last executing test programs:

9m12.200924854s ago: executing program 32 (id=183):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000200)={0x11, 0x10, 0xfa00, {0x0}}, 0x18)

8m22.801494157s ago: executing program 33 (id=659):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8000002)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15)

7m15.766017171s ago: executing program 34 (id=1319):
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$BLKROTATIONAL(r0, 0x40101286, 0x0)

6m15.41420587s ago: executing program 35 (id=1988):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, 0x0, 0x1e)

6m11.957396184s ago: executing program 36 (id=2016):
r0 = socket(0x11, 0x800000003, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5b, 0x2, {{0x2, [], 0x0, [0x4, 0x2], [0x0, 0x4]}, [@TCA_MQPRIO_MODE={0x6, 0x4}]}}}]}, 0x90}}, 0x0)

5m26.732756144s ago: executing program 0 (id=2436):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x1}, 0x8)
sendto$inet(r0, &(0x7f0000000100)="ab", 0x34000, 0x40048c4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)

5m26.397536367s ago: executing program 0 (id=2442):
clock_nanosleep(0x9, 0x0, 0x0, 0x0)

5m26.334006976s ago: executing program 0 (id=2443):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000000), 0xfc, 0x582, &(0x7f0000000b40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000002440)={0x4, 0xffff, 0x2})

5m26.267534545s ago: executing program 0 (id=2444):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xfe, 0x557, &(0x7f0000000280)="$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")
lsetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x1)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x2901003, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

5m25.985241294s ago: executing program 37 (id=2445):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/sockstat\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
copy_file_range(r1, 0x0, r0, 0x0, 0xffffffffa003e459, 0x700000000000000)

5m25.949141867s ago: executing program 0 (id=2447):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10)
r1 = syz_io_uring_setup(0x17dc, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cd}, &(0x7f0000000300), &(0x7f0000000080))
io_uring_register$IORING_REGISTER_PBUF_STATUS(r1, 0x1a, &(0x7f0000000000)={0x5}, 0x1)

5m25.547212614s ago: executing program 0 (id=2448):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xc, 0x9, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001100)={r1, 0x0, 0x0}, 0x20)

5m25.403481623s ago: executing program 38 (id=2448):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xc, 0x9, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001100)={r1, 0x0, 0x0}, 0x20)

4m36.330317613s ago: executing program 9 (id=3017):
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)

4m36.163595904s ago: executing program 9 (id=3018):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010101}], 0x10)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000200), 0x4)
listen(r0, 0xfff)
getpeername(r0, 0x0, &(0x7f0000000140))

4m35.223471737s ago: executing program 9 (id=3025):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xa, 0x42, 0x40, 0xc0, 0x1, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r0}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20)

4m35.11123138s ago: executing program 9 (id=3026):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@noload}]}, 0x1, 0x44d, &(0x7f0000000900)="$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")
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000080)='./file0\x00', 0xa00004, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES16], 0x1, 0xc4d, &(0x7f0000000f40)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="020000000100040000000000040005"], 0x24, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

4m33.828438438s ago: executing program 9 (id=3030):
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, r1, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, r1, r2, 0x20, 0x7, 0x4000000, 0x7, {0x20000, 0x0, 0x0, 0x5, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8, 0x0, "d20bddda7de75aec79ff0300d28000000b0000000000001000000900"}})

4m33.402879017s ago: executing program 9 (id=3033):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x12}, 0x1c)
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0)

4m33.222868331s ago: executing program 39 (id=3033):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x12}, 0x1c)
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0)

3m0.591082003s ago: executing program 6 (id=4044):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
timer_create(0x0, 0x0, &(0x7f0000000100)=<r0=>0x0)
timer_delete(r0)

3m0.482595079s ago: executing program 6 (id=4047):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x20000006, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
r2 = dup(r0)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x4, 0x20}, 0xc)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8000, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[], 0x9)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e5d, 0xfffffff2, @empty, 0x1}}, 0x1000000, 0x31, 0xffff1897, 0x4, 0x16, 0x0, 0x78}, 0x9c)

3m0.414339706s ago: executing program 6 (id=4049):
r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40000000000c1, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0xa, 0x8, 0x34324152, 0x9, 0xa, [{0x9e90, 0x1}, {0x10001, 0xd}, {0x800, 0x4}, {0xfffffffd, 0x5}, {0xfffffff7, 0x9}, {0x69d2, 0x3fc4}, {0xf, 0x8}, {0x0, 0xfffffd9e}], 0x8, 0xe, 0x1, 0x1, 0x5}})

3m0.272018296s ago: executing program 6 (id=4051):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002680)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "c4"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa4}}, 0x0)

3m0.271821741s ago: executing program 8 (id=4052):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x600, 0x0, 0x0, 0x0, 0x40, 0x18d1, 0x503c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x70, 0x3, [{{0x9, 0x4, 0x0, 0xa5, 0x2, 0x3, 0x1, 0x3, 0x6, {0x9, 0x21, 0xe, 0x4, 0x1, {0x22, 0xd56}}, {{{0x9, 0x5, 0x81, 0x3, 0x208, 0x9, 0x9, 0xf}}}}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x11, &(0x7f0000000140)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0x7fffa44, 0xff0f, 0x2}]}})

3m0.202431622s ago: executing program 6 (id=4054):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x28, &(0x7f0000000000)=""/53, &(0x7f0000000040)=0x35)

3m0.129937686s ago: executing program 6 (id=4055):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0)
setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000180)=0x1, 0x4)

2m58.776868459s ago: executing program 8 (id=4062):
r0 = socket$nl_route(0x10, 0x3, 0x0)
dup(0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8)
r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x7fffffff8000, 0x40000)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000140)={{0x4, 0x4, 0x4, 0x4, 'syz0\x00', 0x1000}, 0x3, 0x30, 0x4, 0x0, 0x1, 0x1ff, 'syz0\x00', &(0x7f0000000080)=['iso9660\x00'], 0x8})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000002c0)={{0x2, 0x4e1d, @multicast2}, {0x306, @remote}, 0x28, {0x2, 0x4e20, @empty}})
sendmsg$nl_route(r0, &(0x7f0000005b80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000)

2m57.565569109s ago: executing program 1 (id=4066):
r0 = inotify_init1(0x0)
r1 = dup(r0)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000280))

2m57.434247378s ago: executing program 1 (id=4067):
socketpair(0x2d, 0x5, 0x1, &(0x7f00000000c0))

2m57.434057404s ago: executing program 1 (id=4068):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
r0 = fanotify_init(0x1a, 0x800)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8)
fanotify_mark(r0, 0x441, 0x4800001a, r1, 0x0)
truncate(&(0x7f0000000000)='./file1\x00', 0x3)

2m57.292880295s ago: executing program 1 (id=4069):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000008005cda000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000dc0)={{r0}, &(0x7f0000000d40), &(0x7f0000000d80)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c01250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

2m57.191182741s ago: executing program 1 (id=4070):
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x200000, &(0x7f00000000c0)=ANY=[], 0xbe, 0x1d4, &(0x7f00000006c0)="$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")
mknod$loop(&(0x7f0000000780)='./bus\x00', 0x2000, 0x1)
renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)

2m57.093758s ago: executing program 1 (id=4071):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x5, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xe}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

2m50.273868617s ago: executing program 8 (id=4072):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = inotify_init()
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x29d})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
close_range(r1, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)

2m50.062000721s ago: executing program 8 (id=4073):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000180)="bd20", 0x2, 0x8840, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000100)="ab", 0x34000, 0x4004815, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000200)="f73887f2693de33a", 0x8, 0x20000000, 0x0, 0x0)

2m49.964098111s ago: executing program 8 (id=4074):
r0 = gettid()
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0)
ioctl$CEC_DQEVENT(r1, 0xc0506107, 0x0)
ioctl$CEC_DQEVENT(r1, 0xc0506107, 0x0)

2m49.07294776s ago: executing program 8 (id=4075):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)={0x3c, r1, 0x1001, 0x70bd28, 0x0, {}, [@ETHTOOL_A_RINGS_TX={0x8}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x3}]}, 0x3c}}, 0x0)

2m44.51183298s ago: executing program 40 (id=4055):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0)
setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000180)=0x1, 0x4)

2m41.525842596s ago: executing program 41 (id=4071):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x5, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xe}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

2m33.537013991s ago: executing program 42 (id=4075):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)={0x3c, r1, 0x1001, 0x70bd28, 0x0, {}, [@ETHTOOL_A_RINGS_TX={0x8}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x3}]}, 0x3c}}, 0x0)

2m6.428562801s ago: executing program 4 (id=4200):
r0 = io_uring_setup(0x4d42, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x0, 0x3})
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000480)=[@ioring_restriction_sqe_op={0x1, 0x1c}], 0x1)

2m6.260099207s ago: executing program 4 (id=4201):
r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6, 0x0, 0x0, 0x1000}, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {0x2085}})
io_uring_enter(r0, 0x1f85, 0x40110a, 0x4d, 0x0, 0x85)
syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYMLINKAT={0x26, 0x48, 0x0, 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x1})

2m5.865827934s ago: executing program 4 (id=4208):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r3 = dup(r2)
write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_GETXATTR(r3, &(0x7f00000004c0)={0x18}, 0x18)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000200)={0x50, 0x0, r5, {0x7, 0x29, 0x20200}}, 0x50)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_fscache}]}})
r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
writev(r6, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2)
close_range(r0, 0xffffffffffffffff, 0x0)

2m5.837439392s ago: executing program 4 (id=4210):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f00000079c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

2m5.303425639s ago: executing program 4 (id=4214):
r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2)
ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000000)={0x1, "34772efada889415e7246b90381b47c96d618dda0c297327e8aa832a16796564", 0x1, 0x1})

2m3.969915732s ago: executing program 4 (id=4219):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
syz_emit_ethernet(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r5)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x4d)
getdents(r6, &(0x7f0000000080)=""/255, 0xff)

2m3.894724435s ago: executing program 43 (id=4219):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
syz_emit_ethernet(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r5)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x4d)
getdents(r6, &(0x7f0000000080)=""/255, 0xff)

35.712335282s ago: executing program 2 (id=5478):
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x926, 0x3333, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x41, 0x30, 0x2, [{{0x9, 0x4, 0x0, 0xe, 0x2, 0x3, 0x1, 0x2, 0x81, {0x9, 0x21, 0x400, 0x4, 0x1, {0x22, 0x4d04}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xc, 0xf, 0x1}}}}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0})

34.54008128s ago: executing program 2 (id=5487):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newae={0x64, 0x1e, 0x301, 0x70bd2a, 0x25dfdbfa, {{@in=@rand_addr=0x64010100, 0x4d6, 0x2, 0x2b}, @in=@private=0xa010101, 0x0, 0x3500}, [@lifetime_val={0x24, 0x9, {0x1, 0xe9, 0x1, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40004}, 0x0)

34.462030597s ago: executing program 2 (id=5488):
r0 = syz_open_dev$swradio(&(0x7f0000000380), 0x0, 0x2)
ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000000)={0x98f908, 0x8})

34.461746468s ago: executing program 2 (id=5489):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000400)={[{@utf8no}, {@shortname_winnt}, {@shortname_winnt}, {@fat=@nfs_nostale_ro}, {}, {@utf8no}, {@fat=@nfs}, {@fat=@dmask={'dmask', 0x3d, 0x100}}, {@fat=@discard}, {@shortname_mixed}, {@fat=@quiet}, {@shortname_lower}]}, 0x0, 0x29f, &(0x7f0000000580)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
fcntl$getownex(r0, 0x10, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='devpts\x00', 0x1010401, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(r1, &(0x7f0000000040)='net/mcfilter6\x00')
accept4$packet(r2, 0x0, &(0x7f00000003c0), 0x80000)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020)

34.361858167s ago: executing program 2 (id=5490):
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000680)=[{&(0x7f00000003c0)="b1f3e591937d8b12860eb438e350bae82eecc402814086fac94445a7f6cad18110c54a443a064d7d0b7b38358fe5ee323ca628d73d627cf38ef6faddbdbde6c1729a19da73e58afd22a865497aadbb9e9342d6142092d58076f033c0c0168cbbc3fad3cf3e2de62c16cfc6ea707a4f56ad7dfeaf642c96d9490853cea955dc55dd7f11946b66e6d324e75245a653a1c3b7937fcabf059f6d3a3d6a2408769104173218e44202b11b8a79470c", 0xac}, {&(0x7f0000003380)="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", 0xf54}, {0x0, 0xf00}], 0x3, 0x0)
write$binfmt_script(r1, &(0x7f0000020240), 0x10010)

33.937018022s ago: executing program 2 (id=5495):
syz_mount_image$squashfs(&(0x7f0000000280), &(0x7f00000012c0)='./file0\x00', 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="0018aaa79c3b117d620d150d4ab3be1576290aab78fbeff795dcd3e77c384f9664b61fa6f4ed180d4888d10530d54845321459d677f01bd5e921b19b5714995700d49aa579d74030ef8a1f0fd3fec991fcc6f34c8d19f5cf83d6827fc0ee12e79f9125251295b9caaec76bcc307432172ebc4b46df891203fe2894d15bec23c24731c460f7fe577cd145509772f8d9343045ca57236a1b666d0c8e94fed2b9aead45dac6bfd3506fe6b7debdfb0ca51d84a2d813b70598465af6"], 0x1, 0x19d, &(0x7f0000000000)="$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")

33.835839355s ago: executing program 44 (id=5495):
syz_mount_image$squashfs(&(0x7f0000000280), &(0x7f00000012c0)='./file0\x00', 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="0018aaa79c3b117d620d150d4ab3be1576290aab78fbeff795dcd3e77c384f9664b61fa6f4ed180d4888d10530d54845321459d677f01bd5e921b19b5714995700d49aa579d74030ef8a1f0fd3fec991fcc6f34c8d19f5cf83d6827fc0ee12e79f9125251295b9caaec76bcc307432172ebc4b46df891203fe2894d15bec23c24731c460f7fe577cd145509772f8d9343045ca57236a1b666d0c8e94fed2b9aead45dac6bfd3506fe6b7debdfb0ca51d84a2d813b70598465af6"], 0x1, 0x19d, &(0x7f0000000000)="$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")

2.018749499s ago: executing program 3 (id=5911):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_opts(r0, 0x0, 0x6, 0x0, 0x0)

2.018412774s ago: executing program 3 (id=5912):
syz_pidfd_open(0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0)

1.627826408s ago: executing program 5 (id=5915):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000080)=""/233, 0xe9}, {&(0x7f0000000240)=""/129, 0x81}, {&(0x7f0000000340)=""/215, 0xd7}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/114, 0x72}, {&(0x7f00000014c0)=""/213, 0xd5}, {&(0x7f00000015c0)=""/103, 0x67}, {&(0x7f0000001640)=""/165, 0xa5}], 0x8}, 0x8}, {{0x0, 0x0, 0x0}, 0x7f}], 0x2, 0x0, 0x0)

1.518703914s ago: executing program 5 (id=5916):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000002c0))
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1})

1.437136398s ago: executing program 5 (id=5917):
r0 = syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x8006d89, 0x400, 0x2, 0x66}, &(0x7f0000000400)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000980)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000180)='io_uring_poll_arm\x00', r4}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000180)='io_uring_poll_arm\x00', r3}, 0x18)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x100})
io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0)

1.249189807s ago: executing program 5 (id=5918):
syz_usb_connect$uac1(0x2, 0xc2, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010003000000406b1d01014000010203010902b00003010e10040904000000010100000a24010100050201020c240705040040782db4d782090401000001020000090401010101020000072401090600000c240201fe02090404d875b1082402011004060c0905010910005209060725010008ff01090402000001020000090402010101020000072401010801000d24020104020501ceb739b26b0724010d7f05000724010900071008240201000208a20905820910"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0})

