last executing test programs:

4m9.4280892s ago: executing program 1 (id=255):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x1419, 0x101}, 0x10}}, 0x0)

4m9.31777533s ago: executing program 1 (id=258):
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x700, 0x700, 0x2c}, 0x48)

4m9.167838535s ago: executing program 1 (id=260):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x20, 0x19, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x80)

4m9.070673024s ago: executing program 1 (id=262):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfe, 0x47c, &(0x7f0000000a80)="$eJzs3M1vFOUfAPDvTLulwI9fK+ILCFJFI/GlpeVFDl40mnDQxEQPGE+1LaRSqKE1EUK0esCjIfFu/C+MJ70Y9aKJV70bEmK4gHpZMzsztLS77ZZud4H9fJLZfZ6Z2X2e78w8O8/Ms7sBdK2h7CGJ+F9E/B4RA3n29hWG8qeb1y9N/H390kQS1epbfyW19W5cvzRRrlq+bnueqVaL/JY65V5+N2J8ZmbqfJEfmT/7wcjchYsvTJ8dPz11eurc2PHjRw7v6zs2drQlcWZx3djz8eze3SfeufLGxMkr7/2UpJHHHcviaJWhfOvW9XSrC+uwHUvSSW/22F/k9v+yuKTekUAn9UREtrsqtfY/ED2x9daygXjts45WDthU1Wq1usqn8kIVuI8l0ekaAJ1Rnuiz699yalPX465w7eX8AiiL+2Yx5Ut6I80T+yvLrm9baSgiTi7881U2xSbdhwAAWOq7rP/zfL3+XxoP54m+7OH/xRjKYEQ8EBE7I+LBiNgVEQ9F1NZ9JCIeXWf5y0dIVvZ/0qt3HFwTsv7fS8XY1u39v7RcZbCnyO2oxV9JTk3PTB0qtsnBqGw5NZ1Mja5Sxvev/vZFo2VL+3/ZlJVf9gWLelztXXaDbnJ8fnwjMS917dOIPb314k9q4wJRjOvtjog9d1jG9LO9DZetHf8qGr9t06pfRzyT7/+FWBZ/KWk4Pjn64rGxoyP9MTN1aKQ8Klb6+dfLbzYqf0Pxt0C2/7fVPf5vxT+Y9EfMXbh4pjZeO7f+Mi7/8XnDa5p1Hv8ndhTHf1/ydm1GX7Hgo/H5+fOjEX3J6yvnjy2+W5kv18/iP3igfvvfGYtb4rGI2BsR+yLi8eyisKj7ExHxZEQcWCX+H1956v31x9+esdIs/sm19n8s3f/rT/Sc+eHbtePvj4hG+/9ILXWwmNPM51+zFdzItgMAAIB7Rf4d+CQdXkwnw8P5d/h3xbZ0ZnZu/rlTsx+em8y/Kz8YlbS80zWw5H7oaHFvuMyPLcsfLu4bf9mztZYfnpidmex08NDltq9o/2matf/Mnz2drh2w6Vowjgbco7R/6F7aP3SnZM32X2lbXYD2c/6H7lWv/X/ScO3hbza1MkBbOf9D92qi/S/kT417BcC9yfkfupf2D12p4W/j0w395L/tiX+L/zO8W+pz/ycivSuqcf8nepv+M4tGicrKtlwdyNt/NmdL3Vd1+pMJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgNf4LAAD///R05PQ=")
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0)
mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x958028, &(0x7f00000001c0)={[{@gid}, {}]})
r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020)

4m8.937356649s ago: executing program 1 (id=264):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="1e", 0x1}], 0x20)

4m8.555973105s ago: executing program 1 (id=269):
socket(0x2, 0x3, 0xff)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/raw\x00')
pread64(r0, &(0x7f00000022c0)=""/4084, 0xff4, 0xe9)

4m7.942989803s ago: executing program 32 (id=269):
socket(0x2, 0x3, 0xff)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/raw\x00')
pread64(r0, &(0x7f00000022c0)=""/4084, 0xff4, 0xe9)

4m2.826369835s ago: executing program 2 (id=304):
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x5, 0xef9, &(0x7f0000000f00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
lseek(r0, 0x3, 0x0)
getdents64(r0, 0x0, 0x22)

4m2.557436792s ago: executing program 2 (id=305):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48814}, 0x14000012)
r2 = syz_io_uring_setup(0x9f, &(0x7f0000000440)={0x0, 0xc394, 0x0, 0x0, 0x207}, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000080)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x2000051)

4m2.234402768s ago: executing program 2 (id=308):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x5, 0x4, 0x1000, 0xa, 0x0, 0xffffffffffffffff, 0xd}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x15, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10)

4m2.115751523s ago: executing program 2 (id=309):
syz_mount_image$jfs(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x101c002, &(0x7f0000000a00)=ANY=[@ANYBLOB='discard,discard=0x0000000000020001,discard,iocharset=cp857,errors=remount-ro,iocharset=iso8859-2,uid=', @ANYRESHEX=0xee00, @ANYRES64=0x0], 0x23, 0x61c3, &(0x7f000000c9c0)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)

4m1.87388707s ago: executing program 2 (id=310):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
io_uring_setup(0x5237, &(0x7f00000002c0))
r1 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2)
readv(r1, &(0x7f0000000280)=[{&(0x7f0000000000)=""/183, 0xb7}], 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

4m1.514766918s ago: executing program 2 (id=313):
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r0, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000001b00)=""/102392, 0x18ff8)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0)
socket$inet6(0xa, 0x6, 0x10000)
pread64(r2, &(0x7f0000002780)=""/59, 0x3b, 0xf27b)

4m1.38053283s ago: executing program 33 (id=313):
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r0, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000001b00)=""/102392, 0x18ff8)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0)
socket$inet6(0xa, 0x6, 0x10000)
pread64(r2, &(0x7f0000002780)=""/59, 0x3b, 0xf27b)

3m33.085588457s ago: executing program 0 (id=611):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000000)={'wlan0\x00'})

3m33.025204203s ago: executing program 0 (id=612):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001980)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098ee6889900", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$inet6(0xa, 0x3, 0x84)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@local, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3, 0x4e20, 0x0, 0x2}, {0x0, 0x15000000000000, 0x0, 0x1, 0x8001, 0x7, 0x0, 0xd3d}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x1, 0x1}, {{@in=@empty, 0x4d6, 0x3c}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x1}}, 0xe8)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
syz_open_dev$vim2m(&(0x7f0000000000), 0x79, 0x2)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2c2e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@main=@item_012={0x0, 0x0, 0xa}, @local=@item_012={0x0, 0x2, 0x2}, @main=@item_4={0x3, 0x0, 0xc, "f53f0587"}]}}, 0x0}, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000)

3m31.434095182s ago: executing program 0 (id=627):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0)

3m31.374325261s ago: executing program 0 (id=628):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000240)='./file1\x00', 0x1008400, &(0x7f0000000080)=ANY=[], 0x85, 0x677, &(0x7f0000002100)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00'}, 0x10)
ptrace$cont(0x21, r1, 0x80000001, 0x4)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x69000}], 0x1)

3m31.082581951s ago: executing program 0 (id=630):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port0\x00', 0x12, 0xa08a9, 0x2})

3m30.765227932s ago: executing program 0 (id=631):
r0 = socket(0x10, 0x2, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r4, 0x0, 0x2, 0x80, 0x2, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0x82}, 0x1, 0x0, 0x0, 0xc}})

3m30.647477422s ago: executing program 34 (id=631):
r0 = socket(0x10, 0x2, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r4, 0x0, 0x2, 0x80, 0x2, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0x82}, 0x1, 0x0, 0x0, 0xc}})

2m43.704801895s ago: executing program 4 (id=1006):
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000380)='./file0\x00', 0x4cd1, &(0x7f0000000640)={[{@utf8}, {@cruft}, {@map_off}, {@utf8}, {@uid}, {@session={'session', 0x3d, 0x5}}, {@check_strict}, {@map_off}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@session={'session', 0x3d, 0x23}}, {@uid}, {@nocompress}, {@unhide}]}, 0x4, 0xa0d, &(0x7f00000014c0)="$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")
mount$afs(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0)

2m43.340856846s ago: executing program 4 (id=1008):
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8, 0x0, 0x10000, 0x0, 0x4})

2m42.06683105s ago: executing program 4 (id=1013):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
lseek(0xffffffffffffffff, 0xcbe, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$pokeuser(0x6, r3, 0x358, 0x0)

2m38.371065858s ago: executing program 4 (id=1018):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56561, 0x4, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x4, 0xff, 0x8, 0x0, 0x5, 0x8}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040010)

2m38.059587026s ago: executing program 4 (id=1022):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x10, &(0x7f0000000480)=ANY=[], 0xff, 0x5a02, &(0x7f000000bc00)="$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")
open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
open(&(0x7f00000000c0)='./bus\x00', 0x68042, 0x62)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
r1 = open(&(0x7f0000000380)='./file1\x00', 0x8011, 0x20)
sendfile(r1, r0, 0x0, 0x80000000c)

