302][   T24] usb 7-1: ucan: probing device on interface #0
[  220.706409][ T1091] kworker/u9:5: attempt to access beyond end of device
[  220.706409][ T1091] loop0: rw=1, sector=1800, nr_sectors = 128 limit=256
[  220.715003][ T1091] kworker/u9:5: attempt to access beyond end of device
[  220.715003][ T1091] loop0: rw=1, sector=1960, nr_sectors = 1472 limit=256
[  221.039616][ T9948] loop0: detected capacity change from 0 to 256
[  221.066513][ T9948] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe9e488b, utbl_chksum : 0xe619d30d)
[  221.070546][ T9948] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 1)
[  221.073536][ T9948] exFAT-fs (loop0): failed to load alloc-bitmap
[  221.076440][ T9948] exFAT-fs (loop0): failed to recognize exfat type
[  221.169966][ T9956] binder: 9955:9956 ioctl c00c6211 0 returned -14
[  221.217096][ T9958] loop0: detected capacity change from 0 to 1024
[  221.300443][ T9963] loop0: detected capacity change from 0 to 4096
[  221.304217][ T9963] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  221.307844][ T9963] NILFS (loop0): mounting unchecked fs
[  221.322235][   T24] ucan 7-1:0.0 can0: registered device
[  221.326947][ T9963] NILFS (loop0): recovery complete
[  221.329504][ T9964] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  221.402075][ T9966] loop0: detected capacity change from 0 to 128
[  221.405964][ T9966] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[  221.424239][ T9966] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[  221.453271][ T5843] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  221.517137][   T24] ucan 7-1:0.0 can0: firmware string: '"
[  221.651801][ T9969] loop0: detected capacity change from 0 to 32768
[  221.706669][ T9969] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,str_hash=crc64,noinodes_32bit,nocow
[  221.706690][ T9969]   allowing incompatible features above 0.0: (unknown version)
[  221.706699][ T9969]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  221.725988][ T9969] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  221.729468][ T9969] bcachefs (loop0): initializing new filesystem
[  221.732788][   T24] usb 7-1: USB disconnect, device number 7
[  221.741818][ T9969] bcachefs (loop0): going read-write
[  221.756165][ T9969] bcachefs (loop0): marking superblocks
[  221.787314][ T9969] bcachefs (loop0): initializing freespace
[  221.799059][ T9969] bcachefs (loop0): done initializing freespace
[  221.808573][ T9969] bcachefs (loop0): reading snapshots table
[  221.811037][ T9969] bcachefs (loop0): reading snapshots done
[  221.833031][ T9969] bcachefs (loop0):  loop0: Superblock write was silently dropped! (seq 0 expected 42)
[  221.838113][ T9969] bcachefs (loop0): done starting filesystem
[  221.930867][ T5843] bcachefs (loop0): shutting down
[  221.933092][ T5843] bcachefs (loop0): going read-only
[  221.935212][ T5843] bcachefs (loop0): finished waiting for writes to stop
[  221.941946][ T5843] bcachefs (loop0): flushing journal and stopping allocators, journal seq 2
[  221.970826][ T5843] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3
[  221.976369][ T5843] bcachefs (loop0): clean shutdown complete, journal seq 4
[  221.979381][ T5843] bcachefs (loop0): marking filesystem clean
[  222.001648][ T5843] bcachefs (loop0): shutdown complete
[  222.176603][   T55] Bluetooth: hci1: command tx timeout
[  222.371016][ T9984] loop6: detected capacity change from 0 to 4096
[  222.397112][   T33] audit: type=1800 audit(222.253:76): pid=9984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1336" name="file1" dev="loop6" ino=33 res=0 errno=0
[  222.405120][   T33] audit: type=1800 audit(222.253:77): pid=9984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1336" name="file1" dev="loop6" ino=33 res=0 errno=0
[  222.970686][T10002] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  222.994866][   T33] audit: type=1326 audit(222.843:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9999 comm="syz.6.1344" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f15b178e9a9 code=0x0
[  223.363443][T10004] loop0: detected capacity change from 0 to 4096
[  223.370303][T10004] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  223.391743][T10004] ntfs3(loop0): Failed to initialize $Extend/$Reparse.
[  224.085485][ T5884] usb 7-1: new full-speed USB device number 8 using dummy_hcd
[  224.275946][ T5884] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  224.280233][ T5884] usb 7-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00
[  224.283824][ T5884] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  224.316701][ T5884] usb 7-1: config 0 descriptor??
[  224.319661][T10022] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  224.341045][T10033] openvswitch: netlink: IP tunnel dst address not specified
[  224.429332][T10037] netlink: 5 bytes leftover after parsing attributes in process `syz.7.1360'.
[  224.432368][T10037] 0{X: renamed from macvtap0 (while UP)
[  224.437685][T10037] 0{X: entered allmulticast mode
[  224.439371][T10037] veth0_macvtap: entered allmulticast mode
[  224.442064][T10037] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  224.538478][ T5884] usbhid 7-1:0.0: can't add hid device: -71
[  224.540986][ T5884] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  224.560173][ T5884] usb 7-1: USB disconnect, device number 8
[  224.844322][T10049] loop7: detected capacity change from 0 to 32768
[  225.030357][T10051] loop7: detected capacity change from 0 to 8192
[  225.347344][ T9180] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  225.497070][ T9180] usb 7-1: Using ep0 maxpacket: 16
[  225.504700][ T9180] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  225.510439][ T9180] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.513573][ T9180] usb 7-1: Product: syz
[  225.515282][ T9180] usb 7-1: Manufacturer: syz
[  225.522845][ T9180] usb 7-1: SerialNumber: syz
[  225.537619][ T9180] r8152-cfgselector 7-1: Unknown version 0x0000
[  225.540136][ T9180] r8152-cfgselector 7-1: config 0 descriptor??
[  225.951519][T10080] loop0: detected capacity change from 0 to 32768
[  225.962511][ T5884] r8152-cfgselector 7-1: USB disconnect, device number 9
[  225.984889][T10080] JBD2: Ignoring recovery information on journal
[  226.020032][T10080] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  226.076742][ T5843] ocfs2: Unmounting device (7,0) on (node local)
[  226.199958][T10086] loop7: detected capacity change from 0 to 32768
[  226.216971][T10086] overlayfs: upper fs needs to support d_type.
[  226.220593][T10086] overlayfs: upper fs does not support tmpfile.
[  226.229197][T10086] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  226.234506][T10086] ERROR: (device loop7): dbAlloc: the hint is outside the map
[  226.234506][T10086] 
[  226.240720][T10086] ERROR: (device loop7): remounting filesystem as read-only
[  226.243699][T10086] overlayfs: failed to set uuid (/file0, err=-5); falling back to uuid=null.
[  226.897202][T10099] netlink: 'syz.7.1386': attribute type 10 has an invalid length.
[  226.900371][T10099] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1386'.
[  226.911951][T10099] batman_adv: batadv0: Adding interface: virt_wifi0
[  226.920347][T10099] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  226.940557][T10099] batman_adv: batadv0: Interface activated: virt_wifi0
[  227.145090][T10103] loop0: detected capacity change from 0 to 40427
[  227.149594][T10103] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504)
[  227.151747][T10103] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  227.154602][T10103] F2FS-fs (loop0): build fault injection rate: 17008
[  227.157487][T10103] F2FS-fs (loop0): build fault injection type: 0x6
[  227.160251][T10103] F2FS-fs (loop0): build fault injection type: 0x5
[  227.165034][T10103] F2FS-fs (loop0): invalid crc value
[  227.206363][T10102] loop6: detected capacity change from 0 to 32768
[  227.210145][T10103] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  227.211607][T10102] (syz.6.1387,10102,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  227.213072][T10103] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  227.221637][T10102] (syz.6.1387,10102,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  227.254951][T10102] JBD2: Ignoring recovery information on journal
[  227.256061][ T5843] syz-executor: attempt to access beyond end of device
[  227.256061][ T5843] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  227.264424][ T5843] CPU: 0 UID: 0 PID: 5843 Comm: syz-executor Not tainted 6.16.0-rc7-syzkaller-dirty #0 PREEMPT(full) 
[  227.264438][ T5843] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  227.264444][ T5843] Call Trace:
[  227.264448][ T5843]  <TASK>
[  227.264453][ T5843]  dump_stack_lvl+0x189/0x250
[  227.264470][ T5843]  ? __pfx_dump_stack_lvl+0x10/0x10
[  227.264478][ T5843]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  227.264487][ T5843]  ? __pfx_queue_work_on+0x10/0x10
[  227.264498][ T5843]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  227.264505][ T5843]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  227.264514][ T5843]  ? f2fs_hw_is_readonly+0x39b/0x470
[  227.264525][ T5843]  f2fs_handle_critical_error+0x37c/0x540
[  227.264537][ T5843]  f2fs_write_end_io+0x495/0x810
[  227.264546][ T5843]  ? blkg_put+0x22/0x240
[  227.264565][ T5843]  __submit_merged_bio+0x27a/0x6a0
[  227.264577][ T5843]  __submit_merged_write_cond+0x255/0x530
[  227.264594][ T5843]  f2fs_write_data_pages+0x261d/0x3000
[  227.264621][ T5843]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  227.264654][ T5843]  ? check_path+0x21/0x40
[  227.264663][ T5843]  ? check_noncircular+0xe0/0x160
[  227.264698][ T5843]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  227.264707][ T5843]  do_writepages+0x32e/0x550
[  227.264724][ T5843]  ? do_raw_spin_unlock+0x4d/0x240
[  227.264737][ T5843]  filemap_fdatawrite+0x191/0x230
[  227.264750][ T5843]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  227.264785][ T5843]  ? do_raw_spin_unlock+0x4d/0x240
[  227.264798][ T5843]  f2fs_sync_dirty_inodes+0x31f/0x830
[  227.264816][ T5843]  f2fs_write_checkpoint+0x94a/0x1de0
[  227.264840][ T5843]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  227.264871][ T5843]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  227.264881][ T5843]  ? kfree+0x18e/0x440
[  227.264894][ T5843]  ? kill_f2fs_super+0x298/0x6c0
[  227.264908][ T5843]  kill_f2fs_super+0x2c3/0x6c0
[  227.264921][ T5843]  ? __pfx_kill_f2fs_super+0x10/0x10
[  227.264930][ T5843]  ? radix_tree_delete_item+0x2b6/0x400
[  227.264943][ T5843]  ? shrinker_free+0x2ce/0x3e0
[  227.264954][ T5843]  deactivate_locked_super+0xbc/0x130
[  227.264967][ T5843]  cleanup_mnt+0x425/0x4c0
[  227.264978][ T5843]  ? lockdep_hardirqs_on+0x9c/0x150
[  227.264988][ T5843]  task_work_run+0x1d4/0x260
[  227.265002][ T5843]  ? __pfx_task_work_run+0x10/0x10
[  227.265013][ T5843]  ? __x64_sys_umount+0x122/0x160
[  227.265027][ T5843]  ? exit_to_user_mode_loop+0x40/0x110
[  227.265067][ T5843]  exit_to_user_mode_loop+0xec/0x110
[  227.265080][ T5843]  do_syscall_64+0x2bd/0x3b0
[  227.265089][ T5843]  ? lockdep_hardirqs_on+0x9c/0x150
[  227.265097][ T5843]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.265105][ T5843]  ? exc_page_fault+0x9f/0xf0
[  227.265114][ T5843]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.265122][ T5843] RIP: 0033:0x7f8d6bb8fcd7
[  227.265131][ T5843] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  227.265138][ T5843] RSP: 002b:00007ffc1c0d5c48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  227.265148][ T5843] RAX: 0000000000000000 RBX: 00007f8d6bc10b55 RCX: 00007f8d6bb8fcd7
[  227.265153][ T5843] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc1c0d5d00
[  227.265158][ T5843] RBP: 00007ffc1c0d5d00 R08: 0000000000000000 R09: 0000000000000000
[  227.265163][ T5843] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc1c0d6d90
[  227.265168][ T5843] R13: 00007f8d6bc10b55 R14: 0000000000037725 R15: 00007ffc1c0d6dd0
[  227.265182][ T5843]  </TASK>
[  227.265186][ T5843] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  227.311948][T10102] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  227.328227][ T5843] CPU: 0 UID: 0 PID: 5843 Comm: syz-executor Not tainted 6.16.0-rc7-syzkaller-dirty #0 PREEMPT(full) 
[  227.328241][ T5843] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  227.328247][ T5843] Call Trace:
[  227.328251][ T5843]  <TASK>
[  227.328255][ T5843]  dump_stack_lvl+0x189/0x250
[  227.328271][ T5843]  ? __pfx_dump_stack_lvl+0x10/0x10
[  227.328279][ T5843]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  227.328288][ T5843]  ? __pfx_queue_work_on+0x10/0x10
[  227.328299][ T5843]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  227.328306][ T5843]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  227.328315][ T5843]  ? f2fs_hw_is_readonly+0x39b/0x470
[  227.328327][ T5843]  f2fs_handle_critical_error+0x37c/0x540
[  227.328339][ T5843]  f2fs_write_end_io+0x495/0x810
[  227.328348][ T5843]  ? blkg_put+0x22/0x240
[  227.328368][ T5843]  __submit_merged_bio+0x27a/0x6a0
[  227.328379][ T5843]  __submit_merged_write_cond+0x255/0x530
[  227.328396][ T5843]  f2fs_write_data_pages+0x261d/0x3000
[  227.328423][ T5843]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  227.328456][ T5843]  ? check_path+0x21/0x40
[  227.328466][ T5843]  ? check_noncircular+0xe0/0x160
[  227.328501][ T5843]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  227.328510][ T5843]  do_writepages+0x32e/0x550
[  227.328527][ T5843]  ? do_raw_spin_unlock+0x4d/0x240
[  227.328541][ T5843]  filemap_fdatawrite+0x191/0x230
[  227.328553][ T5843]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  227.328587][ T5843]  ? do_raw_spin_unlock+0x4d/0x240
[  227.328601][ T5843]  f2fs_sync_dirty_inodes+0x31f/0x830
[  227.328618][ T5843]  f2fs_write_checkpoint+0x94a/0x1de0
[  227.328640][ T5843]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  227.328672][ T5843]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  227.328681][ T5843]  ? kfree+0x18e/0x440
[  227.328692][ T5843]  ? kill_f2fs_super+0x298/0x6c0
[  227.328705][ T5843]  kill_f2fs_super+0x2c3/0x6c0
[  227.328718][ T5843]  ? __pfx_kill_f2fs_super+0x10/0x10
