last executing test programs:

5m41.792296323s ago: executing program 32 (id=383):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xe)
ioctl$TCSETS(r0, 0x80047437, &(0x7f00000000c0)={0xffffffff, 0x0, 0x0, 0x49, 0xff, "0400"})

5m38.824548096s ago: executing program 33 (id=410):
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000090024206d041cc3400000000001090224"], 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
syz_open_dev$vbi(&(0x7f0000000540), 0x1, 0x2)
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$kcm(0x11, 0x2, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x8d0)
pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x3, 0x34f}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, 0x0, 0x0)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

5m19.63219837s ago: executing program 34 (id=622):
syz_usb_connect(0x5, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x92, 0xec, 0xc6, 0x20, 0x5ac, 0x77c2, 0xeb3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xc4, 0x1, 0x1, 0xff, 0xfd, 0x1, 0x80, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)

4m55.063685265s ago: executing program 35 (id=878):
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file2\x00', 0x1c802, &(0x7f0000000ec0)=ANY=[], 0x1, 0x5eea, &(0x7f000000e480)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x8)

4m28.066767863s ago: executing program 36 (id=1158):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000001640)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="0213000002"], 0x10}}, 0x0)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)

3m43.070517351s ago: executing program 37 (id=1629):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000080)=0x5, 0x4)
sendto$inet(r0, &(0x7f0000000000)="f461", 0x2, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10)

3m27.928482711s ago: executing program 6 (id=1827):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2)
write(r0, &(0x7f00000000c0), 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040))
close(0x3)

3m27.830060947s ago: executing program 6 (id=1828):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x6f5e, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffd, 0x6, 0xc, @buffer={0x0, 0x0, 0x0}, &(0x7f00000000c0)="0a16a4f437e1", 0x0, 0x100007, 0x0, 0xfffffffe, 0x0})

3m27.829722917s ago: executing program 6 (id=1829):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000280)="9a", 0x1}], 0x1}}], 0x1, 0x4000000)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000003c0)=@sack_info={r2, 0x9, 0x1}, 0xc)

3m27.746739695s ago: executing program 6 (id=1830):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/../file0\x00', 0x202200, 0x0)
r2 = open_tree(r1, &(0x7f00000001c0)='./file0/file0\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

3m27.742286562s ago: executing program 6 (id=1831):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
remap_file_pages(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x80000001, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000400)={[{@sysvgroups}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x82f}}, {@grpquota}, {@debug}, {@debug}, {@grpid}]}, 0x80, 0x54f, &(0x7f0000000480)="$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")
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x8}}, 0x20)
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0)
prlimit64(0x0, 0xb, 0x0, 0x0)
tkill(0x0, 0x11)
mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2012024, 0x0)

3m27.589303915s ago: executing program 6 (id=1832):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
setpgid(r0, 0x0)
setpgid(0x0, r0)
r2 = syz_open_dev$vcsa(&(0x7f0000000240), 0xfffffffffffffff1, 0x40000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
fstat(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setreuid(0x0, r4)
setfsuid(r4)
statx(r2, &(0x7f0000000280)='./file1\x00', 0x1000, 0x10, 0x0)
mount$fuseblk(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200), 0x8, &(0x7f0000000640)=ANY=[@ANYBLOB="66a495ed3531ec45fa22f1d96292b30489ed000957bb7393b1d4e859f1e45c11b4a865660c75e520c70ba7b8d7e888cc29ca2251fb6d84", @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=r4, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',default_permissions,blksize=0x0000000000000000,allow_other,max_read=0x0003000000000000,max_read=0x0000000000000005,uid>', @ANYBLOB=',\x00'])
openat$dsp1(0xffffffffffffff9c, &(0x7f00000002c0), 0x10000, 0x0)
r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x800000000000001)

3m27.476630536s ago: executing program 38 (id=1832):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
setpgid(r0, 0x0)
setpgid(0x0, r0)
r2 = syz_open_dev$vcsa(&(0x7f0000000240), 0xfffffffffffffff1, 0x40000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
fstat(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setreuid(0x0, r4)
setfsuid(r4)
statx(r2, &(0x7f0000000280)='./file1\x00', 0x1000, 0x10, 0x0)
mount$fuseblk(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200), 0x8, &(0x7f0000000640)=ANY=[@ANYBLOB="66a495ed3531ec45fa22f1d96292b30489ed000957bb7393b1d4e859f1e45c11b4a865660c75e520c70ba7b8d7e888cc29ca2251fb6d84", @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=r4, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',default_permissions,blksize=0x0000000000000000,allow_other,max_read=0x0003000000000000,max_read=0x0000000000000005,uid>', @ANYBLOB=',\x00'])
openat$dsp1(0xffffffffffffff9c, &(0x7f00000002c0), 0x10000, 0x0)
r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x800000000000001)

3m26.086571442s ago: executing program 8 (id=1844):
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x3, 0x0, 0x7ff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

3m25.998825903s ago: executing program 8 (id=1845):
unshare(0x22060480)
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0)
close_range(r0, 0xffffffffffffffff, 0x2)

3m25.929146632s ago: executing program 8 (id=1847):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x14, 0x4, 0x4, 0x4}, 0x50)
bpf$MAP_DELETE_ELEM(0x4, &(0x7f00000003c0)={r0, &(0x7f0000000680)="9f", 0x20000000}, 0x20)

3m25.857525175s ago: executing program 8 (id=1849):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)={0x0, 0x960, 0xf0, 0x360, 0x0, 0x7ff, 0x4, 0x0, {0x2, 0xffffff59, 0x1}, {0x73a8c463, 0x1, 0x1}, {0x4, 0x1465}, {}, 0x0, 0x1, 0x6, 0x8, 0x1, 0x723b, 0xb76f, 0x5, 0x1, 0x9, 0xffff, 0x40, 0x0, 0x2, 0x3, 0xb})

3m25.779002669s ago: executing program 8 (id=1851):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x3000001, 0x0, 0xfd, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000200)={0x2080025, 0xf46, 0xffffffff, 0x675, 0x8001})

3m25.580501416s ago: executing program 8 (id=1853):
r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000006c0)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, <r2=>0x0, <r3=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000680)={r1, <r4=>r2, r3, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000200)={r1, r4, r3, 0x5, 0x80400000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x800f, 0x222})

3m10.571437662s ago: executing program 39 (id=1853):
r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000006c0)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, <r2=>0x0, <r3=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000680)={r1, <r4=>r2, r3, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000200)={r1, r4, r3, 0x5, 0x80400000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x800f, 0x222})

2m55.74709301s ago: executing program 2 (id=2114):
creat(&(0x7f0000000080)='./bus\x00', 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file0'}, 0xb)
mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,')

2m55.684731326s ago: executing program 2 (id=2116):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
statx(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2000, 0xf0cb2f4a0c2cfc5d, 0x0)
read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0x0, r1, {0x7, 0x2b, 0x3, 0x440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
read$FUSE(r0, &(0x7f0000004340)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r0, &(0x7f0000000200)={0x10, 0xffffffffffffffda, r2}, 0x10)

2m54.82355959s ago: executing program 2 (id=2127):
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, &(0x7f00000000c0)=0x401, 0x4)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x1000000, &(0x7f0000000040)={[{@usrjquota}, {}]}, 0x0, 0x248, &(0x7f0000000940)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg2\x00', <r1=>0x0})
sendto$packet(0xffffffffffffffff, &(0x7f0000000480)="3f031c", 0x3, 0x20000094, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000000c0)=@v2={0x2, @adiantum, 0x4, '\x00', @a})
chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00')
openat(0xffffffffffffff9c, 0x0, 0x121c80, 0x47)
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10)

2m54.633189137s ago: executing program 2 (id=2129):
inotify_init1(0x800)
syz_mount_image$fuse(0x0, 0x0, 0x1000009, 0x0, 0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000008c0), 0x3, 0x5eb, &(0x7f0000000c00)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0)
lsetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000200)='\xa2-\x00', 0x3, 0x1)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})
llistxattr(0x0, 0x0, 0x0)

2m54.234619557s ago: executing program 2 (id=2131):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x2, 0x4e24, @broadcast}, 0x10, 0x0}, 0x40)

2m53.54677276s ago: executing program 2 (id=2136):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00')
pwritev(r0, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}, {&(0x7f0000000040)="36c2", 0x2}], 0x2, 0x0, 0x0)

2m53.241674838s ago: executing program 40 (id=2136):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00')
pwritev(r0, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}, {&(0x7f0000000040)="36c2", 0x2}], 0x2, 0x0, 0x0)

1m54.078326068s ago: executing program 1 (id=2867):
io_uring_setup(0x6e4e, &(0x7f0000000000)={0x0, 0x1382, 0x8, 0x1, 0x1fb})
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000760001"], 0x20}}, 0x0)

1m53.4802082s ago: executing program 1 (id=2872):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x708})
r1 = socket$inet(0x2, 0x5, 0x1)
bind$inet(r1, 0x0, 0x0)
r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/prev\x00')
fcntl$notify(r3, 0x402, 0x80000006)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r6, &(0x7f0000002140)={0x2020, 0x0, <r7=>0x0}, 0x2020)
syz_fuse_handle_req(r6, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9474a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3, {0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x801}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r6, &(0x7f0000000340)={0x50, 0x0, r7}, 0x50)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0)
ioctl$FIBMAP(r8, 0x401070ca, 0x0)
shutdown(r5, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0xff}}, @in6={0xa, 0x4e21, 0xf, @loopback, 0x6}]}, &(0x7f0000000180)=0x10)
r9 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r10=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000000)={r10, @in={{0x2, 0x4e24, @empty}}, 0x27c0}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f00000001c0)={r10, @in={{0x2, 0x4e24, @empty}}, 0xfffc}, 0x90)
setsockopt(r4, 0x2, 0xcc, 0x0, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r11, 0x0, 0x3e, 0x0, &(0x7f0000000200)="e460cdfbef2408002900119386dd6a00000000072feb3014cd3ec8a755c1e1380081ffad000400e8d50000000100000bb500000500242c100806d33655bb", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000140)=r3, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x18, 0x0, "999465ed58d24dfebbbdd35585486fe01445079cc3065caddb814eef7df1b270c23e44b9911f74d226cae29694512da161e0196a3b85d2a46c6b51a0dcdb78d32335947a2b5976770570f27987ec44d8"}, 0xd8)

1m53.248944896s ago: executing program 1 (id=2875):
syz_usb_connect(0x2, 0x34, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed01020301090222000100000000090400"], 0x0)
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0)

1m51.940493095s ago: executing program 1 (id=2886):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x101091, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)

1m51.648742005s ago: executing program 1 (id=2887):
r0 = syz_io_uring_setup(0x3ac6, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x10100, 0x4, 0x37c}, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[{0x10, 0x10d, 0x5}], 0x10}, 0x0, 0xe3d08660d3cd4684})
io_uring_enter(r0, 0x92, 0x0, 0x0, 0x0, 0x0)

1m51.441147039s ago: executing program 1 (id=2888):
syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x4006, &(0x7f0000002440)=ANY=[], 0x1, 0xc0a, &(0x7f0000001040)="$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")
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/raw\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
copy_file_range(r1, 0x0, r0, 0x0, 0xffffffffa003e459, 0x700000000000000)

1m51.321108384s ago: executing program 41 (id=2888):
syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x4006, &(0x7f0000002440)=ANY=[], 0x1, 0xc0a, &(0x7f0000001040)="$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")
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/raw\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
copy_file_range(r1, 0x0, r0, 0x0, 0xffffffffa003e459, 0x700000000000000)

1m1.534497948s ago: executing program 3 (id=3643):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff}, 0x2, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f00000009c0), r1, 0x1}}, 0x18)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3)

1m1.472668291s ago: executing program 3 (id=3644):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0)

1m1.472381614s ago: executing program 3 (id=3645):
r0 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000000600)=""/235, 0xeb}, {&(0x7f0000000540)=""/167, 0xa7}], 0x3}, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33)

1m1.324371602s ago: executing program 3 (id=3648):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0)
mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)
umount2(&(0x7f0000000280)='./file0/file0/file0\x00', 0xa)

1m1.238675529s ago: executing program 3 (id=3650):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x481, &(0x7f0000000140)={[{@force}, {@gid}, {@nobarrier}, {@nobarrier}, {@nobarrier}, {@type={'type', 0x3d, "e39c9acc"}}, {}, {@part={'part', 0x3d, 0x8000}}, {@nls={'nls', 0x3d, 'iso8859-14'}}]}, 0x1, 0x6f8, &(0x7f0000000940)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
lseek(r0, 0xfffffffffffffffe, 0x2)
getdents64(r0, 0x0, 0x0)

1m0.745649264s ago: executing program 3 (id=3651):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x34, r0, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xab}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0)

1m0.669842168s ago: executing program 42 (id=3651):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x34, r0, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xab}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0)

37.332136849s ago: executing program 0 (id=3953):
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_opts(r0, 0x84, 0x1e, 0xfffffffffffffffe, &(0x7f0000000000)=0x4a)

37.331784102s ago: executing program 0 (id=3954):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x4, 0x3, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)

37.263694004s ago: executing program 0 (id=3955):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="68000000100039042cbd7000eaffffff000003e4", @ANYRES32=r2, @ANYBLOB="83000400000000004800128008000100736974003c000280050009"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)

37.20182519s ago: executing program 0 (id=3956):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x22000b0, 0x0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
pivot_root(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00')

37.201638074s ago: executing program 0 (id=3957):
r0 = fanotify_init(0x8, 0x80000)
write$binfmt_elf64(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4622"], 0x18)

36.933237172s ago: executing program 0 (id=3958):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0xd, 0x0, 0x0)

36.786741365s ago: executing program 43 (id=3958):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0xd, 0x0, 0x0)

17.621732278s ago: executing program 5 (id=4185):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000880)={0x0, @l2={0x1f, 0x758b, @any, 0x38, 0x2}, @generic={0x18, "16cb1ad749b939654300516aaba5"}, @in={0x2, 0x4e22, @local}, 0xe, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x2, 0xea})

17.551798264s ago: executing program 5 (id=4186):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS32(r0, 0x806c4120, &(0x7f0000000280))

17.551331846s ago: executing program 5 (id=4187):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fchmod(r2, 0x2)
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r4, 0xffffffffffffffff, 0x1b, 0x0, @val=@perf_event}, 0x18)
prctl$PR_SET_PTRACER(0x59616d61, r0)

16.626199212s ago: executing program 5 (id=4192):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000740)='./file0\x00', 0x800, &(0x7f0000000080)={[{@rodir}, {@numtail}, {@shortname_winnt}, {@uni_xlate}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '865'}}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@shortname_mixed}, {@shortname_win95}, {@uni_xlateno}, {@uni_xlate}]}, 0x5, 0x271, &(0x7f0000000780)="$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")
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

16.570436944s ago: executing program 5 (id=4194):
syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000180)={[{@errors_remount}, {@dioread_lock}, {@noquota}, {@noblock_validity}, {@inlinecrypt}]}, 0xfc, 0x564, &(0x7f00000008c0)="$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")
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020000001d"], 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0)

16.470915876s ago: executing program 5 (id=4198):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000040), 0xc)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x2021, 0x0)
connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)
ioctl$sock_qrtr_TIOCINQ(r0, 0x8919, 0x0)
writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1)

16.382944209s ago: executing program 44 (id=4198):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000040), 0xc)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x2021, 0x0)
connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)
ioctl$sock_qrtr_TIOCINQ(r0, 0x8919, 0x0)
writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1)

3.218803144s ago: executing program 7 (id=4355):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r6, 0x0, 0x6}, 0x18)
ioctl$RTC_SET_TIME(r0, 0x4024700a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r7 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[], [], 0x6b}})

2.598162977s ago: executing program 4 (id=4363):
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = socket(0x15, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x2710, 0x0, &(0x7f0000000040))

2.504640314s ago: executing program 4 (id=4365):
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x80000000, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000240)={0xf0f042, 0x100000})

2.502750089s ago: executing program 4 (id=4367):
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
read$FUSE(r0, 0x0, 0x0)

2.39821412s ago: executing program 4 (id=4368):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
r1 = fcntl$dupfd(r0, 0x406, r0)
ioctl$TCFLSH(r0, 0x400455c8, 0x1)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffc0)

2.267278437s ago: executing program 7 (id=4371):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1, 0x6213, &(0x7f0000000240)="$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")
r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, &(0x7f0000000100)={0x8003, 0x1000, 0x2000, 0x0, 0x0, 0x0, 0x2401})

2.027669556s ago: executing program 7 (id=4376):
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001280)={0x24, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x1108000, 0x1000, 0xbb28}, 0x20)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[@ANYBLOB="545e9a", @ANYBLOB="4f0cff66dac50e65f4944faabbeb020c8e57572456bec593e0d2ecf32e6dddf38e8aff27f9a893cb516339027ad68134cc76951dd7b7ef951b95e92f41e5a68772e12edfe4c5eeb8cd72677beed3d4ff11"])

1.030593361s ago: executing program 9 (id=4383):
unshare(0x2a020400)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r0, &(0x7f00000004c0)="8194a713fb8c07ebb9423607c5f31bac76782fda07131ee74eea61f546fbc38871007784afee543ea273048d1cdc567c0d8a0804cac96f9fe04e4f2feaa50984316b96a25c8863673ab7fd740cfd1ef4d91b7535e45ec09c7ff35914ff90aa735479203992035126d1c3699e499da41ce16fd6ff9a6dbd748d744ceb4fa44e0a76585af65f15", 0x2e, 0x4004000, &(0x7f0000000100)={0xa, 0x3, 0x5ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x81}, 0xffffffffffffffcb)