1.066930337s ago: executing program 3 (id=5919):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000c80)={{0x5, 0x1, 0x10, 0x0, 'syz1\x00'}, 0x0, [0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x213, 0x4, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xe8eb, 0x2, 0xffffffffffffffff, 0x8000000000000000, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffff, 0x0, 0x0, 0xfff, 0x0, 0x0, 0xc00000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0xb, 0xc9f, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x1cb600000000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x3, 0x2c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x800000000, 0x0, 0x1, 0x3, 0xffffffffffffffff, 0x61928afd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x10, 0x0, 0x5f1, 0x0, 0x5, 0xf, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x4000000000]})

1.019490501s ago: executing program 3 (id=5921):
syz_usb_connect$hid(0x1, 0x36, &(0x7f0000001240)=ANY=[@ANYBLOB="1201010200000008ac053602600001020301090224000101e460bc0904000102030102"], &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})

739.035951ms ago: executing program 7 (id=5922):
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x04\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}h\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00<r\xe9\x9cD\x90\xce\xe1\xc5\x85=\\!\xbbQ\xde\xc3\xe3\x7f\xcf\x1f\x17G\xa6\x13\xae\x92 \x1c\xbf\xfa\xe8e\x8cD\"\xa3w')

738.869602ms ago: executing program 7 (id=5923):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)={0x2, 0x18, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @local}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}]}, 0x50}}, 0x0)

669.077906ms ago: executing program 5 (id=5924):
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x6c, 0xf9, 0x6b, 0x10, 0x9e8, 0x62, 0x80f2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf0, 0x3e, 0xfc}}]}}]}}, 0x0)

668.798892ms ago: executing program 7 (id=5925):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="64000000100001002cbd70010000bc0000000000", @ANYRES32=0x0, @ANYBLOB="8021000000000000140003006e657464657673696d30000000000000140014206e657464657673696d300000000000001c0016801800018014000a"], 0x64}}, 0x0)

586.390035ms ago: executing program 7 (id=5926):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
prlimit64(0x0, 0xe, 0x0, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x840}, 0x2400c010)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r3, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r4 = socket(0x8000000010, 0x2, 0x0)
write(r4, 0x0, 0x0)
r5 = socket(0x840000000002, 0x3, 0x100)
sendmmsg$inet(r5, 0x0, 0x0, 0x0)

554.859837ms ago: executing program 7 (id=5927):
r0 = syz_io_uring_setup(0x893, &(0x7f00000003c0)={0x0, 0xaee1, 0x0, 0x0, 0x1a3}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r3 = open$dir(0x0, 0x10040, 0x1)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x40, 0x0, r3, 0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x5361, 0xfffffffd, 0x2, 0x0, 0x0)

504.782944ms ago: executing program 3 (id=5928):
read$msr(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x810000, &(0x7f0000000400)=ANY=[@ANYBLOB="6a6f75726e616c5f7472616e73616374696f6e5f6e616d65732c62747265655f6e6f64655f0dcbcc28b5ef6f8b2c6a6f75726e616c5f666c7573685f64697361626c65642c6673636b2c6a6f75726e616c5f666c7573685f64697361626c65642c726174656c696d69745f6572726f72732c7265636f766572795f706173735f6c6173743d7365745f6d61795f676f5f72772c7265636f6e7374727563745f616c6c6f632c6e6f5f646174615f696f2c00"], 0x1, 0x5903, &(0x7f00000043c0)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB=' '], 0x0)

127.434988ms ago: executing program 5 (id=5929):
openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
migrate_pages(0x0, 0x7, &(0x7f0000000000)=0x6, 0x0)
setsockopt(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000001280)={'filter\x00', 0x7, 0x2, 0x3e8, 0x0, 0x300, 0x0, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @multicast1, @broadcast, 0x1}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8, 'syz0\x00', {0x3}}}}, {{@arp={@remote, @multicast2, 0x0, 0x0, 0x40, 0x10, {@mac, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {}, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 'pim6reg\x00', 'vcan0\x00', {}, {}, 0x0, 0x280}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x1, 0x0, 0x0, r4})
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f0000000240)={0x6, 0x0, r4})
syz_open_procfs(0x0, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
ftruncate(0xffffffffffffffff, 0x5)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, 0xffffffffffffffff, 0x2f126000)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000005680), &(0x7f0000009980)=0x40)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)

323.849µs ago: executing program 3 (id=5930):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000004c0)={[{@resuid}, {@init_itable}, {@minixdf}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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")
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x104)
io_setup(0x3, &(0x7f0000000280)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x1f, 0x1, 0x0, r0, 0x0, 0x0, 0xa00}])

0s ago: executing program 7 (id=5931):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x4}]}], {0x14}}, 0x7c}}, 0x0)

kernel console output (not intermixed with test programs):

] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  479.237297][ T5949] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  479.256237][ T5949] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  479.310007][ T5949] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  479.314396][ T5949] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  481.499291][ T5949] Bluetooth: hci3: command tx timeout
[  482.181764][   T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  482.216295][   T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  482.242524][   T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  482.292842][   T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  482.317869][   T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  483.589365][ T5949] Bluetooth: hci3: command tx timeout
[  484.386251][ T5949] Bluetooth: hci4: command tx timeout
[  485.666305][ T5949] Bluetooth: hci3: command tx timeout
[  486.467713][ T5949] Bluetooth: hci4: command tx timeout
[  487.759261][ T5949] Bluetooth: hci3: command tx timeout
[  488.539094][ T5949] Bluetooth: hci4: command tx timeout
[  490.237214][   T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  490.291303][   T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  490.322397][   T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  490.349986][   T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  490.380144][   T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  490.628956][   T54] Bluetooth: hci4: command tx timeout
[  492.423958][   T12] bond0 (unregistering): (slave 30): Releasing backup interface
[  492.428447][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  492.432592][   T12] bond0 (unregistering): Released all slaves
[  492.554017][ T5949] Bluetooth: hci5: command tx timeout
[  492.554055][T16568] lo speed is unknown, defaulting to 1000
[  492.574997][T16574] lo speed is unknown, defaulting to 1000
[  492.608805][T16571] lo speed is unknown, defaulting to 1000
[  492.711136][   T12] tipc: Disabling bearer <eth:team0>
[  492.749328][   T12] tipc: Left network mode
[  493.178893][ T5949] Bluetooth: hci1: command 0x0406 tx timeout
[  493.472498][   T12] hsr_slave_0: left promiscuous mode
[  493.475925][   T12] hsr_slave_1: left promiscuous mode
[  493.478461][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  493.480872][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  493.483452][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  493.485753][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  493.511160][   T12] veth1_macvtap: left promiscuous mode
[  493.512905][   T12] veth0_macvtap: left promiscuous mode
[  493.514622][   T12] veth1_vlan: left promiscuous mode
[  494.147235][   T12] team0 (unregistering): Port device team_slave_1 removed
[  494.229855][   T12] team0 (unregistering): Port device team_slave_0 removed
[  494.642678][   T54] Bluetooth: hci5: command tx timeout
[  495.107013][   T24] lo speed is unknown, defaulting to 1000
[  495.113096][   T24] syz2: Port: 1 Link DOWN
[  495.133364][T16571] chnl_net:caif_netlink_parms(): no params data found
[  495.211836][T16568] chnl_net:caif_netlink_parms(): no params data found
[  495.330280][    C0] vkms_vblank_simulate: vblank timer overrun
[  495.430067][T16574] chnl_net:caif_netlink_parms(): no params data found
[  495.481804][T16571] bridge0: port 1(bridge_slave_0) entered blocking state
[  495.484135][T16571] bridge0: port 1(bridge_slave_0) entered disabled state
[  495.486520][T16571] bridge_slave_0: entered allmulticast mode
[  495.491120][T16571] bridge_slave_0: entered promiscuous mode
[  495.550190][T16571] bridge0: port 2(bridge_slave_1) entered blocking state
[  495.555097][T16571] bridge0: port 2(bridge_slave_1) entered disabled state
[  495.558013][T16571] bridge_slave_1: entered allmulticast mode
[  495.562027][T16571] bridge_slave_1: entered promiscuous mode
[  495.614792][T16568] bridge0: port 1(bridge_slave_0) entered blocking state
[  495.617464][T16568] bridge0: port 1(bridge_slave_0) entered disabled state
[  495.626022][T16568] bridge_slave_0: entered allmulticast mode
[  495.629427][T16568] bridge_slave_0: entered promiscuous mode
[  495.635264][T16571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  495.642048][T16571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  495.679927][T16568] bridge0: port 2(bridge_slave_1) entered blocking state
[  495.682545][T16568] bridge0: port 2(bridge_slave_1) entered disabled state
[  495.685400][T16568] bridge_slave_1: entered allmulticast mode
[  495.688338][T16568] bridge_slave_1: entered promiscuous mode
[  495.706745][   T12] IPVS: stop unused estimator thread 0...
[  495.726336][T16571] team0: Port device team_slave_0 added
[  495.766071][T16571] team0: Port device team_slave_1 added
[  495.773074][T16568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  495.782334][T16574] bridge0: port 1(bridge_slave_0) entered blocking state
[  495.785317][T16574] bridge0: port 1(bridge_slave_0) entered disabled state
[  495.788220][T16574] bridge_slave_0: entered allmulticast mode
[  495.791284][T16574] bridge_slave_0: entered promiscuous mode
[  495.796383][T16568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  495.820110][T16574] bridge0: port 2(bridge_slave_1) entered blocking state
[  495.822964][T16574] bridge0: port 2(bridge_slave_1) entered disabled state
[  495.825674][T16574] bridge_slave_1: entered allmulticast mode
[  495.829732][T16574] bridge_slave_1: entered promiscuous mode
[  495.862228][T16571] batman_adv: batadv0: Adding interface: batadv_slave_0
[  495.864692][T16571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  495.877520][T16571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  495.896518][T16574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  495.926511][T16571] batman_adv: batadv0: Adding interface: batadv_slave_1
[  495.932451][T16571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  495.942775][T16571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  495.947950][T16574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  496.001973][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  496.022282][T16568] team0: Port device team_slave_0 added
[  496.055683][T16568] team0: Port device team_slave_1 added
[  496.082805][T16574] team0: Port device team_slave_0 added
[  496.138473][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  496.171342][T16574] team0: Port device team_slave_1 added
[  496.222171][T16571] hsr_slave_0: entered promiscuous mode
[  496.225318][T16571] hsr_slave_1: entered promiscuous mode
[  496.228242][T16571] debugfs: 'hsr0' already exists in 'hsr'
[  496.230998][T16571] Cannot create hsr debugfs directory
[  496.263418][T16568] batman_adv: batadv0: Adding interface: batadv_slave_0
[  496.266085][T16568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  496.276378][T16568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  496.282806][T16568] batman_adv: batadv0: Adding interface: batadv_slave_1
[  496.285483][T16568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  496.295545][T16568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  496.340127][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  496.349450][T16574] batman_adv: batadv0: Adding interface: batadv_slave_0
[  496.351603][T16574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  496.360212][T16574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  496.365699][T16574] batman_adv: batadv0: Adding interface: batadv_slave_1
[  496.368317][T16574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  496.377658][T16574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  496.483071][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  496.561965][T16568] hsr_slave_0: entered promiscuous mode
[  496.565178][T16568] hsr_slave_1: entered promiscuous mode
[  496.567940][T16568] debugfs: 'hsr0' already exists in 'hsr'
[  496.575035][T16568] Cannot create hsr debugfs directory
[  496.583517][T16574] hsr_slave_0: entered promiscuous mode
[  496.586901][T16574] hsr_slave_1: entered promiscuous mode
[  496.590044][T16574] debugfs: 'hsr0' already exists in 'hsr'
[  496.592352][T16574] Cannot create hsr debugfs directory
[  496.711306][   T54] Bluetooth: hci5: command tx timeout
[  497.001818][   T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  497.005634][   T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 52348 - 0
[  497.105198][   T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  497.108493][   T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 52348 - 0
[  497.204010][   T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  497.207323][   T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 52348 - 0
[  497.304695][   T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  497.307878][   T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 52348 - 0
[  497.444712][   T12] bridge_slave_1: left allmulticast mode
[  497.446651][   T12] bridge_slave_1: left promiscuous mode
[  497.448681][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  497.452799][   T12] bridge_slave_0: left allmulticast mode
[  497.454735][   T12] bridge_slave_0: left promiscuous mode
[  497.456664][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  498.081672][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  498.086734][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  498.092047][   T12] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  498.098311][   T12] bond0 (unregistering): Released all slaves
[  498.724540][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  498.730705][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  498.736480][   T12] bond0 (unregistering): Released all slaves
[  498.747730][   T12] bond1 (unregistering): Released all slaves
[  498.779164][   T54] Bluetooth: hci5: command tx timeout
[  498.932123][   T12] tipc: Left network mode
[  499.521567][   T12] hsr_slave_0: left promiscuous mode
[  499.524797][   T12] hsr_slave_1: left promiscuous mode
[  499.527423][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  499.530537][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  499.534035][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  499.536860][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  499.545529][   T12] hsr_slave_0: left promiscuous mode
[  499.548285][   T12] hsr_slave_1: left promiscuous mode
[  499.551204][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  499.553950][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  499.557449][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  499.560667][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  499.606631][   T12] veth1_macvtap: left promiscuous mode
[  499.609128][   T12] veth0_macvtap: left promiscuous mode
[  499.611346][   T12] veth1_vlan: left promiscuous mode
[  499.613464][   T12] veth0_vlan: left promiscuous mode
[  499.617067][   T12] veth1_macvtap: left promiscuous mode
[  499.619572][   T12] veth0_macvtap: left promiscuous mode
[  499.621850][   T12] veth1_vlan: left promiscuous mode
[  499.624064][   T12] veth0_vlan: left promiscuous mode
[  500.424149][   T12] team0 (unregistering): Port device team_slave_1 removed
[  500.477019][   T12] team0 (unregistering): Port device team_slave_0 removed
[  501.263939][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  501.266357][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  501.833897][   T12] team0 (unregistering): Port device team_slave_1 removed
[  501.904301][   T12] team0 (unregistering): Port device team_slave_0 removed
[  502.787016][T16568] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  502.794069][T16568] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  502.813617][T16568] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  502.836099][T16568] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  503.093110][T16571] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  503.107909][T16571] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  503.130820][T16571] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  503.155678][T16571] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  503.387368][T16574] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  503.424208][T16574] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  503.451161][T16574] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  503.465814][T16568] 8021q: adding VLAN 0 to HW filter on device bond0
[  503.474116][T16574] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  503.534655][T16568] 8021q: adding VLAN 0 to HW filter on device team0
[  503.554628][T13475] bridge0: port 1(bridge_slave_0) entered blocking state
[  503.557682][T13475] bridge0: port 1(bridge_slave_0) entered forwarding state
[  503.579863][T13475] bridge0: port 2(bridge_slave_1) entered blocking state
[  503.582235][T13475] bridge0: port 2(bridge_slave_1) entered forwarding state
[  503.688285][T16571] 8021q: adding VLAN 0 to HW filter on device bond0
[  503.722853][T16571] 8021q: adding VLAN 0 to HW filter on device team0
[  503.735661][ T8089] bridge0: port 1(bridge_slave_0) entered blocking state
[  503.737872][ T8089] bridge0: port 1(bridge_slave_0) entered forwarding state
[  503.755470][ T8089] bridge0: port 2(bridge_slave_1) entered blocking state
[  503.757965][ T8089] bridge0: port 2(bridge_slave_1) entered forwarding state
[  503.768049][T16574] 8021q: adding VLAN 0 to HW filter on device bond0
[  503.818148][T16574] 8021q: adding VLAN 0 to HW filter on device team0
[  503.836108][ T8089] bridge0: port 1(bridge_slave_0) entered blocking state
[  503.838656][ T8089] bridge0: port 1(bridge_slave_0) entered forwarding state
[  503.856997][ T8089] bridge0: port 2(bridge_slave_1) entered blocking state
[  503.859550][ T8089] bridge0: port 2(bridge_slave_1) entered forwarding state
[  503.872346][T16568] 8021q: adding VLAN 0 to HW filter on device batadv0
[  503.983291][T16568] veth0_vlan: entered promiscuous mode
[  503.997757][T16568] veth1_vlan: entered promiscuous mode
[  504.027708][T16568] veth0_macvtap: entered promiscuous mode
[  504.040633][T16568] veth1_macvtap: entered promiscuous mode
[  504.066348][T16571] 8021q: adding VLAN 0 to HW filter on device batadv0
[  504.075425][T16568] batman_adv: batadv0: Interface activated: batadv_slave_0
[  504.081885][T16568] batman_adv: batadv0: Interface activated: batadv_slave_1
[  504.101394][ T5953] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  504.109250][ T5953] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  504.116276][ T5953] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  504.135568][ T5953] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  504.223491][T16574] 8021q: adding VLAN 0 to HW filter on device batadv0
[  504.267498][ T8089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  504.274751][ T8089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  504.308250][ T8093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  504.312020][ T8093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  504.437728][T16571] veth0_vlan: entered promiscuous mode
[  504.555046][T16571] veth1_vlan: entered promiscuous mode
[  504.607225][T16571] veth0_macvtap: entered promiscuous mode
[  504.630650][T16571] veth1_macvtap: entered promiscuous mode
[  504.634016][T16574] veth0_vlan: entered promiscuous mode
[  504.647785][T16574] veth1_vlan: entered promiscuous mode
[  504.660189][T16571] batman_adv: batadv0: Interface activated: batadv_slave_0
[  504.675883][T16571] batman_adv: batadv0: Interface activated: batadv_slave_1
[  504.685124][ T5953] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  504.694806][ T5953] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  504.698355][ T5953] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  504.716613][ T5953] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  504.751649][T16574] veth0_macvtap: entered promiscuous mode
[  504.765222][T16574] veth1_macvtap: entered promiscuous mode
[  504.835591][T16574] batman_adv: batadv0: Interface activated: batadv_slave_0
[  504.851543][T16574] batman_adv: batadv0: Interface activated: batadv_slave_1
[  504.859994][ T8093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  504.863132][ T8093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  504.876066][ T5953] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  504.884264][ T5953] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  504.896223][ T5953] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  504.912354][ T5953] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  504.922805][ T6615] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  504.925849][ T6615] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  505.010009][ T6615] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  505.012750][ T6615] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  505.044152][ T8093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  505.047060][ T8093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  505.193646][T16644] loop4: detected capacity change from 0 to 32768
[  505.196073][    T9] IPVS: starting estimator thread 0...
[  505.199624][T16646] IPVS: sh: SCTP 127.0.0.1:0 - no destination available
[  505.234315][T16644] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  505.289091][T16647] IPVS: using max 47 ests per chain, 112800 per kthread
[  505.300903][T16644] XFS (loop4): Ending clean mount
[  505.319234][T16644] XFS (loop4): Quotacheck needed: Please wait.
[  505.397129][T16644] XFS (loop4): Quotacheck: Done.
[  505.519428][T16571] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  505.880573][T16671] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4087'.
[  505.883882][ T5949] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  505.898002][ T5949] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  505.903007][ T5949] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  505.906563][ T5949] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  505.927071][ T5949] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  506.224257][T16668] chnl_net:caif_netlink_parms(): no params data found
[  506.303919][T16677] loop5: detected capacity change from 0 to 32768
[  506.310989][T16677] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4089 (16677)
[  506.318067][T16677] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  506.321993][T16677] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  506.352013][T16677] BTRFS info (device loop5): enabling ssd optimizations
[  506.355226][T16677] BTRFS info (device loop5): enabling free space tree
[  506.372822][T16668] bridge0: port 1(bridge_slave_0) entered blocking state
[  506.375708][T16668] bridge0: port 1(bridge_slave_0) entered disabled state
[  506.378423][T16668] bridge_slave_0: entered allmulticast mode
[  506.386012][T16668] bridge_slave_0: entered promiscuous mode
[  506.389790][T16668] bridge0: port 2(bridge_slave_1) entered blocking state
[  506.392302][T16668] bridge0: port 2(bridge_slave_1) entered disabled state
[  506.394664][T16668] bridge_slave_1: entered allmulticast mode
[  506.397597][T16668] bridge_slave_1: entered promiscuous mode
[  506.426252][T16668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  506.431711][T16668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  506.469418][T16668] team0: Port device team_slave_0 added
[  506.470566][T16574] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  506.472998][T16668] team0: Port device team_slave_1 added
[  506.499927][T16668] batman_adv: batadv0: Adding interface: batadv_slave_0
[  506.502590][T16668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  506.510970][T16668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  506.515593][T16668] batman_adv: batadv0: Adding interface: batadv_slave_1
[  506.517803][T16668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  506.527911][T16668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  506.607026][T16668] hsr_slave_0: entered promiscuous mode
[  506.610734][T16668] hsr_slave_1: entered promiscuous mode
[  506.613222][T16668] debugfs: 'hsr0' already exists in 'hsr'
[  506.615005][T16668] Cannot create hsr debugfs directory
[  507.120533][T16668] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  507.227851][T16668] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  507.244588][T16721] netlink: 9280 bytes leftover after parsing attributes in process `syz.5.4100'.
[  507.382157][T16668] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  507.515008][T16668] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  507.705282][T16668] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  507.715977][T16668] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  507.730453][T16668] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  507.736035][T16668] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  507.799758][T16742] loop4: detected capacity change from 0 to 32768
[  507.802555][T16742] XFS: ikeep mount option is deprecated.
[  507.835570][T16742] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  507.883220][T16742] XFS (loop4): Ending clean mount
[  507.886406][T16742] XFS (loop4): Quotacheck needed: Please wait.
[  507.893286][T16668] 8021q: adding VLAN 0 to HW filter on device bond0
[  507.935324][T16742] XFS (loop4): Quotacheck: Done.
[  507.948470][T16668] 8021q: adding VLAN 0 to HW filter on device team0
[  507.976198][T13475] bridge0: port 1(bridge_slave_0) entered blocking state
[  507.979078][T13475] bridge0: port 1(bridge_slave_0) entered forwarding state
[  507.997982][T13475] bridge0: port 2(bridge_slave_1) entered blocking state
[  508.000897][T13475] bridge0: port 2(bridge_slave_1) entered forwarding state
[  508.069336][   T54] Bluetooth: hci0: command tx timeout
[  508.109399][T16668] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  508.113424][T16668] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  508.323974][T16741] loop5: detected capacity change from 0 to 32768
[  508.430864][T16668] 8021q: adding VLAN 0 to HW filter on device batadv0
[  508.436474][T16741] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  508.502642][T16741] XFS (loop5): Ending clean mount
[  508.510295][T16741] XFS (loop5): Quotacheck needed: Please wait.
[  508.560791][T16668] veth0_vlan: entered promiscuous mode
[  508.585519][T16668] veth1_vlan: entered promiscuous mode
[  508.630010][T16741] XFS (loop5): Quotacheck: Done.
[  508.683994][T16668] veth0_macvtap: entered promiscuous mode
[  508.692005][   T33] kauditd_printk_skb: 7 callbacks suppressed
[  508.692019][   T33] audit: type=1800 audit(1757520006.956:175): pid=16741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4109" name="file1" dev="loop5" ino=6150 res=0 errno=0
[  508.710568][T16668] veth1_macvtap: entered promiscuous mode
[  508.757711][T16574] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  508.774861][T16668] batman_adv: batadv0: Interface activated: batadv_slave_0
[  508.825184][T16668] batman_adv: batadv0: Interface activated: batadv_slave_1