[  227.328726][ T5843]  ? radix_tree_delete_item+0x2b6/0x400
[  227.328738][ T5843]  ? shrinker_free+0x2ce/0x3e0
[  227.328748][ T5843]  deactivate_locked_super+0xbc/0x130
[  227.328759][ T5843]  cleanup_mnt+0x425/0x4c0
[  227.328768][ T5843]  ? lockdep_hardirqs_on+0x9c/0x150
[  227.328798][ T5843]  task_work_run+0x1d4/0x260
[  227.328812][ T5843]  ? __pfx_task_work_run+0x10/0x10
[  227.328822][ T5843]  ? __x64_sys_umount+0x122/0x160
[  227.328836][ T5843]  ? exit_to_user_mode_loop+0x40/0x110
[  227.328849][ T5843]  exit_to_user_mode_loop+0xec/0x110
[  227.328857][ T5843]  do_syscall_64+0x2bd/0x3b0
[  227.328866][ T5843]  ? lockdep_hardirqs_on+0x9c/0x150
[  227.328874][ T5843]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.328882][ T5843]  ? exc_page_fault+0x9f/0xf0
[  227.328891][ T5843]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.328899][ T5843] RIP: 0033:0x7f8d6bb8fcd7
[  227.328907][ T5843] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  227.328914][ T5843] RSP: 002b:00007ffc1c0d5c48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  227.328924][ T5843] RAX: 0000000000000000 RBX: 00007f8d6bc10b55 RCX: 00007f8d6bb8fcd7
[  227.328930][ T5843] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc1c0d5d00
[  227.328935][ T5843] RBP: 00007ffc1c0d5d00 R08: 0000000000000000 R09: 0000000000000000
[  227.328939][ T5843] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc1c0d6d90
[  227.328945][ T5843] R13: 00007f8d6bc10b55 R14: 0000000000037725 R15: 00007ffc1c0d6dd0
[  227.328959][ T5843]  </TASK>
[  227.328962][ T5843] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  227.542449][ T9021] ocfs2: Unmounting device (7,6) on (node local)
[  227.909513][T10131] loop0: detected capacity change from 0 to 512
[  227.912042][T10131] EXT4-fs: Ignoring removed nobh option
[  227.937910][T10131] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.1399: iget: bad i_size value: 38620345925642
[  227.943323][T10131] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.1399: couldn't read orphan inode 15 (err -117)
[  227.948354][T10131] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  228.073409][T10135] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  228.077861][T10135] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  228.280924][T10136] evm: overlay not supported
[  228.408208][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.453602][T10138] loop0: detected capacity change from 0 to 512
[  228.481720][T10138] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  228.488859][T10138] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  228.492849][T10138] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1400: Failed to acquire dquot type 1
[  228.507400][T10138] EXT4-fs (loop0): 1 truncate cleaned up
[  228.511298][T10138] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  228.536855][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.607857][T10158] mmap: syz.0.1407 (10158) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  230.450426][T10167] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  231.943558][T10194] loop0: detected capacity change from 0 to 32768
[  231.947933][T10194] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1418 (10194)
[  231.960018][T10194] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  231.964216][T10194] BTRFS info (device loop0): using sha256 (sha256-x86_64) checksum algorithm
[  231.968007][T10194] BTRFS info (device loop0): using free-space-tree
[  231.975524][   T24] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  232.040326][ T5843] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  232.145615][   T24] usb 7-1: Using ep0 maxpacket: 32
[  232.159682][   T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  232.166737][   T24] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  232.170827][   T24] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  232.185776][   T24] usb 7-1: Product: syz
[  232.187578][   T24] usb 7-1: Manufacturer: syz
[  232.190384][   T24] usb 7-1: SerialNumber: syz
[  232.206254][   T24] usb 7-1: config 0 descriptor??
[  232.417606][   T24] usb 7-1: USB disconnect, device number 10
[  232.481382][T10214] loop0: detected capacity change from 0 to 32768
[  232.487688][T10214] 
[  232.487688][T10214]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  232.487688][T10214] 
[  232.942588][T10230] openvswitch: netlink: Missing key (keys=40, expected=100)
[  232.970483][T10232] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  232.999239][T10234] Bluetooth: MGMT ver 1.23
[  233.014470][T10236] IPVS: length: 83 != 24
[  233.631368][T10260] batadv_slave_0: entered promiscuous mode
[  233.633841][T10260] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1440'.
[  233.637526][T10260] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  233.678045][T10260] batadv_slave_0 (unregistering): left promiscuous mode
[  233.680984][T10260] batman_adv: batadv0: Removing interface: batadv_slave_0
[  233.931125][T10266] loop0: detected capacity change from 0 to 164
[  233.951725][T10266] iso9660: Corrupted directory entry in block 4 of inode 1792
[  234.072271][T10276] loop6: detected capacity change from 0 to 512
[  234.074924][T10276] EXT4-fs: Ignoring removed nomblk_io_submit option
[  234.083010][T10276] EXT4-fs (loop6): filesystem is read-only
[  234.085059][T10276] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  234.105243][T10276] EXT4-fs (loop6): filesystem is read-only
[  234.108507][T10276] EXT4-fs (loop6): orphan cleanup on readonly fs
[  234.110970][T10276] EXT4-fs error (device loop6): ext4_orphan_get:1393: inode #16: comm syz.6.1448: iget: bad i_size value: 648518346341360424
[  234.116844][T10276] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.1448: couldn't read orphan inode 16 (err -117)
[  234.122800][T10276] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  234.147341][ T9021] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.167118][T10272] loop0: detected capacity change from 0 to 32768
[  234.169724][T10272] btrfs: Deprecated parameter 'usebackuproot'
[  234.171644][T10272] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  234.176519][T10272] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1446 (10272)
[  234.187181][T10272] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  234.190873][T10272] BTRFS info (device loop0): using sha256 (sha256-x86_64) checksum algorithm
[  234.193639][T10272] BTRFS info (device loop0): using free-space-tree
[  234.229402][T10272] BTRFS info (device loop0): rebuilding free space tree
[  234.312338][ T5843] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  234.495706][   T24] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  234.655669][   T24] usb 7-1: Using ep0 maxpacket: 16
[  234.661915][   T24] usb 7-1: config 8 has an invalid interface number: 206 but max is 0
[  234.665163][   T24] usb 7-1: config 8 has no interface number 0
[  234.667807][   T24] usb 7-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87
[  234.672534][   T24] usb 7-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024
[  234.679367][   T24] usb 7-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9
[  234.684671][   T24] usb 7-1: config 8 interface 206 has no altsetting 0
[  234.689978][   T24] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb
[  234.693626][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.698557][   T24] usb 7-1: Product: syz
[  234.700193][   T24] usb 7-1: Manufacturer: syz
[  234.702048][   T24] usb 7-1: SerialNumber: syz
[  234.917071][   T24] garmin_gps 7-1:8.206: Garmin GPS usb/tty converter detected
[  234.924425][   T24] usb 7-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[  235.121908][ T9180] usb 7-1: USB disconnect, device number 11
[  235.129061][ T9180] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[  235.133034][ T9180] garmin_gps 7-1:8.206: device disconnected
[  235.535957][   T55] Bluetooth: hci2: command 0x0406 tx timeout
[  235.971746][T10317] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1457'.
[  236.374151][T10329] loop0: detected capacity change from 0 to 136
[  236.387377][T10329] Symlink component flag not implemented
[  236.389964][T10329] Symlink component flag not implemented (108)
[  236.525518][ T5884] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  236.688558][ T5884] usb 7-1: Using ep0 maxpacket: 16
[  236.695141][ T5884] usb 7-1: config 0 has an invalid interface number: 109 but max is 0
[  236.698974][ T5884] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  236.702824][ T5884] usb 7-1: config 0 has no interface number 0
[  236.709560][ T5884] usb 7-1: New USB device found, idVendor=0421, idProduct=0094, bcdDevice=28.8e
[  236.713142][ T5884] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.717101][ T5884] usb 7-1: Product: syz
[  236.718884][ T5884] usb 7-1: Manufacturer: syz
[  236.720727][ T5884] usb 7-1: SerialNumber: syz
[  236.724833][ T5884] usb 7-1: config 0 descriptor??
[  236.939170][T10327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  236.943260][T10327] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  236.950829][ T5884] rndis_host 7-1:0.109: More than one union descriptor, skipping ...
[  236.954049][ T5884] usb 7-1: bad CDC descriptors
[  236.956032][ T5884] cdc_acm 7-1:0.109: More than one union descriptor, skipping ...
[  236.960660][ T5884] usb 7-1: USB disconnect, device number 12
[  237.587854][T10343] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1470'.
[  237.665855][T10346] Cannot find add_set index 0 as target
[  237.721705][T10339] loop0: detected capacity change from 0 to 32768
[  237.726764][T10339] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1468 (10339)
[  237.743414][T10339] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  237.748423][T10339] BTRFS info (device loop0): using sha256 (sha256-x86_64) checksum algorithm
[  237.752492][T10339] BTRFS info (device loop0): using free-space-tree
[  237.871172][T10339] BTRFS info (device loop0): rebuilding free space tree
[  237.959922][ T5843] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  238.105548][ T5901] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  238.179699][T10372] loop7: detected capacity change from 0 to 32768
[  238.182928][T10372] XFS: ikeep mount option is deprecated.
[  238.201702][T10372] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  238.253523][T10372] XFS (loop7): Ending clean mount
[  238.255728][ T5901] usb 7-1: Using ep0 maxpacket: 16
[  238.263534][T10372] XFS (loop7): Quotacheck needed: Please wait.
[  238.267474][ T5901] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  238.276709][ T5901] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  238.289920][ T5901] usb 7-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  238.304103][T10387] loop0: detected capacity change from 0 to 512
[  238.304177][ T5901] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.313935][T10387] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  238.315001][ T5901] usb 7-1: config 0 descriptor??
[  238.322691][T10387] EXT4-fs (loop0): invalid journal inode
[  238.325917][T10387] EXT4-fs (loop0): can't get journal size
[  238.327113][T10372] XFS (loop7): Quotacheck: Done.
[  238.332910][ T5901] pxrc 7-1:0.0: Could not find endpoint
[  238.339467][T10387] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002]
[  238.342846][T10387] System zones: 1-12, 13-13
[  238.344061][ T5901] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[  238.346314][T10387] EXT4-fs (loop0): orphan cleanup on readonly fs
[  238.352474][T10387] EXT4-fs (loop0): 1 truncate cleaned up
[  238.359464][T10387] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  238.389913][ T9762] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  238.402036][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  238.536751][ T5901] usb 7-1: USB disconnect, device number 13
[  238.732953][T10390] loop0: detected capacity change from 0 to 32768
[  238.741379][T10390] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1482 (10390)
[  238.748612][T10390] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  238.751688][T10390] BTRFS info (device loop0): using sha256 (sha256-x86_64) checksum algorithm
[  238.754890][T10390] BTRFS info (device loop0): using free-space-tree
[  238.819738][ T5843] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  239.029856][T10413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1485'.
[  239.181157][T10419] netlink: 'syz.6.1488': attribute type 4 has an invalid length.
[  239.210727][T10419] netlink: 'syz.6.1488': attribute type 4 has an invalid length.
[  239.222327][T10396] loop7: detected capacity change from 0 to 65536
[  239.258172][T10396] XFS (loop7): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  239.292697][T10396] XFS (loop7): Ending clean mount
[  239.369815][ T9762] XFS (loop7): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  239.645496][ T5884] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  239.797553][ T5884] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  239.810377][ T5884] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  239.824908][ T5884] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  239.832227][ T5884] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.845103][T10435] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  239.856328][ T5884] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  240.277222][ T5901] usb 7-1: USB disconnect, device number 14
[  240.412638][T10462] loop7: detected capacity change from 0 to 8
[  240.588840][T10472] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1509'.
[  240.593310][T10472] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1509'.
[  240.750948][T10478] loop7: detected capacity change from 0 to 1024
[  240.775249][T10478] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  240.824857][T10478] EXT4-fs error (device loop7): __ext4_remount:6736: comm syz.7.1512: Abort forced by user
[  240.831175][T10478] EXT4-fs (loop7): Remounting filesystem read-only
[  240.833617][T10478] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000.
[  240.860207][T10487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1515'.