1.030327749s ago: executing program 9 (id=4384):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001200)=ANY=[@ANYBLOB="c80000001000010402400000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="08d10000000000009400128009000100766c616e00000000840002800c0002000e0000000c0000000c000200100000001200000004000480640004800c00010065410000740000000c00010000040000d70000000c00010005000000ffffffff0c00010000000000050000000c000100000000001bac00000c0001000a0000927de298000c00090003000000020200000c000100090000000500000014000300766c616e30"], 0xc8}}, 0x0)

940.00944ms ago: executing program 9 (id=4385):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x128003)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x6576, 0x9})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000180))

939.592497ms ago: executing program 9 (id=4386):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r0, @ANYBLOB="0000800000000000180034800500"], 0x38}, 0x1, 0x300}, 0x0)

870.583833ms ago: executing program 9 (id=4387):
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001380)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f139046a23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8bf3145144f8df253f85eb6f1c853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e012533719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd70a5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c707647fa8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c024ed6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa60e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df00415312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c556059efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e3e4cd129d5f0cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9ff90400000000000000d64285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f151421ffff57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd113b1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be29010000bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad95971030000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6136497a622d2ca7e72e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000000000009546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f637d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b0a8d328733461f04c99607061c65e000000002a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000f841b31d6dbdca11ee1f4be392176707090de3fb76faa37af5e5690c6db25144fd00ae2bf40d5b353795ebf80d1457a1bb14aa1ad2cf1abf09aed6385f567be2d911b43221841518d6a6480fc7a1c99e65dea002d856facc32996d740a991667c88462ce1e0895322d07d50000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
flock(r1, 0x5)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
flock(r3, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='rseq_update\x00', r0}, 0x10)

347.951487ms ago: executing program 7 (id=4388):
r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101301)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045519, &(0x7f0000000480)=0x1)

228.728219ms ago: executing program 7 (id=4389):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xb1}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0)

228.464509ms ago: executing program 4 (id=4390):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=@gettaction={0x20, 0x32, 0x605, 0x70bd26, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xffffffffffffff9f, 0x2, {0x1, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80)

227.152828ms ago: executing program 7 (id=4391):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
timerfd_gettime(0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r3}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x1, 0x50)
io_setup(0x4fe, &(0x7f00000009c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x40, r6, &(0x7f0000000200)='8', 0x1, 0x10000000005971}])
symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')

149.085519ms ago: executing program 4 (id=4392):
syz_usb_connect(0x2, 0x4a, &(0x7f0000000ec0)=ANY=[@ANYBLOB="120100006df5710800000000ebc7010203010902380002960000000904cc070002596105052406000105240006000d240f0190080000000007000806241a0500110904"], 0x0)

0s ago: executing program 9 (id=4393):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.events\x00', 0x275a, 0x0)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000400)={0x4, 0x8000000000000001})

kernel console output (not intermixed with test programs):

