last executing test programs:

5m40.623948487s ago: executing program 1 (id=816):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r0, 0x29, 0x4d, 0x0, 0x0)

5m40.544429843s ago: executing program 32 (id=816):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r0, 0x29, 0x4d, 0x0, 0x0)

4m41.760949657s ago: executing program 0 (id=1913):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711235000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4m41.701943357s ago: executing program 0 (id=1915):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x27908}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x3, 0x3}}]}]}, @IFLA_MASTER={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4000010)

4m41.633070632s ago: executing program 0 (id=1918):
r0 = socket(0x400000000010, 0x3, 0x0)
write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030011000500e1000c040007001a000900", 0x33a)

4m41.632514005s ago: executing program 0 (id=1920):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000580)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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")
mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000040)='./file0\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
getdents(r0, &(0x7f0000000040)=""/61, 0x3d)

4m41.512391705s ago: executing program 0 (id=1926):
r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0)
syz_clone(0x50011100, &(0x7f0000001740)="bfd49d01a392b4eb1d8f4fd9a831b67718", 0x11, 0x0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3009}}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)={0x20, 0x3, 0x2, "b23b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000800)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x82, 0x2, "cce2"}, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x84, 0x2, "06ac"}, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000a00)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="208402"], 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f00000014c0)={0x84, &(0x7f0000001580)={0x40, 0x0, 0x3, "2958f6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)

4m41.233167438s ago: executing program 0 (id=1930):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r4=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, <r6=>0x0], &(0x7f0000000040), 0x3, r5, 0xcccccccc})
ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r5], &(0x7f0000000200), &(0x7f00000000c0)=[r6], &(0x7f0000000040), 0x0, 0x300})

4m41.084824727s ago: executing program 33 (id=1930):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r4=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, <r6=>0x0], &(0x7f0000000040), 0x3, r5, 0xcccccccc})
ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r5], &(0x7f0000000200), &(0x7f00000000c0)=[r6], &(0x7f0000000040), 0x0, 0x300})

4m27.531691721s ago: executing program 2 (id=2175):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010000100a6bd7000fcdbdf25006d0000", @ANYRES32=r1, @ANYBLOB="1910050003000000180016"], 0x38}, 0x1, 0x0, 0x0, 0x20004003}, 0x4000000)

4m27.473374798s ago: executing program 2 (id=2177):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680))
alarm(0x8000000000000001)

4m27.473043435s ago: executing program 2 (id=2180):
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='net/rt_acct\x00')
preadv(r0, &(0x7f0000002240)=[{&(0x7f0000003d00)=""/4096, 0x1000}], 0x1, 0x37, 0x6)
read$FUSE(r0, &(0x7f00000027c0)={0x2020}, 0x2020)

4m27.455096132s ago: executing program 2 (id=2182):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x200008, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1, 0x5511, &(0x7f00000079c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x10)
statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0xffff4a9c0080ffff, 0x0)

4m27.134445236s ago: executing program 2 (id=2193):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x3c}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)

4m26.914292981s ago: executing program 2 (id=2200):
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000202010200000000000000000100000308000940000000040400038094000a800800014000000000080001400000e50008000140000000017800028006000340000000001400018008000100ac1414bb08000200e00000012c00018014000300fe8000000000000000000000000000bb14000400fe8000000000000000000000000000352c00018014000300fe88000000000000000000000000010114000400fc010000000000000000000000000000180001801400018008000100ac1414bb08"], 0xcc}, 0x1, 0x0, 0x0, 0x81}, 0x800)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)

4m26.757408309s ago: executing program 34 (id=2200):
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000202010200000000000000000100000308000940000000040400038094000a800800014000000000080001400000e50008000140000000017800028006000340000000001400018008000100ac1414bb08000200e00000012c00018014000300fe8000000000000000000000000000bb14000400fe8000000000000000000000000000352c00018014000300fe88000000000000000000000000010114000400fc010000000000000000000000000000180001801400018008000100ac1414bb08"], 0xcc}, 0x1, 0x0, 0x0, 0x81}, 0x800)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)

3m18.813952939s ago: executing program 4 (id=3621):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file1\x00', 0x28108c0, &(0x7f0000006980)=ANY=[@ANYBLOB="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"], 0xfe, 0x61f6, &(0x7f000000cdc0)="$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")
setxattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=@known='trusted.syz\x00', 0x0, 0x0, 0x1)

3m18.65040796s ago: executing program 4 (id=3623):
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0)
mount$nfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='ac,,'])

3m17.843718256s ago: executing program 4 (id=3642):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x400, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@init_itable_val}, {@errors_remount}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x1, 0x4ed, &(0x7f00000002c0)="$eJzs3d9rXFkdAPDvncw0SZt1surDuuBadCVdtDPJxt0NPqwRRJ8WrPXFpxiTSQiZZEJm0jahSIp/gCD+Qp988kXwWQTpnyBCQd9FRCna1gcf1JE7c6fNppNkQjOZNPl84PSe+/N7vmnuyZx7L3MDuLCuRsRsRAxFxFsRUcyW57ISu+2Sbvf40d2FtCTRHL75jySSbFnnWEk2vZLtNhIR3/haxHeS5+PWt3dW56vVymY2X26sbZTr2zvXV9bmlyvLlfXZ6al3Z96beWdm8sRyff8rf/3x93/51fd/9/nbf577+7Xvps0ay9btzaMXuz1u10690PpZdOQjYvM4wc6woSyfwqAbAgBAT9LP+B+NiE9HxJOfDbo1AAAAQD80vzQW/0kimgAAAMC5lWs9A5vkStmzAGORy5VK7Wd4Px6Xc9VavfG5pdrW+mL7WdnxKOSWVqqVyexZ4fEoJOn8VKv+bP7tffPTEfFqRPywONqaLy3UqouDvvgBAAAAF8SVfeP/fxXb438AAADgnBkfdAMAAACAvjP+BwAAgPPvwPF/kn/6giwAAADgpfX1Dz5IS7Pz/uvFW9tbq7Vb1xcr9dXS2tZCaaG2uVFartWWW9/Zt3bU8aq12sYXYn3rTrlRqTfK9e2dubXa1npjrvVe77lKs3gqaQEAAAB7vPqp+39KImL3i6OtkrqUrSscvftsf1sH9FPueJsn/WoHcPqGBt0AYGDyg24AMDA9jPGBc+6Igf2P9s0f87IBAABwFkx84oXu/7sfCC8xA3m4uNz/h4vL/X+4uNz/hwtu+OhNRg5a8fsTbgsAANA3Y62S5ErZvcCxyOVKpYhXWq8FKCRLK9XKZER8JCL+WCwMp/NTg240AAAAAAAAAAAAAAAAAAAAAAAAALxkms0kmgAAAMC5FpH7W5K9yH+i+ObY/usDl5J/F1vTiLj985s/uTPfaGxOpcv/+XR546fZ8rc7S1LfOuUrGQAAAEBHZ5zeGccDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEl6/OjuQqecZtyHX46I8W7x8zHSmo78phgRl58kkd+zXxIRQycQf/deRLzWLX6SNivGs1bsj5+LiNEBx79yAvHhIruf9j+z6flX2Hf+5eJqa9r9/Mtn5UU9vHpQ/5fr9H+tfq5b//fK4Yce6VRef/Dr8oHx70W8nu/e/7QPkG/Fei7+pd5z/PY3d3YOWtf8RcTEEX9/0vjlxtpGub69c31lbX65slxZn56eenfmvZl3ZibLSyvVSvZv1xg/+ORv/3dY/pe7xm/3v+mPsWv+EfFmj/n/98GdRx87JP61z3T//3/tkPjp78Rns78D6fqJTn23Xd/rjV/94Y3D8l88IP+RI/K/1mP+b9343l963BQAOAX17Z3V+Wq1stmXymjfjqySVmrrZ6IZKme3ciM70Y+9+4A7JgAA4MQ9+9C/f80xbvAAAAAAAAAAAAAAAAAAAAAAL6TvX0I2/OFvFhgZXKoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIf6fwAAAP//QCfSvg==")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85)
lseek(r0, 0x104, 0x1)
getdents64(r0, 0x0, 0x4f)

3m17.773437901s ago: executing program 4 (id=3643):
inotify_init1(0x800)
syz_mount_image$fuse(0x0, 0x0, 0x1000009, 0x0, 0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000008c0), 0x3, 0x5eb, &(0x7f0000000c00)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0)
lsetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000200)='\xa2-\x00', 0x3, 0x1)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})
llistxattr(0x0, 0x0, 0x0)

3m17.721861166s ago: executing program 4 (id=3644):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x14, r1, 0x1, 0x70bd2a, 0x25dfdbff}, 0x14}}, 0x0)

3m17.514131207s ago: executing program 4 (id=3645):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r0, 0x7aa, 0x0)

3m17.450804645s ago: executing program 35 (id=3645):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r0, 0x7aa, 0x0)

2m48.029536265s ago: executing program 6 (id=4326):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0)

2m47.972120005s ago: executing program 6 (id=4327):
syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='shortname=win95,rodir=lower,shortname=wiKnt,check=strict,\x00'/68], 0x11, 0x305, &(0x7f0000002480)="$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")

2m47.971984038s ago: executing program 6 (id=4328):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0xc, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x1, [{0xa, 0x3}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @decl_tag={0x5, 0x0, 0x0, 0x11, 0x5, 0x6}]}, {0x0, [0x61, 0x0, 0x30, 0x2e, 0x61, 0x61, 0x61, 0x61, 0x0, 0x61]}}, 0x0, 0x5c}, 0x28)

2m47.860219451s ago: executing program 6 (id=4329):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

2m47.836746514s ago: executing program 6 (id=4330):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000363f3e320ef170070eca10102030109021b0001000080040904"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0})
sched_setscheduler(0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)

2m47.482115183s ago: executing program 6 (id=4334):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f00000005c0)={[{@gid_ignore}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@utf8}, {@uid}, {@longad}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@volume={'volume', 0x3d, 0xf3}}, {@dmode={'dmode', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@uid}, {@undelete}, {@gid_forget}, {@uid}]}, 0x1, 0xc80, &(0x7f0000001bc0)="$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")
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0))

2m47.431998481s ago: executing program 36 (id=4334):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f00000005c0)={[{@gid_ignore}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@utf8}, {@uid}, {@longad}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@volume={'volume', 0x3d, 0xf3}}, {@dmode={'dmode', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@uid}, {@undelete}, {@gid_forget}, {@uid}]}, 0x1, 0xc80, &(0x7f0000001bc0)="$eJzs3U9sHNd5APDvDZfiSm4rxk4VJ42DTVuksmK5+hdTtgp3VdNsA8iyEIq5BeBKpNSFKZIgqUY23JbppYceAhRFDzkRaIUCKRoYTRH0yLQukFx8KHLqiWhhIyh6YIsAAVoYW8zsW3FFkZYsURIl/3429e3MvDfz3rz1G1nQNy8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIjfefX0kaNpiwMDD6ExAMADcXb8a0eObfX8BwAeW+e3+/9/AAAAAAAAAAAAAABgt0hRxFORYv7sepqstrvqZ9qDV69NjI5tXW1vqmoOVOXLn/rRY8dPfOWFkZO9eKY9+xH1d9rn4vXx86cbr8xdmV+YXlycnmpMzLYvzk1N3/EZ7rX+ZoeqG9C48sbVqUuXFhvHnj9+0+Frwx8MPXFg+NTIs4ef6ZWdGB0bG98oUu8vX7vrhnRtl+GxJ4o4HCme+95PUysiirj3e1F/sGO/2d6qE4eqTkyMjlUdmWm3ZpfKg+d6N6KIaPRVavbu0dZjEbXBB9qH7TUjlsvmlw0+VHZvfL610LowM90411pYai+152bPpW5ry/40ooiTKWIlItaGbj3dYBRRixTf2b+eLuS3flT34ctVYvD27SjuYx/vQNnOxmDESvEIjNkuNhRFvBYpfvbuwbiY55lqrvlSxGtl/EHE9TK+HJHKL8aJiPe3+B7xaKpFEX9Wjv+p9TRVzQe9eeXM1xtfnb0011e2N698zOfDLTPFQ3o+7N0UH4xdPjfVo4hWNeOvp7v/zQ4AAAAAAAAAAAAAAAAAO21vFPHZSPHqv/5BlVccVV76/lMjvzv8i/0540/f5jxl2ecjYrm4s5zcPTkx8Fw6l9JDziX+JKtHEX+Y8/++9bAbAwAAAAAAAAAAAAAAAAAA8IlWxE8ixUvvHUwr0b+meHv2cuN868JMd1XY3tq/vTXTO51Op5G6sZnjZI7LOa7kuJrjWo5R5Po5NnOczHE5x5UcV3NcyzEGcv0cmzlO5ric40qOqzmu5Ri1XD/HZo6TOS7nuJLjao5rOcYuWbsXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBxUkQRH0aKb39zPUWKiGbEZHTj6tDDbh0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUBpKRXw/UjR+r3ljXy0iUvVv18HylxPR3FPGJ6M5UsaXo3k6x1YVa81vPYT2c28GUxE/jhRD9XduDHge/8Hu1o2vQVx/e2Prc7VuHOgdHP5g6IkD+0+NjH3h6e0+p60acOhMe/bqtcbE6NjYeN/1avnqT/YVHc7XLXau+594i2++9UZrZmZ64e4/lF+Bu6zeG8l7uPqD/JBqj0xTd+2H4tEZ7tZM1HZFMx5O329SfxiTE/dd+fx/P1L85nv/1nvgd5//9fiF7taNJ3z8/I82nv8vbT7RHT7/a5vr5ed/OS2M9+3uPf+f6tv3Uv7dwWAtor50ZX7wQER98c23DrevtC5PX56ePXHkyIsjIy8ePzK4J6J+qT0z3fdpR24XAAAAAAAAAAAAAAAAwIOTivjtSNH68XpqRMS1Kl9r+NTIs4efGYiBKt/qprzt18fPn268MndlfmF6cXF6qjEx2744NzV9p5erV+leE6Nj96Uzt7X3Prd/b/2Vufk3F9qXf39py+P76qcvLC4ttC5ufTj2RhHR7N9zqGrwxOhY1eiZdmu2qnpuy2T6j28wFfHvkeLiiUb6Yt6X8/83Z/jH9bdfvPFdWN58oh3L/4/4wr6N/L9P9RUtr5lSET+PFL/x50/HF6t27otb7lku99eR4tDJz+dysacs12vDk1W3upmBZdn/jhR//+HNZXv5kN0cxKrs0Y93d3e/cvz3R4rv/+l341fzvpvf/9A//hv3b9/mE+3g+Edf/uen+/btu+l9BffcdfL4H44ULz/1Tvxated/P/L9H703NhzsFt54P8d9Gv9f7ts3nK/76zvVeQAAAAAAAAAAgEfYYCribyLFD8dq6YW8707+/t/U5hPdp7//9Zm+fVM7s17RbT/c800FAAAAgF1iMBXxk0hxeemdGznUN+d/9+V//tZG/udo2nS0+nO+X6reG7CTf/7Xbzhfd/Leuw0AAAAAAAAAAAAAAAAAAAC7SkpFvJDXU5+s8vmntl1PfTVSvPqfz+Vy6UBZrrcO/HD1a/3s3Ozh0zMzc/VYal2YmW6Mz7cuTpd1Px0p1v/q87luUa2v3ltvvrvG+8Za7AuRYuxve2W7a7H31ibvrgde73QijpZlPxUp/uPvbi6bl6bOa0dX5z1Wlv3LSPGNf9y67IGNssfLst+NFD/6RqNXdl9Ztvd+1M9slH3+4lxxH0YFAAAAAAAAAAAAAAAAAACAT5rBVMSfRIr/urJyI5c/r/8/2LdZuf5233r/m1yr1vkfrtb/3+7z3az/X71XYHm7qwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOMpRRFvRYr5s+tpdajc7qqfac9evTYxOrZ1tb2pqjlQlS9/6kePHT/xlRdGTvbiR9ffaZ+N18fPn268MndlfmF6cXF6qjEx2744NzV9x2e41/qbHapuQOPKG1enLl1abBx7/vhNh68NfzD0xIHhUyPPHn6mV3ZidGxsvK9MbfCur36LtM3+PVHEX0SK57730/TDoYgi7v1e3Oa7c7/trTpxqOrExOhY1ZGZdmt2qTx4rncjiohGX6Vm7x7ddiz+r9PpPKiubKEZsVw2v2zwobJ74/OthdaFmenGudbCUnupPTd7LnVbW/anEUWcTBErEbE2dOvpBqOINyLFd/avp38aihjo3Ycvnx3/2pFj27ejuI99vANlOxuDESvFnYwZ2xmKIv4hUvzs3YPxz0MRtej+xJciXivjDyKuR3e8U/nFOBHx/hbfIx5NtSjif8rxP7We3h0q54PevHLm642vzl6a6yvbm1d6z4fePPgxnw+dTuePy/jwng8PxEA37PK5qR5F/Kia8dfTv/jvGgAAAAAAAAAAAAAAAGAXKeJXIsVL7x1MVX7wjZzi9uzlxvnWhZluWl8v96+XM93pdDqN1I3NHCdzXM5xJcfVHNdyjCLXz7FZxnqnM5m3l3NcKaJefljN22s5xkCuP1ClK3aaeXsyx+UcV3JczXEtx6jl+jk2c5zMcTnHlRxXc1zLMXZJ7h4AAAAAAAAAAAAAAAAAAPB4Kap/Unz7m+upM9RdX3oyunHVeqCPvf8PAAD//2lb9GQ=")
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0))

2m32.147404894s ago: executing program 7 (id=4598):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62)
ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x6)
listen(r0, 0x0)
accept4(r0, 0x0, 0x0, 0x80800)

2m32.064348353s ago: executing program 7 (id=4599):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000100039042cbd7000eaffffff000003e4", @ANYRES32=r2, @ANYBLOB="830004002a6000002000128008000100736974001400028008001400"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)

2m32.062330179s ago: executing program 7 (id=4602):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000060000000410000010"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m32.003162182s ago: executing program 7 (id=4605):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000000c0), 0x12)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@nouid32}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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")
mount(&(0x7f0000000080)=@nullb, &(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c})

