last executing test programs:

4m13.302775107s ago: executing program 2 (id=283):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000080)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x7, 0x8, 0x0, 0x2, 0x0, 0x0, 0x25dfdbfe}, 0x10}}, 0x0)

4m12.466788909s ago: executing program 2 (id=292):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="010000000100"})

4m12.302709377s ago: executing program 2 (id=296):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r1=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x1a, r1, 0x1, 0xf, 0x6, @multicast}, 0x14)
sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r1}, 0x14)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x691, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0)

4m12.043901614s ago: executing program 2 (id=300):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x523, &(0x7f00000018c0)="$eJzs3cFvG1kZAPBvnLhJs+mmC3sABGxZFgqq6iTubrTqhfYCQlUlRMWJQxsSN4pi11Hsiib0kB65V6ISJ+A/4MYBqScO3LjBjUs5IBWoQA0SB6MZT1I3sZNAnbiJfz9pMvPeTP29F/e953mR5wUwtC5ExGZEnImIOxExlecn+RbX2lt63csXDxe2XjxcSKLVuvX3JDuf5kXHv0m9k7/meER8/zsRP0r2xm2sb6zMV6uVtTw93aytTjfWNy4vF/Kc8tzs3MynVz4p962uH9R+/fzbyzd+8NvffOnZHza/+ZO0WJM/PZed66xHP7WrXozJjrzRiLhxFMEGZDT//8PJk7a2z0TEh1n7n4qR7N0EAE6zVmsqWlOdaQDgtEvv/ycjKZTyuYDJKBRKpfYc3vsxUajWG81LU/X79xYjm8M6H8XC3eVqZSafKzwfxSRNz2bHr9Ll19KPK1ci4r2IeDx2NjtfWqhXFwf5wQcAhtg7u8b/f421x/9OxUEVDgA4OuODLgAAcOyM/wAwfIz/ADB8/ofx37cDAeCUcP8PAMPH+A8Aw+fA8f/R8ZQDADgW37t5M91aW+3nX28/qfvyYqWxUqrdXygt1NdWS0v1+lK1UlpotQ56vWq9vjr78U6ysb5xu1a/f695e7k2v1S5XfEsAQAYvPc+ePqndNDfvHo226JjLQdjNZxuhUEXABiYkUEXABgY3+eB4XWIe3zTAHDKdVmity2fIEh6XfDE4q9wUl38vPl/GFZvMv9v7gBOtv9v/v9bfS8HcPyM4TC8Wq3Emv8AMGTM8QM9//6f6/mIkCf9LwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcFJPZlhRK2Vrgm+nPQqkUcS4izkcxubtcrcxExLsR8cex4lianh10oQGAN1T4a5Kv/3Vx6qPJ3WfPJP8ey/YR8eOf3/rZg/lmc202zf/HTn7zSZp/trlWPjOICgAAna7tzcrG73K+77iRf/ni4cL2dpxFfH69vbhoGncr39pnRmM0249HMSIm/pnk6bb088pIH+JvPoqIz23XfzwedESYzOZA2iuf7o6fxj7X9/idv//d8Quv1beQnUv3xex38dnYVTjgQE+vt/vJvO2lTTxvf4W4kO27t//xrId6c2n/lzbXrT39X2Gn/xvZEz/J2vyFnfT+JXn+8e++uyezNdU+9yjiC6Pd4ic78ZPu/W/xo0PW8c9f/PKHvc61fhFxsWv9t1ekrmXd7HSztjrdWN+4vFybX6osVe6Vy3OzczOfXvmkPJ3NUbd//r5bjL9dvfRur/hp/Sd6xB/fv/7xtUPW/5f/ufPDr+wT/xtf7f7+v79P/HRM/Poh489PXOu5fHcaf7FH/Q94/+PSIeM/+8vG4iEvBQCOQWN9Y2W+Wq2sHXCQftY86BoHhz9I7+3fgmJkB7EZ0a8XzCYlIqLrNekn6rejykd1kAws+q/6/YKD7pmAo/aq0Q+6JAAAAAAAAAAAAAAAQC+N9Y2Vse7f1urbwaDrCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOn13wAAAP//KHnENg==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1\x00', 0x48241, 0x141)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc3}})
linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000)

4m11.975786339s ago: executing program 2 (id=301):
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x10000)
r1 = dup2(r0, r0)
read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020)

4m11.684383829s ago: executing program 2 (id=302):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000540), 0x42a00)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000580)={{0x3, 0x0, 0xf6e, 0x1, 0x587a}, 0x4, 0xc, 0x400001})

4m11.516707443s ago: executing program 32 (id=302):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000540), 0x42a00)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000580)={{0x3, 0x0, 0xf6e, 0x1, 0x587a}, 0x4, 0xc, 0x400001})

3m48.921359757s ago: executing program 3 (id=581):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000480)={0x6, @win={{0x9, 0x8001, 0xb, 0x4}, 0x0, 0x101, 0x0, 0x6, 0x0, 0x8}})

3m48.864088032s ago: executing program 3 (id=582):
rt_sigprocmask(0x0, 0x0, 0x0, 0x0)

3m48.803710056s ago: executing program 3 (id=584):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
ppoll(&(0x7f0000000040)=[{r1, 0x1000}], 0x1, 0x0, 0x0, 0x0)
close(r0)

3m47.981637068s ago: executing program 3 (id=591):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@var={0x3, 0x0, 0x0, 0x11, 0x3}, @typedef={0x0, 0x0, 0x0, 0x4}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x51}, 0x20)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xe1, '\x00', 0x0, r0, 0x1, 0x5}, 0x48)

3m47.911982934s ago: executing program 3 (id=593):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b3c094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1008452, &(0x7f0000000000), 0x7, 0x4d2, &(0x7f0000000740)="$eJzs3EFsFFUYAOB/ti0tUKQiolTUIhobjS0UFA4mBqKJB02MeNBj0xaCFGpoTYQQWRKDR0Pi3Xj06sGrejOeTLzi0cSQEENiAE9jZne23W6n27LdstJ+X7LsezNv5s2bN2/2zXtMA9i0hrJ/koj+iLgRETsjotSYYKj6dff25Yl7ty9PRDlNT/6dZJvFnSyeS/Lv7XlkuBRR+iJZWFFn9uKls+PT01MX8vjo3LlPRmcvXnrlzLnx01Onp86PHTt25PCho6+NvXr/hSrILyvXncHPZ/btffuj6+9OdNeW9+Xf9eVol6EYKjqUihfanVmH7agLJ93NUr6x/gfDqmXXf1ZdPZX2vzO6omnlARtImqZp7/Kry2mjq0uWAA+tJDp9BEBn1H7os+ff2qeoI7BlfbofHXfrePUBKCv33fwT8WxlYW0cpKfh+badhiLiw/K/32SfWKdxCACAej8dr/UEG/p/AxF76tI9ks+hDETEoxGxKyIei4jdEfF4VNM+ERFPNuy/KyLSJvkPNcSX9n9KN9dWwuay/t/r+dzWQv8v6mfBBrry2I6IWod56mB+Toajp/fUmempQ03y+PnN379abl19/y/7ZPnX+oL5cdzsbhigmxyfG2+5wA1uXY0Y7G4sf9IdkczPBCQRsTciBhdteeKfZvsdqAufeem7ffORnsXpVi5/RVo4j9aGqYr024gXq/VfjkX1v5Bj0nx+crQvpqcOjmZXwcHCPH797dp7y+W/Yvl/+LNxk7eO/ngyb1lrl9X/trrrP2rztwvlH0gikvn52tkVdlhauujaH18u+0zT6vW/JfmgEq49l342Pjd34VDEluSdpcvHFratxbPvKFfLP3yguP3vyrfJzsRTEZFdxE9HxDNRfUIcivTK/oh4LiIONDklv5x4/uNVl78viq7/dZOVf7Lw/reo/hfm65cLJOVq6oJVXWf337g3WJz/6ur/SCU0nC8pvv8li24RTY50UWCt5w8AAAAeBqWI6K8bS+qPUmlkpDoGtDu2laZnZudePjXz6fnJ6jsCA9FTqo10VceDe5La+OdAXXysIX44Hzf+umtrJT4yMTM92dGSA9srbT4pjczfC6rtP/NXe4aYgf8zr/zA5rVS+99z/QEdCPDA+f2Hzauu/ZeXSVL2P2VgY1rN77+xQNiYitr/lRa2AR4uqbYMm9r9tH/3CthYuuP9+XDB+5vABuY3HTalVb0k33Ig7S1e1RdLE0df8x12RWuHsbUgr44Esp5VR3Lf2spWtb+msGyaKN3fDnujPXV6au2n5fSetl/8aT4/1u4a/L61dhqx5tyb3zfG+tfvngQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANBO/wUAAP//IGPbXQ==")

3m47.830084837s ago: executing program 3 (id=595):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xd, &(0x7f00000003c0)=@framed={{0x18, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000380)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3m32.693137633s ago: executing program 33 (id=595):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xd, &(0x7f00000003c0)=@framed={{0x18, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000380)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3m27.174132238s ago: executing program 4 (id=744):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0)

3m27.084399025s ago: executing program 4 (id=745):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f000000040b0000000095f5758483da4d6b72210ab83e0191e550e550e97a1b46ab6aa01eee0b8139af5c4508148cbe58dfca95933dacaacb36929383bbd457e9cbc5b683175e61d8520d65a27101be38eadfc715bf3077ee1fd530324917750fdb03b3f20d358eb391f2"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001840)={0x84, &(0x7f0000000380)={0x0, 0x23a0007941e88169, 0x1, "fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3m25.174604691s ago: executing program 4 (id=776):
socket$kcm(0x2, 0xa, 0x2)
socket$kcm(0x2, 0xa, 0x2)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00')
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000140)=""/197, 0xc5}], 0x1, 0x36, 0x0)

3m25.174472595s ago: executing program 4 (id=777):
syz_mount_image$minix(&(0x7f0000000140), &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00e611ed6229b237ad2a184a94283e2b34c24caf7280c18475708140abe763dfb52cdb0ba0cdc8c572346d0a832984b36248c4fa844eda0af4b1652605421a7821dcfde12aa77458d811a84538a156b05b0ec3eaf24a8b49d41fbfa868653605702abe43d9c2c30aed4da0b8cc18c6b3f745176865442c1217f19a67a534064b7236a66600000000005e8d33d35615188d77fb93669ff6f9e9de7655d53422b29b3ae796fdefbc648f3c39979c02ca6082ca2de5"], 0x1, 0x190, &(0x7f0000000e40)="$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")
chdir(&(0x7f0000000240)='./file0\x00')
creat(&(0x7f0000000000)='./bus\x00', 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]})
mkdir(&(0x7f0000000180)='./file0\x00', 0x12a)

3m24.994549566s ago: executing program 4 (id=778):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x9d2, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x15, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)

3m24.584225209s ago: executing program 4 (id=786):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000001140)={[{@errors_continue}, {@data_err_abort}, {@init_itable}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b0}}, {@noblock_validity}, {@grpquota}, {@nobh}, {@user_xattr}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4}}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f00000004c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a)
fallocate(r0, 0x20, 0x5, 0x1)

3m24.423654134s ago: executing program 34 (id=786):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000001140)={[{@errors_continue}, {@data_err_abort}, {@init_itable}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b0}}, {@noblock_validity}, {@grpquota}, {@nobh}, {@user_xattr}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4}}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f00000004c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a)
fallocate(r0, 0x20, 0x5, 0x1)

2m26.780850133s ago: executing program 0 (id=1484):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000089120e000000000095"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fffffc}, 0x94)

2m26.708885966s ago: executing program 0 (id=1485):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4000, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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")
r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148)
pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
fallocate(r0, 0x0, 0xbf5, 0x2000402)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x0, 0xfffffffffdffffff})

2m26.452485478s ago: executing program 0 (id=1487):
syz_usb_connect(0x2, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a400090582"], 0x0)

2m25.21906415s ago: executing program 0 (id=1501):
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x818808, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1018000, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c})
chdir(&(0x7f00000001c0)='./file0\x00')
chdir(&(0x7f00000003c0)='./bus\x00')
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x1)
syz_mount_image$minix(&(0x7f0000000100), &(0x7f0000000a40)='./file1\x00', 0x2004010, &(0x7f0000001180)=ANY=[], 0x9, 0x1f2, &(0x7f00000004c0)="$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")
getdents64(r0, &(0x7f0000000180)=""/92, 0x5c)

2m25.215933588s ago: executing program 0 (id=1502):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0xc000, &(0x7f0000000280)=ANY=[], 0x0, 0x5ce, &(0x7f00000006c0)="$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")
setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB='osx.:'], 0x0, 0x0, 0x0)
listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

2m24.921553227s ago: executing program 0 (id=1506):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001440)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="81020000e300090890", 0x9}], 0x1}, 0x48005)
readv(r0, &(0x7f0000000840)=[{&(0x7f0000003480)=""/4096, 0x1000}], 0x1)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)

2m24.801892087s ago: executing program 35 (id=1506):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001440)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="81020000e300090890", 0x9}], 0x1}, 0x48005)
readv(r0, &(0x7f0000000840)=[{&(0x7f0000003480)=""/4096, 0x1000}], 0x1)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)

2m5.911205842s ago: executing program 5 (id=1742):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48000000020601000600000600000000000000000e0003006269746d61703a6970000000050004"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6, 0xd}, {0x4, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40004)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84)

2m5.841666913s ago: executing program 5 (id=1745):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r3=>0x0})
r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3, 0x25, 0x0, @void}, 0x10)
close_range(r0, r4, 0x0)

2m5.761544746s ago: executing program 5 (id=1748):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0)
fadvise64(r0, 0x400, 0x4, 0x1)
preadv2(r0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/243, 0xf3}], 0x1, 0x9, 0x0, 0xc)

2m5.691738421s ago: executing program 5 (id=1750):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfe, 0x47c, &(0x7f0000000a80)="$eJzs3M1vFOUfAPDvTLulwI9fK+ILCFJFI/GlpeVFDl40mnDQxEQPGE+1LaRSqKE1EUK0esCjIfFu/C+MJ70Y9aKJV70bEmK4gHpZMzsztLS77ZZud4H9fJLZfZ6Z2X2e78w8O8/Ms7sBdK2h7CGJ+F9E/B4RA3n29hWG8qeb1y9N/H390kQS1epbfyW19W5cvzRRrlq+bnueqVaL/JY65V5+N2J8ZmbqfJEfmT/7wcjchYsvTJ8dPz11eurc2PHjRw7v6zs2drQlcWZx3djz8eze3SfeufLGxMkr7/2UpJHHHcviaJWhfOvW9XSrC+uwHUvSSW/22F/k9v+yuKTekUAn9UREtrsqtfY/ED2x9daygXjts45WDthU1Wq1usqn8kIVuI8l0ekaAJ1Rnuiz699yalPX465w7eX8AiiL+2Yx5Ut6I80T+yvLrm9baSgiTi7881U2xSbdhwAAWOq7rP/zfL3+XxoP54m+7OH/xRjKYEQ8EBE7I+LBiNgVEQ9F1NZ9JCIeXWf5y0dIVvZ/0qt3HFwTsv7fS8XY1u39v7RcZbCnyO2oxV9JTk3PTB0qtsnBqGw5NZ1Mja5Sxvev/vZFo2VL+3/ZlJVf9gWLelztXXaDbnJ8fnwjMS917dOIPb314k9q4wJRjOvtjog9d1jG9LO9DZetHf8qGr9t06pfRzyT7/+FWBZ/KWk4Pjn64rGxoyP9MTN1aKQ8Klb6+dfLbzYqf0Pxt0C2/7fVPf5vxT+Y9EfMXbh4pjZeO7f+Mi7/8XnDa5p1Hv8ndhTHf1/ydm1GX7Hgo/H5+fOjEX3J6yvnjy2+W5kv18/iP3igfvvfGYtb4rGI2BsR+yLi8eyisKj7ExHxZEQcWCX+H1956v31x9+esdIs/sm19n8s3f/rT/Sc+eHbtePvj4hG+/9ILXWwmNPM51+zFdzItgMAAIB7Rf4d+CQdXkwnw8P5d/h3xbZ0ZnZu/rlTsx+em8y/Kz8YlbS80zWw5H7oaHFvuMyPLcsfLu4bf9mztZYfnpidmex08NDltq9o/2matf/Mnz2drh2w6Vowjgbco7R/6F7aP3SnZM32X2lbXYD2c/6H7lWv/X/ScO3hbza1MkBbOf9D92qi/S/kT417BcC9yfkfupf2D12p4W/j0w395L/tiX+L/zO8W+pz/ycivSuqcf8nepv+M4tGicrKtlwdyNt/NmdL3Vd1+pMJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgNf4LAAD///R05PQ=")
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0)
mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x958028, &(0x7f00000001c0)={[{@gid}, {}]})
r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020)