 p2 p3 p7
[  345.943941][T17483] netlink: 'syz.3.3152': attribute type 1 has an invalid length.
[  345.995930][T17483] 8021q: adding VLAN 0 to HW filter on device bond3
[  346.014044][   T24] usb 6-1: USB disconnect, device number 43
[  346.360154][T17483] bond3 (unregistering): Released all slaves
[  346.825839][T17566] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3157'.
[  347.112655][   T24] usb 6-1: new full-speed USB device number 44 using dummy_hcd
[  347.245504][T17597] loop3: detected capacity change from 0 to 4096
[  347.249644][T17597] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  347.268183][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  347.272696][   T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  347.278274][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64
[  347.288189][   T24] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  347.291873][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.296033][   T24] usb 6-1: Product: syz
[  347.297733][   T24] usb 6-1: Manufacturer: syz
[  347.299579][   T24] usb 6-1: SerialNumber: syz
[  347.305204][   T24] usb 6-1: config 0 descriptor??
[  347.307692][T17570] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  347.310000][T17570] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  347.314483][   T24] usb 6-1: ucan: probing device on interface #0
[  347.337229][T17606] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3173'.
[  347.340143][T17606] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3173'.
[  347.642656][ T5986] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  347.803290][ T5986] usb 4-1: not running at top speed; connect to a high speed hub
[  347.808393][ T5986] usb 4-1: config 2 has an invalid interface number: 178 but max is 0
[  347.811418][ T5986] usb 4-1: config 2 has no interface number 0
[  347.814685][ T5986] usb 4-1: config 2 interface 178 has no altsetting 0
[  347.820198][ T5986] usb 4-1: New USB device found, idVendor=0bdb, idProduct=7db7, bcdDevice=8a.0b
[  347.826023][ T5986] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.829673][ T5986] usb 4-1: Product: syz
[  347.831025][ T5986] usb 4-1: Manufacturer: syz
[  347.834177][ T5986] usb 4-1: SerialNumber: syz
[  347.928898][   T24] ucan 6-1:0.0: probe with driver ucan failed with error -22
[  348.052578][ T5986] cdc_mbim 4-1:2.178: probe with driver cdc_mbim failed with error -71
[  348.057250][ T5986] usb 4-1: USB disconnect, device number 8
[  348.126119][   T10] usb 6-1: USB disconnect, device number 44
[  348.432468][ T5855] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  348.439085][ T5855] Bluetooth: hci1: Injecting HCI hardware error event
[  348.445452][ T5855] Bluetooth: hci1: hardware error 0x00
[  348.511309][T17652] overlayfs: failed to clone upperpath
[  348.782554][T17674] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(12)
[  348.784024][T17678] loop3: detected capacity change from 0 to 1024
[  348.785096][T17674] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  348.790101][T17678] EXT4-fs: inline encryption not supported
[  348.794900][T17678] EXT4-fs: Ignoring removed bh option
[  348.810374][T17674] vhci_hcd vhci_hcd.0: Device attached
[  348.816421][T17674] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(14)
[  348.818614][T17678] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  348.818705][T17674] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  348.827140][T17674] vhci_hcd vhci_hcd.0: Device attached
[  348.830703][T17674] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  348.841671][T17674] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(18)
[  348.843727][T17674] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  348.846510][T17674] vhci_hcd vhci_hcd.0: Device attached
[  348.853248][T17674] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(20)
[  348.855324][T17674] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  348.860714][T17674] vhci_hcd vhci_hcd.0: Device attached
[  348.869189][T17674] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  348.872606][T17674] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  348.879295][T17674] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  348.897763][T17674] vhci_hcd vhci_hcd.0: pdev(5) rhport(7) sockfd(28)
[  348.900349][T17674] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  348.903618][T17674] vhci_hcd vhci_hcd.0: Device attached
[  348.913494][T17691] vhci_hcd: connection closed
[  348.914832][T17678] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, 
[  348.915849][T17686] vhci_hcd: connection closed
[  348.917977][T17678] inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt.
[  348.927857][T17689] vhci_hcd: connection closed
[  348.928094][T17679] vhci_hcd: connection closed
[  348.940542][ T5858] vhci_hcd: stop threads
[  348.943272][T17678] EXT4-fs (loop3): Remounting filesystem read-only
[  348.947000][T17695] vhci_hcd: connection closed
[  348.949703][ T5858] vhci_hcd: release socket
[  348.953388][ T5858] vhci_hcd: disconnect device
[  348.955132][ T5858] vhci_hcd: stop threads
[  348.956532][ T5858] vhci_hcd: release socket
[  348.961277][ T5858] vhci_hcd: disconnect device
[  348.964847][ T5858] vhci_hcd: stop threads
[  348.966316][ T5858] vhci_hcd: release socket
[  348.967876][ T5858] vhci_hcd: disconnect device
[  348.969508][ T5858] vhci_hcd: stop threads
[  348.976282][T16161] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  348.994181][ T5858] vhci_hcd: release socket
[  348.995803][ T5858] vhci_hcd: disconnect device
[  348.998901][ T5858] vhci_hcd: stop threads
[  349.000964][ T5858] vhci_hcd: release socket
[  349.005114][ T5858] vhci_hcd: disconnect device
[  349.037834][T17700] loop3: detected capacity change from 0 to 256
[  349.041583][T17700] exfat: Deprecated parameter 'utf8'
[  349.051595][T17700] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  349.056656][   T10] usb 43-1: new low-speed USB device number 2 using vhci_hcd
[  349.059869][   T10] usb 43-1: enqueue for inactive port 0
[  349.132258][   T10] vhci_hcd: vhci_device speed not set
[  349.483672][ T2302] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  349.635217][ T2302] usb 4-1: Using ep0 maxpacket: 8
[  349.645035][ T2302] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  349.661421][ T2302] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  349.667124][ T2302] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  349.670900][ T2302] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  349.687255][ T2302] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[  349.700087][ T2302] usb 4-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=14.a8
[  349.704900][ T2302] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  349.711886][ T2302] usb 4-1: Product: syz
[  349.715459][ T2302] usb 4-1: Manufacturer: syz
[  349.717355][ T2302] usb 4-1: SerialNumber: syz
[  349.719220][T17730] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3208'.
[  349.723532][ T2302] usb 4-1: config 0 descriptor??
[  349.725597][T17730] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3208'.
[  349.743168][ T2302] redrat3 4-1:0.0: Couldn't find all endpoints
[  349.797225][T17736] tipc: Started in network mode
[  349.799293][T17736] tipc: Node identity ac1414aa, cluster identity 4711
[  349.799950][T17738] loop5: detected capacity change from 0 to 8
[  349.808975][T17736] tipc: Enabled bearer <udp:s>, priority 7
[  349.811549][ T2302] IPVS: starting estimator thread 0...
[  349.902386][T17739] IPVS: using max 39 ests per chain, 93600 per kthread
[  349.963321][ T2302] usb 4-1: USB disconnect, device number 9
[  350.048875][T17761] QAT: failed to copy from user cfg_data.
[  350.094424][T17763] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3217'.
[  350.098294][T17763] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3217'.
[  350.512574][ T5855] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  350.562448][ T2302] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[  350.712826][ T2302] usb 6-1: Using ep0 maxpacket: 16
[  350.716138][ T2302] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  350.722810][ T2302] usb 6-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc
[  350.729784][ T2302] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  350.733594][ T2302] usb 6-1: Product: syz
[  350.734932][ T2302] usb 6-1: Manufacturer: syz
[  350.736615][ T2302] usb 6-1: SerialNumber: syz
[  350.739804][ T2302] usb 6-1: config 0 descriptor??
[  350.745753][ T2302] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  350.845674][   T24] hid-generic 00A0:0006:0003.001E: unknown main item tag 0x0
[  350.848655][   T24] hid-generic 00A0:0006:0003.001E: unknown main item tag 0x0
[  350.851443][   T24] hid-generic 00A0:0006:0003.001E: unknown main item tag 0x0
[  350.857166][   T24] hid-generic 00A0:0006:0003.001E: unknown main item tag 0x0
[  350.860109][   T24] hid-generic 00A0:0006:0003.001E: unknown main item tag 0x0
[  350.866551][   T24] hid-generic 00A0:0006:0003.001E: unknown main item tag 0x0
[  350.869413][   T24] hid-generic 00A0:0006:0003.001E: unknown main item tag 0x0
[  350.875114][   T24] hid-generic 00A0:0006:0003.001E: unknown main item tag 0x0
[  350.877957][   T24] hid-generic 00A0:0006:0003.001E: unknown main item tag 0x0
[  350.881344][   T24] hid-generic 00A0:0006:0003.001E: unknown main item tag 0x0
[  350.891010][   T24] hid-generic 00A0:0006:0003.001E: hidraw0: <UNKNOWN> HID v0.05 Device [syz1] on syz0
[  350.927167][ T2302] tipc: Node number set to 2886997162
[  350.952424][ T2302] usb 6-1: USB disconnect, device number 45
[  352.841743][T17850] loop5: detected capacity change from 0 to 128
[  352.847984][T17850] befs: (loop5): No write support. Marking filesystem read-only
[  352.859017][T17850] befs: (loop5): invalid blocksize: 2066842815
[  353.042511][ T5986] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  353.230644][ T5986] usb 4-1: config 102 has an invalid interface number: 120 but max is 0
[  353.255887][ T5986] usb 4-1: config 102 has no interface number 0
[  353.271811][ T5986] usb 4-1: config 102 interface 120 has no altsetting 0
[  353.284650][ T5986] usb 4-1: New USB device found, idVendor=10fd, idProduct=de00, bcdDevice= 0.01
[  353.288150][ T5986] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  353.290658][ T5986] usb 4-1: Product: syz
[  353.292523][ T5986] usb 4-1: Manufacturer: syz
[  353.294958][ T5986] usb 4-1: SerialNumber: syz
[  353.509483][ T5986] go7007 4-1:102.120: The Lifeview TV Walker Ultra is not supported. Sorry!
[  353.515237][ T5986] usb 4-1: USB disconnect, device number 10
[  353.527468][T17874] loop5: detected capacity change from 0 to 32768
[  353.531679][T17874] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3252 (17874)
[  353.539407][T17874] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  353.544805][T17874] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  353.548133][T17874] BTRFS info (device loop5): using free-space-tree
[  353.595120][T17874] BTRFS info (device loop5 state M): max_inline set to 0
[  353.611673][ T7602] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  354.232563][ T5885] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[  354.340536][T17953] loop3: detected capacity change from 0 to 1024
[  354.375170][T17953] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  354.404653][ T5885] usb 6-1: config 0 has an invalid interface number: 186 but max is 1
[  354.408050][ T5885] usb 6-1: config 0 has no interface number 1
[  354.412999][ T5885] usb 6-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=e5.83
[  354.420164][T16161] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  354.420754][ T5885] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  354.438566][ T5885] usb 6-1: Product: syz
[  354.440276][ T5885] usb 6-1: Manufacturer: syz
[  354.446434][ T5885] usb 6-1: SerialNumber: syz
[  354.467167][ T5885] usb 6-1: config 0 descriptor??
[  355.014692][ T5885] usb 6-1: USB disconnect, device number 46
[  355.292206][ T6523] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  355.512924][ T6523] usb 4-1: Using ep0 maxpacket: 16
[  355.517812][ T6523] usb 4-1: too many configurations: 9, using maximum allowed: 8
[  355.521735][ T6523] usb 4-1: config 222 has an invalid interface number: 127 but max is 0
[  355.525465][ T6523] usb 4-1: config 222 has no interface number 0
[  355.528995][ T6523] usb 4-1: config 222 has an invalid interface number: 127 but max is 0
[  355.534835][ T6523] usb 4-1: config 222 has no interface number 0
[  355.538781][ T6523] usb 4-1: config 222 has an invalid interface number: 127 but max is 0
[  355.541995][ T6523] usb 4-1: config 222 has no interface number 0
[  355.548946][ T6523] usb 4-1: config 222 has an invalid interface number: 127 but max is 0
[  355.560963][ T6523] usb 4-1: config 222 has no interface number 0
[  355.565164][ T6523] usb 4-1: config 222 has an invalid interface number: 127 but max is 0
[  355.568390][ T6523] usb 4-1: config 222 has no interface number 0
[  355.577319][ T6523] usb 4-1: config 222 has an invalid interface number: 127 but max is 0
[  355.580548][ T6523] usb 4-1: config 222 has no interface number 0
[  355.590386][ T6523] usb 4-1: config 222 has an invalid interface number: 127 but max is 0
[  355.597770][ T6523] usb 4-1: config 222 has no interface number 0
[  355.610370][ T6523] usb 4-1: config 222 has an invalid interface number: 127 but max is 0
[  355.622359][ T6523] usb 4-1: config 222 has no interface number 0
[  355.627206][ T6523] usb 4-1: New USB device found, idVendor=19d2, idProduct=1142, bcdDevice=1b.18
[  355.627245][T18003] loop5: detected capacity change from 0 to 512
[  355.630583][ T6523] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  355.636030][T18003] EXT4-fs (loop5): Test dummy encryption mode enabled
[  355.637998][ T6523] usb 4-1: Product: syz
[  355.640416][ T6523] usb 4-1: Manufacturer: syz
[  355.642223][T18003] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  355.643470][ T6523] usb 4-1: SerialNumber: syz
[  355.649813][T18003] EXT4-fs (loop5): 1 truncate cleaned up
[  355.655368][T18003] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  355.674863][T18003] EXT4-fs: Can't set or change test_dummy_encryption on remount
[  355.694541][ T7602] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  355.861435][ T6523] hub 4-1:222.127: Invalid hub with more than one config or interface
[  355.864503][ T6523] hub 4-1:222.127: probe with driver hub failed with error -22
[  355.867558][ T6523] option 4-1:222.127: GSM modem (1-port) converter detected
[  355.874292][ T6523] usb 4-1: USB disconnect, device number 11
[  355.877323][ T6523] option 4-1:222.127: device disconnected
[  356.543890][   T10] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[  356.647324][T18053] loop3: detected capacity change from 0 to 512
[  356.653475][T18053] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[  356.656639][T18053] EXT4-fs (loop3): orphan cleanup on readonly fs
[  356.659913][T18053] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  356.666623][T18053] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  356.668868][T18053] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #13: comm syz.3.3296: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  356.674983][T18053] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.3296: couldn't read orphan inode 13 (err -117)
[  356.679772][T18053] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  356.692235][   T10] usb 6-1: Using ep0 maxpacket: 8
[  356.697049][   T10] usb 6-1: New USB device found, idVendor=0409, idProduct=0063, bcdDevice=ff.7b
[  356.700172][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  356.701585][T16161] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  356.702904][   T10] usb 6-1: Product: syz
[  356.718298][   T10] usb 6-1: Manufacturer: syz
[  356.719766][   T10] usb 6-1: SerialNumber: syz
[  356.723268][   T10] usb 6-1: config 0 descriptor??
[  356.730320][   T10] upd78f0730 6-1:0.0: upd78f0730 converter detected
[  356.734774][   T10] usb 6-1: upd78f0730 converter now attached to ttyUSB0
[  356.752940][T18066] loop3: detected capacity change from 0 to 256
[  356.780962][T18066] FAT-fs (loop3): Directory bread(block 64) failed
[  356.783651][T18066] FAT-fs (loop3): Directory bread(block 65) failed
[  356.785731][T18066] FAT-fs (loop3): Directory bread(block 66) failed
[  356.787728][T18066] FAT-fs (loop3): Directory bread(block 67) failed
[  356.800165][T18066] FAT-fs (loop3): Directory bread(block 68) failed
[  356.802540][T18066] FAT-fs (loop3): Directory bread(block 69) failed
[  356.804632][T18066] FAT-fs (loop3): Directory bread(block 70) failed
[  356.806625][T18066] FAT-fs (loop3): Directory bread(block 71) failed
[  356.808766][T18066] FAT-fs (loop3): Directory bread(block 72) failed
[  356.811097][T18066] FAT-fs (loop3): Directory bread(block 73) failed
[  356.944065][   T24] usb 6-1: USB disconnect, device number 47
[  356.950027][   T24] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0
[  356.961334][   T24] upd78f0730 6-1:0.0: device disconnected
[  357.101120][T18107] bond0: entered promiscuous mode
[  357.105664][T18107] batadv0: entered promiscuous mode
[  357.111905][T18107] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  357.122741][T18107] 8021q: adding VLAN 0 to HW filter on device hsr1
[  357.369689][T18108] loop3: detected capacity change from 0 to 40427
[  357.376108][T18108] F2FS-fs (loop3): build fault injection rate: 771
[  357.380840][T18108] F2FS-fs (loop3): invalid crc value
[  357.435855][T18108] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  357.440570][T18108] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  357.468841][T18115] f2fs_ckpt-7:3: attempt to access beyond end of device
[  357.468841][T18115] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  357.485123][T18115] CPU: 0 UID: 0 PID: 18115 Comm: f2fs_ckpt-7:3 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  357.485148][T18115] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  357.485157][T18115] Call Trace:
[  357.485164][T18115]  <TASK>
[  357.485172][T18115]  dump_stack_lvl+0x189/0x250
[  357.485201][T18115]  ? __pfx_dump_stack_lvl+0x10/0x10
[  357.485218][T18115]  ? __pfx_queue_work_on+0x10/0x10
[  357.485232][T18115]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  357.485252][T18115]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  357.485277][T18115]  f2fs_handle_critical_error+0x37c/0x540
[  357.485305][T18115]  f2fs_write_end_io+0x886/0xb60
[  357.485334][T18115]  __submit_merged_bio+0x27a/0x6a0
[  357.485354][T18115]  ? up_write+0x1c4/0x420
[  357.485375][T18115]  __submit_merged_write_cond+0x44c/0x530
[  357.485399][T18115]  f2fs_sync_node_pages+0x1479/0x15e0
[  357.485433][T18115]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  357.485475][T18115]  ? f2fs_write_checkpoint+0xe43/0x1df0
[  357.485493][T18115]  ? up_write+0x1c4/0x420
[  357.485505][T18115]  ? do_raw_spin_unlock+0x4d/0x240
[  357.485526][T18115]  f2fs_write_checkpoint+0xe6f/0x1df0
[  357.485558][T18115]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  357.485610][T18115]  ? down_write+0x162/0x1f0
[  357.485623][T18115]  ? __pfx_down_write+0x10/0x10
[  357.485636][T18115]  ? __pfx___schedule+0x10/0x10
[  357.485658][T18115]  __checkpoint_and_complete_reqs+0xd9/0x3b0
[  357.485676][T18115]  ? __pfx___checkpoint_and_complete_reqs+0x10/0x10
[  357.485704][T18115]  issue_checkpoint_thread+0xd9/0x260
[  357.485722][T18115]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  357.485737][T18115]  ? __pfx_autoremove_wake_function+0x10/0x10
[  357.485755][T18115]  ? __kthread_parkme+0x7b/0x200
[  357.485769][T18115]  ? __kthread_parkme+0x1a1/0x200
[  357.485790][T18115]  kthread+0x711/0x8a0
[  357.485809][T18115]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  357.485824][T18115]  ? __pfx_kthread+0x10/0x10
[  357.485842][T18115]  ? _raw_spin_unlock_irq+0x23/0x50
[  357.485858][T18115]  ? lockdep_hardirqs_on+0x9c/0x150
[  357.485876][T18115]  ? __pfx_kthread+0x10/0x10
[  357.485893][T18115]  ret_from_fork+0x3fc/0x770
[  357.485911][T18115]  ? __pfx_ret_from_fork+0x10/0x10
[  357.485929][T18115]  ? __switch_to_asm+0x39/0x70
[  357.485945][T18115]  ? __switch_to_asm+0x33/0x70
[  357.485993][T18115]  ? __pfx_kthread+0x10/0x10
[  357.486010][T18115]  ret_from_fork_asm+0x1a/0x30
[  357.486040][T18115]  </TASK>
[  357.486048][T18115] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  357.541934][T18121] loop5: detected capacity change from 0 to 128
[  357.545198][T18115] CPU: 0 UID: 0 PID: 18115 Comm: f2fs_ckpt-7:3 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  357.545213][T18115] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  357.545219][T18115] Call Trace:
[  357.545223][T18115]  <TASK>
[  357.545227][T18115]  dump_stack_lvl+0x189/0x250
[  357.545244][T18115]  ? __pfx_dump_stack_lvl+0x10/0x10
[  357.545254][T18115]  ? __pfx_queue_work_on+0x10/0x10
[  357.545263][T18115]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  357.545274][T18115]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  357.545290][T18115]  f2fs_handle_critical_error+0x37c/0x540
[  357.545306][T18115]  f2fs_write_end_io+0x886/0xb60
[  357.545326][T18115]  __submit_merged_bio+0x27a/0x6a0
[  357.545337][T18115]  ? up_write+0x1c4/0x420
[  357.545349][T18115]  __submit_merged_write_cond+0x44c/0x530
[  357.545364][T18115]  f2fs_sync_node_pages+0x1479/0x15e0
[  357.545385][T18115]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  357.545412][T18115]  ? f2fs_write_checkpoint+0xe43/0x1df0
[  357.545423][T18115]  ? up_write+0x1c4/0x420
[  357.545431][T18115]  ? do_raw_spin_unlock+0x4d/0x240
[  357.545443][T18115]  f2fs_write_checkpoint+0xe6f/0x1df0
[  357.545464][T18115]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  357.545494][T18115]  ? down_write+0x162/0x1f0
[  357.545502][T18115]  ? __pfx_down_write+0x10/0x10