2m31.935413135s ago: executing program 7 (id=4611):
socket$kcm(0x29, 0x5, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00')
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/250, 0xfa}], 0x1, 0x185, 0x0)

2m31.573155196s ago: executing program 7 (id=4617):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x25dfdbfb, {0x26}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0)

2m31.528079375s ago: executing program 37 (id=4617):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x25dfdbfb, {0x26}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0)

46.103158655s ago: executing program 8 (id=6798):
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0x14}, &(0x7f0000001fee)='R\t\xff\x7fst\xe3c*sgrVid:\x00e', 0x0)

46.03913481s ago: executing program 8 (id=6799):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x68}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}}, 0x0)

46.038942009s ago: executing program 8 (id=6800):
sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000041400032bbd7000fcdbdf2508000100000000fb0800010000000000080001000200000008000100000000000800010001000000080001"], 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000003000000010000000500008b9b3e9f7767757c06040000000f0000000300000008000000560000000200000006000000090000000600000006000000fbffffff04000000"], 0x0, 0x97, 0x0, 0x1}, 0x28)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, 0x0, 0xfffffffffffffe43}, 0x68)

46.038849758s ago: executing program 8 (id=6801):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x200056, &(0x7f0000000440)={[{@nogrpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@nodiscard}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==")
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e)

45.962776311s ago: executing program 8 (id=6803):
syz_mount_image$bcachefs(&(0x7f0000000080), &(0x7f0000000000)='./file2\x00', 0x800001, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x1, 0x5927, &(0x7f00000061c0)="$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")

45.655702713s ago: executing program 8 (id=6811):
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="030000000400000004eca6141f198e9dd6000000", @ANYRES32=0x1, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000002"], 0x48)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r1, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b00001400078008000600"], 0xac}}, 0x0)

45.60074878s ago: executing program 38 (id=6811):
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="030000000400000004eca6141f198e9dd6000000", @ANYRES32=0x1, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000002"], 0x48)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r1, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b00001400078008000600"], 0xac}}, 0x0)

6.284296727s ago: executing program 9 (id=7595):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x6}, @NL80211_KEY_DATA_WEP40={0x9, 0xa}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "8ed505e4808c0387945dfed183"}]}]}, 0x48}}, 0x40)

6.222483983s ago: executing program 9 (id=7597):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28)
recvfrom$inet6(r0, &(0x7f0000000300)=""/218, 0xda, 0x120, 0x0, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c)
shutdown(r0, 0x0)

6.168230599s ago: executing program 9 (id=7600):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1)
read(r0, &(0x7f00000032c0)=""/4110, 0x100e)

6.103148565s ago: executing program 9 (id=7601):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000152,iocharset=iso8859-1,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030372c646973636172642c00214b3cf244ea5fb7437f2c69f67a093e240a6e978fa4cd2d"], 0x1, 0x14fe, &(0x7f0000002a80)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e)

6.049772014s ago: executing program 9 (id=7602):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000104050000000000000000000500000005000100020000000a00020000000001030000000800034000000008080003400000ed2b060006"], 0x5c}}, 0x0)

5.952492193s ago: executing program 9 (id=7603):
r0 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00')
pread64(r0, &(0x7f0000032140)=""/102344, 0x18fc8, 0x4000c2a)

5.903241155s ago: executing program 39 (id=7603):
r0 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00')
pread64(r0, &(0x7f0000032140)=""/102344, 0x18fc8, 0x4000c2a)

1.497442384s ago: executing program 1 (id=7604):
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x438, &(0x7f0000000d80)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ftruncate(r1, 0x2000009)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000080)={0x17c04, 0xffffffffffffffff, 0xfdfd, 0x100000001})

1.392362619s ago: executing program 1 (id=7671):
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fanotify_init(0x40, 0x800)
fanotify_mark(r1, 0x1, 0x20, r0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)

1.303940196s ago: executing program 1 (id=7676):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect(0x2, 0x221, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002b387cfff8405080002010102030109020f0201ff0310030904e8fb044be442a55f0403689d3b4b56a535c2951b6ac3d54095b826c58400886139d795817f"], 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_OPENQRY(r1, 0x4b4c, &(0x7f0000000080))

673.347534ms ago: executing program 5 (id=7702):
r0 = socket(0x1, 0x80802, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x80000007})

618.329689ms ago: executing program 5 (id=7703):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000350000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r2, &(0x7f00000001c0), 0x0}, 0x20)

555.267497ms ago: executing program 5 (id=7704):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000000300)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@sysvgroups}]}, 0x1, 0x42f, &(0x7f0000000940)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)
fadvise64(r0, 0x7f, 0x0, 0x4)

381.205123ms ago: executing program 5 (id=7705):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
pipe(&(0x7f0000000180))
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_newvlan={0x18, 0x70, 0x239, 0x70bd2a, 0x25dfdbfb}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0)

318.463087ms ago: executing program 5 (id=7706):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x6, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x196, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8001, @loopback, 0x627bcafb}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000300)=0x7, 0x4)
recvmmsg(r0, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/60, 0x3c}, 0x12b}], 0x1, 0x12000, 0x0)

318.271616ms ago: executing program 5 (id=7707):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10, 0x0}}], 0x1, 0x8014)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"])

122.24997ms ago: executing program 3 (id=7712):
syz_open_dev$vim2m(&(0x7f0000000080), 0xf, 0x2)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfff2}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x50, 0xd5, 0x5f, 0x9, 0xfff, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x40001, 0x24, 0xd, 0x1, 0x4, 0xffffffff, 0xe661, 0x0, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x7fff, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x3, 0x8, 0x4, 0x1, 0x3d], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0x5, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xfffffcf0, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x3, 0x4, 0xc, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x9, 0x1, 0xfe000000, 0x8, 0x8, 0x4, 0x9, 0x3, 0x3, 0x9, 0x6, 0x3, 0x3, 0xbc45, 0x48c93691, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x4, 0x5, 0x0, 0x1ef, 0x5, 0xb, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0x4, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x81, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0xffff, 0xa9, 0x5, 0x6, 0xac8, 0x1, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x80060a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x8001, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

122.108611ms ago: executing program 3 (id=7713):
bpf$MAP_CREATE(0x0, &(0x7f00000017c0)=@base={0x1a, 0x7ff, 0xfffffa1b, 0xfffff28e, 0xc0c, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2}, 0x50)

122.008689ms ago: executing program 3 (id=7714):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x5, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x23}, {[@lsrr={0x83, 0x7, 0xc0, [@multicast1]}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)

58.569069ms ago: executing program 3 (id=7715):
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4010)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8)
r1 = syz_io_uring_setup(0x110, &(0x7f00000001c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000380)=0x1ff, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b})
io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0)

58.468147ms ago: executing program 3 (id=7716):
r0 = socket$inet6(0xa, 0x2, 0x3a)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000300)=0x401, 0x4)
sendmmsg$inet6(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

58.347177ms ago: executing program 3 (id=7717):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff)
add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r4 = io_uring_setup(0x4577, &(0x7f0000000540)={0x0, 0x988d, 0x8000, 0x2, 0x2be})
io_uring_setup(0x7fd0, &(0x7f00000004c0)={0x0, 0x3edc, 0x2, 0x1, 0x2fa, 0x0, r4})

1.030069ms ago: executing program 1 (id=7718):
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x60840, 0x8)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
socket$inet6(0xa, 0x2, 0x0)
pipe(&(0x7f0000019480))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
socket$inet6(0xa, 0x3, 0x6)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000002010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)

0s ago: executing program 1 (id=7719):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000)=@other={'lock', ' ', 'io+mem'}, 0xc)
r1 = epoll_create(0x1)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140))
write$vga_arbiter(r0, &(0x7f0000000040)=@other={'decodes', ' ', 'none'}, 0xd)

kernel console output (not intermixed with test programs):