2m5.54210266s ago: executing program 5 (id=1758):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, <r2=>r0})
ioctl$DMA_BUF_SET_NAME_A(r2, 0x40046201, &(0x7f00000001c0)='-{-#}$\x00')
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/4\x00')
read$FUSE(r3, &(0x7f0000006140)={0x2020}, 0xffffffbf)

2m5.293155888s ago: executing program 5 (id=1767):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000001180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@enum64={0x5, 0x1, 0x0, 0x13, 0x0, 0x4, [{0x6, 0x1, 0x2}]}]}, {0x0, [0x61, 0x61, 0x91efcb65a76fd2eb, 0x0, 0x5f, 0x2e, 0x61]}}, 0x0, 0x39, 0x0, 0x1, 0xfe6e}, 0x28)

2m5.17783986s ago: executing program 36 (id=1767):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000001180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@enum64={0x5, 0x1, 0x0, 0x13, 0x0, 0x4, [{0x6, 0x1, 0x2}]}]}, {0x0, [0x61, 0x61, 0x91efcb65a76fd2eb, 0x0, 0x5f, 0x2e, 0x61]}}, 0x0, 0x39, 0x0, 0x1, 0xfe6e}, 0x28)

1m52.882714313s ago: executing program 7 (id=1896):
r0 = socket(0x40000000015, 0x805, 0x0)
getsockopt(r0, 0x114, 0x271d, 0x0, &(0x7f00000000c0))

1m52.804440853s ago: executing program 7 (id=1897):
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x8341, 0x0)
write$nbd(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01"], 0x40)

1m52.804287801s ago: executing program 7 (id=1898):
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1}, 0x50)
landlock_create_ruleset(&(0x7f0000000040)={0x1f32}, 0x48, 0x0)

1m52.744538891s ago: executing program 7 (id=1899):
capset(0x0, &(0x7f0000000100)={0xffff8001, 0x6, 0x2, 0x2087, 0xffffffff, 0xef})
unshare(0x28000600)
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x10000, &(0x7f00000002c0), 0x2, 0xbd1, &(0x7f0000001340)="$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")
syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000004080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c000, &(0x7f00000004c0)=ANY=[], 0x2, 0x222, &(0x7f0000000800)="$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")
mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000000)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
chroot(&(0x7f0000000200)='./file0/file0\x00')
pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00')

1m52.644573168s ago: executing program 7 (id=1900):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x419, 0x600, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x80, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

1m52.49369034s ago: executing program 7 (id=1901):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd0903280005001400000060000000402811"], 0xfdef)

1m52.391969983s ago: executing program 37 (id=1901):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd0903280005001400000060000000402811"], 0xfdef)

1m37.973078465s ago: executing program 6 (id=2056):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x815, 0x81, 0xffffffff})
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x40000000)

1m37.886023593s ago: executing program 6 (id=2057):
rt_sigaction(0x0, 0x0, 0x0, 0x8, &(0x7f0000000600))

1m37.80602009s ago: executing program 6 (id=2058):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1073eeda8705da74bc83496ee251e51e6d155c558a4f6dbf7076341df55b7aecaad952f364f05d5e0f", 0x29}, {&(0x7f0000000580)="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", 0x121}], 0x2}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000180)="2001987c5ccf58f5f75061ee", 0xc}, {&(0x7f00000003c0)="8b120728c90b0b4a530fab46abf402095b65870c2a0ac8f0847a8e8ab1d98f34cdd3a1c838f816c52ca57b8a7efbcea529afab803882b9f88c28cab3df58895ebffef931a275cc35f9fefa5bd7a1f580106f3c7defd09032cf42417504eefea81cfa7bfea5032e42cc0858cee1b8e74e133934cc54cd707c5c85d4e5008025c28b72b46d12248babbe0d3f7916a5610416ee255a331398dea59a1a406070cc13e81701447ded270b0c1bce36d2bf06db98dd9c1ed65668eb5c2f4cab0ee3", 0xbe}, {&(0x7f0000000940)="0154cb3eb8695dcc7f253cb0f84f99ca40dada3fa997c3cdeaf5fba62ba9dca2592b2e1f1a3b323346857c2dc8a7feb60cabba8b2bae17b6adbf986484866d0995da61fdd7468d7a890840c77e27f020ceeaac9105570794647e71a0180a96c66f23d8bb7da1bb5d4862d206", 0x6c}], 0x3}}], 0x2, 0x8810)
recvmsg$unix(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060)

1m37.725009269s ago: executing program 6 (id=2059):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r0, 0x0)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000100)=0x81, 0x4)

1m37.626338828s ago: executing program 6 (id=2060):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9)
unlink(&(0x7f0000000180)='./file1\x00')

1m36.832332937s ago: executing program 1 (id=2069):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r1, @ANYBLOB="0c007d800400020004000210"], 0x28}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000)

1m36.750892658s ago: executing program 1 (id=2070):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xe, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)

1m36.694266788s ago: executing program 1 (id=2071):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
close(r0)
execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000002200), 0x0)

1m36.479152028s ago: executing program 1 (id=2074):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, 0x0)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r3}, 0x18)
r4 = socket$kcm(0x29, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r6 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r6, r5})
sendmsg$kcm(r4, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0)
close(r4)
timer_settime(0x0, 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040080}, 0x4)

1m36.141004155s ago: executing program 6 (id=2076):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6d1cb49ada2c127b, 0x59032, 0xffffffffffffffff, 0x0)
set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)

1m36.016668956s ago: executing program 8 (id=2078):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x60, 0x30, 0x53b, 0x4, 0x400000, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0xfffffffffffffefc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x4, 0x0, 0x20000007}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x4, {0x3}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x0)

1m36.016428738s ago: executing program 8 (id=2079):
r0 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)

1m35.95679852s ago: executing program 8 (id=2080):
fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)

1m35.956595249s ago: executing program 8 (id=2081):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r0, 0x0)
r1 = syz_io_uring_setup(0x1b7a, &(0x7f0000000080)={0x0, 0xa482, 0x10100, 0x200000, 0x100029}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x1, 0x0, 0xce})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

1m34.994758428s ago: executing program 8 (id=2082):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x0, 0xb, 0x0, "f6a7346a1ca3caf66200f0e70b995efa20d5ddc09c0bc0c88e00bdea5e6998967d569964c8b68dae57dea91c0e3ef03a96483bcaaa5ab222d1993083e8e3619fbbff30da0288a8b78a3f921c40fdc06a"}, 0xd8)
setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x0, 0x0, 0x0, "698e86252c563a2eb894ac1de863c527984bfa5ff139aeeef086eed112e6f0ffba88c7d0888990f99dc2416c1cbccf99d18464a65c3587c97aee9217b992893cebfc606ada5e14e782e63da22a6fe97d"}, 0xd8)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10)
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1m29.092710283s ago: executing program 1 (id=2083):
openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6(0xa, 0x80003, 0xff)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
close(0x3)
socket$inet6(0xa, 0x80003, 0xff)
socket$inet6(0xa, 0x80003, 0xff)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8)
r1 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES16=r0, @ANYRES16=r1], 0x1000f)

1m22.681419105s ago: executing program 8 (id=2084):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "000f000000000000000100000e00"}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x3, 0x8, 0xffffffff, 0x1, 0x3}}, {0x4}}]}]}, 0x6c}}, 0x0)

1m16.732998827s ago: executing program 1 (id=2085):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0xfffc, 0xbfff, 0x19, "ec28a144f13d7607"})
write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="adb5"], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x10, "0062ba5d8200"})
r1 = syz_open_pts(r0, 0x20800)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x44)

1m14.04097219s ago: executing program 38 (id=2076):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6d1cb49ada2c127b, 0x59032, 0xffffffffffffffff, 0x0)
set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)

31.804296245s ago: executing program 39 (id=2085):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0xfffc, 0xbfff, 0x19, "ec28a144f13d7607"})
write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="adb5"], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x10, "0062ba5d8200"})
r1 = syz_open_pts(r0, 0x20800)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x44)

0s ago: executing program 40 (id=2084):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "000f000000000000000100000e00"}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x3, 0x8, 0xffffffff, 0x1, 0x3}}, {0x4}}]}]}, 0x6c}}, 0x0)

kernel console output (not intermixed with test programs):