[  357.545509][T18115]  ? __pfx___schedule+0x10/0x10
[  357.545523][T18115]  __checkpoint_and_complete_reqs+0xd9/0x3b0
[  357.545534][T18115]  ? __pfx___checkpoint_and_complete_reqs+0x10/0x10
[  357.545552][T18115]  issue_checkpoint_thread+0xd9/0x260
[  357.545568][T18115]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  357.545577][T18115]  ? __pfx_autoremove_wake_function+0x10/0x10
[  357.545588][T18115]  ? __kthread_parkme+0x7b/0x200
[  357.545597][T18115]  ? __kthread_parkme+0x1a1/0x200
[  357.545610][T18115]  kthread+0x711/0x8a0
[  357.545621][T18115]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  357.545630][T18115]  ? __pfx_kthread+0x10/0x10
[  357.545644][T18115]  ? _raw_spin_unlock_irq+0x23/0x50
[  357.545658][T18115]  ? lockdep_hardirqs_on+0x9c/0x150
[  357.545673][T18115]  ? __pfx_kthread+0x10/0x10
[  357.545689][T18115]  ret_from_fork+0x3fc/0x770
[  357.545706][T18115]  ? __pfx_ret_from_fork+0x10/0x10
[  357.545727][T18115]  ? __switch_to_asm+0x39/0x70
[  357.545744][T18115]  ? __switch_to_asm+0x33/0x70
[  357.545759][T18115]  ? __pfx_kthread+0x10/0x10
[  357.545777][T18115]  ret_from_fork_asm+0x1a/0x30
[  357.545809][T18115]  </TASK>
[  357.545817][T18115] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  357.549731][T18121] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  357.679481][T18121] UDF-fs: error (device loop5): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  357.731214][T18126] netlink: 'syz.5.3315': attribute type 1 has an invalid length.
[  357.738326][T18126] NCSI netlink: No device for ifindex 0
[  357.840301][T18134] loop3: detected capacity change from 0 to 512
[  357.861568][T18134] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  357.880004][T18137] loop5: detected capacity change from 0 to 1024
[  357.889496][T18134] EXT4-fs (loop3): 1 truncate cleaned up
[  357.901753][T18134] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  357.974715][T18144] EXT4-fs (loop3): shut down requested (2)
[  358.060519][T16161] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  358.138333][T18155] dvmrp1: entered allmulticast mode
[  358.670738][T18176] loop3: detected capacity change from 0 to 32768
[  358.678433][T18176] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  358.696862][T18176] XFS (loop3): Ending clean mount
[  358.700870][T18176] XFS (loop3): Quotacheck needed: Please wait.
[  358.747573][T18176] XFS (loop3): Quotacheck: Done.
[  358.809988][T16161] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  359.065708][T18204] loop5: detected capacity change from 0 to 512
[  359.071952][T18204] EXT4-fs: Ignoring removed mblk_io_submit option
[  359.082541][T18204] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  359.085363][T18204] EXT4-fs (loop5): DAX unsupported by block device.
[  359.570550][T18203] loop3: detected capacity change from 0 to 32768
[  359.574395][T18203] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3335 (18203)
[  359.581325][T18203] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  359.586928][T18203] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  359.590491][T18203] BTRFS info (device loop3): using free-space-tree
[  359.666190][T16161] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  359.859857][T18252] loop3: detected capacity change from 0 to 512
[  359.883150][T18252] EXT4-fs: Ignoring removed mblk_io_submit option
[  359.886192][T18252] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  359.945298][T18259] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3350'.
[  359.967694][T18252] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec118, mo2=0002]
[  359.970618][T18252] System zones: 1-12
[  359.989207][T18252] EXT4-fs (loop3): 1 truncate cleaned up
[  360.006410][T18252] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  360.229814][T18280] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  360.381468][ T5986] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  360.431025][T18276] loop5: detected capacity change from 0 to 32768
[  360.439559][T18276] JBD2: Unrecognised features on journal
[  360.463822][T18276] (syz.5.3356,18276,0):ocfs2_journal_init:973 ERROR: Linux journal layer error
[  360.466627][T18276] (syz.5.3356,18276,0):ocfs2_check_volume:2347 ERROR: Could not initialize journal!
[  360.480557][T18276] (syz.5.3356,18276,0):ocfs2_check_volume:2432 ERROR: status = -22
[  360.488600][T18276] (syz.5.3356,18276,0):ocfs2_mount_volume:1764 ERROR: status = -22
[  360.532859][ T5986] usb 4-1: Using ep0 maxpacket: 32
[  360.540951][ T5986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  360.592977][ T5986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  360.616325][ T5986] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  360.630304][ T5986] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  360.649425][T18276] (syz.5.3356,18276,0):ocfs2_fill_super:1177 ERROR: status = -22
[  360.716272][ T5986] usb 4-1: config 0 descriptor??
[  360.733928][ T5986] hub 4-1:0.0: USB hub found
[  360.937050][ T5986] hub 4-1:0.0: 1 port detected
[  361.150746][    C0] raw-gadget.0 gadget.3: ignoring, device is not running
[  361.160339][ T5986] hub 4-1:0.0: hub_hub_status failed (err = -71)
[  361.171718][ T5986] hub 4-1:0.0: config failed, can't get hub status (err -71)
[  361.198736][ T5986] usbhid 4-1:0.0: can't add hid device: -71
[  361.201443][ T5986] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  361.266660][ T5986] usb 4-1: USB disconnect, device number 12
[  361.684949][T16161] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  362.081989][T18342] loop5: detected capacity change from 0 to 164
[  362.351165][T18374] loop5: detected capacity change from 0 to 512
[  362.371215][T18374] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  362.375251][T18374] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.3387: invalid indirect mapped block 2683928664 (level 1)
[  362.382376][T18374] EXT4-fs (loop5): Remounting filesystem read-only
[  362.385232][T18374] EXT4-fs (loop5): 1 truncate cleaned up
[  362.388781][T18374] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  362.408903][ T7602] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  362.444106][T18380] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3388'.
[  362.447705][T18380] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3388'.
[  362.724772][T18396] loop5: detected capacity change from 0 to 4096
[  362.728884][T18396] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512).
[  362.851223][T18410] loop5: detected capacity change from 0 to 256
[  362.856781][T18410] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  362.861657][T18410] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  362.871188][T18410] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x2d0d25cc, utbl_chksum : 0xe619d30d)
[  362.982192][ T6523] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  363.145232][ T6523] usb 4-1: unable to get BOS descriptor or descriptor too short
[  363.149157][ T6523] usb 4-1: not running at top speed; connect to a high speed hub
[  363.153754][ T6523] usb 4-1: config 3 has an invalid interface number: 106 but max is 0
[  363.156981][ T6523] usb 4-1: config 3 has no interface number 0
[  363.159459][ T6523] usb 4-1: config 3 interface 106 altsetting 10 endpoint 0xD has invalid maxpacket 512, setting to 64
[  363.164881][ T6523] usb 4-1: config 3 interface 106 altsetting 10 endpoint 0xF has invalid maxpacket 1024, setting to 64
[  363.169731][ T6523] usb 4-1: config 3 interface 106 has no altsetting 0
[  363.176451][ T6523] usb 4-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=e8.8a
[  363.180117][ T6523] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  363.184100][ T6523] usb 4-1: Product: syz
[  363.185858][ T6523] usb 4-1: Manufacturer: syz
[  363.187781][ T6523] usb 4-1: SerialNumber: syz
[  363.193741][T18401] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  363.196697][T18401] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  363.209017][T18420] loop5: detected capacity change from 0 to 32768
[  363.254891][T18420] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  363.254907][T18420]   allowing incompatible features above 0.0: (unknown version)
[  363.254913][T18420]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  363.270820][T18420] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0
[  363.273627][T18420] bcachefs (loop5): initializing new filesystem
[  363.281362][T18420] bcachefs (loop5): going read-write
[  363.289236][T18420] bcachefs (loop5): marking superblocks
[  363.304743][T18420] bcachefs (loop5): initializing freespace
[  363.308608][T18420] bcachefs (loop5): done initializing freespace
[  363.318513][T18420] bcachefs (loop5): reading snapshots table
[  363.320824][T18420] bcachefs (loop5): reading snapshots done
[  363.355765][T18420] bcachefs (loop5): done starting filesystem
[  363.380922][T18420] syz.5.3402 (18420) used greatest stack depth: 15528 bytes left
[  363.387612][ T7602] bcachefs (loop5): shutting down
[  363.389806][ T7602] bcachefs (loop5): going read-only
[  363.391997][ T7602] bcachefs (loop5): finished waiting for writes to stop
[  363.408846][ T7602] bcachefs (loop5): flushing journal and stopping allocators, journal seq 3
[  363.411524][ T6523] kobil_sct 4-1:3.106: KOBIL USB smart card terminal converter detected
[  363.421611][ T6523] usb 4-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  363.434513][ T6523] usb 4-1: USB disconnect, device number 13
[  363.438514][ T7602] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 3
[  363.444108][ T7602] bcachefs (loop5): clean shutdown complete, journal seq 4
[  363.444237][ T6523] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  363.446840][ T7602] bcachefs (loop5): marking filesystem clean
[  363.451642][ T6523] kobil_sct 4-1:3.106: device disconnected
[  363.471868][ T7602] bcachefs (loop5): shutdown complete
[  364.149377][T18466] loop3: detected capacity change from 0 to 512
[  364.153497][T18466] EXT4-fs: Ignoring removed oldalloc option
[  364.168851][T18466] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  364.173775][T18466] ext4 filesystem being mounted at /154/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  364.214046][T16161] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  364.948829][T18512] syz.5.3403: attempt to access beyond end of device
[  364.948829][T18512] loop5: rw=0, sector=1, nr_sectors = 1 limit=0
[  364.974676][T18512] qnx4: unable to read the superblock
[  365.238188][T18520] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3430'.
[  365.767086][T18539] netlink: 'syz.3.3440': attribute type 1 has an invalid length.
[  366.707518][T18553] loop3: detected capacity change from 0 to 256
[  366.734949][   T33] audit: type=1800 audit(1755140878.727:76): pid=18553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3446" name="file1" dev="loop3" ino=1048759 res=0 errno=0
[  366.750716][T18553] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  366.766529][T18553] FAT-fs (loop3): Filesystem has been set read-only
[  366.772168][T18553] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  366.777894][T18553] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  366.785755][T18553] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  366.840383][T18565] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  366.847169][T18565] overlayfs: failed to set xattr on upper
[  366.849147][T18565] overlayfs: ...falling back to redirect_dir=nofollow.
[  366.851558][T18565] overlayfs: ...falling back to index=off.
[  366.856162][T18565] overlayfs: ...falling back to uuid=null.
[  366.858494][T18565] overlayfs: failed to clone lowerpath
[  367.044661][T18585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3460'.
[  367.116230][T18591] loop3: detected capacity change from 0 to 16
[  367.119251][T18591] erofs (device loop3): invalid sb_extslots 4208 (more than a fs block)
[  367.204720][T18602] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3467'.
[  367.250747][T18607] loop5: detected capacity change from 0 to 512
[  367.272474][T18607] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  367.275719][T18607] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.3468: invalid indirect mapped block 2683928664 (level 1)
[  367.280667][T18607] EXT4-fs (loop5): Remounting filesystem read-only
[  367.284436][T18607] EXT4-fs (loop5): 1 truncate cleaned up
[  367.287484][T18607] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  367.294522][T18607] EXT4-fs (loop5): shut down requested (2)
[  367.310298][ T7602] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  367.698744][T18632] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3477'.
[  367.792544][T18640] Process accounting resumed
[  368.118796][T18655] loop5: detected capacity change from 0 to 8
[  368.620300][T18659] loop3: detected capacity change from 0 to 32768
[  368.628265][T18661] SQUASHFS error: Failed to read block 0x2fc: -5
[  368.631409][T18661] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  368.636114][T18661] SQUASHFS error: Unable to read directory block [247:26]
[  368.646299][T18661] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  368.649804][T18661] SQUASHFS error: Unable to read directory block [247:26]
[  368.658979][T18661] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  368.661298][T18661] SQUASHFS error: Unable to read directory block [247:26]
[  368.938140][T18659] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3487 (18659)
[  369.049410][T18659] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  369.054399][T18659] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  369.058215][T18659] BTRFS info (device loop3): using free-space-tree
[  369.204325][T18689] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3492'.
[  369.382619][T16161] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  369.673574][T18712] netlink: 'syz.9.3502': attribute type 5 has an invalid length.
[  369.757520][T18699] loop5: detected capacity change from 0 to 40427
[  369.773844][T18699] F2FS-fs (loop5): invalid crc value
[  369.838554][T18699] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  369.853305][T18699] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  369.914333][ T7602] syz-executor: attempt to access beyond end of device
[  369.914333][ T7602] loop5: rw=2049, sector=45096, nr_sectors = 24 limit=40427
[  369.930032][ T7602] CPU: 0 UID: 0 PID: 7602 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  369.930054][ T7602] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  369.930063][ T7602] Call Trace:
[  369.930069][ T7602]  <TASK>
[  369.930076][ T7602]  dump_stack_lvl+0x189/0x250
[  369.930100][ T7602]  ? __pfx_dump_stack_lvl+0x10/0x10
[  369.930117][ T7602]  ? __pfx_queue_work_on+0x10/0x10
[  369.930131][ T7602]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  369.930148][ T7602]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  369.930175][ T7602]  f2fs_handle_critical_error+0x37c/0x540
[  369.930201][ T7602]  f2fs_write_end_io+0x886/0xb60
[  369.930233][ T7602]  __submit_merged_bio+0x27a/0x6a0
[  369.930257][ T7602]  __submit_merged_write_cond+0x255/0x530
[  369.930283][ T7602]  f2fs_write_data_pages+0x261d/0x3000
[  369.930334][ T7602]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  369.930400][ T7602]  ? __mod_zone_page_state+0xd7/0x140
[  369.930430][ T7602]  ? folios_put_refs+0x560/0x640
[  369.930455][ T7602]  ? __pfx_folios_put_refs+0x10/0x10
[  369.930469][ T7602]  ? rcu_is_watching+0x15/0xb0
[  369.930491][ T7602]  ? __lock_acquire+0xab9/0xd20
[  369.930524][ T7602]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  369.930543][ T7602]  do_writepages+0x32e/0x550
[  369.930573][ T7602]  ? do_raw_spin_unlock+0x4d/0x240
[  369.930593][ T7602]  filemap_fdatawrite+0x199/0x240
[  369.930614][ T7602]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  369.930676][ T7602]  ? do_raw_spin_unlock+0x4d/0x240
[  369.930698][ T7602]  f2fs_sync_dirty_inodes+0x31f/0x830
[  369.930727][ T7602]  f2fs_write_checkpoint+0x95a/0x1df0
[  369.930796][ T7602]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  369.930854][ T7602]  ? kill_f2fs_super+0x298/0x6c0
[  369.930876][ T7602]  kill_f2fs_super+0x2c3/0x6c0
[  369.930895][ T7602]  ? __pfx_kill_f2fs_super+0x10/0x10
[  369.930907][ T7602]  ? radix_tree_delete_item+0x2b6/0x400
[  369.930933][ T7602]  ? shrinker_free+0x2ce/0x3e0
[  369.930952][ T7602]  deactivate_locked_super+0xbc/0x130
[  369.930973][ T7602]  cleanup_mnt+0x425/0x4c0
[  369.930991][ T7602]  ? lockdep_hardirqs_on+0x9c/0x150
[  369.931012][ T7602]  task_work_run+0x1d4/0x260
[  369.931035][ T7602]  ? __pfx_task_work_run+0x10/0x10
[  369.931050][ T7602]  ? __x64_sys_umount+0x122/0x160
[  369.931074][ T7602]  ? exit_to_user_mode_loop+0x40/0x110
[  369.931099][ T7602]  exit_to_user_mode_loop+0xec/0x110
[  369.931119][ T7602]  do_syscall_64+0x2bd/0x3b0
[  369.931138][ T7602]  ? lockdep_hardirqs_on+0x9c/0x150
[  369.931154][ T7602]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  369.931167][ T7602]  ? exc_page_fault+0x9f/0xf0
[  369.931185][ T7602]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  369.931198][ T7602] RIP: 0033:0x7fc3e7f8ff17
[  369.931212][ T7602] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  369.931223][ T7602] RSP: 002b:00007ffcd3329418 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  369.931238][ T7602] RAX: 0000000000000000 RBX: 00007fc3e8011c05 RCX: 00007fc3e7f8ff17
[  369.931248][ T7602] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcd33294d0
[  369.931257][ T7602] RBP: 00007ffcd33294d0 R08: 0000000000000000 R09: 0000000000000000
[  369.931265][ T7602] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcd332a560
[  369.931274][ T7602] R13: 00007fc3e8011c05 R14: 000000000005a482 R15: 00007ffcd332a5a0
[  369.931300][ T7602]  </TASK>
[  369.931308][ T7602] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  369.971533][T18710] loop3: detected capacity change from 0 to 32768
[  369.977796][ T7602] CPU: 0 UID: 0 PID: 7602 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  369.977816][ T7602] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  369.977824][ T7602] Call Trace:
[  369.977831][ T7602]  <TASK>
[  369.977837][ T7602]  dump_stack_lvl+0x189/0x250
[  369.977862][ T7602]  ? __pfx_dump_stack_lvl+0x10/0x10
[  369.977879][ T7602]  ? __pfx_queue_work_on+0x10/0x10
[  369.977893][ T7602]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  369.977911][ T7602]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  369.977937][ T7602]  f2fs_handle_critical_error+0x37c/0x540
[  369.977961][ T7602]  f2fs_write_end_io+0x886/0xb60
[  369.977991][ T7602]  __submit_merged_bio+0x27a/0x6a0
[  369.978016][ T7602]  __submit_merged_write_cond+0x255/0x530
[  369.978041][ T7602]  f2fs_write_data_pages+0x261d/0x3000
[  369.978094][ T7602]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  369.978150][ T7602]  ? __mod_zone_page_state+0xd7/0x140
[  369.978179][ T7602]  ? folios_put_refs+0x560/0x640
[  369.978204][ T7602]  ? __pfx_folios_put_refs+0x10/0x10
[  369.978217][ T7602]  ? rcu_is_watching+0x15/0xb0
[  369.978239][ T7602]  ? __lock_acquire+0xab9/0xd20
[  369.978274][ T7602]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  369.978295][ T7602]  do_writepages+0x32e/0x550
[  369.978325][ T7602]  ? do_raw_spin_unlock+0x4d/0x240
[  369.978347][ T7602]  filemap_fdatawrite+0x199/0x240
[  369.978367][ T7602]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  369.978437][ T7602]  ? do_raw_spin_unlock+0x4d/0x240
[  369.978458][ T7602]  f2fs_sync_dirty_inodes+0x31f/0x830
[  369.978487][ T7602]  f2fs_write_checkpoint+0x95a/0x1df0
[  369.978525][ T7602]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  369.978584][ T7602]  ? kill_f2fs_super+0x298/0x6c0
[  369.978604][ T7602]  kill_f2fs_super+0x2c3/0x6c0
[  369.978624][ T7602]  ? __pfx_kill_f2fs_super+0x10/0x10
[  369.978636][ T7602]  ? radix_tree_delete_item+0x2b6/0x400
[  369.978660][ T7602]  ? shrinker_free+0x2ce/0x3e0
[  369.978679][ T7602]  deactivate_locked_super+0xbc/0x130
[  369.978699][ T7602]  cleanup_mnt+0x425/0x4c0
[  369.978714][ T7602]  ? lockdep_hardirqs_on+0x9c/0x150
[  369.978735][ T7602]  task_work_run+0x1d4/0x260
[  369.978784][ T7602]  ? __pfx_task_work_run+0x10/0x10
[  369.978801][ T7602]  ? __x64_sys_umount+0x122/0x160
[  369.978825][ T7602]  ? exit_to_user_mode_loop+0x40/0x110
[  369.978847][ T7602]  exit_to_user_mode_loop+0xec/0x110
[  369.978867][ T7602]  do_syscall_64+0x2bd/0x3b0
[  369.978885][ T7602]  ? lockdep_hardirqs_on+0x9c/0x150
[  369.978903][ T7602]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  369.978917][ T7602]  ? exc_page_fault+0x9f/0xf0
[  369.978937][ T7602]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  369.978950][ T7602] RIP: 0033:0x7fc3e7f8ff17
[  369.978964][ T7602] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  369.978976][ T7602] RSP: 002b:00007ffcd3329418 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  369.978990][ T7602] RAX: 0000000000000000 RBX: 00007fc3e8011c05 RCX: 00007fc3e7f8ff17
[  369.979000][ T7602] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcd33294d0
[  369.979009][ T7602] RBP: 00007ffcd33294d0 R08: 0000000000000000 R09: 0000000000000000
[  369.979018][ T7602] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcd332a560
[  369.979027][ T7602] R13: 00007fc3e8011c05 R14: 000000000005a482 R15: 00007ffcd332a5a0
[  369.979054][ T7602]  </TASK>
[  369.979061][ T7602] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  369.988416][ T7602] CPU: 0 UID: 0 PID: 7602 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  369.988435][ T7602] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  369.988443][ T7602] Call Trace:
[  369.988449][ T7602]  <TASK>
[  369.988455][ T7602]  dump_stack_lvl+0x189/0x250
[  369.988479][ T7602]  ? __pfx_dump_stack_lvl+0x10/0x10
[  369.988496][ T7602]  ? __pfx_queue_work_on+0x10/0x10