[  240.869750][T10487] erspan0: entered promiscuous mode
[  240.872766][T10487] macvtap1: entered promiscuous mode
[  240.874633][T10487] macvtap1: entered allmulticast mode
[  240.879247][T10487] erspan0: entered allmulticast mode
[  240.896554][ T9762] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.901046][T10487] erspan0: left allmulticast mode
[  240.902784][T10487] erspan0: left promiscuous mode
[  241.002911][T10495] program syz.0.1519 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  241.126213][T10503] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1523'.
[  241.146712][T10505] loop0: detected capacity change from 0 to 2048
[  241.151986][T10505] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  241.158207][T10505] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  241.163880][T10505] UDF-fs: warning (device loop0): udf_fill_super: No fileset found
[  241.185807][T10507] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1525'.
[  241.324651][T10517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1530'.
[  242.174504][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.329740][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.546685][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.658877][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.686600][T10548] xt_CT: You must specify a L4 protocol and not use inversions on it
[  242.703006][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  242.715262][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  242.721250][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  242.734104][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  242.738713][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  242.902129][   T13] bridge_slave_1: left allmulticast mode
[  242.904136][   T13] bridge_slave_1: left promiscuous mode
[  242.906304][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.929981][   T13] bridge_slave_0: left allmulticast mode
[  242.931779][   T13] bridge_slave_0: left promiscuous mode
[  242.933693][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  243.089217][T10564] nfs4: Bad value for 'source'
[  243.089276][T10562] loop7: detected capacity change from 0 to 512
[  243.094477][T10562] EXT4-fs (loop7): fragment/cluster size (4096) != block size (1024)
[  243.158466][T10566] loop6: detected capacity change from 0 to 2048
[  243.399806][   T13] dvmrp8 (unregistering): left allmulticast mode
[  243.410821][T10579] loop7: detected capacity change from 0 to 512
[  243.413199][T10579] EXT4-fs: Ignoring removed mblk_io_submit option
[  243.415172][T10579] EXT4-fs: Ignoring removed bh option
[  243.418114][T10579] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  243.432507][T10579] EXT4-fs (loop7): 1 truncate cleaned up
[  243.435250][T10579] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  243.444978][   T33] audit: type=1800 audit(243.303:79): pid=10579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1560" name="bus" dev="loop7" ino=18 res=0 errno=0
[  243.517401][ T9762] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.645737][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  243.657777][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  243.662956][   T13] bond0 (unregistering): Released all slaves
[  243.762265][   T13] tipc: Left network mode
[  243.964396][T10549] chnl_net:caif_netlink_parms(): no params data found
[  244.092417][   T13] hsr_slave_0: left promiscuous mode
[  244.097159][   T13] hsr_slave_1: left promiscuous mode
[  244.099462][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  244.101755][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  244.104511][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  244.107718][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  244.126827][   T13] veth1_macvtap: left promiscuous mode
[  244.129167][   T13] veth0_macvtap: left promiscuous mode
[  244.131328][   T13] veth1_vlan: left promiscuous mode
[  244.133525][   T13] veth0_vlan: left promiscuous mode
[  244.608909][   T13] team0 (unregistering): Port device team_slave_1 removed
[  244.668885][   T13] team0 (unregistering): Port device team_slave_0 removed
[  244.819947][   T55] Bluetooth: hci2: command tx timeout
[  245.124024][T10615] loop6: detected capacity change from 0 to 40427
[  245.143914][T10615] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504)
[  245.146941][T10615] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  245.155460][T10615] F2FS-fs (loop6): invalid crc value
[  245.234102][T10615] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  245.237151][T10615] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  245.388630][ T9021] syz-executor: attempt to access beyond end of device
[  245.388630][ T9021] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  245.394323][ T9021] CPU: 0 UID: 0 PID: 9021 Comm: syz-executor Not tainted 6.16.0-rc7-syzkaller-dirty #0 PREEMPT(full) 
[  245.394341][ T9021] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  245.394352][ T9021] Call Trace:
[  245.394358][ T9021]  <TASK>
[  245.394367][ T9021]  dump_stack_lvl+0x189/0x250
[  245.394393][ T9021]  ? __pfx_dump_stack_lvl+0x10/0x10
[  245.394409][ T9021]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  245.394424][ T9021]  ? __pfx_queue_work_on+0x10/0x10
[  245.394444][ T9021]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  245.394460][ T9021]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  245.394475][ T9021]  ? f2fs_hw_is_readonly+0x39b/0x470
[  245.394494][ T9021]  f2fs_handle_critical_error+0x37c/0x540
[  245.394515][ T9021]  f2fs_write_end_io+0x495/0x810
[  245.394531][ T9021]  ? blkg_put+0x22/0x240
[  245.394563][ T9021]  __submit_merged_bio+0x27a/0x6a0
[  245.394584][ T9021]  __submit_merged_write_cond+0x255/0x530
[  245.394613][ T9021]  f2fs_write_data_pages+0x261d/0x3000
[  245.394629][ T9021]  ? __lock_acquire+0xab9/0xd20
[  245.394669][ T9021]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  245.394777][ T9021]  ? __lock_acquire+0xab9/0xd20
[  245.394800][ T9021]  ? do_raw_spin_lock+0x121/0x290
[  245.394829][ T9021]  ? do_raw_spin_unlock+0x4d/0x240
[  245.394849][ T9021]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  245.394867][ T9021]  do_writepages+0x32e/0x550
[  245.394892][ T9021]  ? do_raw_spin_unlock+0x4d/0x240
[  245.394915][ T9021]  filemap_fdatawrite+0x191/0x230
[  245.394935][ T9021]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  245.394991][ T9021]  ? do_raw_spin_unlock+0x4d/0x240
[  245.395015][ T9021]  f2fs_sync_dirty_inodes+0x31f/0x830
[  245.395043][ T9021]  f2fs_write_checkpoint+0x94a/0x1de0
[  245.395080][ T9021]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  245.395135][ T9021]  ? kill_f2fs_super+0x298/0x6c0
[  245.395158][ T9021]  kill_f2fs_super+0x2c3/0x6c0
[  245.395181][ T9021]  ? __pfx_kill_f2fs_super+0x10/0x10
[  245.395195][ T9021]  ? radix_tree_delete_item+0x2b6/0x400
[  245.395215][ T9021]  ? shrinker_free+0x2ce/0x3e0
[  245.395232][ T9021]  deactivate_locked_super+0xbc/0x130
[  245.395252][ T9021]  cleanup_mnt+0x425/0x4c0
[  245.395267][ T9021]  ? lockdep_hardirqs_on+0x9c/0x150
[  245.395284][ T9021]  task_work_run+0x1d4/0x260
[  245.395327][ T9021]  ? __pfx_task_work_run+0x10/0x10
[  245.395345][ T9021]  ? __x64_sys_umount+0x122/0x160
[  245.395367][ T9021]  ? exit_to_user_mode_loop+0x40/0x110
[  245.395387][ T9021]  exit_to_user_mode_loop+0xec/0x110
[  245.395402][ T9021]  do_syscall_64+0x2bd/0x3b0
[  245.395417][ T9021]  ? lockdep_hardirqs_on+0x9c/0x150
[  245.395432][ T9021]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.395447][ T9021]  ? exc_page_fault+0x9f/0xf0
[  245.395463][ T9021]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.395476][ T9021] RIP: 0033:0x7f15b178fcd7
[  245.395490][ T9021] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  245.395502][ T9021] RSP: 002b:00007ffd9665a9b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  245.395518][ T9021] RAX: 0000000000000000 RBX: 00007f15b1810b55 RCX: 00007f15b178fcd7
[  245.395527][ T9021] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd9665aa70
[  245.395537][ T9021] RBP: 00007ffd9665aa70 R08: 0000000000000000 R09: 0000000000000000
[  245.395545][ T9021] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd9665bb00
[  245.395554][ T9021] R13: 00007f15b1810b55 R14: 000000000003bded R15: 00007ffd9665bb40
[  245.395580][ T9021]  </TASK>
[  245.539791][ T9021] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  245.549121][T10622] loop7: detected capacity change from 0 to 32768
[  245.574770][T10622] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  245.617429][ T9762] ocfs2: Unmounting device (7,7) on (node local)
[  245.667121][T10549] bridge0: port 1(bridge_slave_0) entered blocking state
[  245.670151][T10549] bridge0: port 1(bridge_slave_0) entered disabled state
[  245.673160][T10549] bridge_slave_0: entered allmulticast mode
[  245.677968][T10549] bridge_slave_0: entered promiscuous mode
[  245.688475][T10549] bridge0: port 2(bridge_slave_1) entered blocking state
[  245.695816][T10549] bridge0: port 2(bridge_slave_1) entered disabled state
[  245.698805][T10549] bridge_slave_1: entered allmulticast mode
[  245.702479][T10549] bridge_slave_1: entered promiscuous mode
[  245.733053][T10549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  245.739853][T10549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  245.843874][T10549] team0: Port device team_slave_0 added
[  245.865033][T10549] team0: Port device team_slave_1 added
[  245.877644][T10631] loop7: detected capacity change from 0 to 1024
[  245.944355][T10549] batman_adv: batadv0: Adding interface: batadv_slave_0
[  245.951323][T10549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  245.979987][T10549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  245.986076][T10549] batman_adv: batadv0: Adding interface: batadv_slave_1
[  245.992416][T10549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  246.009816][T10549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  246.096265][T10640] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1580'.
[  246.101851][T10549] hsr_slave_0: entered promiscuous mode
[  246.105084][T10549] hsr_slave_1: entered promiscuous mode
[  246.110915][T10549] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  246.114000][T10549] Cannot create hsr debugfs directory
[  246.203560][T10640] team0: Port device team_slave_0 removed
[  246.289886][T10647] bridge_slave_0: left allmulticast mode
[  246.292224][T10647] bridge_slave_0: left promiscuous mode
[  246.294286][T10647] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.302454][T10647] bridge_slave_1: left allmulticast mode
[  246.304838][T10647] bridge_slave_1: left promiscuous mode
[  246.309174][T10647] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.314756][T10647] bond0: (slave bond_slave_0): Releasing backup interface
[  246.324374][T10647] bond0: (slave bond_slave_1): Releasing backup interface
[  246.357657][T10647] team0: Port device team_slave_0 removed
[  246.364873][T10647] team0: Port device team_slave_1 removed
[  246.369891][T10647] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  246.372939][T10647] batman_adv: batadv0: Removing interface: batadv_slave_0
[  246.378348][T10647] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  246.381269][T10647] batman_adv: batadv0: Removing interface: batadv_slave_1
[  246.392392][T10647] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  246.395272][T10647] batman_adv: batadv0: Removing interface: virt_wifi0
[  246.661324][T10549] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  246.674751][T10549] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  246.691804][T10549] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  246.708931][T10549] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  246.833362][T10549] 8021q: adding VLAN 0 to HW filter on device bond0
[  246.863211][T10549] 8021q: adding VLAN 0 to HW filter on device team0
[  246.879202][T10666] loop7: detected capacity change from 0 to 4096
[  246.900500][   T55] Bluetooth: hci2: command tx timeout
[  246.904827][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  246.907842][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  246.914631][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  246.917621][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  246.930592][T10666] ntfs3(loop7): Different NTFS sector size (1024) and media sector size (512).
[  247.158657][T10549] 8021q: adding VLAN 0 to HW filter on device batadv0
[  247.298166][T10691] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1599'.
[  247.456414][T10549] veth0_vlan: entered promiscuous mode
[  247.474783][T10549] veth1_vlan: entered promiscuous mode
[  247.507139][T10549] veth0_macvtap: entered promiscuous mode
[  247.518778][T10549] veth1_macvtap: entered promiscuous mode
[  247.538757][T10549] batman_adv: batadv0: Interface activated: batadv_slave_0
[  247.544970][T10703] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1601'.
[  247.553871][T10549] batman_adv: batadv0: Interface activated: batadv_slave_1
[  247.566122][T10549] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  247.575451][T10549] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  247.578879][T10549] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  247.582375][T10549] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  247.627146][ T9180] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  247.674542][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  247.678653][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  247.707493][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  247.710656][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  247.775974][ T9180] usb 7-1: Using ep0 maxpacket: 16
[  247.780405][ T9180] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  247.784708][ T9180] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  247.795244][ T9180] usb 7-1: config 0 interface 0 has no altsetting 0
[  247.806646][ T9180] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  247.810217][ T9180] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.826298][ T9180] usb 7-1: config 0 descriptor??
[  248.259060][T10711] loop8: detected capacity change from 0 to 32768
[  248.280457][T10711] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.1604 (10711)
[  248.294123][T10711] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  248.299900][T10711] BTRFS info (device loop8): using sha256 (sha256-x86_64) checksum algorithm
[  248.303172][T10711] BTRFS info (device loop8): using free-space-tree
[  248.375902][T10549] BTRFS info (device loop8): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  248.465304][   T47] usb 7-1: USB disconnect, device number 15
[  248.852195][T10737] loop7: detected capacity change from 0 to 32768
[  248.874548][T10737] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  248.894833][T10737] XFS (loop7): Ending clean mount
[  248.902345][T10737] XFS (loop7): Quotacheck needed: Please wait.
[  248.955729][T10737] XFS (loop7): Quotacheck: Done.
[  248.975614][   T55] Bluetooth: hci2: command tx timeout
[  248.986744][ T9762] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  249.144691][T10765] can0: slcan on ttyS3.
[  249.233731][T10764] can0 (unregistered): slcan off ttyS3.