[  509.028828][ T5946] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  509.047556][ T5946] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  509.069014][ T5946] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  509.072576][ T5946] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  509.102927][T16571] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  509.226792][ T8093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  509.232543][ T8093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  509.365318][ T8089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  509.367823][ T8089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  509.528448][T16783] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4111'.
[  509.629040][T16786] loop5: detected capacity change from 0 to 4096
[  509.653260][T16791] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  510.140113][   T54] Bluetooth: hci0: command tx timeout
[  510.664270][T16801] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  510.691567][T16804] loop4: detected capacity change from 0 to 1024
[  511.325471][T16820] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[  511.628761][ T5979] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  511.788846][ T5979] usb 4-1: Using ep0 maxpacket: 16
[  511.794266][ T5979] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  511.801009][ T5979] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  511.803950][ T5979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  511.806534][ T5979] usb 4-1: Product: syz
[  511.807935][ T5979] usb 4-1: Manufacturer: syz
[  511.809561][ T5979] usb 4-1: SerialNumber: syz
[  512.176422][T16835] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4138'.
[  512.182323][T16835] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4138'.
[  512.219894][   T54] Bluetooth: hci0: command tx timeout
[  512.686190][T16848] loop4: detected capacity change from 0 to 32768
[  512.840107][ T5979] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42
[  512.842734][ T5979] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048
[  512.847736][ T5979] cdc_ncm 4-1:1.0: setting rx_max = 2048
[  513.041130][ T5979] cdc_ncm 4-1:1.0: setting tx_max = 88
[  513.052840][ T5979] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  513.069542][ T5979] usb 4-1: USB disconnect, device number 8
[  513.072844][ T5979] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP)
[  513.247164][T16859] loop4: detected capacity change from 0 to 4096
[  513.254856][T16859] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  513.288013][T16859] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  513.293228][T16859] ntfs3(loop4): Failed to load $Extend (-22).
[  513.295802][T16859] ntfs3(loop4): Failed to initialize $Extend.
[  514.298964][   T54] Bluetooth: hci0: command tx timeout
[  514.348996][T16869] loop3: detected capacity change from 0 to 32768
[  514.369494][T16869] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  514.394935][T16869] XFS (loop3): Ending clean mount
[  514.433152][T16668] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  514.765240][T16888] netlink: 'syz.5.4157': attribute type 4 has an invalid length.
[  514.827354][T16890] loop3: detected capacity change from 0 to 4096
[  514.844421][T16890] ntfs3(loop3): It is recommened to use chkdsk.
[  514.853916][T16890] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00
[  514.857079][T16890] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00
[  514.863402][T16890] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00
[  514.866474][T16890] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00
[  514.880709][T16890] ntfs3(loop3): try to read out of volume at offset 0x3fffffc1c00
[  514.883723][T16890] ntfs3(loop3): try to read out of volume at offset 0x3fffffc2c00
[  514.898812][T16890] ntfs3(loop3): try to read out of volume at offset 0x3fffffc4c00
[  514.901942][T16890] ntfs3(loop3): try to read out of volume at offset 0x3fffffc8c00
[  514.905108][T16890] ntfs3(loop3): try to read out of volume at offset 0x3fffffd0c00
[  514.996138][T16901] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.4163'.
[  515.268107][T16909] loop4: detected capacity change from 0 to 512
[  515.311512][T16917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4170'.
[  515.315100][T16917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4170'.
[  515.322152][T16917] netlink: 'syz.3.4170': attribute type 12 has an invalid length.
[  515.322791][T16909] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  515.325461][T16917] netlink: 'syz.3.4170': attribute type 11 has an invalid length.
[  515.369522][T16909] EXT4-fs (loop4): mount failed
[  515.383144][T16920] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4171'.
[  515.529943][T16927] loop5: detected capacity change from 0 to 8
[  515.541665][T16927] SQUASHFS error: Failed to read block 0x6de: -5
[  515.543985][T16927] SQUASHFS error: Unable to read metadata cache entry [6dc]
[  515.546426][T16927] SQUASHFS error: Failed to read block 0x63a: -5
[  515.561374][T16927] SQUASHFS error: Unable to read metadata cache entry [638]
[  515.567035][T16927] SQUASHFS error: Unable to read directory block [26067d:ffff]
[  516.041267][T16937] netlink: 140 bytes leftover after parsing attributes in process `syz.5.4179'.
[  516.235691][T16948] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  516.239672][   T33] audit: type=1800 audit(1757520014.506:176): pid=16948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4183" name="file1" dev="tmpfs" ino=177 res=0 errno=0
[  516.303620][T16951] loop5: detected capacity change from 0 to 4096
[  516.313864][T16954] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4187'.
[  516.323626][T16951] ntfs3(loop5): ino=19, mi_enum_attr
[  516.325359][T16951] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  516.490129][ T2390] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  516.635988][T16964] loop5: detected capacity change from 0 to 32768
[  516.641201][T16964] (syz.5.4192,16964,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  516.646553][T16964] (syz.5.4192,16964,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  516.652791][T16964] (syz.5.4192,16964,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdde57c9f, computed 0xfec4e493. Applying ECC.
[  516.658067][T16964] (syz.5.4192,16964,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdde57c9f, computed 0xfec4e493
[  516.663333][T16964] (syz.5.4192,16964,0):ocfs2_validate_inode_block:1458 ERROR: Checksum failed for dinode 25
[  516.667822][T16964] (syz.5.4192,16964,0):ocfs2_read_locked_inode:597 ERROR: status = -5
[  516.671927][ T2390] usb 4-1: config 0 interface 0 altsetting 237 endpoint 0x81 has invalid wMaxPacketSize 0
[  516.673312][T16964] (syz.5.4192,16964,1):_ocfs2_get_system_file_inode:144 ERROR: status = -5
[  516.675513][ T2390] usb 4-1: config 0 interface 0 has no altsetting 0
[  516.683911][ T2390] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00
[  516.684138][T16964] (syz.5.4192,16964,1):ocfs2_init_global_system_inodes:465 ERROR: status = -22
[  516.686811][ T2390] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  516.694697][T16964] (syz.5.4192,16964,1):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 6, possibly corrupt fs?
[  516.694730][T16964] (syz.5.4192,16964,1):ocfs2_init_global_system_inodes:476 ERROR: status = -22
[  516.700089][ T2390] usb 4-1: config 0 descriptor??
[  516.705473][T16964] (syz.5.4192,16964,1):ocfs2_initialize_super:2198 ERROR: status = -22
[  516.709985][T16964] (syz.5.4192,16964,1):ocfs2_fill_super:1177 ERROR: status = -22
[  516.814197][T16976] loop4: detected capacity change from 0 to 2048
[  516.840467][T16976] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  516.845295][T16976] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  516.860083][   T33] audit: type=1800 audit(1757520015.126:177): pid=16976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4198" name="file0" dev="loop4" ino=13 res=0 errno=0
[  516.887452][T16976] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4198: bg 0: block 345: padding at end of block bitmap is not set
[  516.899830][T16976] fs-verity (loop4, inode 13): Error -117 writing Merkle tree block 0
[  516.903207][T16976] fs-verity (loop4, inode 13): Error -117 building Merkle tree
[  516.966924][T16571] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  516.983057][T16980] loop5: detected capacity change from 0 to 512
[  517.005626][T16980] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  517.014021][T16980] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  517.123221][ T2390] sony 0003:054C:024B.0018: unbalanced delimiter at end of report description
[  517.126651][ T2390] sony 0003:054C:024B.0018: parse failed
[  517.128688][ T2390] sony 0003:054C:024B.0018: probe with driver sony failed with error -22
[  517.203685][T16574] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  517.372609][   T24] usb 4-1: USB disconnect, device number 9
[  517.722223][T17010] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4211'.
[  517.792906][T17010] netlink: 'syz.5.4211': attribute type 10 has an invalid length.
[  517.799938][T17010] bridge0: port 2(bridge_slave_1) entered disabled state
[  517.803350][T17010] bridge_slave_1: left allmulticast mode
[  517.808217][T17010] bridge_slave_1: left promiscuous mode
[  517.816676][T17010] bridge0: port 2(bridge_slave_1) entered disabled state
[  517.831329][T17010] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  517.843922][T17008] loop4: detected capacity change from 0 to 40427
[  517.853216][T17008] F2FS-fs (loop4): build fault injection rate: 771
[  517.857997][T17008] F2FS-fs (loop4): invalid crc value
[  517.904181][T17008] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  517.922844][T17008] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  518.015574][T16571] F2FS-fs (loop4): access invalid blkaddr:2816
[  518.019194][T16571] CPU: 0 UID: 0 PID: 16571 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  518.019209][T16571] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  518.019215][T16571] Call Trace:
[  518.019220][T16571]  <TASK>
[  518.019224][T16571]  dump_stack_lvl+0x189/0x250
[  518.019271][T16571]  ? __pfx_dump_stack_lvl+0x10/0x10
[  518.019287][T16571]  ? __pfx_f2fs_get_dnode_of_data+0x10/0x10
[  518.019311][T16571]  __f2fs_is_valid_blkaddr+0xe52/0x14f0
[  518.019329][T16571]  f2fs_map_blocks+0xd84/0x4130
[  518.019346][T16571]  ? __page_table_check_zero+0x320/0x530
[  518.019370][T16571]  ? __pfx_f2fs_map_blocks+0x10/0x10
[  518.019382][T16571]  ? xa_load+0x60/0x210
[  518.019398][T16571]  ? xa_load+0x1ea/0x210
[  518.019410][T16571]  f2fs_mpage_readpages+0xcb2/0x1ac0
[  518.019429][T16571]  ? __pfx_f2fs_mpage_readpages+0x10/0x10
[  518.019441][T16571]  ? __folio_batch_add_and_move+0x20a/0xd20
[  518.019460][T16571]  ? f2fs_readahead+0x177/0x330
[  518.019469][T16571]  read_pages+0x17a/0x580
[  518.019483][T16571]  ? __pfx_read_pages+0x10/0x10
[  518.019499][T16571]  ? filemap_add_folio+0x1af/0x270
[  518.019513][T16571]  page_cache_ra_unbounded+0x6b0/0x7b0
[  518.019534][T16571]  f2fs_readdir+0x49b/0xa60
[  518.019552][T16571]  ? __pfx_f2fs_readdir+0x10/0x10
[  518.019568][T16571]  ? down_read_killable+0x1d1/0x350
[  518.019580][T16571]  iterate_dir+0x399/0x570
[  518.019593][T16571]  __se_sys_getdents64+0xe4/0x260
[  518.019604][T16571]  ? __pfx___se_sys_getdents64+0x10/0x10
[  518.019613][T16571]  ? exc_page_fault+0x76/0xf0
[  518.019619][T16571]  ? __pfx_filldir64+0x10/0x10
[  518.019630][T16571]  ? do_user_addr_fault+0xc8a/0x1390
[  518.019645][T16571]  ? do_syscall_64+0xbe/0x3b0
[  518.019655][T16571]  do_syscall_64+0xfa/0x3b0
[  518.019663][T16571]  ? lockdep_hardirqs_on+0x9c/0x150
[  518.019671][T16571]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  518.019678][T16571]  ? exc_page_fault+0x9f/0xf0
[  518.019687][T16571]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  518.019702][T16571] RIP: 0033:0x7fe1fd5c1513
[  518.019711][T16571] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 82 3e f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8
[  518.019718][T16571] RSP: 002b:00007ffcab32b828 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[  518.019728][T16571] RAX: ffffffffffffffda RBX: 0000555577376600 RCX: 00007fe1fd5c1513
[  518.019734][T16571] RDX: 0000000000008000 RSI: 0000555577376600 RDI: 0000000000000005
[  518.019739][T16571] RBP: 00005555773765d4 R08: 0000000000000000 R09: 0000000000000000
[  518.019744][T16571] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8
[  518.019749][T16571] R13: 0000000000000010 R14: 00005555773765d0 R15: 00007ffcab32dae0
[  518.019762][T16571]  </TASK>
[  518.120781][    C0] vkms_vblank_simulate: vblank timer overrun
[  518.152649][T16571] F2FS-fs (loop4): access invalid blkaddr:2816
[  518.155069][T16571] CPU: 0 UID: 0 PID: 16571 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  518.155089][T16571] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  518.155099][T16571] Call Trace:
[  518.155105][T16571]  <TASK>
[  518.155113][T16571]  dump_stack_lvl+0x189/0x250
[  518.155136][T16571]  ? __pfx_dump_stack_lvl+0x10/0x10
[  518.155151][T16571]  ? __pfx_f2fs_get_dnode_of_data+0x10/0x10
[  518.155163][T16571]  ? __f2fs_is_valid_blkaddr+0xe5f/0x14f0
[  518.155195][T16571]  __f2fs_is_valid_blkaddr+0xe52/0x14f0
[  518.155222][T16571]  f2fs_map_blocks+0xd84/0x4130
[  518.155276][T16571]  ? __page_table_check_zero+0x320/0x530
[  518.155310][T16571]  ? __pfx_f2fs_map_blocks+0x10/0x10
[  518.155331][T16571]  ? xa_load+0x60/0x210
[  518.155359][T16571]  ? xa_load+0x1ea/0x210
[  518.155381][T16571]  f2fs_mpage_readpages+0xcb2/0x1ac0
[  518.155407][T16571]  ? __pfx_f2fs_mpage_readpages+0x10/0x10
[  518.155427][T16571]  ? __folio_batch_add_and_move+0x20a/0xd20
[  518.155463][T16571]  ? f2fs_readahead+0x177/0x330
[  518.155480][T16571]  read_pages+0x17a/0x580
[  518.155502][T16571]  ? __pfx_read_pages+0x10/0x10
[  518.155524][T16571]  ? filemap_add_folio+0x1af/0x270
[  518.155546][T16571]  page_cache_ra_unbounded+0x6b0/0x7b0
[  518.155574][T16571]  f2fs_readdir+0x49b/0xa60
[  518.155599][T16571]  ? __pfx_f2fs_readdir+0x10/0x10
[  518.155622][T16571]  ? down_read_killable+0x1d1/0x350
[  518.155640][T16571]  iterate_dir+0x399/0x570
[  518.155661][T16571]  __se_sys_getdents64+0xe4/0x260
[  518.155678][T16571]  ? __pfx___se_sys_getdents64+0x10/0x10
[  518.155691][T16571]  ? exc_page_fault+0x76/0xf0
[  518.155703][T16571]  ? __pfx_filldir64+0x10/0x10
[  518.155721][T16571]  ? do_user_addr_fault+0xc8a/0x1390
[  518.155746][T16571]  ? do_syscall_64+0xbe/0x3b0
[  518.155764][T16571]  do_syscall_64+0xfa/0x3b0
[  518.155775][T16571]  ? lockdep_hardirqs_on+0x9c/0x150
[  518.155784][T16571]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  518.155792][T16571]  ? exc_page_fault+0x9f/0xf0
[  518.155800][T16571]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  518.155808][T16571] RIP: 0033:0x7fe1fd5c1513
[  518.155817][T16571] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 82 3e f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8
[  518.155824][T16571] RSP: 002b:00007ffcab32b828 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[  518.155835][T16571] RAX: ffffffffffffffda RBX: 0000555577376600 RCX: 00007fe1fd5c1513
[  518.155840][T16571] RDX: 0000000000008000 RSI: 0000555577376600 RDI: 0000000000000005
[  518.155845][T16571] RBP: 00005555773765d4 R08: 0000000000000000 R09: 0000000000000000
[  518.155850][T16571] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8
[  518.155856][T16571] R13: 0000000000000010 R14: 00005555773765d0 R15: 00007ffcab32dae0
[  518.155869][T16571]  </TASK>
[  518.156683][T16571] syz-executor: attempt to access beyond end of device
[  518.156683][T16571] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  518.575011][ T8093] kworker/u9:10: attempt to access beyond end of device
[  518.575011][ T8093] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  518.583063][ T8093] CPU: 0 UID: 0 PID: 8093 Comm: kworker/u9:10 Not tainted syzkaller #0 PREEMPT(full) 
[  518.583084][ T8093] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  518.583094][ T8093] Workqueue: writeback wb_workfn (flush-7:4)
[  518.583118][ T8093] Call Trace:
[  518.583125][ T8093]  <TASK>
[  518.583132][ T8093]  dump_stack_lvl+0x189/0x250
[  518.583173][ T8093]  ? __pfx_dump_stack_lvl+0x10/0x10
[  518.583216][ T8093]  ? __pfx_queue_work_on+0x10/0x10
[  518.583231][ T8093]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  518.583269][ T8093]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  518.583301][ T8093]  f2fs_handle_critical_error+0x37c/0x540
[  518.583330][ T8093]  f2fs_write_end_io+0x886/0xb60
[  518.583361][ T8093]  __submit_merged_bio+0x27a/0x6a0
[  518.583380][ T8093]  ? up_write+0x1c4/0x420
[  518.583401][ T8093]  __submit_merged_write_cond+0x44c/0x530
[  518.583428][ T8093]  f2fs_sync_node_pages+0x1479/0x15e0
[  518.583464][ T8093]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  518.583481][ T8093]  ? __percpu_counter_sum+0x1c2/0x1e0
[  518.583536][ T8093]  ? rcu_is_watching+0x15/0xb0
[  518.583550][ T8093]  ? blk_start_plug+0x52/0x1b0
[  518.583567][ T8093]  f2fs_write_node_pages+0x303/0x6e0
[  518.583592][ T8093]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  518.583624][ T8093]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  518.583644][ T8093]  do_writepages+0x32e/0x550
[  518.583669][ T8093]  ? reacquire_held_locks+0x127/0x1d0
[  518.583683][ T8093]  ? writeback_sb_inodes+0x384/0x1010
[  518.583710][ T8093]  __writeback_single_inode+0x145/0xff0
[  518.583729][ T8093]  ? do_raw_spin_unlock+0x4d/0x240
[  518.583747][ T8093]  writeback_sb_inodes+0x6c7/0x1010
[  518.583778][ T8093]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  518.583824][ T8093]  ? rcu_is_watching+0x15/0xb0
[  518.583843][ T8093]  wb_writeback+0x43b/0xaf0
[  518.583865][ T8093]  ? queue_io+0x371/0x590
[  518.583884][ T8093]  ? __pfx_wb_writeback+0x10/0x10
[  518.583906][ T8093]  ? wb_workfn+0x3e2/0xef0
[  518.583924][ T8093]  wb_workfn+0x409/0xef0
[  518.583952][ T8093]  ? __pfx_wb_workfn+0x10/0x10
[  518.583970][ T8093]  ? __lock_acquire+0xab9/0xd20
[  518.584001][ T8093]  ? process_scheduled_works+0x9ef/0x17b0
[  518.584021][ T8093]  ? _raw_spin_unlock_irq+0x23/0x50
[  518.584040][ T8093]  ? process_scheduled_works+0x9ef/0x17b0
[  518.584053][ T8093]  ? process_scheduled_works+0x9ef/0x17b0
[  518.584069][ T8093]  process_scheduled_works+0xae1/0x17b0
[  518.584112][ T8093]  ? __pfx_process_scheduled_works+0x10/0x10
[  518.584143][ T8093]  worker_thread+0x8a0/0xda0
[  518.584183][ T8093]  kthread+0x711/0x8a0
[  518.584236][ T8093]  ? __pfx_worker_thread+0x10/0x10
[  518.584251][ T8093]  ? __pfx_kthread+0x10/0x10
[  518.584269][ T8093]  ? _raw_spin_unlock_irq+0x23/0x50
[  518.584288][ T8093]  ? lockdep_hardirqs_on+0x9c/0x150
[  518.584301][ T8093]  ? __pfx_kthread+0x10/0x10
[  518.584319][ T8093]  ret_from_fork+0x3fc/0x770
[  518.584337][ T8093]  ? __pfx_ret_from_fork+0x10/0x10
[  518.584358][ T8093]  ? __switch_to_asm+0x39/0x70
[  518.584375][ T8093]  ? __switch_to_asm+0x33/0x70
[  518.584390][ T8093]  ? __pfx_kthread+0x10/0x10
[  518.584408][ T8093]  ret_from_fork_asm+0x1a/0x30
[  518.584442][ T8093]  </TASK>
[  518.585584][ T8093] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  518.703487][ T8093] CPU: 0 UID: 0 PID: 8093 Comm: kworker/u9:10 Not tainted syzkaller #0 PREEMPT(full) 
[  518.703507][ T8093] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  518.703518][ T8093] Workqueue: writeback wb_workfn (flush-7:4)
[  518.703541][ T8093] Call Trace:
[  518.703548][ T8093]  <TASK>
[  518.703557][ T8093]  dump_stack_lvl+0x189/0x250
[  518.703579][ T8093]  ? __pfx_dump_stack_lvl+0x10/0x10
[  518.703596][ T8093]  ? __pfx_queue_work_on+0x10/0x10
[  518.703609][ T8093]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  518.703633][ T8093]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  518.703665][ T8093]  f2fs_handle_critical_error+0x37c/0x540
[  518.703691][ T8093]  f2fs_write_end_io+0x886/0xb60
[  518.703724][ T8093]  __submit_merged_bio+0x27a/0x6a0
[  518.703744][ T8093]  ? up_write+0x1c4/0x420
[  518.703764][ T8093]  __submit_merged_write_cond+0x44c/0x530
[  518.703793][ T8093]  f2fs_sync_node_pages+0x1479/0x15e0
[  518.703830][ T8093]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  518.703849][ T8093]  ? __percpu_counter_sum+0x1c2/0x1e0
[  518.703899][ T8093]  ? rcu_is_watching+0x15/0xb0
[  518.703916][ T8093]  ? blk_start_plug+0x52/0x1b0
[  518.703934][ T8093]  f2fs_write_node_pages+0x303/0x6e0
[  518.703958][ T8093]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  518.703991][ T8093]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  518.704010][ T8093]  do_writepages+0x32e/0x550
[  518.704033][ T8093]  ? reacquire_held_locks+0x127/0x1d0
[  518.704048][ T8093]  ? writeback_sb_inodes+0x384/0x1010
[  518.704074][ T8093]  __writeback_single_inode+0x145/0xff0
[  518.704092][ T8093]  ? do_raw_spin_unlock+0x4d/0x240
[  518.704112][ T8093]  writeback_sb_inodes+0x6c7/0x1010
[  518.704154][ T8093]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  518.704234][ T8093]  ? rcu_is_watching+0x15/0xb0
[  518.704259][ T8093]  wb_writeback+0x43b/0xaf0
[  518.704284][ T8093]  ? queue_io+0x371/0x590
[  518.704304][ T8093]  ? __pfx_wb_writeback+0x10/0x10
[  518.704329][ T8093]  ? wb_workfn+0x3e2/0xef0
[  518.704348][ T8093]  wb_workfn+0x409/0xef0
[  518.704377][ T8093]  ? __pfx_wb_workfn+0x10/0x10
[  518.704398][ T8093]  ? __lock_acquire+0xab9/0xd20
[  518.704435][ T8093]  ? process_scheduled_works+0x9ef/0x17b0
[  518.704456][ T8093]  ? _raw_spin_unlock_irq+0x23/0x50
[  518.704475][ T8093]  ? process_scheduled_works+0x9ef/0x17b0
[  518.704487][ T8093]  ? process_scheduled_works+0x9ef/0x17b0
[  518.704501][ T8093]  process_scheduled_works+0xae1/0x17b0
[  518.704542][ T8093]  ? __pfx_process_scheduled_works+0x10/0x10
[  518.704571][ T8093]  worker_thread+0x8a0/0xda0
[  518.704608][ T8093]  kthread+0x711/0x8a0
[  518.704626][ T8093]  ? __pfx_worker_thread+0x10/0x10
[  518.704640][ T8093]  ? __pfx_kthread+0x10/0x10
[  518.704659][ T8093]  ? _raw_spin_unlock_irq+0x23/0x50
[  518.704677][ T8093]  ? lockdep_hardirqs_on+0x9c/0x150
[  518.704689][ T8093]  ? __pfx_kthread+0x10/0x10
[  518.704708][ T8093]  ret_from_fork+0x3fc/0x770
[  518.704726][ T8093]  ? __pfx_ret_from_fork+0x10/0x10
[  518.704746][ T8093]  ? __switch_to_asm+0x39/0x70
[  518.704762][ T8093]  ? __switch_to_asm+0x33/0x70
[  518.704776][ T8093]  ? __pfx_kthread+0x10/0x10
[  518.704794][ T8093]  ret_from_fork_asm+0x1a/0x30
[  518.704825][ T8093]  </TASK>
[  518.704833][ T8093] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  518.837971][ T8093] CPU: 1 UID: 0 PID: 8093 Comm: kworker/u9:10 Not tainted syzkaller #0 PREEMPT(full) 
[  518.837985][ T8093] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  518.837992][ T8093] Workqueue: writeback wb_workfn (flush-7:4)
[  518.838008][ T8093] Call Trace:
[  518.838013][ T8093]  <TASK>
[  518.838017][ T8093]  dump_stack_lvl+0x189/0x250
[  518.838033][ T8093]  ? __pfx_dump_stack_lvl+0x10/0x10