[  369.988510][ T7602]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  369.988528][ T7602]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  369.988555][ T7602]  f2fs_handle_critical_error+0x37c/0x540
[  369.988582][ T7602]  f2fs_write_end_io+0x886/0xb60
[  369.988612][ T7602]  __submit_merged_bio+0x27a/0x6a0
[  369.988638][ T7602]  __submit_merged_write_cond+0x255/0x530
[  369.988663][ T7602]  f2fs_write_data_pages+0x261d/0x3000
[  369.988710][ T7602]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  369.988794][ T7602]  ? __mod_zone_page_state+0xd7/0x140
[  369.988825][ T7602]  ? folios_put_refs+0x560/0x640
[  369.988850][ T7602]  ? __pfx_folios_put_refs+0x10/0x10
[  369.988863][ T7602]  ? rcu_is_watching+0x15/0xb0
[  369.988885][ T7602]  ? __lock_acquire+0xab9/0xd20
[  369.988916][ T7602]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  369.988936][ T7602]  do_writepages+0x32e/0x550
[  369.988964][ T7602]  ? do_raw_spin_unlock+0x4d/0x240
[  369.988984][ T7602]  filemap_fdatawrite+0x199/0x240
[  369.989002][ T7602]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  369.989064][ T7602]  ? do_raw_spin_unlock+0x4d/0x240
[  369.989083][ T7602]  f2fs_sync_dirty_inodes+0x31f/0x830
[  369.989112][ T7602]  f2fs_write_checkpoint+0x95a/0x1df0
[  369.989149][ T7602]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  369.989205][ T7602]  ? kill_f2fs_super+0x298/0x6c0
[  369.989226][ T7602]  kill_f2fs_super+0x2c3/0x6c0
[  369.989245][ T7602]  ? __pfx_kill_f2fs_super+0x10/0x10
[  369.989257][ T7602]  ? radix_tree_delete_item+0x2b6/0x400
[  369.989282][ T7602]  ? shrinker_free+0x2ce/0x3e0
[  369.989301][ T7602]  deactivate_locked_super+0xbc/0x130
[  369.989322][ T7602]  cleanup_mnt+0x425/0x4c0
[  369.989338][ T7602]  ? lockdep_hardirqs_on+0x9c/0x150
[  369.989359][ T7602]  task_work_run+0x1d4/0x260
[  369.989380][ T7602]  ? __pfx_task_work_run+0x10/0x10
[  369.989402][ T7602]  ? __x64_sys_umount+0x122/0x160
[  369.989426][ T7602]  ? exit_to_user_mode_loop+0x40/0x110
[  369.989449][ T7602]  exit_to_user_mode_loop+0xec/0x110
[  369.989468][ T7602]  do_syscall_64+0x2bd/0x3b0
[  369.989485][ T7602]  ? lockdep_hardirqs_on+0x9c/0x150
[  369.989502][ T7602]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  369.989515][ T7602]  ? exc_page_fault+0x9f/0xf0
[  369.989535][ T7602]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  369.989548][ T7602] RIP: 0033:0x7fc3e7f8ff17
[  369.989562][ T7602] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  369.989574][ T7602] RSP: 002b:00007ffcd3329418 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  369.989588][ T7602] RAX: 0000000000000000 RBX: 00007fc3e8011c05 RCX: 00007fc3e7f8ff17
[  369.989597][ T7602] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcd33294d0
[  369.989606][ T7602] RBP: 00007ffcd33294d0 R08: 0000000000000000 R09: 0000000000000000
[  369.989614][ T7602] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcd332a560
[  369.989623][ T7602] R13: 00007fc3e8011c05 R14: 000000000005a482 R15: 00007ffcd332a5a0
[  369.989646][ T7602]  </TASK>
[  369.989653][ T7602] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  369.998845][T18710] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  370.281317][ T5878] (kworker/u8:4,5878,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214
[  370.298509][T16161] (syz-executor,16161,0):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 70
[  370.331794][T16161] (syz-executor,16161,0):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 72
[  370.356024][T16161] ocfs2: Unmounting device (7,3) on (node local)
[  370.453278][ T2302] libceph: connect (1)[c::]:6789 error -101
[  370.455871][ T2302] libceph: mon0 (1)[c::]:6789 connect error
[  370.710140][T18757] netlink: 'syz.5.3515': attribute type 1 has an invalid length.
[  370.720312][ T2302] libceph: connect (1)[c::]:6789 error -101
[  370.722641][ T2302] libceph: mon0 (1)[c::]:6789 connect error
[  370.767473][T18760] loop5: detected capacity change from 0 to 2048
[  370.771476][T18760] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  370.839792][T18732] ceph: No mds server is up or the cluster is laggy
[  370.875385][T18762] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  371.036901][T18769] ipvlan1: left allmulticast mode
[  371.266435][T18775] loop5: detected capacity change from 0 to 32768
[  371.276490][T18775] JBD2: Ignoring recovery information on journal
[  371.309300][T18775] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  371.359614][ T7602] ocfs2: Unmounting device (7,5) on (node local)
[  372.956528][T18825] overlayfs: bad index found (index=index/00fb210001b19ce3e18fa24c00bebc2d722831fcf7f5318434f203000000000000, ftype=2000, origin ftype=a000).
[  373.023113][T18827] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3542'.
[  373.066243][T18829] loop3: detected capacity change from 0 to 128
[  373.082320][T18829] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  373.088854][T18829] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  373.514407][T18875] loop3: detected capacity change from 0 to 1024
[  373.522941][T18875] hfsplus: Filesystem is marked locked, mounting read-only.
[  373.533074][T18875] hfsplus: filesystem is marked locked, leaving read-only.
[  373.802489][T18894] loop3: detected capacity change from 0 to 32768
[  373.843411][T18894]  loop3: p1 p3 < p5 p6 >
[  374.348711][T18934] loop3: detected capacity change from 0 to 512
[  374.351933][T18934] EXT4-fs (loop3): Invalid log cluster size: 956301314
[  374.444703][T18941] netlink: 'syz.3.3583': attribute type 3 has an invalid length.
[  374.447863][T18941] netlink: 766 bytes leftover after parsing attributes in process `syz.3.3583'.
[  374.483378][T18943] loop3: detected capacity change from 0 to 736
[  374.548061][T18948] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  375.047263][T18964] loop3: detected capacity change from 0 to 32768
[  375.056544][T18964] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  375.071967][T18964] XFS (loop3): Ending clean mount
[  375.076571][T18964] XFS (loop3): Quotacheck needed: Please wait.
[  375.109599][T18964] XFS (loop3): Quotacheck: Done.
[  375.151874][T16161] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  375.333113][T18995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3599'.
[  375.336516][T18995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3599'.
[  375.339836][T18995] netlink: 50 bytes leftover after parsing attributes in process `syz.3.3599'.
[  375.986408][T19025] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3610'.
[  376.066475][T19024] IPv6: sit2: Disabled Multicast RS
[  376.082906][T19024] sit2: entered allmulticast mode
[  376.907864][T19070] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  377.020478][T19059] loop3: detected capacity change from 0 to 32768
[  377.059450][T19080] loop5: detected capacity change from 0 to 4096
[  377.064040][T19080] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  377.069067][T19080] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  377.078966][T19080] ntfs3(loop5): Failed to load $MFT.
[  377.311338][T19088] loop3: detected capacity change from 0 to 40427
[  377.314721][T19088] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  377.317171][T19088] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  377.327201][T19088] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  377.366266][T19088] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  377.370656][T19088] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  377.373293][T19088] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  377.395587][   T10] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[  377.518882][T19099] syz.3.3636: attempt to access beyond end of device
[  377.518882][T19099] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  377.529527][T19099] syz.3.3636: attempt to access beyond end of device
[  377.529527][T19099] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  377.541599][T19088] syz.3.3636: attempt to access beyond end of device
[  377.541599][T19088] loop3: rw=2049, sector=77824, nr_sectors = 520 limit=40427
[  377.552680][   T10] usb 6-1: Using ep0 maxpacket: 8
[  377.557833][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  377.561991][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  377.566206][   T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  377.570002][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[  377.576703][   T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  377.580745][   T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  377.584573][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  377.595802][   T10] usb 6-1: config 0 descriptor??
[  377.598891][T19090] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  377.977434][T19121] netlink: 'syz.3.3644': attribute type 13 has an invalid length.
[  378.014708][ T6523] usb 6-1: USB disconnect, device number 48
[  378.019428][ T5855] Bluetooth: hci3: Opcode 0x0c03 failed: -19
[  378.085851][T19138] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3645'.
[  378.095008][T19126] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3645'.
[  378.116167][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  378.980481][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  378.988802][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  378.995969][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  379.000074][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  379.003765][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  379.174654][T19193] loop5: detected capacity change from 0 to 1024
[  379.303389][T19158] chnl_net:caif_netlink_parms(): no params data found
[  379.425759][T19158] bridge0: port 1(bridge_slave_0) entered blocking state
[  379.428043][T19158] bridge0: port 1(bridge_slave_0) entered disabled state
[  379.430434][T19158] bridge_slave_0: entered allmulticast mode
[  379.434696][T19158] bridge_slave_0: entered promiscuous mode
[  379.439256][T19158] bridge0: port 2(bridge_slave_1) entered blocking state
[  379.446661][T19158] bridge0: port 2(bridge_slave_1) entered disabled state
[  379.450159][T19158] bridge_slave_1: entered allmulticast mode
[  379.454209][T19158] bridge_slave_1: entered promiscuous mode
[  379.506256][T19158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  379.514490][T19158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  379.558450][T19158] team0: Port device team_slave_0 added
[  379.562975][T19158] team0: Port device team_slave_1 added
[  379.591034][T19158] batman_adv: batadv0: Adding interface: batadv_slave_0
[  379.595100][T19158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  379.603062][T19158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  379.613564][T19158] batman_adv: batadv0: Adding interface: batadv_slave_1
[  379.615798][T19158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  379.625630][T19158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  379.915147][T19158] hsr_slave_0: entered promiscuous mode
[  379.917779][T19158] hsr_slave_1: entered promiscuous mode
[  379.920041][T19158] debugfs: 'hsr0' already exists in 'hsr'
[  379.921782][T19158] Cannot create hsr debugfs directory
[  380.534675][T19523] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3670'.
[  380.729874][T19158] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  380.748593][T19158] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  380.772888][T19158] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  380.779604][T19158] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  380.836936][T19158] 8021q: adding VLAN 0 to HW filter on device bond0
[  380.848036][T19158] 8021q: adding VLAN 0 to HW filter on device team0
[  380.854349][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[  380.856537][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  380.876276][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[  380.878662][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  380.905687][T19158] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  380.908832][T19158] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  381.171064][ T5853] Bluetooth: hci1: command tx timeout
[  381.206231][T19158] 8021q: adding VLAN 0 to HW filter on device batadv0
[  381.245518][T19158] veth0_vlan: entered promiscuous mode
[  381.252933][T19158] veth1_vlan: entered promiscuous mode
[  381.274024][T19158] veth0_macvtap: entered promiscuous mode
[  381.279357][T19158] veth1_macvtap: entered promiscuous mode
[  381.301903][T19158] batman_adv: batadv0: Interface activated: batadv_slave_0
[  381.310508][T19158] batman_adv: batadv0: Interface activated: batadv_slave_1
[  381.321371][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  381.325003][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  381.331152][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  381.335094][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  381.437762][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  381.440922][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  381.492786][T14020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  381.496072][T14020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  382.069977][T19586] loop0: detected capacity change from 0 to 40427
[  382.085021][T19586] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  382.087357][T19586] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  382.101709][T19586] F2FS-fs (loop0): invalid crc value
[  382.157369][T19592] loop5: detected capacity change from 0 to 32768
[  382.169146][T19586] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  382.175250][T19586] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  382.175825][T19592] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  382.177458][T19586] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  382.217262][T19592] XFS (loop5): Ending clean mount
[  382.225241][T19592] XFS (loop5): Quotacheck needed: Please wait.
[  382.252504][T19592] XFS (loop5): Quotacheck: Done.
[  382.301776][ T7602] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  382.495416][T19616] loop5: detected capacity change from 0 to 256
[  382.501727][T19616] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d)
[  382.588410][T19627] loop5: detected capacity change from 0 to 512
[  382.591297][T19627] EXT4-fs: Ignoring removed i_version option
[  382.594615][T19627] EXT4-fs: Ignoring removed nobh option
[  382.596654][T19627] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  382.601658][T19627] EXT4-fs (loop5): 1 truncate cleaned up
[  382.611524][T19627] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  382.688710][ T7602] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  382.713350][   T33] audit: type=1400 audit(1755140894.697:77): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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
[  383.044964][T19671] netlink: 'syz.0.3707': attribute type 1 has an invalid length.
[  383.075350][T19671] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  383.110886][T19675] loop0: detected capacity change from 0 to 16
[  383.126450][T19675] erofs (device loop0): mounted with root inode @ nid 36.
[  383.232644][ T5853] Bluetooth: hci1: command tx timeout
[  384.382223][T19711] input: syz1 as /devices/virtual/input/input23
[  384.443171][T19719] loop0: detected capacity change from 0 to 512
[  384.458201][T19719] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.3722: invalid block
[  384.466969][T19719] EXT4-fs (loop0): Remounting filesystem read-only
[  384.469170][T19719] EXT4-fs (loop0): 2 truncates cleaned up
[  384.473103][T19719] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  384.506913][T19158] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  385.022332][T19760] loop0: detected capacity change from 0 to 512
[  385.025874][T19760] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  385.043185][T19760] EXT4-fs (loop0): 1 truncate cleaned up
[  385.045966][T19760] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  385.089412][T19158] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  385.121029][T19767] loop5: detected capacity change from 0 to 1024
[  385.164827][ T1090] hfsplus: b-tree write err: -5, ino 4
[  385.194969][T19778] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3744'.
[  385.322325][ T5853] Bluetooth: hci1: command tx timeout
[  385.512183][  T793] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  385.541496][T19793] loop5: detected capacity change from 0 to 32768
[  385.545424][T19793] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3750 (19793)
[  385.552481][T19793] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  385.556341][T19793] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm
[  385.559426][T19793] BTRFS info (device loop5): using free-space-tree
[  385.578480][T19793] BTRFS info (device loop5): rebuilding free space tree
[  385.669394][ T7602] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  385.672451][  T793] usb 1-1: Using ep0 maxpacket: 32
[  385.676502][  T793] usb 1-1: config 0 has an invalid interface number: 85 but max is 0
[  385.679852][  T793] usb 1-1: config 0 has no interface number 0
[  385.684434][  T793] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x8 has invalid maxpacket 512, setting to 64
[  385.688019][  T793] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  385.691430][  T793] usb 1-1: config 0 interface 85 has no altsetting 0
[  385.696777][  T793] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  385.700151][  T793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  385.705721][  T793] usb 1-1: Product: syz
[  385.707656][  T793] usb 1-1: Manufacturer: syz
[  385.709239][  T793] usb 1-1: SerialNumber: syz
[  385.719970][  T793] usb 1-1: config 0 descriptor??
[  385.873616][T19817] loop5: detected capacity change from 0 to 2048
[  385.881633][T19817] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  385.931507][  T793] appletouch 1-1:0.85: Failed to read mode from device.
[  385.934600][  T793] appletouch 1-1:0.85: probe with driver appletouch failed with error -5
[  385.945431][  T793] usb 1-1: USB disconnect, device number 19
[  386.172537][   T24] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[  386.324483][   T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  386.328624][   T24] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  386.332874][   T24] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  386.341861][   T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  386.345862][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  386.349237][   T24] usb 6-1: Product: syz
[  386.351040][   T24] usb 6-1: Manufacturer: syz
[  386.354114][   T24] usb 6-1: SerialNumber: syz
[  386.566667][   T24] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 49 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  386.767499][T10381] usb 6-1: USB disconnect, device number 49
[  386.773431][T10381] usblp0: removed
[  386.813660][ T5986] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  386.965239][ T5986] usb 1-1: Using ep0 maxpacket: 16
[  387.008961][ T5986] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  387.011765][ T5986] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  387.014508][ T5986] usb 1-1: Product: syz
[  387.015812][ T5986] usb 1-1: Manufacturer: syz
[  387.017292][ T5986] usb 1-1: SerialNumber: syz
[  387.021329][ T5986] usb 1-1: config 0 descriptor??
[  387.039092][ T5986] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  387.066277][T19862] team0 (unregistering): Port device dummy0 removed
[  387.397663][ T5853] Bluetooth: hci1: command tx timeout
[  387.717539][   T33] audit: type=1400 audit(1755140899.707:78): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AA009F5D15F47DB2D pid=19916 comm="syz.5.3766"
[  387.806983][T19921] loop5: detected capacity change from 0 to 8
[  387.822465][T19921] unable to read inode lookup table
[  388.045062][ T5986] ssu100 1-1:0.0: probe with driver ssu100 failed with error -71
[  388.127119][T19932] : entered promiscuous mode
[  388.726341][ T5986] usb 1-1: USB disconnect, device number 20
[  388.932437][T19970] loop5: detected capacity change from 0 to 128
[  388.937139][T19970] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  388.945240][T19970] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  389.290708][T19982] loop5: detected capacity change from 0 to 40427
[  389.294974][T19982] F2FS-fs (loop5): Image doesn't support compression
[  389.297220][T19982] F2FS-fs (loop5): build fault injection rate: 690
[  389.300611][T19982] F2FS-fs (loop5): invalid crc value
[  389.339000][T19982] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  389.343710][T19982] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  389.547477][T19993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3793'.
[  389.992318][  T793] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  390.022451][ T5986] usb 6-1: new high-speed USB device number 50 using dummy_hcd
[  390.152607][  T793] usb 1-1: Using ep0 maxpacket: 16
[  390.160543][  T793] usb 1-1: config 0 has an invalid interface number: 41 but max is 0
[  390.165054][  T793] usb 1-1: config 0 has no interface number 0
[  390.167504][  T793] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  390.171486][  T793] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  390.172248][ T5986] usb 6-1: Using ep0 maxpacket: 32
[  390.181736][  T793] usb 1-1: config 0 interface 41 has no altsetting 0
[  390.184849][ T5986] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  390.188069][  T793] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[  390.191670][ T5986] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  390.197904][ T5986] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  390.200110][  T793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  390.201392][ T5986] usb 6-1: Product: syz
[  390.204308][  T793] usb 1-1: Product: syz
[  390.205884][ T5986] usb 6-1: Manufacturer: syz