nfig 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  168.369284][    T9] usb 1-1: language id specifier not provided by device, defaulting to English
[  168.375449][    T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  168.378770][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.389439][    T9] usb 1-1: Product: syz
[  168.390924][    T9] usb 1-1: Manufacturer: 헣
[  168.395796][    T9] usb 1-1: SerialNumber: syz
[  168.420613][ T9282] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  168.427198][ T9282] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  168.640393][    T9] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 2 vid 0x0525 pid 0xA4A8
[  168.647585][    T9] usb 1-1: USB disconnect, device number 19
[  168.652747][    T9] usblp0: removed
[  169.306954][ T9284] loop5: detected capacity change from 0 to 262144
[  169.312849][ T9284] F2FS-fs (loop5): invalid crc value
[  169.368145][ T9284] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  169.373158][ T9284] F2FS-fs (loop5): Start checkpoint disabled!
[  169.381447][ T9284] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  170.153559][ T9336] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  170.170642][ T9336] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  170.502152][ T9326] Process accounting resumed
[  170.604679][ T9347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1335'.
[  170.615532][ T9347] ipvlan2: entered promiscuous mode
[  170.791875][ T9369] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1345'.
[  170.794994][ T9369] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1345'.
[  171.712877][ T9398] netlink: 'syz.5.1358': attribute type 21 has an invalid length.
[  171.716576][ T9398] netlink: 144 bytes leftover after parsing attributes in process `syz.5.1358'.
[  172.121823][   T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  172.270994][   T10] usb 6-1: Using ep0 maxpacket: 16
[  172.275419][   T10] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  172.279256][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.283720][   T10] usb 6-1: config 0 descriptor??
[  172.288415][   T10] gspca_main: sonixj-2.14.0 probing 0471:0327
[  172.551283][ T9410] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1364'.
[  172.696233][ T9416] netlink: 201916 bytes leftover after parsing attributes in process `syz.0.1367'.
[  173.036039][ T9428] loop0: detected capacity change from 0 to 4096
[  173.069176][ T9428] overlayfs: upper fs does not support tmpfile.
[  173.076474][ T9428] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  173.303925][    T9] usb 6-1: USB disconnect, device number 9
[  173.483895][   T10] usb 1-1: new full-speed USB device number 20 using dummy_hcd
[  173.643075][   T10] usb 1-1: config 0 has an invalid interface number: 6 but max is 0
[  173.646270][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  173.650405][   T10] usb 1-1: config 0 has no interface number 0
[  173.653154][   T10] usb 1-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  173.660206][   T10] usb 1-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12
[  173.664205][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.667427][   T10] usb 1-1: Product: syz
[  173.669118][   T10] usb 1-1: Manufacturer: syz
[  173.671100][   T10] usb 1-1: SerialNumber: syz
[  173.675190][   T10] usb 1-1: config 0 descriptor??
[  173.677785][ T9437] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  173.680359][ T9437] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  173.692224][   T10] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'.
[  173.891104][  T791] usb 1-1: USB disconnect, device number 20
[  174.090772][   T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  174.260777][   T10] usb 6-1: Using ep0 maxpacket: 32
[  174.265391][   T10] usb 6-1: unable to get BOS descriptor or descriptor too short
[  174.269741][   T10] usb 6-1: config 244 has an invalid interface number: 68 but max is 0
[  174.273939][   T10] usb 6-1: config 244 has no interface number 0
[  174.276675][   T10] usb 6-1: config 244 interface 68 altsetting 3 has an endpoint descriptor with address 0xF8, changing to 0x88
[  174.284784][   T10] usb 6-1: config 244 interface 68 altsetting 3 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  174.289428][   T10] usb 6-1: config 244 interface 68 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64
[  174.294716][   T10] usb 6-1: config 244 interface 68 altsetting 3 endpoint 0xA has invalid wMaxPacketSize 0
[  174.298879][   T10] usb 6-1: config 244 interface 68 has no altsetting 0
[  174.304382][   T10] usb 6-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=24.0f
[  174.304775][ T9443] loop1: detected capacity change from 0 to 4096
[  174.309252][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.314163][ T9443] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[  174.315932][   T10] usb 6-1: Product: syz
[  174.320871][   T10] usb 6-1: Manufacturer: syz
[  174.322933][   T10] usb 6-1: SerialNumber: syz
[  174.326618][ T9443] ntfs3(loop1): Failed to load $Bitmap (-22).
[  174.515946][ T9451] vxcan3: entered allmulticast mode
[  174.657934][   T10] comedi comedi5: Endpoint has wrong direction
[  174.661917][   T10] dt9812 6-1:244.68: driver 'dt9812' failed to auto-configure device.
[  174.670888][   T10] usb 6-1: USB disconnect, device number 10
[  175.208810][ T9462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1388'.
[  175.212901][ T9462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1388'.
[  175.923716][ T9470] loop5: detected capacity change from 0 to 32768
[  175.927089][ T9470] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1391 (9470)
[  175.933367][ T9470] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  175.937542][ T9470] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm
[  175.940722][ T9470] BTRFS info (device loop5): using free-space-tree
[  176.005392][ T8004] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  176.188800][   T10] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  176.340380][   T10] usb 1-1: Using ep0 maxpacket: 8
[  176.344525][   T10] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  176.348347][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.354772][   T10] usb 1-1: config 0 descriptor??
[  176.563220][   T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  177.170340][   T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  177.178908][   T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9
[  177.204115][ T9512] loop1: detected capacity change from 0 to 256
[  177.212159][   T10] asix 1-1:0.0: probe with driver asix failed with error -71
[  177.215450][ T9512] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  177.219438][   T10] usb 1-1: USB disconnect, device number 21
[  177.430364][ T6417] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  177.474631][   T55] Bluetooth: hci1: unexpected subevent 0x01 length: 78 > 18
[  177.483907][ T9522] loop1: detected capacity change from 0 to 1024
[  177.492178][ T9522] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  177.580286][ T6417] usb 6-1: Using ep0 maxpacket: 8
[  177.583419][ T6417] usb 6-1: config 0 has no interfaces?
[  177.588901][ T6417] usb 6-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=46.08
[  177.593326][ T6417] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.596291][ T6417] usb 6-1: Product: syz
[  177.597993][ T6417] usb 6-1: Manufacturer: syz
[  177.599867][ T6417] usb 6-1: SerialNumber: syz
[  177.603498][ T6417] usb 6-1: config 0 descriptor??
[  177.711060][ T9528] loop1: detected capacity change from 0 to 32768
[  177.714438][ T9528] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1410 (9528)
[  177.721680][ T9528] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  177.725777][ T9528] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  177.729195][ T9528] BTRFS info (device loop1): using free-space-tree
[  177.827234][ T5848] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  178.226214][ T6417] usb 6-1: USB disconnect, device number 11
[  178.875285][ T9573] loop5: detected capacity change from 0 to 512
[  178.905559][ T9573] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.1422: iget: bad extended attribute block 1
[  178.913000][ T9573] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1422: couldn't read orphan inode 15 (err -117)
[  178.918856][ T9573] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  178.944810][   T10] usb 1-1: new full-speed USB device number 22 using dummy_hcd
[  178.952539][ T9573] EXT4-fs warning (device loop5): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed
[  178.996852][ T8004] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.037818][ T9577] mac80211_hwsim hwsim13 `: renamed from wlan1 (while UP)
[  179.092114][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  179.098338][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  179.106372][   T10] usb 1-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[  179.113165][   T10] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  179.116649][   T10] usb 1-1: Manufacturer: syz
[  179.121349][   T10] usb 1-1: config 0 descriptor??
[  179.384776][ T9587] loop5: detected capacity change from 0 to 40427
[  179.392401][ T9587] F2FS-fs (loop5): invalid crc value
[  179.420836][ T9587] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  179.426513][ T9587] F2FS-fs (loop5): Start checkpoint disabled!
[  179.432541][ T9587] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  179.465959][ T9595] loop1: detected capacity change from 0 to 1024
[  179.468764][ T9595] EXT4-fs: Ignoring removed orlov option
[  179.468971][ T1099] kworker/u9:9: attempt to access beyond end of device
[  179.468971][ T1099] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  179.476497][ T9595] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  179.484125][ T1099] CPU: 0 UID: 0 PID: 1099 Comm: kworker/u9:9 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  179.484153][ T1099] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  179.484160][ T1099] Workqueue: writeback wb_workfn (flush-7:5)
[  179.484174][ T1099] Call Trace:
[  179.484177][ T1099]  <TASK>
[  179.484181][ T1099]  dump_stack_lvl+0x189/0x250
[  179.484194][ T1099]  ? __pfx_dump_stack_lvl+0x10/0x10
[  179.484202][ T1099]  ? __pfx_queue_work_on+0x10/0x10
[  179.484210][ T1099]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  179.484220][ T1099]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  179.484234][ T1099]  f2fs_handle_critical_error+0x37c/0x540
[  179.484248][ T1099]  f2fs_write_end_io+0x886/0xb60
[  179.484262][ T1099]  __submit_merged_bio+0x27a/0x6a0
[  179.484275][ T1099]  __submit_merged_write_cond+0x255/0x530
[  179.484287][ T1099]  f2fs_write_data_pages+0x261d/0x3000
[  179.484311][ T1099]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  179.484327][ T1099]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  179.484348][ T1099]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  179.484358][ T1099]  ? look_up_lock_class+0x74/0x170
[  179.484372][ T1099]  ? trace_f2fs_writepages+0x7f/0x200
[  179.484382][ T1099]  ? f2fs_write_node_pages+0x478/0x6e0
[  179.484393][ T1099]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  179.484408][ T1099]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  179.484419][ T1099]  do_writepages+0x32e/0x550
[  179.484432][ T1099]  ? reacquire_held_locks+0x127/0x1d0
[  179.484440][ T1099]  ? writeback_sb_inodes+0x384/0x1010
[  179.484452][ T1099]  __writeback_single_inode+0x145/0xff0
[  179.484462][ T1099]  ? do_raw_spin_unlock+0x4d/0x240
[  179.484473][ T1099]  writeback_sb_inodes+0x6c7/0x1010
[  179.484492][ T1099]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  179.484517][ T1099]  ? rcu_is_watching+0x15/0xb0
[  179.484529][ T1099]  wb_writeback+0x43b/0xaf0
[  179.484541][ T1099]  ? queue_io+0x321/0x590
[  179.484551][ T1099]  ? __pfx_wb_writeback+0x10/0x10
[  179.484564][ T1099]  ? _raw_spin_unlock_irq+0x23/0x50
[  179.484574][ T1099]  wb_workfn+0x409/0xef0
[  179.484588][ T1099]  ? __pfx_wb_workfn+0x10/0x10
[  179.484597][ T1099]  ? __lock_acquire+0xab9/0xd20
[  179.484611][ T1099]  ? process_scheduled_works+0x9ef/0x17b0
[  179.484621][ T1099]  ? _raw_spin_unlock_irq+0x23/0x50
[  179.484629][ T1099]  ? process_scheduled_works+0x9ef/0x17b0
[  179.484635][ T1099]  ? process_scheduled_works+0x9ef/0x17b0
[  179.484643][ T1099]  process_scheduled_works+0xae1/0x17b0
[  179.484661][ T1099]  ? __pfx_process_scheduled_works+0x10/0x10
[  179.484675][ T1099]  worker_thread+0x8a0/0xda0
[  179.484690][ T1099]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  179.484702][ T1099]  ? __kthread_parkme+0x7b/0x200
[  179.484713][ T1099]  kthread+0x711/0x8a0
[  179.484723][ T1099]  ? __pfx_worker_thread+0x10/0x10
[  179.484730][ T1099]  ? __pfx_kthread+0x10/0x10
[  179.484740][ T1099]  ? _raw_spin_unlock_irq+0x23/0x50
[  179.484748][ T1099]  ? lockdep_hardirqs_on+0x9c/0x150
[  179.484756][ T1099]  ? __pfx_kthread+0x10/0x10
[  179.484765][ T1099]  ret_from_fork+0x3fc/0x770
[  179.484774][ T1099]  ? __pfx_ret_from_fork+0x10/0x10
[  179.484784][ T1099]  ? __switch_to_asm+0x39/0x70
[  179.484793][ T1099]  ? __switch_to_asm+0x33/0x70
[  179.484801][ T1099]  ? __pfx_kthread+0x10/0x10
[  179.484810][ T1099]  ret_from_fork_asm+0x1a/0x30
[  179.484825][ T1099]  </TASK>
[  179.484877][ T1099] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  179.502336][ T9595] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  179.542427][   T10] cougar 0003:060B:700A.0012: unknown main item tag 0x0
[  179.624601][   T10] cougar 0003:060B:700A.0012: unknown main item tag 0x0
[  179.626013][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.627288][   T10] cougar 0003:060B:700A.0012: unknown main item tag 0x0
[  179.633660][   T10] cougar 0003:060B:700A.0012: unknown main item tag 0x0
[  179.644200][   T10] cougar 0003:060B:700A.0012: unknown main item tag 0x0
[  179.650901][   T10] cougar 0003:060B:700A.0012: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0
[  179.751158][   T10] usb 1-1: USB disconnect, device number 22
[  180.305771][ T9618] loop0: detected capacity change from 0 to 1024
[  180.323635][ T9618] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  181.328295][ T5851] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.884316][ T9661] loop5: detected capacity change from 0 to 8
[  182.896144][ T9661] SQUASHFS error: zstd decompression error: 10
[  182.899122][ T9661] SQUASHFS error: zstd decompression failed, data probably corrupt
[  182.904304][ T9661] SQUASHFS error: Failed to read block 0x60: -5
[  182.908092][ T9661] SQUASHFS error: zstd decompression error: 10
[  182.913873][ T9661] SQUASHFS error: zstd decompression failed, data probably corrupt
[  182.916996][ T9661] SQUASHFS error: Failed to read block 0x60: -5
[  183.127286][   T33] audit: type=1326 audit(2759.008:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9672 comm="syz.5.1465" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f041dd8ebe9 code=0x7ffc0000
[  183.137502][   T33] audit: type=1326 audit(2759.018:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9672 comm="syz.5.1465" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f041dd8ebe9 code=0x7ffc0000
[  183.159057][   T33] audit: type=1326 audit(2759.018:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9672 comm="syz.5.1465" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f041dd8ebe9 code=0x7ffc0000
[  183.169490][   T33] audit: type=1326 audit(2759.018:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9672 comm="syz.5.1465" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f041dd8ebe9 code=0x7ffc0000
[  183.177828][   T33] audit: type=1326 audit(2759.018:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9672 comm="syz.5.1465" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f041dd8ebe9 code=0x7ffc0000
[  183.186325][   T33] audit: type=1326 audit(2759.038:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9672 comm="syz.5.1465" exe="/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f041dd8ebe9 code=0x7ffc0000
[  183.194657][   T33] audit: type=1326 audit(2759.038:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9672 comm="syz.5.1465" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f041dd8ebe9 code=0x7ffc0000
[  183.213629][   T33] audit: type=1326 audit(2759.038:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9672 comm="syz.5.1465" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f041dd8ebe9 code=0x7ffc0000
[  183.227236][   T33] audit: type=1326 audit(2759.038:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9672 comm="syz.5.1465" exe="/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7f041dd8ebe9 code=0x7ffc0000
[  183.236517][   T33] audit: type=1326 audit(2759.038:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9672 comm="syz.5.1465" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f041dd8ebe9 code=0x7ffc0000
[  183.658353][ T9692] loop1: detected capacity change from 0 to 256
[  183.710415][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  184.623217][ T9715] loop0: detected capacity change from 0 to 512
[  184.664943][ T9715] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  184.841363][ T5851] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.957777][ T9726] loop1: detected capacity change from 0 to 512
[  184.973287][ T9726] EXT4-fs (loop1): orphan cleanup on readonly fs
[  184.982857][ T9726] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1490: Failed to acquire dquot type 1
[  184.993082][ T9726] EXT4-fs (loop1): 1 truncate cleaned up
[  185.004990][ T9726] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  185.016344][ T9726] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1490: bg 0: block 248: padding at end of block bitmap is not set
[  185.045736][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.119611][   T10] usb 1-1: new full-speed USB device number 23 using dummy_hcd
[  185.239804][  T974] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  185.277303][   T10] usb 1-1: config 0 has an invalid interface number: 50 but max is 0
[  185.280699][   T10] usb 1-1: config 0 has no interface number 0
[  185.283188][   T10] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  185.297432][   T10] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  185.301424][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.304698][   T10] usb 1-1: Product: syz
[  185.306503][   T10] usb 1-1: Manufacturer: syz
[  185.308607][   T10] usb 1-1: SerialNumber: syz
[  185.318820][   T10] usb 1-1: config 0 descriptor??
[  185.323849][   T10] yurex 1-1:0.50: Could not find endpoints
[  185.391141][  T974] usb 6-1: config 1 has an invalid descriptor of length 68, skipping remainder of the config
[  185.395265][  T974] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  185.399058][  T974] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  185.406689][  T974] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  185.410926][  T974] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.414087][  T974] usb 6-1: Product: syz
[  185.415813][  T974] usb 6-1: Manufacturer: syz
[  185.417651][  T974] usb 6-1: SerialNumber: syz
[  185.528925][    T9] usb 1-1: USB disconnect, device number 23
[  185.635220][   T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  185.641081][  T974] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found
[  185.643929][  T974] cdc_ncm 6-1:1.0: bind() failure
[  185.649252][  T974] usb 6-1: USB disconnect, device number 12
[  185.789249][   T10] usb 2-1: Using ep0 maxpacket: 16
[  185.792978][   T10] usb 2-1: config 0 has an invalid interface number: 64 but max is 0
[  185.796463][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  185.802520][   T10] usb 2-1: config 0 has no interface number 0
[  185.805198][   T10] usb 2-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.1e
[  185.808470][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.813763][   T10] usb 2-1: config 0 descriptor??
[  185.818425][   T10] uvcvideo 2-1:0.64: probe with driver uvcvideo failed with error -22
[  186.023061][  T791] usb 2-1: USB disconnect, device number 18
[  186.060420][ T9751] loop0: detected capacity change from 0 to 64
[  186.218258][ T9755] loop5: detected capacity change from 0 to 512
[  186.226358][ T9755] EXT4-fs: Ignoring removed orlov option
[  186.228838][ T9755] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  186.232095][ T9755] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  186.236642][ T9755] EXT4-fs (loop5): orphan cleanup on readonly fs
[  186.243114][ T9755] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.1504: Invalid inode bitmap blk 0 in block_group 0
[  186.249349][ T9755] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  186.266142][ T8004] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.588208][ T9766] loop1: detected capacity change from 0 to 2048
[  186.592217][ T9766] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  186.604391][ T9766] syz.1.1510: attempt to access beyond end of device
[  186.604391][ T9766] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  186.609609][ T9767] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  186.625640][ T9766] syz.1.1510: attempt to access beyond end of device
[  186.625640][ T9766] loop1: rw=0, sector=33554430, nr_sectors = 2 limit=2048
[  186.639222][ T9766] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=3)
[  186.642905][ T9766] NILFS (loop1): error -5 reading inode: ino=15
[  186.660647][ T9766] syz.1.1510: attempt to access beyond end of device
[  186.660647][ T9766] loop1: rw=0, sector=33554430, nr_sectors = 2 limit=2048
[  186.666647][ T9766] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=3)
[  186.674180][ T9766] NILFS (loop1): error -5 reading inode: ino=15
[  186.752912][ T9769] loop1: detected capacity change from 0 to 2048
[  186.773213][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  186.778070][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  186.783791][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  186.787958][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  186.795750][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  187.012606][ T9770] chnl_net:caif_netlink_parms(): no params data found
[  187.111523][ T9770] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.114810][ T9770] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.117956][ T9770] bridge_slave_0: entered allmulticast mode
[  187.122395][ T9770] bridge_slave_0: entered promiscuous mode
[  187.127069][ T9770] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.130549][ T9770] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.133696][ T9770] bridge_slave_1: entered allmulticast mode
[  187.138219][ T9770] bridge_slave_1: entered promiscuous mode
[  187.175958][ T9770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  187.192608][ T9770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  187.225270][ T9770] team0: Port device team_slave_0 added
[  187.230990][ T9770] team0: Port device team_slave_1 added
[  187.259668][ T9770] batman_adv: batadv0: Adding interface: batadv_slave_0
[  187.262669][ T9770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  187.274432][ T9770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  187.280736][ T9770] batman_adv: batadv0: Adding interface: batadv_slave_1