[  518.838046][ T8093]  ? __pfx_queue_work_on+0x10/0x10
[  518.838058][ T8093]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  518.838076][ T8093]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  518.838102][ T8093]  f2fs_handle_critical_error+0x37c/0x540
[  518.838127][ T8093]  f2fs_write_end_io+0x886/0xb60
[  518.838154][ T8093]  __submit_merged_bio+0x27a/0x6a0
[  518.838200][ T8093]  ? up_write+0x1c4/0x420
[  518.838217][ T8093]  __submit_merged_write_cond+0x44c/0x530
[  518.838240][ T8093]  f2fs_sync_node_pages+0x1479/0x15e0
[  518.838270][ T8093]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  518.838285][ T8093]  ? __percpu_counter_sum+0x1c2/0x1e0
[  518.838321][ T8093]  ? rcu_is_watching+0x15/0xb0
[  518.838333][ T8093]  ? blk_start_plug+0x52/0x1b0
[  518.838347][ T8093]  f2fs_write_node_pages+0x303/0x6e0
[  518.838368][ T8093]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  518.838395][ T8093]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  518.838413][ T8093]  do_writepages+0x32e/0x550
[  518.838435][ T8093]  ? reacquire_held_locks+0x127/0x1d0
[  518.838447][ T8093]  ? writeback_sb_inodes+0x384/0x1010
[  518.838470][ T8093]  __writeback_single_inode+0x145/0xff0
[  518.838485][ T8093]  ? do_raw_spin_unlock+0x4d/0x240
[  518.838531][ T8093]  writeback_sb_inodes+0x6c7/0x1010
[  518.838566][ T8093]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  518.838633][ T8093]  ? rcu_is_watching+0x15/0xb0
[  518.838652][ T8093]  wb_writeback+0x43b/0xaf0
[  518.838696][ T8093]  ? queue_io+0x371/0x590
[  518.838714][ T8093]  ? __pfx_wb_writeback+0x10/0x10
[  518.838736][ T8093]  ? wb_workfn+0x3e2/0xef0
[  518.838756][ T8093]  wb_workfn+0x409/0xef0
[  518.838781][ T8093]  ? __pfx_wb_workfn+0x10/0x10
[  518.838798][ T8093]  ? __lock_acquire+0xab9/0xd20
[  518.838821][ T8093]  ? process_scheduled_works+0x9ef/0x17b0
[  518.838838][ T8093]  ? _raw_spin_unlock_irq+0x23/0x50
[  518.838856][ T8093]  ? process_scheduled_works+0x9ef/0x17b0
[  518.838868][ T8093]  ? process_scheduled_works+0x9ef/0x17b0
[  518.838882][ T8093]  process_scheduled_works+0xae1/0x17b0
[  518.838916][ T8093]  ? __pfx_process_scheduled_works+0x10/0x10
[  518.838942][ T8093]  worker_thread+0x8a0/0xda0
[  518.838974][ T8093]  kthread+0x711/0x8a0
[  518.838994][ T8093]  ? __pfx_worker_thread+0x10/0x10
[  518.839008][ T8093]  ? __pfx_kthread+0x10/0x10
[  518.839025][ T8093]  ? _raw_spin_unlock_irq+0x23/0x50
[  518.839044][ T8093]  ? lockdep_hardirqs_on+0x9c/0x150
[  518.839055][ T8093]  ? __pfx_kthread+0x10/0x10
[  518.839072][ T8093]  ret_from_fork+0x3fc/0x770
[  518.839088][ T8093]  ? __pfx_ret_from_fork+0x10/0x10
[  518.839106][ T8093]  ? __switch_to_asm+0x39/0x70
[  518.839123][ T8093]  ? __switch_to_asm+0x33/0x70
[  518.839138][ T8093]  ? __pfx_kthread+0x10/0x10
[  518.839156][ T8093]  ret_from_fork_asm+0x1a/0x30
[  518.839212][ T8093]  </TASK>
[  519.037095][ T8093] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  519.391447][ T6009] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  519.560509][ T6009] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  519.564736][ T6009] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  519.568467][ T6009] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  519.572235][ T6009] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  519.585862][T17028] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  519.593535][ T6009] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  519.729914][ T5949] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  519.734458][ T5949] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  519.742307][ T5949] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  519.748413][ T5949] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  519.753240][ T5949] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  519.805443][ T6009] usb 4-1: USB disconnect, device number 10
[  519.987253][T17030] chnl_net:caif_netlink_parms(): no params data found
[  520.128211][T17030] bridge0: port 1(bridge_slave_0) entered blocking state
[  520.132247][T17030] bridge0: port 1(bridge_slave_0) entered disabled state
[  520.134924][T17030] bridge_slave_0: entered allmulticast mode
[  520.142661][T17030] bridge_slave_0: entered promiscuous mode
[  520.147626][T17030] bridge0: port 2(bridge_slave_1) entered blocking state
[  520.153135][T17030] bridge0: port 2(bridge_slave_1) entered disabled state
[  520.155973][T17030] bridge_slave_1: entered allmulticast mode
[  520.165465][T17030] bridge_slave_1: entered promiscuous mode
[  520.208299][T17030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  520.215309][T17030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  520.250952][T17030] team0: Port device team_slave_0 added
[  520.255672][T17030] team0: Port device team_slave_1 added
[  520.291546][T17030] batman_adv: batadv0: Adding interface: batadv_slave_0
[  520.294333][T17030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  520.305022][T17030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  520.311656][T17030] batman_adv: batadv0: Adding interface: batadv_slave_1
[  520.314431][T17030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  520.324738][T17030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  520.373203][T17030] hsr_slave_0: entered promiscuous mode
[  520.377213][T17030] hsr_slave_1: entered promiscuous mode
[  520.384687][T17030] debugfs: 'hsr0' already exists in 'hsr'
[  520.386864][T17030] Cannot create hsr debugfs directory
[  520.421299][ T5979] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  520.549320][T17030] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.598845][ T5979] usb 6-1: Using ep0 maxpacket: 32
[  520.615084][ T5979] usb 6-1: config 0 has an invalid interface number: 2 but max is 0
[  520.617574][ T5979] usb 6-1: config 0 has no interface number 0
[  520.622820][ T5979] usb 6-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2
[  520.625713][ T5979] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  520.628168][ T5979] usb 6-1: Product: syz
[  520.629933][ T5979] usb 6-1: Manufacturer: syz
[  520.631466][ T5979] usb 6-1: SerialNumber: syz
[  520.638096][ T5979] usb 6-1: config 0 descriptor??
[  520.645244][T17030] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.648316][ T5979] etas_es58x 6-1:0.2: Starting syz syz (Serial Number syz)
[  520.757641][T17030] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.839084][T17030] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.859526][ T5979] usb 6-1: USB disconnect, device number 9
[  521.096195][T17030] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  521.109726][T17030] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  521.117347][T17030] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  521.128566][T17030] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  521.255508][T17030] 8021q: adding VLAN 0 to HW filter on device bond0
[  521.272893][T17030] 8021q: adding VLAN 0 to HW filter on device team0
[  521.278529][ T8093] bridge0: port 1(bridge_slave_0) entered blocking state
[  521.280856][ T8093] bridge0: port 1(bridge_slave_0) entered forwarding state
[  521.297593][ T8093] bridge0: port 2(bridge_slave_1) entered blocking state
[  521.299977][ T8093] bridge0: port 2(bridge_slave_1) entered forwarding state
[  521.327136][T17087] loop3: detected capacity change from 0 to 128
[  521.333442][T17087] ext3: Unknown parameter 'dont_appraise'
[  521.754765][T17030] 8021q: adding VLAN 0 to HW filter on device batadv0
[  521.832810][   T54] Bluetooth: hci1: command tx timeout
[  521.924646][T17030] veth0_vlan: entered promiscuous mode
[  521.966171][T17030] veth1_vlan: entered promiscuous mode
[  522.056920][T17030] veth0_macvtap: entered promiscuous mode
[  522.113914][T17030] veth1_macvtap: entered promiscuous mode
[  522.145898][T17030] batman_adv: batadv0: Interface activated: batadv_slave_0
[  522.208458][T17030] batman_adv: batadv0: Interface activated: batadv_slave_1
[  522.230625][ T5946] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  522.239420][ T5946] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  522.256221][ T5946] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  522.281937][ T5946] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  522.486509][ T8089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  522.492792][ T8089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  522.559566][ T8089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  522.562896][ T8089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  522.787579][T17111] netlink: 'syz.3.4249': attribute type 1 has an invalid length.
[  522.815001][T17111] bond1: (slave bridge1): making interface the new active one
[  522.817702][T17111] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  522.919363][ T6009] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  523.068848][ T6009] usb 3-1: Using ep0 maxpacket: 32
[  523.073213][ T6009] usb 3-1: config 0 has an invalid interface number: 12 but max is 0
[  523.076683][ T6009] usb 3-1: config 0 has no interface number 0
[  523.082917][ T6009] usb 3-1: config 0 interface 12 has no altsetting 0
[  523.092367][ T6009] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  523.096171][ T6009] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  523.102461][ T6009] usb 3-1: Product: syz
[  523.106207][ T6009] usb 3-1: Manufacturer: syz
[  523.110516][ T6009] usb 3-1: SerialNumber: syz
[  523.115253][ T6009] usb 3-1: config 0 descriptor??
[  523.602723][  T973] IPVS: starting estimator thread 0...
[  523.604123][T17136] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  523.700387][T17137] IPVS: using max 47 ests per chain, 112800 per kthread
[  523.757238][ T6009] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  523.764702][ T6009] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71
[  523.772994][ T6009] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  523.778993][ T6009] f81534 3-1:0.12: probe with driver f81534 failed with error -71
[  523.793601][ T6009] usb 3-1: USB disconnect, device number 20
[  523.795026][T17144] 9pnet_fd: Insufficient options for proto=fd
[  523.892150][T17146] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  523.896042][T17146] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  523.901577][   T54] Bluetooth: hci1: command tx timeout
[  524.866840][T17172] netlink: 'syz.3.4275': attribute type 21 has an invalid length.
[  524.872483][T17172] netlink: 'syz.3.4275': attribute type 6 has an invalid length.
[  524.875782][T17172] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4275'.
[  524.885175][T17172] netlink: 'syz.3.4275': attribute type 21 has an invalid length.
[  524.887891][T17172] netlink: 'syz.3.4275': attribute type 6 has an invalid length.
[  524.890432][T17172] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4275'.
[  525.742663][T17189] loop2: detected capacity change from 0 to 8
[  525.979133][   T54] Bluetooth: hci1: command tx timeout
[  526.453803][T17199] loop2: detected capacity change from 0 to 32768
[  526.548011][T17199] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  526.596858][T17199] XFS (loop2): Ending clean mount
[  526.647204][T17199] XFS (loop2): Quotacheck needed: Please wait.
[  526.735988][T17199] XFS (loop2): Quotacheck: Done.
[  526.801271][T17030] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  526.980921][T17215] 9pnet_virtio: no channels available for device 127.0.0.1
[  527.757107][T17249] netlink: 'syz.3.4307': attribute type 2 has an invalid length.
[  527.765898][T17249] netlink: 'syz.3.4307': attribute type 2 has an invalid length.
[  527.988573][T17267] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4316'.
[  527.996309][T17269] loop5: detected capacity change from 0 to 16
[  528.003653][T17269] erofs (device loop5): mounted with root inode @ nid 36.
[  528.063954][   T54] Bluetooth: hci1: command tx timeout
[  528.087901][T17273] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  528.264574][T17285] openvswitch: netlink: IPv6 tunnel dst address is zero
[  528.364926][T17296] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  528.829175][ T5979] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  528.979009][ T5979] usb 6-1: Using ep0 maxpacket: 8
[  528.982734][ T5979] usb 6-1: config 6 has an invalid interface number: 2 but max is 0
[  528.993640][ T5979] usb 6-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[  529.005495][ T5979] usb 6-1: config 6 has no interface number 0
[  529.007554][ T5979] usb 6-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  529.046082][ T5979] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  529.051321][ T5979] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  529.067969][ T5979] usb 6-1: Product: syz
[  529.072777][ T5979] usb 6-1: Manufacturer: syz
[  529.081451][ T5979] usb 6-1: SerialNumber: syz
[  529.125914][ T5979] hso 6-1:6.2: Failed to find INT IN ep
[  529.491130][T17320] netlink: 'syz.3.4338': attribute type 1 has an invalid length.
[  529.502350][T17320] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4338'.
[  529.734321][T17329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4342'.
[  529.940437][T17337] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.4346'.
[  531.442907][ T2390] usb 6-1: USB disconnect, device number 10
[  533.251609][T17380] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4362'.
[  533.261217][T17380] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4362'.
[  533.336063][T17384] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4365'.
[  535.272347][T17428] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  535.436025][T17432] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4385'.
[  535.595343][T17441] loop2: detected capacity change from 0 to 2048
[  535.612798][T17441] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  536.683940][T17481] netlink: 'syz.5.4409': attribute type 10 has an invalid length.
[  536.713955][T17481] 8021q: adding VLAN 0 to HW filter on device bond0
[  536.759565][T17481] team0: Port device bond0 added
[  537.119776][T17495] 9pnet_fd: p9_fd_create_tcp (17495): problem connecting socket to 127.0.0.1
[  537.461187][T17504] loop2: detected capacity change from 0 to 256
[  537.469419][T17504] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  537.473707][T17504] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  537.481425][T17504] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  537.743392][T17517] loop2: detected capacity change from 0 to 512
[  537.779548][T17517] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  537.784280][T17517] ext4 filesystem being mounted at /50/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  537.962144][T17030] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  537.975512][T17531] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[  537.985282][T17531] batman_adv: batadv0: Adding interface: ip6gretap1
[  537.991237][T17531] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  538.001595][T17531] batman_adv: batadv0: Interface activated: ip6gretap1
[  538.124018][T17537] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  538.136025][T17535] loop2: detected capacity change from 0 to 4096
[  538.143284][T17535] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  538.176513][T17535] ntfs3(loop2): ino=3, ntfs_set_state failed, -22.
[  538.223736][T12022] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22.
[  538.226386][T17030] ntfs3(loop2): ino=3, ntfs_set_state failed, -22.
[  538.233877][T17030] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  538.243581][T17030] ntfs3(loop2): ino=3, ntfs_set_state failed, -22.
[  538.253071][T12022] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22.
[  538.286790][T17549] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4435'.
[  538.679333][ T2390] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  538.716057][T17570] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  538.830199][ T2390] usb 3-1: Using ep0 maxpacket: 8
[  538.836445][ T2390] usb 3-1: unable to get BOS descriptor or descriptor too short
[  538.840111][ T2390] usb 3-1: config 7 has an invalid interface number: 67 but max is 0
[  538.843130][ T2390] usb 3-1: config 7 has no interface number 0
[  538.852225][ T2390] usb 3-1: string descriptor 0 read error: -22
[  538.855252][ T2390] usb 3-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16
[  538.860447][ T2390] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  539.082881][ T2390] usb 3-1: USB disconnect, device number 22
[  539.467169][T17613] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  539.472769][T17613] bond0: (slave lo): Error: Device can not be enslaved while up
[  539.667511][T17629] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4476'.
[  539.677433][T17629] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4476'.
[  539.681691][T17629] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4476'.
[  539.687690][T17629] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4476'.
[  539.695458][T17629] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4476'.
[  539.836654][T17641] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4482'.
[  539.868139][T17643] loop2: detected capacity change from 0 to 1024
[  539.876484][T17643] hfsplus: invalid catalog btree flag
[  539.879356][T17645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4484'.
[  539.884996][T17643] hfsplus: failed to load catalog file
[  540.195945][T17661] loop2: detected capacity change from 0 to 2048
[  540.209862][T17661] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  540.237147][T17662] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  540.266716][T17661] NILFS error (device loop2): __nilfs_read_inode: invalid file type bits in mode 0177777 for inode 12
[  540.294495][T17661] Remounting filesystem read-only
[  540.483350][T17678] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4499'.
[  540.994209][T17688] netlink: 'syz.3.4503': attribute type 2 has an invalid length.
[  540.996849][T17688] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4503'.
[  541.000210][T17688] nbd: must specify a device to reconfigure
[  541.019092][T16642] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  541.170384][T16642] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  541.174466][T16642] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  541.179800][T16642] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  541.183466][T16642] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  541.186016][T16642] usb 3-1: SerialNumber: syz
[  541.395328][T16642] usb 3-1: 0:2 : does not exist
[  541.410216][T16642] usb 3-1: USB disconnect, device number 23
[  542.107788][T17711] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 4, id = 0
[  542.151968][T17713] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4514'.
[  542.380076][T17714] binder: 17706:17714 ioctl c0306201 0 returned -14
[  542.922796][T17737] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4525'.
[  542.926374][T17737] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4525'.
[  543.647849][T17777] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  544.485510][T17829] tipc: Started in network mode
[  544.487194][T17829] tipc: Node identity ac14140f, cluster identity 4711
[  544.498872][T17829] tipc: New replicast peer: 255.255.255.255
[  544.501485][T17829] tipc: Enabled bearer <udp:syz2>, priority 10
[  544.504716][T17829] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4569'.
[  544.507513][T17829] tipc: Disabling bearer <udp:syz2>
[  546.220195][T17843] loop2: detected capacity change from 0 to 262144
[  546.262074][T17843] F2FS-fs (loop2): invalid crc value
[  546.325398][T17843] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  546.331412][T17843] F2FS-fs (loop2): Start checkpoint disabled!
[  546.339468][T17843] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  547.640288][T17872] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  548.221080][T17886] netlink: 'syz.2.4593': attribute type 2 has an invalid length.
[  548.228762][T17886] netlink: 'syz.2.4593': attribute type 1 has an invalid length.
[  548.232004][T17886] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4593'.
[  548.521685][T17898] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4598'.
[  548.701456][   T54] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  548.707156][   T54] Bluetooth: hci0: Injecting HCI hardware error event
[  548.717645][   T54] Bluetooth: hci0: hardware error 0x00
[  548.964019][T17912] fuse: Bad value for 'fd'
[  550.859026][   T54] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  551.086440][T17975] cgroup: fork rejected by pids controller in /syz3
[  551.261228][T18013] tipc: Started in network mode
[  551.262867][T18013] tipc: Node identity ., cluster identity 4711
[  551.265457][T18013] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  553.018772][T18050] loop2: detected capacity change from 0 to 512
[  553.276841][T18062] loop2: detected capacity change from 0 to 1024
[  553.299720][T18062] EXT4-fs: Ignoring removed orlov option
[  553.301971][T18062] EXT4-fs: Ignoring removed nomblk_io_submit option
[  553.326393][T18062] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  553.434265][T17030] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  553.516559][T18073] loop2: detected capacity change from 0 to 1024
[  553.909152][T18086] hfsplus: xattr searching failed
[  554.356948][T18098] fuse: Bad value for 'fd'
[  554.815579][T18120] loop2: detected capacity change from 0 to 1024
[  554.910873][T18126] 9pnet_fd: Insufficient options for proto=fd
[  554.960672][T18120] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  554.965587][T18120] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  555.007847][   T33] audit: type=1800 audit(1757520053.266:178): pid=18120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4681" name="file1" dev="loop2" ino=15 res=0 errno=0
[  555.051183][T17030] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  555.513714][T18139] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  555.618908][T18144] loop2: detected capacity change from 0 to 4096
[  555.673497][T18144] ntfs3(loop2): failed to convert "0080" to cp869
[  555.695678][T18144] ntfs3(loop2): failed to convert name for inode 1e.
[  555.704984][T18144] ntfs3(loop2): ino=1f, mi_enum_attr
[  555.874877][T18156] IPVS: sh: SCTP 127.0.0.1:0 - no destination available
[  555.934861][T18160] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4697'.
[  556.196977][T18174] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4704'.
[  556.499109][  T973] usb 3-1: new full-speed USB device number 24 using dummy_hcd
[  556.653664][  T973] usb 3-1: config 5 has an invalid interface number: 123 but max is 0
[  556.656906][  T973] usb 3-1: config 5 has no interface number 0
[  556.674017][  T973] usb 3-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[  556.680107][  T973] usb 3-1: config 5 interface 123 altsetting 7 endpoint 0x89 has invalid maxpacket 8981, setting to 64