[  390.207180][  T793] usb 1-1: Manufacturer: syz
[  390.209079][ T5986] usb 6-1: SerialNumber: syz
[  390.210802][  T793] usb 1-1: SerialNumber: syz
[  390.218447][ T5986] usb 6-1: config 0 descriptor??
[  390.224226][  T793] usb 1-1: config 0 descriptor??
[  390.226446][ T5986] usb 6-1: bad CDC descriptors
[  390.227509][T20011] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  390.229317][ T5986] usb 6-1: unsupported MDLM descriptors
[  390.231346][T20011] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  390.459590][  T793] dm9601 1-1:0.41: probe with driver dm9601 failed with error -71
[  390.470076][ T6523] usb 6-1: USB disconnect, device number 50
[  390.476840][  T793] sr9700 1-1:0.41: probe with driver sr9700 failed with error -71
[  390.487536][  T793] usb 1-1: USB disconnect, device number 21
[  391.432782][  T793] usb 6-1: new full-speed USB device number 51 using dummy_hcd
[  391.594262][  T793] usb 6-1: unable to get BOS descriptor or descriptor too short
[  391.598164][  T793] usb 6-1: not running at top speed; connect to a high speed hub
[  391.605765][  T793] usb 6-1: config 2 has an invalid interface number: 212 but max is 1
[  391.608718][  T793] usb 6-1: config 2 has an invalid interface number: 226 but max is 1
[  391.611217][  T793] usb 6-1: config 2 has no interface number 0
[  391.618537][  T793] usb 6-1: config 2 has no interface number 1
[  391.620467][  T793] usb 6-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  391.628737][  T793] usb 6-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping
[  391.631993][  T793] usb 6-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64
[  391.647404][  T793] usb 6-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  391.662520][  T793] usb 6-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  391.666548][  T793] usb 6-1: config 2 interface 212 has no altsetting 0
[  391.692384][  T793] usb 6-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce
[  391.695200][  T793] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  391.697797][  T793] usb 6-1: Product: syz
[  391.699116][  T793] usb 6-1: Manufacturer: syz
[  391.700536][  T793] usb 6-1: SerialNumber: syz
[  391.925284][  T793] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:2.226/input/input26
[  391.935834][  T793] usb 6-1: USB disconnect, device number 51
[  391.992680][    T9] usb 1-1: new low-speed USB device number 22 using dummy_hcd
[  392.147819][    T9] usb 1-1: config 2 has an invalid interface number: 227 but max is 0
[  392.151108][    T9] usb 1-1: config 2 has no interface number 0
[  392.153714][    T9] usb 1-1: config 2 interface 227 has no altsetting 0
[  392.156291][    T9] usb 1-1: New USB device found, idVendor=07ca, idProduct=2835, bcdDevice=b3.c2
[  392.159721][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  392.370455][ T6523] usb 1-1: USB disconnect, device number 22
[  392.934318][T20173] loop0: detected capacity change from 0 to 512
[  392.949382][T20173] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  392.968055][T20173] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.3845: Invalid block bitmap block 0 in block_group 0
[  392.974412][T20171] loop5: detected capacity change from 0 to 32768
[  392.974526][T20173] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  392.978630][T20171] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3844 (20171)
[  392.985141][T20173] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #11: comm syz.0.3845: attempt to clear invalid blocks 983261 len 1
[  392.991008][T20173] EXT4-fs error (device loop0): __ext4_get_inode_loc:4861: comm syz.0.3845: Invalid inode table block 0 in block_group 0
[  392.998002][T20171] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  392.998081][T20171] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm
[  392.998123][T20171] BTRFS info (device loop5): using free-space-tree
[  393.021084][T20173] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  393.027807][T20173] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[  393.032572][T20173] EXT4-fs error (device loop0): __ext4_get_inode_loc:4861: comm syz.0.3845: Invalid inode table block 0 in block_group 0
[  393.040068][T20173] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  393.045418][T20173] EXT4-fs error (device loop0): ext4_truncate:4666: inode #11: comm syz.0.3845: mark_inode_dirty error
[  393.060155][T20173] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[  393.064872][T20173] EXT4-fs error (device loop0): __ext4_get_inode_loc:4861: comm syz.0.3845: Invalid inode table block 0 in block_group 0
[  393.075010][T20173] EXT4-fs (loop0): 1 truncate cleaned up
[  393.082646][T20173] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  393.129470][T19158] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  393.174943][ T7602] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  393.314136][T20202] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  393.712841][ T5986] usb 6-1: new high-speed USB device number 52 using dummy_hcd
[  394.132529][ T5986] usb 6-1: Using ep0 maxpacket: 32
[  394.136798][ T5986] usb 6-1: config 0 has an invalid interface number: 16 but max is 0
[  394.139989][ T5986] usb 6-1: config 0 has no interface number 0
[  394.142859][ T5986] usb 6-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  394.146807][ T5986] usb 6-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  394.153209][ T5986] usb 6-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d
[  394.156856][ T5986] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  394.160070][ T5986] usb 6-1: Product: syz
[  394.163011][ T5986] usb 6-1: Manufacturer: syz
[  394.164885][ T5986] usb 6-1: SerialNumber: syz
[  394.171136][ T5986] usb 6-1: config 0 descriptor??
[  394.176758][T20210] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  394.179771][T20210] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  394.194967][ T5986] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  394.813845][T20244] loop0: detected capacity change from 0 to 512
[  394.816605][   T24] usb 6-1: USB disconnect, device number 52
[  394.821422][T20244] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.3857: bad orphan inode 13
[  394.826343][T20244] ext4_test_bit(bit=12, block=4) = 1
[  394.828240][T20244] is_bad_inode(inode)=0
[  394.829862][T20244] NEXT_ORPHAN(inode)=0
[  394.831476][T20244] max_ino=32
[  394.833282][T20244] i_nlink=1
[  394.847341][T20244] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  394.858838][T20244] EXT4-fs warning (device loop0): dx_probe:801: inode #2: comm syz.0.3857: Unrecognised inode hash code 20
[  394.866921][T20244] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.3857: Corrupt directory, running e2fsck is recommended
[  394.894316][T20244] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 13: comm syz.0.3857: path /57/file0: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[  394.904224][T20244] EXT4-fs error (device loop0): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.0.3857: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[  394.937460][T19158] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  395.095545][T20265] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3859'.
[  395.099624][T20265] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  396.051103][T20277] loop5: detected capacity change from 0 to 32768
[  396.065156][T20277] bcachefs (/dev/loop5): error validating superblock: Invalid superblock section journal_seq_blacklist: entry 1 out of order with next entry (56 > 0)
[  396.065156][T20277] journal_seq_blacklist (size 640):
[  396.065156][T20277] 0-56 0-0 0-34 0-0 0-0 45-0 45-26 6-11 0-0 0-11 33-11 5-0 0-0 0-4 4-8 0-0 0-0 0-0 0-0 0-0 0-2 0-0 0-0 0-0 0-0 0-0 0-0 1-12 0-2 0-0 0-0 0-0 0-0 0-1 0-0 2-17 182-41 0-0 0-0
[  396.065156][T20277] 
[  396.078352][T20277] bcachefs: bch2_fs_get_tree() error: invalid_sb_journal_seq_blacklist
[  396.308771][T20284] loop0: detected capacity change from 0 to 512
[  396.328973][T20284] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.3867: iget: bad extended attribute block 1
[  396.345498][T20284] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.3867: couldn't read orphan inode 15 (err -117)
[  396.356004][T20284] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  396.380742][T19158] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  396.395059][T20292] netlink: 'syz.9.3871': attribute type 1 has an invalid length.
[  396.397449][T20292] netlink: 'syz.9.3871': attribute type 2 has an invalid length.
[  396.399817][T20292] netlink: 1172 bytes leftover after parsing attributes in process `syz.9.3871'.
[  397.234934][T20316] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3880'.
[  397.239056][T20316] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3880'.
[  397.672176][ T6523] usb 6-1: new high-speed USB device number 53 using dummy_hcd
[  397.772153][   T24] usb 1-1: new full-speed USB device number 23 using dummy_hcd
[  397.842695][ T6523] usb 6-1: Using ep0 maxpacket: 16
[  397.848833][ T6523] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  397.852647][ T6523] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  397.855585][ T6523] usb 6-1: Product: syz
[  397.857298][ T6523] usb 6-1: Manufacturer: syz
[  397.859113][ T6523] usb 6-1: SerialNumber: syz
[  397.863853][ T6523] usb 6-1: config 0 descriptor??
[  397.868644][ T6523] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected
[  397.873591][ T6523] usb 6-1: Detected FT-X
[  397.935052][   T24] usb 1-1: config 0 has an invalid descriptor of length 91, skipping remainder of the config
[  397.939037][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  397.943473][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10
[  397.947533][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64
[  397.951451][   T24] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  397.956680][   T24] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  397.960980][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  397.967368][   T24] usb 1-1: config 0 descriptor??
[  398.052245][   T24] rc_core: IR keymap rc-hauppauge not found
[  398.054742][   T24] Registered IR keymap rc-empty
[  398.057594][   T24] mceusb 1-1:0.0: Error: mce write urb status = -71
[  398.075569][   T24] mceusb 1-1:0.0: Error: mce write urb status = -71
[  398.078797][ T6523] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  398.084290][ T6523] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  398.088549][ T6523] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71
[  398.094589][   T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  398.099572][ T6523] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  398.108282][ T6523] usb 6-1: USB disconnect, device number 53
[  398.112521][   T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input27
[  398.119140][ T6523] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  398.128938][   T24] mceusb 1-1:0.0: Error: mce write urb status = -71
[  398.134838][ T6523] ftdi_sio 6-1:0.0: device disconnected
[  398.143871][   T24] mceusb 1-1:0.0: Error: mce write urb status = -71
[  398.163825][   T24] mceusb 1-1:0.0: Error: mce write urb status = -71
[  398.187842][   T24] mceusb 1-1:0.0: Error: mce write urb status = -71
[  398.203297][   T24] mceusb 1-1:0.0: Error: mce write urb status = -71
[  398.223513][   T24] mceusb 1-1:0.0: Error: mce write urb status = -71
[  398.244394][   T24] mceusb 1-1:0.0: Error: mce write urb status = -71
[  398.262754][   T24] mceusb 1-1:0.0: Error: mce write urb status = -71
[  398.282574][   T24] mceusb 1-1:0.0: Error: mce write urb status = -71
[  398.316795][   T24] mceusb 1-1:0.0: Error: mce write urb status = -71
[  398.336938][   T24] mceusb 1-1:0.0: Registered  with mce emulator interface version 1
[  398.340950][   T24] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  398.348564][   T24] usb 1-1: USB disconnect, device number 23
[  398.618970][   T12] bridge_slave_1: left allmulticast mode
[  398.620777][   T12] bridge_slave_1: left promiscuous mode
[  398.629025][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  398.635519][   T12] bridge_slave_0: left allmulticast mode
[  398.637407][   T12] bridge_slave_0: left promiscuous mode
[  398.639773][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  398.654621][T20384] delete_channel: no stack
[  398.909100][T20392] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3895'.
[  399.356467][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  399.361259][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  399.367145][   T12] bond0 (unregistering): Released all slaves
[  399.762944][   T12] hsr_slave_0: left promiscuous mode
[  399.774884][   T12] hsr_slave_1: left promiscuous mode
[  399.782958][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  399.785756][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  399.793446][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  399.796588][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  399.807917][T20446] loop5: detected capacity change from 0 to 512
[  399.820726][T20446] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  399.825005][   T12] veth1_macvtap: left promiscuous mode
[  399.828173][   T12] veth0_macvtap: left promiscuous mode
[  399.829021][T20446] ext4 filesystem being mounted at /1076/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  399.833045][   T12] veth1_vlan: left promiscuous mode
[  399.836770][   T12] veth0_vlan: left promiscuous mode
[  399.859678][T20446] Quota error (device loop5): do_check_range: Getting dqdh_next_free 2741 out of range 0-8
[  399.867558][T20446] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  399.870695][T20446] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.3917: Failed to acquire dquot type 0
[  399.916304][ T7602] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  400.231978][T20456] loop5: detected capacity change from 0 to 40427
[  400.288045][T20456] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  400.300182][T20456] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  400.331755][ T7602] syz-executor: attempt to access beyond end of device
[  400.331755][ T7602] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  400.338110][ T7602] CPU: 1 UID: 0 PID: 7602 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  400.338134][ T7602] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  400.338143][ T7602] Call Trace:
[  400.338149][ T7602]  <TASK>
[  400.338155][ T7602]  dump_stack_lvl+0x189/0x250
[  400.338178][ T7602]  ? __pfx_dump_stack_lvl+0x10/0x10
[  400.338191][ T7602]  ? __pfx_queue_work_on+0x10/0x10
[  400.338204][ T7602]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  400.338222][ T7602]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  400.338258][ T7602]  f2fs_handle_critical_error+0x37c/0x540
[  400.338281][ T7602]  f2fs_write_end_io+0x886/0xb60
[  400.338304][ T7602]  __submit_merged_bio+0x27a/0x6a0
[  400.338330][ T7602]  __submit_merged_write_cond+0x255/0x530
[  400.338356][ T7602]  f2fs_write_data_pages+0x261d/0x3000
[  400.338401][ T7602]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  400.338472][ T7602]  ? folios_put_refs+0x559/0x640
[  400.338495][ T7602]  ? __pfx_folios_put_refs+0x10/0x10
[  400.338503][ T7602]  ? rcu_is_watching+0x15/0xb0
[  400.338525][ T7602]  ? __lock_acquire+0xab9/0xd20
[  400.338561][ T7602]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  400.338582][ T7602]  do_writepages+0x32e/0x550
[  400.338607][ T7602]  ? do_raw_spin_unlock+0x4d/0x240
[  400.338625][ T7602]  filemap_fdatawrite+0x199/0x240
[  400.338644][ T7602]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  400.338706][ T7602]  ? do_raw_spin_unlock+0x4d/0x240
[  400.338721][ T7602]  f2fs_sync_dirty_inodes+0x31f/0x830
[  400.338748][ T7602]  f2fs_write_checkpoint+0x95a/0x1df0
[  400.338787][ T7602]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  400.338836][ T7602]  ? kill_f2fs_super+0x298/0x6c0
[  400.338889][ T7602]  kill_f2fs_super+0x2c3/0x6c0
[  400.338910][ T7602]  ? __pfx_kill_f2fs_super+0x10/0x10
[  400.338921][ T7602]  ? radix_tree_delete_item+0x2b6/0x400
[  400.338939][ T7602]  ? shrinker_free+0x2ce/0x3e0
[  400.338958][ T7602]  deactivate_locked_super+0xbc/0x130
[  400.338978][ T7602]  cleanup_mnt+0x425/0x4c0
[  400.338993][ T7602]  ? lockdep_hardirqs_on+0x9c/0x150
[  400.339015][ T7602]  task_work_run+0x1d4/0x260
[  400.339032][ T7602]  ? __pfx_task_work_run+0x10/0x10
[  400.339045][ T7602]  ? __x64_sys_umount+0x122/0x160
[  400.339068][ T7602]  ? exit_to_user_mode_loop+0x40/0x110
[  400.339092][ T7602]  exit_to_user_mode_loop+0xec/0x110
[  400.339112][ T7602]  do_syscall_64+0x2bd/0x3b0
[  400.339130][ T7602]  ? lockdep_hardirqs_on+0x9c/0x150
[  400.339139][ T7602]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  400.339152][ T7602]  ? exc_page_fault+0x9f/0xf0
[  400.339170][ T7602]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  400.339183][ T7602] RIP: 0033:0x7fc3e7f8ff17
[  400.339197][ T7602] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  400.339209][ T7602] RSP: 002b:00007ffcd3329418 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  400.339224][ T7602] RAX: 0000000000000000 RBX: 00007fc3e8011c05 RCX: 00007fc3e7f8ff17
[  400.339239][ T7602] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcd33294d0
[  400.339245][ T7602] RBP: 00007ffcd33294d0 R08: 0000000000000000 R09: 0000000000000000
[  400.339250][ T7602] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcd332a560
[  400.339258][ T7602] R13: 00007fc3e8011c05 R14: 0000000000061b5f R15: 00007ffcd332a5a0
[  400.339283][ T7602]  </TASK>
[  400.372251][ T7602] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  400.709028][   T12] team0 (unregistering): Port device team_slave_1 removed
[  400.768185][   T12] team0 (unregistering): Port device team_slave_0 removed
[  401.557930][T20487] loop0: detected capacity change from 0 to 256
[  401.700167][T20501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3934'.
[  401.931752][   T12] IPVS: stop unused estimator thread 0...
[  401.956150][   T33] audit: type=1800 audit(1755140913.947:79): pid=20528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3947" name="file1" dev="tmpfs" ino=5673 res=0 errno=0
[  402.149049][T20549] pimreg: entered allmulticast mode
[  402.205918][T20553] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3955'.
[  402.545403][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.619180][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.690417][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.771852][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.958014][ T5855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  402.968388][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  402.978797][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  402.985583][   T12] bridge_slave_1: left allmulticast mode
[  402.986274][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  402.987792][   T12] bridge_slave_1: left promiscuous mode
[  402.992966][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  402.997658][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  403.035936][   T12] bridge_slave_0: left allmulticast mode
[  403.037716][   T12] bridge_slave_0: left promiscuous mode
[  403.039523][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  403.470920][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  403.477018][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  403.481839][   T12] bond0 (unregistering): Released all slaves
[  403.506256][T20599] netlink: 132 bytes leftover after parsing attributes in process `syz.9.3966'.
[  403.514208][T20594] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3963'.
[  403.617813][T20591] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3963'.
[  403.957688][   T12] hsr_slave_0: left promiscuous mode
[  403.962618][   T12] hsr_slave_1: left promiscuous mode
[  403.967936][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  403.970728][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  403.976588][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  403.979081][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  403.999079][   T12] veth1_macvtap: left promiscuous mode
[  404.000886][   T12] veth0_macvtap: left promiscuous mode
[  404.004351][   T12] veth1_vlan: left promiscuous mode
[  404.006159][   T12] veth0_vlan: left promiscuous mode
[  404.101974][   T12] pimreg (unregistering): left allmulticast mode
[  404.610293][   T12] team0 (unregistering): Port device team_slave_1 removed
[  404.654337][   T12] team0 (unregistering): Port device team_slave_0 removed
[  405.075916][ T5853] Bluetooth: hci1: command tx timeout
[  405.125535][T20575] chnl_net:caif_netlink_parms(): no params data found
[  405.268266][T20575] bridge0: port 1(bridge_slave_0) entered blocking state
[  405.281737][T20575] bridge0: port 1(bridge_slave_0) entered disabled state
[  405.288968][T20575] bridge_slave_0: entered allmulticast mode
[  405.291771][T20575] bridge_slave_0: entered promiscuous mode
[  405.297692][T20575] bridge0: port 2(bridge_slave_1) entered blocking state
[  405.300084][T20575] bridge0: port 2(bridge_slave_1) entered disabled state
[  405.302667][T20575] bridge_slave_1: entered allmulticast mode
[  405.315758][T20575] bridge_slave_1: entered promiscuous mode
[  405.379352][T20575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  405.384883][T20575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  405.469040][T20575] team0: Port device team_slave_0 added
[  405.474999][T20575] team0: Port device team_slave_1 added
[  405.527523][T20575] batman_adv: batadv0: Adding interface: batadv_slave_0
[  405.530187][T20575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  405.540470][T20575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  405.555535][T20575] batman_adv: batadv0: Adding interface: batadv_slave_1