[  187.289838][ T9770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  187.301207][ T9770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  187.350076][ T9770] hsr_slave_0: entered promiscuous mode
[  187.353579][ T9770] hsr_slave_1: entered promiscuous mode
[  187.355411][ T9801] loop1: detected capacity change from 0 to 512
[  187.356615][ T9770] debugfs: 'hsr0' already exists in 'hsr'
[  187.361452][ T9770] Cannot create hsr debugfs directory
[  187.361949][ T9801] EXT4-fs: Ignoring removed oldalloc option
[  187.400601][ T9801] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.1522: Parent and EA inode have the same ino 15
[  187.415331][ T9801] EXT4-fs (loop1): 1 orphan inode deleted
[  187.422225][ T9801] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  187.451330][ T9801] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1522: invalid indirect mapped block 234881024 (level 0)
[  187.491556][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  187.664123][ T9770] 8021q: adding VLAN 0 to HW filter on device bond0
[  187.675535][ T9820] netlink: 'syz.1.1528': attribute type 6 has an invalid length.
[  187.695681][ T9820] netlink: 'syz.1.1528': attribute type 6 has an invalid length.
[  187.700951][ T9770] 8021q: adding VLAN 0 to HW filter on device team0
[  187.721289][   T90] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.724116][   T90] bridge0: port 1(bridge_slave_0) entered forwarding state
[  187.740372][   T90] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.743246][   T90] bridge0: port 2(bridge_slave_1) entered forwarding state
[  187.771677][ T9821] loop5: detected capacity change from 0 to 4096
[  187.784243][ T9821] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512).
[  187.785461][ T9825] loop1: detected capacity change from 0 to 128
[  187.795580][ T9825] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  187.805702][ T9821] ntfs3(loop5): $AttrDef is corrupted.
[  187.835683][ T5848] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  187.958500][ T9770] 8021q: adding VLAN 0 to HW filter on device batadv0
[  188.000327][ T9840] netlink: 277 bytes leftover after parsing attributes in process `syz.5.1534'.
[  188.158992][  T791] usb 2-1: new full-speed USB device number 19 using dummy_hcd
[  188.332199][  T791] usb 2-1: not running at top speed; connect to a high speed hub
[  188.351477][  T791] usb 2-1: config 6 has an invalid interface number: 152 but max is 0
[  188.355268][  T791] usb 2-1: config 6 has an invalid interface number: 94 but max is 0
[  188.358944][  T791] usb 2-1: config 6 has 2 interfaces, different from the descriptor's value: 1
[  188.362873][  T791] usb 2-1: config 6 has no interface number 0
[  188.366083][  T791] usb 2-1: config 6 has no interface number 1
[  188.369357][  T791] usb 2-1: config 6 interface 94 altsetting 85 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  188.374776][  T791] usb 2-1: config 6 interface 152 has no altsetting 0
[  188.377818][  T791] usb 2-1: config 6 interface 94 has no altsetting 0
[  188.390120][  T791] usb 2-1: New USB device found, idVendor=046d, idProduct=08aa, bcdDevice=e0.67
[  188.394240][  T791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.399468][  T791] usb 2-1: Product: syz
[  188.401557][  T791] usb 2-1: Manufacturer: syz
[  188.403623][  T791] usb 2-1: SerialNumber: syz
[  188.476918][ T9770] veth0_vlan: entered promiscuous mode
[  188.491315][ T9770] veth1_vlan: entered promiscuous mode
[  188.544982][ T9770] veth0_macvtap: entered promiscuous mode
[  188.554061][ T9770] veth1_macvtap: entered promiscuous mode
[  188.573698][ T9770] batman_adv: batadv0: Interface activated: batadv_slave_0
[  188.595651][ T9770] batman_adv: batadv0: Interface activated: batadv_slave_1
[  188.723336][  T791] usb 2-1: USB disconnect, device number 19
[  188.780318][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  188.785466][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  188.835271][   T55] Bluetooth: hci2: command tx timeout
[  188.840569][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  188.844334][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  189.303051][ T9851] sp0: Synchronizing with TNC
[  189.496548][ T9860] netlink: 'syz.5.1540': attribute type 11 has an invalid length.
[  189.599485][ T9866] loop5: detected capacity change from 0 to 1024
[  189.603250][ T9866] hfsplus: unable to find HFS+ superblock
[  189.603499][   T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  190.007398][ T9878] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1548'.
[  190.015397][ T9878] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1548'.
[  190.426308][ T9883] sch_tbf: peakrate 8 is lower than or equals to rate 12 !
[  190.489645][ T9885] vcan0: tx address claim with dest, not broadcast
[  190.538653][   T10] usb 2-1: Using ep0 maxpacket: 32
[  190.542197][   T10] usb 2-1: config 0 has an invalid interface number: 218 but max is 0
[  190.545730][   T10] usb 2-1: config 0 has no interface number 0
[  190.554407][   T10] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=74.07
[  190.558125][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.561666][   T10] usb 2-1: Product: syz
[  190.563687][   T10] usb 2-1: Manufacturer: syz
[  190.565644][   T10] usb 2-1: SerialNumber: syz
[  190.571268][   T10] usb 2-1: config 0 descriptor??
[  190.597037][ T9889] 2g,{: renamed from lo (while UP)
[  190.709965][ T9897] bond0: entered promiscuous mode
[  190.723244][ T9897] bond_slave_0: entered promiscuous mode
[  190.725954][ T9897] bond_slave_1: entered promiscuous mode
[  190.730136][ T9897] batadv0: entered promiscuous mode
[  190.733300][ T9897] hsr1: entered allmulticast mode
[  190.735311][ T9897] bond0: entered allmulticast mode
[  190.737446][ T9897] bond_slave_0: entered allmulticast mode
[  190.739795][ T9897] bond_slave_1: entered allmulticast mode
[  190.742261][ T9897] batadv0: entered allmulticast mode
[  190.744889][ T9897] 8021q: adding VLAN 0 to HW filter on device hsr1
[  190.751713][ T9897] bond0: left promiscuous mode
[  190.754692][ T9897] bond_slave_0: left promiscuous mode
[  190.757219][ T9897] bond_slave_1: left promiscuous mode
[  190.760936][ T9897] batadv0: left promiscuous mode
[  190.780255][   T10] usb 2-1: USB disconnect, device number 20
[  190.910227][   T55] Bluetooth: hci2: command tx timeout
[  190.965192][ T9905] loop5: detected capacity change from 0 to 1024
[  190.972127][ T9905] EXT4-fs: inline encryption not supported
[  190.978662][ T9905] EXT4-fs: Ignoring removed bh option
[  191.011906][ T9905] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  191.043349][ T8004] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.348347][ T9915] loop6: detected capacity change from 0 to 1024
[  191.351909][ T9915] EXT4-fs: Ignoring removed orlov option
[  191.354425][ T9915] EXT4-fs: Ignoring removed mblk_io_submit option
[  191.464731][ T9915] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  191.483130][ T9913] loop5: detected capacity change from 0 to 4096
[  191.501269][ T9915] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  191.510117][ T9913] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  191.546919][ T9913] ntfs3(loop5): Failed to load $Extend (-22).
[  191.555938][ T9913] ntfs3(loop5): Failed to initialize $Extend.
[  191.842081][ T9770] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.870837][ T9927] loop1: detected capacity change from 0 to 40427
[  191.873402][ T9926] loop5: detected capacity change from 0 to 32768
[  191.876868][ T9927] F2FS-fs (loop1): build fault injection rate: 14
[  191.885667][ T9927] F2FS-fs (loop1): build fault injection type: 0x3bfe8c
[  191.890995][ T9927] F2FS-fs (loop1): invalid crc value
[  191.897774][    C0] F2FS-fs (loop1): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  191.912999][    C0] F2FS-fs (loop1): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  191.973123][ T9927] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  191.976853][ T9927] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  191.985398][ T9927] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  192.007331][ T9927] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  192.016649][ T9927] F2FS-fs (loop1): inject checkpoint error in f2fs_balance_fs of f2fs_unlink+0x39d/0xac0
[  192.023976][ T9927] CPU: 1 UID: 0 PID: 9927 Comm: syz.1.1568 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  192.023998][ T9927] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  192.024006][ T9927] Call Trace:
[  192.024012][ T9927]  <TASK>
[  192.024020][ T9927]  dump_stack_lvl+0x189/0x250
[  192.024043][ T9927]  ? __pfx_dump_stack_lvl+0x10/0x10
[  192.024060][ T9927]  ? __pfx_queue_work_on+0x10/0x10
[  192.024073][ T9927]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  192.024091][ T9927]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  192.024112][ T9927]  ? f2fs_hw_is_readonly+0x39b/0x470
[  192.024135][ T9927]  f2fs_handle_critical_error+0x37c/0x540
[  192.024160][ T9927]  f2fs_balance_fs+0x32d/0x7f0
[  192.024178][ T9927]  ? __pfx_f2fs_find_entry+0x10/0x10
[  192.024198][ T9927]  ? f2fs_unlink+0x39d/0xac0
[  192.024217][ T9927]  ? __pfx_f2fs_balance_fs+0x10/0x10
[  192.024248][ T9927]  ? f2fs_dquot_initialize+0x141/0x2b0
[  192.024262][ T9927]  ? f2fs_unlink+0x239/0xac0
[  192.024282][ T9927]  f2fs_unlink+0x39d/0xac0
[  192.024306][ T9927]  ? __pfx_f2fs_unlink+0x10/0x10
[  192.024322][ T9927]  ? down_write+0x162/0x1f0
[  192.024332][ T9927]  ? __pfx_down_write+0x10/0x10
[  192.024348][ T9927]  ? bpf_lsm_inode_unlink+0x9/0x20
[  192.024364][ T9927]  vfs_unlink+0x394/0x650
[  192.024390][ T9927]  do_unlinkat+0x345/0x560
[  192.024413][ T9927]  ? __pfx_do_unlinkat+0x10/0x10
[  192.024437][ T9927]  ? getname_flags+0x1e5/0x540
[  192.024455][ T9927]  __x64_sys_unlink+0x47/0x50
[  192.024472][ T9927]  do_syscall_64+0xfa/0x3b0
[  192.024489][ T9927]  ? lockdep_hardirqs_on+0x9c/0x150
[  192.024506][ T9927]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.024518][ T9927]  ? exc_page_fault+0x9f/0xf0
[  192.024538][ T9927]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.024550][ T9927] RIP: 0033:0x7f5f2e58ebe9
[  192.024562][ T9927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  192.024572][ T9927] RSP: 002b:00007f5f2f36e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057
[  192.024588][ T9927] RAX: ffffffffffffffda RBX: 00007f5f2e7b5fa0 RCX: 00007f5f2e58ebe9
[  192.024598][ T9927] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000
[  192.024607][ T9927] RBP: 00007f5f2e611e19 R08: 0000000000000000 R09: 0000000000000000
[  192.024615][ T9927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  192.024623][ T9927] R13: 00007f5f2e7b6038 R14: 00007f5f2e7b5fa0 R15: 00007ffccbf92578
[  192.024649][ T9927]  </TASK>
[  192.024655][ T9927] F2FS-fs (loop1): Stopped filesystem due to reason: 1
[  192.268533][  T791] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  192.395310][ T9944] loop5: detected capacity change from 0 to 32768
[  192.404200][ T9944] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  192.418251][ T9944] XFS (loop5): Ending clean mount
[  192.432941][  T791] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  192.437285][  T791] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  192.451385][  T791] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64
[  192.460785][  T791] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  192.463885][  T791] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.466649][  T791] usb 7-1: Product: syz
[  192.468291][  T791] usb 7-1: Manufacturer: syz
[  192.470653][  T791] usb 7-1: SerialNumber: syz
[  192.475906][  T791] usb 7-1: config 0 descriptor??
[  192.479947][ T9931] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  192.488240][ T9931] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  192.499512][  T791] usb 7-1: ucan: probing device on interface #0
[  192.577479][ T8004] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  192.714219][  T791] usb 7-1: ucan: device protocol version 0 is not supported
[  192.727125][  T791] usb 7-1: ucan: probe failed; try to update the device firmware
[  192.924106][   T10] usb 7-1: USB disconnect, device number 2
[  192.989046][   T55] Bluetooth: hci2: command tx timeout
[  193.705943][ T9987] loop5: detected capacity change from 0 to 4096
[  193.714725][ T9987] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  193.721323][ T9987] EXT4-fs (loop5): Test dummy encryption mode enabled
[  193.742587][ T9987] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  193.771067][ T8004] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.789715][   T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  193.840721][ T9995] loop5: detected capacity change from 0 to 512
[  193.852908][ T9995] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  193.874366][ T9995] fs-verity (loop5, inode 15): Unrecognized descriptor size: 0 bytes
[  193.897157][ T8004] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.946766][T10003] loop1: detected capacity change from 0 to 128
[  193.952754][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  193.970566][   T10] usb 7-1: Using ep0 maxpacket: 8
[  193.980435][   T10] usb 7-1: config 162 has an invalid interface number: 150 but max is 0
[  193.984136][   T10] usb 7-1: config 162 has no interface number 0
[  193.987254][   T10] usb 7-1: config 162 interface 150 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  193.997247][   T10] usb 7-1: config 162 interface 150 has no altsetting 0
[  194.008266][   T10] usb 7-1: New USB device found, idVendor=058f, idProduct=3820, bcdDevice=e0.0e
[  194.014441][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.024424][   T10] usb 7-1: Product: syz
[  194.026210][   T10] usb 7-1: Manufacturer: syz
[  194.033188][   T10] usb 7-1: SerialNumber: syz
[  194.076046][T10009] loop1: detected capacity change from 0 to 1024
[  194.088866][T10009] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  194.144994][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.207609][T10013] loop1: detected capacity change from 0 to 4096
[  194.211548][T10013] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  194.266637][   T10] usb 7-1: Found UVC 0.0a device syz (058f:3820)
[  194.276905][   T10] usb 7-1: No valid video chain found.
[  194.284532][   T10] usb 7-1: USB disconnect, device number 3
[  194.475766][T10019] loop5: detected capacity change from 0 to 40427
[  194.479079][T10019] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  194.481869][T10019] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  194.482967][T10015] loop1: detected capacity change from 0 to 32768
[  194.487190][T10019] F2FS-fs (loop5): invalid crc value
[  194.502066][T10015] ERROR: (device loop1): xtTruncate_pmap: xt_getpage: xtree page corrupt
[  194.502066][T10015] 
[  194.512338][T10015] ERROR: (device loop1): remounting filesystem as read-only
[  194.515488][T10015] ERROR: (device loop1): jfs_unlink: 
[  194.515488][T10015] 
[  194.532378][T10019] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  194.537997][ T5848] ERROR: (device loop1): xtTruncate: xt_getpage: xtree page corrupt
[  194.537997][ T5848] 
[  194.545025][T10019] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  194.547980][T10019] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  194.555170][T10019] fscrypt (loop5, inode 3): Error -61 getting encryption context
[  194.655221][T10025] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  194.945173][T10027] loop1: detected capacity change from 0 to 32768
[  195.068246][   T55] Bluetooth: hci2: command tx timeout
[  195.147599][T10036] loop6: detected capacity change from 0 to 32768
[  195.152877][T10036] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1611 (10036)
[  195.164944][T10036] BTRFS info (device loop6): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[  195.177789][T10036] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm
[  195.188098][T10036] BTRFS info (device loop6): using free-space-tree
[  195.241473][T10060] loop5: detected capacity change from 0 to 128
[  195.266353][T10060] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  195.324707][ T8004] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  195.394244][ T9770] BTRFS info (device loop6): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[  195.650044][T10074] loop5: detected capacity change from 0 to 32768
[  195.653695][T10074] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1620 (10074)
[  195.660427][T10074] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  195.664264][T10074] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  195.667667][T10074] BTRFS info (device loop5): using free-space-tree
[  195.705546][ T8004] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  195.818153][    T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  195.856837][T10102] netlink: 'syz.5.1627': attribute type 2 has an invalid length.
[  195.860564][T10102] netlink: 'syz.5.1627': attribute type 2 has an invalid length.
[  196.001309][    T9] usb 7-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  196.007821][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.014417][    T9] usb 7-1: config 0 descriptor??
[  196.019790][T10110] loop5: detected capacity change from 0 to 8192
[  196.115711][T10112] netlink: 'syz.5.1632': attribute type 2 has an invalid length.
[  196.120579][T10112] netlink: 1192 bytes leftover after parsing attributes in process `syz.5.1632'.
[  196.227742][T10118] loop1: detected capacity change from 0 to 256
[  196.250182][T10118] FAT-fs (loop1): Directory bread(block 64) failed
[  196.253004][T10118] FAT-fs (loop1): Directory bread(block 65) failed
[  196.256019][T10118] FAT-fs (loop1): Directory bread(block 66) failed
[  196.261279][T10118] FAT-fs (loop1): Directory bread(block 67) failed
[  196.264031][T10118] FAT-fs (loop1): Directory bread(block 68) failed
[  196.266904][T10118] FAT-fs (loop1): Directory bread(block 69) failed
[  196.271434][T10118] FAT-fs (loop1): Directory bread(block 70) failed
[  196.274263][T10118] FAT-fs (loop1): Directory bread(block 71) failed
[  196.277095][T10118] FAT-fs (loop1): Directory bread(block 72) failed
[  196.280106][T10118] FAT-fs (loop1): Directory bread(block 73) failed
[  196.356724][T10120] loop1: detected capacity change from 0 to 256
[  196.369205][T10120] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d)
[  196.407975][  T791] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  196.513960][T10128] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1640'.
[  196.560053][  T791] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  196.564675][  T791] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7
[  196.572119][  T791] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  196.579910][  T791] usb 6-1: language id specifier not provided by device, defaulting to English
[  196.590419][  T791] usb 6-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e
[  196.594473][  T791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.599156][  T791] usb 6-1: Manufacturer: 
[  196.601049][  T791] usb 6-1: SerialNumber: syz
[  196.605256][  T791] usb 6-1: config 0 descriptor??
[  196.614039][  T791] em28xx 6-1:0.0: New device   @ 480 Mbps (2013:0251, interface 0, class 0)
[  196.618033][  T791] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class)
[  196.878416][  T791] em28xx 6-1:0.0: unknown em28xx chip ID (0)
[  196.883290][  T791] em28xx 6-1:0.0: Config register raw data: 0xfffffffb
[  196.896767][  T791] em28xx 6-1:0.0: AC97 chip type couldn't be determined
[  196.899919][  T791] em28xx 6-1:0.0: No AC97 audio processor
[  196.909792][  T791] usb 6-1: USB disconnect, device number 13
[  196.913253][  T791] em28xx 6-1:0.0: Disconnecting em28xx
[  196.918892][  T791] em28xx 6-1:0.0: Freeing device
[  197.043346][    T9] pegasus 7-1:0.0: probe with driver pegasus failed with error -71
[  197.062870][    T9] usb 7-1: USB disconnect, device number 4
[  197.805469][T10141] block nbd1: shutting down sockets
[  198.610881][T10179] loop1: detected capacity change from 0 to 1024
[  198.614835][T10179] hfsplus: Filesystem is marked locked, mounting read-only.
[  198.624062][T10179] hfsplus: filesystem is marked locked, leaving read-only.
[  198.775415][T10185] loop5: detected capacity change from 0 to 4096
[  198.906611][   T33] kauditd_printk_skb: 3 callbacks suppressed
[  198.906625][   T33] audit: type=1400 audit(2774.780:49): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=10186 comm="syz.5.1665"
[  199.041938][T10183] loop1: detected capacity change from 0 to 32768
[  199.048975][T10183] XFS: ikeep mount option is deprecated.
[  199.051439][T10183] XFS: ikeep mount option is deprecated.
[  199.060753][T10183] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  199.077404][T10183] XFS (loop1): Ending clean mount
[  199.100329][ T5848] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  199.289753][T10206] loop1: detected capacity change from 0 to 2048
[  199.304324][T10206] syz.1.1670: attempt to access beyond end of device
[  199.304324][T10206] loop1: rw=524288, sector=9007199254741068, nr_sectors = 2 limit=2048
[  199.315254][T10207] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  199.322386][T10206] NILFS (loop1): the device already has a read/write mount.
[  199.632453][T10211] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  200.152732][T10218] loop5: detected capacity change from 0 to 32768
[  200.175136][T10218] ERROR: (device loop5): dbAlloc: the hint is outside the map
[  200.175136][T10218] 
[  200.184663][T10218] read_mapping_page failed!
[  200.186880][T10218] ERROR: (device loop5): txCommit: 
[  200.186880][T10218] 
[  200.297298][T10230] loop1: detected capacity change from 0 to 128
[  200.304763][T10230] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  200.341063][ T5848] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  200.406342][T10238] loop5: detected capacity change from 0 to 1024
[  200.436970][T10238] hfsplus: xattr searching failed
[  200.448465][T10238] hfsplus: xattr searching failed
[  200.475449][   T26] hfsplus: b-tree write err: -5, ino 3
[  200.595240][T10246] loop5: detected capacity change from 0 to 4096
[  200.600493][T10246] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512).
[  200.618089][T10246] ntfs3(loop5): ino=5, mi_enum_attr
[  200.620579][T10246] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  200.682825][T10242] loop1: detected capacity change from 0 to 32768
[  200.688203][T10242] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1685 (10242)
[  200.696079][T10242] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  200.702790][T10242] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  200.706484][T10242] BTRFS info (device loop1): using free-space-tree
[  200.732640][T10242] BTRFS info (device loop1): rebuilding free space tree
[  200.864253][ T5848] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  201.017453][T10270] netlink: 'syz.5.1692': attribute type 74 has an invalid length.
[  201.386006][T10279] loop1: detected capacity change from 0 to 40427
[  201.393642][T10279] F2FS-fs (loop1): invalid crc value
[  201.414858][T10295] loop6: detected capacity change from 0 to 128
[  201.447974][  T974] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  201.454762][T10279] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  201.463418][T10279] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  201.485770][T10279] syz.1.1695: attempt to access beyond end of device