[  249.534357][T10777] program syz.8.1623 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  249.542031][T10775] vlan2: entered allmulticast mode
[  249.544990][T10775] hsr0: entered allmulticast mode
[  249.551120][T10775] hsr_slave_0: entered allmulticast mode
[  249.552981][T10775] hsr_slave_1: entered allmulticast mode
[  249.622566][T10779] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1624'.
[  249.894836][T10785] input: syz0 as /devices/virtual/input/input11
[  250.294458][T10792] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1630'.
[  250.875934][ T5884] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  251.052434][ T5884] usb 7-1: Using ep0 maxpacket: 16
[  251.055687][   T55] Bluetooth: hci2: command tx timeout
[  251.062386][ T5884] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 25
[  251.122170][ T5884] usb 7-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  251.159494][ T5884] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  251.196249][ T5884] usb 7-1: Product: syz
[  251.197955][ T5884] usb 7-1: Manufacturer: syz
[  251.199726][ T5884] usb 7-1: SerialNumber: syz
[  251.207070][ T5884] usb 7-1: config 0 descriptor??
[  251.215802][ T5884] ssu100 7-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  251.483600][   T33] audit: type=1326 audit(251.333:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10796 comm="syz.8.1631" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3dfd8e9a9 code=0x7fc00000
[  251.506925][   T33] audit: type=1326 audit(251.333:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10796 comm="syz.8.1631" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe3dfd8e9a9 code=0x7fc00000
[  251.937429][ T5884] ssu100 7-1:0.0: probe with driver ssu100 failed with error -110
[  251.949634][ T5884] usb 7-1: USB disconnect, device number 16
[  252.121910][T10813] loop7: detected capacity change from 0 to 8192
[  252.376101][ T5884] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  252.379293][T10821] loop7: detected capacity change from 0 to 32768
[  252.388159][T10821] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  252.428952][ T9762] ocfs2: Unmounting device (7,7) on (node local)
[  252.525696][ T5884] usb 9-1: Using ep0 maxpacket: 8
[  252.530660][ T5884] usb 9-1: config 5 has an invalid interface number: 197 but max is 1
[  252.534121][ T5884] usb 9-1: config 5 has an invalid interface number: 174 but max is 1
[  252.539550][ T5884] usb 9-1: config 5 has no interface number 0
[  252.541893][ T5884] usb 9-1: config 5 has no interface number 1
[  252.544953][ T5884] usb 9-1: config 5 interface 197 has no altsetting 0
[  252.548364][ T5884] usb 9-1: config 5 interface 174 has no altsetting 0
[  252.554104][ T5884] usb 9-1: New USB device found, idVendor=05e3, idProduct=0503, bcdDevice=e5.59
[  252.560304][ T5884] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.565911][ T5884] usb 9-1: Product: syz
[  252.569327][ T5884] usb 9-1: Manufacturer: syz
[  252.571162][ T5884] usb 9-1: SerialNumber: syz
[  252.577032][T10827] team0: Port device gtp0 added
[  252.623595][T10829] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  252.791106][ T5884] usbhid 9-1:5.174: couldn't find an input interrupt endpoint
[  252.800665][ T5884] usb 9-1: USB disconnect, device number 2
[  252.851250][T10845] loop7: detected capacity change from 0 to 128
[  252.881537][T10845] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  252.900624][T10845] fscrypt (loop7, inode 12): Can't use IV_INO_LBLK_32 policy with contents mode other than AES-256-XTS
[  252.946727][ T9762] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  253.020131][T10855] loop6: detected capacity change from 0 to 128
[  253.114419][T10861] loop6: detected capacity change from 0 to 256
[  253.118113][T10861] exfat: Deprecated parameter 'utf8'
[  253.120257][T10861] exfat: Deprecated parameter 'utf8'
[  253.129430][T10861] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001047b, chksum : 0x3ced02ab, utbl_chksum : 0xe619d30d)
[  253.545517][ T9180] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  253.705717][ T9180] usb 7-1: Using ep0 maxpacket: 16
[  253.721080][ T9180] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  253.725035][ T9180] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  253.731995][ T9180] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.755994][ T9180] usb 7-1: config 0 descriptor??
[  254.298768][ T9180] mcp2221 0003:04D8:00DD.000C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0
[  254.656239][ T9180] usb 7-1: USB disconnect, device number 17
[  255.147204][T10882] loop7: detected capacity change from 0 to 4096
[  255.186466][T10882] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  255.255807][ T9762] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.283775][T10893] loop8: detected capacity change from 0 to 1024
[  255.343569][   T53] hfsplus: b-tree write err: -5, ino 4
[  255.429512][T10899] netlink: 'syz.8.1673': attribute type 11 has an invalid length.
[  255.460758][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  255.463388][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  255.476374][T10902] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1675'.
[  255.531505][T10902] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  255.539654][T10902] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  255.645582][ T5884] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  255.795516][ T5884] usb 7-1: Using ep0 maxpacket: 16
[  255.807337][ T5884] usb 7-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config
[  255.811400][ T5884] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  255.822921][ T5884] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  255.827620][ T5884] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  255.830840][ T5884] usb 7-1: Product: syz
[  255.832497][ T5884] usb 7-1: Manufacturer: syz
[  255.834367][ T5884] usb 7-1: SerialNumber: syz
[  256.048046][ T5884] usb 7-1: 0:2 : does not exist
[  256.059330][ T5884] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[  256.084129][ T5884] usb 7-1: USB disconnect, device number 18
[  256.168257][T10933] syz.7.1689: attempt to access beyond end of device
[  256.168257][T10933] loop7: rw=0, sector=1, nr_sectors = 1 limit=0
[  256.172703][T10933] qnx4: unable to read the superblock
[  256.499605][T10916] overlayfs: statfs failed on './file0'
[  256.760127][T10940] loop6: detected capacity change from 0 to 32768
[  256.764480][T10940] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1692 (10940)
[  256.772190][T10940] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  256.775842][T10940] BTRFS info (device loop6): using sha256 (sha256-x86_64) checksum algorithm
[  256.778992][T10940] BTRFS info (device loop6): using free-space-tree
[  256.835528][ T9021] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  256.946383][T10959] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3)
[  256.949086][T10959] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  256.952389][T10960] loop8: detected capacity change from 0 to 1024
[  256.958711][T10959] vhci_hcd vhci_hcd.0: Device attached
[  256.991426][T10960] EXT4-fs: Ignoring removed nobh option
[  256.993352][T10960] EXT4-fs: Ignoring removed bh option
[  257.026013][T10960] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  257.043587][T10961] vhci_hcd: cannot find a urb of seqnum 7510 max seqnum 0
[  257.051205][   T12] vhci_hcd: stop threads
[  257.053457][   T12] vhci_hcd: release socket
[  257.057599][   T12] vhci_hcd: disconnect device
[  257.564829][T10549] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.585480][ T5884] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  257.752063][ T5884] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  257.756320][ T5884] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  257.764036][ T5884] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  257.769125][ T5884] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  257.772235][ T5884] usb 7-1: Product: syz
[  257.774049][ T5884] usb 7-1: Manufacturer: syz
[  257.777182][ T5884] usb 7-1: SerialNumber: syz
[  257.807657][ T5884] usb 7-1: config 0 descriptor??
[  257.834289][ T5884] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22
[  258.155491][ T5884] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  258.317426][ T5884] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  258.321034][ T5884] usb 9-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00
[  258.324677][ T5884] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.330881][ T5884] usb 9-1: config 0 descriptor??
[  258.741479][ T5884] hid (null): invalid report_size -1431966552
[  258.748001][ T5884] logitech-djreceiver 0003:046D:C71F.000D: invalid report_size -1431966552
[  258.751280][ T5884] logitech-djreceiver 0003:046D:C71F.000D: item 0 4 1 7 parsing failed
[  258.754971][ T5884] logitech-djreceiver 0003:046D:C71F.000D: logi_dj_probe: parse failed
[  258.758431][ T5884] logitech-djreceiver 0003:046D:C71F.000D: probe with driver logitech-djreceiver failed with error -22
[  258.949734][ T9180] usb 9-1: USB disconnect, device number 3
[  260.286360][ T9180] usb 7-1: USB disconnect, device number 19
[  260.848503][T11005] bridge0: port 2(bridge_slave_1) entered disabled state
[  260.851813][T11005] bridge0: port 1(bridge_slave_0) entered disabled state
[  261.008336][T11005] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  261.162495][T11005] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  261.167876][T11005] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  261.171428][T11005] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  261.174926][T11005] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  261.391447][T11013] loop8: detected capacity change from 0 to 128
[  261.399443][T11013] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  261.429912][T10549] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  261.651970][T11026] loop8: detected capacity change from 0 to 4096
[  261.679465][T11027] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  261.710088][ T5877] usb 7-1: new full-speed USB device number 20 using dummy_hcd
[  261.878002][ T5877] usb 7-1: config 0 has an invalid interface number: 176 but max is 2
[  261.881629][ T5877] usb 7-1: config 0 has an invalid interface number: 255 but max is 2
[  261.884925][ T5877] usb 7-1: config 0 has no interface number 0
[  261.887560][ T5877] usb 7-1: config 0 has no interface number 1
[  261.891002][ T5877] usb 7-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  261.895839][ T5877] usb 7-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  261.900826][ T5877] usb 7-1: config 0 interface 255 has no altsetting 0
[  261.903638][ T5877] usb 7-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  261.907974][ T5877] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.917174][ T5877] usb 7-1: config 0 descriptor??
[  262.088229][T11038] loop8: detected capacity change from 0 to 256
[  262.100058][T11038] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  262.125123][ T5877] usb 7-1: Could not set interface, error -71
[  262.141172][ T5877] usb 7-1: selecting invalid altsetting 0
[  262.143521][ T5877] usb 7-1: Could not set interface, error -22
[  262.153073][ T5877] usb 7-1: USB disconnect, device number 20
[  262.484888][   T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  262.630703][   T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  262.741945][   T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  262.819471][ T5220] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  262.824967][ T5220] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  262.830983][ T5220] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  262.841564][ T5220] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  262.849262][ T5220] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  262.901444][   T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  263.118685][   T12] bridge_slave_1: left allmulticast mode
[  263.121524][   T12] bridge_slave_1: left promiscuous mode
[  263.123941][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  263.128933][   T12] bridge_slave_0: left allmulticast mode
[  263.131230][   T12] bridge_slave_0: left promiscuous mode
[  263.133588][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  263.838278][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  263.846916][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  263.852147][   T12] bond0 (unregistering): Released all slaves
[  263.942697][T11081] loop6: detected capacity change from 0 to 128
[  263.969597][T11081] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  264.077741][ T9021] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  264.302869][   T33] audit: type=1326 audit(264.133:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11084 comm="syz.6.1744" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f15b178e9a9 code=0x0
[  264.353973][T11054] chnl_net:caif_netlink_parms(): no params data found
[  264.491445][T11054] bridge0: port 1(bridge_slave_0) entered blocking state
[  264.493890][T11054] bridge0: port 1(bridge_slave_0) entered disabled state
[  264.499375][T11054] bridge_slave_0: entered allmulticast mode
[  264.502385][T11054] bridge_slave_0: entered promiscuous mode
[  264.524416][   T12] hsr_slave_0: left promiscuous mode
[  264.526966][   T12] hsr_slave_1: left promiscuous mode
[  264.530125][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  264.532635][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  264.539009][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  264.541579][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  264.552267][T11088] loop7: detected capacity change from 0 to 32768
[  264.574778][   T12] veth1_macvtap: left promiscuous mode
[  264.581419][   T12] veth0_macvtap: left promiscuous mode
[  264.582785][T11088] ocfs2: Mounting device (7,7) on (node local, slot 0) with writeback data mode.
[  264.586774][   T12] veth1_vlan: left promiscuous mode
[  264.593084][   T12] veth0_vlan: left promiscuous mode
[  264.602591][T11088] OCFS2: ERROR (device loop7): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has an invalid fs_generation of #4294967295
[  264.610719][T11088] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  264.617804][T11088] OCFS2: File system is now read-only.