2m36.831793456s ago: executing program 4 (id=1023):
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0)
read$FUSE(r0, &(0x7f0000005140)={0x2020}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000007180)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2m21.750362307s ago: executing program 35 (id=1023):
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0)
read$FUSE(r0, &(0x7f0000005140)={0x2020}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000007180)="973fd8150e54a41985ca99413432f8acaa098fbf09fa75445ff91278df82d0ebc7fd0e282bcf24dc2124114ea80115399d8e47773a5d4508306fbb451387d15888a7a119188f33a32ed8bba55f1dd43757fdeb6caa2f020afa485df9d7f8ff9486818d0c7159f517fa10dfb81b64ec90d8bd9dbc8697d85a4ae2b3754be3164365e8fe178933b386065f082406597f2c8afdbf2f3b1eaca44a5aef3a468aea0e7c593ad80cefa29a489af071f786f7fdaa0412d5c1b12f02340ff927f34341078c4d2f1a9edb5b3ba30d6f50e121c728c9ef1088aef636feee12757c114bd8e18a1d7f4cd1446dff4b06f87e0aad2dc68d179f49cdf6a0ee934e633e34c8a904e563c20602e5cb84bf39ddfd80aabd708172d5123dbe193a771f26a2677fd968549fad8f06e878578c375c76b0921ec993ce309f569de759a383cea7ffaca1dee8d4e38364be84567f7510953d5596ef8c324986813ec68e0316a952aa0c6e741387b58ef9add7658d01287b52e32f1945544e355ec6dee01a40e019e20122c01a0a3b38d3ae4dedd01833225e4637dd1819e98cd0e35390cccd9300ace99f16040018846a90eec6ac0cec5223aec67db24e206530bc48d3c63d1d9ead9655d40368eb4b5a3b60b17f6e628ebf83365dc4d386980b4584722284ed9c227291ec0168140b832e3fe31f5f8d736ab360ea388df1f37f5094f11892a4bec7915caf02521a7d6ebcaeae108a001deb4b99be29c8e3fdd43bf03c8aa11d3b23bd5e7961ceb6acdfdc852ce766a31281193c20b319e0a6b6bf30be893f191ccf40f916ce22b1042b4a3acdde6bf7c10982a1bca0ed8b02a1480ef0b25d1dfd41517e2d2f644758db26584b599d57dd85a2b8187ea346bf886ef1365ea07a08fe23cef717537d790482a2ff042b8e891bf73bc04f6282769618b67d5c8b5e47aa2f9fc084ba33021b048782688873f21e8021f613ef6cc3b46c9ae90e0a05c34b22434dfe405b92bf25d443e4a5f639039a262d91a12572e23396aa9433e4ad72d6c69c45c3eb10cbbecc8bd22ba9f4f6a29f1be9c198502930d28a3d0e99d3fd54c1dd437265fde322ebdc8c08049c45be8e06b41527dc2f9ebee3bd0ab2f4612d52250b58e281d82f77944afaf1ff5deae62769715665a216db733e5ce2b45e59fac73e3266b2eb23bf7cc582bd23cafd06862d6e6b7ffbcb39cd1b42aa2c8ab386862062f38de76cccce2a8f5a9ea7fec2ff9f05778417f461d06a7f3fbe5d5e0b0db72c334da701c57e6ebb162a9a1cec62c547f3d317ecdc4583d3d28d35bcd5239433e5e7341a6f35f26c209b9c401e2bf3ce40b441e1928b9812db1efe8cf5347dc97e65708bd128ea378558a67a3c88a14d75b9589d06ee84c4bfd83a255b4038cdd9f8202f2066c3c85642f4aab3deb62f4fbbf41e4f9859652c56dd95b9a31c024602e018f67f972961bd82c4d2732b63d896ba2cf6b11aa9a7b2329a92926f9f6082188f4f3e5120997177988a17f992f1eec75da29a1837961471efd6e8907e7cda94e2f9fad2cbd04d67bf4433542f25e5038015d70e694084b527ad08d948ebda3caa7a49581c5f96782371af4f0460c8c9d8a9576f48cb7d5c057823ce56b156619c2048360d92c1d79a7fbe2698d3e90dd7bf4fbd88d8e56a9433bb84774c1f1e51babbb17b94dc10d67975112035862f430b2193106a62ec1b6e4d903b271cdb992ceb28efef60c1b7a573d8c38806d462c22fc8643f847c757153dc1ec6793cfb9d0b1a124ddacf75e5aaa2ba437010d7ac7cf1210f0071936b3899e9316bc07ba0b821cd584ad6fe8bcd9389c5fb6e7b0105899cecace0c512d1b387f697bc8e6fda5610e2aa4c59c82433941243b5ae3ae47136cd0b473e34d0dae5a3bcad93e974c5c22c8db7110bc0a928cfa60a676d37096c9fcea2289c87a5ba2c0808ee5ca1df13068643442d611d01241b78fa8d38540a11c1c3cb497d08318539f8406cf35161472968422de29424bc546d3c0f5fa519c2f01ad261bdf08c4abe0ccc5384d17baca2e3701a6029f0f748ea581ed5fd5ba81f8f975d99d804ad1df3fb1136b1edae1261ae1a0e5307c03e103c69976b68ae4dbfccc45d9f0b11300899e031ebdf8fdaa068d7379bcff2dd65184020deeda08296a5987add88a1778a800d9fe912bcac4190bf5e06da9e724c520739cafceb57d7cb33099611ee368740a4eb3c0ff593261c4db41e28404f35c27df39e15e91ccfa79a00f10d8c3373d515fdacc779c2b6fa1ceb0029a197dafc2c42daf118092270b527c2f02bafbe01e604606a292193749cc8eb7e50e634fe9f774b87c53820d6d69c017e843daac839df58ed7b88594ee2430ff9204d969ada852be876b9193e2abd6011ff51376637e22b766629b05e05b6ec16724e3e22a362ee12ff61c99079f4a815cb33f264a276f25cf120420146ac9e38cd77f69d52817e7c6b0a18dad1e965045e21da3185a0a4fd2986e73e8aebf573f41e08c8e99dbac3c4f96ed3245cafe8ee112f1fd3f19c73c9b0590f1aa99a130fd0bb95a1a0af5475a8c7b0de4f992ef67a0c793e2f28ba5dac0e7d3f0bcc1f18c2984a6f6d4f7b937109986f29d3e5a27d4ad2cd9706ecf0b892b5523dbb357d9d0b2052071ebcc8eb552133b5d5319461137bb54e0f323cef08ae3d48b088ec9a2bbf0670a14d1609e6a5454f4fe1160c74a4d8f6882d311292e8fa0a3113c139ece5adaa1625f9c3c68e1fbd28b3b6cde17f0fa04857762ecb24fed4e52fb70ab8a49e414fca4408524ce6ab71181f7a3c9bc48376f49842a6f7f296f6cd31442d809df680031db5eb8c7e4fde2471c5b76290a4e3c6a6d44d45bc660d2259cb5eea902ab966ee445949fc7b77403101ea5c4cba186665a86a89344e4ca630d9694df5d04d44925947b6a9f3ae483103cccccb528e5d66d657e2be3157596c06b77510a997d7081c78d3dadf17de4f205c787c5a4cde5534dae0cf0bf9c5c308958bf2ab84a66f865e2a302fc55cad081d19bf3c19db680a7b1480398f74a4e1b31ab4804afb8914bb3cb7d4599fbf73dacfaa427f96e03d263459637890304bcff298770c714a01ba2ce9ec18bd47340f01e359728fe7afbee3791fe6ca4a91ca0ec2ea926061989f804cc1c411df760b9fa9feab79ecd87dee14d12ac2ff5478dc130f0a3c2db8197c94f3147a0bdc0c665ff5e3fb8c7703cecf8e49fe71075f92e8bc8d597fbf1278021d770d73903296ccbba020909ea35e00e892ea8e70248dbe3bcc18c72f39e47ddd6418d9223e0bc3e82d3f65d55a8e62482b7cc027a01e4e4acffa687eb028cb2436b57b47383c15b5a7c15df05b03becf520cfc57e84516361e11d8c408fe3c7ef3e8d7f228697d8f1f4e57c89679d4cb42d42d689dbeb96e908e8430ba5a64196886eeb15bf24add3aa7a79891fb4884f3726258be4a3dfabe1308ead5965e2c481a0d7b1e9c899f63fc2adcb70c69a422955b5254620801153b7a3dd0f1994e517b2b5e0c805cd21cce506a46dcc9fc4ab0ab0b3512104b4cc282d37dc23e64b340cf74f951d29b3c3c4ebfa11487c506d6b3f7c1b911761adcbf5305238bf841ffcc53876f33301403884ae3114ce84d2f172c35d0d71c86e529e2eb890a7101b165cb0ce8113530655b6e262b7a73aa955c07a3db0244ec4bf45161d8de406c9c41788a31c2311075ceb6c46c8ed9468f80da31c867cf1b9505b739577f360f840de6b435002f9c84b9434d3c4d892423c2413f1e39cad3b1a79e7f406c831474d8f935691148ccf765db12788bbb73d48da5276b9be2b542c4206b6bda5f624392bfd03aa589d91447e2caa5a157f20c22a30610480e45d3828807e73c2e01cf9d796b149f22dd7e45f652502b29c2f65ddf78c100a6cda6e20ca7fdb0239c092486dbe0558fe12d00a907d726b6f5e38c9e6691c8de0c863d09eb8b009f834e0ac3f9a4138405028c7d377f4272c28c9097614a5ac591769b27cb2fd311fa2ca523ccdfcf839573bda6d1005a34330106dea71ff71b715d1e74ebba1e8fedb671696e03d0e64078c2f8203167273fdda4a10a72ed4f8b9035e12ec68906e6b920b370fe8408efac34a815394011209ef432747371cd4764b3f227ca19b1a1fe46014d0306670a3986012de18897ffd49b781883b4e04335761504de9cc270ee1bc5e23d2043a3123320242a3a2d6b5e9a7b05e770c39ab2d84fe107249440cafe4a0c839f675c9d9c1901dcb27f032e373b38258230b161aeff50b76a93afb1a7b8d1c39f3a4e753f7307ef82a495ff61e2d018db13a3ea17d53f65046fd1025faa3bf0302cdb3763f516552f2335dea05f2501a629bf7f405d6ed1ce93eeeeea9d17bd1c7694e1e0e204942c1dc2a538db35dc2a1b4618463b690f650e750275ff2f7aba3358c01dc08872802566a1ae32238079ebc3ffccc81bab29a8260b302b103ea2025213db18f37bafd736fde65683481a0bee188f203120ab42c38669001a85a8a132a3d2d91da23ec447fe05e9dc4f47f2b3fe8ae7d90b22f433404c25a9dab5c45612eb3a8293b7e352f1c94d8e490c3cd8a8ca6c78a4604ab179454fb106170d4753f5258b2e9149b8020b3d69464e7319033c1b596d60c6f3db286ca5496d4f27163dc078dc72de673c56ce246da5547d1396abdfe24fe4e728be321d75a1b427eacce17be0bdf77bf4a565bb83fe76ff5dbf6bdc528330f2d3580b73c52383a7057592ae99fa91894bcd635e1764ea1d77ed87e0b5b7c927e72b13bb8a6c0c4846c14e138fc55af201a1db91f759c7ba96c9094b891203737065a7d736047eee4f7c04485e1eec35b7a292756a033378ee3ba748c68ca903dc21b23553ccaf7eacbf60218c54de43c964112011a119ff5117bd943c312c7ab86774ecad35876b76f7aa19413261d2d7e25797972a40558bf31a010c9a9d9d72a53a4b1251fce90d50dfa6b8b681e9a5abbac222d35f71fa461df0a5e03347ff0358406fad58ac9f0469fde205609b8e5440f05929b1849e2b419e149ee3cd8302390b44b04867b034bad51a0fba4382a4c41a8d383c66ff3aaee99f75fdc1793eb2e95beb5a139b77c1478ed1875f290f9031f6f5d5e55504c54a182caa4230049f26fd52b35f5debf57762594dc889c9fc2c969d0ff6601c00b417ff965c51acdccbc12334fe1e8bdf5e7aac47e214d08ba87d5fc4fd2eacead516f10cda2054ba5092e1981558d03f3b75e44e4f3cb7568f5f6e13c7c5e7286f869ac9e1b8c8938bda45f9d91c11a02f156197ce28eb8af46599f886383e135642e9596d0303f3953a997d5431a4e795b1e3d09b83c82983661e4015782e82ff51fb790752a6c53f6ac3060243d463bf2e6a27314de8e0a7886260573787de751fd638a1e7b4fd1ba51e80c370d9aed556f8f0d596d09082188189f0311dac5f3664c03488d155ca319b808f5c24c5dd7be82e00cdb7a8f837cf045e4fb6d12ea755c4638896b4d99f451deb23167ca1bcf794e799ff280dcc51d0c7f608cad7c646407587bce671ce4bc5fac34198e1720f7a8b02b76860ca382292be896732e2ab9e1a3a1f4450cc0106c973c15a84cfa77a58a883b3d1b47cff0f03e0b1f4f33e0c357b5073e1fc6bb75a8814fbb835e08ccb8294598ae5a2008fa3265c294218d50833d0c2c0f9e48847033c8671742e1f111095795d996d116b8fd8edad215be7adbd36fd7c50159decd4d84f0e54303e436b64c7d7e084c2571a0169a0f15be4e098c2d58edd0fced74ee2a01fa881a810833e4c9445e5740bb78adbba6ff495637ad01ca3d4146a974111c46515b84e66df4293779e900c7ad579156bbdae302d0426f817a5907ca462b9b4b33407f053b7c8860e0350cabb1765b59140a0c417e9d20b6dbd14b981fbb0dee4e6808ac2194cd674aa0ab2c434712b375770d1f4c9b4a0c34c244cbe097fd1f6036a0ac82aca503a45a1e75ccd380b73b07aeaab5c47aab12468dc5cfaf857134d400795ff777c097f0c61177789c913b7cc3ddd785e601bae19a11f1a8284d6d689fbe9d9be784020bde1b7f4ed119d6280093f65cae50c3f31826a3ccf13629170aa236513c55deb63dd63d3fd48d5a81e12f60bfff0a21dda5ddf69ba317e0189290dcb23b63b28d69606166238e20901eeac1476d3862ec23aa5af9e208c9e4090182ca35483c1142ae3c5c31116608ec0a10da582fe3ba492504f393844d5e5df7e15e5ce807906e7b32b412ed3896ca8d707b5e42c2d83133a94c53a0b8930755ae87a5523ee4705ea9ea7101449a7b413936e16080f2a9a0ee9fa4ea62085719eab72acd89250829c75daae784bc8cd925edea4ef7f628d0b724adac86a446284ab84547603f42fd264c5d01d5a8eb58e52e6e84b54440624590f6a3b2231573f94e0bf2a54d1ac5fa881b5678274a436091d0e4542268655794e72e145ddd8b1c3189c9a883f41854aedc307a19ea62674d8f5c2c8a3bd6677cfb57eb535ea948b658ad5441d690005c5e47397d7915ddd8ee3af1fb01d99439dd3ac112813fe428dd46cf43f2ec97d9c4b41e785ed4d4e2920a4985f00ffbc15d165469ed22c05d47c6382fefcac52b9d92a9fbac57840eb74ab9048de3696cc60d654327d2b1653492912a18fcbc56f80a9ff1e94f02b051d2a3859de47fb620c25cd970d945627e6b4981ca57088ff650c5551b275c5a38952680ff5e555298ee2803c1b855be5eda840491da47027dc1a692e5c4c56b6f1128bbc752a8343a9b69ee450cedb285b935506093a968547c1acf32621f435a40b4fa08fb6de7977b8d18d3dce005a5754e72a82548d85c2225c2f8935f86dc9c003659b3c7ea1011147a833a69df0e174ce29ba34ef41e26c4af31362f3eb8138efe53c83838a9cbafd92c06b1c56ce036c01671287543a362d1a6878c92799139e76a96a9891ffddb292a9526114860b0776c2d4fc04ea7a845895dd2bf5769a3ddfdd65678338dbb3c9c7919bf6269c81264ef498ceaf6ad843df91a2eada77ec4c473e69e5fc1ee99037c0947f88df3e633ca40a0c786db48d381b39d82522592b6df5a9c1433bf134cfc85b9324035950c2202684fc174f2914233a3f111b2b5484b26aaa33664bdf8945c6acdae05991a613d29358f35e53f8e43df1316abdef15f235e42c68471d92d193a10d375cd23d05918cf2c3819f209cada54ad7b67535f59f684d2c67beb334b94de4ccb4323700014ebf5b9ffd37858c863c36b8d44e14435a7d049ea232a843b216d50a9b44e50538f21e2fa2c8ca882a9c112af356e161f9367f1406cb2b9165c22253dffcf3585c98a07b59b81d2b56d64faec5dc3aa3b282a0b06eed2143b5cabbb7a6e0e32a4bf6cfb34527a51f7fa6454d9fc091916c7bc093eb41211f7657ceb71b16c4dbb527e4a3d7dd86eab424213e3f62f8b9dc71bf0c86b93eefb63ba82055d8bfae83ebe2f5b7ad10b3d03fb44b378659ed875b514acc552a77846924bcba1f4a22ea543385dfcfb54ae4d6133a38d8a176deb8258a6be74e0c24a6ca87625f9ef19bf181b9f99357751df4764651b7932e1f6e73009d257b829b4d8a21d419a51d7b83b75ac40a0aebab5f7088295dbb43ab055d40efcc12aee719913dc10fe4998b1c29f8c5c327dde7bd66769952225f7df1c3ab6c70c924e07f843bad48e466231c92af9d3bc4995b25c687ef1b7a95596de049afff560e0dcaa47869f9cc7b861fcd93c3d1e00dc5eebaa0f42a646ec705f46274b043fcee831347b5b147e6cba3a9dbfb640a49b98af5456086af56da93d9764d2a3e9b70bf2b9700145ffda457f518a264e43365517988febb4043e65f9eacbd484906da6cc0da9a2b1f279cf13394295ef71552fb567003f9892f1e093dc3bca06335d2c4157677dce2aeef4c6cb2c3862126324600f5f558095f35d6e2b689c2eeeb9a204dc60972de172b37bd9c14c15fbb94b679dea687845050e2cf96e409d0b6c58cb8012f3d2f4e9b9e63b139d40904df52d78153b444c9c5f363478b9757c8eb1e1938b39fe3af52417363cb091e6f6eb835f971a2e74cb44f845062d1f5117d28d9f8bfef1cc955b50cdd80358bdc4a438379c77d3d27f88abd6fc66c1493239af856e5da309d60e535962b3e396e98ffae069d9613411c4bb7afa726f5700bdcddd44254de0bee7a0f332f6a559572c06df0743bb8118044086406c3a79afe21092069e2e68b39b613e3d36267c8ad20ba609a2cbc8ca35d851fd64a7e6d6c20b37186c8d53e5602ad15a0438a1759f40254d97095bf20af58f36c0276d862da6756ceb4068d4a18cb9a639976be2a4e6c854d625f66727d818af23f38e324b87334fef0a96fa48367af669953b58dd9c6f1d9d1b30e07c129cf9887e02eaba9da3ae1f1a6dfba46ad5ddae30c74bd61646bf047cd031dc5411088478bbabcf9d90a1317c063d06baa485b6dbda171edb103567a33c8ceb2f6fca993e373f6db814488ac17c94322838233ee4afb518a1192a8083aae8f2491a107f56219ed1c3b5b4f81fc365daffa54eb6cbf5095d164ccf0bde93878cec4bf328578625f1739d7ea41b63e304dd8cc35e6d16c88b8c1fd4bcd50ad912e188794175e554cc0677012e212882f4c388083e19338f8616613f7351eafd23079fa3fdfdefbd7848b0368386d391616c7fa575135dc29dc6266110ef7edede9c489e2ada0502bea2906b16c8afb58a611abe8e9548adf7b28772d871fc778e246244fcace2679a2503ecdbc7fa35a7473ed56baae1275ab9fcf92ea50dbb69dfc361fc9cea6950b286eddce5ef83ada6155d2e8021f7136d78091976710459f028f512c24832e2aeee04085c9cf6631642fd0b398c3c6cd5dd4f9cd75ddbca6690e198ab6351a6bc2c5318cb78cef02875cab2664d0d22316adfe36ceb086e2005d26e17e3d796fca23bc0c863eed85ac44f4be62c2a5e29000542868afc8eebc9e38497af407800ea6d87b6ab093c6c443c5cd85f755fac7050725232fd3e6fce0a679519f15d536a868d5410d2ae164a864947450bb4575003e2149ed7e1e7acdbeffeb34fd32fccb48f79a31a300cd98ec4a764d71e64bc3336ef92d58ddc6e8f66757c0ab92ecaf3f03c676ca26f7e767d9e2271a7bf629ae637b9f52b367e0efcc9310eddd016e8398789bf3823760d09587f8f5019075d03d35d176bc6554940acb27d7e46ad6703b070b93ad4f6828a5e1b15cf51bc8b1f393d1909000fcb6b1e2436da0073ec69fad2f24690344f226fe74977fd6b20cfe8fd451301310a336e021c9ab2e29c4be9a9f1c302a5bcae382ef2a2a72209eefd554f1e48155d8d831589e272719ac6cf1acd24c70ef8c8245cb7e1813b7af1229fad52468cb3927e7721491561687035b81decd3ae74c66cae67179a22665520eb9dbeea0962ddcf6d467f41c6042f55f793a57eaafb48f6b74edbf30479999a52b5fbc8761af4aa0c20ed8565da645f6287a915d4ac98a9f502212a6e3e45eb298a7432036c746d4b9aca67f5f621c9d92b519aebf3125a9bdec4f43137d7b866685b80b1a0d70e6b3e31e0842e25a388d7887684d3de995aba2005b985d8f027feddad19e32f7cb5a54ad33e8843197ee45047e56b765c357ee0d6f9929167b63cd21a0230dc0cd947fc0edb3816bf7caafb386e5f8a6555157a12bbfc12bcfdf3f1ebf7b87ef66b019190ab2a668bf3c8655145209709cf725fbfc20e72149ae533b5b8a7a43b85f3641de4443669e19fc5d8013f19df8b9962a3e554d56b4e163df2a61c8caa343553c9d5e33eb91fc3f883395548f9f9cb7f8f47189aba42868f7f623f92f8473f5fc6609c2034a38f124ff4c2f3542f6bdd5de5e83ca75ca0e767104c41b29b42558ba0eb9256bdd7a0beb85ca3c968ffe22a7be81ab091bb130e76cbe1c59a6efe91b8c0b17ac29665250f76583be579a2fe23bb0db88916a3f705eb595a9413d8eaf9b9b2306cca6e5c23978141ee5d64ad6e14c00d0e9a1ade46d234b75b135f07bf332a1b26ee6048170b995b9c2950f35bdf0b63d6d8714071bf0c4ce2d36c2779cfac837638d8e86e82068a1c2a535e2bca63a3950cc8652cb03ebb309982c39c2c094516e17567f4db178b850df0df4ea43d33bf0490f6d244ad2bec265c4530213e7f5d1128e3af5444bb9ce6dc85c3b4e084082e0c1dd0b6d86e83dc3df12a1dd7a577674d9e783a63ffa038c08b3151cecfd1f5c5af0387417a8568713ec6561de4b5498495ebd6a8e019b2ec87f2060c7df47cb1ba21961c110fe831a83e9b3e02544729cdf9bfc2a9047652030b426b0420ce5eeb400420646cc30f18c8881a7040323c78939e854e5cc53e47294fa4dbcae10c61b8a7f4ccdcb8c55aa39fee99386034f6c1593cc0862007903f96eb8073726f11f8fe1a0489de09e5218182943b5f5ef624504866f702d925ad52cfd48253d5e2db9dfecc2f56fd91e67ed3d287f544add0a30c743a11707c662d83bf81e8fb87a8c0d7f0d3710ccc175563b9eeaa3d0f566cba02416649184142ee2c734efd209c2e4aafbd3e8787a03a30e44c6d8f413e77b097e0d38bffff9c32729aab2d06361c65e9e31456a4cf77bba05fa7ddd6de2d66dd13e80c66839bb16c0af33c2aa27880ed257d7cb27b30cf2c31fcffeb0f7a9005dc8f7788c0c9458088d3b68c0d9ca819d8643cb29f3b870e83431e53be43584fc03a20e4f0f52f771137994cc4d5412090b250ef32cba652b36bafb4be6c616dcccee33142be5070545b6eabc2b32ec73f84c1b050e101be16e8a77e984139ff7e2ccc3da02f3a1bbaef4654e17daaec7adffdd2ef5f932caee0a0098a5cefed2994046ba6a68bd26ca2d39b80155a678789292fbf8038baade2311283321c741a247458ab22c93a925ffaaebe52a99cd5ad8dc2d7edc654554c376ba2a2a866da109ca34203ddd5e114d2bbf17d22f13173a7182c08e14964001321d15da7faf7e3e395590cab6ab4f0aeb01b8b4952f3602d4c97c20b0e8d33d6db8ef7342dc401f340775bc4c74a4e0ad0a1e7d913e21a709196a87ebcf7d6723eb6618c584298ef7e045dfb690458e211eaffbdedb84168e73b1ee9e4b095cd85236dc56ad38d3a42e53f39aadf6515c15ada8d71560e7711cc80c0b4c77e29686b955c334d8187cd02cbe5328c75c3e782b8b596c28d4594b5ca9f8a4de767e9f376cc07a1b9172712843b5e1dab5258a18f29cc95eefea7fb853fb432a1a994e4bcd5d0879f1958b6ab00bc2d0d042a00ad36a642241995ea3db70499e1562f0f06b9a0afbec32b15a7c258a83b3f12f9917ed7bdd7a2731215e665cb25c2b35f0df16d12a1f00d35bfc863325f97bbf2b94e7b6bf4a00afabcb68a14e20ff51cd58d8ab93c887e8f75fe7e5d7a5472f9d996f15c4b89a37ab8301134d99f4958628fc9e76e1a702dd91b096814dca84b2c5b7f7c994dbee5c00e5b00d22fc03f41ccc1c5b4a7fc82fc7af4d7ecc0700da45aeae8503fb583a45b7b97df50153beae05", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2m11.103967386s ago: executing program 3 (id=1122):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100))
ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0xa, 0xfe, 0x8001}]})
write$ppp(r0, &(0x7f0000000000)="2cd6", 0x2)

2m10.913799878s ago: executing program 3 (id=1128):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2m8.797062637s ago: executing program 3 (id=1151):
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000040)={0x0, 0x8, 0x60})

2m8.664527051s ago: executing program 3 (id=1153):
r0 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc2b02)
ioctl$CEC_ADAP_G_LOG_ADDRS(r0, 0x805c6103, &(0x7f0000000300))
r1 = syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000140)='./file1\x00', 0x1000c01, &(0x7f0000000040)=ANY=[], 0x5, 0x811, &(0x7f0000002380)="$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")
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1)
syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x800)
r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r3 = epoll_create1(0x0)
clock_gettime(0x0, &(0x7f0000000100)={<r4=>0x0, <r5=>0x0})
ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f0000000280)={0x0, 0x2, 0x4, 0x8, 0x2, {r4, r5/1000+10000}, {0x4, 0xc, 0x5, 0x1, 0x6, 0xff, "0be8c911"}, 0x90e5344, 0x4, {<r6=>0xffffffffffffffff}, 0xe, 0x0, r1})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f0000000040))
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_N2(r7, 0x103, 0x3, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000c40)={0x8000203d})
pipe2$9p(&(0x7f0000000240)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r9, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15)
r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r10)
ptrace(0x19, r10)
r11 = dup(r9)
read$FUSE(r11, &(0x7f0000004c00)={0x2020, 0x0, <r12=>0x0, 0x0, 0x0, <r13=>0x0}, 0x2020)
write$FUSE_BMAP(r11, &(0x7f0000000000)={0x18, 0x0, r12, {0xfffffffffffffffc}}, 0x18)
write$FUSE_DIRENTPLUS(r11, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r11, @ANYBLOB=',directio,access=user,cache=mmap,vession=9p2000,cache=none,version=9p2000.u,obj_type=trans=fd,,\x00'])
newfstatat(0xffffffffffffff9c, &(0x7f0000000e80)='./file1\x00', &(0x7f0000000f00), 0x800)
r14 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x200, 0x20, 0xa}, 0x18)
kcmp(r13, r10, 0x0, r9, r14)

2m8.047985961s ago: executing program 3 (id=1156):
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0xc, 0x4, 0x2, 0x1004}, 0x50)

2m7.735817453s ago: executing program 3 (id=1160):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0xe8}}, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000a40)={@local, @multicast, @val={@void}, {@ipv6={0x86dd, @udp={0x2, 0x6, "a341d0", 0x8, 0x11, 0x1, @private2, @dev={0xfe, 0x80, '\x00', 0x2e}, {[], {0x4e20, 0x4e23, 0x8}}}}}}, 0x0)

2m7.568678523s ago: executing program 36 (id=1160):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0xe8}}, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000a40)={@local, @multicast, @val={@void}, {@ipv6={0x86dd, @udp={0x2, 0x6, "a341d0", 0x8, 0x11, 0x1, @private2, @dev={0xfe, 0x80, '\x00', 0x2e}, {[], {0x4e20, 0x4e23, 0x8}}}}}}, 0x0)

40.557513362s ago: executing program 6 (id=1940):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000340)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@abort}, {@noload}, {@delalloc}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@bsdgroups}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x477, &(0x7f0000001380)="$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")
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9)
symlink(&(0x7f0000000440)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa1)
rename(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)

39.673036198s ago: executing program 6 (id=1941):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0xac, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x50, 0xe, {{{}, {}, @broadcast, @device_a, @random="13610680c4c9"}, 0x0, @default, 0x1, @void, @void, @void, @void, @val={0x6, 0x2, 0x5}, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x800, 0x2, 0x3, 0x0, {0xe, 0x6, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2}, 0x1, 0xc9b9, 0xb}}, @void, @void, @val={0x76, 0x6, {0x0, 0x1, 0x2b, 0x4}}}}, @NL80211_ATTR_BEACON_TAIL={0x28, 0xf, [@mesh_chsw={0x76, 0x6, {0x6, 0x3, 0x3f, 0x9}}, @ht={0x2d, 0x1a, {0x2000, 0x2, 0x6, 0x0, {0x2, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}, 0x1, 0x45, 0xd4}}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xf5c}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xac}}, 0x0)

39.020301827s ago: executing program 6 (id=1943):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x20, 0x0, 0x0)