[  556.694359][  T973] usb 3-1: config 5 interface 123 has no altsetting 0
[  556.704776][  T973] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[  556.711406][  T973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  556.719837][  T973] usb 3-1: Product: syz
[  556.721567][  T973] usb 3-1: Manufacturer: syz
[  556.723372][  T973] usb 3-1: SerialNumber: syz
[  556.735427][T18178] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  556.834292][T18197] tmpfs: Group quota block hardlimit too large.
[  556.969322][  T973] ni6501 3-1:5.123: driver 'ni6501' failed to auto-configure device.
[  556.987878][  T973] usb 3-1: USB disconnect, device number 24
[  556.994855][T18204] netlink: zone id is out of range
[  556.997409][T18204] netlink: zone id is out of range
[  557.004756][T18204] netlink: del zone limit has 4 unknown bytes
[  557.008801][T18204] openvswitch: netlink: Multiple metadata blocks provided
[  557.185337][   T33] audit: type=1326 audit(1757520055.446:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18222 comm="syz.5.4713" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbcbff8eba9 code=0x0
[  558.508043][T18282] netlink: 360 bytes leftover after parsing attributes in process `syz.5.4733'.
[  558.563935][T18290] 9pnet_fd: Insufficient options for proto=fd
[  559.241586][T18308] loop2: detected capacity change from 0 to 512
[  559.255697][T18308] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  559.261771][T18308] ext4 filesystem being mounted at /134/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  559.303421][T17030] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  559.508516][T18323] loop2: detected capacity change from 0 to 64
[  559.516965][T18323] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  560.617384][T18336] netlink: 'syz.3.4753': attribute type 21 has an invalid length.
[  560.624877][T18336] netlink: 'syz.3.4753': attribute type 15 has an invalid length.
[  560.627715][T18336] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4753'.
[  560.633184][T18336] IPv6: NLM_F_CREATE should be specified when creating new route
[  560.637291][T18336] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  560.640018][T18336] IPv6: NLM_F_CREATE should be set when creating new route
[  560.643061][T18336] IPv6: NLM_F_CREATE should be set when creating new route
[  560.645908][T18336] IPv6: NLM_F_CREATE should be set when creating new route
[  561.087965][T18343] fuse: Bad value for 'fd'
[  561.444490][T18364] raw_sendmsg: syz.3.4766 forgot to set AF_INET. Fix it!
[  561.783979][T18383] netlink: 'syz.3.4773': attribute type 21 has an invalid length.
[  561.847563][T18365] loop2: detected capacity change from 0 to 32768
[  561.881963][T18365] OCFS2: ERROR (device loop2): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #74: fs_generation is 16737473
[  561.887653][T18365] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  561.890850][T18365] (syz.2.4765,18365,0):ocfs2_read_locked_inode:597 ERROR: status = -30
[  561.894226][T18365] (syz.2.4765,18365,0):_ocfs2_get_system_file_inode:144 ERROR: status = -30
[  561.897923][T18365] (syz.2.4765,18365,0):ocfs2_init_local_system_inodes:496 ERROR: status=-30, sysfile=9, slot=0
[  561.908710][T18365] (syz.2.4765,18365,0):ocfs2_init_local_system_inodes:505 ERROR: status = -30
[  561.914439][T18365] (syz.2.4765,18365,0):ocfs2_mount_volume:1758 ERROR: status = -30
[  561.951934][T18365] (syz.2.4765,18365,0):ocfs2_fill_super:1177 ERROR: status = -30
[  562.546198][T18407] loop2: detected capacity change from 0 to 32768
[  562.555905][T18407] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.4785 (18407)
[  562.569583][T18407] BTRFS info (device loop2): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  562.573552][T18407] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  562.616947][T18407] BTRFS info (device loop2): enabling ssd optimizations
[  562.619998][T18407] BTRFS info (device loop2): enabling free space tree
[  562.622563][T18407] BTRFS info (device loop2): use lzo compression, level 0
[  562.691146][T18428] netlink: 176 bytes leftover after parsing attributes in process `syz.3.4788'.
[  562.704431][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  562.707138][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  562.726802][T17030] BTRFS info (device loop2): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  563.103585][T18441] can0: slcan on ptm0.
[  563.119873][T18443] netlink: 'syz.5.4795': attribute type 2 has an invalid length.
[  563.122355][T18443] netlink: 1184 bytes leftover after parsing attributes in process `syz.5.4795'.
[  563.161345][T18440] can0 (unregistered): slcan off ptm0.
[  563.226818][T18451] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4799'.
[  564.390408][T18481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4810'.
[  564.449406][T18483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4811'.
[  564.786873][T18508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4822'.
[  564.798241][T18507] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  564.863159][T18512] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4825'.
[  565.129806][T18528] netlink: 277 bytes leftover after parsing attributes in process `syz.5.4833'.
[  565.178352][T18519] loop2: detected capacity change from 0 to 32768
[  566.072374][T18537] loop2: detected capacity change from 0 to 32768
[  566.173278][T18537] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  566.173300][T18537]   allowing incompatible features above 0.0: (unknown version)
[  566.173310][T18537]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  566.188904][T18537] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  566.192230][T18537] bcachefs (loop2): initializing new filesystem
[  566.212257][T18537] bcachefs (loop2): going read-write
[  566.300310][T18537] bcachefs (loop2): marking superblocks
[  566.364973][T18537] bcachefs (loop2): initializing freespace
[  566.385119][T18537] bcachefs (loop2): done initializing freespace
[  566.400289][T18537] bcachefs (loop2): reading snapshots table
[  566.402898][T18537] bcachefs (loop2): reading snapshots done
[  566.462920][T18537] bcachefs (loop2): done starting filesystem
[  566.463232][T18569] fuse: Bad value for 'fd'
[  566.712593][T18537] syz.2.4835 (18537) used greatest stack depth: 16712 bytes left
[  566.745468][T17030] bcachefs (loop2): shutting down
[  566.753917][T17030] bcachefs (loop2): going read-only
[  566.757466][T17030] bcachefs (loop2): finished waiting for writes to stop
[  566.789522][T17030] bcachefs (loop2): flushing journal and stopping allocators, journal seq 2
[  566.891767][T17030] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3
[  566.907800][T17030] bcachefs (loop2): clean shutdown complete, journal seq 4
[  566.911750][T17030] bcachefs (loop2): marking filesystem clean
[  566.955417][T17030] bcachefs (loop2): shutdown complete
[  567.004358][T18588] netlink: 'syz.3.4857': attribute type 21 has an invalid length.
[  567.110058][T18595] netlink: 292 bytes leftover after parsing attributes in process `syz.5.4858'.
[  567.113452][T18595] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4858'.
[  567.966993][T18621] overlayfs: failed to clone upperpath
[  568.051743][T18623] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  568.928838][    T9] usb 3-1: new full-speed USB device number 25 using dummy_hcd
[  569.081149][    T9] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  569.087447][    T9] usb 3-1: config 0 interface 0 has no altsetting 0
[  569.095369][    T9] usb 3-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00
[  569.102488][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  569.114140][    T9] usb 3-1: config 0 descriptor??
[  569.583652][    T9] uclogic 0003:5543:0064.0019: item fetching failed at offset 2/5
[  569.587513][    T9] uclogic 0003:5543:0064.0019: parse failed
[  569.602145][    T9] uclogic 0003:5543:0064.0019: probe with driver uclogic failed with error -22
[  569.784554][    T9] usb 3-1: USB disconnect, device number 25
[  570.019363][T18673] netlink: 'syz.3.4894': attribute type 4 has an invalid length.
[  570.171029][T18685] netlink: 'syz.5.4901': attribute type 10 has an invalid length.
[  570.182241][T18685] team0: Device dummy0 is up. Set it down before adding it as a team port
[  570.362925][T18693] __nla_validate_parse: 2 callbacks suppressed
[  570.362943][T18693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4905'.
[  570.793558][T18709] loop2: detected capacity change from 0 to 32768
[  570.799621][T18709] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.4913 (18709)
[  570.806376][T18709] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  570.811269][T18709] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  570.911624][T18709] BTRFS info (device loop2): enabling ssd optimizations
[  570.914561][T18709] BTRFS info (device loop2): enabling free space tree
[  570.969465][   T33] audit: type=1800 audit(1757520069.226:180): pid=18709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4913" name="file1" dev="loop2" ino=263 res=0 errno=0
[  571.039919][T17030] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  571.346822][T18752] genirq: Flags mismatch irq 4. 00200000 (pcl816) vs. 00200080 (ttyS0)
[  571.539549][T18760] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4930'.
[  571.639345][T18765] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4933'.
[  572.080040][T18772] loop2: detected capacity change from 0 to 32768
[  572.084422][T18772] bcachefs (/dev/loop2): error validating superblock: Not a bcachefs superblock layout
[  572.098373][T18772] bcachefs: bch2_fs_get_tree() error: invalid_sb_layout
[  572.396202][T18808] loop2: detected capacity change from 0 to 1024
[  572.482124][T13482] hfsplus: b-tree write err: -5, ino 4
[  572.521533][T18821] delete_channel: no stack
[  573.136060][T18847] netlink: 'syz.5.4971': attribute type 21 has an invalid length.
[  573.143204][T18847] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4971'.
[  573.680839][T18871] netlink: 'syz.3.4983': attribute type 21 has an invalid length.
[  573.687522][T18871] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4983'.
[  573.691958][T18871] netlink: 'syz.3.4983': attribute type 4 has an invalid length.
[  573.694551][T18871] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4983'.
[  573.884390][T18883] loop2: detected capacity change from 0 to 256
[  574.144028][   T33] audit: type=1800 audit(1757520072.396:181): pid=18903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4999" name="nullb0" dev="tmpfs" ino=1140 res=0 errno=0
[  574.229832][T18909] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  574.682106][T18946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5017'.
[  575.071992][T18955] overlayfs: failed to clone lowerpath
[  575.105132][T18955] overlayfs: failed to clone upperpath
[  576.274507][T18965] overlayfs: failed to clone lowerpath
[  576.372655][T18966] overlayfs: failed to clone upperpath
[  577.619027][    T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  577.773359][    T9] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  577.777254][    T9] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  577.797760][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  577.807306][    T9] gspca_main: stv0680-2.14.0 probing 041e:4007
[  578.936271][    T9] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32
[  578.951148][    T9] stv0680 3-1:4.0: STV(e): camera ping failed!!
[  578.966136][    T9] stv0680 3-1:4.0: last error: 0,  command = 0x0
[  579.420221][ T6009] usb 3-1: USB disconnect, device number 26
[  580.052875][T19086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5075'.
[  580.468780][   T24] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  580.639449][   T24] usb 3-1: Using ep0 maxpacket: 16
[  580.650609][   T24] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  580.658848][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  580.662015][   T24] usb 3-1: Product: syz
[  580.663503][   T24] usb 3-1: Manufacturer: syz
[  580.666509][   T24] usb 3-1: SerialNumber: syz
[  580.672516][   T24] usb 3-1: config 0 descriptor??
[  580.681498][   T24] visor 3-1:0.0: Sony Clie 3.5 converter detected
[  580.884578][   T24] usb 3-1: clie_3_5_startup: get config number bad return length: 0
[  580.887836][   T24] visor 3-1:0.0: probe with driver visor failed with error -5
[  580.922234][T19134] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5097'.
[  581.091269][ T6009] usb 3-1: USB disconnect, device number 27
[  581.891321][T19177] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5117'.
[  581.895024][T19177] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5117'.
[  582.223503][T19203] netlink: 'syz.2.5130': attribute type 1 has an invalid length.
[  582.227420][T19203] netlink: 'syz.2.5130': attribute type 2 has an invalid length.
[  582.235672][T19203] netlink: 'syz.2.5130': attribute type 1 has an invalid length.
[  582.241931][T19203] netlink: 1156 bytes leftover after parsing attributes in process `syz.2.5130'.
[  582.322788][T19207] loop2: detected capacity change from 0 to 4096
[  582.346835][T19208] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  582.379274][   T33] audit: type=1800 audit(1757520080.636:182): pid=19207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5132" name="file1" dev="loop2" ino=15 res=0 errno=0
[  582.591842][T19210] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  582.595787][T19210] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  583.391434][ T6009] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  583.555107][ T6009] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  583.564982][ T6009] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  583.573212][ T6009] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  583.588934][ T6009] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  583.592863][ T6009] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  583.599715][ T6009] usb 3-1: config 0 descriptor??
[  584.184160][ T6009] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  584.817473][   T24] usb 3-1: USB disconnect, device number 28
[  585.367083][T19293] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5170'.
[  587.300812][T19362] loop2: detected capacity change from 0 to 8
[  587.320204][T19362] SQUASHFS error: xz decompression failed, data probably corrupt
[  587.323328][T19362] SQUASHFS error: Failed to read block 0x108: -5
[  587.325915][T19362] SQUASHFS error: Unable to read metadata cache entry [106]
[  587.338126][T19362] SQUASHFS error: Unable to read inode 0x11f
[  587.844599][T19377] loop2: detected capacity change from 0 to 512
[  587.854067][T19377] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[  587.861661][T19377] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.5205: attempt to clear invalid blocks 2 len 1
[  587.867536][T19377] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  587.880628][T19377] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.5205: invalid indirect mapped block 1819239214 (level 0)
[  587.885977][T19377] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.5205: invalid indirect mapped block 1819239214 (level 1)
[  587.893544][T19377] EXT4-fs (loop2): 1 truncate cleaned up
[  587.896707][T19377] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  587.902836][T19377] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  588.154597][T19387] netlink: 'syz.5.5209': attribute type 4 has an invalid length.
[  588.157701][T19387] netlink: 152 bytes leftover after parsing attributes in process `syz.5.5209'.
[  589.456810][T19410] trusted_key: syz.5.5219 sent an empty control message without MSG_MORE.
[  589.929437][T19426] overlayfs: missing 'workdir'
[  590.246468][T19429] loop2: detected capacity change from 0 to 1024
[  590.579525][T19433] loop2: detected capacity change from 0 to 40427
[  590.583314][T19433] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  590.586261][T19433] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  590.591836][T19433] F2FS-fs (loop2): invalid crc value
[  590.656547][T19433] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  590.662583][T19433] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  590.665481][T19433] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  591.403738][T19448] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5233'.
[  591.407265][T19448] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5233'.
[  591.946099][T19473] loop2: detected capacity change from 0 to 128
[  592.020991][T19475] netlink: 'syz.2.5246': attribute type 6 has an invalid length.
[  592.069224][T19479] loop2: detected capacity change from 0 to 128
[  592.073114][T19479] EXT4-fs (loop2): Test dummy encryption mode enabled
[  592.081057][T19479] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  592.086124][T19479] ext4 filesystem being mounted at /253/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  592.117754][T17030] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  592.739967][T19521] netlink: 'syz.3.5267': attribute type 3 has an invalid length.
[  593.437033][T19538] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5274'.
[  593.619287][T19534] loop2: detected capacity change from 0 to 32768
[  593.623427][T19534] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.5272 (19534)
[  593.643172][T19534] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  593.647235][T19534] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  593.687905][T19554] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  593.759363][T19534] BTRFS info (device loop2): turning off barriers
[  593.762054][T19534] BTRFS info (device loop2): enabling free space tree
[  593.815356][T17030] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  594.089639][    C0] vkms_vblank_simulate: vblank timer overrun
[  594.143676][T19579] tc_dump_action: action bad kind
[  594.303092][T19587] loop2: detected capacity change from 0 to 22
[  594.306675][T19587] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  594.345988][T19587] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  596.585939][T19632] loop2: detected capacity change from 0 to 256
[  598.577020][T19700] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5337'.
[  599.109449][T19715] macsec1: entered promiscuous mode
[  599.113499][T19715] macsec1: entered allmulticast mode
[  599.609094][ T6009] usb 3-1: new full-speed USB device number 29 using dummy_hcd
[  599.782314][ T6009] usb 3-1: config 8 has an invalid interface number: 223 but max is 0
[  599.795830][ T6009] usb 3-1: config 8 contains an unexpected descriptor of type 0x1, skipping
[  599.811679][ T6009] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  599.833992][ T6009] usb 3-1: config 8 has no interface number 0
[  599.856680][ T6009] usb 3-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64
[  599.868511][ T6009] usb 3-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  599.876622][ T6009] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d
[  599.883664][ T6009] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  599.887011][ T6009] usb 3-1: Product: syz
[  599.889289][ T6009] usb 3-1: Manufacturer: syz
[  599.889840][T19741] fuse: Bad value for 'fd'
[  599.891164][ T6009] usb 3-1: SerialNumber: syz
[  600.108946][ T6009] usb 3-1: USB disconnect, device number 29
[  600.216980][T19755] overlayfs: failed to clone upperpath
[  600.943477][T19784] loop2: detected capacity change from 0 to 128
[  600.990818][T19788] loop2: detected capacity change from 0 to 128
[  601.798542][T19805] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[  601.804013][T19805] Error validating options; rc = [-22]
[  602.212089][T19809] loop2: detected capacity change from 0 to 512
[  602.218124][T19809] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  602.253235][T19809] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002]
[  602.256262][T19809] System zones: 0-2, 18-18, 34-34
[  602.261151][T19809] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  602.265661][T19809] ext4 filesystem being mounted at /281/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  602.305055][T17030] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  602.946908][T19843] loop2: detected capacity change from 0 to 128
[  602.952433][T19843] EXT4-fs: Ignoring removed nomblk_io_submit option
[  602.955818][T19843] EXT4-fs (loop2): Test dummy encryption mode enabled
[  602.963287][T19843] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  602.969359][T19843] ext4 filesystem being mounted at /289/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  603.000323][T17030] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  603.057178][T19846] loop2: detected capacity change from 0 to 256
[  603.077270][T19846] FAT-fs (loop2): Directory bread(block 64) failed
[  603.080515][T19846] FAT-fs (loop2): Directory bread(block 65) failed
[  603.083384][T19846] FAT-fs (loop2): Directory bread(block 66) failed
[  603.086029][T19846] FAT-fs (loop2): Directory bread(block 67) failed
[  603.088935][T19846] FAT-fs (loop2): Directory bread(block 68) failed
[  603.091617][T19846] FAT-fs (loop2): Directory bread(block 69) failed
[  603.094587][T19846] FAT-fs (loop2): Directory bread(block 70) failed
[  603.097262][T19846] FAT-fs (loop2): Directory bread(block 71) failed
[  603.100957][T19846] FAT-fs (loop2): Directory bread(block 72) failed
[  603.106246][T19846] FAT-fs (loop2): Directory bread(block 73) failed
[  604.759202][T19878] loop2: detected capacity change from 0 to 512
[  604.771274][T19878] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.5415: casefold flag without casefold feature
[  604.776722][T19878] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.5415: couldn't read orphan inode 15 (err -117)
[  604.784507][T19878] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  604.851782][T17030] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  604.925676][T19889] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  606.087273][T19963] loop2: detected capacity change from 0 to 256
[  606.115366][T19963] FAT-fs (loop2): Directory bread(block 64) failed
[  606.118528][T19963] FAT-fs (loop2): Directory bread(block 65) failed
[  606.122281][T19963] FAT-fs (loop2): Directory bread(block 66) failed
[  606.125072][T19963] FAT-fs (loop2): Directory bread(block 67) failed
[  606.127743][T19963] FAT-fs (loop2): Directory bread(block 68) failed
[  606.134690][T19963] FAT-fs (loop2): Directory bread(block 69) failed
[  606.137512][T19963] FAT-fs (loop2): Directory bread(block 70) failed
[  606.142513][T19963] FAT-fs (loop2): Directory bread(block 71) failed
[  606.145165][T19963] FAT-fs (loop2): Directory bread(block 72) failed
[  606.148251][T19963] FAT-fs (loop2): Directory bread(block 73) failed
[  607.446048][T20001] netlink: 'syz.3.5472': attribute type 21 has an invalid length.
[  607.456513][T20001] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5472'.