[  264.619914][T11088] (syz.7.1745,11088,0):ocfs2_search_chain:1817 ERROR: status = -30
[  264.623510][T11088] (syz.7.1745,11088,0):ocfs2_search_chain:1940 ERROR: status = -30
[  264.636432][T11088] (syz.7.1745,11088,0):ocfs2_claim_suballoc_bits:2010 ERROR: status = -30
[  264.646004][T11088] (syz.7.1745,11088,0):ocfs2_claim_suballoc_bits:2063 ERROR: status = -30
[  264.648752][T11088] (syz.7.1745,11088,0):ocfs2_claim_new_inode:2298 ERROR: status = -30
[  264.655815][T11088] (syz.7.1745,11088,0):ocfs2_claim_new_inode:2313 ERROR: status = -30
[  264.659047][T11088] (syz.7.1745,11088,0):ocfs2_mknod_locked:638 ERROR: status = -30
[  264.661985][T11088] (syz.7.1745,11088,0):ocfs2_mknod:385 ERROR: status = -30
[  264.680934][T11088] (syz.7.1745,11088,1):ocfs2_mknod:502 ERROR: status = -30
[  264.685180][T11088] (syz.7.1745,11088,1):ocfs2_create:675 ERROR: status = -30
[  264.722213][ T9762] ocfs2: Unmounting device (7,7) on (node local)
[  264.861783][T11096] loop7: detected capacity change from 0 to 4096
[  264.874264][T11096] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[  264.909490][T11096] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  264.911339][ T5220] Bluetooth: hci2: command tx timeout
[  264.913417][T11096] ntfs3(loop7): ino=19, mi_enum_attr
[  264.947929][T11096] ntfs3(loop7): failed to convert "c46c" to cp860
[  264.950888][T11096] ntfs3(loop7): ino=20, mi_enum_attr
[  265.351612][T11112] sock: sock_set_timeout: `syz.7.1753' (pid 11112) tries to set negative timeout
[  265.432982][   T12] team0 (unregistering): Port device team_slave_1 removed
[  265.512183][   T12] team0 (unregistering): Port device team_slave_0 removed
[  266.080206][T11054] bridge0: port 2(bridge_slave_1) entered blocking state
[  266.083131][T11054] bridge0: port 2(bridge_slave_1) entered disabled state
[  266.089037][T11054] bridge_slave_1: entered allmulticast mode
[  266.092936][T11054] bridge_slave_1: entered promiscuous mode
[  266.207597][T11054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  266.218784][T11054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  266.290683][T11054] team0: Port device team_slave_0 added
[  266.309941][T11054] team0: Port device team_slave_1 added
[  266.362790][T11054] batman_adv: batadv0: Adding interface: batadv_slave_0
[  266.366253][T11054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  266.376222][T11054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  266.381221][T11054] batman_adv: batadv0: Adding interface: batadv_slave_1
[  266.385064][T11054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  266.394312][T11054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  266.442152][T11054] hsr_slave_0: entered promiscuous mode
[  266.444987][T11054] hsr_slave_1: entered promiscuous mode
[  266.447863][T11054] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  266.450365][T11054] Cannot create hsr debugfs directory
[  266.668461][T11054] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  266.677690][T11054] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  266.683856][T11054] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  266.693732][T11054] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  266.781508][T11054] 8021q: adding VLAN 0 to HW filter on device bond0
[  266.813689][T11054] 8021q: adding VLAN 0 to HW filter on device team0
[  266.828094][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  266.830977][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  266.842521][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  266.845587][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  266.975473][ T5220] Bluetooth: hci2: command tx timeout
[  267.049775][T11054] 8021q: adding VLAN 0 to HW filter on device batadv0
[  267.104987][T11150] loop6: detected capacity change from 0 to 512
[  267.110760][T11150] EXT4-fs: Ignoring removed nomblk_io_submit option
[  267.118091][T11150] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  267.121343][T11150] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e128, mo2=0002]
[  267.129456][T11150] EXT4-fs (loop6): orphan cleanup on readonly fs
[  267.132115][T11150] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0
[  267.137050][T11150] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  267.142687][T11150] EXT4-fs (loop6): Cannot turn on quotas: error -22
[  267.152918][T11150] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1766: bg 0: block 40: padding at end of block bitmap is not set
[  267.161378][T11150] EXT4-fs (loop6): Remounting filesystem read-only
[  267.163671][T11150] EXT4-fs (loop6): 1 truncate cleaned up
[  267.167167][T11150] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  267.188357][T11150] System zones: 0-1, 15-15, 18-18, 34-34
[  267.190635][T11150] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000.
[  267.221455][ T9021] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  267.243813][T11054] veth0_vlan: entered promiscuous mode
[  267.263458][T11054] veth1_vlan: entered promiscuous mode
[  267.316181][T11054] veth0_macvtap: entered promiscuous mode
[  267.321775][T11054] veth1_macvtap: entered promiscuous mode
[  267.340046][T11054] batman_adv: batadv0: Interface activated: batadv_slave_0
[  267.348460][T11054] batman_adv: batadv0: Interface activated: batadv_slave_1
[  267.360265][T11054] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  267.363488][T11054] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  267.370769][T11159] loop6: detected capacity change from 0 to 2048
[  267.374314][T11054] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  267.377680][T11054] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  267.406926][T11159] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found
[  267.412733][T11159] UDF-fs: Scanning with blocksize 512 failed
[  267.438744][T11159] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  267.440720][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  267.444845][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  267.472789][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  267.475402][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  267.661735][T11167] loop9: detected capacity change from 0 to 512
[  267.752506][T11169] loop9: detected capacity change from 0 to 4096
[  267.762885][T11169] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  267.776515][T11169] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  268.190830][T11054] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.398271][T11162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  268.587684][T11189] loop9: detected capacity change from 0 to 512
[  268.593601][T11189] EXT4-fs (loop9): bad geometry: block count 1024 exceeds size of device (256 blocks)
[  269.055667][ T5220] Bluetooth: hci2: command tx timeout
[  269.314294][T11205] loop6: detected capacity change from 0 to 32768
[  269.339393][T11205] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  269.361212][T11205] XFS (loop6): Ending clean mount
[  269.368982][T11205] XFS (loop6): Quotacheck needed: Please wait.
[  269.393579][T11205] XFS (loop6): Quotacheck: Done.
[  269.426711][ T9021] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  269.913960][    C0] vcan0: j1939_tp_rxtimer: 0xffff88812243f400: rx timeout, send abort
[  269.922705][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88812243f400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[  269.930617][T11199] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  270.262734][T11203] loop7: detected capacity change from 0 to 262144
[  270.270708][T11203] F2FS-fs (loop7): invalid crc value
[  270.321888][T11203] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  271.115661][T11239] sp0: Synchronizing with TNC
[  271.141246][ T5220] Bluetooth: hci2: command tx timeout
[  271.574182][T11241] loop6: detected capacity change from 0 to 32768
[  271.581373][T11241] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1799 (11241)
[  271.591263][T11241] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  271.595063][T11241] BTRFS info (device loop6): using crc32c (crc32c-generic) checksum algorithm
[  271.604575][T11241] BTRFS info (device loop6): disk space caching is enabled
[  271.726191][T11241] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  272.193434][T11241] BTRFS info (device loop6): rebuilding free space tree
[  272.204133][T11241] BTRFS info (device loop6): disabling free space tree
[  272.207282][T11241] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  272.211253][T11241] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  272.254324][   T33] audit: type=1800 audit(272.103:83): pid=11241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1799" name="file1" dev="loop6" ino=260 res=0 errno=0
[  272.275539][   T33] audit: type=1800 audit(272.123:84): pid=11241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1799" name="file1" dev="loop6" ino=260 res=0 errno=0
[  272.323559][T11275] genirq: Flags mismatch irq 4. 00200000 (pcmmio) vs. 00200080 (ttyS0)
[  272.871885][ T9021] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  273.495125][T11294] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1812'.
[  273.561842][T11298] loop9: detected capacity change from 0 to 4096
[  273.573655][T11301] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  273.608068][   T33] audit: type=1800 audit(273.453:85): pid=11298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1813" name="file1" dev="loop9" ino=15 res=0 errno=0
[  273.718257][T11306] loop6: detected capacity change from 0 to 256
[  273.721868][T11306] exfat: Deprecated parameter 'utf8'
[  273.724192][T11306] exfat: Deprecated parameter 'namecase'
[  273.728701][T11306] exfat: Deprecated parameter 'namecase'
[  273.740528][T11306] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  273.919540][T11313] syzkaller1: entered promiscuous mode
[  273.921707][T11313] syzkaller1: entered allmulticast mode
[  274.113377][T11331] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1830'.
[  274.170129][T11332] loop9: detected capacity change from 0 to 1024
[  274.201800][T11335] loop7: detected capacity change from 0 to 256
[  274.204375][T11335] exfat: Deprecated parameter 'utf8'
[  274.206385][T11335] exfat: Deprecated parameter 'namecase'
[  274.220651][T11335] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  274.358926][T11341] netlink: 'syz.6.1835': attribute type 1 has an invalid length.
[  274.361859][T11341] netlink: 1 bytes leftover after parsing attributes in process `syz.6.1835'.
[  274.561528][T11354] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  274.643896][ T5859] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.737717][ T5859] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.827283][ T5859] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.853463][T11364] loop9: detected capacity change from 0 to 128
[  274.969958][ T5859] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.110962][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  275.122905][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  275.129518][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  275.133539][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  275.140621][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  275.257869][T11384] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  275.293235][T11386] bridge: RTM_NEWNEIGH with invalid ether address
[  275.394894][T11390] loop9: detected capacity change from 0 to 1024
[  275.400200][T11390] EXT4-fs: Ignoring removed orlov option
[  275.402520][T11390] EXT4-fs: Ignoring removed nomblk_io_submit option
[  275.573269][T11390] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  275.663801][ T5859] team0: Port device gtp0 removed
[  275.721986][T11054] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  275.819852][T11400] loop9: detected capacity change from 0 to 2048
[  275.837332][T11400] NILFS (loop9): broken superblock, retrying with spare superblock (blocksize = 1024)
[  275.862983][T11401] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  275.917936][T11397] loop6: detected capacity change from 0 to 32768
[  275.921780][T11397] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1859 (11397)
[  275.962199][T11397] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  275.966270][T11397] BTRFS info (device loop6): using sha256 (sha256-x86_64) checksum algorithm
[  275.969113][T11397] BTRFS info (device loop6): disk space caching is enabled
[  275.971808][T11397] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  276.081191][ T5859] bond0 (unregistering): Released all slaves
[  276.093546][ T5859] bond1 (unregistering): Released all slaves
[  276.120790][T11397] BTRFS info (device loop6): rebuilding free space tree
[  276.174476][T11397] BTRFS info (device loop6): disabling free space tree
[  276.182401][T11397] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  276.205615][T11397] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  276.357277][ T9021] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  276.389795][T11422] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.1862'.
[  276.453068][T11376] chnl_net:caif_netlink_parms(): no params data found
[  276.615872][T11430] kAFS: unparsable volume name
[  276.652932][ T5859] hsr_slave_0: left promiscuous mode
[  276.655271][ T5859] hsr_slave_1: left promiscuous mode
[  276.716295][ T5859] veth1_macvtap: left promiscuous mode
[  276.718329][ T5859] veth0_macvtap: left allmulticast mode
[  276.720150][ T5859] veth0_macvtap: left promiscuous mode
[  276.722026][ T5859] veth1_vlan: left promiscuous mode
[  276.723754][ T5859] veth0_vlan: left promiscuous mode
[  277.238319][   T55] Bluetooth: hci1: command tx timeout
[  277.771380][T11460] x_tables: unsorted entry at hook 2
[  277.930543][T11464] loop9: detected capacity change from 0 to 4096
[  277.962613][T11464] ntfs3(loop9): Different NTFS sector size (4096) and media sector size (512).
[  277.988794][T11466] loop6: detected capacity change from 0 to 16
[  277.991049][T11466] MTD: Attempt to mount non-MTD device "/dev/loop6"
[  277.999418][T11464] ntfs3(loop9): Looks like $AttrDef is corrupted (size=0).
[  278.077954][T11466] cramfs: Error -3 while decompressing!