ion available
[  323.800237][T18260]  nullb0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9
[  323.802487][T18260] nullb0: p1 start 3121229925 is beyond EOD, truncated
[  323.805491][T18260] nullb0: p2 start 1125600442 is beyond EOD, truncated
[  323.808337][T18260] nullb0: p3 start 2749556348 is beyond EOD, truncated
[  323.811194][T18260] nullb0: p4 size 749881270 extends beyond EOD, truncated
[  323.816610][T18260] nullb0: p5 start 3634521299 is beyond EOD, truncated
[  323.820464][T18260] nullb0: p6 start 3691333785 is beyond EOD, truncated
[  323.823283][T18260] nullb0: p7 start 3987215793 is beyond EOD, truncated
[  323.826429][T18260] nullb0: p8 start 1563769952 is beyond EOD, truncated
[  323.829305][T18260] nullb0: p9 start 1763214672 is beyond EOD, truncated
[  324.210026][T18273] loop8: detected capacity change from 0 to 4096
[  324.212879][T18273] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512).
[  324.228965][T18273] ntfs3(loop8): ino=1a, mi_enum_attr
[  324.230740][T18273] ntfs3(loop8): Mark volume as dirty due to NTFS errors
[  324.233476][T18273] ntfs3(loop8): ino=1a, mi_enum_attr
[  324.236870][T18273] ntfs3(loop8): Failed to initialize $Extend/$Reparse.
[  324.492632][T18297] loop8: detected capacity change from 0 to 256
[  324.642585][T18305] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  324.784957][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  324.791158][T18309] loop8: detected capacity change from 0 to 32768
[  324.797560][T18309] (syz.8.5178,18309,0):ocfs2_check_set_options:1259 ERROR: Group quotas were requested, but this filesystem does not have the feature enabled.
[  324.803031][T18309] (syz.8.5178,18309,0):ocfs2_fill_super:1177 ERROR: status = -22
[  325.519157][T18371] netlink: 'syz.3.5206': attribute type 4 has an invalid length.
[  325.781160][T18378] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253
[  325.783299][T18378] PKCS7: Only support pkcs7_signedData type
[  325.824908][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  325.896698][T18394] netlink: 'syz.8.5216': attribute type 12 has an invalid length.
[  325.899496][T18394] netlink: 132 bytes leftover after parsing attributes in process `syz.8.5216'.
[  325.979723][T18406] macsec0: entered promiscuous mode
[  325.981526][T18406] erspan0: entered promiscuous mode
[  325.983372][T18406] macsec0: entered allmulticast mode
[  326.324986][ T5313] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  326.867802][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  326.991346][ T5313] usb 9-1: Using ep0 maxpacket: 8
[  326.995830][ T5313] usb 9-1: config 179 has an invalid interface number: 65 but max is 0
[  326.998663][ T5313] usb 9-1: config 179 has no interface number 0
[  327.000771][ T5313] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  327.004248][ T5313] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  327.025330][ T5313] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  327.028860][ T5313] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  327.032597][ T5313] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  327.044892][ T5313] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  327.047985][ T5313] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  327.058881][T18427] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  327.311708][    T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:179.65/input/input9
[  327.500543][ T2258] usb 9-1: USB disconnect, device number 5
[  327.500690][    C0] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  327.514870][    C0] dummy_hcd dummy_hcd.8: timer fired with no URBs pending?
[  327.702415][T18475] netlink: 22 bytes leftover after parsing attributes in process `syz.3.5253'.
[  327.905167][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  328.042457][T18491] loop8: detected capacity change from 0 to 16
[  328.047043][T18491] erofs (device loop8): mounted with root inode @ nid 36.
[  328.304867][ T5313] usb 9-1: new full-speed USB device number 6 using dummy_hcd
[  328.954958][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  329.994881][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  330.229100][T18531] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  330.364499][T18543] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  331.034868][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  331.773169][T18581] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5297'.
[  332.074864][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  332.156117][T18594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5302'.
[  332.305656][T16404] Bluetooth: hci1: command 0x0406 tx timeout
[  332.475938][ T5880] usb 9-1: new full-speed USB device number 7 using dummy_hcd
[  332.637880][ T5880] usb 9-1: config 0 has an invalid interface number: 8 but max is 0
[  332.640626][ T5880] usb 9-1: config 0 has no interface number 0
[  332.642664][ T5880] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  332.646349][ T5880] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  332.649590][ T5880] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  332.652572][ T5880] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  332.656517][ T5880] usb 9-1: config 0 descriptor??
[  332.778886][T18615] netlink: 'syz.5.5312': attribute type 6 has an invalid length.
[  332.844083][T18625] Invalid option length (65058) for dns_resolver key
[  333.069373][ T5880] uclogic 0003:256C:006D.0008: interface is invalid, ignoring
[  333.104885][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  333.227123][T18663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5332'.
[  333.270466][ T5880] usb 9-1: USB disconnect, device number 7
[  333.855456][T18683] dvmrp1: entered allmulticast mode
[  333.858092][T18683] dvmrp1: left allmulticast mode
[  334.154867][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  335.185047][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  335.597252][   T33] audit: type=1326 audit(2000000061.104:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18735 comm="syz.5.5367" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd89bb8ebe9 code=0x0
[  335.610975][T18730] loop8: detected capacity change from 0 to 32768
[  335.686562][T18730] bcachefs (loop8): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  335.686575][T18730]   allowing incompatible features above 0.0: (unknown version)
[  335.686580][T18730]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  335.704631][T18730] bcachefs (loop8): Using encoding defined by superblock: utf8-12.1.0
[  335.710199][T18730] bcachefs (loop8): initializing new filesystem
[  335.726072][T18730] bcachefs (loop8): going read-write
[  335.731839][T18730] bcachefs (loop8): marking superblocks
[  335.745006][T18730] bcachefs (loop8): initializing freespace
[  335.756946][T18730] bcachefs (loop8): done initializing freespace
[  335.760049][T18730] bcachefs (loop8): reading snapshots table
[  335.762065][T18730] bcachefs (loop8): reading snapshots done
[  335.799326][T18730] bcachefs (loop8): done starting filesystem
[  335.849560][T17037] bcachefs (loop8): shutting down
[  335.851718][T17037] bcachefs (loop8): going read-only
[  335.853463][T17037] bcachefs (loop8): finished waiting for writes to stop
[  335.859592][T17037] bcachefs (loop8): flushing journal and stopping allocators, journal seq 2
[  335.882926][T17037] bcachefs (loop8): flushing journal and stopping allocators complete, journal seq 3
[  335.888742][T17037] bcachefs (loop8): clean shutdown complete, journal seq 4
[  335.891372][T17037] bcachefs (loop8): marking filesystem clean
[  335.912417][T17037] bcachefs (loop8): shutdown complete
[  336.224882][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  337.274940][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  337.359411][T18813] loop8: detected capacity change from 0 to 8
[  337.363184][T18813] unable to read id index table
[  337.607182][T18820] bond2: entered promiscuous mode
[  337.609224][T18820] 8021q: adding VLAN 0 to HW filter on device bond2
[  337.839736][   T33] audit: type=1326 audit(2000000063.344:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18838 comm="syz.3.5409" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0a38ebe9 code=0x7ffc0000
[  337.851978][   T33] audit: type=1326 audit(2000000063.344:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18838 comm="syz.3.5409" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0a38ebe9 code=0x7ffc0000
[  337.861382][   T33] audit: type=1326 audit(2000000063.344:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18838 comm="syz.3.5409" exe="/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f2f0a38ebe9 code=0x7ffc0000
[  337.872780][   T33] audit: type=1326 audit(2000000063.344:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18838 comm="syz.3.5409" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0a38ebe9 code=0x7ffc0000
[  337.883000][   T33] audit: type=1326 audit(2000000063.344:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18838 comm="syz.3.5409" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0a38ebe9 code=0x7ffc0000
[  337.950663][T18847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5413'.
[  338.304966][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  338.497990][T18870] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5423'.
[  338.500886][T18870] tc_dump_action: action bad kind
[  338.580160][T18879] cgroup: No subsys list or none specified
[  338.948391][T18897] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5436'.
[  339.354879][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  339.579338][T18938] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5456'.
[  340.384859][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  340.660289][T18962] loop8: detected capacity change from 0 to 32768
[  340.663553][T18962] XFS: ikeep mount option is deprecated.
[  340.807424][T18962] XFS (loop8): DAX unsupported by block device. Turning off DAX.
[  340.810882][T18962] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  340.828710][T18962] XFS (loop8): Internal error !uuid_equal(&mp->m_sb.sb_uuid, &head->h_fs_uuid) at line 254 of file fs/xfs/xfs_log_recover.c.  Caller xlog_header_check_mount+0x93/0xe0
[  340.834028][T18962] CPU: 1 UID: 0 PID: 18962 Comm: syz.8.5465 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  340.834041][T18962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  340.834047][T18962] Call Trace:
[  340.834051][T18962]  <TASK>
[  340.834055][T18962]  dump_stack_lvl+0x189/0x250
[  340.834069][T18962]  ? __pfx_dump_stack_lvl+0x10/0x10
[  340.834080][T18962]  ? __phys_addr+0xd3/0x180
[  340.834091][T18962]  ? __kasan_kmalloc_large+0x85/0xa0
[  340.834102][T18962]  ? is_vmalloc_addr+0x52/0xb0
[  340.834114][T18962]  xfs_corruption_error+0x122/0x170
[  340.834122][T18962]  ? xlog_header_check_mount+0x93/0xe0
[  340.834132][T18962]  xlog_header_check_mount+0xc6/0xe0
[  340.834140][T18962]  ? xlog_header_check_mount+0x93/0xe0
[  340.834148][T18962]  xlog_find_verify_log_record+0x32e/0x500
[  340.834159][T18962]  xlog_find_zeroed+0x327/0x410
[  340.834170][T18962]  xlog_find_head+0x5f/0x700
[  340.834176][T18962]  ? lockdep_hardirqs_on+0x9c/0x150
[  340.834185][T18962]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  340.834195][T18962]  xlog_find_tail+0x3d/0x840
[  340.834205][T18962]  ? try_to_wake_up+0x7f5/0x12b0
[  340.834216][T18962]  xlog_recover+0x4b/0x3e0
[  340.834226][T18962]  xfs_log_mount+0x253/0x3e0
[  340.834237][T18962]  xfs_mountfs+0xe5e/0x2330
[  340.834250][T18962]  ? __pfx_xfs_mountfs+0x10/0x10
[  340.834260][T18962]  ? xfs_setup_dax_always+0x20f/0x290
[  340.834271][T18962]  xfs_fs_fill_super+0x11b3/0x1600
[  340.834284][T18962]  get_tree_bdev_flags+0x40e/0x4d0
[  340.834295][T18962]  ? __pfx_xfs_fs_fill_super+0x10/0x10
[  340.834305][T18962]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  340.834318][T18962]  vfs_get_tree+0x92/0x2b0
[  340.834329][T18962]  do_new_mount+0x2a2/0x9e0
[  340.834340][T18962]  ? ns_capable+0x8a/0xf0
[  340.834347][T18962]  ? __pfx_do_new_mount+0x10/0x10
[  340.834357][T18962]  ? path_mount+0x61c/0xfe0
[  340.834366][T18962]  ? user_path_at+0x44/0x60
[  340.834378][T18962]  __se_sys_mount+0x317/0x410
[  340.834391][T18962]  ? __pfx___se_sys_mount+0x10/0x10
[  340.834403][T18962]  ? do_syscall_64+0xbe/0x3b0
[  340.834411][T18962]  ? __x64_sys_mount+0x20/0xc0
[  340.834423][T18962]  do_syscall_64+0xfa/0x3b0
[  340.834431][T18962]  ? lockdep_hardirqs_on+0x9c/0x150
[  340.834439][T18962]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  340.834451][T18962]  ? exc_page_fault+0x9f/0xf0
[  340.834460][T18962]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  340.834467][T18962] RIP: 0033:0x7fa8eb19038a
[  340.834475][T18962] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  340.834482][T18962] RSP: 002b:00007fa8ec00ee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  340.834491][T18962] RAX: ffffffffffffffda RBX: 00007fa8ec00eef0 RCX: 00007fa8eb19038a
[  340.834497][T18962] RDX: 0000200000000500 RSI: 0000200000000040 RDI: 00007fa8ec00eeb0
[  340.834503][T18962] RBP: 0000200000000500 R08: 00007fa8ec00eef0 R09: 000000000300c880
[  340.834509][T18962] R10: 000000000300c880 R11: 0000000000000246 R12: 0000200000000040
[  340.834514][T18962] R13: 00007fa8ec00eeb0 R14: 000000000000970d R15: 0000200000000080
[  340.834526][T18962]  </TASK>
[  340.834530][T18962] XFS (loop8): Corruption detected. Unmount and run xfs_repair
[  340.942769][T18962] XFS (loop8): log has mismatched uuid - can't recover
[  340.945730][T18962] XFS (loop8): empty log check failed
[  340.947772][T18962] XFS (loop8): log mount/recovery failed: error -117
[  340.959287][T18962] XFS (loop8): log mount failed
[  341.069074][T18983] netlink: 'syz.8.5470': attribute type 5 has an invalid length.
[  341.434841][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  341.675467][ T8005] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  341.883676][ T8005] usb 9-1: config 0 has an invalid interface number: 173 but max is 0
[  341.886889][ T8005] usb 9-1: config 0 has no interface number 0
[  341.888987][ T8005] usb 9-1: New USB device found, idVendor=2040, idProduct=4982, bcdDevice=95.d3
[  341.891966][ T8005] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  341.896050][ T8005] usb 9-1: config 0 descriptor??
[  342.101654][ T8005] hdpvr 9-1:0.173: unexpected answer of status request, len -71
[  342.105129][ T8005] hdpvr 9-1:0.173: device init failed
[  342.106950][ T8005] hdpvr 9-1:0.173: probe with driver hdpvr failed with error -12
[  342.110837][ T8005] usb 9-1: USB disconnect, device number 8
[  342.276048][ T5872] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  342.353485][ T5872] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  342.464827][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  342.632962][ T5872] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  342.722663][ T5872] team0: Port device netdevsim0 removed
[  342.739452][ T5872] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  343.002196][ T5872] bridge_slave_1: left allmulticast mode
[  343.004208][ T5872] bridge_slave_1: left promiscuous mode
[  343.007022][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state
[  343.012401][ T5872] bridge_slave_0: left allmulticast mode
[  343.014386][ T5872] bridge_slave_0: left promiscuous mode
[  343.018898][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state
[  343.223078][T19068] netlink: 68 bytes leftover after parsing attributes in process `syz.8.5507'.
[  343.514872][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  343.582343][ T5872] team0: Port device bridge1 removed
[  344.046324][ T5872] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  344.051437][ T5872] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  344.058246][ T5872] bond0 (unregistering): (slave team0): Releasing backup interface
[  344.062165][ T5872] bond0 (unregistering): Released all slaves
[  344.073755][T11540] syz0: Port: 1 Link DOWN
[  344.111986][ T5872] : left promiscuous mode
[  344.471450][T19133] loop8: detected capacity change from 0 to 1024
[  344.511075][   T27] hfsplus: b-tree write err: -5, ino 4
[  344.525763][ T5872] batadv_slave_0: left promiscuous mode
[  344.533562][ T5872] hsr_slave_0: left promiscuous mode
[  344.536815][T19137] loop8: detected capacity change from 0 to 256
[  344.544833][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  344.547996][ T5872] hsr_slave_1: left promiscuous mode
[  344.551893][ T5872] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  344.553473][T19137] FAT-fs (loop8): Directory bread(block 64) failed
[  344.555778][ T5872] batman_adv: batadv0: Removing interface: batadv_slave_0
[  344.561904][T19137] FAT-fs (loop8): Directory bread(block 65) failed
[  344.564089][T19137] FAT-fs (loop8): Directory bread(block 66) failed
[  344.568048][ T5872] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  344.569264][T19137] FAT-fs (loop8): Directory bread(block 67) failed
[  344.570546][ T5872] batman_adv: batadv0: Removing interface: batadv_slave_1
[  344.572755][T19137] FAT-fs (loop8): Directory bread(block 68) failed
[  344.584805][T19137] FAT-fs (loop8): Directory bread(block 69) failed
[  344.588698][T19137] FAT-fs (loop8): Directory bread(block 70) failed
[  344.590900][T19137] FAT-fs (loop8): Directory bread(block 71) failed
[  344.592322][ T5872] veth1_macvtap: left promiscuous mode
[  344.593028][T19137] FAT-fs (loop8): Directory bread(block 72) failed
[  344.595356][ T5872] veth0_macvtap: left promiscuous mode
[  344.599171][ T5872] veth0_vlan: left promiscuous mode
[  344.599200][T19137] FAT-fs (loop8): Directory bread(block 73) failed
[  344.602774][T19140] 9pnet_fd: Insufficient options for proto=fd
[  345.040402][T19143] loop8: detected capacity change from 0 to 131072
[  345.043538][T19143] F2FS-fs (loop8): Test dummy encryption mode enabled
[  345.046895][T19143] F2FS-fs (loop8): invalid crc value
[  345.074689][T19143] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  345.082782][T19143] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  345.099145][T19143] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  345.209670][ T5872] team0 (unregistering): Port device team_slave_1 removed
[  345.260651][ T5872] team0 (unregistering): Port device team_slave_0 removed
[  345.323263][ T1090] smc: removing ib device syz0
[  345.433407][   T33] audit: type=1326 audit(2000000070.934:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19139 comm="syz.5.5542" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89bb8ebe9 code=0x7fc00000
[  345.584816][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  345.890529][T19159] 8021q: VLANs not supported on lo
[  346.032648][T19186] loop8: detected capacity change from 0 to 512
[  346.075766][T19186] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  346.083373][T19186] EXT4-fs warning (device loop8): ext4_begin_enable_verity:135: inode #15: comm syz.8.5562: verity is only allowed on extent-based files
[  346.151362][T19197] IPv6: NLM_F_REPLACE set, but no existing node found!
[  346.164701][T19199] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5566'.
[  346.192583][T19186] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  346.624821][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  347.631878][T19250] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  347.635642][T19250] overlayfs: missing 'lowerdir'
[  347.664885][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  348.398395][T19268] IPv6: NLM_F_CREATE should be specified when creating new route
[  348.668381][T19276] loop8: detected capacity change from 0 to 32768
[  348.671342][T19276] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.5595 (19276)
[  348.678834][T19276] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  348.682484][T19276] BTRFS info (device loop8): using crc32c (crc32c-lib) checksum algorithm
[  348.688122][T19276] BTRFS info (device loop8): using free-space-tree
[  348.704869][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  348.774387][T17037] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  349.052003][T19304] loop8: detected capacity change from 0 to 32768
[  349.169912][T19320] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5609'.
[  349.303334][T19322] loop8: detected capacity change from 0 to 32768
[  349.305978][T19322] btrfs: Deprecated parameter 'usebackuproot'
[  349.307939][T19322] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  349.311159][T19322] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.5610 (19322)
[  349.316792][T19322] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  349.319940][T19322] BTRFS info (device loop8): using crc32c (crc32c-lib) checksum algorithm
[  349.322948][T19322] BTRFS info (device loop8): using free-space-tree
[  349.332259][ T1091] BTRFS warning (device loop8): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x26333c6f level 0
[  349.339520][T19322] BTRFS warning (device loop8): couldn't read tree root
[  349.341803][T19322] BTRFS warning (device loop8): try to load backup roots slot 1
[  349.345036][ T1090] BTRFS warning (device loop8): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x78ca8373 level 0
[  349.349522][T19322] BTRFS warning (device loop8): couldn't read tree root
[  349.352124][T19322] BTRFS warning (device loop8): try to load backup roots slot 2
[  349.355645][ T1091] BTRFS error (device loop8): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  349.363623][T19322] BTRFS warning (device loop8): couldn't read tree root
[  349.366174][T19322] BTRFS warning (device loop8): try to load backup roots slot 3
[  349.373296][T19322] BTRFS info (device loop8): rebuilding free space tree
[  349.379442][T19322] BTRFS info (device loop8): checking UUID tree
[  349.754823][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  350.188176][T17037] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  350.535365][T19419] netlink: 108 bytes leftover after parsing attributes in process `syz.5.5647'.
[  350.794828][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  350.975496][T19456] loop8: detected capacity change from 0 to 32768
[  350.989453][T19456] (syz.8.5664,19456,0):ocfs2_load_local_alloc:339 ERROR: inconsistent detected, clean journal with unrecovered local alloc, please run fsck.ocfs2!
[  350.989453][T19456] found = 0, set = 0, taken = 0, off = 1280
[  350.996903][T19456] (syz.8.5664,19456,0):ocfs2_load_local_alloc:356 ERROR: status = -22
[  351.002020][T19456] (syz.8.5664,19456,0):ocfs2_check_volume:2404 ERROR: status = -22
[  351.004574][T19456] (syz.8.5664,19456,0):ocfs2_check_volume:2432 ERROR: status = -22
[  351.010704][T19456] (syz.8.5664,19456,0):ocfs2_mount_volume:1764 ERROR: status = -22
[  351.018696][T19456] (syz.8.5664,19456,0):ocfs2_fill_super:1177 ERROR: status = -22
[  351.834814][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  352.426405][T19539] netlink: 52 bytes leftover after parsing attributes in process `syz.8.5702'.
[  352.688487][T19549] input input11: cannot allocate more than FF_MAX_EFFECTS effects
[  352.748999][ T8005] IPVS: starting estimator thread 0...
[  352.835827][T19556] IPVS: using max 80 ests per chain, 192000 per kthread
[  352.874828][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  353.156131][ T5880] usb 9-1: new low-speed USB device number 9 using dummy_hcd
[  353.319258][ T5880] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  353.325179][ T5880] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2
[  353.334928][ T5880] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  353.339127][ T5880] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  353.342069][ T5880] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  353.381387][ T5880] hub 9-1:1.0: bad descriptor, ignoring hub
[  353.383413][ T5880] hub 9-1:1.0: probe with driver hub failed with error -5
[  353.390327][ T5880] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22
[  353.501497][T19575] 9pnet: Found fid 0 not clunked
[  353.704980][T11540] usb 9-1: USB disconnect, device number 9
[  353.904915][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  354.127887][T19588] netlink: 'syz.8.5724': attribute type 21 has an invalid length.
[  354.130699][T19588] netlink: 'syz.8.5724': attribute type 1 has an invalid length.
[  354.133246][T19588] netlink: 100 bytes leftover after parsing attributes in process `syz.8.5724'.
[  354.300879][T19596] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709510581)
[  354.304190][T19596] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647
[  354.394884][ T5880] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  354.461567][   T33] audit: type=1326 audit(2000000079.964:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19582 comm="syz.5.5722" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89bb8ebe9 code=0x7fc00000
[  354.540613][T19606] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.554967][ T5880] usb 9-1: Using ep0 maxpacket: 32
[  354.558144][ T5880] usb 9-1: config 0 has an invalid interface number: 169 but max is 0
[  354.560890][ T5880] usb 9-1: config 0 has no interface number 0
[  354.562915][ T5880] usb 9-1: config 0 interface 169 has no altsetting 0
[  354.567735][ T5880] usb 9-1: New USB device found, idVendor=0499, idProduct=500c, bcdDevice=33.49
[  354.571232][ T5880] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  354.582300][ T5880] usb 9-1: Product: syz
[  354.584219][ T5880] usb 9-1: Manufacturer: syz
[  354.586749][ T5880] usb 9-1: SerialNumber: syz
[  354.591131][ T5880] usb 9-1: config 0 descriptor??
[  354.598304][ T5880] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[  354.632609][T19606] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.689924][T19606] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.765470][T19606] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.801300][ T5880] usb 9-1: USB disconnect, device number 10
[  354.842629][T16430] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  354.863935][ T5872] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  354.875090][ T5872] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  354.882999][ T5872] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  354.945303][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  355.740975][T19656] loop8: detected capacity change from 0 to 32768
[  355.748425][T19656] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  355.757586][T19656] XFS (loop8): Ending clean mount
[  355.764617][T19656] XFS (loop8): Quotacheck needed: Please wait.
[  355.793823][T19656] XFS (loop8): Quotacheck: Done.