38.959918119s ago: executing program 6 (id=1946):
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x818808, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1018000, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c})
chdir(&(0x7f00000001c0)='./file0\x00')
chdir(&(0x7f00000003c0)='./bus\x00')
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x1)
syz_mount_image$minix(&(0x7f0000000100), &(0x7f0000000a40)='./file1\x00', 0x2004010, &(0x7f0000001180)=ANY=[], 0x9, 0x1f2, &(0x7f00000004c0)="$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")
getdents64(r0, &(0x7f0000000180)=""/92, 0x5c)

38.779817797s ago: executing program 6 (id=1950):
r0 = socket$inet(0x2, 0x80001, 0x84)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000740)={'tunl0\x00', &(0x7f0000000700)={'erspan0\x00', 0x0, 0x700, 0x700, 0x4, 0xd5, {{0x5, 0x4, 0x2, 0x0, 0x14, 0x68, 0x0, 0x84, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}}}})

38.51060056s ago: executing program 6 (id=1955):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)="f89fcfb587a4792b", 0x8)

37.383469278s ago: executing program 37 (id=1955):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)="f89fcfb587a4792b", 0x8)

6.061839703s ago: executing program 8 (id=2301):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x25, 0x0, 0x40000000, {0x77359400}, {0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea})

5.899324508s ago: executing program 8 (id=2304):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2093}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}]}, 0x48}}, 0x20000000)

5.73086801s ago: executing program 8 (id=2309):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166}, 0x80)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x1, 0x8, 0xb}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r3, r2, 0x7}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x14}}, 0x0)
sendmsg$SOCK_DESTROY(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={0x0, 0xc3ec}}, 0x0)

5.551784395s ago: executing program 8 (id=2313):
syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000040)='./file2\x00', 0x800810, &(0x7f0000000840)=ANY=[@ANYBLOB="6e6f646f74732c6e6f646f74732c666c7573682c646f74732c666c7573682c636865636b3d72656c617865642c71756965742c6572726f72733d72656d6f756e742d726f2c6e6f646f74732c00b809a6ed6a11fd459311c6140e8fc5300da85a95aa4baee25ecaf74c5cbc6b1859889a3eefa76b125b44478c5d9df7ed620840988ed102de6bdb80347c0d7a22e428bc9b0c5cde00c4c0746c933fe95479447bdbc7ad9cdf0a2818932a48f56a08110dbb247eed43b3fcd06f3fe3271b983a7cdddd3e777fc3ed4e1018676eb3b7240e886b92de0fb08c4649c5dff139c5d52aa2efce92b1992a44726bc2148221de8fc839f8d265bd368ad972a7e05961bcb381eb8ba1e21ec8e57ddb6a3f2d938caae1d44478336dcba441194be678fa1a9cf58062e1b80b60879938283c85f681d6e4353aba860e7958f489e70148933574c3359f34f6aa3f0e2e6f44adcc35e9e8267d999a75b7cfd6c962350eadc8c910afc0a572729ccd07007626f08a2701da467af2faff7a4a24177b765f2669abdf555c0c626ca0198e92e1c7b48ab8002d8a15d9619c1b3c80d2a979be623b0d5c538f59b8235e2bf27ceea76a82cade017ecd56eef67302"], 0x1f, 0x249, &(0x7f0000000a00)="$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")
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x7, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c675bd9bffbcc2542ded71238259ca171ce1a311ef543dc137661d34f7c700", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204, 0x5]})
write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000180)={0x22, 0x3, 0x0, {0x6, 0x1, 0x0, '/'}}, 0x22)

5.229176686s ago: executing program 8 (id=2321):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000000)='./bus\x00', 0x200080, &(0x7f00000000c0)=ANY=[@ANYBLOB="73686f727461642c756e64656c6574652c73657373696f6e3d30303030000800003030303030303030303139302c6d6f64653d30303030303030303030303030303030303030303030352c726f6f746469723d30303030303030303030303030303030303030352c646d6f64653d30303030303030303030303030303030303030303030362c696f636861727365743d6370313235312c696f636861727365743d6b6f69382d722c6e6f7672732c0084f5b23d82aacbefd1de1daab7394a9b4696461da9ab46f2d71c895d8c"], 0xfc, 0xc41, &(0x7f0000001b80)="$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")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)

4.352008495s ago: executing program 8 (id=2324):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$qrtrtun(r0, &(0x7f0000000300)="05c164fd53fcb2e8", 0x8)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40)

4.155382657s ago: executing program 38 (id=2324):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$qrtrtun(r0, &(0x7f0000000300)="05c164fd53fcb2e8", 0x8)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40)

1.169037344s ago: executing program 5 (id=2357):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000487bc1e39dc038bc00000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f616400340002800800044000000000080005400000000d08000340000000610800024000000002080006400000000208000740000000080900010073797a30000000000900020073797a32"], 0x9c}}, 0x4)

1.168705369s ago: executing program 5 (id=2358):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r1 = socket$inet6(0xa, 0x3, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000007c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x40, 0x0}, @in6=@rand_addr=' \x01\x00', 0x4e22, 0x0, 0x0, 0x3, 0x2}, {0x7, 0x200000000, 0x40000000007, 0x20000a0de, 0x100000000, 0x4, 0x200000003, 0x9}, {0x5}, 0x1, 0x0, 0x1, 0x0, 0x6, 0x3}, {{@in6=@remote, 0x0, 0x6c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x19}, 0x3502, 0x1, 0x8, 0x0, 0x9075}}, 0xe8)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c)

1.078792214s ago: executing program 7 (id=2359):
timer_create(0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xdp_exception\x00', r0}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffff801}, 0x94)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, r3}, 0x40)
syz_emit_ethernet(0xfef3, &(0x7f00000004c0)=ANY=[], 0x0)

1.078504387s ago: executing program 5 (id=2360):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x32)
ioprio_get$pid(0x3, 0x0)

369.014282ms ago: executing program 7 (id=2361):
mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xe)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000000)=0x9, 0x4, 0x0)
mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)

368.731446ms ago: executing program 7 (id=2362):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r0, 0x560e, &(0x7f0000000000))
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5})

241.589957ms ago: executing program 7 (id=2363):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x4, 0x4)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8)
recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

181.505326ms ago: executing program 5 (id=2364):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e22}]}}}]}, 0x44}}, 0x0)

144.559164ms ago: executing program 7 (id=2365):
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x145040, 0x0)

73.614675ms ago: executing program 5 (id=2366):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x7a}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

365.309µs ago: executing program 5 (id=2367):
r0 = socket$kcm(0xa, 0x1, 0x106)
r1 = io_uring_setup(0x30df, &(0x7f0000000000)={0x0, 0x54cd, 0x800, 0x0, 0x1d})
close_range(r1, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000340)=@in6={0xa, 0x4001, 0xfffffffd, @loopback={0x0, 0x7ffffffe}}, 0x80, 0x0}, 0x20000001)

0s ago: executing program 7 (id=2368):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xc000, &(0x7f0000000380), 0x2, 0x24d, &(0x7f0000000440)="$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")
symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
symlink(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f00000002c0)='.\x02\x00')

kernel console output (not intermixed with test programs):