[  278.080732][T11466] cramfs: ffffffff99be36f8(42)->ffff8880224f2000(4096)
[  278.933898][T11376] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.937873][T11376] bridge0: port 1(bridge_slave_0) entered disabled state
[  278.940132][T11376] bridge_slave_0: entered allmulticast mode
[  278.942971][T11376] bridge_slave_0: entered promiscuous mode
[  278.947667][T11376] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.949921][T11376] bridge0: port 2(bridge_slave_1) entered disabled state
[  278.952547][T11376] bridge_slave_1: entered allmulticast mode
[  278.955765][T11376] bridge_slave_1: entered promiscuous mode
[  279.044956][T11376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  279.076526][T11376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  279.131889][T11376] team0: Port device team_slave_0 added
[  279.149924][T11376] team0: Port device team_slave_1 added
[  279.216161][T11376] batman_adv: batadv0: Adding interface: batadv_slave_0
[  279.219086][T11376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  279.245969][T11376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  279.257228][T11376] batman_adv: batadv0: Adding interface: batadv_slave_1
[  279.259960][T11376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  279.287025][T11376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  279.295860][   T55] Bluetooth: hci1: command tx timeout
[  279.354725][T11376] hsr_slave_0: entered promiscuous mode
[  279.366193][T11376] hsr_slave_1: entered promiscuous mode
[  279.368532][T11376] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  279.371192][T11376] Cannot create hsr debugfs directory
[  279.372165][T11489] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  279.550209][ T5220] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  279.557930][ T5220] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  279.563309][ T5220] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  279.571734][ T5220] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  279.575732][ T5220] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  279.677590][T11491] loop9: detected capacity change from 0 to 32768
[  279.680616][T11491] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.1895 (11491)
[  279.690954][T11491] BTRFS info (device loop9): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  279.694677][T11491] BTRFS info (device loop9): using sha256 (sha256-x86_64) checksum algorithm
[  279.697863][T11491] BTRFS info (device loop9): disk space caching is enabled
[  279.700235][T11491] BTRFS warning (device loop9): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  279.767195][   T27] BTRFS warning (device loop9): checksum verify failed on logical 5341184 mirror 1 wanted 0x0a5a7a5ae10eed219743b156b36184dc5a58d72503dc57b157a62f9528df24e9 found 0x509192d87391cda150b2277aaa5c9ca8aacb6f0f8bf998b564af4e59f0bab036 level 0
[  279.784045][T11491] BTRFS error (device loop9): failed to load root free space
[  279.838527][T11491] BTRFS error (device loop9): open_ctree failed: -5
[  280.818187][T11540] syz.9.1900 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  280.837763][T11540] binder: 11532:11540 ioctl c0306201 2000000003c0 returned -14
[  281.204179][ T5859] bridge_slave_1: left allmulticast mode
[  281.216664][ T5859] bridge_slave_1: left promiscuous mode
[  281.223634][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state
[  281.251043][ T5859] bridge_slave_0: left allmulticast mode
[  281.252970][ T5859] bridge_slave_0: left promiscuous mode
[  281.254978][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state
[  281.381578][ T5220] Bluetooth: hci1: command tx timeout
[  281.386904][ T5859] erspan0 (unregistering): left promiscuous mode
[  281.635768][ T5220] Bluetooth: hci0: command tx timeout
[  281.778937][T11551] loop9: detected capacity change from 0 to 512
[  281.789421][ T5859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  281.793347][ T5859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  281.798898][ T5859] bond0 (unregistering): Released all slaves
[  281.801002][T11551] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  281.807275][ T5859] bond1 (unregistering): Released all slaves
[  281.811014][T11551] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  281.832343][T11492] chnl_net:caif_netlink_parms(): no params data found
[  282.131730][T11376] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  282.222313][T11492] bridge0: port 1(bridge_slave_0) entered blocking state
[  282.225287][T11492] bridge0: port 1(bridge_slave_0) entered disabled state
[  282.228495][T11492] bridge_slave_0: entered allmulticast mode
[  282.232206][T11492] bridge_slave_0: entered promiscuous mode
[  282.239079][T11376] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  282.245285][T11376] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  282.245491][T11063] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  282.284467][ T5859] batadv0: left promiscuous mode
[  282.304993][ T5859] hsr_slave_0: left promiscuous mode
[  282.309870][ T5859] hsr_slave_1: left promiscuous mode
[  282.312676][ T5859] batman_adv: batadv0: Removing interface: batadv_slave_1
[  282.415229][T11063] usb 10-1: Using ep0 maxpacket: 8
[  282.421364][T11063] usb 10-1: unable to get BOS descriptor or descriptor too short
[  282.426199][T11063] usb 10-1: config 7 has an invalid interface number: 6 but max is 0
[  282.429467][T11063] usb 10-1: config 7 has no interface number 0
[  282.431551][T11063] usb 10-1: No eUSB2 isoc ep 15 companion for config 7 interface 6 altsetting 254
[  282.434998][T11063] usb 10-1: config 7 interface 6 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  282.457807][T11063] usb 10-1: config 7 interface 6 has no altsetting 0
[  282.476247][T11063] usb 10-1: New USB device found, idVendor=1a8d, idProduct=100d, bcdDevice=30.9e
[  282.479760][T11063] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  282.482829][T11063] usb 10-1: Product: syz
[  282.484510][T11063] usb 10-1: Manufacturer: syz
[  282.502013][T11063] usb 10-1: SerialNumber: syz
[  282.738173][T11063] option 10-1:7.6: GSM modem (1-port) converter detected
[  282.764469][T11063] usb 10-1: USB disconnect, device number 2
[  282.770012][T11063] option 10-1:7.6: device disconnected
[  282.946916][ T5859] team0 (unregistering): Port device team_slave_1 removed
[  283.409406][T11492] bridge0: port 2(bridge_slave_1) entered blocking state
[  283.412236][T11492] bridge0: port 2(bridge_slave_1) entered disabled state
[  283.414578][T11492] bridge_slave_1: entered allmulticast mode
[  283.418884][T11492] bridge_slave_1: entered promiscuous mode
[  283.421701][T11376] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  283.455579][ T5220] Bluetooth: hci1: command tx timeout
[  283.464420][T11492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  283.471266][T11492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  283.551356][T11492] team0: Port device team_slave_0 added
[  283.578031][T11492] team0: Port device team_slave_1 added
[  283.603019][ T9180] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  283.635929][T11492] batman_adv: batadv0: Adding interface: batadv_slave_0
[  283.638174][T11492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  283.649445][T11492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  283.665675][T11492] batman_adv: batadv0: Adding interface: batadv_slave_1
[  283.667958][T11492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  283.677165][T11492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  283.695676][ T5220] Bluetooth: hci0: command tx timeout
[  283.736381][T11492] hsr_slave_0: entered promiscuous mode
[  283.738800][T11492] hsr_slave_1: entered promiscuous mode
[  283.766980][T11376] 8021q: adding VLAN 0 to HW filter on device bond0
[  283.777351][ T9180] usb 10-1: Using ep0 maxpacket: 8
[  283.782783][ T9180] usb 10-1: unable to get BOS descriptor or descriptor too short
[  283.788879][ T9180] usb 10-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=2b.cd
[  283.793849][ T9180] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  283.802388][ T9180] usb 10-1: Product: syz
[  283.803756][ T9180] usb 10-1: Manufacturer: syz
[  283.806054][ T9180] usb 10-1: SerialNumber: syz
[  283.845292][T11376] 8021q: adding VLAN 0 to HW filter on device team0
[  283.862301][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[  283.865093][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[  283.887936][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[  283.890703][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[  283.977246][T11376] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  284.043106][ T9180] kalmia 10-1:1.0: probe with driver kalmia failed with error -22
[  284.048490][ T9180] usb 10-1: USB disconnect, device number 3
[  284.351960][T11376] 8021q: adding VLAN 0 to HW filter on device batadv0
[  284.464952][T11376] veth0_vlan: entered promiscuous mode
[  284.472944][T11376] veth1_vlan: entered promiscuous mode
[  284.510296][T11376] veth0_macvtap: entered promiscuous mode
[  284.514581][T11376] veth1_macvtap: entered promiscuous mode
[  284.582866][T11376] batman_adv: batadv0: Interface activated: batadv_slave_0
[  284.649450][T11376] batman_adv: batadv0: Interface activated: batadv_slave_1
[  284.682131][T11492] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  284.695610][T11492] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  284.703598][T11376] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  284.708063][T11376] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  284.710786][T11376] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  284.713816][T11376] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  284.719383][T11492] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  284.727678][T11492] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  284.908431][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  284.919498][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  284.991359][   T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  284.997321][   T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  285.004302][T11492] 8021q: adding VLAN 0 to HW filter on device bond0
[  285.029893][T11492] 8021q: adding VLAN 0 to HW filter on device team0
[  285.040696][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  285.043650][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  285.058672][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  285.061566][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  285.161002][T11646] loop1: detected capacity change from 0 to 512
[  285.187774][T11646] EXT4-fs error (device loop1): ext4_orphan_get:1419: comm syz.1.1844: bad orphan inode 11862016
[  285.196591][T11646] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  285.258771][T11376] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  285.379694][T11492] 8021q: adding VLAN 0 to HW filter on device batadv0
[  285.444091][T11492] veth0_vlan: entered promiscuous mode
[  285.468812][T11492] veth1_vlan: entered promiscuous mode
[  285.507110][T11492] veth0_macvtap: entered promiscuous mode
[  285.511840][T11492] veth1_macvtap: entered promiscuous mode
[  285.558348][T11665] libceph: resolve 'R' (ret=-3): failed
[  285.559513][T11492] batman_adv: batadv0: Interface activated: batadv_slave_0
[  285.578119][T11492] batman_adv: batadv0: Interface activated: batadv_slave_1
[  285.582458][T11492] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  285.585230][T11492] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  285.604582][T11492] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  285.607986][T11492] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  285.729154][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  285.731879][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  285.775958][ T5220] Bluetooth: hci0: command tx timeout
[  285.780431][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  285.783163][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  286.215566][ T9180] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  286.391794][ T9180] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  286.403085][ T9180] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  286.412196][ T9180] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024
[  286.424640][ T9180] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  286.429814][ T9180] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.434232][ T9180] usb 2-1: Product: syz
[  286.440427][ T9180] usb 2-1: Manufacturer: syz
[  286.442265][ T9180] usb 2-1: SerialNumber: syz
[  286.732755][T11692] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  287.173643][ T9180] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS
[  287.187653][ T9180] cdc_ncm 2-1:1.0: bind() failure
[  287.251099][T11730] loop9: detected capacity change from 0 to 2048
[  287.265096][ T9180] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  287.281351][ T9180] cdc_ncm 2-1:1.1: bind() failure
[  287.320695][T11730] Alternate GPT is invalid, using primary GPT.
[  287.323242][T11730]  loop9: p1 p2 p3
[  287.362430][ T9180] usb 2-1: USB disconnect, device number 3
[  287.598513][T11747] kAFS: unable to lookup cell ''
[  287.815421][T11518] usb 4-1: new low-speed USB device number 4 using dummy_hcd
[  287.855425][ T5220] Bluetooth: hci0: command tx timeout
[  287.981277][T11518] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  287.990264][T11518] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  287.993768][T11518] usb 4-1: config 0 interface 0 has no altsetting 0
[  288.000147][T11769] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  288.010642][T11518] usb 4-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00
[  288.013793][T11518] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  288.032294][T11518] usb 4-1: config 0 descriptor??
[  288.034919][T11745] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  288.529010][T11518] holtek_mouse 0003:04D9:A067.000E: unknown main item tag 0x0
[  288.532149][T11518] holtek_mouse 0003:04D9:A067.000E: unknown main item tag 0x0
[  288.534930][T11518] holtek_mouse 0003:04D9:A067.000E: unknown main item tag 0x0
[  288.550216][T11518] holtek_mouse 0003:04D9:A067.000E: unknown main item tag 0x0
[  288.555191][T11518] holtek_mouse 0003:04D9:A067.000E: unknown main item tag 0x0
[  288.567725][T11518] holtek_mouse 0003:04D9:A067.000E: unknown main item tag 0x0
[  288.570556][T11518] holtek_mouse 0003:04D9:A067.000E: unknown main item tag 0x0
[  288.573380][T11518] holtek_mouse 0003:04D9:A067.000E: unknown main item tag 0x0
[  288.634159][T11518] holtek_mouse 0003:04D9:A067.000E: hidraw0: USB HID v0.00 Device [HID 04d9:a067] on usb-dummy_hcd.3-1/input0
[  288.676518][T11772] loop1: detected capacity change from 0 to 32768
[  288.683973][T11772] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1945 (11772)
[  288.715708][T11772] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  288.719404][T11772] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm
[  288.722738][T11772] BTRFS info (device loop1): using free-space-tree
[  288.744615][T11784] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1946'.
[  288.748250][T11518] usb 4-1: USB disconnect, device number 4
[  288.853094][T11772] BTRFS info (device loop1): rebuilding free space tree
[  289.025304][T11376] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  289.375265][T11828] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  289.375265][T11828] The task syz.1.1952 (11828) triggered the difference, watch for misbehavior.
[  289.430163][T11832] netlink: 3 bytes leftover after parsing attributes in process `syz.9.1955'.
[  289.443391][T11832] netlink: 3 bytes leftover after parsing attributes in process `syz.9.1955'.