[  355.823552][T17037] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  355.984901][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  356.568121][T19667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  357.024934][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  357.096213][T19714] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  357.441598][T19729] ip6tnl3: entered allmulticast mode
[  358.064897][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  358.075788][T19774] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  358.087900][T19774] fuse: Unknown parameter '184467440737095516150x000000000000000900000000000000000000'
[  359.104893][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  359.249486][T19822] loop8: detected capacity change from 0 to 128
[  359.256732][T19822] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  359.261811][T19822] ext4 filesystem being mounted at /323/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  359.281230][T17037] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  359.318877][T19830] loop8: detected capacity change from 0 to 256
[  359.321461][T19830] msdos: Bad value for 'codepage'
[  359.538550][T19857] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5841'.
[  359.624921][ T5880] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  359.775356][ T5880] usb 9-1: Using ep0 maxpacket: 16
[  359.779568][ T5880] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 245, changing to 11
[  359.783386][ T5880] usb 9-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00
[  359.786978][ T5880] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  359.790959][ T5880] usb 9-1: config 0 descriptor??
[  360.144982][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  360.199802][ T5880] hid-alps 0003:044E:120B.0009: hidraw0: USB HID v0.06 Device [HID 044e:120b] on usb-dummy_hcd.8-1/input0
[  360.303866][T19877] could not allocate digest TFM handle cryptd(blake2b-160)
[  360.397375][T11540] usb 9-1: USB disconnect, device number 11
[  360.920056][T19919] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5867'.
[  360.940967][T19921] netlink: 'syz.8.5868': attribute type 21 has an invalid length.
[  360.943795][T19921] netlink: 144 bytes leftover after parsing attributes in process `syz.8.5868'.
[  361.008595][T19927] netlink: 68 bytes leftover after parsing attributes in process `syz.8.5871'.
[  361.117526][T19941] loop8: detected capacity change from 0 to 512
[  361.120523][T19941] EXT4-fs error (device loop8): ext4_get_journal_inode:5796: comm syz.8.5878: inode #16777216: comm syz.8.5878: iget: illegal inode #
[  361.125871][T19941] EXT4-fs (loop8): Remounting filesystem read-only
[  361.128094][T19941] EXT4-fs (loop8): no journal found
[  361.130134][T19941] EXT4-fs (loop8): can't get journal size
[  361.133558][T19941] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended
[  361.138722][T19941] EXT4-fs (loop8): failed to initialize system zone (-22)
[  361.141293][T19941] EXT4-fs (loop8): mount failed
[  361.184878][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  361.217507][T19948] loop8: detected capacity change from 0 to 2048
[  361.229921][T19951] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  361.253272][T19951] NILFS (loop8): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  361.258460][T19951] NILFS error (device loop8): nilfs_bmap_propagate: broken bmap (inode number=4)
[  361.262169][T19951] Remounting filesystem read-only
[  361.321239][T19953] overlayfs: failed to clone lowerpath
[  361.511707][T17037] NILFS (loop8): disposed unprocessed dirty file(s) when stopping log writer
[  361.654992][T19958] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5884'.
[  361.661153][T19956] loop8: detected capacity change from 0 to 32768
[  361.666021][T19956] bcachefs (/dev/loop8): error validating superblock: Invalid option metadata_replicas_required: too small (min 1)
[  361.670207][T19956] bcachefs: bch2_fs_get_tree() error: ERANGE_option_too_small
[  361.787139][T19966] loop8: detected capacity change from 0 to 4096
[  361.798954][T19966] ntfs3(loop8): Mark volume as dirty due to NTFS errors
[  361.806000][T19966] ntfs3(loop8): Failed to load $Extend (-22).
[  361.808046][T19966] ntfs3(loop8): Failed to initialize $Extend.
[  362.224874][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  362.469272][T16404] Bluetooth: hci1: unexpected event for opcode 0x0c25
[  362.512769][T20001] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  362.521879][T20001] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  362.827770][T20012] netlink: 'syz.8.5910': attribute type 3 has an invalid length.
[  362.830319][T20012] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5910'.
[  362.938731][T20023] netlink: 'syz.8.5915': attribute type 1 has an invalid length.
[  362.941314][T20023] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5915'.
[  362.997703][T20027] loop8: detected capacity change from 0 to 4096
[  363.007887][T20028] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  363.264925][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  363.475331][T11540] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  363.640190][T11540] usb 9-1: Using ep0 maxpacket: 8
[  363.660994][T11540] usb 9-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  363.663930][T11540] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  363.694035][T11540] usb 9-1: Product: syz
[  363.696692][T11540] usb 9-1: Manufacturer: syz
[  363.698659][T11540] usb 9-1: SerialNumber: syz
[  363.769903][T11540] usb 9-1: config 0 descriptor??
[  363.846063][T11540] gspca_main: se401-2.14.0 probing 047d:5003
[  364.244891][T11540] gspca_se401: ExtraFeatures: 79
[  364.246921][T11540] gspca_se401: Frame size: 0x0 1/16th janggu
[  364.304908][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  364.447097][T11540] input: se401 as /devices/platform/dummy_hcd.8/usb9/9-1/input/input13
[  364.467140][T11540] usb 9-1: USB disconnect, device number 12
[  365.181826][T20218] loop8: detected capacity change from 0 to 32768
[  365.206065][T20218] bcachefs (loop8): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow
[  365.206079][T20218]   allowing incompatible features above 0.0: (unknown version)
[  365.206085][T20218]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  365.221268][T20218] bcachefs (loop8): Using encoding defined by superblock: utf8-12.1.0
[  365.223955][T20218] bcachefs (loop8): initializing new filesystem
[  365.230298][T20218] bcachefs (loop8): going read-write
[  365.233779][T20218] bcachefs (loop8): marking superblocks
[  365.265848][T20218] bcachefs (loop8): initializing freespace
[  365.270756][T20218] bcachefs (loop8): done initializing freespace
[  365.275036][T20218] bcachefs (loop8): reading snapshots table
[  365.277102][T20218] bcachefs (loop8): reading snapshots done
[  365.287007][T20218] bcachefs (loop8): done starting filesystem
[  365.321846][T20218] bcachefs (loop8): shutting down
[  365.323575][T20218] bcachefs (loop8): going read-only
[  365.325515][T20218] bcachefs (loop8): finished waiting for writes to stop
[  365.328047][T20218] bcachefs (loop8): flushing journal and stopping allocators, journal seq 4
[  365.345364][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  365.357326][T20218] bcachefs (loop8): flushing journal and stopping allocators complete, journal seq 6
[  365.360864][T20218] bcachefs (loop8): clean shutdown complete, journal seq 7
[  365.363529][T20218] bcachefs (loop8): marking filesystem clean
[  365.374043][T20218] bcachefs (loop8): shutdown complete
[  365.547274][   T33] audit: type=1326 audit(2000000091.054:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20238 comm="syz.3.5955" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0a38ebe9 code=0x7ffc0000
[  365.556199][   T33] audit: type=1326 audit(2000000091.054:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20238 comm="syz.3.5955" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0a38ebe9 code=0x7ffc0000
[  365.571223][   T33] audit: type=1326 audit(2000000091.074:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20238 comm="syz.3.5955" exe="/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f2f0a38ebe9 code=0x7ffc0000
[  365.583816][   T33] audit: type=1326 audit(2000000091.074:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20238 comm="syz.3.5955" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0a38ebe9 code=0x7ffc0000
[  365.591057][   T33] audit: type=1326 audit(2000000091.074:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20238 comm="syz.3.5955" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0a38ebe9 code=0x7ffc0000
[  365.641720][T20251] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  366.384850][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  366.457761][T20285] loop8: detected capacity change from 0 to 512
[  366.461483][T20285] EXT4-fs (loop8): revision level too high, forcing read-only mode
[  366.464290][T20285] EXT4-fs (loop8): orphan cleanup on readonly fs
[  366.467419][T20285] EXT4-fs warning (device loop8): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  366.472144][T20285] EXT4-fs (loop8): Cannot turn on quotas: error -22
[  366.474445][T20285] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #16: comm syz.8.5978: iget: immutable or append flags not allowed on symlinks
[  366.480137][T20285] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.5978: couldn't read orphan inode 16 (err -117)
[  366.484661][T20285] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  366.499138][T17037] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  367.073379][T20314] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5989'.
[  367.078082][T20314] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5989'.
[  367.163944][T20325] openvswitch: netlink: IPv4 tun info is not correct
[  367.231954][T20333] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  367.243737][T20333] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  367.424933][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  367.566097][T20345] loop8: detected capacity change from 0 to 32768
[  367.568706][T20345] btrfs: Deprecated parameter 'usebackuproot'
[  367.570761][T20345] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  367.574136][T20345] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.6004 (20345)
[  367.579795][T20345] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  367.583137][T20345] BTRFS info (device loop8): using crc32c (crc32c-lib) checksum algorithm
[  367.586057][T20345] BTRFS info (device loop8): disk space caching is enabled
[  367.588523][T20345] BTRFS warning (device loop8): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  367.618771][T17037] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  367.752830][T20366] ceph: No source
[  367.911580][T20381] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6014'.
[  367.914672][T20381] netlink: 'syz.3.6014': attribute type 7 has an invalid length.
[  367.917403][T20381] netlink: 'syz.3.6014': attribute type 8 has an invalid length.
[  367.920070][T20381] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6014'.
[  367.926842][T20381] gretap0: entered promiscuous mode
[  367.929199][T20381] batadv_slave_1: entered promiscuous mode
[  367.931615][T20381] erspan0: entered promiscuous mode
[  368.082691][T20393] netlink: 'syz.3.6020': attribute type 1 has an invalid length.
[  368.088662][T20393] netlink: 'syz.3.6020': attribute type 2 has an invalid length.
[  368.191331][T20403] fuse: Bad value for 'fd'
[  368.294573][T20411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6028'.
[  368.464938][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  369.504852][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  369.732656][T20445] process '/newroot/1794/file0' started with executable stack
[  369.835451][T20459] lo: left allmulticast mode
[  369.838139][T20459] tunl0: left allmulticast mode
[  369.841832][T20459] gretap0: left allmulticast mode
[  369.847746][T20459] ip_vti0: left allmulticast mode
[  369.849920][T20459] ip6_vti0: left allmulticast mode
[  369.852336][T20459] sit0: left allmulticast mode
[  369.858389][T20459] ip6tnl0: left allmulticast mode
[  369.860714][T20459] ip6gre0: left allmulticast mode
[  369.863060][T20459] syz_tun: left allmulticast mode
[  369.866955][T20459] ip6gretap0: left allmulticast mode
[  369.871277][T20459] vcan0: left allmulticast mode
[  369.873352][T20459] bond0: left allmulticast mode
[  369.873534][T16430] bond0: (slave bond_slave_0): interface is now down
[  369.876182][T20459] 8021q: adding VLAN 0 to HW filter on device bond0
[  369.878847][T16430] bond0: (slave bond_slave_1): interface is now down
[  369.882795][T20459] team0: left allmulticast mode
[  369.884417][T20459] mac80211_hwsim hwsim15 wlan1: left allmulticast mode
[  369.887341][T20459] 8021q: adding VLAN 0 to HW filter on device team0
[  369.889985][T20459] nlmon0: left allmulticast mode
[  369.892374][T20459] caif0: left allmulticast mode
[  369.894101][T20459] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  369.907822][ T5872] bond0: (slave bond_slave_0): interface is now down
[  369.910116][ T5872] bond0: (slave bond_slave_1): interface is now down
[  369.918349][ T5872] bond0: now running without any active interface!
[  370.544839][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  371.160949][T20518] loop8: detected capacity change from 0 to 32768
[  371.169321][T20518] JBD2: Ignoring recovery information on journal
[  371.191699][T20518] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  371.238911][T17037] ocfs2: Unmounting device (7,8) on (node local)
[  371.327936][T20529] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  371.330317][T20529] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  371.546242][T20537] loop8: detected capacity change from 0 to 32768
[  371.549164][T20537] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.6086 (20537)
[  371.584821][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  371.603978][T20537] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  371.608499][T20537] BTRFS info (device loop8): using sha256 (sha256-lib) checksum algorithm
[  371.611357][T20537] BTRFS info (device loop8): disk space caching is enabled
[  371.613788][T20537] BTRFS warning (device loop8): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  371.634231][T20537] BTRFS info (device loop8): rebuilding free space tree
[  371.644910][T20537] BTRFS info (device loop8): disabling free space tree
[  371.647220][T20537] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  371.650460][T20537] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  371.713852][T20563] overlayfs: failed to clone upperpath
[  371.911102][T17037] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  371.916307][T19083] BTRFS info (device loop8): qgroup scan completed (inconsistency flag cleared)
[  372.294094][T20581] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6099'.
[  372.321001][T20579] loop8: detected capacity change from 0 to 32768
[  372.324265][T20579] (syz.8.6098,20579,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  372.328797][T20579] (syz.8.6098,20579,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  372.348675][T20579] (syz.8.6098,20579,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[  372.354038][T20579] JBD2: Ignoring recovery information on journal
[  372.387624][T20579] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  372.413475][T20579] (syz.8.6098,20579,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[  372.427046][T20579] (syz.8.6098,20579,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC.
[  372.431576][T20579] (syz.8.6098,20579,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae
[  372.435731][T20579] (syz.8.6098,20579,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  372.438521][T20579] (syz.8.6098,20579,0):ocfs2_quota_read:201 ERROR: status = -5
[  372.441027][T20579] Quota error (device loop8): find_tree_dqentry: Can't read quota tree block 5
[  372.443925][T20579] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0
[  372.448972][T20579] (syz.8.6098,20579,0):ocfs2_acquire_dquot:890 ERROR: status = -5
[  372.451603][T20579] (syz.8.6098,20579,0):ocfs2_symlink:1894 ERROR: status = -5
[  372.453966][T20579] (syz.8.6098,20579,0):ocfs2_symlink:2080 ERROR: status = -5
[  372.471601][T20593] ptrace attach of "/syz-executor exec"[11447] was attempted by "\x22"[20593]
[  372.538202][T17037] ocfs2: Unmounting device (7,8) on (node local)
[  372.624825][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  372.894208][T20604] 9pnet_fd: Insufficient options for proto=fd
[  372.924205][T20606] loop8: detected capacity change from 0 to 1024
[  372.938992][T20606] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  372.942984][T20606] ext4 filesystem being mounted at /391/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  372.957089][T20606] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  372.962341][T20606] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 30 with max blocks 1 with error 28
[  372.968486][T20606] EXT4-fs (loop8): This should not happen!! Data will be lost
[  372.968486][T20606] 
[  372.971724][T20606] EXT4-fs (loop8): Total free blocks count 0
[  372.973816][T20606] EXT4-fs (loop8): Free/Dirty block details
[  372.975992][T20606] EXT4-fs (loop8): free_blocks=4293918720
[  372.977817][T20606] EXT4-fs (loop8): dirty_blocks=16
[  372.979490][T20606] EXT4-fs (loop8): Block reservation details
[  372.981452][T20606] EXT4-fs (loop8): i_reserved_data_blocks=1
[  372.984288][T20606] EXT4-fs error (device loop8): ext4_map_blocks:814: inode #15: comm syz.8.6108: lblock 0 mapped to illegal pblock 0 (length 1)
[  372.993952][T20606] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  373.664859][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  374.319908][T20668] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  374.714851][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  375.282744][T20745] netlink: 277 bytes leftover after parsing attributes in process `syz.3.6168'.
[  375.568582][T20770] overlayfs: failed to clone upperpath
[  375.572371][T20770] overlayfs: failed to clone upperpath
[  375.633107][T20776] netlink: 'syz.3.6183': attribute type 1 has an invalid length.
[  375.729436][T20788] netlink: 212264 bytes leftover after parsing attributes in process `syz.3.6189'.
[  375.744880][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  376.261343][T20802] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6195'.
[  376.794847][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  377.022933][T20838] netlink: 'syz.5.6212': attribute type 3 has an invalid length.
[  377.834855][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  378.077905][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  378.080202][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  378.722822][T20908] loop8: detected capacity change from 0 to 128
[  378.864836][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  379.229291][T20927] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6253'.
[  379.304285][T20939] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6258'.
[  379.328584][T20941] bridge0: entered promiscuous mode
[  379.330769][T20941] vlan2: entered promiscuous mode
[  379.361445][T20945] netlink: 'syz.3.6262': attribute type 1 has an invalid length.
[  379.521287][T20967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6273'.
[  379.525810][T20967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6273'.
[  379.904825][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  380.294180][T20996] netlink: 'syz.3.6286': attribute type 1 has an invalid length.
[  380.944839][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  381.214855][ T5880] usb 9-1: new full-speed USB device number 13 using dummy_hcd
[  381.377242][ T5880] usb 9-1: config 7 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 55911, setting to 64
[  381.382000][ T5880] usb 9-1: config 7 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  381.386375][ T5880] usb 9-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  381.389434][ T5880] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  381.393970][T21036] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  381.603125][T11540] usb 9-1: USB disconnect, device number 13
[  381.859681][T21061] pim6reg: entered allmulticast mode
[  381.984867][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  382.705175][T21089] loop8: detected capacity change from 0 to 32768
[  382.710142][T21089] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.6326 (21089)
[  382.718302][T21089] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  382.721497][T21096] sctp: [Deprecated]: syz.5.6330 (pid 21096) Use of struct sctp_assoc_value in delayed_ack socket option.
[  382.721497][T21096] Use struct sctp_sack_info instead
[  382.722394][T21089] BTRFS info (device loop8): using crc32c (crc32c-lib) checksum algorithm
[  382.731220][T21089] BTRFS info (device loop8): using free-space-tree
[  382.761931][T17037] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  382.931855][T21119] loop8: detected capacity change from 0 to 164
[  383.024822][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  383.034580][T21131] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6340'.
[  384.064824][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  384.275907][T21186] ptrace attach of "/syz-executor exec"[7997] was attempted by "/syz-executor exec"[21186]
[  384.321378][T21188] loop8: detected capacity change from 0 to 256
[  384.328353][T21188] exfat: Deprecated parameter 'utf8'
[  384.359824][T21188] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  384.458754][T21194] netlink: 'syz.8.6366': attribute type 6 has an invalid length.
[  384.732860][T21220] netlink: 'syz.5.6379': attribute type 20 has an invalid length.
[  384.745542][  T975] hid-generic 0005:0C45:1010.000A: item fetching failed at offset 0/1
[  384.750399][  T975] hid-generic 0005:0C45:1010.000A: probe with driver hid-generic failed with error -22
[  385.104919][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  385.196990][T21253] loop8: detected capacity change from 0 to 1024
[  386.144986][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  386.257369][T21296] loop8: detected capacity change from 0 to 8192
[  386.267264][   T33] audit: type=1800 audit(2000000112.773:289): pid=21296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.6412" name="file2" dev="loop8" ino=1048741 res=0 errno=0
[  386.271668][T21296] syz.8.6412: attempt to access beyond end of device
[  386.271668][T21296] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  386.278738][T21296] Buffer I/O error on dev loop8, logical block 57847, async page read
[  386.284716][T21296] syz.8.6412: attempt to access beyond end of device
[  386.284716][T21296] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  386.290550][T21296] Buffer I/O error on dev loop8, logical block 57847, async page read
[  386.295535][T21296] syz.8.6412: attempt to access beyond end of device
[  386.295535][T21296] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  386.300802][T21296] Buffer I/O error on dev loop8, logical block 57847, async page read
[  386.303612][T21296] syz.8.6412: attempt to access beyond end of device
[  386.303612][T21296] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  386.309421][T21296] Buffer I/O error on dev loop8, logical block 57847, async page read
[  386.312037][T21296] syz.8.6412: attempt to access beyond end of device
[  386.312037][T21296] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  386.316477][T21296] Buffer I/O error on dev loop8, logical block 57847, async page read
[  386.319733][T21296] syz.8.6412: attempt to access beyond end of device
[  386.319733][T21296] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  386.323876][T21296] Buffer I/O error on dev loop8, logical block 57847, async page read
[  386.327558][T21296] syz.8.6412: attempt to access beyond end of device
[  386.327558][T21296] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  386.331901][T21296] Buffer I/O error on dev loop8, logical block 57847, async page read
[  386.331954][T21296] syz.8.6412: attempt to access beyond end of device
[  386.331954][T21296] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  386.339569][T21296] Buffer I/O error on dev loop8, logical block 57847, async page read
[  386.342357][T21296] syz.8.6412: attempt to access beyond end of device
[  386.342357][T21296] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  386.347639][T21296] Buffer I/O error on dev loop8, logical block 57847, async page read
[  386.350388][T21296] syz.8.6412: attempt to access beyond end of device
[  386.350388][T21296] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  386.355222][T21296] Buffer I/O error on dev loop8, logical block 57847, async page read
[  387.034374][T21324] netlink: 'syz.3.6426': attribute type 1 has an invalid length.
[  387.037077][T21324] netlink: 'syz.3.6426': attribute type 2 has an invalid length.
[  387.040574][T21324] netlink: 'syz.3.6426': attribute type 1 has an invalid length.
[  387.043261][T21324] netlink: 'syz.3.6426': attribute type 2 has an invalid length.
[  387.094703][T21328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6429'.
[  387.194877][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  387.932805][T21348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6437'.
[  387.939935][T21348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6437'.
[  387.985029][T16404] Bluetooth: hci1: command 0x0406 tx timeout
[  388.023809][T21362] tipc: Failed to remove unknown binding: 66,1,1/771766885:343690637/343690639
[  388.061004][T21368] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  388.164605][T21380] overlayfs: failed to clone upperpath
[  388.217162][T21384] 9pnet_fd: Insufficient options for proto=fd
[  388.224869][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  388.266381][T21390] netlink: 'syz.3.6458': attribute type 8 has an invalid length.
[  388.324740][ T5880] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[  388.738256][ T5880] usb 9-1: Using ep0 maxpacket: 16
[  388.741613][ T5880] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  388.745755][ T5880] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  388.748921][ T5880] usb 9-1: config 0 interface 0 has no altsetting 0
[  388.751104][ T5880] usb 9-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00
[  388.754062][ T5880] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  388.758223][ T5880] usb 9-1: config 0 descriptor??
[  389.163953][ T5880] apple 0003:05AC:0247.000B: unexpected long global item