7]  ? __switch_to_asm+0x33/0x70
[  242.205015][ T6507]  ? __pfx_kthread+0x10/0x10
[  242.205034][ T6507]  ret_from_fork_asm+0x1a/0x30
[  242.205067][ T6507]  </TASK>
[  242.205073][ T6507] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  242.354381][ T9997] loop7: detected capacity change from 0 to 512
[  242.374862][ T9999] loop6: detected capacity change from 0 to 512
[  242.415025][ T9999] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  242.438818][ T9999] EXT4-fs (loop6): 1 truncate cleaned up
[  242.442017][ T9999] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  242.520084][T10002] loop7: detected capacity change from 0 to 2048
[  242.523608][T10002] EXT4-fs: Ignoring removed bh option
[  242.549938][ T9107] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.557685][T10002] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  242.614679][   T33] audit: type=1804 audit(1755041313.570:71): pid=10002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1376" name="/newroot/49/file1/file1" dev="loop7" ino=15 res=1 errno=0
[  242.669610][ T9367] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.985883][    T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  243.128256][T10034] loop7: detected capacity change from 0 to 64
[  243.141517][    T9] usb 7-1: Using ep0 maxpacket: 32
[  243.150422][    T9] usb 7-1: config 0 has an invalid interface number: 184 but max is 0
[  243.153676][    T9] usb 7-1: config 0 has no interface number 0
[  243.162339][    T9] usb 7-1: config 0 interface 184 has no altsetting 0
[  243.179143][    T9] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  243.183070][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.188859][    T9] usb 7-1: Product: syz
[  243.190662][    T9] usb 7-1: Manufacturer: syz
[  243.192550][    T9] usb 7-1: SerialNumber: syz
[  243.198085][    T9] usb 7-1: config 0 descriptor??
[  243.204436][    T9] smsc75xx v1.0.0
[  243.392655][T10039] loop7: detected capacity change from 0 to 1024
[  243.409255][T10039] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  243.411344][    T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71
[  243.417075][T10039] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  243.433317][    T9] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71
[  243.441290][   T26] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm kworker/u9:0: bg 0: block 393: padding at end of block bitmap is not set
[  243.454797][    T9] usb 7-1: USB disconnect, device number 8
[  243.465594][   T26] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 28
[  243.472461][   T26] EXT4-fs (loop7): This should not happen!! Data will be lost
[  243.472461][   T26] 
[  243.477663][   T26] EXT4-fs (loop7): Total free blocks count 0
[  243.480089][   T26] EXT4-fs (loop7): Free/Dirty block details
[  243.482467][   T26] EXT4-fs (loop7): free_blocks=0
[  243.484539][   T26] EXT4-fs (loop7): dirty_blocks=16
[  243.487029][   T26] EXT4-fs (loop7): Block reservation details
[  243.489398][   T26] EXT4-fs (loop7): i_reserved_data_blocks=1
[  243.494566][ T9367] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.551865][T10043] mmap: syz.7.1392 (10043) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  243.877502][ T9465] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  243.969736][T10052] loop6: detected capacity change from 0 to 512
[  243.973915][T10052] EXT4-fs (loop6): external journal device major/minor numbers have changed
[  244.007989][T10052] block device autoloading is deprecated and will be removed.
[  244.011219][T10052] syz.6.1396: attempt to access beyond end of device
[  244.011219][T10052] md185: rw=0, sector=2, nr_sectors = 2 limit=0
[  244.015265][T10052] EXT4-fs (loop6): couldn't read superblock of external journal
[  244.025845][ T9465] usb 8-1: Using ep0 maxpacket: 16
[  244.029411][ T9465] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  244.035823][ T9465] usb 8-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[  244.042460][ T9465] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.049232][ T9465] usb 8-1: Product: syz
[  244.050707][ T9465] usb 8-1: Manufacturer: syz
[  244.053358][ T9465] usb 8-1: SerialNumber: syz
[  244.059662][ T9465] usb 8-1: config 0 descriptor??
[  244.064439][ T9465] hub 8-1:0.0: bad descriptor, ignoring hub
[  244.067239][ T9465] hub 8-1:0.0: probe with driver hub failed with error -5
[  244.071220][ T9465] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[  244.110037][ T9465] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -2
[  244.141958][   T33] audit: type=1800 audit(1755041315.101:72): pid=10054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1397" name="/" dev="9p" ino=720898 res=0 errno=0
[  244.167912][ T6322] udevd[6322]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  244.385890][ T2306] usb 8-1: USB disconnect, device number 4
[  244.670015][T10073] binder: 10072:10073 ioctl c0306201 2000000003c0 returned -22
[  244.858939][T10075] syz.6.1403: attempt to access beyond end of device
[  244.858939][T10075] nbd6: rw=0, sector=2, nr_sectors = 2 limit=0
[  244.869269][T10075] syz.6.1403: attempt to access beyond end of device
[  244.869269][T10075] nbd6: rw=0, sector=16, nr_sectors = 2 limit=0
[  245.181484][T10093] loop7: detected capacity change from 0 to 8
[  245.408895][T10106] loop5: detected capacity change from 0 to 64
[  245.794070][T10119] loop5: detected capacity change from 0 to 32768
[  245.796598][ T5954] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  245.813032][T10119] XFS (loop5): DAX unsupported by block device. Turning off DAX.
[  245.824211][T10119] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  245.837328][T10119] XFS (loop5): Ending clean mount
[  245.848734][T10119] XFS (loop5): Quotacheck needed: Please wait.
[  245.886280][T10119] XFS (loop5): Quotacheck: Done.
[  245.935553][ T5954] usb 7-1: device descriptor read/64, error -71
[  245.937602][    T9] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  245.979140][ T7804] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  246.119674][    T9] usb 8-1: config 3 has an invalid interface number: 238 but max is 0
[  246.122963][    T9] usb 8-1: config 3 has no interface number 0
[  246.135933][    T9] usb 8-1: config 3 interface 238 has no altsetting 0
[  246.168822][    T9] usb 8-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=92.99
[  246.175172][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.178728][    T9] usb 8-1: Product: syz
[  246.180401][    T9] usb 8-1: Manufacturer: syz
[  246.182031][    T9] usb 8-1: SerialNumber: syz
[  246.185482][ T5954] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  246.280331][T10137] loop5: detected capacity change from 0 to 1024
[  246.283922][T10137] EXT4-fs: Ignoring removed orlov option
[  246.287978][T10137] EXT4-fs: Ignoring removed mblk_io_submit option
[  246.291843][T10137] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  246.315649][ T5954] usb 7-1: device descriptor read/64, error -71
[  246.337651][T10137] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  246.391064][ T7804] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  246.404131][    T9] usb 8-1: unsupported MDLM descriptors
[  246.418726][    T9] usb 8-1: USB disconnect, device number 5
[  246.429192][ T5954] usb usb7-port1: attempt power cycle
[  246.775806][ T5954] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  246.797829][ T5954] usb 7-1: device descriptor read/8, error -71
[  247.035420][ T5954] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  247.057491][ T5954] usb 7-1: device descriptor read/8, error -71
[  247.175569][ T5954] usb usb7-port1: unable to enumerate USB device
[  247.469506][T10153] loop7: detected capacity change from 0 to 4096
[  247.510469][T10154] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  247.559005][T10153] NILFS error (device loop7): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  247.573801][T10153] Remounting filesystem read-only
[  247.789388][T10159] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1440'.
[  247.891074][T10167] netlink: 'syz.5.1443': attribute type 29 has an invalid length.
[  247.898774][T10167] netlink: 'syz.5.1443': attribute type 29 has an invalid length.
[  249.176467][ T5910] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  249.335111][ T5910] usb 7-1: Using ep0 maxpacket: 8
[  249.341690][ T5910] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  249.356143][ T5910] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  249.360337][ T5910] usb 7-1: config 1 has no interface number 1
[  249.363037][ T5910] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  249.373777][ T5910] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  249.382496][ T5910] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.386254][ T5910] usb 7-1: Product: syz
[  249.388045][ T5910] usb 7-1: Manufacturer: syz
[  249.390180][ T5910] usb 7-1: SerialNumber: syz
[  249.719872][ T5910] usb 7-1: 2:1: invalid format type 0xbd67 is detected, processed as PCM
[  249.729444][ T5910] usb 7-1: 2:1: cannot set freq 9540521 to ep 0x82
[  249.784727][ T5910] usb 7-1: USB disconnect, device number 13
[  249.873249][ T5857] udevd[5857]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  250.057213][T10201] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  251.467176][T10255] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1479'.
[  251.635992][ T5954] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  251.787982][ T5954] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  251.791022][ T5954] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  251.793574][ T5954] usb 7-1: Product: syz
[  251.804716][ T5954] usb 7-1: Manufacturer: syz
[  251.806295][ T5954] usb 7-1: SerialNumber: syz
[  251.810036][ T5954] usb 7-1: config 0 descriptor??
[  251.877243][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: Read-only file system
[  251.924895][ T9013] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  252.031146][ T5910] usb 7-1: USB disconnect, device number 14
[  252.112048][ T9013] usb 6-1: Using ep0 maxpacket: 8
[  252.121946][ T9013] usb 6-1: config 36 has an invalid interface number: 44 but max is 0
[  252.125538][ T2306] libceph: connect (1)[c::]:6789 error -101
[  252.128842][ T2306] libceph: mon0 (1)[c::]:6789 connect error
[  252.131334][ T9013] usb 6-1: config 36 has an invalid interface descriptor of length 2, skipping
[  252.135107][ T9013] usb 6-1: config 36 has no interface number 0
[  252.137979][ T9013] usb 6-1: config 36 interface 44 has no altsetting 0
[  252.146677][ T9013] usb 6-1: New USB device found, idVendor=0711, idProduct=0902, bcdDevice=ad.ea
[  252.150732][ T9013] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.153993][ T9013] usb 6-1: Product: syz
[  252.156190][ T9013] usb 6-1: Manufacturer: syz
[  252.158094][ T9013] usb 6-1: SerialNumber: syz
[  252.201451][T10265] ceph: No mds server is up or the cluster is laggy
[  252.382086][ T9013] sisusb 6-1:36.44: Invalid USB2VGA device
[  252.384724][ T9013] sisusb 6-1:36.44: probe with driver sisusb failed with error -22
[  252.390731][ T9013] usb 6-1: USB disconnect, device number 11
[  252.985028][T10277] loop5: detected capacity change from 0 to 1024
[  252.988907][T10277] EXT4-fs: Ignoring removed nobh option
[  253.026273][T10277] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  253.136926][T10283] loop6: detected capacity change from 0 to 16
[  253.163551][T10283] erofs (device loop6): mounted with root inode @ nid 36.
[  253.583461][T10272] loop7: detected capacity change from 0 to 32768
[  253.606685][T10272] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1486 (10272)
[  253.702330][T10272] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  253.725424][T10272] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm
[  253.729099][T10272] BTRFS info (device loop7): disk space caching is enabled
[  253.732070][T10272] BTRFS warning (device loop7): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  254.013379][T10272] BTRFS info (device loop7): rebuilding free space tree
[  254.195400][T10272] BTRFS info (device loop7): disabling free space tree
[  254.203446][T10272] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  254.213633][T10272] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  254.770266][ T7804] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.802819][T10309] loop6: detected capacity change from 0 to 40427
[  254.817873][T10309] F2FS-fs (loop6): invalid crc value
[  254.892075][T10309] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  254.897597][T10309] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  254.901271][ T9367] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  254.979689][T10317] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  255.402896][T10325] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  255.458833][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  255.461163][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  255.497856][T10320] loop5: detected capacity change from 0 to 32768
[  255.505725][T10329] loop6: detected capacity change from 0 to 256
[  255.508344][T10329] exfat: Unknown parameter ''
[  256.429808][T10337] loop5: detected capacity change from 0 to 32768
[  256.437564][T10337] XFS: ikeep mount option is deprecated.
[  256.454332][    T9] usb 8-1: new full-speed USB device number 6 using dummy_hcd
[  256.477865][T10337] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  256.526306][T10337] XFS (loop5): Ending clean mount
[  256.531406][T10337] XFS (loop5): Quotacheck needed: Please wait.
[  256.591902][T10337] XFS (loop5): Quotacheck: Done.
[  256.607593][    T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  256.615538][    T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  256.626079][    T9] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  256.629598][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.638763][    T9] usb 8-1: Product: syz
[  256.643208][    T9] usb 8-1: Manufacturer: syz
[  256.645434][    T9] usb 8-1: SerialNumber: syz
[  256.758617][ T7804] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  256.882631][    T9] usb 8-1: 0:2 : does not exist
[  256.898817][    T9] usb 8-1: 5:0: failed to get current value for ch 0 (-22)
[  256.985147][T10363] overlayfs: invalid redirect (./file0)
[  256.993708][    T9] usb 8-1: USB disconnect, device number 6
[  257.087019][ T6322] udevd[6322]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  257.342211][T10373] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.1515'.
[  257.544172][ T5858] Bluetooth: hci0: command 0x0406 tx timeout
[  257.700766][T10381] netlink: 176 bytes leftover after parsing attributes in process `syz.7.1519'.
[  257.802629][T10375] loop5: detected capacity change from 0 to 32768
[  257.822501][T10375] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1516 (10375)
[  257.830756][T10365] loop6: detected capacity change from 0 to 131072
[  257.837566][T10365] F2FS-fs (loop6): invalid crc value
[  257.901711][T10365] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  257.902242][T10375] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  257.907146][T10365] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  257.934209][T10375] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  257.937004][T10375] BTRFS info (device loop5): using free-space-tree
[  258.093238][   T33] audit: type=1800 audit(1755041329.052:73): pid=10375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1516" name="bus" dev="loop5" ino=263 res=0 errno=0
[  258.181558][ T7804] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  258.219838][T10389] loop7: detected capacity change from 0 to 40427
[  258.229558][T10389] F2FS-fs (loop7): build fault injection rate: 771
[  258.255825][T10389] F2FS-fs (loop7): invalid crc value
[  258.372958][T10389] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  258.408542][T10389] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  258.514675][ T9367] syz-executor: attempt to access beyond end of device
[  258.514675][ T9367] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  258.522684][ T9367] CPU: 0 UID: 0 PID: 9367 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  258.522708][ T9367] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  258.522716][ T9367] Call Trace:
[  258.522723][ T9367]  <TASK>
[  258.522730][ T9367]  dump_stack_lvl+0x189/0x250
[  258.522756][ T9367]  ? __pfx_dump_stack_lvl+0x10/0x10
[  258.522770][ T9367]  ? __pfx_queue_work_on+0x10/0x10
[  258.522782][ T9367]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  258.522797][ T9367]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  258.522819][ T9367]  f2fs_handle_critical_error+0x37c/0x540
[  258.522843][ T9367]  f2fs_write_end_io+0x886/0xb60
[  258.522875][ T9367]  __submit_merged_bio+0x27a/0x6a0
[  258.522896][ T9367]  __submit_merged_write_cond+0x255/0x530
[  258.522918][ T9367]  f2fs_write_data_pages+0x261d/0x3000
[  258.522965][ T9367]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  258.523017][ T9367]  ? __mod_zone_page_state+0xd7/0x140
[  258.523044][ T9367]  ? folios_put_refs+0x560/0x640
[  258.523069][ T9367]  ? __lock_acquire+0xab9/0xd20
[  258.523096][ T9367]  ? do_raw_spin_lock+0x121/0x290
[  258.523129][ T9367]  ? do_raw_spin_unlock+0x4d/0x240
[  258.523143][ T9367]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  258.523160][ T9367]  do_writepages+0x32e/0x550
[  258.523189][ T9367]  ? do_raw_spin_unlock+0x4d/0x240
[  258.523208][ T9367]  filemap_fdatawrite+0x199/0x240
[  258.523227][ T9367]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  258.523286][ T9367]  ? do_raw_spin_unlock+0x4d/0x240
[  258.523305][ T9367]  f2fs_sync_dirty_inodes+0x31f/0x830
[  258.523338][ T9367]  f2fs_write_checkpoint+0x95a/0x1df0
[  258.523406][ T9367]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  258.523459][ T9367]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  258.523477][ T9367]  ? kfree+0x18e/0x440
[  258.523494][ T9367]  ? kill_f2fs_super+0x298/0x6c0
[  258.523518][ T9367]  kill_f2fs_super+0x2c3/0x6c0
[  258.523541][ T9367]  ? __pfx_kill_f2fs_super+0x10/0x10
[  258.523557][ T9367]  ? radix_tree_delete_item+0x2b6/0x400
[  258.523582][ T9367]  ? shrinker_free+0x2ce/0x3e0
[  258.523599][ T9367]  deactivate_locked_super+0xbc/0x130
[  258.523618][ T9367]  cleanup_mnt+0x425/0x4c0
[  258.523635][ T9367]  ? lockdep_hardirqs_on+0x9c/0x150
[  258.523655][ T9367]  task_work_run+0x1d4/0x260
[  258.523679][ T9367]  ? __pfx_task_work_run+0x10/0x10
[  258.523695][ T9367]  ? __x64_sys_umount+0x122/0x160
[  258.523717][ T9367]  ? exit_to_user_mode_loop+0x40/0x110
[  258.523741][ T9367]  exit_to_user_mode_loop+0xec/0x110
[  258.523760][ T9367]  do_syscall_64+0x2bd/0x3b0
[  258.523777][ T9367]  ? lockdep_hardirqs_on+0x9c/0x150
[  258.523791][ T9367]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.523825][ T9367]  ? exc_page_fault+0x9f/0xf0
[  258.523841][ T9367]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.523853][ T9367] RIP: 0033:0x7f2a1298ff17
[  258.523867][ T9367] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  258.523880][ T9367] RSP: 002b:00007ffda12cbed8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  258.523894][ T9367] RAX: 0000000000000000 RBX: 00007f2a12a11c05 RCX: 00007f2a1298ff17
[  258.523903][ T9367] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda12cbf90
[  258.523911][ T9367] RBP: 00007ffda12cbf90 R08: 0000000000000000 R09: 0000000000000000
[  258.523919][ T9367] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffda12cd020
[  258.523927][ T9367] R13: 00007f2a12a11c05 R14: 000000000003f152 R15: 00007ffda12cd060
[  258.523951][ T9367]  </TASK>
[  258.660990][ T9367] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  259.365433][T10420] loop7: detected capacity change from 0 to 32768
[  259.425670][T10422] loop6: detected capacity change from 0 to 32768
[  259.435851][T10422] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1527 (10422)
[  259.449167][T10422] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  259.453088][T10422] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm
[  259.457678][T10422] BTRFS info (device loop6): using free-space-tree
[  259.526796][T10420] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  259.597715][T10420] XFS (loop7): Ending clean mount
[  259.612407][T10420] XFS (loop7): Quotacheck needed: Please wait.
[  259.708939][T10420] XFS (loop7): Quotacheck: Done.
[  259.793327][ T9367] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  259.816087][ T9107] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  260.249878][T10450] loop5: detected capacity change from 0 to 32768
[  260.252190][T10458] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1532'.
[  260.253432][T10450] XFS: ikeep mount option is deprecated.
[  260.276424][T10457] loop6: detected capacity change from 0 to 16
[  260.281541][T10457] MTD: Attempt to mount non-MTD device "/dev/loop6"
[  260.422099][T10450] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  260.526172][T10450] XFS (loop5): Ending clean mount
[  260.534233][T10450] XFS (loop5): Quotacheck needed: Please wait.
[  260.546283][T10472] loop6: detected capacity change from 0 to 512
[  260.549758][T10472] EXT4-fs: Ignoring removed mblk_io_submit option
[  260.576089][T10472] EXT4-fs: inline encryption not supported
[  260.576691][T10450] XFS (loop5): Quotacheck: Done.
[  260.579686][T10472] EXT4-fs: Ignoring removed mblk_io_submit option
[  260.609726][T10472] EXT4-fs (loop6): Test dummy encryption mode enabled
[  260.612565][T10472] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  260.623672][   T33] audit: type=1800 audit(1755041331.573:74): pid=10450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1529" name="file1" dev="loop5" ino=9286 res=0 errno=0
[  260.680290][T10472] EXT4-fs (loop6): 1 truncate cleaned up
[  260.690156][T10472] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  260.773275][ T9107] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.815599][T10478] loop7: detected capacity change from 0 to 8
[  260.899873][T10478] SQUASHFS error: Corrupted symlink
[  260.936055][ T5296] udevd[5296]: worker [6322] terminated by signal 33 (Unknown signal 33)
[  260.939546][ T5296] udevd[5296]: worker [6322] failed while handling '/devices/virtual/block/loop6'
[  261.065574][ T7804] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  261.392646][T10496] tipc: Can't bind to reserved service type 2
[  261.419860][T10498] loop5: detected capacity change from 0 to 1024
[  261.424269][T10498] EXT4-fs: inline encryption not supported
[  261.427288][T10498] EXT4-fs (loop5): inodes count not valid: 32 vs 4
[  261.604562][T10509] loop7: detected capacity change from 0 to 16
[  261.637507][T10509] erofs (device loop7): mounted with root inode @ nid 36.
[  261.859096][T10513] loop6: detected capacity change from 0 to 32768
[  261.864890][T10513] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1555 (10513)
[  261.880210][T10513] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  261.884552][T10513] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm
[  261.887882][T10513] BTRFS info (device loop6): using free-space-tree
[  261.903001][T10518] vxcan3: entered allmulticast mode
[  262.684356][ T9107] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  262.878695][T10544] loop7: detected capacity change from 0 to 32768
[  262.987861][   T33] audit: type=1800 audit(1755041333.953:75): pid=10544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1562" name="file1" dev="loop7" ino=7 res=0 errno=0
[  263.253546][ T5954] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  263.413445][ T5954] usb 7-1: Using ep0 maxpacket: 8
[  263.419646][ T5954] usb 7-1: config index 0 descriptor too short (expected 30, got 18)
[  263.426579][ T5954] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  263.430144][ T5954] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  263.433117][ T5954] usb 7-1: Product: syz
[  263.437351][ T5954] usb 7-1: Manufacturer: syz
[  263.439254][ T5954] usb 7-1: SerialNumber: syz
[  263.446058][ T5954] usb 7-1: config 0 descriptor??
[  263.456745][ T5954] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  263.460078][ T5954] usb 7-1: setting power ON
[  263.461922][ T5954] dvb-usb: bulk message failed: -22 (2/0)
[  263.467164][ T5954] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  263.471566][ T5954] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  263.477372][ T5954] usb 7-1: media controller created
[  263.497465][ T5954] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  263.515397][ T5954] usb 7-1: selecting invalid altsetting 6
[  263.517731][ T5954] usb 7-1: digital interface selection failed (-22)
[  263.520351][ T5954] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  263.525115][ T5954] usb 7-1: setting power OFF
[  263.527053][ T5954] dvb-usb: bulk message failed: -22 (2/0)
[  263.529377][ T5954] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  263.533028][ T5954] (NULL device *): no alternate interface
[  263.560774][ T5954] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  263.658557][ T5954] usb 7-1: USB disconnect, device number 15
[  263.690093][T10559] loop7: detected capacity change from 0 to 32768
[  263.773389][T10559] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[  263.773418][T10559]   allowing incompatible features above 0.0: (unknown version)
[  263.773429][T10559]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  263.791057][T10559] bcachefs (loop7): Using encoding defined by superblock: utf8-12.1.0
[  263.794623][T10559] bcachefs (loop7): recovering from clean shutdown, journal seq 10
[  263.797944][T10559] bcachefs (loop7): dropping and reconstructing all alloc info
[  263.822334][T10559] bcachefs (loop7): invalid bkey in btree_node btree=extents level=0: u64s 7 type extent 4099:8:U32_MAX len 8 ver 0: durability: 1 crc: c_size 8 size 8 offset 7 nonce 0 csum none 0:0  compress none ptr: 0:34:0 gen 0
[  263.822408][T10559]   checksum offset + key size > uncompressed size, deleting
[  263.842214][T10559] bcachefs (loop7): invalid bkey in btree_node btree=inodes level=0: u64s 18 type inode_v3 0:4100:U32_MAX len 0 ver 0: (unpack error)
[  263.842237][T10559]   invalid variable length fields, deleting
[  263.855576][T10559] bcachefs (loop7): accounting_read... done
[  263.862720][T10559] bcachefs (loop7): alloc_read... done
[  263.866055][T10559] bcachefs (loop7): snapshots_read... done
[  263.869475][T10559] bcachefs (loop7): check_allocations...
[  263.888499][T10559] bcachefs (loop7): btree ptr not marked in member info btree allocated bitmap
[  263.888566][T10559]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing
[  263.915543][T10559] bcachefs (loop7): btree ptr not marked in member info btree allocated bitmap
[  263.915567][T10559]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing
[  263.931721][T10559] bcachefs (loop7): btree ptr not marked in member info btree allocated bitmap
[  263.931752][T10559]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing
[  263.946851][T10559] bcachefs (loop7): btree ptr not marked in member info btree allocated bitmap
[  263.946873][T10559]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing
[  263.980341][T10559]  done
[  263.984822][T10559] bcachefs (loop7): going read-write
[  263.987229][T10559] bcachefs (loop7): insufficient writeable journal devices available: have 0, need 1
[  263.987229][T10559] rw journal devs:
[  264.022727][T10559] bcachefs (loop7): Fixed errors, running fsck a second time to verify fs is clean
[  264.032294][T10559] bcachefs (loop7): done starting filesystem
[  264.116508][T10576] loop5: detected capacity change from 0 to 764
[  264.134995][T10576] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  264.160635][ T9367] bcachefs (loop7): shutting down
[  264.162755][ T9367] bcachefs (loop7): going read-only
[  264.165494][ T9367] bcachefs (loop7): finished waiting for writes to stop
[  264.180285][ T9367] bcachefs (loop7): flushing journal and stopping allocators, journal seq 10
[  264.185628][ T9367] bcachefs (loop7): flushing journal and stopping allocators complete, journal seq 10
[  264.188818][ T9367] bcachefs (loop7): unclean shutdown complete, journal seq 10
[  264.196043][ T9367] bcachefs (loop7): done going read-only, filesystem not clean
[  264.229252][ T9367] bcachefs (loop7): shutdown complete
[  264.421340][T10588] loop6: detected capacity change from 0 to 256
[  264.730198][T10591] befs: (nullb0): invalid magic header
[  265.508050][T10604] loop5: detected capacity change from 0 to 8
[  265.547906][   T33] audit: type=1800 audit(1755041336.513:76): pid=10604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1584" name="file1" dev="loop5" ino=5 res=0 errno=0
[  265.713083][ T5954] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  265.863209][ T5954] usb 7-1: Using ep0 maxpacket: 16
[  265.867774][ T5954] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  265.872007][ T5954] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22
[  265.880422][ T5954] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  265.884580][ T5954] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  265.889044][ T5954] usb 7-1: SerialNumber: syz
[  267.037261][T10629] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1594'.
[  267.108924][T10631] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1595'.
[  267.113621][T10631] netlink: 152 bytes leftover after parsing attributes in process `syz.7.1595'.
[  267.128314][T10631] netlink: 152 bytes leftover after parsing attributes in process `syz.7.1595'.
[  267.205185][ T9013] hid-generic 0005:0C45:1010.000B: item fetching failed at offset 0/1
[  267.209975][ T9013] hid-generic 0005:0C45:1010.000B: probe with driver hid-generic failed with error -22
[  268.113571][T10653] netlink: 'syz.7.1605': attribute type 5 has an invalid length.
[  268.208980][T10657] loop7: detected capacity change from 0 to 128
[  268.306963][ T9013] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  268.465617][ T9013] usb 6-1: config 2 has an invalid interface number: 181 but max is 0