[  201.485770][T10279] loop1: rw=2049, sector=53248, nr_sectors = 136 limit=40427
[  201.511913][T10300] loop6: detected capacity change from 0 to 512
[  201.523495][ T5848] syz-executor: attempt to access beyond end of device
[  201.523495][ T5848] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  201.529657][T10300] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  201.532117][ T5848] CPU: 1 UID: 0 PID: 5848 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  201.532135][ T5848] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  201.532142][ T5848] Call Trace:
[  201.532146][ T5848]  <TASK>
[  201.532152][ T5848]  dump_stack_lvl+0x189/0x250
[  201.532174][ T5848]  ? __pfx_dump_stack_lvl+0x10/0x10
[  201.532190][ T5848]  ? __pfx_queue_work_on+0x10/0x10
[  201.532201][ T5848]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  201.532217][ T5848]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  201.532242][ T5848]  f2fs_handle_critical_error+0x37c/0x540
[  201.532265][ T5848]  f2fs_write_end_io+0x886/0xb60
[  201.532291][ T5848]  __submit_merged_bio+0x27a/0x6a0
[  201.532313][ T5848]  __submit_merged_write_cond+0x255/0x530
[  201.532335][ T5848]  f2fs_write_data_pages+0x261d/0x3000
[  201.532351][ T5848]  ? __lock_acquire+0xab9/0xd20
[  201.532396][ T5848]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  201.532448][ T5848]  ? __mod_zone_page_state+0xd7/0x140
[  201.532474][ T5848]  ? folios_put_refs+0x560/0x640
[  201.532496][ T5848]  ? __pfx_folios_put_refs+0x10/0x10
[  201.532508][ T5848]  ? rcu_is_watching+0x15/0xb0
[  201.532528][ T5848]  ? __lock_acquire+0xab9/0xd20
[  201.532559][ T5848]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  201.532578][ T5848]  do_writepages+0x32e/0x550
[  201.532604][ T5848]  ? do_raw_spin_unlock+0x4d/0x240
[  201.532623][ T5848]  filemap_fdatawrite+0x199/0x240
[  201.532640][ T5848]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  201.532725][ T5848]  ? do_raw_spin_unlock+0x4d/0x240
[  201.532745][ T5848]  f2fs_sync_dirty_inodes+0x31f/0x830
[  201.532771][ T5848]  f2fs_write_checkpoint+0x95a/0x1df0
[  201.532803][ T5848]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  201.532854][ T5848]  ? kill_f2fs_super+0x298/0x6c0
[  201.532873][ T5848]  kill_f2fs_super+0x2c3/0x6c0
[  201.532891][ T5848]  ? __pfx_kill_f2fs_super+0x10/0x10
[  201.532901][ T5848]  ? radix_tree_delete_item+0x2b6/0x400
[  201.532924][ T5848]  ? shrinker_free+0x2ce/0x3e0
[  201.532940][ T5848]  deactivate_locked_super+0xbc/0x130
[  201.532958][ T5848]  cleanup_mnt+0x425/0x4c0
[  201.532971][ T5848]  ? lockdep_hardirqs_on+0x9c/0x150
[  201.532990][ T5848]  task_work_run+0x1d4/0x260
[  201.533010][ T5848]  ? __pfx_task_work_run+0x10/0x10
[  201.533025][ T5848]  ? __x64_sys_umount+0x122/0x160
[  201.533045][ T5848]  ? exit_to_user_mode_loop+0x40/0x110
[  201.533066][ T5848]  exit_to_user_mode_loop+0xec/0x110
[  201.533083][ T5848]  do_syscall_64+0x2bd/0x3b0
[  201.533099][ T5848]  ? lockdep_hardirqs_on+0x9c/0x150
[  201.533114][ T5848]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.533126][ T5848]  ? exc_page_fault+0x9f/0xf0
[  201.533144][ T5848]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.533155][ T5848] RIP: 0033:0x7f5f2e58ff17
[  201.533167][ T5848] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  201.533177][ T5848] RSP: 002b:00007ffccbf91808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  201.533191][ T5848] RAX: 0000000000000000 RBX: 00007f5f2e611c05 RCX: 00007f5f2e58ff17
[  201.533199][ T5848] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffccbf918c0
[  201.533206][ T5848] RBP: 00007ffccbf918c0 R08: 0000000000000000 R09: 0000000000000000
[  201.533213][ T5848] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffccbf92950
[  201.533221][ T5848] R13: 00007f5f2e611c05 R14: 00000000000312aa R15: 00007ffccbf92990
[  201.533244][ T5848]  </TASK>
[  201.533250][ T5848] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  201.557890][T10300] EXT4-fs (loop6): 1 truncate cleaned up
[  201.663248][T10300] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  201.675669][T10300] syz.6.1704 (pid 10300) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  201.679827][  T974] usb 6-1: Using ep0 maxpacket: 32
[  201.689906][  T974] usb 6-1: unable to get BOS descriptor or descriptor too short
[  201.692729][  T974] usb 6-1: no configurations
[  201.694285][  T974] usb 6-1: can't read configurations, error -22
[  201.720414][ T9770] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.903977][T10310] loop1: detected capacity change from 0 to 512
[  201.911791][T10310] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  201.939061][ T5848] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[  202.581681][T10323] loop5: detected capacity change from 0 to 32768
[  202.585716][T10323] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1712 (10323)
[  202.594598][T10323] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  202.595898][T10335] loop1: detected capacity change from 0 to 8
[  202.601078][T10323] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  202.605394][T10323] BTRFS info (device loop5): using free-space-tree
[  202.606321][T10335] SQUASHFS error: Unable to read inode 0x127
[  202.948624][ T8004] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  203.321757][T10358] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1723'.
[  203.550818][T10361] loop6: detected capacity change from 0 to 4096
[  203.565489][T10362] loop5: detected capacity change from 0 to 4096
[  203.566705][T10361] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512).
[  203.569651][T10362] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512).
[  203.580716][T10362] ntfs3(loop5): Failed to load $MFTMirr (-22).
[  203.618028][T10361] ntfs3(loop6): $Secure::$SII is corrupted.
[  203.620891][T10361] ntfs3(loop6): Failed to initialize $Secure (-22).
[  203.850540][T10366] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1726'.
[  204.216516][T10375] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1730'.
[  205.432105][T10400] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  205.530941][T10410] CIFS: VFS: Malformed UNC in devname
[  205.602034][T10418] loop5: detected capacity change from 0 to 512
[  205.611010][T10418] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  205.624843][T10418] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  205.634441][T10418] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.1750: corrupted in-inode xattr: e_value size too large
[  205.648862][T10418] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1750: couldn't read orphan inode 15 (err -117)
[  205.652118][T10425] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  205.667853][T10418] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  205.751421][ T8004] EXT4-fs error (device loop5): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39
[  205.761491][ T8004] EXT4-fs error (device loop5): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39
[  205.934849][ T5860] bridge_slave_1: left allmulticast mode
[  205.942866][ T8004] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.946008][ T5860] bridge_slave_1: left promiscuous mode
[  205.951872][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.975892][ T5860] bridge_slave_0: left allmulticast mode
[  205.988580][ T5860] bridge_slave_0: left promiscuous mode
[  205.990573][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.120625][  T974] usb 7-1: new full-speed USB device number 5 using dummy_hcd
[  206.278799][  T974] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  206.283908][  T974] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  206.292953][  T974] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  206.299960][  T974] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.303602][  T974] usb 7-1: Product: syz
[  206.305265][  T974] usb 7-1: Manufacturer: syz
[  206.309538][  T974] usb 7-1: SerialNumber: syz
[  206.332303][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  206.338874][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  206.343021][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  206.374876][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  206.387583][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  206.480319][ T5860] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  206.488421][ T5860] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  206.493074][ T5860] bond0 (unregistering): Released all slaves
[  206.519710][  T974] usb 7-1: 0:2 : does not exist
[  206.525435][  T974] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[  206.537267][  T974] usb 7-1: USB disconnect, device number 5
[  206.769414][T10455] chnl_net:caif_netlink_parms(): no params data found
[  206.799712][ T5860] hsr_slave_0: left promiscuous mode
[  206.802705][ T5860] hsr_slave_1: left promiscuous mode
[  206.805668][ T5860] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  206.809671][ T5860] batman_adv: batadv0: Removing interface: batadv_slave_0
[  206.814046][ T5860] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  206.818076][ T5860] batman_adv: batadv0: Removing interface: batadv_slave_1
[  206.839260][ T5860] veth1_macvtap: left promiscuous mode
[  206.841852][ T5860] veth0_macvtap: left promiscuous mode
[  206.844424][ T5860] veth1_vlan: left promiscuous mode
[  206.847069][ T5860] veth0_vlan: left promiscuous mode
[  207.150458][T10465] netlink: 'syz.6.1772': attribute type 1 has an invalid length.
[  207.154301][T10465] netlink: 'syz.6.1772': attribute type 2 has an invalid length.
[  207.160802][T10465] netlink: 1164 bytes leftover after parsing attributes in process `syz.6.1772'.
[  207.351115][ T5860] team0 (unregistering): Port device team_slave_1 removed
[  207.405872][T10471] loop6: detected capacity change from 0 to 256
[  207.420873][T10471] MINIX-fs: mounting file system with errors, running fsck is recommended
[  207.442619][T10471] MINIX-fs warning: remounting fs with errors, running fsck is recommended
[  207.447202][ T5860] team0 (unregistering): Port device team_slave_0 removed
[  207.462695][T10471] MINIX-fs warning: remounting unchecked fs, running fsck is recommended
[  208.091982][T10455] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.095791][T10455] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.099866][T10455] bridge_slave_0: entered allmulticast mode
[  208.104180][T10455] bridge_slave_0: entered promiscuous mode
[  208.109360][T10455] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.112720][T10455] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.116132][T10455] bridge_slave_1: entered allmulticast mode
[  208.120617][T10455] bridge_slave_1: entered promiscuous mode
[  208.169807][T10455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  208.181769][T10455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  208.243885][T10455] team0: Port device team_slave_0 added
[  208.250869][T10455] team0: Port device team_slave_1 added
[  208.291194][T10455] batman_adv: batadv0: Adding interface: batadv_slave_0
[  208.294283][T10455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  208.309770][T10455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  208.316312][T10455] batman_adv: batadv0: Adding interface: batadv_slave_1
[  208.322125][T10455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  208.336148][T10455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  208.443885][T10455] hsr_slave_0: entered promiscuous mode
[  208.457565][T10455] hsr_slave_1: entered promiscuous mode
[  208.506565][   T55] Bluetooth: hci0: command tx timeout
[  208.678472][T10490] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  208.758259][T10455] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.760563][T10455] bridge0: port 2(bridge_slave_1) entered forwarding state
[  208.763874][T10455] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.766843][T10455] bridge0: port 1(bridge_slave_0) entered forwarding state
[  208.947157][T10455] 8021q: adding VLAN 0 to HW filter on device bond0
[  208.974475][   T90] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.983949][   T90] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.021205][T10455] 8021q: adding VLAN 0 to HW filter on device team0
[  209.060494][   T90] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.063603][   T90] bridge0: port 1(bridge_slave_0) entered forwarding state
[  209.103745][   T90] bridge0: port 2(bridge_slave_1) entered blocking state
[  209.107133][   T90] bridge0: port 2(bridge_slave_1) entered forwarding state
[  209.236495][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  209.730470][T10455] 8021q: adding VLAN 0 to HW filter on device batadv0
[  210.205828][T10455] veth0_vlan: entered promiscuous mode
[  210.235690][T10455] veth1_vlan: entered promiscuous mode
[  210.266318][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  210.277654][T10455] veth0_macvtap: entered promiscuous mode
[  210.289524][T10455] veth1_macvtap: entered promiscuous mode
[  210.314926][T10455] batman_adv: batadv0: Interface activated: batadv_slave_0
[  210.324896][T10455] batman_adv: batadv0: Interface activated: batadv_slave_1
[  210.411718][ T6712] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  210.414473][ T6712] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  210.432017][T10535] loop6: detected capacity change from 0 to 4096
[  210.448808][ T4393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  210.451218][ T4393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  210.479286][T10533] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  210.512946][T10535] ntfs3(loop6): ino=1a, mi_enum_attr
[  210.516113][T10535] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  210.587224][   T55] Bluetooth: hci0: command tx timeout
[  210.806333][   T24] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  210.956651][   T24] usb 8-1: Using ep0 maxpacket: 8
[  210.965907][   T24] usb 8-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  210.970860][   T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.974485][   T24] usb 8-1: Product: syz
[  210.980202][   T24] usb 8-1: Manufacturer: syz
[  210.982111][   T24] usb 8-1: SerialNumber: syz
[  210.987299][   T24] usb 8-1: config 0 descriptor??
[  210.993458][T10542] loop6: detected capacity change from 0 to 256
[  210.998226][   T24] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  211.151541][T10551] bridge1: entered allmulticast mode
[  211.185466][T10553] loop6: detected capacity change from 0 to 1024
[  211.188926][T10553] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  211.193063][T10553] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (49802!=20869)
[  211.197392][T10553] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  211.208033][T10553] EXT4-fs error (device loop6): ext4_get_journal_inode:5796: inode #5: comm syz.6.1803: unexpected bad inode w/o EXT4_IGET_BAD
[  211.213248][T10553] EXT4-fs (loop6): no journal found
[  211.215188][T10553] EXT4-fs (loop6): can't get journal size
[  211.220251][T10553] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  211.247056][ T9770] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  211.315849][T10560] syz.6.1806: attempt to access beyond end of device
[  211.315849][T10560] nbd6: rw=0, sector=2, nr_sectors = 2 limit=0
[  211.321689][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  211.325099][T10560] MINIX-fs: unable to read superblock
[  212.026447][   T24] gspca_sonixj: reg_w1 err -71
[  212.116311][   T24] sonixj 8-1:0.0: probe with driver sonixj failed with error -71
[  212.125162][   T24] usb 8-1: USB disconnect, device number 2
[  212.346092][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  212.676758][   T55] Bluetooth: hci0: command tx timeout
[  212.960147][T10602] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1826'.
[  213.396052][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  213.518209][T10621] loop6: detected capacity change from 0 to 128
[  213.531613][T10621] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  213.579351][ T9770] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  213.876014][  T791] usb 7-1: new full-speed USB device number 6 using dummy_hcd
[  214.040845][  T791] usb 7-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4
[  214.044540][  T791] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.048176][  T791] usb 7-1: Product: syz
[  214.049950][  T791] usb 7-1: Manufacturer: syz
[  214.051870][  T791] usb 7-1: SerialNumber: syz
[  214.056422][  T791] usb 7-1: config 0 descriptor??
[  214.269946][  T791] usb 7-1: USB disconnect, device number 6
[  214.425634][T10647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1846'.
[  214.426459][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  214.433971][T10647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1846'.
[  214.745997][   T55] Bluetooth: hci0: command tx timeout
[  214.860786][T10662] program syz.6.1852 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  214.862818][T10661] loop7: detected capacity change from 0 to 512
[  214.879362][T10661] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.1853: iget: bad extended attribute block 1
[  214.885101][T10661] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.1853: couldn't read orphan inode 15 (err -117)
[  214.895768][T10661] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  214.908164][T10661] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters
[  214.949467][T10455] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.959943][T10667] syz.6.1855: attempt to access beyond end of device
[  214.959943][T10667] loop6: rw=0, sector=64, nr_sectors = 1 limit=0
[  214.966024][T10667] syz.6.1855: attempt to access beyond end of device
[  214.966024][T10667] loop6: rw=0, sector=256, nr_sectors = 1 limit=0
[  214.972060][T10667] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  214.983895][T10667] syz.6.1855: attempt to access beyond end of device
[  214.983895][T10667] loop6: rw=0, sector=512, nr_sectors = 1 limit=0
[  214.989316][T10667] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512
[  214.993020][T10667] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found
[  214.996937][T10667] UDF-fs: Scanning with blocksize 512 failed
[  215.007224][T10667] syz.6.1855: attempt to access beyond end of device
[  215.007224][T10667] loop6: rw=0, sector=64, nr_sectors = 2 limit=0
[  215.012865][T10667] syz.6.1855: attempt to access beyond end of device
[  215.012865][T10667] loop6: rw=0, sector=512, nr_sectors = 2 limit=0
[  215.020283][T10667] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  215.024099][T10667] syz.6.1855: attempt to access beyond end of device
[  215.024099][T10667] loop6: rw=0, sector=1024, nr_sectors = 2 limit=0
[  215.028426][T10667] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512
[  215.031683][T10667] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found
[  215.034419][T10667] UDF-fs: Scanning with blocksize 1024 failed
[  215.038645][T10667] syz.6.1855: attempt to access beyond end of device
[  215.038645][T10667] loop6: rw=0, sector=64, nr_sectors = 4 limit=0
[  215.043620][T10667] syz.6.1855: attempt to access beyond end of device
[  215.043620][T10667] loop6: rw=0, sector=1024, nr_sectors = 4 limit=0
[  215.049284][T10667] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  215.053017][T10667] syz.6.1855: attempt to access beyond end of device
[  215.053017][T10667] loop6: rw=0, sector=2048, nr_sectors = 4 limit=0
[  215.060467][T10667] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512
[  215.064198][T10667] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found
[  215.068842][T10667] UDF-fs: Scanning with blocksize 2048 failed
[  215.078808][T10667] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  215.082635][T10667] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512
[  215.086537][T10667] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found
[  215.089542][T10667] UDF-fs: Scanning with blocksize 4096 failed
[  215.091927][T10667] UDF-fs: warning (device loop6): udf_fill_super: No partition found (1)
[  215.140388][T10676] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1859'.
[  215.201986][T10680] loop7: detected capacity change from 0 to 4096
[  215.205048][T10680] ntfs3(loop7): Different NTFS sector size (2048) and media sector size (512).
[  215.216605][T10680] ntfs3(loop7): ino=b, mi_enum_attr
[  215.218455][T10680] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  215.221291][T10680] ntfs3(loop7): Failed to load $Extend (-22).
[  215.223693][T10680] ntfs3(loop7): Failed to initialize $Extend.
[  215.285881][   T24] IPVS: starting estimator thread 0...
[  215.321074][T10678] loop6: detected capacity change from 0 to 32768
[  215.376303][T10683] IPVS: using max 79 ests per chain, 189600 per kthread
[  215.459982][T10697] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1869'.
[  215.465873][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  215.567948][  T791] usb 8-1: new full-speed USB device number 3 using dummy_hcd
[  216.182881][T10708] 9pnet_fd: Insufficient options for proto=fd
[  216.497346][  T791] usb 8-1: config index 0 descriptor too short (expected 69, got 36)
[  216.500779][  T791] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  216.505515][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  216.508632][  T791] usb 8-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89
[  216.511608][  T791] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.514682][  T791] usb 8-1: Product: syz
[  216.516705][  T791] usb 8-1: Manufacturer: syz
[  216.518343][  T791] usb 8-1: SerialNumber: syz
[  216.521739][  T791] usb 8-1: config 0 descriptor??
[  216.527365][  T791] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622
[  216.731606][  T791] gspca_pac7302: reg_w() failed i: ff v: 01 error -71
[  216.734032][  T791] gspca_pac7302 8-1:0.0: probe with driver gspca_pac7302 failed with error -71
[  216.738412][  T791] usb 8-1: USB disconnect, device number 3
[  216.797344][    T9] usb 7-1: new low-speed USB device number 7 using dummy_hcd
[  216.957268][    T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  216.961577][    T9] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  216.968942][    T9] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  216.972902][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.981501][    T9] usb 7-1: config 0 descriptor??
[  217.197468][ T5903] usb 7-1: USB disconnect, device number 7
[  217.555601][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  218.115514][ T5903] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  218.278779][T10760] bridge_slave_0: left allmulticast mode
[  218.281021][T10760] bridge_slave_0: left promiscuous mode
[  218.283120][T10760] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.288688][T10760] bridge_slave_1: left allmulticast mode
[  218.291011][T10760] bridge_slave_1: left promiscuous mode
[  218.293628][T10760] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.301002][T10760] bond0: (slave bond_slave_0): Releasing backup interface
[  218.309396][ T5903] usb 7-1: config 0 has an invalid interface number: 73 but max is 0
[  218.309703][T10760] bond0: (slave bond_slave_1): Releasing backup interface
[  218.312694][ T5903] usb 7-1: config 0 has no interface number 0