[  389.166793][ T5880] apple 0003:05AC:0247.000B: parse failed
[  389.168782][ T5880] apple 0003:05AC:0247.000B: probe with driver apple failed with error -22
[  389.264830][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  389.364086][ T5880] usb 9-1: USB disconnect, device number 14
[  389.580847][ T5872] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  389.590506][ T5872] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  389.593959][ T5872] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  389.599703][ T5872] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  390.039227][T21463] loop8: detected capacity change from 0 to 4096
[  390.045804][T21463] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512).
[  390.063693][T21463] ntfs3(loop8): Mark volume as dirty due to NTFS errors
[  390.075530][T21463] ntfs3(loop8): ino=1e, mi_enum_attr
[  390.079583][T21463] ntfs3(loop8): ino=1e, mi_enum_attr
[  390.304819][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  391.138087][T21487] loop8: detected capacity change from 0 to 512
[  391.144072][T21487] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended
[  391.149320][T21487] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem
[  391.153896][T21487] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended
[  391.158285][T21487] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  391.161566][T21487] System zones: 0-2, 18-18, 34-35
[  391.168027][T21487] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  391.183810][T21493] netlink: 'syz.3.6505': attribute type 1 has an invalid length.
[  391.187276][T21493] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6505'.
[  391.251720][T21499] netlink: 'syz.3.6508': attribute type 10 has an invalid length.
[  391.254427][T21499] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6508'.
[  391.266047][T21499] batman_adv: batadv0: Adding interface: virt_wifi0
[  391.268430][T21499] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  391.276709][T21499] batman_adv: batadv0: Interface activated: virt_wifi0
[  391.344906][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  391.409521][T21505] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.6503: bg 0: block 353: padding at end of block bitmap is not set
[  391.960741][   T33] audit: type=1326 audit(2000000118.463:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21526 comm="syz.5.6520" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89bb8ebe9 code=0x7ffc0000
[  391.968007][   T33] audit: type=1326 audit(2000000118.463:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21526 comm="syz.5.6520" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89bb8ebe9 code=0x7ffc0000
[  391.975768][   T33] audit: type=1326 audit(2000000118.463:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21526 comm="syz.5.6520" exe="/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fd89bb8ebe9 code=0x7ffc0000
[  391.983423][   T33] audit: type=1326 audit(2000000118.463:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21526 comm="syz.5.6520" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89bb8ebe9 code=0x7ffc0000
[  392.003642][   T33] audit: type=1326 audit(2000000118.463:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21526 comm="syz.5.6520" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89bb8ebe9 code=0x7ffc0000
[  392.012127][   T33] audit: type=1326 audit(2000000118.463:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21526 comm="syz.5.6520" exe="/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fd89bb8ebe9 code=0x7ffc0000
[  392.019346][   T33] audit: type=1326 audit(2000000118.463:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21526 comm="syz.5.6520" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89bb8ebe9 code=0x7ffc0000
[  392.027265][   T33] audit: type=1326 audit(2000000118.463:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21526 comm="syz.5.6520" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89bb8ebe9 code=0x7ffc0000
[  392.035255][   T33] audit: type=1326 audit(2000000118.463:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21526 comm="syz.5.6520" exe="/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fd89bb8ebe9 code=0x7ffc0000
[  392.062225][   T33] audit: type=1326 audit(2000000118.463:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21526 comm="syz.5.6520" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89bb8ebe9 code=0x7ffc0000
[  392.078432][T17037] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  392.384848][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  393.425407][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  394.464825][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  394.884721][T21588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6547'.
[  394.908719][T21590] bond0: option mode: unable to set because the bond device has slaves
[  394.966317][T21598] veth1_to_bond: entered promiscuous mode
[  394.968699][T21598] macsec3: entered allmulticast mode
[  394.970555][T21598] veth1_to_bond: entered allmulticast mode
[  394.974083][T21598] veth1_to_bond: left allmulticast mode
[  394.976711][T21598] veth1_to_bond: left promiscuous mode
[  395.372069][T21614] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6558'.
[  395.514903][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  395.676949][T21630] loop8: detected capacity change from 0 to 736
[  395.700649][T21630] rock: directory entry would overflow storage
[  395.702765][T21630] rock: sig=0x3b10, size=4, remaining=3
[  395.758066][T21638] loop8: detected capacity change from 0 to 1764
[  395.812149][T21640] loop8: detected capacity change from 0 to 128
[  395.818332][T21640] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  395.823081][T21640] ext4 filesystem being mounted at /522/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  395.839851][T21640] syz.8.6571 (pid 21640) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  395.893769][T21640] fscrypt: Adiantum using implementation "adiantum(xchacha12-generic,aes-fixed-time,nhpoly1305-sse2)"
[  395.916375][T17037] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  396.055871][T21671] loop8: detected capacity change from 0 to 4096
[  396.060661][T21671] NILFS (loop8): invalid segment: Checksum error in segment payload
[  396.063157][T21671] NILFS (loop8): trying rollback from an earlier position
[  396.070963][T21671] NILFS (loop8): recovery complete
[  396.106549][T21674] loop8: detected capacity change from 0 to 512
[  396.109404][T21674] EXT4-fs (loop8): Test dummy encryption mode enabled
[  396.111694][T21674] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  396.116660][T21674] EXT4-fs (loop8): 1 truncate cleaned up
[  396.119193][T21674] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  396.140541][T17037] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  396.278452][T21689] team0: entered allmulticast mode
[  396.280203][T21689] C: entered allmulticast mode
[  396.281761][T21689] team_slave_1: entered allmulticast mode
[  396.283789][T21689] team0: left allmulticast mode
[  396.286409][T21689] C: left allmulticast mode
[  396.287856][T21689] team_slave_1: left allmulticast mode
[  396.411940][T21693] loop8: detected capacity change from 0 to 256
[  396.418472][T21693] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d)
[  396.554825][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  396.603783][T21712] netlink: 240 bytes leftover after parsing attributes in process `syz.8.6603'.
[  396.642533][T21718] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6606'.
[  396.738509][T16404] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  396.742150][T16404] CPU: 0 UID: 0 PID: 16404 Comm: kworker/u11:3 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  396.742164][T16404] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  396.742169][T16404] Workqueue: hci2 hci_rx_work
[  396.742181][T16404] Call Trace:
[  396.742184][T16404]  <TASK>
[  396.742188][T16404]  dump_stack_lvl+0x189/0x250
[  396.742207][T16404]  ? __pfx_dump_stack_lvl+0x10/0x10
[  396.742218][T16404]  ? __pfx__printk+0x10/0x10
[  396.742231][T16404]  ? kernfs_path_from_node+0x250/0x290
[  396.742240][T16404]  ? kernfs_path_from_node+0x2f/0x290
[  396.742250][T16404]  sysfs_create_dir_ns+0x259/0x280
[  396.742259][T16404]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  396.742268][T16404]  ? do_raw_spin_unlock+0x4d/0x240
[  396.742279][T16404]  kobject_add_internal+0x59f/0xb40
[  396.742293][T16404]  kobject_add+0x155/0x220
[  396.742304][T16404]  ? __pfx_kobject_add+0x10/0x10
[  396.742314][T16404]  ? _raw_spin_unlock+0x28/0x50
[  396.742323][T16404]  ? get_device_parent+0x366/0x3a0
[  396.742336][T16404]  device_add+0x408/0xb50
[  396.742348][T16404]  hci_conn_add_sysfs+0xd5/0x1e0
[  396.742360][T16404]  le_conn_complete_evt+0xc3a/0x1220
[  396.742373][T16404]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  396.742382][T16404]  ? __mutex_unlock_slowpath+0x1a1/0x760
[  396.742394][T16404]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  396.742402][T16404]  ? skb_pull_data+0xfb/0x200
[  396.742411][T16404]  hci_le_enh_conn_complete_evt+0x189/0x470
[  396.742420][T16404]  ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10
[  396.742456][T16404]  hci_event_packet+0x78f/0x1200
[  396.742469][T16404]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  396.742479][T16404]  ? __pfx_hci_event_packet+0x10/0x10
[  396.742491][T16404]  ? kcov_remote_start+0x4d3/0x7f0
[  396.742502][T16404]  ? lockdep_hardirqs_on+0x90/0x150
[  396.742511][T16404]  ? hci_send_to_monitor+0xe2/0x570
[  396.742523][T16404]  hci_rx_work+0x46a/0xe80
[  396.742533][T16404]  ? process_scheduled_works+0x9ef/0x17b0
[  396.742542][T16404]  process_scheduled_works+0xae1/0x17b0
[  396.742561][T16404]  ? __pfx_process_scheduled_works+0x10/0x10
[  396.742580][T16404]  worker_thread+0x8a0/0xda0
[  396.742589][T16404]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  396.742600][T16404]  ? __kthread_parkme+0x7b/0x200
[  396.742611][T16404]  kthread+0x711/0x8a0
[  396.742621][T16404]  ? __pfx_worker_thread+0x10/0x10
[  396.742628][T16404]  ? __pfx_kthread+0x10/0x10
[  396.742637][T16404]  ? _raw_spin_unlock_irq+0x23/0x50
[  396.742644][T16404]  ? lockdep_hardirqs_on+0x9c/0x150
[  396.742651][T16404]  ? __pfx_kthread+0x10/0x10
[  396.742660][T16404]  ret_from_fork+0x3fc/0x770
[  396.742669][T16404]  ? __pfx_ret_from_fork+0x10/0x10
[  396.742678][T16404]  ? __switch_to_asm+0x39/0x70
[  396.742687][T16404]  ? __switch_to_asm+0x33/0x70
[  396.742695][T16404]  ? __pfx_kthread+0x10/0x10
[  396.742704][T16404]  ret_from_fork_asm+0x1a/0x30
[  396.742719][T16404]  </TASK>
[  396.742731][T16404] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  396.757648][T21732] vcan0: tx drop: invalid sa for name 0xfffffffffffffffd
[  396.759177][T16404] Bluetooth: hci2: failed to register connection device
[  397.479611][T21756] netlink: 'syz.5.6626': attribute type 2 has an invalid length.
[  397.487266][T21756] netlink: 'syz.5.6626': attribute type 1 has an invalid length.
[  397.570675][T21752] loop8: detected capacity change from 0 to 32768
[  397.598091][T21752] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  397.628222][T21752] XFS (loop8): Ending clean mount
[  397.637697][T21752] XFS (loop8): Quotacheck needed: Please wait.
[  397.671329][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  397.672380][T21752] XFS (loop8): Quotacheck: Done.
[  397.694031][T17037] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  397.745448][T21786] overlayfs: failed to resolve './file1': -2
[  397.893037][T21807] netlink: 'syz.3.6644': attribute type 21 has an invalid length.
[  397.895566][T21807] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6644'.
[  397.898748][T21807] netlink: 'syz.3.6644': attribute type 4 has an invalid length.
[  397.902272][T21807] netlink: 'syz.3.6644': attribute type 5 has an invalid length.
[  397.904916][T21807] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6644'.
[  397.956670][T21812] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6649'.
[  397.983690][T21814] netlink: 'syz.3.6650': attribute type 27 has an invalid length.
[  398.130551][T21837] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6660'.
[  398.133440][T21837] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  398.798130][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  398.899574][T21891] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6686'.
[  398.902490][T21891] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6686'.
[  399.815540][T21954] netlink: 'syz.5.6713': attribute type 3 has an invalid length.
[  399.887008][T21959] bridge0: port 1(bridge_slave_0) entered disabled state
[  399.890218][T21959] bridge0: port 2(bridge_slave_1) entered disabled state
[  399.907284][T21959] gretap1: left allmulticast mode
[  399.914064][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  400.330125][T21985] __nla_validate_parse: 5 callbacks suppressed
[  400.330135][T21985] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6726'.
[  400.335132][T21985] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6726'.
[  400.426548][T21998] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6732'.
[  401.040813][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  401.239428][T22016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6741'.
[  401.242393][T22016] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  401.269750][T22016] batman_adv: batadv0: Removing interface: batadv_slave_1
[  401.272807][T22016] batadv_slave_1 (unregistering): left promiscuous mode
[  401.293732][T22014] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  401.474742][T22028] loop8: detected capacity change from 0 to 32768
[  401.503069][T22028] bcachefs (loop8): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow
[  401.503080][T22028]   allowing incompatible features above 0.0: (unknown version)
[  401.503085][T22028]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  401.726777][T22028] bcachefs (loop8): Using encoding defined by superblock: utf8-12.1.0
[  401.729501][T22028] bcachefs (loop8): initializing new filesystem
[  401.738047][T22028] bcachefs (loop8): going read-write
[  401.751738][T22028] bcachefs (loop8): marking superblocks
[  401.771190][T22028] bcachefs (loop8): initializing freespace
[  401.777313][T22028] bcachefs (loop8): done initializing freespace
[  401.787536][T22028] bcachefs (loop8): reading snapshots table
[  401.789803][T22028] bcachefs (loop8): reading snapshots done
[  401.814845][T22028] bcachefs (loop8):  loop8: Superblock write was silently dropped! (seq 0 expected 42)
[  401.818304][T22028] bcachefs (loop8): done starting filesystem
[  401.947121][T17037] bcachefs (loop8): shutting down
[  401.949047][T17037] bcachefs (loop8): going read-only
[  401.950919][T17037] bcachefs (loop8): finished waiting for writes to stop
[  401.953739][T17037] bcachefs (loop8): flushing journal and stopping allocators, journal seq 2
[  401.984017][T17037] bcachefs (loop8): flushing journal and stopping allocators complete, journal seq 3
[  401.990770][T17037] bcachefs (loop8): clean shutdown complete, journal seq 4
[  401.998871][T17037] bcachefs (loop8): marking filesystem clean
[  402.028271][T17037] bcachefs (loop8): shutdown complete
[  402.178490][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  403.198769][T22071] netlink: 'syz.8.6760': attribute type 1 has an invalid length.
[  403.201336][T22071] netlink: 244 bytes leftover after parsing attributes in process `syz.8.6760'.
[  403.227490][T22073] loop8: detected capacity change from 0 to 256
[  403.230906][T22073] exfat: Deprecated parameter 'utf8'
[  403.233013][T22073] exfat: Unexpected value for 'utf8'
[  403.294338][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  403.497489][T22099] loop8: detected capacity change from 0 to 256
[  403.503145][T22099] FAT-fs (loop8): Directory bread(block 1285) failed
[  403.507231][T22099] FAT-fs (loop8): Directory bread(block 1285) failed
[  403.510148][T22099] FAT-fs (loop8): FAT read failed (blocknr 1281)
[  403.743984][T22115] loop8: detected capacity change from 0 to 2048
[  403.766884][T22115] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  403.771655][T22115] ext4 filesystem being mounted at /613/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  403.786355][T22115] EXT4-fs error (device loop8): ext4_free_inode:354: comm syz.8.6781: bit already cleared for inode 15
[  403.802167][T17037] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  404.244151][T22139] binder: 22138:22139 ioctl c0306201 200000000640 returned -22
[  404.349512][T22145] netlink: 148 bytes leftover after parsing attributes in process `syz.8.6793'.
[  404.391683][T22149] IPv6: addrconf: prefix option has invalid lifetime
[  404.398460][T22149] IPv6: addrconf: prefix option has invalid lifetime
[  404.421058][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  404.522857][T22161] loop8: detected capacity change from 0 to 512
[  404.525953][T22161] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  404.532096][T22161] EXT4-fs (loop8): 1 truncate cleaned up
[  404.535923][T22161] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  404.597478][T20909] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  404.599727][T22166] overlayfs: conflicting options: nfs_export=on,index=off
[  404.798120][T22175] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6808'.
[  404.916305][ T5872] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.989069][ T5872] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  405.064714][ T5872] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  405.089248][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  405.099284][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  405.103223][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  405.132741][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  405.133254][ T5872] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  405.138655][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  405.253307][T22202] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6820'.
[  405.291123][ T5872] bridge_slave_1: left allmulticast mode
[  405.292965][ T5872] bridge_slave_1: left promiscuous mode
[  405.294791][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state
[  405.302640][ T5872] bridge_slave_0: left allmulticast mode
[  405.304462][ T5872] bridge_slave_0: left promiscuous mode
[  405.306287][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state
[  405.375883][ T5872] bond1 (unregistering): (slave ip6erspan0): Releasing active interface
[  405.558640][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  405.649700][ T5872] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  405.655505][ T5872] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  405.660262][ T5872] bond0 (unregistering): Released all slaves
[  405.798271][ T5872] bond1 (unregistering): Released all slaves
[  405.813746][T22190] chnl_net:caif_netlink_parms(): no params data found
[  405.871100][ T5872] tipc: Left network mode
[  405.925294][T22190] bridge0: port 1(bridge_slave_0) entered blocking state
[  405.929944][T22190] bridge0: port 1(bridge_slave_0) entered disabled state
[  405.932448][T22190] bridge_slave_0: entered allmulticast mode
[  405.935259][T22190] bridge_slave_0: entered promiscuous mode
[  405.941229][T22190] bridge0: port 2(bridge_slave_1) entered blocking state
[  405.943948][T22190] bridge0: port 2(bridge_slave_1) entered disabled state
[  405.946514][T22190] bridge_slave_1: entered allmulticast mode
[  405.949715][T22190] bridge_slave_1: entered promiscuous mode
[  405.990987][T22190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  405.995924][T22190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  406.021963][ T5872] hsr_slave_0: left promiscuous mode
[  406.024182][ T5872] hsr_slave_1: left promiscuous mode
[  406.026697][ T5872] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  406.029436][ T5872] batman_adv: batadv0: Removing interface: batadv_slave_0
[  406.032141][ T5872] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  406.034615][ T5872] batman_adv: batadv0: Removing interface: batadv_slave_1
[  406.046432][ T5872] veth1_macvtap: left promiscuous mode
[  406.048299][ T5872] veth0_macvtap: left promiscuous mode
[  406.050201][ T5872] veth1_vlan: left promiscuous mode
[  406.052090][ T5872] veth0_vlan: left promiscuous mode
[  406.436875][ T5872] team0 (unregistering): Port device team_slave_1 removed
[  406.471967][ T5872] team0 (unregistering): Port device C removed
[  406.685440][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  406.930825][T22190] team0: Port device team_slave_0 added
[  406.944116][T22190] team0: Port device team_slave_1 added
[  406.975076][T22190] batman_adv: batadv0: Adding interface: batadv_slave_0
[  406.977293][T22190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  406.997796][T22190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  407.009778][T22190] batman_adv: batadv0: Adding interface: batadv_slave_1
[  407.013189][T22190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  407.032693][T22190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  407.118297][T22190] hsr_slave_0: entered promiscuous mode
[  407.121740][T22190] hsr_slave_1: entered promiscuous mode
[  407.124169][T22190] debugfs: 'hsr0' already exists in 'hsr'
[  407.126194][T22190] Cannot create hsr debugfs directory
[  407.308815][T22190] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  407.315071][T22190] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  407.320523][T22190] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  407.325082][T22190] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  407.378980][   T55] Bluetooth: hci2: command tx timeout
[  407.386474][T22190] 8021q: adding VLAN 0 to HW filter on device bond0
[  407.398505][T22190] 8021q: adding VLAN 0 to HW filter on device team0
[  407.410014][T20095] bridge0: port 1(bridge_slave_0) entered blocking state
[  407.412504][T20095] bridge0: port 1(bridge_slave_0) entered forwarding state
[  407.420248][T20095] bridge0: port 2(bridge_slave_1) entered blocking state
[  407.422690][T20095] bridge0: port 2(bridge_slave_1) entered forwarding state
[  407.529925][T22190] 8021q: adding VLAN 0 to HW filter on device batadv0
[  407.640754][T22190] veth0_vlan: entered promiscuous mode
[  407.645934][T22190] veth1_vlan: entered promiscuous mode
[  407.663480][T22190] veth0_macvtap: entered promiscuous mode
[  407.667538][T22190] veth1_macvtap: entered promiscuous mode
[  407.677927][T22190] batman_adv: batadv0: Interface activated: batadv_slave_0
[  407.687428][T22190] batman_adv: batadv0: Interface activated: batadv_slave_1
[  407.694905][ T5868] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  407.698139][ T5868] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  407.702166][ T5868] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  407.706188][ T5868] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  407.753757][T22316] "syz.3.6863" (22316) uses obsolete ecb(arc4) skcipher
[  407.794182][T20137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  407.796884][T20137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  407.807030][T20137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  407.809675][T20137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  407.812186][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  407.924090][T22329] tipc: Started in network mode
[  407.925877][T22329] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711
[  407.928916][T22329] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  408.010114][T22335] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6870'.
[  408.522974][   T33] kauditd_printk_skb: 5 callbacks suppressed
[  408.522983][   T33] audit: type=1326 audit(2000000134.112:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22348 comm="syz.3.6876" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2f0a38ebe9 code=0x0
[  408.793246][ T5872] IPVS: stop unused estimator thread 0...
[  408.928162][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  409.383206][T22195] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  409.551160][T22195] usb 10-1: config 0 has an invalid interface number: 117 but max is 0
[  409.553937][T22195] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  409.559424][T22195] usb 10-1: config 0 has no interface number 0
[  409.561571][T22195] usb 10-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  409.568510][T22195] usb 10-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  409.575654][T22195] usb 10-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  409.584499][T22195] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  409.587327][T22195] usb 10-1: Product: syz
[  409.588865][T22195] usb 10-1: Manufacturer: syz
[  409.591131][T22195] usb 10-1: SerialNumber: syz
[  409.600791][T22195] usb 10-1: config 0 descriptor??
[  409.635474][   T55] Bluetooth: hci2: command tx timeout
[  409.681180][T22397] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  409.705274][T22399] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6900'.
[  409.711213][T22399] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6900'.
[  410.015017][T22414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  410.019246][T22414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  410.025441][T22414] bond0 (unregistering): Released all slaves
[  410.065732][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  410.153655][T22419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6909'.
[  410.259543][ T5880] usb 10-1: USB disconnect, device number 2
[  410.832004][T22438] vlan2: entered allmulticast mode
[  410.833827][T22438] vlan1: entered allmulticast mode
[  410.836487][T22438] veth0_vlan: entered allmulticast mode
[  410.908165][T22444] loop9: detected capacity change from 0 to 16
[  410.915178][T22444] erofs (device loop9): mounted with root inode @ nid 36.
[  411.181631][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  411.885964][   T55] Bluetooth: hci2: command tx timeout
[  412.114463][T22507] netlink: 'syz.5.6951': attribute type 1 has an invalid length.
[  412.140927][T22509] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6952'.
[  412.143941][T22509] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6952'.
[  412.151201][T22509] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6952'.
[  412.154854][T22509] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6952'.
[  412.157764][T22509] netlink: 'syz.9.6952': attribute type 6 has an invalid length.