[  268.478898][ T9013] usb 6-1: config 2 has no interface number 0
[  268.481978][ T9013] usb 6-1: config 2 interface 181 has no altsetting 0
[  268.491565][ T9013] usb 6-1: New USB device found, idVendor=1776, idProduct=501c, bcdDevice=7e.08
[  268.504341][ T9013] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.515997][ T9013] usb 6-1: Product: syz
[  268.520369][ T9013] usb 6-1: Manufacturer: syz
[  268.527872][ T9013] usb 6-1: SerialNumber: syz
[  268.584787][ T9013] gspca_main: spca501-2.14.0 probing 1776:501c
[  268.665452][ T5954] usb 7-1: USB disconnect, device number 16
[  268.772970][ T9013] gspca_spca501: reg write: error -71
[  268.781388][ T9013] spca501 6-1:2.181: Reg write failed for 0x02,0x07,0x05
[  268.805910][ T9013] spca501 6-1:2.181: probe with driver spca501 failed with error -22
[  268.837985][ T9013] usb 6-1: USB disconnect, device number 12
[  269.019284][T10665] loop6: detected capacity change from 0 to 256
[  269.043182][ T5853] Bluetooth: hci1: command tx timeout
[  269.087404][T10665] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  269.218021][   T68] kworker/u10:2: attempt to access beyond end of device
[  269.218021][   T68] loop7: rw=1, sector=153, nr_sectors = 8 limit=128
[  269.232244][   T68] kworker/u10:2: attempt to access beyond end of device
[  269.232244][   T68] loop7: rw=1, sector=169, nr_sectors = 8 limit=128
[  269.243763][   T68] kworker/u10:2: attempt to access beyond end of device
[  269.243763][   T68] loop7: rw=1, sector=185, nr_sectors = 8 limit=128
[  269.249243][   T68] kworker/u10:2: attempt to access beyond end of device
[  269.249243][   T68] loop7: rw=1, sector=201, nr_sectors = 8 limit=128
[  269.257084][   T68] kworker/u10:2: attempt to access beyond end of device
[  269.257084][   T68] loop7: rw=1, sector=217, nr_sectors = 8 limit=128
[  269.262471][   T68] kworker/u10:2: attempt to access beyond end of device
[  269.262471][   T68] loop7: rw=1, sector=233, nr_sectors = 8 limit=128
[  269.268293][   T68] kworker/u10:2: attempt to access beyond end of device
[  269.268293][   T68] loop7: rw=1, sector=249, nr_sectors = 8 limit=128
[  269.273911][   T68] kworker/u10:2: attempt to access beyond end of device
[  269.273911][   T68] loop7: rw=1, sector=265, nr_sectors = 8 limit=128
[  269.279430][   T68] kworker/u10:2: attempt to access beyond end of device
[  269.279430][   T68] loop7: rw=1, sector=281, nr_sectors = 8 limit=128
[  269.285379][   T68] kworker/u10:2: attempt to access beyond end of device
[  269.285379][   T68] loop7: rw=1, sector=297, nr_sectors = 8 limit=128
[  269.417161][T10673] loop5: detected capacity change from 0 to 1024
[  269.470336][T10679] loop7: detected capacity change from 0 to 128
[  269.483116][   T28] hfsplus: b-tree write err: -5, ino 4
[  269.544658][T10682] loop5: detected capacity change from 0 to 8
[  269.612300][T10682] SQUASHFS error: lzo decompression failed, data probably corrupt
[  269.625190][   T96] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  269.636075][T10682] SQUASHFS error: Failed to read block 0x144: -5
[  269.639251][T10682] SQUASHFS error: Unable to read metadata cache entry [142]
[  269.642237][T10682] SQUASHFS error: Unable to read inode 0x11f
[  269.806212][   T96] usb 7-1: Using ep0 maxpacket: 16
[  269.810068][   T96] usb 7-1: config 0 has an invalid interface number: 41 but max is 0
[  269.814844][   T96] usb 7-1: config 0 has no interface number 0
[  269.817378][   T96] usb 7-1: config 0 interface 41 has no altsetting 0
[  269.823732][T10700] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  269.844678][   T96] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  269.847900][   T96] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  269.850557][   T96] usb 7-1: Product: syz
[  269.851930][   T96] usb 7-1: Manufacturer: syz
[  269.858455][   T96] usb 7-1: SerialNumber: syz
[  269.866370][   T96] usb 7-1: config 0 descriptor??
[  269.876880][   T96] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -22
[  270.016617][T10714] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1625'.
[  270.095104][ T5910] usb 7-1: USB disconnect, device number 17
[  270.163403][   T96] usb 8-1: new full-speed USB device number 7 using dummy_hcd
[  270.212218][T10719] loop5: detected capacity change from 0 to 512
[  270.230052][T10719] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  270.236769][T10719] ext4 filesystem being mounted at /429/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  270.325447][   T96] usb 8-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  270.329235][   T96] usb 8-1: config 0 interface 0 has no altsetting 0
[  270.331403][   T96] usb 8-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00
[  270.334825][   T96] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  270.343080][   T96] usb 8-1: config 0 descriptor??
[  270.345266][T10706] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  270.388208][ T7804] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.657818][T10726] loop6: detected capacity change from 0 to 512
[  270.691666][T10726] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.1629: casefold flag without casefold feature
[  270.692769][    T9] usb 6-1: new full-speed USB device number 13 using dummy_hcd
[  270.699939][T10726] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.1629: couldn't read orphan inode 15 (err -117)
[  270.706771][T10726] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  270.750131][ T9107] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.756372][   T96] thrustmaster 0003:044F:B323.000C: unknown main item tag 0x2
[  270.771751][   T96] thrustmaster 0003:044F:B323.000C: item fetching failed at offset 4/5
[  270.777270][   T96] thrustmaster 0003:044F:B323.000C: parse failed
[  270.782137][   T96] thrustmaster 0003:044F:B323.000C: probe with driver thrustmaster failed with error -22
[  270.854590][    T9] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  270.858234][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  270.863741][    T9] usb 6-1: config 0 descriptor??
[  270.867888][    T9] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  270.967137][   T96] usb 8-1: USB disconnect, device number 7
[  270.996216][T10729] loop6: detected capacity change from 0 to 32768
[  271.008181][T10729] XFS: noikeep mount option is deprecated.
[  271.025140][T10729] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  271.061424][T10729] XFS (loop6): Ending clean mount
[  271.069264][T10729] XFS (loop6): Quotacheck needed: Please wait.
[  271.071334][    T9] gp8psk: usb in 128 operation failed.
[  271.119127][T10729] XFS (loop6): Quotacheck: Done.
[  271.174215][ T9107] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  271.285396][    T9] gp8psk: usb in 146 operation failed.
[  271.287776][    T9] gp8psk: failed to get FW version
[  271.316128][    T9] gp8psk: usb in 149 operation failed.
[  271.318413][    T9] gp8psk: failed to get FPGA version
[  271.529139][    T9] gp8psk: usb out operation failed.
[  271.531445][    T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  271.542363][    T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  271.569144][    T9] usb 6-1: USB disconnect, device number 13
[  271.952496][ T5954] usb 8-1: new full-speed USB device number 8 using dummy_hcd
[  272.166636][T10771] loop6: detected capacity change from 0 to 4096
[  272.178086][T10771] NILFS (loop6): invalid segment: Checksum error in segment payload
[  272.180847][T10771] NILFS (loop6): trying rollback from an earlier position
[  272.196569][T10771] NILFS (loop6): recovery complete
[  272.294888][ T5954] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  272.299477][ T5954] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  272.305246][ T5954] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64
[  272.314935][ T5954] usb 8-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  272.318854][ T5954] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  272.322138][ T5954] usb 8-1: Product: syz
[  272.334325][ T5954] usb 8-1: Manufacturer: syz
[  272.336387][ T5954] usb 8-1: SerialNumber: syz
[  272.375006][ T5954] usb 8-1: config 0 descriptor??
[  272.692410][T10754] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  272.695569][T10754] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  272.703846][ T5954] usb 8-1: ucan: probing device on interface #0
[  273.063196][    T9] usb 7-1: new full-speed USB device number 18 using dummy_hcd
[  273.080833][T10781] loop5: detected capacity change from 0 to 8
[  273.095112][T10781] SQUASHFS error: xz decompression failed, data probably corrupt
[  273.097882][T10781] SQUASHFS error: Failed to read block 0x108: -5
[  273.100038][T10781] SQUASHFS error: Unable to read metadata cache entry [106]
[  273.103892][T10781] SQUASHFS error: Unable to read inode 0x11f
[  273.215154][    T9] usb 7-1: config 5 has an invalid interface number: 234 but max is 0
[  273.218801][    T9] usb 7-1: config 5 has no interface number 0
[  273.218840][    T9] usb 7-1: config 5 interface 234 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  273.224872][    T9] usb 7-1: New USB device found, idVendor=0bfd, idProduct=0027, bcdDevice=6e.03
[  273.224983][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.225007][    T9] usb 7-1: Product: syz
[  273.225019][    T9] usb 7-1: Manufacturer: syz
[  273.225031][    T9] usb 7-1: SerialNumber: syz
[  273.234842][T10779] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  273.251075][    T9] kvaser_usb 7-1:5.234: error -EPROTO: Cannot get software info
[  273.258345][    T9] kvaser_usb 7-1:5.234: probe with driver kvaser_usb failed with error -71
[  273.308388][ T5954] ucan 8-1:0.0: probe with driver ucan failed with error -22
[  273.446766][ T9013] usb 7-1: USB disconnect, device number 18
[  273.518239][ T5910] usb 8-1: USB disconnect, device number 8
[  273.675725][T10790] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1652'.
[  274.077609][T10794] netlink: 11 bytes leftover after parsing attributes in process `syz.6.1654'.
[  274.308042][T10804] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1659'.
[  274.311682][T10804] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1659'.
[  274.315607][T10804] netlink: 'syz.5.1659': attribute type 12 has an invalid length.
[  274.422623][T10812] overlay: filesystem on ./bus not supported
[  274.619082][   T33] audit: type=1326 audit(1755041345.574:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10819 comm="syz.7.1666" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1298ebe9 code=0x7ffc0000
[  274.631534][   T33] audit: type=1326 audit(1755041345.574:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10819 comm="syz.7.1666" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a1298ebe9 code=0x7ffc0000
[  274.640779][   T33] audit: type=1326 audit(1755041345.574:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10819 comm="syz.7.1666" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1298ebe9 code=0x7ffc0000
[  274.649445][   T33] audit: type=1326 audit(1755041345.574:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10819 comm="syz.7.1666" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1298ebe9 code=0x7ffc0000
[  274.663741][   T33] audit: type=1326 audit(1755041345.574:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10819 comm="syz.7.1666" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a1298ebe9 code=0x7ffc0000
[  274.680545][   T33] audit: type=1326 audit(1755041345.574:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10819 comm="syz.7.1666" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1298ebe9 code=0x7ffc0000
[  274.823040][   T33] audit: type=1326 audit(1755041345.574:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10819 comm="syz.7.1666" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1298ebe9 code=0x7ffc0000
[  274.904590][   T33] audit: type=1326 audit(1755041345.574:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10819 comm="syz.7.1666" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a1298ebe9 code=0x7ffc0000
[  274.912730][   T33] audit: type=1326 audit(1755041345.584:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10819 comm="syz.7.1666" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1298ebe9 code=0x7ffc0000
[  274.919903][   T33] audit: type=1326 audit(1755041345.584:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10819 comm="syz.7.1666" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a1298ebe9 code=0x7ffc0000
[  274.993051][T10828] loop6: detected capacity change from 0 to 1024
[  275.671406][T10840] loop7: detected capacity change from 0 to 32768
[  275.720607][T10846] program syz.5.1677 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  275.763815][T10840] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,recovery_pass_last=initialize_subvolumes,nojournal_transaction_names,read_only,reconstruct_alloc
[  275.763831][T10840]   allowing incompatible features above 0.0: (unknown version)
[  275.763836][T10840]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  275.789860][T10840] bcachefs (loop7): Using encoding defined by superblock: utf8-12.1.0
[  275.793619][T10840] bcachefs (loop7): recovering from clean shutdown, journal seq 10
[  275.796766][T10840] bcachefs (loop7): Version upgrade required:
[  275.796766][T10840] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  275.796766][T10840] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  275.796766][T10840]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  275.834433][T10840] bcachefs (loop7): dropping and reconstructing all alloc info
[  275.858368][T10840] bcachefs (loop7): accounting_read... done
[  275.863869][T10840] bcachefs (loop7): alloc_read... done
[  275.892522][T10840] bcachefs (loop7): done starting filesystem
[  275.988273][T10840] bcachefs (loop7): dirent to missing inode:
[  275.988450][T10840]   u64s 7 type dirent 4096:4330382808765833931:U32_MAX len 0 ver 0: file1 -> 536870912 type reg
[  276.051527][ T9367] bcachefs (loop7): shutting down
[  276.067651][T10852] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  276.147060][ T9367] bcachefs (loop7): shutdown complete
[  276.352876][T10856] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1683'.
[  276.762016][ T5954] usb 6-1: new full-speed USB device number 14 using dummy_hcd
[  276.924917][ T5954] usb 6-1: unable to get BOS descriptor or descriptor too short
[  276.936946][ T5954] usb 6-1: not running at top speed; connect to a high speed hub
[  276.948166][ T5954] usb 6-1: config 5 has an invalid interface number: 246 but max is 0
[  276.951553][ T5954] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[  276.957994][ T5954] usb 6-1: config 5 has no interface number 0
[  276.961473][ T5954] usb 6-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid maxpacket 255, setting to 64
[  276.966521][ T5954] usb 6-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  276.972342][ T5954] usb 6-1: config 5 interface 246 has no altsetting 0
[  276.980962][ T5954] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4
[  276.984938][ T5954] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.988997][ T5954] usb 6-1: Product: syz
[  276.990831][ T5954] usb 6-1: Manufacturer: syz
[  276.993560][ T5954] usb 6-1: SerialNumber: syz
[  277.265924][ T5954] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  277.269342][ T5911] usb 6-1: Failed to submit usb control message: -71
[  277.284373][ T5911] usb 6-1: unable to send the bmi data to the device: -71
[  277.287337][ T5911] usb 6-1: unable to get target info from device
[  277.290160][ T5911] usb 6-1: could not get target info (-71)
[  277.308436][ T5954] usb 6-1: USB disconnect, device number 14
[  277.313965][ T5911] usb 6-1: could not probe fw (-71)
[  277.341134][T10871] geneve2: entered promiscuous mode
[  277.362904][T10871] geneve2: entered allmulticast mode
[  277.851673][ T5954] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  278.031831][ T5954] usb 8-1: Using ep0 maxpacket: 32
[  278.040896][ T5954] usb 8-1: config 0 has an invalid interface number: 51 but max is 0
[  278.052734][ T5954] usb 8-1: config 0 has no interface number 0
[  278.066687][ T5954] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  278.069699][ T5954] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  278.086144][ T5954] usb 8-1: Product: syz
[  278.088034][ T5954] usb 8-1: Manufacturer: syz
[  278.089971][ T5954] usb 8-1: SerialNumber: syz
[  278.124132][ T5954] usb 8-1: config 0 descriptor??
[  278.146674][ T5954] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  278.459156][ T5954] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  278.502123][ T5954] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  278.656817][T10892] loop5: detected capacity change from 0 to 32768
[  278.672146][T10892] bcachefs: bch2_fs_parse_param() Error parsing option degraded: option_value
[  278.838549][    C0] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71
[  278.848233][ T7933] usb 8-1: USB disconnect, device number 9
[  278.933203][ T7933] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  278.993021][ T7933] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  279.019368][ T7933] quatech2 8-1:0.51: device disconnected
[  279.768225][T10897] loop6: detected capacity change from 0 to 65536
[  279.820696][T10897] XFS (loop6): Mounting V5 filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 in no-recovery mode. Filesystem will be inconsistent.
[  279.858159][T10897] XFS (loop6): Metadata CRC error detected at xfs_agi_read_verify+0x12f/0x1f0, xfs_agi block 0x8002 
[  279.863443][T10897] XFS (loop6): Unmount and run xfs_repair
[  279.865883][T10897] XFS (loop6): First 128 bytes of corrupted metadata buffer:
[  279.869026][T10897] 00000000: 58 41 47 49 00 00 00 01 00 00 00 01 00 00 40 00  XAGI..........@.
[  279.872994][T10897] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 00  ................
[  279.876652][T10897] 00000020: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  279.880234][T10897] 00000030: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  279.884428][T10897] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  279.888263][T10897] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  279.893600][T10897] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  279.897291][T10897] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  279.901399][T10897] XFS (loop6): metadata I/O error in "xfs_read_agi+0x272/0x5b0" at daddr 0x8002 len 1 error 74
[  279.907607][T10897] XFS (loop6): Uncorrected metadata errors detected; please run xfs_repair.
[  279.920963][T10920] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1706'.
[  280.063238][T10922] loop7: detected capacity change from 0 to 512
[  280.344152][T10922] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  280.350994][T10922] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  280.393487][T10922] EXT4-fs (loop7): shut down requested (1)
[  280.410933][T10922] EXT4-fs warning (device loop7): ext4_resize_fs:2019: can't read last block, resize aborted
[  280.541165][ T9367] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  281.555635][T10941] loop7: detected capacity change from 0 to 2048
[  281.559464][T10941] udf: Unknown parameter '~nb'
[  282.414510][ T5954] usb 7-1: new full-speed USB device number 19 using dummy_hcd
[  282.549004][T10976] loop7: detected capacity change from 0 to 256
[  282.589242][ T5954] usb 7-1: config 0 has an invalid interface number: 50 but max is 0
[  282.596297][ T5954] usb 7-1: config 0 has no interface number 0
[  282.601357][ T5954] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  282.606035][ T5954] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64
[  282.624794][ T5954] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  282.629527][ T5954] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  282.641732][ T5954] usb 7-1: Product: syz
[  282.643187][ T5954] usb 7-1: Manufacturer: syz
[  282.645047][ T5954] usb 7-1: SerialNumber: syz
[  282.652016][ T5954] usb 7-1: config 0 descriptor??
[  282.655654][T10958] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  282.681373][ T5954] yurex 7-1:0.50: USB YUREX device now attached to Yurex #0
[  282.699232][T10979] loop5: detected capacity change from 0 to 4096
[  283.153847][ T9013] usb 7-1: USB disconnect, device number 19
[  283.164087][ T9013] yurex 7-1:0.50: USB YUREX #0 now disconnected
[  283.173064][T10986] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1727'.
[  283.286795][T10992] loop5: detected capacity change from 0 to 1024
[  283.335734][ T1090] hfsplus: bad catalog file entry
[  283.340316][ T1090] hfsplus: b-tree write err: -5, ino 3
[  283.376065][T10994] loop5: detected capacity change from 0 to 8
[  283.383196][T10994] SQUASHFS error: zlib decompression failed, data probably corrupt
[  283.386953][T10994] SQUASHFS error: Failed to read block 0x9b: -5
[  283.389799][T10994] SQUASHFS error: Unable to read metadata cache entry [99]
[  283.393159][T10994] SQUASHFS error: Unable to read inode 0x127
[  283.404212][ T5853] Bluetooth: hci0: unexpected event for opcode 0x203c
[  283.694532][T11008] netlink: 'syz.7.1738': attribute type 10 has an invalid length.
[  283.697657][T11008] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1738'.
[  283.702795][T11008] team0: entered promiscuous mode
[  283.704895][T11008] team_slave_0: entered promiscuous mode
[  283.707101][T11008] team_slave_1: entered promiscuous mode
[  283.709458][T11008] team0: entered allmulticast mode
[  283.711725][T11008] team_slave_0: entered allmulticast mode
[  283.714967][T11008] team_slave_1: entered allmulticast mode
[  283.717614][T11008] bridge0: port 3(team0) entered blocking state
[  283.719903][T11008] bridge0: port 3(team0) entered disabled state
[  283.725990][T11008] bridge0: port 3(team0) entered blocking state
[  283.728878][T11008] bridge0: port 3(team0) entered forwarding state
[  283.798684][T11013] loop5: detected capacity change from 0 to 512
[  283.813245][T11013] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.1739: corrupted in-inode xattr: invalid ea_ino
[  283.829858][T11013] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1739: couldn't read orphan inode 15 (err -117)
[  283.845758][T11013] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  283.943395][ T7804] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.227405][T11038] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  284.328607][T11048] loop5: detected capacity change from 0 to 256
[  284.338929][T11048] exfat: Deprecated parameter 'namecase'
[  284.353730][T11048] exfat: Deprecated parameter 'namecase'
[  284.355579][T11048] exfat: Deprecated parameter 'namecase'
[  284.369309][T11048] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  284.442401][T11052] loop6: detected capacity change from 0 to 8192
[  284.448157][T11052] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  284.850300][T11055] loop5: detected capacity change from 0 to 4096
[  284.889764][T11055] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512).
[  285.149162][T11072] netlink: 9280 bytes leftover after parsing attributes in process `syz.7.1767'.
[  285.292838][T11078] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1770'.
[  285.677724][T11090] loop5: detected capacity change from 0 to 32768
[  285.694561][T11084] loop7: detected capacity change from 0 to 40427
[  285.712363][T11084] F2FS-fs (loop7): invalid crc value
[  285.814178][T11084] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  285.825206][T11084] F2FS-fs (loop7): Start checkpoint disabled!
[  285.844334][T11084] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[  286.103353][T11103] 9pnet: p9_errstr2errno: server reported unknown error @L	O!L+
[  286.285108][T11101] loop5: detected capacity change from 0 to 32768
[  286.295653][T11101] jfs_mount: Mount Failure: superblock is corrupt!
[  286.298130][T11101] Mount JFS Failure: -22
[  286.299496][T11101] jfs_mount failed w/return code = -22
[  286.364983][T11109] loop5: detected capacity change from 0 to 16
[  286.431584][T11109] erofs (device loop5): mounted with root inode @ nid 36.
[  286.601200][T11119] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1789'.
[  286.605008][T11119] netlink: 'syz.6.1789': attribute type 3 has an invalid length.
[  286.723184][T11121] loop7: detected capacity change from 0 to 512
[  286.733728][T11121] EXT4-fs: Ignoring removed i_version option
[  286.853888][T11121] EXT4-fs (loop7): 1 orphan inode deleted
[  286.861612][T11121] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  286.980649][    T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  287.130673][    T9] usb 6-1: Using ep0 maxpacket: 8
[  287.136282][    T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  287.144359][    T9] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  287.148158][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.154208][    T9] usb 6-1: Product: syz
[  287.157421][    T9] usb 6-1: Manufacturer: syz
[  287.165016][    T9] usb 6-1: SerialNumber: syz
[  287.171383][    T9] usb 6-1: config 0 descriptor??
[  287.184668][    T9] streamzap 6-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0)
[  287.184760][T11137] loop6: detected capacity change from 0 to 1024
[  287.201471][T11137] EXT4-fs: Ignoring removed oldalloc option
[  287.204838][T11137] EXT4-fs: Ignoring removed bh option
[  287.263528][T11137] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  287.315787][ T9367] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  287.352413][ T9107] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  287.423891][ T9013] usb 6-1: USB disconnect, device number 15
[  287.521591][T11148] loop7: detected capacity change from 0 to 8
[  287.665143][T11156] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1803'.
[  287.860499][    T9] usb 8-1: new full-speed USB device number 10 using dummy_hcd
[  288.152645][    T9] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  288.157013][    T9] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  288.161812][    T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  288.166124][    T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 232, setting to 64
[  288.170255][    T9] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  288.178572][    T9] usb 8-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  288.183198][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.186613][    T9] usb 8-1: Product: syz
[  288.188319][    T9] usb 8-1: Manufacturer: syz
[  288.190175][    T9] usb 8-1: SerialNumber: syz
[  288.202349][    T9] usb 8-1: config 0 descriptor??
[  288.219061][T11154] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  288.474639][    T9] input: KB Gear Tablet as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input13
[  288.491621][    T9] usb 8-1: USB disconnect, device number 10
[  288.491660][    C1] kbtab 8-1:0.0: kbtab_irq - usb_submit_urb failed with result -19
[  288.623304][T11187] loop6: detected capacity change from 0 to 512
[  288.626912][T11187] EXT4-fs: Ignoring removed mblk_io_submit option
[  288.638399][T11187] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  288.648303][T11187] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  288.652986][T11187] EXT4-fs (loop6): orphan cleanup on readonly fs
[  288.662569][T11187] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.1817: Invalid block bitmap block 0 in block_group 0
[  288.675529][T11187] EXT4-fs (loop6): Remounting filesystem read-only
[  288.678961][T11187] __quota_error: 3 callbacks suppressed
[  288.678975][T11187] Quota error (device loop6): write_blk: dquota write failed
[  288.688008][T11187] Quota error (device loop6): write_blk: dquota write failed
[  288.691261][T11187] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota
[  288.695942][T11187] EXT4-fs (loop6): 1 orphan inode deleted
[  288.704966][T11187] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  288.752073][ T9107] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.490981][T11200] loop7: detected capacity change from 0 to 32768
[  289.602930][T11200] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1821 (11200)
[  289.634001][T11200] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  289.637635][T11200] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm
[  289.642886][T11200] BTRFS info (device loop7): disk space caching is enabled
[  289.645413][T11200] BTRFS warning (device loop7): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  289.697751][T11200] BTRFS info (device loop7): rebuilding free space tree
[  289.712230][T11200] BTRFS info (device loop7): disabling free space tree
[  289.715173][T11200] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  289.720570][T11200] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  289.807456][   T13] BTRFS info (device loop7): qgroup scan completed (inconsistency flag cleared)
[  289.837367][ T9367] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  290.328488][T11229] loop7: detected capacity change from 0 to 32768
[  290.431677][T11229] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow
[  290.431706][T11229]   allowing incompatible features above 0.0: (unknown version)
[  290.431717][T11229]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  290.448790][T11229] bcachefs (loop7): Using encoding defined by superblock: utf8-12.1.0
[  290.452095][T11229] bcachefs (loop7): initializing new filesystem
[  290.461482][T11229] bcachefs (loop7): going read-write
[  290.466449][T11229] bcachefs (loop7): marking superblocks
[  290.473471][T11229] bcachefs (loop7): initializing freespace
[  290.478635][T11229] bcachefs (loop7): done initializing freespace
[  290.489582][T11229] bcachefs (loop7): reading snapshots table
[  290.492224][T11229] bcachefs (loop7): reading snapshots done
[  290.519785][T11229] bcachefs (loop7): done starting filesystem
[  290.562169][ T7933] usb 7-1: new full-speed USB device number 20 using dummy_hcd