[  607.550687][T20007] loop2: detected capacity change from 0 to 128
[  607.878774][ T6009] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  608.051981][ T6009] usb 3-1: unable to get BOS descriptor or descriptor too short
[  608.055604][ T6009] usb 3-1: config 1 interface 0 altsetting 14 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  608.060704][ T6009] usb 3-1: config 1 interface 0 has no altsetting 0
[  608.068863][ T6009] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  608.072573][ T6009] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  608.075980][ T6009] usb 3-1: Product: syz
[  608.077592][ T6009] usb 3-1: Manufacturer: syz
[  608.079658][ T6009] usb 3-1: SerialNumber: syz
[  608.292380][ T6009] usbhid 3-1:1.0: can't add hid device: -22
[  608.294519][ T6009] usbhid 3-1:1.0: probe with driver usbhid failed with error -22
[  608.301622][ T6009] usb 3-1: USB disconnect, device number 30
[  608.941292][T20036] loop2: detected capacity change from 0 to 128
[  609.388166][T20046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5493'.
[  609.867989][ T5949] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  609.875502][ T5949] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  609.883259][ T5949] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  609.887578][ T5949] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  609.894990][ T5949] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  610.571588][T20057] chnl_net:caif_netlink_parms(): no params data found
[  610.672827][T20057] bridge0: port 1(bridge_slave_0) entered blocking state
[  610.675837][T20057] bridge0: port 1(bridge_slave_0) entered disabled state
[  610.682320][T20057] bridge_slave_0: entered allmulticast mode
[  610.686250][T20057] bridge_slave_0: entered promiscuous mode
[  610.696167][T20057] bridge0: port 2(bridge_slave_1) entered blocking state
[  610.700915][T20057] bridge0: port 2(bridge_slave_1) entered disabled state
[  610.703793][T20057] bridge_slave_1: entered allmulticast mode
[  610.707759][T20057] bridge_slave_1: entered promiscuous mode
[  610.756801][T20057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  610.769551][T20057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  610.872679][T20057] team0: Port device team_slave_0 added
[  610.899044][T20057] team0: Port device team_slave_1 added
[  610.913114][T20072] netlink: 'syz.5.5502': attribute type 21 has an invalid length.
[  610.937849][T20072] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5502'.
[  610.949038][T20072] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5502'.
[  610.980740][T20057] batman_adv: batadv0: Adding interface: batadv_slave_0
[  610.983498][T20057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  611.031638][T20057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  611.046078][T20057] batman_adv: batadv0: Adding interface: batadv_slave_1
[  611.054605][T20057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  611.081717][T20057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  611.136564][T20078] kAFS: unable to lookup cell '\/'
[  611.196952][T20057] hsr_slave_0: entered promiscuous mode
[  611.211585][T20057] hsr_slave_1: entered promiscuous mode
[  611.214699][T20057] debugfs: 'hsr0' already exists in 'hsr'
[  611.217021][T20057] Cannot create hsr debugfs directory
[  611.290774][   T33] audit: type=1326 audit(1757520109.546:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20085 comm="syz.3.5509" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa83278eba9 code=0x0
[  611.805785][T20057] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  611.811624][T20057] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  611.816670][T20057] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  611.821578][T20057] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  611.891122][T20057] 8021q: adding VLAN 0 to HW filter on device bond0
[  611.912494][T20057] 8021q: adding VLAN 0 to HW filter on device team0
[  611.920431][T13475] bridge0: port 1(bridge_slave_0) entered blocking state
[  611.922844][T13475] bridge0: port 1(bridge_slave_0) entered forwarding state
[  611.937387][T13475] bridge0: port 2(bridge_slave_1) entered blocking state
[  611.939758][T13475] bridge0: port 2(bridge_slave_1) entered forwarding state
[  611.979237][   T54] Bluetooth: hci1: command tx timeout
[  612.086977][T20057] 8021q: adding VLAN 0 to HW filter on device batadv0
[  612.268219][T20057] veth0_vlan: entered promiscuous mode
[  612.276679][T20057] veth1_vlan: entered promiscuous mode
[  612.310236][T20057] veth0_macvtap: entered promiscuous mode
[  612.317155][T20057] veth1_macvtap: entered promiscuous mode
[  612.330543][T20057] batman_adv: batadv0: Interface activated: batadv_slave_0
[  612.343272][T20057] batman_adv: batadv0: Interface activated: batadv_slave_1
[  612.352565][T20118] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check.
[  612.383804][ T6006] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  612.387343][ T6006] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  612.398382][ T6006] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  612.404666][ T6006] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  612.433261][   T33] audit: type=1326 audit(1757520110.696:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20094 comm="syz.3.5513" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83278eba9 code=0x7fc00000
[  612.575527][ T8102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  612.587628][ T8102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  612.674255][ T8100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  612.677309][ T8100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  613.097088][T20137] syz_tun: entered promiscuous mode
[  613.100021][T20137] macvtap1: entered promiscuous mode
[  613.113464][T20137] syz_tun: left promiscuous mode
[  613.242528][T20143] netlink: 112 bytes leftover after parsing attributes in process `syz.5.5525'.
[  613.254835][T20135] loop7: detected capacity change from 0 to 32768
[  613.275638][T20135] XFS (loop7): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  613.305575][T20135] XFS (loop7): Ending clean mount
[  613.334410][T20057] XFS (loop7): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  614.069352][T20159] Bluetooth: hci1: command tx timeout
[  614.265169][T20171] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5534'.
[  614.384909][T20183] af_packet: tpacket_rcv: packet too big, clamped from 3698 to 4294967272. macoff=96
[  614.438265][T20159] Bluetooth: hci5: unexpected event for opcode 0x2024
[  615.336782][T20211] overlayfs: failed to clone upperpath
[  616.138985][   T54] Bluetooth: hci1: command tx timeout
[  617.845725][T20256] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5569'.
[  617.930256][   T33] audit: type=1326 audit(1757520116.186:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20259 comm="syz.5.5571" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcbff8eba9 code=0x7ffc0000
[  617.939056][   T33] audit: type=1326 audit(1757520116.196:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20259 comm="syz.5.5571" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcbff8eba9 code=0x7ffc0000
[  617.947713][   T33] audit: type=1326 audit(1757520116.196:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20259 comm="syz.5.5571" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbcbff8eba9 code=0x7ffc0000
[  617.965649][   T33] audit: type=1326 audit(1757520116.196:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20259 comm="syz.5.5571" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcbff8eba9 code=0x7ffc0000
[  617.974239][   T33] audit: type=1326 audit(1757520116.196:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20259 comm="syz.5.5571" exe="/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fbcbff8eba9 code=0x7ffc0000
[  617.988896][   T33] audit: type=1326 audit(1757520116.216:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20259 comm="syz.5.5571" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcbff8eba9 code=0x7ffc0000
[  617.997175][   T33] audit: type=1326 audit(1757520116.216:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20259 comm="syz.5.5571" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcbff8eba9 code=0x7ffc0000
[  618.013981][   T33] audit: type=1326 audit(1757520116.246:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20259 comm="syz.5.5571" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbcbff8eba9 code=0x7ffc0000
[  618.023302][   T33] audit: type=1326 audit(1757520116.246:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20259 comm="syz.5.5571" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcbff8eba9 code=0x7ffc0000
[  618.038205][   T33] audit: type=1326 audit(1757520116.246:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20259 comm="syz.5.5571" exe="/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fbcbff8eba9 code=0x7ffc0000
[  618.149111][T20266] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5574'.
[  618.219272][   T54] Bluetooth: hci1: command tx timeout
[  620.444707][T20337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5608'.
[  620.451829][T20336] hsr0: entered promiscuous mode
[  620.455200][T20336] macvlan2: entered allmulticast mode
[  620.457483][T20336] hsr0: entered allmulticast mode
[  620.459853][T20336] hsr_slave_0: entered allmulticast mode
[  620.462516][T20336] hsr_slave_1: entered allmulticast mode
[  620.467174][T20336] hsr0: left allmulticast mode
[  620.474424][T20336] hsr_slave_0: left allmulticast mode
[  620.476525][T20336] hsr_slave_1: left allmulticast mode
[  620.957078][T20356] loop7: detected capacity change from 0 to 1024
[  621.793886][T20386] team0: Port device bond0 removed
[  621.801864][T20386] bridge_slave_0: left allmulticast mode
[  621.804185][T20386] bridge_slave_0: left promiscuous mode
[  621.809385][T20386] bridge0: port 1(bridge_slave_0) entered disabled state
[  621.826940][T20386] bond0: (slave bridge_slave_1): Releasing backup interface
[  621.844345][T20386] bond0: (slave bond_slave_0): Releasing backup interface
[  621.857023][T20386] bond0: (slave bond_slave_1): Releasing backup interface
[  621.879732][T20386] team0: Port device team_slave_0 removed
[  621.890403][T20386] team0: Port device team_slave_1 removed
[  621.893668][T20386] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  621.896813][T20386] batman_adv: batadv0: Removing interface: batadv_slave_0
[  621.908568][T20386] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  621.912201][T20386] batman_adv: batadv0: Removing interface: batadv_slave_1
[  622.191196][T20406] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5639'.
[  623.574901][T20473] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5672'.
[  623.791574][T20493] loop7: detected capacity change from 0 to 128
[  623.795732][T20493] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256
[  623.802596][T20493] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  623.833914][T20496] bond_slave_0: entered promiscuous mode
[  623.836640][T20496] bond_slave_1: entered promiscuous mode
[  623.854767][T20496] macvtap1: entered allmulticast mode
[  623.857411][T20496] bond0: entered allmulticast mode
[  623.867176][T20496] bond_slave_0: entered allmulticast mode
[  623.870718][T20496] bond_slave_1: entered allmulticast mode
[  623.874694][T20496] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  623.891324][T20496] bond0: left allmulticast mode
[  623.893445][T20496] bond_slave_0: left allmulticast mode
[  623.895764][T20496] bond_slave_1: left allmulticast mode
[  623.898266][T20496] bond_slave_0: left promiscuous mode
[  623.900756][T20496] bond_slave_1: left promiscuous mode
[  624.146735][T20500] loop7: detected capacity change from 0 to 32768
[  624.150976][T20500] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.5684 (20500)
[  624.156309][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  624.159013][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  624.166745][T20500] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  624.173628][T20500] BTRFS info (device loop7): using crc32c (crc32c-lib) checksum algorithm
[  624.179826][T20500] BTRFS warning (device loop7): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  624.278003][T20500] BTRFS info (device loop7): rebuilding free space tree
[  624.347990][T20500] BTRFS info (device loop7): disabling free space tree
[  624.353483][T20500] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  624.357622][T20500] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  624.406688][T20500] BTRFS info (device loop7): enabling ssd optimizations
[  624.413770][T20500] BTRFS info (device loop7): turning off barriers
[  624.422359][T20500] BTRFS info (device loop7): turning on flush-on-commit
[  624.433414][T20500] BTRFS info (device loop7): enabling disk space caching
[  624.440132][T20500] BTRFS info (device loop7): force clearing of disk cache
[  624.451281][T20500] BTRFS info (device loop7): doing ref verification
[  624.457858][T20500] BTRFS info (device loop7): use lzo compression, level 0
[  624.544176][T20057] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  624.771578][    C0] vkms_vblank_simulate: vblank timer overrun
[  624.877271][T20540] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  626.158341][T20593] vlan2: entered promiscuous mode
[  626.163814][T20593] macvlan1: entered promiscuous mode
[  627.892548][T20638] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5740'.
[  628.050730][T20640] ufs: You didn't specify the type of your ufs filesystem
[  628.050730][T20640] 
[  628.050730][T20640] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  628.050730][T20640] 
[  628.050730][T20640] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  628.064144][T20640] ufs: ufstype=old is supported read-only
[  628.072694][T20640] I/O error, dev loop11, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  628.442137][T20655] erspan0: entered promiscuous mode
[  628.567097][T20660] loop7: detected capacity change from 0 to 4096
[  628.571026][T20660] ntfs3(loop7): Different NTFS sector size (1024) and media sector size (512).
[  628.574807][T20660] ntfs3(loop7): ino=3, mi_enum_attr
[  628.576925][T20660] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  628.588276][T20660] ntfs3(loop7): volume is dirty and "force" flag is not set!
[  628.724703][T20670] loop7: detected capacity change from 0 to 2048
[  628.729245][T20670] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  628.927688][T20691] overlayfs: failed to clone lowerpath
[  628.993291][T20697] overlayfs: failed to clone upperpath
[  629.103674][T20702] loop7: detected capacity change from 0 to 512
[  629.115066][T20702] FAT-fs (loop7): unable to read block(75161927680) for building NFS inode
[  630.142616][   T33] kauditd_printk_skb: 4 callbacks suppressed
[  630.142868][   T33] audit: type=1326 audit(1757520128.396:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20698 comm="syz.3.5768" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83278eba9 code=0x7ffc0000
[  630.332630][   T33] audit: type=1326 audit(1757520128.396:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20698 comm="syz.3.5768" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83278eba9 code=0x7ffc0000
[  630.368989][   T33] audit: type=1326 audit(1757520128.396:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20698 comm="syz.3.5768" exe="/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7fa83278eba9 code=0x7ffc0000
[  630.392510][   T33] audit: type=1326 audit(1757520128.396:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20698 comm="syz.3.5768" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83278eba9 code=0x7ffc0000
[  630.412089][   T33] audit: type=1326 audit(1757520128.396:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20698 comm="syz.3.5768" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83278eba9 code=0x7ffc0000
[  630.440987][   T33] audit: type=1326 audit(1757520128.396:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20698 comm="syz.3.5768" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa83278eba9 code=0x7ffc0000
[  630.453161][   T33] audit: type=1326 audit(1757520128.396:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20698 comm="syz.3.5768" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83278eba9 code=0x7ffc0000
[  630.466701][   T33] audit: type=1326 audit(1757520128.396:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20698 comm="syz.3.5768" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83278eba9 code=0x7ffc0000
[  630.478319][   T33] audit: type=1326 audit(1757520128.396:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20698 comm="syz.3.5768" exe="/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa83278eba9 code=0x7ffc0000
[  630.490064][   T33] audit: type=1326 audit(1757520128.396:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20698 comm="syz.3.5768" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83278eba9 code=0x7ffc0000
[  630.821248][T20742] syz_tun: entered promiscuous mode
[  630.826963][T20742] syz_tun: left promiscuous mode
[  631.652809][T20798] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340
[  633.051624][T20820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5822'.
[  633.836370][T20833] openvswitch: netlink: IPv4 frag type 32 is out of range max 2
[  634.553772][T20857] loop7: detected capacity change from 0 to 1024
[  634.556443][T20857] EXT4-fs: Ignoring removed nobh option
[  634.560946][T20857] EXT4-fs: Ignoring removed bh option
[  634.589311][T20857] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  635.144558][T20873] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.5838: Allocating blocks 497-513 which overlap fs metadata
[  635.401881][T20855] EXT4-fs (loop7): pa ffff8881250d5cb0: logic 16, phys. 241, len 17
[  635.405843][T20855] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[  635.557756][T20057] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  635.571710][T20895] CIFS: VFS: Malformed UNC in devname
[  635.673590][T20899] loop7: detected capacity change from 0 to 8
[  635.684971][T20899] unable to read xattr id index table
[  635.706463][T20901] overlayfs: failed to clone upperpath
[  637.161598][T20921] netlink: 'syz.7.5865': attribute type 4 has an invalid length.
[  637.175889][T20921] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5865'.
[  637.223395][T20923] loop7: detected capacity change from 0 to 512
[  637.245241][T20923] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  637.251917][T20923] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it
[  637.256087][T20923] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.5866: Corrupt directory, running e2fsck is recommended
[  637.265624][T20923] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117
[  637.269472][T20923] EXT4-fs error (device loop7): ext4_iget_extra_inode:5104: inode #15: comm syz.7.5866: corrupted in-inode xattr: invalid ea_ino
[  637.275134][T20923] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.5866: couldn't read orphan inode 15 (err -117)
[  637.281523][T20923] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  637.288315][T20923] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  637.292563][T20923] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it
[  637.296713][T20923] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.5866: Corrupt directory, running e2fsck is recommended
[  637.302986][T20923] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  637.308118][T20923] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it
[  637.317305][T20923] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.5866: Corrupt directory, running e2fsck is recommended
[  637.327018][T20923] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  637.332165][T20923] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it
[  637.336575][T20923] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.5866: Corrupt directory, running e2fsck is recommended
[  637.342482][T20923] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  637.355017][T20923] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 3: comm syz.7.5866: path /63/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0
[  637.372237][T20923] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 64: comm syz.7.5866: path /63/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  637.435806][T20057] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  638.313084][T20956] overlayfs: failed to clone upperpath
[  638.925736][T20964] ptrace attach of "/syz-executor exec"[20965] was attempted by "/syz-executor exec"[20964]
[  638.946153][T20964] 9pnet_fd: Insufficient options for proto=fd
[  639.072773][   T33] kauditd_printk_skb: 36 callbacks suppressed
[  639.072825][   T33] audit: type=1326 audit(1757520137.236:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20961 comm="syz.3.5884" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa83278eba9 code=0x0
[  639.543977][T20987] trusted_key: encrypted_key: master key parameter is missing
[  642.205073][T21027] loop7: detected capacity change from 0 to 40427
[  642.208372][T21027] F2FS-fs (loop7): Image doesn't support compression
[  642.211075][T21027] F2FS-fs (loop7): build fault injection rate: 690
[  642.215182][T21027] F2FS-fs (loop7): invalid crc value
[  642.272358][T21027] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  642.275465][T21027] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  642.722895][T21052] netdevsim netdevsim7 netdevsim0: entered promiscuous mode
[  643.540231][   T12] unregister_netdevice: waiting for lo to become free. Usage count = 2
[  643.543034][   T12] ref_tracker: netdev@ffff88802863a610 has 1/1 users at
[  643.543034][   T12]      dst_init+0xd9/0x450
[  643.543034][   T12]      dst_alloc+0x12a/0x170
[  643.543034][   T12]      ip_route_input_rcu+0x1ed5/0x2ff0
[  643.543034][   T12]      ip_route_input_noref+0x167/0x250
[  643.543034][   T12]      ip_rcv_finish_core+0x5af/0x1c00
[  643.543034][   T12]      ip_rcv_finish+0x14c/0x2f0
[  643.543034][   T12]      NF_HOOK+0x30c/0x3a0
[  643.543034][   T12]      __netif_receive_skb+0x143/0x380
[  643.543034][   T12]      netif_receive_skb+0x1cb/0x790
[  643.543034][   T12]      tun_rx_batched+0x1b9/0x730
[  643.543034][   T12]      tun_get_user+0x2aa2/0x3e20
[  643.543034][   T12]      tun_chr_write_iter+0x113/0x200
[  643.543034][   T12]      vfs_write+0x5c9/0xb30
[  643.543034][   T12]      ksys_write+0x145/0x250
[  643.543034][   T12]      do_syscall_64+0xfa/0x3b0
[  643.543034][   T12]      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  643.543034][   T12] 
[  643.574770][    C0] vkms_vblank_simulate: vblank timer overrun
[  643.596669][T21074] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  643.599658][T21074] IPv6: NLM_F_CREATE should be set when creating new route
[  643.602560][T21074] IPv6: NLM_F_CREATE should be set when creating new route
[  643.605418][T21074] IPv6: NLM_F_CREATE should be set when creating new route