[  218.314860][ T5903] usb 7-1: New USB device found, idVendor=06f8, idProduct=300c, bcdDevice=39.64
[  218.321501][ T5903] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.324077][ T5903] usb 7-1: Product: syz
[  218.325923][ T5903] usb 7-1: Manufacturer: syz
[  218.327707][ T5903] usb 7-1: SerialNumber: syz
[  218.330930][T10760] team0: Port device team_slave_0 removed
[  218.331159][ T5903] usb 7-1: config 0 descriptor??
[  218.339154][T10760] team0: Port device team_slave_1 removed
[  218.341984][T10760] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  218.345000][T10760] batman_adv: batadv0: Removing interface: batadv_slave_0
[  218.349791][T10760] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  218.352737][T10760] batman_adv: batadv0: Removing interface: batadv_slave_1
[  218.542638][ T5903] usb 7-1: Found UVC 0.00 device syz (06f8:300c)
[  218.550235][ T5903] usb 7-1: No valid video chain found.
[  218.580077][T10770] loop7: detected capacity change from 0 to 4096
[  218.585261][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  218.593731][T10770] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  218.631305][T10455] EXT4-fs error (device loop7): ext4_readdir:264: inode #12: block 80: comm syz-executor: path /25/bus/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0
[  218.742145][T10455] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.752910][  T791] usb 7-1: USB disconnect, device number 8
[  219.123324][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  219.131880][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  219.146038][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  219.153542][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  219.157552][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  219.338987][   T13] bond0 (unregistering): Released all slaves
[  219.352502][T10785] netlink: 34 bytes leftover after parsing attributes in process `syz.1.1907'.
[  219.559191][T10795] random: crng reseeded on system resumption
[  219.625323][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  219.851840][   T13] hsr_slave_0: left promiscuous mode
[  219.859267][   T13] hsr_slave_1: left promiscuous mode
[  219.898934][   T13] veth1_macvtap: left promiscuous mode
[  219.904714][   T13] veth0_macvtap: left promiscuous mode
[  219.910057][   T13] veth1_vlan: left promiscuous mode
[  219.912541][   T13] veth0_vlan: left promiscuous mode
[  220.452138][T10807] loop6: detected capacity change from 0 to 128
[  220.456873][T10807] FAT-fs (loop6): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  220.667702][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  221.129434][T10776] chnl_net:caif_netlink_parms(): no params data found
[  221.308937][   T55] Bluetooth: hci0: command tx timeout
[  221.328328][T10776] bridge0: port 1(bridge_slave_0) entered blocking state
[  221.331561][T10776] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.334723][T10776] bridge_slave_0: entered allmulticast mode
[  221.337057][T10822] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  221.339380][T10776] bridge_slave_0: entered promiscuous mode
[  221.344733][T10776] bridge0: port 2(bridge_slave_1) entered blocking state
[  221.348087][T10776] bridge0: port 2(bridge_slave_1) entered disabled state
[  221.351123][T10776] bridge_slave_1: entered allmulticast mode
[  221.355312][T10776] bridge_slave_1: entered promiscuous mode
[  221.389262][T10776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  221.396289][T10776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  221.431225][T10776] team0: Port device team_slave_0 added
[  221.438596][   T13] IPVS: stop unused estimator thread 0...
[  221.438620][T10776] team0: Port device team_slave_1 added
[  221.472158][T10776] batman_adv: batadv0: Adding interface: batadv_slave_0
[  221.477588][T10776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  221.488736][T10776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  221.495394][T10776] batman_adv: batadv0: Adding interface: batadv_slave_1
[  221.498393][T10776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  221.512078][T10776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  221.516907][  T791] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  221.564303][T10776] hsr_slave_0: entered promiscuous mode
[  221.570127][T10776] hsr_slave_1: entered promiscuous mode
[  221.666998][  T791] usb 7-1: Using ep0 maxpacket: 16
[  221.673071][  T791] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  221.684461][  T791] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  221.693872][  T791] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.705026][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  221.717220][  T791] usb 7-1: config 0 descriptor??
[  221.754260][T10776] bridge0: port 2(bridge_slave_1) entered blocking state
[  221.757454][T10776] bridge0: port 2(bridge_slave_1) entered forwarding state
[  221.760714][T10776] bridge0: port 1(bridge_slave_0) entered blocking state
[  221.763802][T10776] bridge0: port 1(bridge_slave_0) entered forwarding state
[  221.827442][T10776] 8021q: adding VLAN 0 to HW filter on device bond0
[  221.840630][   T90] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.848093][   T90] bridge0: port 2(bridge_slave_1) entered disabled state
[  221.863415][T10776] 8021q: adding VLAN 0 to HW filter on device team0
[  221.876307][   T90] bridge0: port 1(bridge_slave_0) entered blocking state
[  221.879536][   T90] bridge0: port 1(bridge_slave_0) entered forwarding state
[  221.888966][   T90] bridge0: port 2(bridge_slave_1) entered blocking state
[  221.892023][   T90] bridge0: port 2(bridge_slave_1) entered forwarding state
[  222.089353][T10776] 8021q: adding VLAN 0 to HW filter on device batadv0
[  222.137652][  T791] mcp2221 0003:04D8:00DD.0013: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0
[  222.347965][T10776] veth0_vlan: entered promiscuous mode
[  222.367787][T10776] veth1_vlan: entered promiscuous mode
[  222.413450][T10776] veth0_macvtap: entered promiscuous mode
[  222.433211][T10776] veth1_macvtap: entered promiscuous mode
[  222.459154][T10776] batman_adv: batadv0: Interface activated: batadv_slave_0
[  222.474247][T10776] batman_adv: batadv0: Interface activated: batadv_slave_1
[  222.553205][ T5903] usb 7-1: USB disconnect, device number 9
[  222.618383][   T90] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  222.621815][   T90] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  222.653402][   T90] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  222.661328][   T90] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  222.744824][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  223.120446][T10874] loop8: detected capacity change from 0 to 1024
[  223.167627][T10874] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  223.384881][   T55] Bluetooth: hci0: command tx timeout
[  223.456629][T10882] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1938'.
[  223.507872][T10883] 8021q: adding VLAN 0 to HW filter on device 
[  223.512278][T10883] 8021q: adding VLAN 0 to HW filter on device team0
[  223.517655][T10883] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  223.700135][T10898] Device name cannot be null; rc = [-22]
[  223.740327][T10900] 9pnet_fd: Insufficient options for proto=fd
[  223.745083][  T791] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  223.784879][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  223.816588][ T5903] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  223.918276][  T791] usb 9-1: config 0 interface 0 has no altsetting 0
[  223.920855][  T791] usb 9-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  223.926086][  T791] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.931308][  T791] usb 9-1: config 0 descriptor??
[  223.972233][ T5903] usb 7-1: New USB device found, idVendor=0e41, idProduct=4156, bcdDevice=3b.70
[  223.980239][ T5903] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.986288][ T5903] usb 7-1: config 0 descriptor??
[  224.002023][T10917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  224.015166][T10917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  224.198788][ T5903] usb 7-1: USB disconnect, device number 10
[  224.545742][  T791] video4linux radio48: keene_cmd_set failed (-71)
[  224.548844][  T791] radio-keene 9-1:0.0: V4L2 device registered as radio48
[  224.553702][  T791] usb 9-1: USB disconnect, device number 2
[  224.824569][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  225.174614][  T791] usb 7-1: new full-speed USB device number 11 using dummy_hcd
[  225.229374][T10949] loop8: detected capacity change from 0 to 32768
[  225.232536][T10949] btrfs: Deprecated parameter 'usebackuproot'
[  225.234904][T10949] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  225.239093][T10949] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.1970 (10949)
[  225.245782][T10949] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  225.249705][T10949] BTRFS info (device loop8): using crc32c (crc32c-lib) checksum algorithm
[  225.252605][T10949] BTRFS info (device loop8): disk space caching is enabled
[  225.255610][T10949] BTRFS warning (device loop8): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  225.348994][  T791] usb 7-1: config 0 has an invalid interface number: 128 but max is 0
[  225.350253][T10776] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  225.356837][  T791] usb 7-1: config 0 has no interface number 0
[  225.365796][  T791] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  225.369668][  T791] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.372966][  T791] usb 7-1: Product: syz
[  225.375720][  T791] usb 7-1: Manufacturer: syz
[  225.380144][  T791] usb 7-1: SerialNumber: syz
[  225.392331][  T791] usb 7-1: config 0 descriptor??
[  225.467017][   T55] Bluetooth: hci0: command tx timeout
[  225.805846][  T791] usb 7-1: Firmware: major: 12, minor: 32, hardware type: UNKNOWN (133)
[  225.864539][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  226.007499][  T791] usb 7-1: no permanent extended address found, random address set
[  226.010830][  T791] usb 7-1: atusb_probe: initialization failed, error = -524
[  226.014725][  T791] atusb 7-1:0.128: probe with driver atusb failed with error -524
[  226.226605][ T5903] usb 7-1: USB disconnect, device number 11
[  226.594575][   T33] audit: type=1326 audit(2802.473:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11014 comm="syz.1.1994" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5f2e58ebe9 code=0x0
[  226.721246][T11020] loop8: detected capacity change from 0 to 4096
[  226.725822][T11020] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512).
[  226.782577][T11020] ntfs3(loop8): Inode r=19 is not in use!
[  226.795108][T11020] ntfs3(loop8): Mark volume as dirty due to NTFS errors
[  226.802963][T11020] ntfs3(loop8): Failed to initialize $Extend/$Reparse.
[  226.907589][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  227.171003][T11022] loop6: detected capacity change from 0 to 32768
[  227.178952][T11022] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1997 (11022)
[  227.187976][T11022] BTRFS info (device loop6): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  227.192233][T11022] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm
[  227.206192][T11022] BTRFS info (device loop6): using free-space-tree
[  227.355474][ T9770] BTRFS info (device loop6): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  227.546337][   T55] Bluetooth: hci0: command tx timeout
[  227.948068][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  227.975765][T11062] netlink: 3 bytes leftover after parsing attributes in process `syz.6.2009'.
[  227.990323][T11062] netlink: 3 bytes leftover after parsing attributes in process `syz.6.2009'.
[  228.004673][T11062] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  228.331384][T11076] loop6: detected capacity change from 0 to 4096
[  228.549291][T11081] loop6: detected capacity change from 0 to 4096
[  228.552756][T11081] ntfs3: Unknown parameter 'nohide_dot_files'
[  228.796947][T11064] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  228.799211][T11064] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  228.892392][T11064] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  228.902590][T11064] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  228.994783][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  229.004331][T11064] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  229.013225][T11064] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  229.468954][T11099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2023'.
[  230.024882][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  230.262154][T11118] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2031'.
[  230.266481][T11118] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2031'.
[  230.590185][T11122] loop8: detected capacity change from 0 to 512
[  230.600222][T11122] EXT4-fs: Ignoring removed bh option
[  230.608976][T11122] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended
[  230.629121][T11122] EXT4-fs (loop8): orphan cleanup on readonly fs
[  230.632022][T11122] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #3: comm syz.8.2032: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0)
[  230.642256][T11122] EXT4-fs error (device loop8): ext4_quota_enable:7127: comm syz.8.2032: Bad quota inode: 3, type: 0
[  230.649005][T11122] EXT4-fs warning (device loop8): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  230.678725][T11122] EXT4-fs (loop8): Cannot turn on quotas: error -117
[  230.684903][T11122] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  230.718948][T10776] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.838510][T11133] loop8: detected capacity change from 0 to 128
[  231.073627][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  231.868366][T11145] netlink: 'syz.1.2043': attribute type 4 has an invalid length.
[  232.113704][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  232.744031][    T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  232.909082][    T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  232.933980][    T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  232.941668][    T9] usb 9-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x18, changing to 0x8
[  232.957991][    T9] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x8 has an invalid bInterval 0, changing to 7
[  232.968221][    T9] usb 9-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  232.976912][    T9] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  232.981117][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.997034][    T9] usb 9-1: Product: syz
[  233.003702][    T9] usb 9-1: Manufacturer: syz
[  233.005576][    T9] usb 9-1: SerialNumber: syz
[  233.145490][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  234.097111][    T9] cdc_mbim 9-1:1.0: bind() failure
[  234.112047][    T9] cdc_ncm 9-1:1.1: probe with driver cdc_ncm failed with error -71
[  234.119309][    T9] cdc_mbim 9-1:1.1: probe with driver cdc_mbim failed with error -71
[  234.126482][    T9] usbtest 9-1:1.1: probe with driver usbtest failed with error -71
[  234.150451][    T9] usb 9-1: USB disconnect, device number 3
[  234.187862][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  234.188881][T11191] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2064'.
[  234.216654][ T5693] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  234.220692][T11191] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2064'.
[  234.226385][ T5693] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  234.229920][ T5693] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  234.246746][ T5693] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  234.298293][T11193] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  234.609386][T11180] loop6: detected capacity change from 0 to 40427
[  234.625632][T11180] F2FS-fs (loop6): invalid crc value
[  234.722719][T11180] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  234.733929][T11180] F2FS-fs (loop6): Start checkpoint disabled!
[  234.780652][T11180] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  234.874121][ T1099] bio_check_eod: 3 callbacks suppressed
[  234.874136][ T1099] kworker/u9:9: attempt to access beyond end of device
[  234.874136][ T1099] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  234.889251][ T1099] CPU: 0 UID: 0 PID: 1099 Comm: kworker/u9:9 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  234.889270][ T1099] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  234.889279][ T1099] Workqueue: writeback wb_workfn (flush-7:6)
[  234.889301][ T1099] Call Trace:
[  234.889308][ T1099]  <TASK>
[  234.889313][ T1099]  dump_stack_lvl+0x189/0x250
[  234.889334][ T1099]  ? __pfx_dump_stack_lvl+0x10/0x10
[  234.889374][ T1099]  ? __pfx_queue_work_on+0x10/0x10
[  234.889387][ T1099]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  234.889404][ T1099]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  234.889430][ T1099]  f2fs_handle_critical_error+0x37c/0x540
[  234.889455][ T1099]  f2fs_write_end_io+0x886/0xb60
[  234.889481][ T1099]  __submit_merged_bio+0x27a/0x6a0
[  234.889498][ T1099]  ? up_write+0x1c4/0x420
[  234.889517][ T1099]  __submit_merged_write_cond+0x44c/0x530
[  234.889541][ T1099]  f2fs_sync_node_pages+0x1479/0x15e0
[  234.889576][ T1099]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  234.889592][ T1099]  ? __percpu_counter_sum+0x1c2/0x1e0
[  234.889633][ T1099]  ? do_raw_spin_lock+0x121/0x290
[  234.889651][ T1099]  ? rcu_is_watching+0x15/0xb0
[  234.889664][ T1099]  ? blk_start_plug+0x52/0x1b0
[  234.889683][ T1099]  f2fs_write_node_pages+0x303/0x6e0
[  234.889706][ T1099]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  234.889735][ T1099]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  234.889752][ T1099]  do_writepages+0x32e/0x550
[  234.889774][ T1099]  ? reacquire_held_locks+0x127/0x1d0
[  234.889786][ T1099]  ? writeback_sb_inodes+0x384/0x1010
[  234.889811][ T1099]  __writeback_single_inode+0x145/0xff0
[  234.889828][ T1099]  ? do_raw_spin_unlock+0x4d/0x240
[  234.889847][ T1099]  writeback_sb_inodes+0x6c7/0x1010
[  234.889884][ T1099]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  234.889938][ T1099]  ? rcu_is_watching+0x15/0xb0
[  234.889959][ T1099]  wb_writeback+0x43b/0xaf0
[  234.889983][ T1099]  ? queue_io+0x321/0x590
[  234.890002][ T1099]  ? __pfx_wb_writeback+0x10/0x10
[  234.890025][ T1099]  ? _raw_spin_unlock_irq+0x23/0x50
[  234.890047][ T1099]  wb_workfn+0x409/0xef0
[  234.890081][ T1099]  ? __pfx_wb_workfn+0x10/0x10
[  234.890099][ T1099]  ? __lock_acquire+0xab9/0xd20
[  234.890126][ T1099]  ? process_scheduled_works+0x9ef/0x17b0
[  234.890145][ T1099]  ? _raw_spin_unlock_irq+0x23/0x50
[  234.890159][ T1099]  ? process_scheduled_works+0x9ef/0x17b0
[  234.890170][ T1099]  ? process_scheduled_works+0x9ef/0x17b0
[  234.890185][ T1099]  process_scheduled_works+0xae1/0x17b0
[  234.890223][ T1099]  ? __pfx_process_scheduled_works+0x10/0x10
[  234.890251][ T1099]  worker_thread+0x8a0/0xda0
[  234.890267][ T1099]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  234.890290][ T1099]  ? __kthread_parkme+0x7b/0x200
[  234.890314][ T1099]  kthread+0x711/0x8a0
[  234.890332][ T1099]  ? __pfx_worker_thread+0x10/0x10
[  234.890370][ T1099]  ? __pfx_kthread+0x10/0x10
[  234.890387][ T1099]  ? _raw_spin_unlock_irq+0x23/0x50
[  234.890400][ T1099]  ? lockdep_hardirqs_on+0x9c/0x150
[  234.890416][ T1099]  ? __pfx_kthread+0x10/0x10
[  234.890432][ T1099]  ret_from_fork+0x3fc/0x770
[  234.890449][ T1099]  ? __pfx_ret_from_fork+0x10/0x10
[  234.890468][ T1099]  ? __switch_to_asm+0x39/0x70
[  234.890483][ T1099]  ? __switch_to_asm+0x33/0x70
[  234.890497][ T1099]  ? __pfx_kthread+0x10/0x10
[  234.890514][ T1099]  ret_from_fork_asm+0x1a/0x30
[  234.890545][ T1099]  </TASK>
[  234.890551][ T1099] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  235.035277][ T1099] CPU: 0 UID: 0 PID: 1099 Comm: kworker/u9:9 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  235.035297][ T1099] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  235.035306][ T1099] Workqueue: writeback wb_workfn (flush-7:6)
[  235.035326][ T1099] Call Trace:
[  235.035331][ T1099]  <TASK>
[  235.035365][ T1099]  dump_stack_lvl+0x189/0x250
[  235.035385][ T1099]  ? __pfx_dump_stack_lvl+0x10/0x10
[  235.035400][ T1099]  ? __pfx_queue_work_on+0x10/0x10
[  235.035412][ T1099]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  235.035427][ T1099]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  235.035452][ T1099]  f2fs_handle_critical_error+0x37c/0x540
[  235.035475][ T1099]  f2fs_write_end_io+0x886/0xb60
[  235.035501][ T1099]  __submit_merged_bio+0x27a/0x6a0
[  235.035516][ T1099]  ? up_write+0x1c4/0x420
[  235.035533][ T1099]  __submit_merged_write_cond+0x44c/0x530
[  235.035556][ T1099]  f2fs_sync_node_pages+0x1479/0x15e0
[  235.035587][ T1099]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  235.035603][ T1099]  ? __percpu_counter_sum+0x1c2/0x1e0
[  235.035639][ T1099]  ? do_raw_spin_lock+0x121/0x290
[  235.035657][ T1099]  ? rcu_is_watching+0x15/0xb0
[  235.035669][ T1099]  ? blk_start_plug+0x52/0x1b0
[  235.035688][ T1099]  f2fs_write_node_pages+0x303/0x6e0
[  235.035709][ T1099]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  235.035735][ T1099]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  235.035752][ T1099]  do_writepages+0x32e/0x550
[  235.035772][ T1099]  ? reacquire_held_locks+0x127/0x1d0
[  235.035785][ T1099]  ? writeback_sb_inodes+0x384/0x1010
[  235.035806][ T1099]  __writeback_single_inode+0x145/0xff0
[  235.035823][ T1099]  ? do_raw_spin_unlock+0x4d/0x240
[  235.035840][ T1099]  writeback_sb_inodes+0x6c7/0x1010
[  235.035876][ T1099]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  235.035924][ T1099]  ? rcu_is_watching+0x15/0xb0
[  235.035944][ T1099]  wb_writeback+0x43b/0xaf0
[  235.035965][ T1099]  ? queue_io+0x321/0x590
[  235.035983][ T1099]  ? __pfx_wb_writeback+0x10/0x10
[  235.036005][ T1099]  ? _raw_spin_unlock_irq+0x23/0x50
[  235.036024][ T1099]  wb_workfn+0x409/0xef0
[  235.036049][ T1099]  ? __pfx_wb_workfn+0x10/0x10
[  235.036073][ T1099]  ? __lock_acquire+0xab9/0xd20
[  235.036099][ T1099]  ? process_scheduled_works+0x9ef/0x17b0
[  235.036116][ T1099]  ? _raw_spin_unlock_irq+0x23/0x50
[  235.036128][ T1099]  ? process_scheduled_works+0x9ef/0x17b0
[  235.036140][ T1099]  ? process_scheduled_works+0x9ef/0x17b0
[  235.036152][ T1099]  process_scheduled_works+0xae1/0x17b0
[  235.036187][ T1099]  ? __pfx_process_scheduled_works+0x10/0x10
[  235.036214][ T1099]  worker_thread+0x8a0/0xda0
[  235.036229][ T1099]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  235.036250][ T1099]  ? __kthread_parkme+0x7b/0x200
[  235.036277][ T1099]  kthread+0x711/0x8a0
[  235.036295][ T1099]  ? __pfx_worker_thread+0x10/0x10
[  235.036306][ T1099]  ? __pfx_kthread+0x10/0x10
[  235.036323][ T1099]  ? _raw_spin_unlock_irq+0x23/0x50
[  235.036358][ T1099]  ? lockdep_hardirqs_on+0x9c/0x150
[  235.036375][ T1099]  ? __pfx_kthread+0x10/0x10
[  235.036389][ T1099]  ret_from_fork+0x3fc/0x770
[  235.036406][ T1099]  ? __pfx_ret_from_fork+0x10/0x10
[  235.036422][ T1099]  ? __switch_to_asm+0x39/0x70
[  235.036437][ T1099]  ? __switch_to_asm+0x33/0x70
[  235.036449][ T1099]  ? __pfx_kthread+0x10/0x10
[  235.036465][ T1099]  ret_from_fork_asm+0x1a/0x30