[  290.620584][ T9367] bcachefs (loop7): shutting down
[  290.622743][ T9367] bcachefs (loop7): going read-only
[  290.624943][ T9367] bcachefs (loop7): finished waiting for writes to stop
[  290.631219][ T9367] bcachefs (loop7): flushing journal and stopping allocators, journal seq 6
[  290.668645][ T9367] bcachefs (loop7): flushing journal and stopping allocators complete, journal seq 7
[  290.673788][ T9367] bcachefs (loop7): clean shutdown complete, journal seq 8
[  290.677277][ T9367] bcachefs (loop7): marking filesystem clean
[  290.704554][ T9367] bcachefs (loop7): shutdown complete
[  290.728012][ T7933] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  290.732805][ T7933] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2
[  290.736682][ T7933] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  290.741019][ T7933] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.748963][ T7933] usb 7-1: config 0 descriptor??
[  290.757702][ T7933] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  290.760729][ T7933] dvb-usb: bulk message failed: -22 (3/0)
[  290.766215][ T7933] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  290.774848][ T7933] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  290.777852][ T7933] usb 7-1: media controller created
[  290.783082][ T7933] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  290.801118][ T7933] dvb-usb: bulk message failed: -22 (6/0)
[  290.807749][ T7933] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  290.814662][ T7933] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input14
[  290.825109][ T7933] dvb-usb: schedule remote query interval to 150 msecs.
[  290.827624][ T7933] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  290.985202][ T7933] dvb-usb: bulk message failed: -22 (1/0)
[  290.987798][ T7933] dvb-usb: error while querying for an remote control event.
[  291.064848][ T7933] usb 7-1: USB disconnect, device number 20
[  291.085676][ T7933] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  292.095504][T11254] loop7: detected capacity change from 0 to 40427
[  292.100814][T11254] F2FS-fs (loop7): Small segment_count (9 < 1 * 24)
[  292.102894][T11254] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  292.118169][T11272] netlink: 'syz.5.1842': attribute type 11 has an invalid length.
[  292.121693][T11272] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1842'.
[  292.215507][T11254] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  292.232954][T11254] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  292.235349][T11254] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  292.281274][T11254] bio_check_eod: 102 callbacks suppressed
[  292.281296][T11254] syz.7.1830: attempt to access beyond end of device
[  292.281296][T11254] loop7: rw=2049, sector=53248, nr_sectors = 8 limit=40427
[  292.335993][ T9367] syz-executor: attempt to access beyond end of device
[  292.335993][ T9367] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  292.350287][ T9367] CPU: 0 UID: 0 PID: 9367 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  292.350312][ T9367] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  292.350321][ T9367] Call Trace:
[  292.350328][ T9367]  <TASK>
[  292.350334][ T9367]  dump_stack_lvl+0x189/0x250
[  292.350361][ T9367]  ? __pfx_dump_stack_lvl+0x10/0x10
[  292.350376][ T9367]  ? __pfx_queue_work_on+0x10/0x10
[  292.350390][ T9367]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  292.350407][ T9367]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  292.350430][ T9367]  f2fs_handle_critical_error+0x37c/0x540
[  292.350454][ T9367]  f2fs_write_end_io+0x886/0xb60
[  292.350486][ T9367]  __submit_merged_bio+0x27a/0x6a0
[  292.350507][ T9367]  __submit_merged_write_cond+0x255/0x530
[  292.350528][ T9367]  f2fs_write_data_pages+0x261d/0x3000
[  292.350571][ T9367]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  292.350622][ T9367]  ? __mod_zone_page_state+0xd7/0x140
[  292.350648][ T9367]  ? folios_put_refs+0x560/0x640
[  292.350671][ T9367]  ? __pfx_folios_put_refs+0x10/0x10
[  292.350683][ T9367]  ? rcu_is_watching+0x15/0xb0
[  292.350704][ T9367]  ? __lock_acquire+0xab9/0xd20
[  292.350735][ T9367]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  292.350752][ T9367]  do_writepages+0x32e/0x550
[  292.350779][ T9367]  ? do_raw_spin_unlock+0x4d/0x240
[  292.350798][ T9367]  filemap_fdatawrite+0x199/0x240
[  292.350816][ T9367]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  292.350870][ T9367]  ? do_raw_spin_unlock+0x4d/0x240
[  292.350888][ T9367]  f2fs_sync_dirty_inodes+0x31f/0x830
[  292.350945][ T9367]  f2fs_write_checkpoint+0x95a/0x1df0
[  292.350984][ T9367]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  292.351041][ T9367]  ? call_rcu+0x6ff/0x9c0
[  292.351054][ T9367]  ? lockdep_hardirqs_on+0x9c/0x150
[  292.351070][ T9367]  ? kill_f2fs_super+0x298/0x6c0
[  292.351093][ T9367]  kill_f2fs_super+0x2c3/0x6c0
[  292.351116][ T9367]  ? __pfx_kill_f2fs_super+0x10/0x10
[  292.351131][ T9367]  ? radix_tree_delete_item+0x2b6/0x400
[  292.351152][ T9367]  ? shrinker_free+0x2ce/0x3e0
[  292.351169][ T9367]  deactivate_locked_super+0xbc/0x130
[  292.351187][ T9367]  cleanup_mnt+0x425/0x4c0
[  292.351202][ T9367]  ? lockdep_hardirqs_on+0x9c/0x150
[  292.351219][ T9367]  task_work_run+0x1d4/0x260
[  292.351239][ T9367]  ? __pfx_task_work_run+0x10/0x10
[  292.351254][ T9367]  ? __x64_sys_umount+0x122/0x160
[  292.351275][ T9367]  ? exit_to_user_mode_loop+0x40/0x110
[  292.351298][ T9367]  exit_to_user_mode_loop+0xec/0x110
[  292.351316][ T9367]  do_syscall_64+0x2bd/0x3b0
[  292.351331][ T9367]  ? lockdep_hardirqs_on+0x9c/0x150
[  292.351345][ T9367]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.351358][ T9367]  ? exc_page_fault+0x9f/0xf0
[  292.351374][ T9367]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.351386][ T9367] RIP: 0033:0x7f2a1298ff17
[  292.351400][ T9367] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  292.351413][ T9367] RSP: 002b:00007ffda12cbed8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  292.351428][ T9367] RAX: 0000000000000000 RBX: 00007f2a12a11c05 RCX: 00007f2a1298ff17
[  292.351437][ T9367] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda12cbf90
[  292.351445][ T9367] RBP: 00007ffda12cbf90 R08: 0000000000000000 R09: 0000000000000000
[  292.351453][ T9367] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffda12cd020
[  292.351461][ T9367] R13: 00007f2a12a11c05 R14: 0000000000047581 R15: 00007ffda12cd060
[  292.351484][ T9367]  </TASK>
[  292.351489][ T9367] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  292.777280][T11293] loop6: detected capacity change from 0 to 32768
[  292.792700][T11293] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1851 (11293)
[  292.801872][T11293] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  292.805136][T11293] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm
[  292.808098][T11293] BTRFS info (device loop6): using free-space-tree
[  292.888565][   T33] audit: type=1326 audit(1755041363.846:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11304 comm="syz.7.1848" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2a1298ebe9 code=0x0
[  292.985248][ T9107] BTRFS info (device loop6): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  292.996654][T11313] uprobe: syz.7.1848:11313 failed to unregister, leaking uprobe
[  293.769773][ T7933] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  293.933864][ T7933] usb 7-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  293.937347][ T7933] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  293.940502][ T7933] usb 7-1: Product: syz
[  293.942371][ T7933] usb 7-1: SerialNumber: syz
[  293.947530][ T7933] usb 7-1: config 0 descriptor??
[  294.157689][ T7933] hso 7-1:0.0: Failed to find BULK IN ep
[  294.361329][ T5954] usb 7-1: USB disconnect, device number 21
[  294.832886][T11345] loop5: detected capacity change from 0 to 4096
[  294.838096][T11345] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  294.882928][   T33] audit: type=1800 audit(1755041365.837:91): pid=11345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1866" name="file1" dev="loop5" ino=30 res=0 errno=0
[  294.886549][T11345] ntfs3(loop5): ino=3, ntfs_set_state failed, -22.
[  294.900641][T11345] ntfs3(loop5): ino=1e, "file1" attr_set_size
[  294.956704][ T2182] ntfs3(loop5): ino=3, ntfs3_write_inode failed, -22.
[  294.971629][ T7804] ntfs3(loop5): ino=3, ntfs_set_state failed, -22.
[  294.973881][ T7804] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  294.977024][ T7804] ntfs3(loop5): ino=3, ntfs_set_state failed, -22.
[  294.994421][   T88] ntfs3(loop5): ino=3, ntfs3_write_inode failed, -22.
[  295.199172][T11356] loop7: detected capacity change from 0 to 1024
[  295.268345][T11354] loop6: detected capacity change from 0 to 32768
[  295.280210][    T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  295.340011][T11354] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  295.340045][T11354]   allowing incompatible features above 0.0: (unknown version)
[  295.340051][T11354]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  295.359126][T11354] bcachefs (loop6): Using encoding defined by superblock: utf8-12.1.0
[  295.362971][T11354] bcachefs (loop6): initializing new filesystem
[  295.377982][T11354] bcachefs (loop6): going read-write
[  295.386394][T11354] bcachefs (loop6): marking superblocks
[  295.407245][T11354] bcachefs (loop6): initializing freespace
[  295.419292][T11354] bcachefs (loop6): done initializing freespace
[  295.429013][T11354] bcachefs (loop6): reading snapshots table
[  295.431242][    T9] usb 6-1: Using ep0 maxpacket: 16
[  295.437607][T11354] bcachefs (loop6): reading snapshots done
[  295.441462][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  295.444990][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  295.457246][    T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  295.468515][    T9] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  295.491252][T11354] bcachefs (loop6): done starting filesystem
[  295.493530][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.506374][    T9] usb 6-1: config 0 descriptor??
[  295.549649][T11354] bcachefs (loop6): going read-only
[  295.551552][T11354] bcachefs (loop6): finished waiting for writes to stop
[  295.555397][T11354] bcachefs (loop6): flushing journal and stopping allocators, journal seq 2
[  295.600011][T11354] bcachefs (loop6): flushing journal and stopping allocators complete, journal seq 2
[  295.607543][T11354] bcachefs (loop6): clean shutdown complete, journal seq 3
[  295.611903][T11354] bcachefs (loop6): marking filesystem clean
[  295.623998][T11384] bcachefs (loop6): going read-write
[  295.669715][ T9107] bcachefs (loop6): shutting down
[  295.672072][ T9107] bcachefs (loop6): going read-only
[  295.679241][ T9107] bcachefs (loop6): finished waiting for writes to stop
[  295.825247][ T9107] bcachefs (loop6): flushing journal and stopping allocators, journal seq 3
[  295.833195][ T9107] bcachefs (loop6): flushing journal and stopping allocators complete, journal seq 3
[  295.844334][ T9107] bcachefs (loop6): clean shutdown complete, journal seq 4
[  295.847307][ T9107] bcachefs (loop6): marking filesystem clean
[  295.888049][ T9107] bcachefs (loop6): shutdown complete
[  295.955424][    T9] microsoft 0003:045E:07DA.000D: ignoring exceeding usage max
[  295.967793][    T9] microsoft 0003:045E:07DA.000D: unsupported Resolution Multiplier 0
[  296.154186][    T9] microsoft 0003:045E:07DA.000D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0
[  296.166263][    T9] microsoft 0003:045E:07DA.000D: no inputs found
[  296.172241][    T9] microsoft 0003:045E:07DA.000D: could not initialize ff, continuing anyway
[  296.184985][    T9] usb 6-1: USB disconnect, device number 16
[  296.706755][T11401] loop5: detected capacity change from 0 to 1024
[  296.711565][T11401] EXT4-fs: Ignoring removed nomblk_io_submit option
[  296.732540][T11401] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  296.757015][ T7804] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  297.045318][T11410] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1888'.
[  297.049173][T11410] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1888'.
[  297.062021][T11410] bridge0: port 3(vlan2) entered blocking state
[  297.065490][T11410] bridge0: port 3(vlan2) entered disabled state
[  297.068348][T11410] vlan2: entered allmulticast mode
[  297.071950][T11410] bridge0: entered allmulticast mode
[  297.076325][T11410] vlan2: left allmulticast mode
[  297.078430][T11410] bridge0: left allmulticast mode
[  297.343799][T11418] syz.6.1880: attempt to access beyond end of device
[  297.343799][T11418] loop6: rw=0, sector=64, nr_sectors = 1 limit=0
[  297.348947][T11418] syz.6.1880: attempt to access beyond end of device
[  297.348947][T11418] loop6: rw=0, sector=256, nr_sectors = 1 limit=0
[  297.356664][T11418] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  297.363427][T11418] syz.6.1880: attempt to access beyond end of device
[  297.363427][T11418] loop6: rw=0, sector=512, nr_sectors = 1 limit=0
[  297.368658][T11418] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512
[  297.374063][T11418] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found
[  297.377177][T11418] UDF-fs: Scanning with blocksize 512 failed
[  297.380126][T11418] syz.6.1880: attempt to access beyond end of device
[  297.380126][T11418] loop6: rw=0, sector=64, nr_sectors = 2 limit=0
[  297.384897][T11418] syz.6.1880: attempt to access beyond end of device
[  297.384897][T11418] loop6: rw=0, sector=512, nr_sectors = 2 limit=0
[  297.391452][T11418] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  297.394581][T11418] syz.6.1880: attempt to access beyond end of device
[  297.394581][T11418] loop6: rw=0, sector=1024, nr_sectors = 2 limit=0
[  297.399118][T11418] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512
[  297.402805][T11418] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found
[  297.405837][T11418] UDF-fs: Scanning with blocksize 1024 failed
[  297.408405][T11418] syz.6.1880: attempt to access beyond end of device
[  297.408405][T11418] loop6: rw=0, sector=64, nr_sectors = 4 limit=0
[  297.415158][T11418] syz.6.1880: attempt to access beyond end of device
[  297.415158][T11418] loop6: rw=0, sector=1024, nr_sectors = 4 limit=0
[  297.419980][T11418] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  297.423361][T11418] syz.6.1880: attempt to access beyond end of device
[  297.423361][T11418] loop6: rw=0, sector=2048, nr_sectors = 4 limit=0
[  297.427532][T11418] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512
[  297.431852][T11418] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found
[  297.434767][T11418] UDF-fs: Scanning with blocksize 2048 failed
[  297.437471][T11418] syz.6.1880: attempt to access beyond end of device
[  297.437471][T11418] loop6: rw=0, sector=64, nr_sectors = 8 limit=0
[  297.442462][T11418] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  297.446285][T11418] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512
[  297.452650][T11418] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found
[  297.455608][T11418] UDF-fs: Scanning with blocksize 4096 failed
[  297.458138][T11418] UDF-fs: warning (device loop6): udf_fill_super: No partition found (1)
[  297.614932][T11432] loop6: detected capacity change from 0 to 16
[  297.633957][T11432] cramfs: empty filesystem
[  297.911885][T11450] loop6: detected capacity change from 0 to 164
[  298.184827][T11462] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  298.469317][ T2306] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  298.632281][ T2306] usb 7-1: config 3 has an invalid interface number: 7 but max is 0
[  298.635643][ T2306] usb 7-1: config 3 has no interface number 0
[  298.638344][ T2306] usb 7-1: config 3 interface 7 has no altsetting 0
[  298.645072][ T2306] usb 7-1: New USB device found, idVendor=06e1, idProduct=a155, bcdDevice=3f.7b
[  298.649288][ T2306] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  298.652708][ T2306] usb 7-1: Product: syz
[  298.654609][ T2306] usb 7-1: Manufacturer: syz
[  298.656493][ T2306] usb 7-1: SerialNumber: syz
[  298.808481][T11467] loop5: detected capacity change from 0 to 32768
[  298.815995][T11467] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[  298.829305][T11467] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  298.843160][   T33] audit: type=1800 audit(1755041369.807:92): pid=11467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1913" name="file1" dev="loop5" ino=17058 res=0 errno=0
[  298.877998][ T7804] ocfs2: Unmounting device (7,5) on (node local)
[  298.878620][ T2306] radio-si470x 7-1:3.7: si470x_get_report: usb_control_msg returned -71
[  298.885864][ T2306] radio-si470x 7-1:3.7: probe with driver radio-si470x failed with error -5
[  298.899588][ T2306] usb 7-1: USB disconnect, device number 22
[  299.270991][T11481] loop5: detected capacity change from 0 to 2048
[  299.280064][T11481] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  299.553392][   T33] audit: type=1326 audit(1755041370.517:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11485 comm="syz.6.1921" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa841b8ebe9 code=0x7ffc0000
[  299.566555][   T33] audit: type=1326 audit(1755041370.517:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11485 comm="syz.6.1921" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa841b8ebe9 code=0x7ffc0000
[  299.576681][   T33] audit: type=1326 audit(1755041370.527:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11485 comm="syz.6.1921" exe="/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fa841b8ebe9 code=0x7ffc0000
[  299.589232][   T33] audit: type=1326 audit(1755041370.527:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11485 comm="syz.6.1921" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa841b8ebe9 code=0x7ffc0000
[  299.597993][   T33] audit: type=1326 audit(1755041370.527:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11485 comm="syz.6.1921" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa841b8ebe9 code=0x7ffc0000
[  300.315235][T11494] loop7: detected capacity change from 0 to 4096
[  300.331229][T11494] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[  300.382768][T11494] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  300.388067][T11490] loop6: detected capacity change from 0 to 32768
[  300.389088][T11494] ntfs3(loop7): ino=19, mi_enum_attr
[  300.402934][T11490] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1923 (11490)
[  300.451399][T11494] ntfs3(loop7): failed to convert "c46c" to cp857
[  300.460450][T11490] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  300.466467][T11490] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm
[  300.475777][T11490] BTRFS info (device loop6): using free-space-tree
[  300.484473][T11494] ntfs3(loop7): ino=20, mi_enum_attr
[  300.706034][   T33] audit: type=1800 audit(1755041371.667:98): pid=11490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1923" name="file1" dev="loop6" ino=260 res=0 errno=0
[  300.774760][T11512] loop7: detected capacity change from 0 to 2048
[  300.868476][T11512] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  300.937405][ T9107] BTRFS info (device loop6): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  300.946797][T11518] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1927'.
[  300.984089][ T2182] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  300.998741][ T2182] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  301.004201][ T2182] EXT4-fs (loop7): This should not happen!! Data will be lost
[  301.004201][ T2182] 
[  301.007552][ T2182] EXT4-fs (loop7): Total free blocks count 0
[  301.010016][ T2182] EXT4-fs (loop7): Free/Dirty block details
[  301.012335][ T2182] EXT4-fs (loop7): free_blocks=4096
[  301.014334][ T2182] EXT4-fs (loop7): dirty_blocks=672
[  301.017113][ T2182] EXT4-fs (loop7): Block reservation details
[  301.025806][ T2182] EXT4-fs (loop7): i_reserved_data_blocks=42
[  301.043385][ T2182] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 640 with error 28
[  301.717804][T11547] loop6: detected capacity change from 0 to 512
[  301.821651][T11547] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz.6.1940: corrupted in-inode xattr: e_value size too large
[  301.893762][T11547] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.1940: couldn't read orphan inode 15 (err -117)
[  301.937449][T11547] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  302.188235][T11547] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #2: block 12: comm syz.6.1940: lblock 3 mapped to illegal pblock 12 (length 1)
[  302.522873][ T9107] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  303.067769][T11557] sch_fq: defrate 4294967295 ignored.
[  303.184719][T11562] loop6: detected capacity change from 0 to 64
[  303.257053][T11566] loop5: detected capacity change from 0 to 16
[  303.266790][T11566] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  303.305589][T11568] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.1949'.
[  303.610789][T11580] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1956'.
[  304.432475][T11575] loop7: detected capacity change from 0 to 131072
[  304.458648][T11575] F2FS-fs (loop7): invalid crc value
[  304.478146][   T13] bridge_slave_1: left allmulticast mode
[  304.480662][   T13] bridge_slave_1: left promiscuous mode
[  304.483233][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  304.543212][T11575] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  304.548265][T11575] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[  304.575662][   T13] bridge_slave_0: left allmulticast mode
[  304.580553][   T13] bridge_slave_0: left promiscuous mode
[  304.617541][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  305.299863][ T5858] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  305.307648][ T5858] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  305.313645][ T5858] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  305.316703][ T5858] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  305.319818][ T5858] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  305.573155][T11595] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1959'.
[  305.800921][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  305.807758][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  305.816618][   T13] bond0 (unregistering): (slave macvlan2): Releasing backup interface
[  305.824366][   T13] bond0 (unregistering): Released all slaves
[  306.004883][T11603] loop7: detected capacity change from 0 to 4096
[  306.008802][T11603] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024)
[  306.012780][T11603] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 4096)
[  306.098515][T11607] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  306.110716][ T5848] udevd[5848]: incorrect nilfs2 checksum on /dev/loop7
[  306.470471][   T13] hsr_slave_0: left promiscuous mode
[  306.473866][   T13] hsr_slave_1: left promiscuous mode
[  306.482749][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  306.485438][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  306.493795][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  306.503339][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  306.572385][   T13] veth1_macvtap: left promiscuous mode
[  306.575718][   T13] veth0_macvtap: left promiscuous mode
[  306.578251][   T13] veth1_vlan: left promiscuous mode
[  306.582126][   T13] veth0_vlan: left promiscuous mode
[  306.623077][T11621] cgroup: No subsys list or none specified
[  307.338281][   T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  307.358429][ T5858] Bluetooth: hci2: command tx timeout
[  307.522952][   T10] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  307.525851][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  307.542680][   T10] usb 6-1: Product: syz
[  307.544460][   T10] usb 6-1: Manufacturer: syz
[  307.545979][   T10] usb 6-1: SerialNumber: syz
[  307.552435][   T10] usb 6-1: config 0 descriptor??
[  307.698924][ T7453] udevd[7453]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: Read-only file system
[  307.725481][   T13] team0 (unregistering): Port device team_slave_1 removed
[  307.806131][ T2306] usb 6-1: USB disconnect, device number 17
[  307.821686][   T13] team0 (unregistering): Port device team_slave_0 removed
[  308.736128][T11629] loop5: detected capacity change from 0 to 764
[  308.848212][T11630] Symlink component flag not implemented
[  308.851620][T11630] Symlink component flag not implemented
[  308.858318][T11630] Symlink component flag not implemented (128)
[  308.861223][T11630] Symlink component flag not implemented (122)
[  309.331611][T11592] chnl_net:caif_netlink_parms(): no params data found
[  309.449160][ T5858] Bluetooth: hci2: command tx timeout
[  309.634711][T11592] bridge0: port 1(bridge_slave_0) entered blocking state
[  309.637495][T11592] bridge0: port 1(bridge_slave_0) entered disabled state
[  309.641314][T11592] bridge_slave_0: entered allmulticast mode
[  309.646901][T11592] bridge_slave_0: entered promiscuous mode
[  309.653530][T11592] bridge0: port 2(bridge_slave_1) entered blocking state
[  309.656701][T11592] bridge0: port 2(bridge_slave_1) entered disabled state
[  309.679115][T11592] bridge_slave_1: entered allmulticast mode
[  309.683889][T11592] bridge_slave_1: entered promiscuous mode
[  309.815630][T11592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  309.868586][T11592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  310.139876][T11592] team0: Port device team_slave_0 added
[  310.166562][T11592] team0: Port device team_slave_1 added
[  310.383763][T11592] batman_adv: batadv0: Adding interface: batadv_slave_0
[  310.390712][T11592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  310.406819][T11592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  310.421940][T11592] batman_adv: batadv0: Adding interface: batadv_slave_1
[  310.425041][T11592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  310.439775][T11592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  310.639536][T11592] hsr_slave_0: entered promiscuous mode
[  310.649483][T11592] hsr_slave_1: entered promiscuous mode
[  310.655794][T11592] debugfs: 'hsr0' already exists in 'hsr'
[  310.663701][T11592] Cannot create hsr debugfs directory
[  310.901693][T11657] vcan0: tx drop: invalid da for name 0xfffffffffffffffe
[  311.118010][    T9] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  311.161955][T11592] 8021q: adding VLAN 0 to HW filter on device bond0
[  311.193666][T11592] 8021q: adding VLAN 0 to HW filter on device team0
[  311.211803][   T88] bridge0: port 1(bridge_slave_0) entered blocking state
[  311.215061][   T88] bridge0: port 1(bridge_slave_0) entered forwarding state
[  311.228937][   T88] bridge0: port 2(bridge_slave_1) entered blocking state
[  311.231990][   T88] bridge0: port 2(bridge_slave_1) entered forwarding state
[  311.271300][    T9] usb 6-1: Using ep0 maxpacket: 32
[  311.275863][    T9] usb 6-1: config 0 has an invalid interface number: 67 but max is 0
[  311.284063][    T9] usb 6-1: config 0 has no interface number 0
[  311.296589][    T9] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  311.303387][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.314308][    T9] usb 6-1: Product: syz
[  311.316183][    T9] usb 6-1: Manufacturer: syz
[  311.320093][    T9] usb 6-1: SerialNumber: syz
[  311.333920][    T9] usb 6-1: config 0 descriptor??
[  311.344207][    T9] smsc95xx v2.0.0
[  311.517829][ T5858] Bluetooth: hci2: command tx timeout
[  311.604441][T11592] 8021q: adding VLAN 0 to HW filter on device batadv0
[  312.002048][T11592] veth0_vlan: entered promiscuous mode
[  312.019994][T11592] veth1_vlan: entered promiscuous mode
[  312.065239][T11592] veth0_macvtap: entered promiscuous mode
[  312.084843][T11592] veth1_macvtap: entered promiscuous mode
[  312.110884][T11592] batman_adv: batadv0: Interface activated: batadv_slave_0
[  312.131551][T11592] batman_adv: batadv0: Interface activated: batadv_slave_1
[  312.152690][    T9] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout
[  312.322555][   T88] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  312.326129][   T88] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  312.358858][    T9] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  312.367665][    T9] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71
[  312.402243][    T9] usb 6-1: USB disconnect, device number 18
[  312.419470][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  312.422759][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  312.710919][T11691] tipc: Failed to remove unknown binding: 66,1,1/0:3852073142/3852073144
[  312.781701][T11693] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1991'.
[  312.784605][T11685] loop8: detected capacity change from 0 to 32768
[  312.785653][T11693] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1991'.
[  312.801259][T11685] ocfs2: Slot 0 on device (7,8) was already allocated to this node!
[  312.823669][T11685] (syz.8.1957,11685,0):ocfs2_read_journal_inode:1659 ERROR: status = -13
[  312.830027][T11685] (syz.8.1957,11685,0):ocfs2_mark_dead_nodes:1942 ERROR: status = -13
[  312.833540][T11685] (syz.8.1957,11685,0):ocfs2_check_volume:2420 ERROR: status = -13
[  312.840202][T11685] (syz.8.1957,11685,0):ocfs2_check_volume:2432 ERROR: status = -13
[  312.843563][T11685] (syz.8.1957,11685,0):ocfs2_mount_volume:1764 ERROR: status = -13
[  312.890085][T11685] (syz.8.1957,11685,0):ocfs2_fill_super:1177 ERROR: status = -13
[  313.055386][T11701] overlayfs: failed to clone upperpath
[  313.384748][T11703] loop5: detected capacity change from 0 to 32768
[  313.607672][ T5858] Bluetooth: hci2: command tx timeout
[  314.258029][T11735] loop5: detected capacity change from 0 to 512
[  314.261175][T11735] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  314.291265][T11735] EXT4-fs (loop5): 1 truncate cleaned up