VM DIAGNOSIS:
16:02:22  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000f6eb0
R8 =ffff88801fbd8237 R9 =1ffff11003f7b046 R10=dffffc0000000000 R11=ffffffff854f7200
R12=dffffc0000000000 R13=ffffffff99b0096e R14=ffffffff99df5420 R15=0000000000000000
RIP=ffffffff854f727c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055557934e808 CR3=000000003924a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=9bfdb5f7fd0ff78e bfda7b3ecadff45c
XMM06=dfa28acd779675ee cd7def27fdffb2d7 XMM07=97e8bf45a7ae23b5 965edef3ccfeff0e
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fa832812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=ffff88811d415000 RCX=2209710498b76d00 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000008 RBP=0000000000000001 RSP=ffffc900040c76d0
R8 =ffffffff8fa3a037 R9 =1ffffffff1f47406 R10=dffffc0000000000 R11=fffffbfff1f47407
R12=dffffc0000000000 R13=0000607e5c04f130 R14=0000000000003b96 R15=0000000000000001
RIP=ffffffff81bfb690 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055555ca81500 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2d220000 CR3=0000000028abc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff8133c57e ffffffff8133c57e
XMM02=ffffffff823c8ce4 ffffffff8133c57e XMM03=ffffffff823c821c ffffffff823c8194
XMM04=ffffffff823c8ce4 ffffffff823c8b7d XMM05=ffffffff823c821c ffffffff823c8194
XMM06=ffffffff823c7ed2 ffffffff823c7e7e XMM07=ffffffff82392755 ffffffff82392708
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007fbcc0012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