[  412.195744][T22516] loop9: detected capacity change from 0 to 512
[  412.201048][T22516] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  412.226787][T22516] EXT4-fs (loop9): 1 orphan inode deleted
[  412.228836][T22516] EXT4-fs (loop9): 1 truncate cleaned up
[  412.232113][T22516] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  412.255231][T22516] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  412.265308][T22516] EXT4-fs (loop9): Remounting filesystem read-only
[  412.268586][T22516] EXT4-fs (loop9): error restoring inline_data for inode -- potential data loss! (inode 12, error -30)
[  412.289669][T22190] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  412.308387][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  412.408843][T22532] loop9: detected capacity change from 0 to 8
[  412.411642][T22532] squashfs image failed sanity check
[  412.538503][T22534] loop9: detected capacity change from 0 to 32768
[  412.541287][T22534] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.6963 (22534)
[  412.663490][T22534] BTRFS info (device loop9): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  412.666975][T22534] BTRFS info (device loop9): using sha256 (sha256-lib) checksum algorithm
[  412.669849][T22534] BTRFS info (device loop9): disk space caching is enabled
[  412.672231][T22534] BTRFS warning (device loop9): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  412.705920][T22534] BTRFS info (device loop9): rebuilding free space tree
[  412.717833][T22534] BTRFS info (device loop9): disabling free space tree
[  412.720372][T22534] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  412.724769][T22534] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  412.858835][T22190] BTRFS info (device loop9): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  412.988582][T22569] netlink: 'syz.9.6971': attribute type 1 has an invalid length.
[  412.991580][T22569] netlink: 184 bytes leftover after parsing attributes in process `syz.9.6971'.
[  412.994444][T22569] netlink: 'syz.9.6971': attribute type 1 has an invalid length.
[  413.030550][T22573] netlink: 48 bytes leftover after parsing attributes in process `syz.9.6975'.
[  413.114032][T22581] netlink: 'syz.9.6979': attribute type 1 has an invalid length.
[  413.328280][   T33] audit: type=1326 audit(2000000138.552:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22574 comm="syz.5.6976" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd89bb2add9 code=0x7ffc0000
[  413.335450][   T33] audit: type=1326 audit(2000000138.552:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22574 comm="syz.5.6976" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd89bb2add9 code=0x7ffc0000
[  413.373280][   T33] audit: type=1326 audit(2000000138.552:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22574 comm="syz.5.6976" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd89bb2add9 code=0x7ffc0000
[  413.420244][   T33] audit: type=1326 audit(2000000138.552:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22574 comm="syz.5.6976" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd89bb2add9 code=0x7ffc0000
[  413.435197][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  413.451261][   T33] audit: type=1326 audit(2000000138.552:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22574 comm="syz.5.6976" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd89bb2add9 code=0x7ffc0000
[  413.497549][   T33] audit: type=1326 audit(2000000138.552:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22574 comm="syz.5.6976" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd89bb2add9 code=0x7ffc0000
[  413.506358][   T33] audit: type=1326 audit(2000000138.552:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22574 comm="syz.5.6976" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd89bb2add9 code=0x7ffc0000
[  413.506479][ T5313] libceph: connect (1)[c::]:6789 error -101
[  413.513820][   T33] audit: type=1326 audit(2000000138.552:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22574 comm="syz.5.6976" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd89bb2add9 code=0x7ffc0000
[  413.522555][ T5313] libceph: mon0 (1)[c::]:6789 connect error
[  413.525460][   T33] audit: type=1326 audit(2000000138.552:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22574 comm="syz.5.6976" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd89bb2add9 code=0x7ffc0000
[  413.805299][ T5313] libceph: connect (1)[c::]:6789 error -101
[  413.808206][ T5313] libceph: mon0 (1)[c::]:6789 connect error
[  414.133570][T22589] ceph: No mds server is up or the cluster is laggy
[  414.149586][T16404] Bluetooth: hci2: command tx timeout
[  414.339268][T22634] input: syz1 as /devices/virtual/input/input16
[  414.396684][T22639] loop9: detected capacity change from 0 to 256
[  414.572763][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  414.692721][T22661] CIFS mount error: No usable UNC path provided in device string!
[  414.692721][T22661] 
[  414.696200][T22661] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  414.807563][T22663] netlink: 'syz.5.7012': attribute type 29 has an invalid length.
[  414.823209][T22663] netlink: 'syz.5.7012': attribute type 29 has an invalid length.
[  415.565457][T22699] netlink: 200 bytes leftover after parsing attributes in process `syz.3.7028'.
[  415.688676][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  415.775628][T22195] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  415.861682][T22709] 9pnet: p9_errstr2errno: server reported unknown error @c0xffffffffffffffff
[  415.971816][T22195] usb 10-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  415.974763][T22195] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  415.979682][T22195] usb 10-1: Product: syz
[  415.984532][T22195] usb 10-1: Manufacturer: syz
[  415.986150][T22195] usb 10-1: SerialNumber: syz
[  415.992640][T22195] usb 10-1: config 0 descriptor??
[  415.999166][T22195] gspca_main: sunplus-2.14.0 probing 055f:c230
[  416.370719][T22736] netlink: 56 bytes leftover after parsing attributes in process `syz.5.7045'.
[  416.393015][T16404] Bluetooth: hci2: command 0x0405 tx timeout
[  416.445397][T22195] usb 10-1: USB disconnect, device number 3
[  416.815471][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  416.826008][T22755] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  416.960002][T22762] smc: net device bond0 applied user defined pnetid SYZ2
[  417.354290][T22786] macvtap0: entered allmulticast mode
[  417.356720][T22786] veth0_macvtap: entered allmulticast mode
[  417.942211][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  418.085014][T22813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7080'.
[  418.536518][T22822] loop9: detected capacity change from 0 to 1024
[  418.542117][T22822] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  418.560963][T22190] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  418.601132][T22828] loop9: detected capacity change from 0 to 256
[  418.609465][T22828] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x587066de, utbl_chksum : 0xe619d30d)
[  418.729726][T22843] netlink: 'syz.5.7093': attribute type 10 has an invalid length.
[  419.079813][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  419.946746][T11540] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  420.111356][T11540] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  420.116442][T11540] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  420.119618][T11540] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  420.124725][T11540] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  420.128271][T11540] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 0
[  420.136489][T11540] usb 10-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16
[  420.139852][T11540] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  420.142626][T11540] usb 10-1: Product: syz
[  420.144137][T11540] usb 10-1: Manufacturer: syz
[  420.145880][T11540] usb 10-1: SerialNumber: syz
[  420.152969][T11540] usb 10-1: config 0 descriptor??
[  420.159421][T11540] kvaser_usb 10-1:0.0: error -ENODEV: Cannot get usb endpoint(s)
[  420.195839][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  420.203181][T22909] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7123'.
[  420.206129][T22909] bond0: invalid ARP target 0.0.0.0 specified for addition
[  420.210954][T22909] bond0: option arp_ip_target: invalid value (0)
[  420.239752][T22917] overlayfs: failed to clone upperpath
[  420.262928][T22920] Option 'TXƮ' to dns_resolver key: bad/missing value
[  420.336701][T22932] netlink: 'syz.5.7134': attribute type 1 has an invalid length.
[  420.368541][T22938] netlink: 'syz.3.7137': attribute type 1 has an invalid length.
[  420.378486][T11540] usb 10-1: USB disconnect, device number 4
[  420.396243][T22942] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7139'.
[  420.399155][T22942] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7139'.
[  420.421000][T22948] sch_tbf: burst 19869 is lower than device lo mtu (65550) !
[  420.872608][T22993] netlink: 'syz.5.7163': attribute type 2 has an invalid length.
[  420.875112][T22993] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7163'.
[  420.958058][T22999] loop9: detected capacity change from 0 to 2048
[  420.962352][T22999] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  421.333396][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  422.126209][T23037] tmpfs: Bad value for 'mpol'
[  422.262875][T23046] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7187'.
[  422.333049][T23056] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7192'.
[  422.449267][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  422.757430][T23079] netlink: 2036 bytes leftover after parsing attributes in process `syz.5.7200'.
[  422.760973][T23079] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7200'.
[  422.888707][T23088] netlink: 'syz.9.7206': attribute type 4 has an invalid length.
[  422.911620][T23093] netlink: 'syz.3.7209': attribute type 10 has an invalid length.
[  422.932440][T23093] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  423.576053][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  423.974413][T23130] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7225'.
[  424.713608][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  425.159565][T23191] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  425.495215][T23212] netlink: 'syz.5.7264': attribute type 4 has an invalid length.
[  425.497859][T23212] netlink: 152 bytes leftover after parsing attributes in process `syz.5.7264'.
[  425.506550][ T5313] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  425.527665][T23214] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7265'.
[  425.821390][ T5313] usb 10-1: New USB device found, idVendor=041e, idProduct=4053, bcdDevice=e6.56
[  425.824373][ T5313] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  425.831023][ T5313] usb 10-1: config 0 descriptor??
[  425.834605][ T5313] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4053
[  425.840370][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  426.054404][ T5313] gspca_zc3xx: reg_w_i err -71
[  426.056165][ T5313] gspca_zc3xx 10-1:0.0: probe with driver gspca_zc3xx failed with error -71
[  426.060570][ T5313] usb 10-1: USB disconnect, device number 5
[  426.189232][T23232] netlink: 'syz.3.7273': attribute type 2 has an invalid length.
[  426.191822][T23232] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7273'.
[  426.194846][T23232] nbd: must specify a device to reconfigure
[  426.374928][T23242] hugetlbfs: syz.3.7278 (23242): Using mlock ulimits for SHM_HUGETLB is obsolete
[  426.663064][T23272] loop9: detected capacity change from 0 to 512
[  426.666740][T23272] EXT4-fs: Ignoring removed i_version option
[  426.668986][T23272] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  426.680215][T23272] EXT4-fs (loop9): 1 truncate cleaned up
[  426.683236][T23272] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  426.745111][T22190] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  426.775464][T23276] loop9: detected capacity change from 0 to 512
[  426.815198][T23276] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  426.823423][T23276] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  426.844973][T22190] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  426.956342][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  428.083066][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  428.377157][ T5313] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  428.538296][ T5313] usb 10-1: Using ep0 maxpacket: 16
[  428.545072][ T5313] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87
[  428.548765][ T5313] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  428.563203][ T5313] usb 10-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  428.566293][ T5313] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  428.568845][ T5313] usb 10-1: Product: syz
[  428.570246][ T5313] usb 10-1: Manufacturer: syz
[  428.571911][ T5313] usb 10-1: SerialNumber: syz
[  428.574550][ T5313] usb 10-1: config 0 descriptor??
[  428.765607][   T33] kauditd_printk_skb: 181 callbacks suppressed
[  428.765617][   T33] audit: type=1326 audit(2000000152.794:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23359 comm="syz.3.7331" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0a38ebe9 code=0x7ffc0000
[  428.777869][   T33] audit: type=1326 audit(2000000152.794:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23359 comm="syz.3.7331" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0a38ebe9 code=0x7ffc0000
[  428.784837][   T33] audit: type=1326 audit(2000000152.803:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23359 comm="syz.3.7331" exe="/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f2f0a38ebe9 code=0x7ffc0000
[  428.802059][   T33] audit: type=1326 audit(2000000152.803:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23359 comm="syz.3.7331" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0a38ebe9 code=0x7ffc0000
[  428.821426][   T33] audit: type=1326 audit(2000000152.803:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23359 comm="syz.3.7331" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0a38ebe9 code=0x7ffc0000
[  428.855742][ T5313] appledisplay 10-1:0.0: Error while getting initial brightness: -110
[  428.859479][ T5313] appledisplay 10-1:0.0: probe with driver appledisplay failed with error -110
[  429.209933][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  429.399203][ T5313] usb 10-1: USB disconnect, device number 6
[  430.156603][T23400] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7346'.
[  430.159554][T23400] netlink: 'syz.3.7346': attribute type 6 has an invalid length.
[  430.163854][T23400] netlink: 'syz.3.7346': attribute type 5 has an invalid length.
[  430.167714][T23400] netlink: 'syz.3.7346': attribute type 4 has an invalid length.
[  430.336645][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  430.430563][T23421] syz.9.7356 (23421): /proc/23419/oom_adj is deprecated, please use /proc/23419/oom_score_adj instead.
[  431.463375][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  432.500688][T23500] overlayfs: failed to clone upperpath
[  432.590187][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  433.716881][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  434.304486][T23561] netlink: 'syz.3.7416': attribute type 13 has an invalid length.
[  434.374072][T23561] 8021q: adding VLAN 0 to HW filter on device bond0
[  434.383903][T23561] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  434.687291][T23578] loop9: detected capacity change from 0 to 2048
[  434.690350][T23578] UDF-fs: error (device loop9): udf_process_sequence: Primary Volume Descriptor not found!
[  434.697964][T23578] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  434.758633][T23583] loop9: detected capacity change from 0 to 1024
[  434.797619][T23583] hfsplus: b-tree write err: -5, ino 3
[  434.843723][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  435.079140][T23594] loop9: detected capacity change from 0 to 1024
[  435.082099][T23594] EXT4-fs: Ignoring removed nobh option
[  435.084002][T23594] EXT4-fs: Ignoring removed bh option
[  435.096837][T23594] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  435.119774][T22190] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  435.149377][T23599] loop9: detected capacity change from 0 to 512
[  435.153558][T23599] EXT4-fs (loop9): orphan cleanup on readonly fs
[  435.156039][T23599] Quota error (device loop9): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0
[  435.161923][T23599] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0
[  435.165016][T23599] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.7432: Failed to acquire dquot type 1
[  435.171830][T23599] EXT4-fs (loop9): 1 truncate cleaned up
[  435.178417][T23599] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  435.194620][T22190] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  435.262685][   T33] audit: type=1326 audit(2000000158.793:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23605 comm="syz.3.7436" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f0a38ebe9 code=0x0
[  435.273860][T23608] netlink: 1053 bytes leftover after parsing attributes in process `syz.9.7434'.
[  435.981263][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  436.167405][T23623] openvswitch: netlink: Tunnel attr 5 has unexpected len 4 expected 0
[  436.708267][T23632] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7446'.
[  436.878615][T23636] loop9: detected capacity change from 0 to 32768
[  436.882849][T23636] bcachefs (/dev/loop9): error validating superblock: Invalid superblock section members_v2: section too small (63114 > 64)
[  436.882849][T23636] members_v2 (size 64):
[  436.882849][T23636] nr_devices mismatch: have 0 entries, should be 1
[  436.890354][T23636] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  437.022238][T23642] loop9: detected capacity change from 0 to 512
[  437.037597][T23642] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  437.041824][T23642] ext4 filesystem being mounted at /145/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  437.061064][T22190] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  437.107960][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  437.182332][T23656] loop9: detected capacity change from 0 to 2048
[  437.198720][T23656] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  437.209054][T23656] EXT4-fs (loop9): shut down requested (2)
[  437.220836][T22190] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  437.307076][T23668] loop9: detected capacity change from 0 to 512
[  437.311422][T23668] EXT4-fs error (device loop9): ext4_orphan_get:1392: inode #17: comm syz.9.7462: iget: bogus i_mode (0)
[  437.315962][T23668] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.7462: couldn't read orphan inode 17 (err -117)
[  437.320454][T23668] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  437.340417][T22190] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  437.367549][T23671] loop9: detected capacity change from 0 to 512
[  437.380604][T23671] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2
[  437.383527][T23671] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.7463: invalid indirect mapped block 2683928664 (level 1)
[  437.392339][T23671] EXT4-fs (loop9): Remounting filesystem read-only
[  437.394768][T23671] EXT4-fs (loop9): 1 truncate cleaned up
[  437.401302][T23671] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  437.415883][T22190] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  437.441785][T23674] netlink: 9 bytes leftover after parsing attributes in process `syz.5.7465'.
[  437.447888][T23674] gretap0: entered promiscuous mode
[  437.454411][T23674] netlink: 5 bytes leftover after parsing attributes in process `syz.5.7465'.
[  437.459989][T23674] 0{X: renamed from gretap0
[  437.462840][T23674] 0{X: left promiscuous mode
[  437.464544][T23674] 0{X: entered allmulticast mode
[  437.467642][T23674] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  437.759034][ T5893] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  437.922073][ T5893] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  437.925533][ T5893] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  437.928567][ T5893] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  437.933714][ T5893] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  437.936479][ T5893] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  437.940230][ T5893] usb 10-1: config 0 descriptor??
[  438.224013][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  438.394876][ T5893] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0
[  438.759120][T23724] sctp: [Deprecated]: syz.5.7489 (pid 23724) Use of struct sctp_assoc_value in delayed_ack socket option.
[  438.759120][T23724] Use struct sctp_sack_info instead
[  438.782422][ T5893] usb 10-1: USB disconnect, device number 7
[  439.191835][T23779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7513'.
[  439.232543][T23783] overlayfs: failed to clone upperpath
[  439.255677][T23786] tmpfs: User quota inode hardlimit too large.
[  439.350649][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  440.182276][T23838] IPVS: fo: SCTP 172.20.20.187:0 - no destination available
[  440.477427][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  441.604150][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  442.071308][T23909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7559'.
[  442.074301][T23909] netlink: 'syz.3.7559': attribute type 5 has an invalid length.
[  442.076775][T23909] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7559'.
[  442.089873][T23906] loop9: detected capacity change from 0 to 40427
[  442.102100][T23906] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12
[  442.104718][T23906] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  442.110618][T23906] F2FS-fs (loop9): invalid crc value
[  442.143936][T23906] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  442.153519][T23906] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[  442.155703][T23906] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  442.730963][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  442.861109][T23939] loop9: detected capacity change from 0 to 1024
[  442.890860][T23939] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  442.898573][T23939] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  442.914152][T23939] EXT4-fs (loop9): shut down requested (1)
[  442.932926][T22190] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  443.079760][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  443.082105][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  443.234753][T23971] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7584'.
[  443.868564][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  444.431263][T24008] loop9: detected capacity change from 0 to 256
[  444.438326][T24008] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  444.580379][T16430] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.658955][T16430] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.767501][T16430] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.782674][T16404] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  444.788676][T16404] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  444.792837][T16404] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  444.795728][T16404] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  444.798275][T16404] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  444.855857][T16430] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.931005][T24010] chnl_net:caif_netlink_parms(): no params data found
[  444.984454][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  444.998478][T16430] bridge_slave_1: left allmulticast mode
[  445.000427][T16430] bridge_slave_1: left promiscuous mode
[  445.002351][T16430] bridge0: port 2(bridge_slave_1) entered disabled state
[  445.008395][T16430] bridge_slave_0: left allmulticast mode
[  445.010786][T16430] bridge_slave_0: left promiscuous mode
[  445.013299][T16430] bridge0: port 1(bridge_slave_0) entered disabled state
[  445.021683][   T33] audit: type=1326 audit(2000524455.808:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23986 comm="syz.5.7592" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89bb8ebe9 code=0x7fc00000
[  445.032579][   T33] audit: type=1326 audit(2000524455.808:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23986 comm="syz.5.7592" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd89bb8ebe9 code=0x7fc00000
[  445.049077][   T33] audit: type=1326 audit(2000524455.808:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23986 comm="syz.5.7592" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89bb8ebe9 code=0x7fc00000
[  445.056554][   T33] audit: type=1326 audit(2000524455.808:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23986 comm="syz.5.7592" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89bb8ebe9 code=0x7fc00000
[  445.068011][   T33] audit: type=1326 audit(2000524455.808:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23986 comm="syz.5.7592" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89bb8ebe9 code=0x7fc00000
[  445.083031][   T33] audit: type=1326 audit(2000524455.808:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23986 comm="syz.5.7592" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89bb8ebe9 code=0x7fc00000
[  445.089805][   T33] audit: type=1326 audit(2000524455.808:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23986 comm="syz.5.7592" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89bb8ebe9 code=0x7fc00000
[  445.116294][   T33] audit: type=1326 audit(2000524455.808:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23986 comm="syz.5.7592" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89bb8ebe9 code=0x7fc00000
[  445.140291][   T33] audit: type=1326 audit(2000524455.808:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23986 comm="syz.5.7592" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89bb8ebe9 code=0x7fc00000
[  445.162439][   T33] audit: type=1326 audit(2000524455.808:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23986 comm="syz.5.7592" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89bb8ebe9 code=0x7fc00000
[  445.471521][T24031] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7612'.
[  445.569784][T16430] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  445.574183][T16430] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  445.577684][T16430] bond0 (unregistering): Released all slaves