[  314.293842][T11735] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  314.328426][ T7804] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  314.673265][T11769] loop8: detected capacity change from 0 to 16
[  314.686620][T11769] erofs (device loop8): mounted with root inode @ nid 36.
[  314.849191][T11774] erofs (device loop8): readahead error at folio 2 @ nid 89
[  314.876716][T11244] erofs (device loop8): failed to decompress 6887 in[4096, 0] out[8192]
[  314.891847][T11774] erofs (device loop8): failed to decompress 6887 in[4096, 0] out[8192]
[  314.896217][T11774] erofs (device loop8): read error -117 @ 1 of nid 89
[  314.903652][   T33] audit: type=1800 audit(1755041385.869:99): pid=11774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2024" name="file3" dev="loop8" ino=89 res=0 errno=0
[  316.105592][T11788] loop5: detected capacity change from 0 to 512
[  316.128116][T11788] EXT4-fs: Ignoring removed bh option
[  316.130606][T11788] EXT4-fs: Ignoring removed mblk_io_submit option
[  316.170670][T11788] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  316.179298][T11788] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  316.183303][T11788] EXT4-fs (loop5): orphan cleanup on readonly fs
[  316.186437][T11788] Quota error (device loop5): v2_read_file_info: Block with free entry 252928 out of range (1, 6).
[  316.215896][T11788] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  316.258049][T11788] EXT4-fs (loop5): Cannot turn on quotas: error -117
[  316.260790][T11788] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.2032: Invalid block bitmap block 0 in block_group 0
[  316.269775][T11788] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  316.273424][T11788] EXT4-fs (loop5): 1 orphan inode deleted
[  316.276355][T11788] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  316.358601][T11799] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2037'.
[  316.362455][T11799] netlink: 660 bytes leftover after parsing attributes in process `syz.8.2037'.
[  316.392556][T11802] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz.5.2032: deleted inode referenced: 12
[  316.772762][ T7804] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  316.870467][T11826] loop5: detected capacity change from 0 to 512
[  316.888723][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  316.890881][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  316.903624][T11826] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  316.920331][T11826] EXT4-fs (loop5): 1 truncate cleaned up
[  316.924121][T11826] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  316.942818][T11826] fscrypt (loop5, inode 18): Direct key flag not allowed with different contents and filenames modes
[  316.988657][ T7804] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  317.154173][T11840] loop8: detected capacity change from 0 to 8192
[  317.204537][ T5848]  loop8: AHDI p1 p2 p4
[  317.218102][T11840]  loop8: AHDI p1 p2 p4
[  317.376665][ T5848] udevd[5848]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory
[  317.400299][ T5848] udevd[5848]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory
[  317.423453][T11860] netlink: 'syz.5.2065': attribute type 29 has an invalid length.
[  317.544837][T11868] loop5: detected capacity change from 0 to 512
[  317.572049][T11868] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.2070: Invalid inode bitmap blk 4 in block_group 0
[  317.598632][T11868] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  317.624854][T11868] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters
[  317.647178][T11868] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.2070: Invalid inode bitmap blk 4 in block_group 0
[  317.667593][T11868] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem
[  317.702245][ T7804] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  317.776234][T11880] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2075'.
[  317.822513][T11881] ALSA: mixer_oss: invalid OSS volume 'A141=wVe]'
[  317.826688][T11881] ALSA: mixer_oss: invalid OSS volume 'ұB;T`@$EcXMYd,'
[  317.832301][T11881] ALSA: mixer_oss: invalid OSS volume 'b@h#'
[  317.834883][T11881] ALSA: mixer_oss: invalid OSS volume 'h4XS4v=0_>&'
[  317.841977][T11881] ALSA: mixer_oss: invalid OSS volume '|/"tj'
[  317.844610][T11881] ALSA: mixer_oss: invalid OSS volume '-z5c^J6$'
[  317.850607][T11881] ALSA: mixer_oss: invalid OSS volume '0Ty󉴪jP&at'
[  317.854123][T11881] ALSA: mixer_oss: invalid OSS volume '|~\'
[  317.856747][T11881] ALSA: mixer_oss: invalid OSS volume '@^3bɜ}G$#\("/oL'
[  317.860626][T11881] ALSA: mixer_oss: invalid OSS volume ''
[  317.980887][   T33] audit: type=1326 audit(1755041388.949:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11891 comm="syz.5.2080" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f26cbd8ebe9 code=0x0
[  318.075022][T11903] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  318.106372][T11907] loop8: detected capacity change from 0 to 164
[  318.114228][T11907] Unsupported NM flag settings (8)
[  319.467779][ T9465] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  319.616777][ T9465] usb 6-1: Using ep0 maxpacket: 16
[  319.623062][ T9465] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00
[  319.627189][ T9465] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  319.630847][ T9465] usb 6-1: Product: syz
[  319.632543][ T9465] usb 6-1: Manufacturer: syz
[  319.634438][ T9465] usb 6-1: SerialNumber: syz
[  319.639733][ T9465] usb 6-1: config 0 descriptor??
[  319.645375][ T9465] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected
[  319.650195][ T9465] usb 6-1: Detected FT4233HP
[  319.827022][   T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  319.850407][ T9465] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  319.851477][T11937] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4.
[  319.854585][ T9465] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  319.867586][ T9465] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  319.874582][ T9465] usb 6-1: USB disconnect, device number 19
[  319.882105][ T9465] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  319.888214][ T9465] ftdi_sio 6-1:0.0: device disconnected
[  319.986860][   T10] usb 9-1: Using ep0 maxpacket: 8
[  319.993807][   T10] usb 9-1: config 0 has an invalid interface number: 223 but max is 0
[  319.998220][   T10] usb 9-1: config 0 has no interface number 0
[  320.000777][   T10] usb 9-1: config 0 interface 223 has no altsetting 0
[  320.009466][   T10] usb 9-1: New USB device found, idVendor=0543, idProduct=1923, bcdDevice=2f.36
[  320.014195][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  320.020043][   T10] usb 9-1: Product: syz
[  320.021897][   T10] usb 9-1: Manufacturer: syz
[  320.024368][   T10] usb 9-1: SerialNumber: syz
[  320.029870][   T10] usb 9-1: config 0 descriptor??
[  320.249367][   T10] usb 9-1: USB disconnect, device number 2
[  320.505607][T11955] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2110'.
[  320.773428][T11962] netlink: 4280 bytes leftover after parsing attributes in process `syz.5.2109'.
[  320.778744][T11962] netlink: 4280 bytes leftover after parsing attributes in process `syz.5.2109'.
[  321.098640][T11964] loop8: detected capacity change from 0 to 4096
[  321.103982][T11964] ntfs3(loop8): Different NTFS sector size (2048) and media sector size (512).
[  321.275636][T11969] loop8: detected capacity change from 0 to 64
[  321.532557][T11972] loop8: detected capacity change from 0 to 4096
[  321.634872][T11982] loop5: detected capacity change from 0 to 4096
[  321.823204][T11991] netlink: 'syz.5.2124': attribute type 8 has an invalid length.
[  321.845563][T11991] bridge1: entered allmulticast mode
[  321.902354][T11998] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2129'.
[  322.065482][T12010] loop5: detected capacity change from 0 to 64
[  322.089902][T12010] MINIX-fs: deleted inode referenced: 6
[  322.093894][T12010] MINIX-fs: deleted inode referenced: 6
[  322.096094][T12010] MINIX-fs: deleted inode referenced: 6
[  322.102308][T12010] MINIX-fs: deleted inode referenced: 6
[  322.239661][T12008] loop8: detected capacity change from 0 to 32768
[  322.247715][T12017] openvswitch: netlink: Missing key (keys=40, expected=100)
[  322.263164][T12008] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  322.299504][T12008] XFS (loop8): Ending clean mount
[  322.305971][T12008] XFS (loop8): Quotacheck needed: Please wait.
[  322.427129][T12028] loop5: detected capacity change from 0 to 256
[  322.450264][T12028] FAT-fs (loop5): Directory bread(block 1285) failed
[  322.532390][T12008] XFS (loop8): Quotacheck: Done.
[  322.736139][T11592] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  323.073259][T12040] loop8: detected capacity change from 0 to 512
[  323.095942][T12040] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  323.102754][T12040] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  324.540839][T11592] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  324.825052][T12073] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2157'.
[  324.886501][   T10] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  325.036248][   T10] usb 9-1: Using ep0 maxpacket: 16
[  325.046167][   T10] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  325.050017][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  325.053221][   T10] usb 9-1: Product: syz
[  325.054935][   T10] usb 9-1: Manufacturer: syz
[  325.057403][   T10] usb 9-1: SerialNumber: syz
[  325.068146][   T10] r8152-cfgselector 9-1: Unknown version 0x0000
[  325.070807][   T10] r8152-cfgselector 9-1: config 0 descriptor??
[  325.488720][ T2306] r8152-cfgselector 9-1: USB disconnect, device number 3
[  326.505891][ T9465] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  326.656329][ T9465] usb 6-1: Using ep0 maxpacket: 32
[  326.660441][ T9465] usb 6-1: config 0 has an invalid interface number: 169 but max is 0
[  326.666021][ T9465] usb 6-1: config 0 has no interface number 0
[  326.673192][ T9465] usb 6-1: config 0 interface 169 has no altsetting 0
[  326.683871][ T9465] usb 6-1: New USB device found, idVendor=0499, idProduct=500c, bcdDevice=33.49
[  326.688555][ T9465] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  326.692035][ T9465] usb 6-1: Product: syz
[  326.693802][ T9465] usb 6-1: Manufacturer: syz
[  326.696511][ T9465] usb 6-1: SerialNumber: syz
[  326.715045][ T9465] usb 6-1: config 0 descriptor??
[  326.734157][ T9465] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  326.862680][ T6138] udevd[6138]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.169/sound/card3/controlC3/../uevent} for writing: Read-only file system
[  326.963532][ T2306] usb 6-1: USB disconnect, device number 20
[  327.805822][   T96] usb 6-1: new full-speed USB device number 21 using dummy_hcd
[  327.997504][   T96] usb 6-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62
[  328.001570][   T96] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  328.004952][   T96] usb 6-1: Product: syz
[  328.008864][   T96] usb 6-1: Manufacturer: syz
[  328.013645][   T96] usb 6-1: SerialNumber: syz
[  328.024226][   T96] usb 6-1: config 0 descriptor??
[  328.048271][   T96] usb 6-1: selecting invalid altsetting 3
[  328.050860][   T96] comedi comedi5: could not set alternate setting 3 in high speed
[  328.054149][   T96] usbdux 6-1:0.0: driver 'usbdux' failed to auto-configure device.
[  328.060885][   T96] usbdux 6-1:0.0: probe with driver usbdux failed with error -22
[  328.365087][ T2306] usb 6-1: USB disconnect, device number 21
[  328.961555][T12177] loop5: detected capacity change from 0 to 128
[  329.001125][T12177] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  329.023749][T12177] ext4 filesystem being mounted at /606/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  329.066854][T12177] EXT4-fs warning (device loop5): __ext4_ioctl:1259: Setting inode version is not supported with metadata_csum enabled.
[  329.121336][ T7804] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  329.239328][T12187] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  329.695736][ T2306] usb 6-1: new full-speed USB device number 22 using dummy_hcd
[  329.849425][ T2306] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  329.870926][ T2306] usb 6-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  329.882568][ T2306] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  329.890616][ T2306] usb 6-1: Product: syz
[  329.900047][ T2306] usb 6-1: Manufacturer: syz
[  329.910005][ T2306] usb 6-1: SerialNumber: syz
[  329.988389][ T2306] usb 6-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  330.429537][ T2306] usb 6-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  330.941914][T12206] loop8: detected capacity change from 0 to 512
[  330.960778][T12206] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.2217: invalid indirect mapped block 4294967295 (level 1)
[  330.976814][T12206] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.2217: invalid indirect mapped block 4294967295 (level 1)
[  330.987985][T12206] EXT4-fs (loop8): 2 truncates cleaned up
[  330.991293][T12206] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  331.002958][T12206] EXT4-fs error (device loop8): ext4_get_parent:1834: inode #11: comm syz.8.2217: bad parent inode number: 3
[  331.031426][T11592] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  331.722625][T12235] bridge0: port 2(bridge_slave_1) entered disabled state
[  332.431361][ T9465] usb 6-1: USB disconnect, device number 22
[  332.603021][T12260] loop5: detected capacity change from 0 to 8192
[  332.731905][T12270] bond_slave_0: entered promiscuous mode
[  332.735253][T12270] bond_slave_1: entered promiscuous mode
[  332.749970][T12270] vlan2: entered promiscuous mode
[  332.755293][T12270] bond0: entered promiscuous mode
[  333.022882][T12272] loop8: detected capacity change from 0 to 32768
[  333.044109][T12272] bcachefs (/dev/loop8): error validating superblock: Invalid superblock section members_v2: section too small (63114 > 64)
[  333.044109][T12272] members_v2 (size 64):
[  333.044109][T12272] nr_devices mismatch: have 0 entries, should be 1
[  333.054040][T12272] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  333.195264][ T9465] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  333.257276][T12282] could not allocate digest TFM handle sm3
[  333.345759][ T9465] usb 6-1: Using ep0 maxpacket: 8
[  333.349799][ T9465] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  333.355623][ T9465] usb 6-1: config 179 has no interface number 0
[  333.358962][ T9465] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  333.364848][ T9465] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  333.369739][ T9465] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  333.374186][ T9465] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  333.378638][ T9465] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  333.383304][T12290] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2254'.
[  333.393223][ T9465] usb 6-1: config 179 interface 65 has no altsetting 0
[  333.395738][ T9465] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  333.398617][ T9465] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  333.466077][ T9465] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input15
[  333.550640][ T5281] input input15: unable to receive magic message: -110
[  333.584835][ T5281] input input15: unable to receive magic message: -32
[  333.593543][ T5281] input input15: unable to receive magic message: -32
[  333.827705][ T9465] usb 6-1: USB disconnect, device number 23
[  333.829919][    C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  334.411204][T12348] overlay: Unknown parameter '\'
[  334.441190][T12350] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  334.635191][ T9465] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  334.787062][ T9465] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  334.791428][ T9465] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  334.804975][ T9465] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  334.808712][ T9465] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  334.821665][ T9465] usb 6-1: config 0 descriptor??
[  334.866569][T12359] loop8: detected capacity change from 0 to 32768
[  334.878047][T12359] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  334.911525][T12359] XFS (loop8): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  334.920756][T12359] XFS (loop8): Starting recovery (logdev: internal)
[  334.937591][T12359] XFS (loop8): Ending recovery (logdev: internal)
[  334.982449][T11592] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  335.251513][ T9465] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x2
[  335.254445][ T9465] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x2
[  335.267689][ T9465] pyra 0003:1E7D:2CF6.000E: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0
[  335.449703][ T9465] pyra 0003:1E7D:2CF6.000E: couldn't init struct pyra_device
[  335.467070][ T9465] pyra 0003:1E7D:2CF6.000E: couldn't install mouse
[  335.482290][ T9465] pyra 0003:1E7D:2CF6.000E: probe with driver pyra failed with error -71
[  335.496738][ T9465] usb 6-1: USB disconnect, device number 24
[  335.602505][T12386] loop8: detected capacity change from 0 to 1024
[  336.276531][T12420] netlink: 'syz.7.2306': attribute type 32 has an invalid length.
[  336.298876][T12422] loop5: detected capacity change from 0 to 256
[  336.320447][T12422] netlink: 'syz.5.2308': attribute type 16 has an invalid length.
[  336.323057][T12422] netlink: 'syz.5.2308': attribute type 3 has an invalid length.
[  336.327810][T12422] netlink: 34014 bytes leftover after parsing attributes in process `syz.5.2308'.
[  336.568028][T12434] loop8: detected capacity change from 0 to 512
[  336.617217][   T33] audit: type=1800 audit(1755041407.592:101): pid=12434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2313" name="bus" dev="loop8" ino=1048663 res=0 errno=0
[  336.674852][T12434] loop8: detected capacity change from 512 to 64
[  336.689531][T12434] FAT-fs (loop8): FAT read failed (blocknr 32)
[  336.690095][T12434] FAT-fs (loop8): unable to read inode block for updating (i_pos 2181)
[  336.781303][T12444] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2319'.
[  336.844517][T11592] FAT-fs (loop8): Directory bread(block 34) failed
[  336.853043][T11592] FAT-fs (loop8): Directory bread(block 35) failed
[  336.856630][T11592] FAT-fs (loop8): Directory bread(block 36) failed
[  336.859571][T11592] FAT-fs (loop8): Directory bread(block 37) failed
[  336.862881][T11592] FAT-fs (loop8): Directory bread(block 38) failed
[  336.867150][T11592] FAT-fs (loop8): Directory bread(block 39) failed
[  336.870040][T11592] FAT-fs (loop8): Directory bread(block 40) failed
[  336.880519][T11592] FAT-fs (loop8): Directory bread(block 41) failed
[  336.922837][T12052] FAT-fs (loop8): Invalid FSINFO signature: 0x00416152, 0x05614172 (sector = 1)
[  336.961272][T12448] loop5: detected capacity change from 0 to 2048
[  336.975654][T12448] udf: Unknown parameter ''
[  337.556878][   T12] bridge_slave_1: left allmulticast mode
[  337.564785][   T12] bridge_slave_1: left promiscuous mode
[  337.571787][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  337.578509][   T12] bridge_slave_0: left allmulticast mode
[  337.581183][   T12] bridge_slave_0: left promiscuous mode
[  337.583965][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  338.279646][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  338.329745][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  338.337924][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  338.355992][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  338.371995][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  338.556512][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  338.563194][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  338.569541][   T12] bond0 (unregistering): Released all slaves
[  338.874718][ T7933] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  338.919959][T12468] chnl_net:caif_netlink_parms(): no params data found
[  338.964122][   T12] hsr_slave_0: left promiscuous mode
[  338.970193][   T12] hsr_slave_1: left promiscuous mode
[  338.973303][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  338.976385][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  338.979653][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  338.982335][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  338.998416][   T12] veth1_macvtap: left promiscuous mode
[  339.000932][   T12] veth0_macvtap: left promiscuous mode
[  339.003275][   T12] veth1_vlan: left promiscuous mode
[  339.005341][   T12] veth0_vlan: left promiscuous mode
[  339.044513][ T7933] usb 6-1: Using ep0 maxpacket: 32
[  339.065581][ T7933] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  339.070498][ T7933] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  339.079140][ T7933] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  339.082529][ T7933] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  339.085721][ T7933] usb 6-1: Product: syz
[  339.087084][ T7933] usb 6-1: Manufacturer: syz
[  339.092262][ T7933] hub 6-1:4.0: USB hub found
[  339.320736][ T7933] hub 6-1:4.0: config failed, hub doesn't have any ports! (err -19)
[  339.646010][ T2306] usb 6-1: USB disconnect, device number 25
[  340.003032][   T12] team0 (unregistering): Port device team_slave_1 removed
[  340.125091][   T12] team0 (unregistering): Port device team_slave_0 removed
[  340.490727][ T5858] Bluetooth: hci2: command tx timeout
[  340.582002][T12514] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2348'.
[  340.585819][T12514] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  340.611778][ T2306] IPVS: starting estimator thread 0...
[  340.663305][T12520] loop5: detected capacity change from 0 to 16
[  340.714379][T12516] IPVS: using max 52 ests per chain, 124800 per kthread
[  340.730006][T12523] capability: warning: `syz.5.2352' uses 32-bit capabilities (legacy support in use)
[  341.697819][T12468] bridge0: port 1(bridge_slave_0) entered blocking state
[  341.700943][T12468] bridge0: port 1(bridge_slave_0) entered disabled state
[  341.703965][T12468] bridge_slave_0: entered allmulticast mode
[  341.728396][T12468] bridge_slave_0: entered promiscuous mode
[  341.737621][T12468] bridge0: port 2(bridge_slave_1) entered blocking state
[  341.756899][T12468] bridge0: port 2(bridge_slave_1) entered disabled state
[  341.760096][T12468] bridge_slave_1: entered allmulticast mode
[  341.766023][T12468] bridge_slave_1: entered promiscuous mode
[  341.813206][T12468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  341.885434][T12468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  341.929266][T12468] team0: Port device team_slave_0 added
[  341.936895][T12468] team0: Port device team_slave_1 added
[  342.077759][T12468] batman_adv: batadv0: Adding interface: batadv_slave_0
[  342.081976][T12468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  342.095210][T12468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  342.101123][   T12] ------------[ cut here ]------------
[  342.103440][   T12] WARNING: CPU: 1 PID: 12 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x270/0x2f0
[  342.107660][   T12] Modules linked in:
[  342.110802][   T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  342.116696][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  342.121176][   T12] Workqueue: netns cleanup_net
[  342.123270][   T12] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[  342.125632][   T12] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 a8 e0 01 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 56 9e e2 f7 e8 f1 75 9e f7 90 <0f> 0b 90 e9 fd fd ff ff e8 e3 75 9e f7 90 0f 0b 90 e9 60 fe ff ff
[  342.128434][T12468] batman_adv: batadv0: Adding interface: batadv_slave_1
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  342.133225][   T12] RSP: 0018:ffffc900000f7898 EFLAGS: 00010293
[  342.138847][   T12] RAX: ffffffff8a2135bf RBX: ffff888037812440 RCX: ffff88801c2ed640
[  342.141930][   T12] RDX: 0000000000000000 RSI: ffffffff8dba33cb RDI: ffff88801c2ed640
[  342.145246][   T12] RBP: ffffc900000f79b0 R08: ffffffff8fa34237 R09: 1ffffffff1f46846
[  342.148621][   T12] R10: dffffc0000000000 R11: fffffbfff1f46847 R12: ffffffff8f62d2e0
[  342.151938][   T12] R13: 1ffff9200001ef40 R14: ffff8880378138c0 R15: dffffc0000000000
[  342.155145][   T12] FS:  0000000000000000(0000) GS:ffff8881a3c24000(0000) knlGS:0000000000000000
[  342.158683][   T12] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  342.160862][   T12] CR2: fffffffffffffffd CR3: 000000010d568000 CR4: 00000000000006f0
[  342.165035][   T12] Call Trace:
[  342.166539][   T12]  <TASK>
[  342.167725][   T12]  xfrm_net_exit+0x2d/0x70
[  342.169601][   T12]  ops_undo_list+0x49a/0x990
[  342.171389][   T12]  ? __pfx_ops_undo_list+0x10/0x10
[  342.173268][   T12]  ? preempt_schedule_thunk+0x16/0x30
[  342.174606][T12468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  342.175385][   T12]  cleanup_net+0x4c5/0x800
[  342.187386][   T12]  ? __pfx_cleanup_net+0x10/0x10
[  342.189407][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  342.191401][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  342.193789][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  342.194055][T12468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  342.196151][   T12]  process_scheduled_works+0xae1/0x17b0
[  342.202258][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[  342.204288][   T12]  worker_thread+0x8a0/0xda0
[  342.205768][   T12]  kthread+0x711/0x8a0
[  342.207044][   T12]  ? __pfx_worker_thread+0x10/0x10
[  342.208747][   T12]  ? __pfx_kthread+0x10/0x10
[  342.210447][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  342.212516][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[  342.214907][   T12]  ? __pfx_kthread+0x10/0x10
[  342.216376][   T12]  ret_from_fork+0x3fc/0x770
[  342.217933][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  342.219528][   T12]  ? __switch_to_asm+0x39/0x70
[  342.221133][   T12]  ? __switch_to_asm+0x33/0x70
[  342.223023][   T12]  ? __pfx_kthread+0x10/0x10
[  342.224969][   T12]  ret_from_fork_asm+0x1a/0x30
[  342.226986][   T12]  </TASK>
[  342.228198][   T12] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  342.231195][   T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  342.235646][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  342.238762][   T12] Workqueue: netns cleanup_net
[  342.240284][   T12] Call Trace:
[  342.241420][   T12]  <TASK>
[  342.242357][   T12]  dump_stack_lvl+0x99/0x250
[  342.243906][   T12]  ? __asan_memcpy+0x40/0x70
[  342.245547][   T12]  ? __pfx_dump_stack_lvl+0x10/0x10
[  342.247257][   T12]  ? __pfx__printk+0x10/0x10
[  342.248862][   T12]  vpanic+0x281/0x750
[  342.250215][   T12]  ? __pfx__printk+0x10/0x10
[  342.251694][   T12]  ? __pfx_vpanic+0x10/0x10
[  342.253182][   T12]  ? is_bpf_text_address+0x292/0x2b0
[  342.254861][   T12]  panic+0xb9/0xc0
[  342.256168][   T12]  ? __pfx_panic+0x10/0x10
[  342.257940][   T12]  __warn+0x31b/0x4b0
[  342.259602][   T12]  ? xfrm_state_fini+0x270/0x2f0
[  342.261583][   T12]  ? xfrm_state_fini+0x270/0x2f0
[  342.263616][   T12]  report_bug+0x2be/0x4f0
[  342.265307][   T12]  ? xfrm_state_fini+0x270/0x2f0
[  342.267322][   T12]  ? xfrm_state_fini+0x270/0x2f0
[  342.269271][   T12]  ? xfrm_state_fini+0x272/0x2f0
[  342.271125][   T12]  handle_bug+0x84/0x160
[  342.272829][   T12]  exc_invalid_op+0x1a/0x50
[  342.274746][   T12]  asm_exc_invalid_op+0x1a/0x20
[  342.276784][   T12] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[  342.279046][   T12] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 a8 e0 01 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 56 9e e2 f7 e8 f1 75 9e f7 90 <0f> 0b 90 e9 fd fd ff ff e8 e3 75 9e f7 90 0f 0b 90 e9 60 fe ff ff
[  342.286299][   T12] RSP: 0018:ffffc900000f7898 EFLAGS: 00010293
[  342.288780][   T12] RAX: ffffffff8a2135bf RBX: ffff888037812440 RCX: ffff88801c2ed640
[  342.291934][   T12] RDX: 0000000000000000 RSI: ffffffff8dba33cb RDI: ffff88801c2ed640
[  342.294963][   T12] RBP: ffffc900000f79b0 R08: ffffffff8fa34237 R09: 1ffffffff1f46846
[  342.297438][   T12] R10: dffffc0000000000 R11: fffffbfff1f46847 R12: ffffffff8f62d2e0
[  342.300238][   T12] R13: 1ffff9200001ef40 R14: ffff8880378138c0 R15: dffffc0000000000
[  342.303285][   T12]  ? xfrm_state_fini+0x26f/0x2f0
[  342.305018][   T12]  ? xfrm_state_fini+0x26f/0x2f0
[  342.306782][   T12]  xfrm_net_exit+0x2d/0x70
[  342.308530][   T12]  ops_undo_list+0x49a/0x990
[  342.310097][   T12]  ? __pfx_ops_undo_list+0x10/0x10
[  342.312001][   T12]  ? preempt_schedule_thunk+0x16/0x30
[  342.314016][   T12]  cleanup_net+0x4c5/0x800
[  342.315697][   T12]  ? __pfx_cleanup_net+0x10/0x10
[  342.317732][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  342.319918][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  342.322286][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  342.324403][   T12]  process_scheduled_works+0xae1/0x17b0
[  342.326297][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[  342.328382][   T12]  worker_thread+0x8a0/0xda0
[  342.330084][   T12]  kthread+0x711/0x8a0
[  342.331762][   T12]  ? __pfx_worker_thread+0x10/0x10
[  342.333960][   T12]  ? __pfx_kthread+0x10/0x10
[  342.335936][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  342.338131][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[  342.340217][   T12]  ? __pfx_kthread+0x10/0x10
[  342.342016][   T12]  ret_from_fork+0x3fc/0x770
[  342.343868][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  342.345942][   T12]  ? __switch_to_asm+0x39/0x70
[  342.347981][   T12]  ? __switch_to_asm+0x33/0x70
[  342.350046][   T12]  ? __pfx_kthread+0x10/0x10
[  342.352013][   T12]  ret_from_fork_asm+0x1a/0x30
[  342.354006][   T12]  </TASK>
[  342.356040][   T12] Kernel Offset: disabled
[  342.357903][   T12] Rebooting in 86400 seconds..