[  289.447655][T11832] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  289.532678][T11836] input: syz0 as /devices/virtual/input/input12
[  289.569662][T11838] loop9: detected capacity change from 0 to 2048
[  289.583038][T11838] NILFS (loop9): invalid segment: Magic number mismatch
[  289.587605][T11838] NILFS (loop9): trying rollback from an earlier position
[  289.594673][T11838] NILFS (loop9): recovery cancelled because norecovery option was specified for a read/write mount
[  289.978433][T11857] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  290.042474][T11861] loop9: detected capacity change from 0 to 512
[  290.052119][T11861] EXT4-fs error (device loop9): ext4_iget_extra_inode:5035: inode #15: comm syz.9.1963: corrupted in-inode xattr: invalid ea_ino
[  290.060190][T11861] EXT4-fs error (device loop9): ext4_orphan_get:1398: comm syz.9.1963: couldn't read orphan inode 15 (err -117)
[  290.066360][T11861] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  290.095245][T11841] loop3: detected capacity change from 0 to 40427
[  290.102280][T11054] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.104535][T11841] F2FS-fs (loop3): build fault injection rate: 771
[  290.117929][T11841] F2FS-fs (loop3): invalid crc value
[  290.233813][T11841] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  290.320208][T11492] syz-executor: attempt to access beyond end of device
[  290.320208][T11492] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  290.335970][T11492] CPU: 1 UID: 0 PID: 11492 Comm: syz-executor Not tainted 6.16.0-rc7-syzkaller-dirty #0 PREEMPT(full) 
[  290.335992][T11492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  290.336000][T11492] Call Trace:
[  290.336006][T11492]  <TASK>
[  290.336012][T11492]  dump_stack_lvl+0x189/0x250
[  290.336035][T11492]  ? __pfx_dump_stack_lvl+0x10/0x10
[  290.336047][T11492]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  290.336059][T11492]  ? __pfx_queue_work_on+0x10/0x10
[  290.336075][T11492]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  290.336088][T11492]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  290.336103][T11492]  ? f2fs_hw_is_readonly+0x39b/0x470
[  290.336120][T11492]  f2fs_handle_critical_error+0x37c/0x540
[  290.336139][T11492]  f2fs_write_end_io+0x495/0x810
[  290.336154][T11492]  ? blkg_put+0x22/0x240
[  290.336181][T11492]  __submit_merged_bio+0x27a/0x6a0
[  290.336199][T11492]  __submit_merged_write_cond+0x255/0x530
[  290.336224][T11492]  f2fs_write_data_pages+0x261d/0x3000
[  290.336261][T11492]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  290.336283][T11492]  ? arch_stack_walk+0xfc/0x150
[  290.336321][T11492]  ? __mod_zone_page_state+0xd7/0x140
[  290.336357][T11492]  ? folios_put_refs+0x560/0x640
[  290.336381][T11492]  ? __lock_acquire+0xab9/0xd20
[  290.336401][T11492]  ? do_raw_spin_lock+0x121/0x290
[  290.336426][T11492]  ? do_raw_spin_unlock+0x4d/0x240
[  290.336442][T11492]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  290.336458][T11492]  do_writepages+0x32e/0x550
[  290.336484][T11492]  ? do_raw_spin_unlock+0x4d/0x240
[  290.336505][T11492]  filemap_fdatawrite+0x191/0x230
[  290.336523][T11492]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  290.336599][T11492]  ? do_raw_spin_unlock+0x4d/0x240
[  290.336621][T11492]  f2fs_sync_dirty_inodes+0x31f/0x830
[  290.336649][T11492]  f2fs_write_checkpoint+0x94a/0x1de0
[  290.336684][T11492]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  290.336732][T11492]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  290.336748][T11492]  ? kfree+0x18e/0x440
[  290.336765][T11492]  ? kill_f2fs_super+0x298/0x6c0
[  290.336786][T11492]  kill_f2fs_super+0x2c3/0x6c0
[  290.336808][T11492]  ? __pfx_kill_f2fs_super+0x10/0x10
[  290.336822][T11492]  ? radix_tree_delete_item+0x2b6/0x400
[  290.336842][T11492]  ? shrinker_free+0x2ce/0x3e0
[  290.336859][T11492]  deactivate_locked_super+0xbc/0x130
[  290.336877][T11492]  cleanup_mnt+0x425/0x4c0
[  290.336893][T11492]  ? lockdep_hardirqs_on+0x9c/0x150
[  290.336909][T11492]  task_work_run+0x1d4/0x260
[  290.336932][T11492]  ? __pfx_task_work_run+0x10/0x10
[  290.336948][T11492]  ? __x64_sys_umount+0x122/0x160
[  290.336971][T11492]  ? exit_to_user_mode_loop+0x40/0x110
[  290.336988][T11492]  exit_to_user_mode_loop+0xec/0x110
[  290.337003][T11492]  do_syscall_64+0x2bd/0x3b0
[  290.337017][T11492]  ? lockdep_hardirqs_on+0x9c/0x150
[  290.337031][T11492]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  290.337045][T11492]  ? exc_page_fault+0x9f/0xf0
[  290.337061][T11492]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  290.337073][T11492] RIP: 0033:0x7fb25fb8fcd7
[  290.337087][T11492] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  290.337099][T11492] RSP: 002b:00007ffc708e84b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  290.337114][T11492] RAX: 0000000000000000 RBX: 00007fb25fc10b55 RCX: 00007fb25fb8fcd7
[  290.337123][T11492] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc708e8570
[  290.337131][T11492] RBP: 00007ffc708e8570 R08: 0000000000000000 R09: 0000000000000000
[  290.337139][T11492] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc708e9600
[  290.337147][T11492] R13: 00007fb25fc10b55 R14: 0000000000046d64 R15: 00007ffc708e9640
[  290.337170][T11492]  </TASK>
[  290.337177][T11492] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  290.417612][T11880] loop1: detected capacity change from 0 to 8
[  290.418028][T11880] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  290.427961][T11880] cramfs: Error -3 while decompressing!
[  290.495591][T11880] cramfs: ffffffff99be7762(26)->ffff88803c994000(4096)
[  290.498356][T11880] cramfs: Error -3 while decompressing!
[  290.500594][T11880] cramfs: ffffffff99be777c(16)->ffff88803d0c1000(4096)
[  290.503398][T11880] cramfs: Error -3 while decompressing!
[  290.511728][T11880] cramfs: ffffffff99be7762(26)->ffff88803c994000(4096)
[  290.522038][   T33] audit: type=1800 audit(290.363:86): pid=11880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1968" name="file2" dev="loop1" ino=348 res=0 errno=0
[  291.378209][T11910] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1976'.
[  292.633648][T11921] loop3: detected capacity change from 0 to 32768
[  292.650315][T11921] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  292.723219][T11921] XFS (loop3): Ending clean mount
[  292.730520][T11921] XFS (loop3): Quotacheck needed: Please wait.
[  292.776246][T11921] XFS (loop3): Quotacheck: Done.
[  292.874526][T11492] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  293.447059][T11985] loop3: detected capacity change from 0 to 1024
[  293.480984][T11985] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  293.512519][T11985] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  293.527590][T11985] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28
[  293.532473][T11985] EXT4-fs (loop3): This should not happen!! Data will be lost
[  293.532473][T11985] 
[  293.544241][T11985] EXT4-fs (loop3): Total free blocks count 0
[  293.547287][T11985] EXT4-fs (loop3): Free/Dirty block details
[  293.549905][T11985] EXT4-fs (loop3): free_blocks=68451041280
[  293.560120][T11993] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  293.577119][T11985] EXT4-fs (loop3): dirty_blocks=32
[  293.579223][T11985] EXT4-fs (loop3): Block reservation details
[  293.581626][T11985] EXT4-fs (loop3): i_reserved_data_blocks=2
[  294.157072][T12036] loop1: detected capacity change from 0 to 65
[  294.171644][T12036] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway
[  294.193809][T12030] loop3: detected capacity change from 0 to 4096
[  294.212982][T12030] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  294.235128][T12030] ntfs3(loop3): ino=1a, mi_enum_attr
[  294.241834][T12030] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  295.620120][T12096] VFS: Lookup of 'file0' in fuse fuse would have caused loop
[  295.667733][T12105] loop1: detected capacity change from 0 to 256
[  295.680786][T12105] exFAT-fs (loop1): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d)
[  295.754583][T12109] binder: 12108:12109 ioctl c018620b 200000000000 returned -14
[  295.835191][T12113] loop1: detected capacity change from 0 to 4096
[  295.845090][T12113] NILFS (loop1): invalid segment: Inconsistency found
[  295.846544][T11518] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  295.848930][T12113] NILFS (loop1): trying rollback from an earlier position
[  295.867967][T12113] NILFS (loop1): recovery complete
[  295.871106][T12115] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  296.000003][T11518] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  296.004353][T11518] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.010141][T11518] usb 4-1: Product: syz
[  296.014017][T11518] usb 4-1: Manufacturer: syz
[  296.019981][T11518] usb 4-1: SerialNumber: syz
[  296.034177][T11518] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  296.083232][ T5297] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  296.310813][T11518] usb 4-1: USB disconnect, device number 5
[  296.391503][T12123] loop1: detected capacity change from 0 to 32768
[  296.402186][T12123] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  296.446003][T12123] XFS (loop1): Ending clean mount
[  296.449080][T12123] XFS (loop1): Quotacheck needed: Please wait.
[  296.480792][T12123] XFS (loop1): Quotacheck: Done.
[  296.528288][T11376] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  296.806964][T12155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2048'.
[  296.823966][T12155] geneve2: entered promiscuous mode
[  297.147131][ T5297] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  297.150240][ T5297] ath9k_htc: Failed to initialize the device
[  297.178105][T11518] usb 4-1: ath9k_htc: USB layer deinitialized
[  297.211453][T12159] loop3: detected capacity change from 0 to 32768
[  297.252163][T12159] JBD2: Ignoring recovery information on journal
[  297.299464][T12159] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode.
[  297.337232][T12165] loop9: detected capacity change from 0 to 32768
[  297.355106][T11492] (syz-executor,11492,0):ocfs2_inode_is_valid_to_delete:886 ERROR: Skipping delete of system file 22
[  297.361723][T12165] JBD2: Ignoring recovery information on journal
[  297.366154][T11492] ocfs2: Unmounting device (7,3) on (node local)
[  297.412759][T12165] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[  297.456365][T12177] syz_tun: entered allmulticast mode
[  297.468358][T12175] syz_tun: left allmulticast mode
[  297.504676][T11054] ocfs2: Unmounting device (7,9) on (node local)
[  297.639739][T12184] loop1: detected capacity change from 0 to 1024
[  297.643121][T12184] EXT4-fs: Ignoring removed nomblk_io_submit option
[  297.657094][T12187] loop9: detected capacity change from 0 to 64
[  297.678752][T12184] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  297.685278][T12187] minix_free_block (loop9:21): bit already cleared
[  298.487002][T11376] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  298.747081][T12210] loop1: detected capacity change from 0 to 32768
[  298.766544][T12210] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  298.812809][T12210] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  298.863544][T11376] ocfs2: Unmounting device (7,1) on (node local)
[  298.988104][T12218] lo speed is unknown, defaulting to 1000
[  298.991179][T12218] lo speed is unknown, defaulting to 1000
[  299.005110][T12218] lo speed is unknown, defaulting to 1000
[  299.036878][T12218] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  299.097249][T12218] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  299.208215][T12218] lo speed is unknown, defaulting to 1000
[  299.216267][T12218] lo speed is unknown, defaulting to 1000
[  299.220044][T12218] lo speed is unknown, defaulting to 1000
[  299.422898][T12232] loop1: detected capacity change from 0 to 1024
[  299.427211][T12232] EXT4-fs: test_dummy_encryption requires encrypt feature
[  299.756590][T12246] loop3: detected capacity change from 0 to 1024
[  299.769362][T12246] hfsplus: failed to load root directory
[  300.017925][T12262] Unknown options in mask 5
[  300.231661][T12275] loop3: detected capacity change from 0 to 4096
[  300.235170][T12275] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  300.238242][   T33] audit: type=1326 audit(300.083:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12276 comm="syz.1.2099" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f944cf8e9a9 code=0x7ffc0000
[  300.249197][   T33] audit: type=1326 audit(300.103:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12276 comm="syz.1.2099" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f944cf8e9a9 code=0x7ffc0000
[  300.266531][   T33] audit: type=1326 audit(300.113:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12276 comm="syz.1.2099" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f944cf8e9a9 code=0x7ffc0000
[  300.277596][   T33] audit: type=1326 audit(300.113:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12276 comm="syz.1.2099" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f944cf8e9a9 code=0x0
[  300.279430][T12275] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  300.293740][T12280] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  300.360643][T11492] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  300.451582][T12288] sp0: Synchronizing with TNC
[  300.978397][T12298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2108'.
[  300.981686][T12298] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2108'.
[  300.984648][T12298] netlink: 'syz.3.2108': attribute type 19 has an invalid length.
[  301.159544][T12306] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2111'.
[  301.163286][T12306] netlink: get zone limit has 8 unknown bytes
[  301.165163][T12305] loop3: detected capacity change from 0 to 1024
[  301.176773][T12305] hfsplus: failed to load catalog file
[  301.379638][T12315] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2116'.
[  301.383366][T12316] netlink: 'syz.1.2117': attribute type 5 has an invalid length.
[  301.391229][T12316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2117'.
[  301.457490][ T5897] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  301.643152][ T5897] usb 4-1: Using ep0 maxpacket: 32
[  301.647901][ T5897] usb 4-1: config 0 has an invalid interface number: 36 but max is 0
[  301.651348][ T5897] usb 4-1: config 0 has no interface number 0
[  301.664733][ T5897] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=1b.c4
[  301.671117][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.674191][ T5897] usb 4-1: Product: syz
[  301.676594][ T5897] usb 4-1: Manufacturer: syz
[  301.678470][ T5897] usb 4-1: SerialNumber: syz
[  301.682570][ T5897] usb 4-1: config 0 descriptor??
[  301.750880][T12330] netlink: 312 bytes leftover after parsing attributes in process `syz.9.2118'.
[  301.754729][T12330] netlink: 220 bytes leftover after parsing attributes in process `syz.9.2118'.
[  302.132512][ T5897] cx82310_eth 4-1:0.36: probe with driver cx82310_eth failed with error -71
[  302.138772][ T5897] cxacru 4-1:0.36: usbatm_usb_probe: bind failed: -19!
[  302.144904][ T5897] usb 4-1: USB disconnect, device number 6
[  302.492182][T12348] netlink: 244 bytes leftover after parsing attributes in process `syz.9.2131'.
[  302.561666][T12350] loop9: detected capacity change from 0 to 64
[  302.571882][T12347] loop1: detected capacity change from 0 to 4096
[  302.593869][T12347] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  302.811471][T12364] loop9: detected capacity change from 0 to 512
[  302.815785][T12364] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  302.909878][T12366] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2137'.
[  303.020956][T12370] xt_CONNSECMARK: invalid mode: 0
[  304.059010][T12412] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2157'.
[  304.298559][T12425] loop3: detected capacity change from 0 to 512
[  304.323333][T12425] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.2163: casefold flag without casefold feature
[  304.333015][T12425] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.2163: couldn't read orphan inode 15 (err -117)
[  304.340440][T12425] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  304.704978][T12419] loop1: detected capacity change from 0 to 131072
[  304.716809][T12428] netem: invalid attributes len -22
[  304.718635][T12428] netem: change failed
[  304.785065][T12419] F2FS-fs (loop1): Test dummy encryption mode enabled
[  304.787501][T12419] F2FS-fs (loop1): Test dummy encryption mode enabled
[  304.791676][T12419] F2FS-fs (loop1): invalid crc value
[  304.849744][T12419] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  305.313961][T11492] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  305.350291][T12441] netlink: 64 bytes leftover after parsing attributes in process `syz.9.2167'.
[  305.446514][T12446] loop9: detected capacity change from 0 to 128
[  305.454792][T12446] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: writeback.