[  445.584325][T16430] bond1 (unregistering): Released all slaves
[  445.631596][T24010] bridge0: port 1(bridge_slave_0) entered blocking state
[  445.633946][T24010] bridge0: port 1(bridge_slave_0) entered disabled state
[  445.638803][T24010] bridge_slave_0: entered allmulticast mode
[  445.641536][T24010] bridge_slave_0: entered promiscuous mode
[  445.650947][T24010] bridge0: port 2(bridge_slave_1) entered blocking state
[  445.653470][T24010] bridge0: port 2(bridge_slave_1) entered disabled state
[  445.655842][T24010] bridge_slave_1: entered allmulticast mode
[  445.665943][T24010] bridge_slave_1: entered promiscuous mode
[  445.697406][T16430] tipc: Left network mode
[  445.730602][T24010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  445.780548][T24010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  445.808369][T24051] batadv_slave_0: entered promiscuous mode
[  445.811236][T24010] team0: Port device team_slave_0 added
[  445.814350][T24010] team0: Port device team_slave_1 added
[  445.816417][T24050] batadv_slave_0: left promiscuous mode
[  445.849234][T24010] batman_adv: batadv0: Adding interface: batadv_slave_0
[  445.852890][T24010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  445.862585][T24010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  445.991372][T24010] batman_adv: batadv0: Adding interface: batadv_slave_1
[  445.994591][T24010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  446.002766][T24010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  446.122063][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  446.124227][T24010] hsr_slave_0: entered promiscuous mode
[  446.130804][T24010] hsr_slave_1: entered promiscuous mode
[  446.138634][T24010] debugfs: 'hsr0' already exists in 'hsr'
[  446.141568][T24010] Cannot create hsr debugfs directory
[  446.291619][T24068] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7629'.
[  446.300254][T16430] hsr_slave_0: left promiscuous mode
[  446.304780][T16430] hsr_slave_1: left promiscuous mode
[  446.308183][T16430] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  446.310617][T16430] batman_adv: batadv0: Removing interface: batadv_slave_0
[  446.313424][T16430] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  446.315812][T16430] batman_adv: batadv0: Removing interface: batadv_slave_1
[  446.330993][T16430] veth1_macvtap: left promiscuous mode
[  446.332827][T16430] veth0_macvtap: left allmulticast mode
[  446.334638][T16430] veth0_macvtap: left promiscuous mode
[  446.336524][T16430] veth1_vlan: left promiscuous mode
[  446.338230][T16430] veth0_vlan: left promiscuous mode
[  446.745361][T16430] team0 (unregistering): Port device team_slave_1 removed
[  446.829935][T16430] team0 (unregistering): Port device team_slave_0 removed
[  447.078177][   T55] Bluetooth: hci2: command tx timeout
[  447.223380][T24070] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7629'.
[  447.238119][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  448.280911][T24010] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  448.285166][T24010] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  448.291074][T24010] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  448.295323][T24010] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  448.375609][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  448.400982][T24010] 8021q: adding VLAN 0 to HW filter on device bond0
[  448.417971][T24010] 8021q: adding VLAN 0 to HW filter on device team0
[  448.426385][T20126] bridge0: port 1(bridge_slave_0) entered blocking state
[  448.428729][T20126] bridge0: port 1(bridge_slave_0) entered forwarding state
[  448.433351][T20126] bridge0: port 2(bridge_slave_1) entered blocking state
[  448.435822][T20126] bridge0: port 2(bridge_slave_1) entered forwarding state
[  448.655019][T24010] 8021q: adding VLAN 0 to HW filter on device batadv0
[  448.710216][T24010] veth0_vlan: entered promiscuous mode
[  448.717426][T24010] veth1_vlan: entered promiscuous mode
[  448.734298][T24010] veth0_macvtap: entered promiscuous mode
[  448.739437][T24010] veth1_macvtap: entered promiscuous mode
[  448.762644][T24010] batman_adv: batadv0: Interface activated: batadv_slave_0
[  448.777804][T24010] batman_adv: batadv0: Interface activated: batadv_slave_1
[  448.788577][ T5721] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  448.791425][ T5721] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  448.794302][ T5721] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  448.797110][ T5721] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  448.852771][T24197] netlink: 'syz.5.7660': attribute type 3 has an invalid length.
[  448.930509][T20153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  448.936725][T20153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  448.957081][T20167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  448.959634][T20167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  449.039701][T24217] loop1: detected capacity change from 0 to 512
[  449.046013][T24221] netlink: 'syz.3.7666': attribute type 5 has an invalid length.
[  449.054384][T24217] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  449.083832][T24224] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7668'.
[  449.087387][T24217] EXT4-fs (loop1): 1 truncate cleaned up
[  449.089845][T24217] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  449.133279][T24010] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  449.329542][   T55] Bluetooth: hci2: command tx timeout
[  449.367729][T24267] netlink: 'syz.5.7684': attribute type 1 has an invalid length.
[  449.395118][T24271] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7685'.
[  449.398126][T24271] macvlan0: left allmulticast mode
[  449.399869][T24271] netlink: 'syz.5.7685': attribute type 1 has an invalid length.
[  449.402253][T24271] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7685'.
[  449.491517][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  449.502414][    T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  449.672793][    T9] usb 2-1: config index 0 descriptor too short (expected 23569, got 27)
[  449.676254][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  449.682053][    T9] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  449.684920][    T9] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  449.691577][    T9] usb 2-1: Manufacturer: syz
[  449.696629][    T9] usb 2-1: config 0 descriptor??
[  449.762425][    T9] rc_core: IR keymap rc-hauppauge not found
[  449.765521][    T9] Registered IR keymap rc-empty
[  449.767519][    T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  449.783522][    T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input17
[  449.922918][    C0] igorplugusb 2-1:0.0: Error: urb status = -32
[  449.928034][T24248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  449.930951][T24248] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  449.950005][T22195] usb 2-1: USB disconnect, device number 14
[  450.551382][T24398] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[  450.620308][    C1] ==================================================================
[  450.622936][    C1] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400
[  450.625446][    C1] Read of size 1 at addr ffff88802fdf5e30 by task syz-executor/11447
[  450.629256][    C1] 
[  450.630157][    C1] CPU: 1 UID: 0 PID: 11447 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  450.630168][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  450.630175][    C1] Call Trace:
[  450.630180][    C1]  <IRQ>
[  450.630186][    C1]  dump_stack_lvl+0x189/0x250
[  450.630203][    C1]  ? __kasan_check_byte+0x12/0x40
[  450.630220][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  450.630233][    C1]  ? lock_release+0x4b/0x3e0
[  450.630249][    C1]  ? __virt_addr_valid+0x4a5/0x5c0
[  450.630264][    C1]  print_report+0xca/0x240
[  450.630276][    C1]  ? xfrm_state_find+0x2cf2/0x5400
[  450.630290][    C1]  kasan_report+0x118/0x150
[  450.630305][    C1]  ? xfrm_state_find+0x2cf2/0x5400
[  450.630321][    C1]  xfrm_state_find+0x2cf2/0x5400
[  450.630335][    C1]  ? check_noncircular+0xe0/0x160
[  450.630348][    C1]  ? validate_chain+0x897/0x2140
[  450.630361][    C1]  ? xfrm_state_find+0x1da/0x5400
[  450.630375][    C1]  ? __pfx_xfrm_state_find+0x10/0x10
[  450.630386][    C1]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  450.630396][    C1]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  450.630403][    C1]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  450.630411][    C1]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  450.630418][    C1]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  450.630433][    C1]  ? xfrm_expand_policies+0x41f/0x6a0
[  450.630444][    C1]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  450.630456][    C1]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  450.630475][    C1]  ? dst_cache_get+0x10e/0x5b0
[  450.630487][    C1]  xfrm_lookup_route+0x3c/0x1c0
[  450.630499][    C1]  tipc_udp_xmit+0x1c3/0xaa0
[  450.630514][    C1]  ? tipc_crypto_xmit+0x1e2/0x23a0
[  450.630524][    C1]  ? tipc_udp_xmit+0xa4/0xaa0
[  450.630538][    C1]  ? __pfx_tipc_udp_xmit+0x10/0x10
[  450.630553][    C1]  ? tipc_net+0x45/0x270
[  450.630563][    C1]  ? tipc_udp_send_msg+0x2a6/0x3f0
[  450.630572][    C1]  tipc_bearer_xmit_skb+0x2b3/0x400
[  450.630584][    C1]  ? tipc_bearer_xmit_skb+0xa9/0x400
[  450.630597][    C1]  ? __pfx_tipc_bearer_xmit_skb+0x10/0x10
[  450.630612][    C1]  tipc_disc_timeout+0x580/0x6d0
[  450.630626][    C1]  ? __pfx_tipc_disc_timeout+0x10/0x10
[  450.630643][    C1]  call_timer_fn+0x17e/0x5f0
[  450.630658][    C1]  ? __pfx_tipc_disc_timeout+0x10/0x10
[  450.630669][    C1]  ? call_timer_fn+0xbe/0x5f0
[  450.630683][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  450.630700][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  450.630712][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  450.630723][    C1]  ? __pfx_tipc_disc_timeout+0x10/0x10
[  450.630736][    C1]  __run_timer_base+0x61a/0x860
[  450.630749][    C1]  ? ktime_get+0x3e/0x1f0
[  450.630764][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  450.630777][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  450.630793][    C1]  run_timer_softirq+0xb7/0x180
[  450.630807][    C1]  handle_softirqs+0x286/0x870
[  450.630818][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  450.630824][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  450.630837][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  450.630845][    C1]  __irq_exit_rcu+0xca/0x1f0
[  450.630851][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  450.630859][    C1]  irq_exit_rcu+0x9/0x30
[  450.630864][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  450.630872][    C1]  </IRQ>
[  450.630874][    C1]  <TASK>
[  450.630878][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  450.630886][    C1] RIP: 0010:finish_task_switch+0x26b/0x950
[  450.630896][    C1] Code: 0f 84 3c 01 00 00 48 85 db 0f 85 63 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 cf 27 ea 09 e8 5a 3f 36 00 fb 4c 8b 65 c0 <49> 8d bc 24 18 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0
[  450.630902][    C1] RSP: 0018:ffffc900048df938 EFLAGS: 00000282
[  450.630910][    C1] RAX: b55cf50c3d86fe00 RBX: 0000000000000000 RCX: b55cf50c3d86fe00
[  450.630915][    C1] RDX: 0000000000000000 RSI: ffffffff8d9b4501 RDI: ffffffff8be32680
[  450.630920][    C1] RBP: ffffc900048df990 R08: ffffffff8fa34337 R09: 1ffffffff1f46866
[  450.630924][    C1] R10: dffffc0000000000 R11: fffffbfff1f46867 R12: ffff888022b89cc0
[  450.630929][    C1] R13: dffffc0000000000 R14: ffff888048269cc0 R15: ffff88813663ab58
[  450.630937][    C1]  ? finish_task_switch+0x266/0x950
[  450.630946][    C1]  __schedule+0x17a0/0x4cc0
[  450.630955][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  450.630962][    C1]  ? ktime_get+0x3e/0x1f0
[  450.630970][    C1]  ? __lock_acquire+0xab9/0xd20
[  450.630978][    C1]  ? __pfx___schedule+0x10/0x10
[  450.630988][    C1]  ? schedule+0x91/0x360
[  450.630994][    C1]  schedule+0x165/0x360
[  450.631001][    C1]  do_nanosleep+0x1c7/0x600
[  450.631008][    C1]  ? do_nanosleep+0x7f/0x600
[  450.631013][    C1]  ? __pfx_do_nanosleep+0x10/0x10
[  450.631020][    C1]  ? __hrtimer_setup+0x187/0x210
[  450.631025][    C1]  ? __pfx_hrtimer_wakeup+0x10/0x10
[  450.631032][    C1]  hrtimer_nanosleep+0x169/0x360
[  450.631039][    C1]  ? __pfx_hrtimer_nanosleep+0x10/0x10
[  450.631046][    C1]  ? __pfx_hrtimer_wakeup+0x10/0x10
[  450.631052][    C1]  ? __pfx_get_timespec64+0x10/0x10
[  450.631063][    C1]  __se_sys_clock_nanosleep+0x2f1/0x380
[  450.631073][    C1]  ? __pfx___se_sys_clock_nanosleep+0x10/0x10
[  450.631083][    C1]  ? rcu_is_watching+0x15/0xb0
[  450.631091][    C1]  ? do_syscall_64+0xbe/0x3b0
[  450.631099][    C1]  do_syscall_64+0xfa/0x3b0
[  450.631107][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  450.631114][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  450.631120][    C1]  ? exc_page_fault+0x9f/0xf0
[  450.631150][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  450.631158][    C1] RIP: 0033:0x7fd89bbc14a5
[  450.631165][    C1] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8
[  450.631171][    C1] RSP: 002b:00007ffd9f026750 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6
[  450.631178][    C1] RAX: ffffffffffffffda RBX: 0000000000001111 RCX: 00007fd89bbc14a5
[  450.631183][    C1] RDX: 00007ffd9f026790 RSI: 0000000000000000 RDI: 0000000000000000
[  450.631187][    C1] RBP: 00007ffd9f0267fc R08: 0000000000000000 R09: 0000000000000000
[  450.631191][    C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388
[  450.631196][    C1] R13: 00000000000927c0 R14: 000000000006ce27 R15: 00007ffd9f026850
[  450.631203][    C1]  </TASK>
[  450.631206][    C1] 
[  450.849699][    C1] Allocated by task 22419:
[  450.851151][    C1]  kasan_save_track+0x3e/0x80
[  450.852662][    C1]  __kasan_slab_alloc+0x6c/0x80
[  450.854232][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  450.855976][    C1]  xfrm_state_alloc+0x24/0x2f0
[  450.857538][    C1]  __find_acq_core+0x8a7/0x1c00
[  450.859103][    C1]  xfrm_find_acq+0x78/0xa0
[  450.860577][    C1]  xfrm_alloc_userspi+0x6b3/0xc90
[  450.862215][    C1]  xfrm_user_rcv_msg+0x7a3/0xab0
[  450.863814][    C1]  netlink_rcv_skb+0x208/0x470
[  450.865353][    C1]  xfrm_netlink_rcv+0x79/0x90
[  450.866872][    C1]  netlink_unicast+0x82f/0x9e0
[  450.868436][    C1]  netlink_sendmsg+0x805/0xb30
[  450.869967][    C1]  __sock_sendmsg+0x21c/0x270
[  450.871485][    C1]  ____sys_sendmsg+0x505/0x830
[  450.872981][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  450.874481][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  450.876066][    C1]  do_syscall_64+0xfa/0x3b0
[  450.877503][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  450.879407][    C1] 
[  450.880187][    C1] Freed by task 9:
[  450.881409][    C1]  kasan_save_track+0x3e/0x80
[  450.882899][    C1]  kasan_save_free_info+0x46/0x50
[  450.884491][    C1]  __kasan_slab_free+0x5b/0x80
[  450.886023][    C1]  kmem_cache_free+0x18f/0x400
[  450.887543][    C1]  xfrm_state_gc_task+0x52d/0x6b0
[  450.889091][    C1]  process_scheduled_works+0xae1/0x17b0
[  450.890880][    C1]  worker_thread+0x8a0/0xda0
[  450.892375][    C1]  kthread+0x711/0x8a0
[  450.893692][    C1]  ret_from_fork+0x3fc/0x770
[  450.895188][    C1]  ret_from_fork_asm+0x1a/0x30
[  450.896736][    C1] 
[  450.897532][    C1] The buggy address belongs to the object at ffff88802fdf5b00
[  450.897532][    C1]  which belongs to the cache xfrm_state of size 928
[  450.901901][    C1] The buggy address is located 816 bytes inside of
[  450.901901][    C1]  freed 928-byte region [ffff88802fdf5b00, ffff88802fdf5ea0)
[  450.906245][    C1] 
[  450.907032][    C1] The buggy address belongs to the physical page:
[  450.909041][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802fdf5b00 pfn:0x2fdf4
[  450.912268][    C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  450.914904][    C1] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  450.917425][    C1] page_type: f5(slab)
[  450.918677][    C1] raw: 00fff00000000040 ffff888104ead780 ffffea0000d95400 0000000000000003
[  450.921380][    C1] raw: ffff88802fdf5b00 00000000000e000d 00000000f5000000 0000000000000000
[  450.924067][    C1] head: 00fff00000000040 ffff888104ead780 ffffea0000d95400 0000000000000003
[  450.926802][    C1] head: ffff88802fdf5b00 00000000000e000d 00000000f5000000 0000000000000000
[  450.929558][    C1] head: 00fff00000000002 ffffea0000bf7d01 00000000ffffffff 00000000ffffffff
[  450.932264][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  450.934969][    C1] page dumped because: kasan: bad access detected
[  450.936957][    C1] page_owner tracks the page as allocated
[  450.938731][    C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 15556, tgid 15551 (syz.6.3977), ts 270118600836, free_ts 268705335065
[  450.944742][    C1]  post_alloc_hook+0x240/0x2a0
[  450.946296][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  450.948023][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  450.949838][    C1]  alloc_pages_mpol+0x232/0x4a0
[  450.951440][    C1]  allocate_slab+0x8a/0x370
[  450.952854][    C1]  ___slab_alloc+0xbeb/0x1410
[  450.954378][    C1]  kmem_cache_alloc_noprof+0x283/0x3c0
[  450.956141][    C1]  xfrm_state_alloc+0x24/0x2f0
[  450.957682][    C1]  xfrm_state_find+0x37d4/0x5400
[  450.959253][    C1]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  450.961187][    C1]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  450.962883][    C1]  xfrm_lookup_route+0x3c/0x1c0
[  450.964487][    C1]  udp_sendmsg+0x142e/0x2170
[  450.965989][    C1]  __sock_sendmsg+0x19c/0x270
[  450.967512][    C1]  ____sys_sendmsg+0x52d/0x830
[  450.969070][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  450.970599][    C1] page last free pid 5893 tgid 5893 stack trace:
[  450.972590][    C1]  __free_frozen_pages+0xbc4/0xd30
[  450.974291][    C1]  __slab_free+0x303/0x3c0
[  450.975720][    C1]  qlist_free_all+0x97/0x140
[  450.977231][    C1]  kasan_quarantine_reduce+0x148/0x160
[  450.978960][    C1]  __kasan_slab_alloc+0x22/0x80
[  450.980516][    C1]  __kmalloc_noprof+0x224/0x4f0
[  450.982059][    C1]  blk_rq_map_kern+0x2a7/0x650
[  450.983601][    C1]  scsi_execute_cmd+0x2fb/0x1130
[  450.985192][    C1]  sr_check_events+0x1b1/0xb30
[  450.986739][    C1]  cdrom_check_events+0x64/0xe0
[  450.988309][    C1]  disk_check_events+0x117/0x5b0
[  450.989914][    C1]  process_scheduled_works+0xae1/0x17b0
[  450.991682][    C1]  worker_thread+0x8a0/0xda0
[  450.993169][    C1]  kthread+0x711/0x8a0
[  450.994494][    C1]  ret_from_fork+0x3fc/0x770
[  450.995992][    C1]  ret_from_fork_asm+0x1a/0x30
[  450.997515][    C1] 
[  450.998301][    C1] Memory state around the buggy address:
[  451.000104][    C1]  ffff88802fdf5d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  451.002650][    C1]  ffff88802fdf5d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  451.005170][    C1] >ffff88802fdf5e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  451.007619][    C1]                                      ^
[  451.009363][    C1]  ffff88802fdf5e80: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  451.011862][    C1]  ffff88802fdf5f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  451.014441][    C1] ==================================================================
[  451.017325][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  451.019685][    C1] CPU: 1 UID: 0 PID: 11447 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  451.023559][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  451.026792][    C1] Call Trace:
[  451.027885][    C1]  <IRQ>
[  451.028827][    C1]  dump_stack_lvl+0x99/0x250
[  451.030340][    C1]  ? __asan_memcpy+0x40/0x70
[  451.031836][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  451.033494][    C1]  ? __pfx__printk+0x10/0x10
[  451.034958][    C1]  vpanic+0x281/0x750
[  451.036262][    C1]  ? __pfx_vpanic+0x10/0x10
[  451.037706][    C1]  ? irqentry_exit+0x74/0x90
[  451.039223][    C1]  panic+0xb9/0xc0
[  451.040453][    C1]  ? __pfx_panic+0x10/0x10
[  451.041874][    C1]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  451.043788][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  451.045676][    C1]  ? xfrm_state_find+0x2cf2/0x5400
[  451.047304][    C1]  check_panic_on_warn+0x89/0xb0
[  451.048872][    C1]  ? xfrm_state_find+0x2cf2/0x5400
[  451.050473][    C1]  end_report+0x78/0x160
[  451.051858][    C1]  kasan_report+0x129/0x150
[  451.053370][    C1]  ? xfrm_state_find+0x2cf2/0x5400
[  451.054997][    C1]  xfrm_state_find+0x2cf2/0x5400
[  451.056591][    C1]  ? check_noncircular+0xe0/0x160
[  451.058245][    C1]  ? validate_chain+0x897/0x2140
[  451.059858][    C1]  ? xfrm_state_find+0x1da/0x5400
[  451.061497][    C1]  ? __pfx_xfrm_state_find+0x10/0x10
[  451.063193][    C1]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  451.065149][    C1]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  451.067041][    C1]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  451.069119][    C1]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  451.071058][    C1]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  451.072965][    C1]  ? xfrm_expand_policies+0x41f/0x6a0
[  451.074694][    C1]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  451.076427][    C1]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  451.078276][    C1]  ? dst_cache_get+0x10e/0x5b0
[  451.079826][    C1]  xfrm_lookup_route+0x3c/0x1c0
[  451.081402][    C1]  tipc_udp_xmit+0x1c3/0xaa0
[  451.082899][    C1]  ? tipc_crypto_xmit+0x1e2/0x23a0
[  451.084567][    C1]  ? tipc_udp_xmit+0xa4/0xaa0
[  451.086070][    C1]  ? __pfx_tipc_udp_xmit+0x10/0x10
[  451.087720][    C1]  ? tipc_net+0x45/0x270
[  451.089115][    C1]  ? tipc_udp_send_msg+0x2a6/0x3f0
[  451.090774][    C1]  tipc_bearer_xmit_skb+0x2b3/0x400
[  451.092437][    C1]  ? tipc_bearer_xmit_skb+0xa9/0x400
[  451.094164][    C1]  ? __pfx_tipc_bearer_xmit_skb+0x10/0x10
[  451.096002][    C1]  tipc_disc_timeout+0x580/0x6d0
[  451.097622][    C1]  ? __pfx_tipc_disc_timeout+0x10/0x10
[  451.099363][    C1]  call_timer_fn+0x17e/0x5f0
[  451.100846][    C1]  ? __pfx_tipc_disc_timeout+0x10/0x10
[  451.102589][    C1]  ? call_timer_fn+0xbe/0x5f0
[  451.104084][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  451.105757][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  451.107395][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  451.108995][    C1]  ? __pfx_tipc_disc_timeout+0x10/0x10
[  451.110728][    C1]  __run_timer_base+0x61a/0x860
[  451.112279][    C1]  ? ktime_get+0x3e/0x1f0
[  451.113687][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  451.115408][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  451.117432][    C1]  run_timer_softirq+0xb7/0x180
[  451.119008][    C1]  handle_softirqs+0x286/0x870
[  451.120540][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  451.122095][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  451.123800][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  451.125479][    C1]  __irq_exit_rcu+0xca/0x1f0
[  451.126979][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  451.128675][    C1]  irq_exit_rcu+0x9/0x30
[  451.130044][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  451.131778][    C1]  </IRQ>
[  451.132717][    C1]  <TASK>
[  451.133694][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  451.135620][    C1] RIP: 0010:finish_task_switch+0x26b/0x950
[  451.137466][    C1] Code: 0f 84 3c 01 00 00 48 85 db 0f 85 63 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 cf 27 ea 09 e8 5a 3f 36 00 fb 4c 8b 65 c0 <49> 8d bc 24 18 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0
[  451.143501][    C1] RSP: 0018:ffffc900048df938 EFLAGS: 00000282
[  451.145426][    C1] RAX: b55cf50c3d86fe00 RBX: 0000000000000000 RCX: b55cf50c3d86fe00
[  451.147882][    C1] RDX: 0000000000000000 RSI: ffffffff8d9b4501 RDI: ffffffff8be32680
[  451.150370][    C1] RBP: ffffc900048df990 R08: ffffffff8fa34337 R09: 1ffffffff1f46866
[  451.152832][    C1] R10: dffffc0000000000 R11: fffffbfff1f46867 R12: ffff888022b89cc0
[  451.155333][    C1] R13: dffffc0000000000 R14: ffff888048269cc0 R15: ffff88813663ab58
[  451.157810][    C1]  ? finish_task_switch+0x266/0x950
[  451.159465][    C1]  __schedule+0x17a0/0x4cc0
[  451.160920][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  451.162938][    C1]  ? ktime_get+0x3e/0x1f0
[  451.164339][    C1]  ? __lock_acquire+0xab9/0xd20
[  451.165939][    C1]  ? __pfx___schedule+0x10/0x10
[  451.167516][    C1]  ? schedule+0x91/0x360
[  451.168889][    C1]  schedule+0x165/0x360
[  451.170260][    C1]  do_nanosleep+0x1c7/0x600
[  451.171721][    C1]  ? do_nanosleep+0x7f/0x600
[  451.173206][    C1]  ? __pfx_do_nanosleep+0x10/0x10
[  451.174776][    C1]  ? __hrtimer_setup+0x187/0x210
[  451.176365][    C1]  ? __pfx_hrtimer_wakeup+0x10/0x10
[  451.178048][    C1]  hrtimer_nanosleep+0x169/0x360
[  451.179653][    C1]  ? __pfx_hrtimer_nanosleep+0x10/0x10
[  451.181410][    C1]  ? __pfx_hrtimer_wakeup+0x10/0x10
[  451.183075][    C1]  ? __pfx_get_timespec64+0x10/0x10
[  451.184770][    C1]  __se_sys_clock_nanosleep+0x2f1/0x380
[  451.186566][    C1]  ? __pfx___se_sys_clock_nanosleep+0x10/0x10
[  451.188494][    C1]  ? rcu_is_watching+0x15/0xb0
[  451.190019][    C1]  ? do_syscall_64+0xbe/0x3b0
[  451.191494][    C1]  do_syscall_64+0xfa/0x3b0
[  451.192921][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  451.194592][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.196516][    C1]  ? exc_page_fault+0x9f/0xf0
[  451.198070][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.199980][    C1] RIP: 0033:0x7fd89bbc14a5
[  451.201417][    C1] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8
[  451.207437][    C1] RSP: 002b:00007ffd9f026750 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6
[  451.210025][    C1] RAX: ffffffffffffffda RBX: 0000000000001111 RCX: 00007fd89bbc14a5
[  451.212510][    C1] RDX: 00007ffd9f026790 RSI: 0000000000000000 RDI: 0000000000000000
[  451.214996][    C1] RBP: 00007ffd9f0267fc R08: 0000000000000000 R09: 0000000000000000
[  451.217478][    C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388
[  451.219957][    C1] R13: 00000000000927c0 R14: 000000000006ce27 R15: 00007ffd9f026850
[  451.222470][    C1]  </TASK>
[  451.224111][    C1] Kernel Offset: disabled
[  451.225494][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
10:03:20  Registers:
info registers vcpu 0