VM DIAGNOSIS:
23:26:06  Registers:
info registers vcpu 0

CPU#0
RAX=81b3421cd44f7c00 RBX=ffffffff821a5a17 RCX=ffff888100151cc0 RDX=0000000000000000
RSI=ffffffff8be325e0 RDI=ffffffff8be325a0 RBP=dffffc0000000000 RSP=ffffc9000299ed40
R8 =0000000000000000 R9 =ffffffff8172c195 R10=ffffc9000299eeb8 R11=ffffffff81ac3890
R12=1ffff92000533dcd R13=ffffc9000299eea0 R14=ffffc9000299ee68 R15=ffffffff8172c195
RIP=ffffffff8b78b162 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8624000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f79174e7d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007f79169876c3 00007f79169876c3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=000055558ceff1b1 000055558cefef90
XMM06=000055558cf09978 000055558cf09970 XMM07=69662f2f38d380e8 f6f2cbf92df09e20
XMM08=0622be437712c53e 93b9f1e8728370bf XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000006f RBX=000000000000006f RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000f7030
R8 =ffff888021318237 R9 =1ffff11004263046 R10=dffffc0000000000 R11=ffffffff854e72a0
R12=dffffc0000000000 R13=ffffffff99af18f6 R14=ffffffff99de64e0 R15=0000000000000000
RIP=ffffffff854e731c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c24000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=fffffffffffffffd CR3=000000010d568000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f2a12a12e53
XMM06=0000000000000000 00007f2a12a12e4d XMM07=0000000000000000 00007f2a12a12e61
XMM08=0000000000000000 00007f2a12a12ee7 XMM09=0000000000000000 00007f2a12a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