[  405.558155][T20575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  405.574759][T20575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  405.610215][T20880] loop5: detected capacity change from 0 to 1024
[  405.618660][T20880] hfsplus: found bad thread record in catalog
[  405.638079][T20575] hsr_slave_0: entered promiscuous mode
[  405.641026][T20575] hsr_slave_1: entered promiscuous mode
[  406.026519][T20934] loop5: detected capacity change from 0 to 32768
[  406.054759][T20934] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  406.091025][T20934] XFS (loop5): Ending clean mount
[  406.094814][T20934] XFS (loop5): Quotacheck needed: Please wait.
[  406.138569][T20934] XFS (loop5): Quotacheck: Done.
[  406.220253][T20996] netlink: 76 bytes leftover after parsing attributes in process `syz.9.3988'.
[  406.284460][T20575] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  406.289615][ T7602] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  406.289678][T20575] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  406.318834][T20575] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  406.329454][T20575] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  406.461922][T20575] 8021q: adding VLAN 0 to HW filter on device bond0
[  406.479300][T20575] 8021q: adding VLAN 0 to HW filter on device team0
[  406.486477][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  406.489070][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  406.498159][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  406.500524][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  406.891896][T20575] 8021q: adding VLAN 0 to HW filter on device batadv0
[  406.959875][T21034] loop5: detected capacity change from 0 to 512
[  406.968403][T21034] journal_path: Non-blockdev passed as './bus'
[  406.976734][T21034] EXT4-fs: error: could not find journal device path
[  407.121535][T20575] veth0_vlan: entered promiscuous mode
[  407.137361][T20575] veth1_vlan: entered promiscuous mode
[  407.152946][ T5853] Bluetooth: hci1: command tx timeout
[  407.183401][T20575] veth0_macvtap: entered promiscuous mode
[  407.187848][T20575] veth1_macvtap: entered promiscuous mode
[  407.200458][T20575] batman_adv: batadv0: Interface activated: batadv_slave_0
[  407.207555][T20575] batman_adv: batadv0: Interface activated: batadv_slave_1
[  407.227665][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  407.230351][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  407.235971][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  407.238840][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  407.332220][ T6122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  407.334903][ T6122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  407.366443][ T6122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  407.370510][ T6122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  407.439829][T21074] loop5: detected capacity change from 0 to 8
[  407.769733][T21084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  407.838909][T21084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  407.898643][T21084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  408.365495][T21103] CUSE: DEVNAME unspecified
[  408.414813][ T5986] hid-generic 0005:16C0:05DF.001F: item fetching failed at offset 0/1
[  408.429746][ T5986] hid-generic 0005:16C0:05DF.001F: probe with driver hid-generic failed with error -22
[  409.156094][T21120] loop4: detected capacity change from 0 to 32768
[  409.160523][T21120] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4016 (21120)
[  409.168535][T21120] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  409.174769][T21120] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  409.178497][T21120] BTRFS info (device loop4): using free-space-tree
[  409.252268][ T5853] Bluetooth: hci1: command tx timeout
[  409.344957][T21129] loop5: detected capacity change from 0 to 32768
[  409.358751][T21129] ERROR: (device loop5): diAllocAG: error reading iag
[  409.358751][T21129] 
[  409.368433][T21129] ialloc: diAlloc returned -5!
[  409.391342][T21120] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8)
[  409.523779][T20575] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  409.839441][T21167] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  410.572928][T21184] loop5: detected capacity change from 0 to 4096
[  410.582655][T21184] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512).
[  410.628206][T21184] ntfs3(loop5): ino=1f, "file2" failed to open parent directory r=5 to update
[  410.656561][   T36] ntfs3(loop5): ino=1f, failed to open parent directory r=5 to update
[  411.324391][ T5853] Bluetooth: hci1: command tx timeout
[  411.669343][T21230] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  411.863061][T21244] netlink: 148 bytes leftover after parsing attributes in process `syz.9.4058'.
[  411.865995][T21244] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  411.958458][T21249] @: renamed from bond_slave_0
[  412.458147][T21313] loop5: detected capacity change from 0 to 128
[  412.462505][T21313] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  413.644381][T21358] loop5: detected capacity change from 0 to 2048
[  413.651057][T21358] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=26504, location=26504
[  413.663593][T21358] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  415.193954][T21392] overlay: filesystem on ./file0 not supported as upperdir
[  415.459431][T21397] loop5: detected capacity change from 0 to 4096
[  415.494060][T21399] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  415.870282][T21410] CIFS mount error: No usable UNC path provided in device string!
[  415.870282][T21410] 
[  415.874652][T21410] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  416.594876][   T10] IPVS: starting estimator thread 0...
[  416.684817][T21421] IPVS: using max 43 ests per chain, 103200 per kthread
[  416.831742][T21427] loop5: detected capacity change from 0 to 32768
[  416.838496][T21427] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4113 (21427)
[  416.849955][T21427] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  416.853884][T21427] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  416.857065][T21427] BTRFS info (device loop5): using free-space-tree
[  417.049398][ T7602] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  417.152553][   T33] audit: type=1400 audit(1755140929.137:80): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=3A3A0AE10CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A552C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=21459 comm="syz.4.4119"
[  417.824616][T21513] loop5: detected capacity change from 0 to 4096
[  418.543165][  T793] usb 6-1: new high-speed USB device number 54 using dummy_hcd
[  418.692623][  T793] usb 6-1: Using ep0 maxpacket: 16
[  418.697474][  T793] usb 6-1: unable to get BOS descriptor or descriptor too short
[  418.701971][  T793] usb 6-1: config 1 has an invalid interface number: 231 but max is 0
[  418.705813][  T793] usb 6-1: config 1 has no interface number 0
[  418.708609][  T793] usb 6-1: config 1 interface 231 has no altsetting 0
[  418.714820][  T793] usb 6-1: string descriptor 0 read error: -22
[  418.717388][  T793] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=5c.f5
[  418.721048][  T793] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  418.980458][  T793] usbtest 6-1:1.231: Linux gadget zero
[  418.982742][  T793] usbtest 6-1:1.231: high-speed {control in/out int-out} tests (+alt)
[  419.480973][ T5986] usb 6-1: USB disconnect, device number 54
[  420.032456][ T5853] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  420.322537][T21592] loop5: detected capacity change from 0 to 1024
[  420.326200][T21592] EXT4-fs: Ignoring removed mblk_io_submit option
[  420.328806][T21592] EXT4-fs: inline encryption not supported
[  420.332502][T21592] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  420.338448][T21592] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c842e018, mo2=0000]
[  420.347291][T21592] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.4165: bad orphan inode 11
[  420.351683][T21592] ext4_test_bit(bit=10, block=4) = 1
[  420.357219][T21592] is_bad_inode(inode)=0
[  420.358901][T21592] NEXT_ORPHAN(inode)=3254779904
[  420.360855][T21592] max_ino=32
[  420.362847][T21592] i_nlink=0
[  420.372879][T21592] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.4165: lblock 2 mapped to illegal pblock 2 (length 1)
[  420.380718][T21592] Quota error (device loop5): qtree_write_dquot: dquota write failed
[  420.385008][T21592] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.4165: lblock 0 mapped to illegal pblock 48 (length 1)
[  420.393187][T21592] Quota error (device loop5): v2_write_file_info: Can't write info structure
[  420.397164][T21592] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.4165: Failed to acquire dquot type 0
[  420.402294][T21592] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  420.413914][T21592] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.4165: mark_inode_dirty error
[  420.418632][T21592] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  420.424615][T21592] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  420.453651][ T7602] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  420.457949][ T7602] EXT4-fs error (device loop5): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0
[  420.470618][ T7602] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  420.476285][ T7602] EXT4-fs error (device loop5): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error
[  420.809715][T21607] netlink: 136 bytes leftover after parsing attributes in process `syz.9.4169'.
[  421.421290][   T33] audit: type=1326 audit(1755140933.407:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21602 comm="syz.5.4168" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e7f8ebe9 code=0x7fc00000
[  421.436919][   T33] audit: type=1326 audit(1755140933.407:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21602 comm="syz.5.4168" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc3e7f8ebe9 code=0x7fc00000
[  421.446400][   T33] audit: type=1326 audit(1755140933.407:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21602 comm="syz.5.4168" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e7f8ebe9 code=0x7fc00000
[  421.463562][   T33] audit: type=1326 audit(1755140933.407:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21602 comm="syz.5.4168" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e7f8ebe9 code=0x7fc00000
[  421.479424][   T33] audit: type=1326 audit(1755140933.407:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21602 comm="syz.5.4168" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e7f8ebe9 code=0x7fc00000
[  421.490224][   T33] audit: type=1326 audit(1755140933.407:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21602 comm="syz.5.4168" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e7f8ebe9 code=0x7fc00000
[  421.498985][   T33] audit: type=1326 audit(1755140933.407:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21602 comm="syz.5.4168" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e7f8ebe9 code=0x7fc00000
[  421.715172][T21638] vxcan3: entered allmulticast mode
[  422.828013][T21666] loop5: detected capacity change from 0 to 256
[  422.880497][T21671] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4195'.
[  423.299911][ T5855] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  423.307690][ T5855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  423.322502][ T5855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  423.329467][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  423.335738][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  423.376219][ T5858] bridge_slave_0: left promiscuous mode
[  423.379769][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[  423.769890][ T5858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  423.778531][ T5858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  423.786304][ T5858] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  423.791817][ T5858] bond0 (unregistering): Released all slaves
[  423.809813][ T5858] bond1 (unregistering): Released all slaves
[  423.919177][ T5858] : left promiscuous mode
[  424.323410][T21694] chnl_net:caif_netlink_parms(): no params data found
[  424.489963][T21869] loop4: detected capacity change from 0 to 1024
[  424.546193][T21694] bridge0: port 1(bridge_slave_0) entered blocking state
[  424.550845][T21694] bridge0: port 1(bridge_slave_0) entered disabled state
[  424.554622][T21694] bridge_slave_0: entered allmulticast mode
[  424.558485][T21694] bridge_slave_0: entered promiscuous mode
[  424.619585][T21694] bridge0: port 2(bridge_slave_1) entered blocking state
[  424.626562][T21694] bridge0: port 2(bridge_slave_1) entered disabled state
[  424.629464][T21694] bridge_slave_1: entered allmulticast mode
[  424.646559][T21694] bridge_slave_1: entered promiscuous mode
[  424.666280][ T5858] hsr_slave_0: left promiscuous mode
[  424.669163][ T5858] hsr_slave_1: left promiscuous mode
[  424.671952][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_0
[  424.686393][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_1
[  425.361684][ T5858] team_slave_1 (unregistering): left allmulticast mode
[  425.366614][ T5858] team0 (unregistering): Port device team_slave_1 removed
[  425.401484][ T5853] Bluetooth: hci0: command tx timeout
[  425.441068][ T5858] team0 (unregistering): Port device team_slave_0 removed
[  426.249841][T21694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  426.277435][T21694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  426.327792][T21942] loop4: detected capacity change from 0 to 2048
[  426.338333][T21942] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  426.357110][T21942] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  426.380189][   T33] kauditd_printk_skb: 21 callbacks suppressed
[  426.380205][   T33] audit: type=1800 audit(1755140938.367:109): pid=21942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4223" name="file1" dev="loop4" ino=1346 res=0 errno=0
[  426.391172][T21694] team0: Port device team_slave_0 added
[  426.397298][T21694] team0: Port device team_slave_1 added
[  426.453067][T21694] batman_adv: batadv0: Adding interface: batadv_slave_0
[  426.455278][T21694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  426.464106][T21694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  426.469779][T21694] batman_adv: batadv0: Adding interface: batadv_slave_1
[  426.471966][T21694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  426.481142][T21694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  426.572499][T21694] hsr_slave_0: entered promiscuous mode
[  426.577303][T21694] hsr_slave_1: entered promiscuous mode
[  426.584889][T21694] debugfs: 'hsr0' already exists in 'hsr'
[  426.586639][T21694] Cannot create hsr debugfs directory
[  426.647845][ T5858] IPVS: stop unused estimator thread 0...
[  426.925095][T22101] /dev/nullb0: Can't lookup blockdev
[  426.976353][T22104] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  427.185602][T21694] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  427.195546][T21694] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  427.204073][T21694] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  427.216551][T21694] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  427.388295][T21694] 8021q: adding VLAN 0 to HW filter on device bond0
[  427.418125][T21694] 8021q: adding VLAN 0 to HW filter on device team0
[  427.430827][  T581] bridge0: port 1(bridge_slave_0) entered blocking state
[  427.433230][  T581] bridge0: port 1(bridge_slave_0) entered forwarding state
[  427.446221][  T581] bridge0: port 2(bridge_slave_1) entered blocking state
[  427.448593][  T581] bridge0: port 2(bridge_slave_1) entered forwarding state
[  427.472284][ T5853] Bluetooth: hci0: command tx timeout
[  427.619090][T21694] 8021q: adding VLAN 0 to HW filter on device batadv0
[  427.930896][T22155] loop4: detected capacity change from 0 to 32768
[  428.161399][T21694] veth0_vlan: entered promiscuous mode
[  428.176925][T21694] veth1_vlan: entered promiscuous mode
[  428.207809][T21694] veth0_macvtap: entered promiscuous mode
[  428.224568][T21694] veth1_macvtap: entered promiscuous mode
[  428.244585][T21694] batman_adv: batadv0: Interface activated: batadv_slave_0
[  428.255411][T21694] batman_adv: batadv0: Interface activated: batadv_slave_1
[  428.275468][ T5858] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  428.296210][ T5858] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  428.315147][ T5858] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  428.324938][ T5858] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  428.364512][T22177] Bluetooth: (null): Invalid header checksum
[  428.404728][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  428.407179][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  428.438918][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  428.442990][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  428.549558][T22196] overlayfs: failed to clone upperpath
[  428.691864][T22208] loop7: detected capacity change from 0 to 512
[  428.721233][T22208] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  428.724187][T22208] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  428.727200][T22208] System zones: 0-1, 15-15, 18-18, 34-34
[  428.729383][T22208] EXT4-fs (loop7): orphan cleanup on readonly fs
[  428.731367][T22208] Quota error (device loop7): v2_read_header: Failed header read: expected=8 got=0
[  428.739688][T22208] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  428.745956][T22208] EXT4-fs (loop7): Cannot turn on quotas: error -22
[  428.752878][T22208] EXT4-fs (loop7): 1 truncate cleaned up
[  428.755572][T22208] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  428.775563][T22208] fscrypt (loop7, inode 16): Error -61 getting encryption context
[  428.778187][T22208] fscrypt (loop7, inode 16): Error -61 getting encryption context
[  428.810642][T21694] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  428.842513][T22218] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4259'.
[  428.882573][T22223] syz.7.4260 (22223): /proc/22221/oom_adj is deprecated, please use /proc/22221/oom_score_adj instead.
[  428.900887][T22226] netlink: 'syz.9.4261': attribute type 4 has an invalid length.
[  428.908230][T22228] loop4: detected capacity change from 0 to 256
[  428.911468][T22228] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  428.916999][T22228] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  428.924174][T22228] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  428.928960][T22226] netlink: 'syz.9.4261': attribute type 4 has an invalid length.
[  429.552320][ T5853] Bluetooth: hci0: command tx timeout
[  429.577997][T22271] loop4: detected capacity change from 0 to 32768
[  429.581237][T22271] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4281 (22271)
[  429.589732][T22271] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  429.593813][T22271] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  429.596936][T22271] BTRFS info (device loop4): using free-space-tree
[  429.685665][T22273] loop7: detected capacity change from 0 to 32768
[  429.698808][T22273] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.4282 (22273)
[  429.704931][T22273] BTRFS info (device loop7): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  429.708151][T22273] BTRFS info (device loop7): using xxhash64 (xxhash64-generic) checksum algorithm
[  429.710903][T22273] BTRFS info (device loop7): disk space caching is enabled
[  429.716462][T22273] BTRFS warning (device loop7): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  429.727852][T20575] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  429.792497][T22273] BTRFS info (device loop7): rebuilding free space tree
[  429.934183][T22273] BTRFS info (device loop7): disabling free space tree
[  429.936960][T22273] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  429.939896][T22273] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  430.024845][T21694] BTRFS info (device loop7): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  430.085390][T22324] x_tables: ip_tables: udp match: only valid for protocol 17
[  430.191780][T22331] loop4: detected capacity change from 0 to 1024
[  430.525626][T22348] overlayfs: failed to clone upperpath
[  431.642546][ T5853] Bluetooth: hci0: command tx timeout
[  432.181038][T22359] Falling back ldisc for ttyprintk.
[  433.448979][T22373] macsec1: entered promiscuous mode
[  433.598209][T22390] comedi comedi0: pcl816: I/O port conflict (0x2f00,16)
[  433.655594][T22397] netlink: 300 bytes leftover after parsing attributes in process `syz.9.4312'.
[  434.099552][T22415] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4321'.
[  434.797079][T22440] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  434.922414][  T793] usb 8-1: new full-speed USB device number 9 using dummy_hcd
[  435.118262][  T793] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84
[  435.123990][  T793] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 47999, setting to 64
[  435.128150][  T793] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  435.134673][  T793] usb 8-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1
[  435.137704][  T793] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  435.140928][  T793] usb 8-1: Product: syz
[  435.145351][  T793] usb 8-1: Manufacturer: syz
[  435.147255][  T793] usb 8-1: SerialNumber: syz
[  435.151651][  T793] usb 8-1: config 0 descriptor??
[  435.158578][T22429] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  435.163928][  T793] option 8-1:0.0: GSM modem (1-port) converter detected
[  435.372464][  T793] usb 8-1: USB disconnect, device number 9
[  435.378873][  T793] option 8-1:0.0: device disconnected