[  235.036493][ T1099]  </TASK>
[  235.036498][ T1099] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  235.226966][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  235.249639][T11221] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2078'.
[  235.252696][T11221] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2078'.
[  236.269656][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  237.311948][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  238.348235][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  239.384549][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  240.424763][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  241.464699][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  241.642355][ T5284] sched: DL replenish lagged too much
[  242.509942][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  243.548443][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  244.583906][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  245.625049][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  246.663576][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  247.708060][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  248.742598][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  249.789985][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  250.823776][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  251.864478][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  252.903993][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  253.949281][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  254.984544][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  255.675192][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  256.023426][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  257.073798][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  258.109808][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  259.148734][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  260.188288][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  261.226611][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  262.266305][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  263.311141][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  264.341674][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  265.384669][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  266.421827][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  267.467360][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  268.503825][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  269.543001][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  270.582706][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  271.622154][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  272.660567][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  273.698874][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  274.747898][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  275.782738][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  276.828374][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  277.862379][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  278.908687][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  279.944288][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  280.981127][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  282.020014][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  283.058063][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  284.099669][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  285.141332][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  286.184256][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  287.225428][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  288.264074][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  289.298164][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  290.340540][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  291.377888][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  292.426743][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  293.463872][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  294.502570][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  295.545816][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  296.586570][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  297.617499][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  298.659129][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  299.697363][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  300.742259][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  301.780774][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  302.818241][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  303.860141][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  304.895500][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  305.942035][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  306.976447][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  308.022434][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  309.056908][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  310.104514][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  311.138671][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  312.179848][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  313.222575][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  314.259839][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  315.295306][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  316.333774][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  316.818023][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  317.376571][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  317.788871][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  318.415895][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  319.458636][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  320.494545][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  321.541451][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  322.583206][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  323.615801][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  324.659212][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  325.695575][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  326.736419][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  327.777458][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  328.815247][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  329.862835][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  330.902614][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  331.935106][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  332.976440][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  334.012412][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  335.058333][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  336.091912][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  337.138491][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  338.174582][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  339.221849][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  340.256985][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  341.294072][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  342.330889][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  343.370635][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  344.414143][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  345.450553][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  346.495004][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  347.532245][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  348.579994][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  349.612256][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  350.656939][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  351.691056][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  352.731427][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  353.776955][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  353.907319][T11235] syz-executor: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  354.150765][T11235] CPU: 1 UID: 0 PID: 11235 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  354.150780][T11235] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  354.150785][T11235] Call Trace:
[  354.150789][T11235]  <TASK>
[  354.150793][T11235]  dump_stack_lvl+0x189/0x250
[  354.150808][T11235]  ? __pfx_dump_stack_lvl+0x10/0x10
[  354.150816][T11235]  ? __pfx__printk+0x10/0x10
[  354.150829][T11235]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  354.150838][T11235]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  354.150864][T11235]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  354.150874][T11235]  warn_alloc+0x214/0x310
[  354.150887][T11235]  ? __pfx_warn_alloc+0x10/0x10
[  354.150901][T11235]  ? __get_vm_area_node+0x28f/0x300
[  354.150911][T11235]  ? kcov_ioctl+0x55/0x640
[  354.150923][T11235]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  354.150944][T11235]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  354.150957][T11235]  ? __pfx_kcov_ioctl+0x10/0x10
[  354.150966][T11235]  vmalloc_user_noprof+0xad/0xf0
[  354.150976][T11235]  ? kcov_ioctl+0x55/0x640
[  354.150985][T11235]  kcov_ioctl+0x55/0x640
[  354.150995][T11235]  ? bpf_lsm_file_ioctl+0x9/0x20
[  354.151004][T11235]  ? __pfx_kcov_ioctl+0x10/0x10
[  354.151014][T11235]  __se_sys_ioctl+0xfc/0x170
[  354.151024][T11235]  do_syscall_64+0xfa/0x3b0
[  354.151036][T11235]  ? lockdep_hardirqs_on+0x9c/0x150
[  354.151045][T11235]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.151052][T11235]  ? exc_page_fault+0x9f/0xf0
[  354.151093][T11235]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.151104][T11235] RIP: 0033:0x7f47c4b8e7eb
[  354.151115][T11235] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  354.151126][T11235] RSP: 002b:00007ffdadf01740 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  354.151139][T11235] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007f47c4b8e7eb
[  354.151147][T11235] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000d9
[  354.151154][T11235] RBP: 00007f47c4db6128 R08: 00000000000000d8 R09: 0000000000000000
[  354.151161][T11235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  354.151169][T11235] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  354.151186][T11235]  </TASK>
[  354.809767][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  355.853540][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  356.450912][T11235] Mem-Info:
[  356.452332][T11235] active_anon:4775 inactive_anon:0 isolated_anon:0
[  356.452332][T11235]  active_file:13361 inactive_file:38278 isolated_file:478
[  356.452332][T11235]  unevictable:1768 dirty:30 writeback:0
[  356.452332][T11235]  slab_reclaimable:5568 slab_unreclaimable:259539
[  356.452332][T11235]  mapped:3842 shmem:3153 pagetables:667
[  356.452332][T11235]  sec_pagetables:0 bounce:0
[  356.452332][T11235]  kernel_misc_reclaimable:0
[  356.452332][T11235]  free:114029 free_pcp:20167 free_cma:0
[  356.893653][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  357.929388][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  358.972607][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  360.012021][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  361.050595][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  361.837745][T11235] Node 0 active_anon:11132kB inactive_anon:0kB active_file:52220kB inactive_file:119040kB unevictable:3536kB isolated(anon):0kB isolated(file):1920kB mapped:12504kB dirty:88kB writeback:0kB shmem:7164kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8132kB pagetables:1784kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  362.091725][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  362.187341][T11235] Node 1 active_anon:7976kB inactive_anon:0kB active_file:1224kB inactive_file:34092kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:2864kB dirty:32kB writeback:0kB shmem:5448kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3920kB pagetables:876kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  363.132826][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  364.177722][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  364.341095][T11235] Node 0 DMA free:4032kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:420kB local_pcp:300kB free_cma:0kB
[  365.134586][T11235] lowmem_reserve[]: 0 811 811 811 811
[  365.136901][T11235] Node 0 DMA32 free:52240kB boost:10240kB min:43900kB low:52312kB high:60724kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11132kB inactive_anon:0kB active_file:52220kB inactive_file:120148kB unevictable:3536kB writepending:88kB present:1556484kB managed:830956kB mlocked:0kB bounce:0kB free_pcp:30616kB local_pcp:14160kB free_cma:0kB
[  365.219461][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  366.258039][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  367.292502][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  368.333432][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  368.536446][T11235] lowmem_reserve[]: 0 0 0 0 0
[  368.548247][T11235] Node 1 DMA32 free:224468kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:580kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:4540kB local_pcp:3960kB free_cma:0kB
[  369.373043][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  370.310653][T11235] lowmem_reserve[]: 0 0 854 854 854
[  370.312878][T11235] Node 1 Normal free:45720kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8368kB inactive_anon:0kB active_file:1224kB inactive_file:34080kB unevictable:1912kB writepending:24kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:27596kB local_pcp:13796kB free_cma:0kB
[  370.412560][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  371.448063][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  372.488547][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  373.527208][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  374.539277][T11235] lowmem_reserve[]: 0 0 0 0 0
[  374.540911][T11235] Node 0 DMA: 2*4kB (U) 8*8kB (U) 0*16kB 0*32kB 2*64kB (U) 0*128kB 1*256kB (U) 1*512kB (U) 1*1024kB (U) 1*2048kB (M) 0*4096kB = 4040kB
[  374.545285][T11235] Node 0 DMA32: 164*4kB (UME) 96*8kB (UME) 89*16kB (UME) 51*32kB (UME) 87*64kB (UME) 88*128kB (UME) 31*256kB (UME) 15*512kB (UM) 5*1024kB (M) 3*2048kB (M) 1*4096kB (M) = 52288kB
[  374.587060][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  375.607560][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  375.728181][T11235] Node 1 DMA32: 1*4kB (U) 1*8kB (M) 1*16kB (U) 1*32kB (M) 1*64kB (M) 2*128kB (UM) 25*256kB (UM) 67*512kB (UM) 26*1024kB (UM) 5*2048kB (UM) 10*4096kB (M) = 118908kB
[  375.735643][T11235] Node 1 Normal: 53*4kB (UE) 234*8kB (ME) 172*16kB (ME) 109*32kB (ME) 72*64kB (UME) 41*128kB (UME) 31*256kB (UME) 22*512kB (ME) 6*1024kB (UM) 1*2048kB (U) 0*4096kB = 45572kB
[  376.653909][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  377.691208][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  378.416684][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  378.732822][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  379.770728][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  380.807246][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  381.847189][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  382.318679][T11235] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  382.336986][T11235] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  382.340750][T11235] 53327 total pagecache pages
[  382.342744][T11235] 0 pages in swap cache
[  382.344479][T11235] Free swap  = 124996kB
[  382.638393][T11235] Total swap = 124996kB
[  382.640099][T11235] 786301 pages RAM
[  382.641623][T11235] 0 pages HighMem/MovableOnly
[  382.643471][T11235] 241330 pages reserved
[  382.645264][T11235] 0 pages cma reserved
[  382.896083][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  383.930724][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  384.970450][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  386.006598][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  387.054381][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  388.090556][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  389.135834][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  390.171255][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  391.211618][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  392.252824][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  393.284916][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  394.326221][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  395.368425][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  396.414587][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  397.454502][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  398.486128][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  399.527143][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  400.564144][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  401.613953][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  402.655929][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  403.691849][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  404.728451][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  405.776261][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  406.813463][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  407.847107][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  408.884996][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  409.923373][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  410.970526][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  412.012769][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  413.047878][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  414.083374][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  415.130900][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  416.164559][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  417.212281][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  418.247656][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  419.294011][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  420.326030][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  421.361966][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  422.403696][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  423.442980][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  424.484394][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  425.530674][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  426.561114][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  427.605137][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  428.644206][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  429.685994][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  430.724480][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  431.760819][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  432.810434][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  433.845730][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  434.886891][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  435.920994][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  436.966145][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  438.007202][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  439.043765][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  440.083628][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  440.997814][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  441.124051][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  442.160889][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  443.200645][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  444.242382][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  445.285694][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  446.324627][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  447.358827][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  448.400714][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  449.458552][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  450.486667][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  451.518293][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  452.564716][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  453.601315][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  454.647025][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  455.687854][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  456.720673][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  457.762753][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  458.803506][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  459.138193][   T34] INFO: task syz.6.1743:10404 blocked for more than 143 seconds.
[  459.140794][   T34]       Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0
[  459.153823][   T34]       Blocked by coredump.
[  459.155601][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  459.842790][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  460.806255][   T34] task:syz.6.1743      state:D stack:26888 pid:10404 tgid:10404 ppid:9770   task_flags:0x40044c flags:0x00004006
[  460.821034][   T34] Call Trace:
[  460.822451][   T34]  <TASK>
[  460.823763][   T34]  __schedule+0x1798/0x4cc0
[  460.825708][   T34]  ? stack_trace_save+0x9c/0xe0
[  460.883723][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  461.872926][   T34]  ? __lock_acquire+0xab9/0xd20
[  461.874669][   T34]  ? __lock_acquire+0xab9/0xd20
[  461.923595][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  462.922564][   T34]  ? __pfx___schedule+0x10/0x10
[  462.924460][   T34]  ? schedule+0x91/0x360
[  462.926078][   T34]  schedule+0x165/0x360
[  462.940956][   T34]  schedule_preempt_disabled+0x13/0x30
[  462.942723][   T34]  __mutex_lock+0x7e6/0x1360
[  462.944292][   T34]  ? __mutex_lock+0x5b6/0x1360
[  462.945925][   T34]  ? tun_chr_close+0x3e/0x1c0
[  462.958189][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  463.997837][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  464.273209][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  464.275262][   T34]  ? __pfx_tun_chr_close+0x10/0x10
[  464.291457][   T34]  tun_chr_close+0x3e/0x1c0
[  464.293174][   T34]  __fput+0x44c/0xa70
[  464.294714][   T34]  task_work_run+0x1d4/0x260
[  464.296416][   T34]  ? __pfx_task_work_run+0x10/0x10
[  465.037489][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  466.078384][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  466.622214][   T34]  ? kmem_cache_free+0x18f/0x400
[  466.633744][   T34]  do_exit+0x6b5/0x2300
[  466.635466][   T34]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  466.646888][   T34]  ? do_raw_spin_lock+0x121/0x290
[  466.649032][   T34]  ? __pfx_do_exit+0x10/0x10
[  466.650921][   T34]  do_group_exit+0x21c/0x2d0
[  466.652777][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  466.654881][   T34]  get_signal+0x1286/0x1340
[  467.122793][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  468.159601][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available