CPU#0
RAX=a0d1f5832529dd00 RBX=ffffffff81968308 RCX=a0d1f5832529dd00 RDX=0000000000000001
RSI=ffffffff8d9b4501 RDI=ffffffff8be32680 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa34330 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b78a3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f61e4f25de0 CR3=00000001235dc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f61e5012e53
XMM06=0000000000000000 00007f61e5012e4d XMM07=0000000000000000 00007f61e5012e61
XMM08=0000000000000000 00007f61e5012ee7 XMM09=0000000000000000 00007f61e5012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001df9f0
R8 =ffff888020878237 R9 =1ffff1100410f046 R10=dffffc0000000000 R11=ffffffff854e8560
R12=dffffc0000000000 R13=ffffffff99af2902 R14=ffffffff99de74e0 R15=0000000000000000
RIP=ffffffff854e85dc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555694a5500 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b31b22ff8 CR3=00000000335ac000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f61e5187498 00007f61e5187470 XMM03=00007f61e51874a8 00007f61e51874a0
XMM04=00007f61e5ced100 00007f61e5187460 XMM05=00007f61e5187478 00007f61e51874c0
XMM06=00007f61e51874b8 00007f61e51874b0 XMM07=00007f61e51874a8 00007f61e51874a0
XMM08=0000000000000000 00007f61e5012ee7 XMM09=0000000000000000 00007f61e5012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