[  435.656208][T22465] netdevsim netdevsim9 netdevsim0: entered allmulticast mode
[  435.673794][T22465] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  435.956913][T22483] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  436.109125][T22499] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  436.165535][T22501] 8021q: adding VLAN 0 to HW filter on device bond0
[  436.181261][T22501] bond0: (slave rose0): Enslaving as an active interface with an up link
[  436.395922][T22518] overlayfs: failed to clone upperpath
[  437.279692][T22573] IPv6: sit2: Disabled Multicast RS
[  437.369957][T22567] loop7: detected capacity change from 0 to 32768
[  437.375152][T22567] 
[  437.375152][T22567]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  437.375152][T22567] 
[  437.397532][T21694] 
[  437.397532][T21694]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  437.397532][T21694] 
[  437.408516][T21694] 
[  437.408516][T21694]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  437.408516][T21694] 
[  437.752405][   T24] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  437.902194][   T24] usb 8-1: Using ep0 maxpacket: 16
[  437.905797][   T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  437.909653][   T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  437.914058][   T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  437.917569][   T24] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  437.921882][   T24] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  437.927868][   T24] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  437.931231][   T24] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  437.934454][   T24] usb 8-1: Manufacturer: syz
[  437.938153][   T24] usb 8-1: config 0 descriptor??
[  438.170396][T22591] overlayfs: failed to clone upperpath
[  438.192350][   T24] rc_core: IR keymap rc-hauppauge not found
[  438.194530][   T24] Registered IR keymap rc-empty
[  438.196414][   T24] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  438.213818][   T24] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  438.233018][   T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0
[  438.238734][   T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input29
[  438.246234][   T24] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  438.256176][T22599] trusted_key: encrypted_key: insufficient parameters specified
[  438.262700][   T24] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  438.283740][   T24] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  438.302678][   T24] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  438.322239][   T24] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  438.342217][   T24] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  438.362467][   T24] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  438.382279][   T24] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  438.402809][   T24] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  438.422350][   T24] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  438.447872][   T24] mceusb 8-1:0.0: Registered  with mce emulator interface version 1
[  438.450325][   T24] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  438.460446][T22611] vlan0: entered promiscuous mode
[  438.598106][   T10] usb 8-1: USB disconnect, device number 10
[  439.155183][ T5855] Bluetooth: hci3: command 0x1003 tx timeout
[  439.157784][ T5853] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  439.254476][T22638] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4390'.
[  439.257958][T22638] tc_dump_action: action bad kind
[  439.555948][    C0] ==================================================================
[  439.556312][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  439.558943][    C0] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0
[  439.558971][    C0] Read of size 2 at addr ffff88802876042a by task syz.7.4391/22646
[  439.558982][    C0] 
[  439.558991][    C0] CPU: 0 UID: 0 PID: 22646 Comm: syz.7.4391 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  439.559008][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  439.559017][    C0] Call Trace:
[  439.559023][    C0]  <IRQ>
[  439.559029][    C0]  dump_stack_lvl+0x189/0x250
[  439.559046][    C0]  ? rcu_is_watching+0x15/0xb0
[  439.559060][    C0]  ? __kasan_check_byte+0x12/0x40
[  439.559078][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  439.559118][    C0]  ? rcu_is_watching+0x15/0xb0
[  439.559130][    C0]  ? lock_release+0x4b/0x3e0
[  439.559150][    C0]  ? __virt_addr_valid+0x1c8/0x5c0
[  439.559167][    C0]  ? __virt_addr_valid+0x4a5/0x5c0
[  439.559183][    C0]  print_report+0xca/0x240
[  439.559196][    C0]  ? rose_timer_expiry+0x471/0x4b0
[  439.559210][    C0]  kasan_report+0x118/0x150
[  439.559229][    C0]  ? rose_timer_expiry+0x471/0x4b0
[  439.559247][    C0]  rose_timer_expiry+0x471/0x4b0
[  439.559264][    C0]  call_timer_fn+0x17e/0x5f0
[  439.559284][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  439.559300][    C0]  ? call_timer_fn+0xbe/0x5f0
[  439.559317][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  439.559338][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  439.559354][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  439.559370][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  439.559386][    C0]  __run_timer_base+0x61a/0x860
[  439.559403][    C0]  ? ktime_get+0x3e/0x1f0
[  439.559433][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  439.559448][    C0]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  439.559469][    C0]  run_timer_softirq+0xb7/0x180
[  439.559486][    C0]  handle_softirqs+0x286/0x870
[  439.559500][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  439.559515][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  439.559529][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  439.559546][    C0]  __irq_exit_rcu+0xca/0x1f0
[  439.559558][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  439.559574][    C0]  irq_exit_rcu+0x9/0x30
[  439.559585][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  439.559601][    C0]  </IRQ>
[  439.559607][    C0]  <TASK>
[  439.559612][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  439.559626][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110
[  439.559644][    C0] Code: 74 05 e8 8b 76 4b f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> f3 1d 14 f6 65 8b 05 6c 61 24 07 85 c0 74 40 48 c7 04 24 0e 36
[  439.559656][    C0] RSP: 0018:ffffc900026af5e0 EFLAGS: 00000206
[  439.559669][    C0] RAX: fed52a6ccc509c00 RBX: 0000000000000a02 RCX: fed52a6ccc509c00
[  439.559679][    C0] RDX: 0000000000000006 RSI: ffffffff8d9b6de1 RDI: 0000000000000001
[  439.559696][    C0] RBP: ffffc900026af670 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6
[  439.559705][    C0] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: dffffc0000000000
[  439.559715][    C0] R13: ffff888119152940 R14: ffff888119152900 R15: 1ffff920004d5ebc
[  439.559732][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  439.559750][    C0]  ? autoremove_wake_function+0x39/0x100
[  439.559766][    C0]  __wake_up_common_lock+0x190/0x1f0
[  439.559784][    C0]  __unix_dgram_recvmsg+0x486/0xd60
[  439.559803][    C0]  ? __pfx___unix_dgram_recvmsg+0x10/0x10
[  439.559818][    C0]  ? irqentry_exit+0x74/0x90
[  439.559837][    C0]  ? unix_dgram_recvmsg+0xb1/0xd0
[  439.559853][    C0]  ? __pfx_unix_dgram_recvmsg+0x10/0x10
[  439.559869][    C0]  sock_recvmsg_nosec+0x186/0x1c0
[  439.559888][    C0]  ____sys_recvmsg+0x3aa/0x460
[  439.559904][    C0]  ? __pfx_____sys_recvmsg+0x10/0x10
[  439.559922][    C0]  ? import_iovec+0x74/0xa0
[  439.559938][    C0]  ___sys_recvmsg+0x1b5/0x510
[  439.559952][    C0]  ? __pfx____sys_recvmsg+0x10/0x10
[  439.559975][    C0]  ? __might_fault+0xb0/0x130
[  439.559993][    C0]  do_recvmmsg+0x307/0x770
[  439.560009][    C0]  ? __pfx_do_recvmmsg+0x10/0x10
[  439.560026][    C0]  ? __pfx_do_futex+0x10/0x10
[  439.560048][    C0]  __x64_sys_recvmmsg+0x190/0x240
[  439.560062][    C0]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  439.560075][    C0]  ? rcu_is_watching+0x15/0xb0
[  439.560114][    C0]  ? do_syscall_64+0xbe/0x3b0
[  439.560133][    C0]  do_syscall_64+0xfa/0x3b0
[  439.560149][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  439.560165][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  439.560179][    C0]  ? exc_page_fault+0x9f/0xf0
[  439.560195][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  439.560208][    C0] RIP: 0033:0x7f894478ebe9
[  439.560220][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  439.560232][    C0] RSP: 002b:00007f8945629038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  439.560245][    C0] RAX: ffffffffffffffda RBX: 00007f89449b6090 RCX: 00007f894478ebe9
[  439.560254][    C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004
[  439.560263][    C0] RBP: 00007f8944811e19 R08: 0000000000000000 R09: 0000000000000000
[  439.560272][    C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[  439.560280][    C0] R13: 00007f89449b6128 R14: 00007f89449b6090 R15: 00007ffc61374fa8
[  439.560295][    C0]  </TASK>
[  439.560300][    C0] 
[  439.750732][    C0] Allocated by task 12833:
[  439.752373][    C0]  kasan_save_track+0x3e/0x80
[  439.754113][    C0]  __kasan_kmalloc+0x93/0xb0
[  439.755840][    C0]  __kmalloc_cache_noprof+0x230/0x3d0
[  439.757862][    C0]  rose_add_node+0x23a/0xde0
[  439.759594][    C0]  rose_rt_ioctl+0xa48/0xfb0
[  439.761259][    C0]  rose_ioctl+0x3ce/0x8b0
[  439.762872][    C0]  sock_do_ioctl+0xdc/0x300
[  439.764558][    C0]  sock_ioctl+0x576/0x790
[  439.766156][    C0]  __se_sys_ioctl+0xfc/0x170
[  439.767818][    C0]  do_syscall_64+0xfa/0x3b0
[  439.769456][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  439.771652][    C0] 
[  439.772566][    C0] Freed by task 22501:
[  439.774116][    C0]  kasan_save_track+0x3e/0x80
[  439.775833][    C0]  kasan_save_free_info+0x46/0x50
[  439.777754][    C0]  __kasan_slab_free+0x5b/0x80
[  439.779510][    C0]  kfree+0x18e/0x440
[  439.780981][    C0]  rose_rt_device_down+0x473/0x4c0
[  439.782812][    C0]  rose_device_event+0x603/0x6a0
[  439.784635][    C0]  notifier_call_chain+0x1b6/0x3e0
[  439.786607][    C0]  netif_close_many+0x29c/0x410
[  439.788453][    C0]  netif_close+0x158/0x210
[  439.790162][    C0]  dev_close+0x10a/0x220
[  439.791766][    C0]  bpq_device_event+0x2f4/0x600
[  439.793609][    C0]  notifier_call_chain+0x1b6/0x3e0
[  439.795476][    C0]  netif_close_many+0x29c/0x410
[  439.797273][    C0]  netif_close+0x158/0x210
[  439.798964][    C0]  dev_close+0x10a/0x220
[  439.800576][    C0]  bond_setup_by_slave+0x5f/0x3f0
[  439.802454][    C0]  bond_enslave+0x7a0/0x3a20
[  439.804187][    C0]  bond_do_ioctl+0x635/0x9b0
[  439.805909][    C0]  dev_ifsioc+0x90b/0xf00
[  439.807483][    C0]  dev_ioctl+0x7b4/0x1150
[  439.809043][    C0]  sock_do_ioctl+0x22c/0x300
[  439.810763][    C0]  sock_ioctl+0x576/0x790
[  439.812359][    C0]  __se_sys_ioctl+0xfc/0x170
[  439.814090][    C0]  do_syscall_64+0xfa/0x3b0
[  439.815761][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  439.817906][    C0] 
[  439.818787][    C0] The buggy address belongs to the object at ffff888028760400
[  439.818787][    C0]  which belongs to the cache kmalloc-512 of size 512
[  439.823759][    C0] The buggy address is located 42 bytes inside of
[  439.823759][    C0]  freed 512-byte region [ffff888028760400, ffff888028760600)
[  439.828710][    C0] 
[  439.829611][    C0] The buggy address belongs to the physical page:
[  439.831947][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28760
[  439.835157][    C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  439.838213][    C0] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  439.841104][    C0] page_type: f5(slab)
[  439.842590][    C0] raw: 00fff00000000040 ffff88801a441c80 0000000000000000 dead000000000001
[  439.845734][    C0] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  439.848821][    C0] head: 00fff00000000040 ffff88801a441c80 0000000000000000 dead000000000001
[  439.852016][    C0] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  439.855186][    C0] head: 00fff00000000002 ffffea0000a1d801 00000000ffffffff 00000000ffffffff
[  439.858349][    C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  439.861533][    C0] page dumped because: kasan: bad access detected
[  439.864115][    C0] page_owner tracks the page as allocated
[  439.866203][    C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5308, tgid 5308 (udevd), ts 29809401824, free_ts 24493727170
[  439.873479][    C0]  post_alloc_hook+0x240/0x2a0
[  439.875221][    C0]  get_page_from_freelist+0x21e4/0x22c0
[  439.877224][    C0]  __alloc_frozen_pages_noprof+0x181/0x370
[  439.879333][    C0]  alloc_pages_mpol+0x232/0x4a0
[  439.881146][    C0]  allocate_slab+0x8a/0x370
[  439.882798][    C0]  ___slab_alloc+0xbeb/0x1410
[  439.884567][    C0]  __kmalloc_cache_noprof+0x296/0x3d0
[  439.886541][    C0]  kernfs_fop_open+0x397/0xca0
[  439.888306][    C0]  do_dentry_open+0x953/0x13f0
[  439.890043][    C0]  vfs_open+0x3b/0x340
[  439.891562][    C0]  path_openat+0x2ee5/0x3830
[  439.893260][    C0]  do_filp_open+0x1fa/0x410
[  439.894920][    C0]  do_sys_openat2+0x121/0x1c0
[  439.896693][    C0]  __x64_sys_openat+0x138/0x170
[  439.898487][    C0]  do_syscall_64+0xfa/0x3b0
[  439.900169][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  439.902338][    C0] page last free pid 5351 tgid 5351 stack trace:
[  439.904704][    C0]  __free_frozen_pages+0xbc4/0xd30
[  439.906642][    C0]  __slab_free+0x303/0x3c0
[  439.908270][    C0]  qlist_free_all+0x97/0x140
[  439.909947][    C0]  kasan_quarantine_reduce+0x148/0x160
[  439.911920][    C0]  __kasan_slab_alloc+0x22/0x80
[  439.913741][    C0]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  439.915735][    C0]  vm_area_alloc+0x24/0x140
[  439.917423][    C0]  mmap_region+0xdc7/0x20c0
[  439.919079][    C0]  do_mmap+0xc45/0x10d0
[  439.920598][    C0]  vm_mmap_pgoff+0x2a6/0x4d0
[  439.922362][    C0]  elf_load+0x248/0x6c0
[  439.923865][    C0]  load_elf_interp+0x4ce/0xb60
[  439.925553][    C0]  load_elf_binary+0x1a01/0x2740
[  439.927032][    C0]  bprm_execve+0x99c/0x1450
[  439.928423][    C0]  do_execveat_common+0x510/0x6a0
[  439.929933][    C0]  __x64_sys_execve+0x94/0xb0
[  439.931359][    C0] 
[  439.932113][    C0] Memory state around the buggy address:
[  439.933789][    C0]  ffff888028760300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  439.936117][    C0]  ffff888028760380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  439.938475][    C0] >ffff888028760400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  439.940850][    C0]                                   ^
[  439.942451][    C0]  ffff888028760480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  439.944795][    C0]  ffff888028760500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  439.947161][    C0] ==================================================================
[  439.949715][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  439.952405][    C0] CPU: 0 UID: 0 PID: 22646 Comm: syz.7.4391 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  439.956240][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  439.959151][    C0] Call Trace:
[  439.960153][    C0]  <IRQ>
[  439.961034][    C0]  dump_stack_lvl+0x99/0x250
[  439.962425][    C0]  ? __asan_memcpy+0x40/0x70
[  439.963784][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  439.965364][    C0]  ? __pfx__printk+0x10/0x10
[  439.966797][    C0]  vpanic+0x281/0x750
[  439.968065][    C0]  ? __pfx_vpanic+0x10/0x10
[  439.969482][    C0]  ? irqentry_exit+0x74/0x90
[  439.970859][    C0]  panic+0xb9/0xc0
[  439.971963][    C0]  ? __pfx_panic+0x10/0x10
[  439.973320][    C0]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  439.975164][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  439.976983][    C0]  ? rose_timer_expiry+0x471/0x4b0
[  439.978544][    C0]  check_panic_on_warn+0x89/0xb0
[  439.980006][    C0]  ? rose_timer_expiry+0x471/0x4b0
[  439.981548][    C0]  end_report+0x78/0x160
[  439.983181][    C0]  kasan_report+0x129/0x150
[  439.984950][    C0]  ? rose_timer_expiry+0x471/0x4b0
[  439.986787][    C0]  rose_timer_expiry+0x471/0x4b0
[  439.988469][    C0]  call_timer_fn+0x17e/0x5f0
[  439.990143][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  439.991997][    C0]  ? call_timer_fn+0xbe/0x5f0
[  439.993599][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  439.995316][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  439.997100][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  439.998746][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  440.000353][    C0]  __run_timer_base+0x61a/0x860
[  440.002094][    C0]  ? ktime_get+0x3e/0x1f0
[  440.003737][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  440.005748][    C0]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  440.008173][    C0]  run_timer_softirq+0xb7/0x180
[  440.009883][    C0]  handle_softirqs+0x286/0x870
[  440.011392][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  440.012887][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  440.014742][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  440.016403][    C0]  __irq_exit_rcu+0xca/0x1f0
[  440.018068][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  440.019791][    C0]  irq_exit_rcu+0x9/0x30
[  440.021172][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  440.023466][    C0]  </IRQ>
[  440.024396][    C0]  <TASK>
[  440.025524][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  440.027604][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110
[  440.029775][    C0] Code: 74 05 e8 8b 76 4b f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> f3 1d 14 f6 65 8b 05 6c 61 24 07 85 c0 74 40 48 c7 04 24 0e 36
[  440.035571][    C0] RSP: 0018:ffffc900026af5e0 EFLAGS: 00000206
[  440.037475][    C0] RAX: fed52a6ccc509c00 RBX: 0000000000000a02 RCX: fed52a6ccc509c00
[  440.039866][    C0] RDX: 0000000000000006 RSI: ffffffff8d9b6de1 RDI: 0000000000000001
[  440.042211][    C0] RBP: ffffc900026af670 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6
[  440.044550][    C0] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: dffffc0000000000
[  440.046880][    C0] R13: ffff888119152940 R14: ffff888119152900 R15: 1ffff920004d5ebc
[  440.049281][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  440.051212][    C0]  ? autoremove_wake_function+0x39/0x100
[  440.052913][    C0]  __wake_up_common_lock+0x190/0x1f0
[  440.054551][    C0]  __unix_dgram_recvmsg+0x486/0xd60
[  440.056124][    C0]  ? __pfx___unix_dgram_recvmsg+0x10/0x10
[  440.057857][    C0]  ? irqentry_exit+0x74/0x90
[  440.059295][    C0]  ? unix_dgram_recvmsg+0xb1/0xd0
[  440.060797][    C0]  ? __pfx_unix_dgram_recvmsg+0x10/0x10
[  440.062465][    C0]  sock_recvmsg_nosec+0x186/0x1c0
[  440.063951][    C0]  ____sys_recvmsg+0x3aa/0x460
[  440.065394][    C0]  ? __pfx_____sys_recvmsg+0x10/0x10
[  440.066940][    C0]  ? import_iovec+0x74/0xa0
[  440.068288][    C0]  ___sys_recvmsg+0x1b5/0x510
[  440.069704][    C0]  ? __pfx____sys_recvmsg+0x10/0x10
[  440.071302][    C0]  ? __might_fault+0xb0/0x130
[  440.072752][    C0]  do_recvmmsg+0x307/0x770
[  440.074140][    C0]  ? __pfx_do_recvmmsg+0x10/0x10
[  440.075665][    C0]  ? __pfx_do_futex+0x10/0x10
[  440.077143][    C0]  __x64_sys_recvmmsg+0x190/0x240
[  440.078690][    C0]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  440.080399][    C0]  ? rcu_is_watching+0x15/0xb0
[  440.081857][    C0]  ? do_syscall_64+0xbe/0x3b0
[  440.083328][    C0]  do_syscall_64+0xfa/0x3b0
[  440.084710][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  440.086305][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  440.088178][    C0]  ? exc_page_fault+0x9f/0xf0
[  440.089642][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  440.091476][    C0] RIP: 0033:0x7f894478ebe9
[  440.092861][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  440.098744][    C0] RSP: 002b:00007f8945629038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  440.101310][    C0] RAX: ffffffffffffffda RBX: 00007f89449b6090 RCX: 00007f894478ebe9
[  440.103750][    C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004
[  440.106127][    C0] RBP: 00007f8944811e19 R08: 0000000000000000 R09: 0000000000000000
[  440.108553][    C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[  440.111344][    C0] R13: 00007f89449b6128 R14: 00007f89449b6090 R15: 00007ffc61374fa8
[  440.114305][    C0]  </TASK>
[  440.115975][    C0] Kernel Offset: disabled
[  440.117316][    C0] Rebooting in 86400 seconds..

VM DIAGNOSIS:
03:09:11  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000000d RBX=000000000000000d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000007470
R8 =ffff88801fbb0237 R9 =1ffff11003f76046 R10=dffffc0000000000 R11=ffffffff854f0370
R12=dffffc0000000000 R13=ffffffff99af9917 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854f03ec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f89456296c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007feb2e2e56c0 CR3=0000000121756000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f743f812e53
XMM06=0000000000000000 00007f743f812e4d XMM07=0000000000000000 00007f743f812e61
XMM08=0000000000000000 00007f743f812ee7 XMM09=0000000000000000 00007f743f812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff8e139ee0 RBP=ffffffff8172c195 RSP=ffffc900025ef258
R8 =0000000000000000 R9 =0000000000000000 R10=ffffc900025ef418 R11=ffffffff81ac3870
R12=0000000000000002 R13=ffffffff8e139ee0 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff819d5b18 RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007feb3d9c4380 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007feb2d7b7dac CR3=00000000289e8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000ff0000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