VM DIAGNOSIS:
18:24:09  Registers:
info registers vcpu 0

CPU#0
RAX=0000000080000101 RBX=ffffffff99d35690 RCX=ffffffff99ab9303 RDX=0000000000000000
RSI=ffffffff8be333e0 RDI=0000000000000001 RBP=ffffc90000007b18 RSP=ffffc90000007a60
R8 =ffffffff8fa37e37 R9 =1ffffffff1f46fc6 R10=dffffc0000000000 R11=fffffbfff1f46fc7
R12=dffffc0000000000 R13=ffff8880498a70b8 R14=0000000000000a06 R15=dffffc0000000000
RIP=ffffffff818ffb3b RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fcdcbc51934 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffff9200003bf01 RBX=0000000000000010 RCX=ffffffff8172cd88 RDX=0000000000000001
RSI=0000000000000010 RDI=ffffc900001dfdb8 RBP=0000000000000000 RSP=ffffc900001dfc58
R8 =ffffc900001dfdc7 R9 =1ffff9200003bfb8 R10=dffffc0000000000 R11=fffff5200003bfb9
R12=ffffc9000068fe80 R13=ffffc900001dfdb8 R14=fffff5200003bfb9 R15=1ffff9200003bfb7
RIP=ffffffff822302c8 RFL=00000256 [---ZAP-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fcdceb4aff8 CR3=00000001320ba000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffff0000
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