[  305.552349][T11054] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  305.950060][T12454] loop9: detected capacity change from 0 to 512
[  305.971858][T12454] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  306.438275][T12464] loop1: detected capacity change from 0 to 512
[  306.441783][T12464] EXT4-fs: Ignoring removed nobh option
[  306.453324][T12464] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  306.461886][T12464] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.2175: invalid indirect mapped block 256 (level 1)
[  306.467759][T12464] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.2175: invalid indirect mapped block 2683928664 (level 1)
[  306.473988][T12464] EXT4-fs (loop1): 1 truncate cleaned up
[  306.478267][T12464] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  306.490122][T12464] EXT4-fs error (device loop1): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.1.2175: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[  306.541831][T11376] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  306.626453][T12460] loop3: detected capacity change from 0 to 32768
[  306.632100][T12460] bcachefs (/dev/loop3): error validating superblock: Invalid superblock section replicas_v0: duplicate replicas entry journal: 1/1 [0]
[  306.632100][T12460] replicas_v0 (size 24):
[  306.632100][T12460] journal: 1 [0] journal: 1 [0] user: 1 [0]
[  306.632100][T12460] 
[  306.643906][T12460] bcachefs: bch2_fs_get_tree() error: invalid_sb_replicas
[  306.795886][T11054] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  307.355575][T11615] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  308.129139][T11615] usb 10-1: config 220 has an invalid interface number: 76 but max is 2
[  308.131913][T11615] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  308.135436][T11615] usb 10-1: config 220 has no interface number 2
[  308.137394][T11615] usb 10-1: config 220 interface 1 altsetting 5 has an endpoint descriptor with address 0x6F, changing to 0xF
[  308.140894][T11615] usb 10-1: config 220 interface 1 altsetting 5 endpoint 0xF has invalid wMaxPacketSize 0
[  308.144032][T11615] usb 10-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[  308.148342][T11615] usb 10-1: config 220 interface 0 has no altsetting 0
[  308.150895][T11615] usb 10-1: config 220 interface 76 has no altsetting 0
[  308.158632][T11615] usb 10-1: config 220 interface 1 has no altsetting 0
[  308.213154][T12480] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2180'.
[  308.216258][T12480] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2180'.
[  308.246779][T12480] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2180'.
[  308.521897][T11615] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  308.528374][T11615] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.534209][T11615] usb 10-1: Product: syz
[  308.538246][T11615] usb 10-1: Manufacturer: syz
[  308.541112][T11615] usb 10-1: SerialNumber: syz
[  308.604506][T12484] xt_cgroup: xt_cgroup: no path or classid specified
[  308.756578][T11615] usb 10-1: selecting invalid altsetting 0
[  308.771701][T11615] usb 10-1: Found UVC 7.01 device syz (8086:0b07)
[  308.773816][T11615] usb 10-1: No valid video chain found.
[  308.786040][T11615] usb 10-1: selecting invalid altsetting 0
[  308.788155][T11615] usbtest 10-1:220.1: probe with driver usbtest failed with error -22
[  308.795751][T11615] usb 10-1: USB disconnect, device number 4
[  308.960875][T12505] bridge: RTM_NEWNEIGH with invalid state 0x0
[  309.010504][T12509] loop1: detected capacity change from 0 to 1024
[  309.036903][T12509] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040e01c, mo2=0002]
[  309.039590][T12509] System zones: 0-1, 3-36
[  309.043110][T12509] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  309.070159][T12511] 
[  309.070985][T12511] ======================================================
[  309.073144][T12511] WARNING: possible circular locking dependency detected
[  309.075521][T12511] 6.16.0-rc7-syzkaller-dirty #0 Not tainted
[  309.077652][T12511] ------------------------------------------------------
[  309.081256][T12511] syz.3.2193/12511 is trying to acquire lock:
[  309.083602][T12511] ffff88801cf5f358 (&disk->open_mutex){+.+.}-{4:4}, at: __del_gendisk+0x129/0x9e0
[  309.086566][T12511] 
[  309.086566][T12511] but task is already holding lock:
[  309.089258][T12511] ffff88801cf5e368 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160
[  309.092363][T12511] 
[  309.092363][T12511] which lock already depends on the new lock.
[  309.092363][T12511] 
[  309.095737][T12511] 
[  309.095737][T12511] the existing dependency chain (in reverse order) is:
[  309.098818][T12511] 
[  309.098818][T12511] -> #2 (&set->update_nr_hwq_lock){++++}-{4:4}:
[  309.101760][T12511]        lock_acquire+0x120/0x360
[  309.103470][T12511]        down_write+0x96/0x1f0
[  309.105074][T12511]        blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  309.107206][T12511]        nbd_start_device+0x16c/0xac0
[  309.108988][T12511]        nbd_ioctl+0x636/0xeb0
[  309.110834][T12511]        blkdev_ioctl+0x5a8/0x6d0
[  309.112730][T12511]        __se_sys_ioctl+0xfc/0x170
[  309.114358][T12511]        do_syscall_64+0xfa/0x3b0
[  309.116013][T12511]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  309.118177][T12511] 
[  309.118177][T12511] -> #1 (&nbd->config_lock){+.+.}-{4:4}:
[  309.120961][T12511]        lock_acquire+0x120/0x360
[  309.122571][T12511]        __mutex_lock+0x182/0xe80
[  309.124207][T12511]        refcount_dec_and_mutex_lock+0x30/0xa0
[  309.126069][T12511]        nbd_config_put+0x2c/0x790
[  309.127661][T12511]        nbd_release+0xfe/0x140
[  309.129139][T12511]        bdev_release+0x536/0x650
[  309.130731][T12511]        blkdev_release+0x15/0x20
[  309.132443][T12511]        __fput+0x44c/0xa70
[  309.133959][T12511]        fput_close_sync+0x119/0x200
[  309.135708][T12511]        __x64_sys_close+0x7f/0x110
[  309.137512][T12511]        do_syscall_64+0xfa/0x3b0
[  309.139153][T12511]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  309.141195][T12511] 
[  309.141195][T12511] -> #0 (&disk->open_mutex){+.+.}-{4:4}:
[  309.143803][T12511]        validate_chain+0xb9b/0x2140
[  309.145562][T12511]        __lock_acquire+0xab9/0xd20
[  309.147164][T12511]        lock_acquire+0x120/0x360
[  309.148943][T12511]        __mutex_lock+0x182/0xe80
[  309.150541][T12511]        __del_gendisk+0x129/0x9e0
[  309.152272][T12511]        del_gendisk+0xe8/0x160
[  309.153777][T12511]        loop_remove+0x42/0xc0
[  309.155288][T12511]        loop_control_ioctl+0x4ac/0x5a0
[  309.157039][T12511]        __se_sys_ioctl+0xfc/0x170
[  309.158687][T12511]        do_syscall_64+0xfa/0x3b0
[  309.160266][T12511]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  309.162207][T12511] 
[  309.162207][T12511] other info that might help us debug this:
[  309.162207][T12511] 
[  309.165264][T12511] Chain exists of:
[  309.165264][T12511]   &disk->open_mutex --> &nbd->config_lock --> &set->update_nr_hwq_lock
[  309.165264][T12511] 
[  309.169581][T12511]  Possible unsafe locking scenario:
[  309.169581][T12511] 
[  309.171996][T12511]        CPU0                    CPU1
[  309.173684][T12511]        ----                    ----
[  309.175346][T12511]   rlock(&set->update_nr_hwq_lock);
[  309.177132][T12511]                                lock(&nbd->config_lock);
[  309.179557][T12511]                                lock(&set->update_nr_hwq_lock);
[  309.182522][T12511]   lock(&disk->open_mutex);
[  309.184363][T12511] 
[  309.184363][T12511]  *** DEADLOCK ***
[  309.184363][T12511] 
[  309.187411][T12511] 1 lock held by syz.3.2193/12511:
[  309.189408][T12511]  #0: ffff88801cf5e368 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160
[  309.193299][T12511] 
[  309.193299][T12511] stack backtrace:
[  309.195594][T12511] CPU: 1 UID: 0 PID: 12511 Comm: syz.3.2193 Not tainted 6.16.0-rc7-syzkaller-dirty #0 PREEMPT(full) 
[  309.195615][T12511] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  309.195625][T12511] Call Trace:
[  309.195634][T12511]  <TASK>
[  309.195642][T12511]  dump_stack_lvl+0x189/0x250
[  309.195664][T12511]  ? __pfx_dump_stack_lvl+0x10/0x10
[  309.195683][T12511]  ? __pfx__printk+0x10/0x10
[  309.195704][T12511]  ? print_lock_name+0xde/0x100
[  309.195725][T12511]  print_circular_bug+0x2ee/0x310
[  309.195747][T12511]  check_noncircular+0x134/0x160
[  309.195767][T12511]  validate_chain+0xb9b/0x2140
[  309.195785][T12511]  ? stack_depot_save_flags+0x40/0x900
[  309.195807][T12511]  __lock_acquire+0xab9/0xd20
[  309.195823][T12511]  ? __del_gendisk+0x129/0x9e0
[  309.195840][T12511]  lock_acquire+0x120/0x360
[  309.195853][T12511]  ? __del_gendisk+0x129/0x9e0
[  309.195872][T12511]  ? lockdep_unlock+0x89/0x120
[  309.195885][T12511]  __mutex_lock+0x182/0xe80
[  309.195901][T12511]  ? __del_gendisk+0x129/0x9e0
[  309.195921][T12511]  ? __del_gendisk+0x129/0x9e0
[  309.195939][T12511]  ? __pfx___mutex_lock+0x10/0x10
[  309.195954][T12511]  ? __pfx___might_resched+0x10/0x10
[  309.195973][T12511]  ? __lock_acquire+0xab9/0xd20
[  309.195989][T12511]  ? disk_del_events+0xb5/0x210
[  309.196010][T12511]  ? __del_gendisk+0xc1/0x9e0
[  309.196029][T12511]  __del_gendisk+0x129/0x9e0
[  309.196054][T12511]  ? del_gendisk+0xe0/0x160
[  309.196075][T12511]  ? __pfx___del_gendisk+0x10/0x10
[  309.196098][T12511]  ? down_read+0x1ad/0x2e0
[  309.196116][T12511]  del_gendisk+0xe8/0x160
[  309.196137][T12511]  loop_remove+0x42/0xc0
[  309.196152][T12511]  loop_control_ioctl+0x4ac/0x5a0
[  309.196164][T12511]  ? __fget_files+0x2a/0x420
[  309.196178][T12511]  ? __pfx_loop_control_ioctl+0x10/0x10
[  309.196190][T12511]  ? __fget_files+0x2a/0x420
[  309.196204][T12511]  ? bpf_lsm_file_ioctl+0x9/0x20
[  309.196251][T12511]  ? __pfx_loop_control_ioctl+0x10/0x10
[  309.196266][T12511]  __se_sys_ioctl+0xfc/0x170
[  309.196287][T12511]  do_syscall_64+0xfa/0x3b0
[  309.196305][T12511]  ? lockdep_hardirqs_on+0x9c/0x150
[  309.196322][T12511]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  309.196336][T12511]  ? exc_page_fault+0x9f/0xf0
[  309.196352][T12511]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  309.196369][T12511] RIP: 0033:0x7fb25fb8e9a9
[  309.196386][T12511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  309.196402][T12511] RSP: 002b:00007fb25d9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  309.196420][T12511] RAX: ffffffffffffffda RBX: 00007fb25fdb6080 RCX: 00007fb25fb8e9a9
[  309.196430][T12511] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000003
[  309.196440][T12511] RBP: 00007fb25fc10d69 R08: 0000000000000000 R09: 0000000000000000
[  309.196452][T12511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  309.196461][T12511] R13: 0000000000000000 R14: 00007fb25fdb6080 R15: 00007ffc708e9228
[  309.196479][T12511]  </TASK>
[  309.437445][T12514] EXT4-fs (loop1): shut down requested (2)
[  310.243631][T11376] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  310.248967][   T27] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started
[  310.253000][   T27] Quota error (device loop1): v2_write_file_info: Can't write info structure
[  316.898049][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  316.900537][ T1362] ieee802154 phy1 wpan1: encryption failed: -22

VM DIAGNOSIS:
03:24:15  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000196c24 RBX=ffff88804b032f58 RCX=c4299e7a30087d00 RDX=0000000000000000
RSI=ffffffff8be28ce0 RDI=ffffffff8be28ca0 RBP=ffffc90003fdf8b0 RSP=ffffc90003fdf7e8
R8 =ffffffff8fa1dcf7 R9 =1ffffffff1f43b9e R10=dffffc0000000000 R11=fffffbfff1f43b9f
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff8dbbcc70 R15=dffffc0000000000
RIP=ffffffff81a72bf7 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fb2609226c0 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000002000 CR3=000000002e8e4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffff00 ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffff00 XMM03=ffffffffffffff00 ffffffffffffff00
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fac0bc11ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000002d RBX=000000000000002d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001831 RDI=0000000000001832 RBP=00000000000003f8 RSP=ffffc90003daf170
R8 =ffff888020c68237 R9 =1ffff1100418d046 R10=dffffc0000000000 R11=ffffffff85462e20
R12=dffffc0000000000 R13=ffffffff99af18aa R14=ffffffff99df6300 R15=0000000000000000
RIP=ffffffff85462e9c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fb25d9f66c0 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=000000002e8e4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fb25fd86478 00007fb25fd86450 XMM03=00007fb25fd86488 00007fb25fd86480
XMM04=00007fb2608ed100 00007fb25fd86440 XMM05=00007fb25fd86458 00007fb25fd864a0
XMM06=00007fb25fd86498 00007fb25fd86490 XMM07=00007fb25fd86488 00007fb25fd86480
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fb25fc11ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
