last executing test programs:

9m58.417295468s ago: executing program 32 (id=254):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000000000000850000007b000000850000002a00000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$unix(r2, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x40}, 0x4008000)
close(0x3)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0)

9m11.378489471s ago: executing program 33 (id=699):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x4, &(0x7f0000000240), 0x22, 0x4d5, &(0x7f0000000580)="$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")
creat(&(0x7f0000000080)='./file1\x00', 0x64)

7m58.521528267s ago: executing program 1 (id=1384):
r0 = socket(0x10, 0x803, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8844)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
sched_setaffinity(r1, 0x8, &(0x7f0000000340)=0x2)
getgroups(0x0, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff})
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r8=>r6, 0x0, 0x0, 0xfe, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x0, 0x0, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r8, 0x0, 0x1, 0x64, 0x1000007, 0x0, @dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x8000, 0xfffffffe}})

7m58.339768887s ago: executing program 34 (id=1383):
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0)

7m57.305565135s ago: executing program 1 (id=1387):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710425000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

7m57.108232795s ago: executing program 1 (id=1388):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000006540)='./file1\x00', 0x2a08800, &(0x7f0000000040)=ANY=[], 0x6, 0x69f, &(0x7f0000000580)="$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")
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic', 0xb)
getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000080))
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

7m56.929383294s ago: executing program 1 (id=1390):
unshare(0x2040400)
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x262002, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, 0x0, 0x0)

7m56.701346104s ago: executing program 1 (id=1395):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d00)={0x124, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_IE_PROBE_RESP={0x106, 0x7f, [@measure_req={0x26, 0x100, {0x90, 0x1, 0x3, "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"}}]}]]}, 0x124}}, 0x24000080)

7m56.517160699s ago: executing program 35 (id=1395):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d00)={0x124, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_IE_PROBE_RESP={0x106, 0x7f, [@measure_req={0x26, 0x100, {0x90, 0x1, 0x3, "c8a6a41aa5eff2003bde8abeb1e09eb4aceafe4cb2c38af4663f66e7aeb312a1dc7cb4d552882e4415cf3ed573578503f2a292b448d64a6b7fa7c333fcac9792d32789de33bd669b8af46ca220908de157a1b508d4803bb0d0ed56889e2581bd7a94fa0dd43c8be9fafa063ba93cadfbc9405168b0e86ed8a0c07a3872a59ba26edfe58a05575945475e362668aba6b14ddbb4f972f05c272cf24ddb31b20bf56ab0648f99592de3177d7e628f6f1657646fc8e46d06044269085349f4b89e2a308d743d4dd4e8615db6fddc904e5278196e7cc17ca21044d93be131b2689120574dbc02a287626fd6850b11d1733f7b64608654be2e3be8079efe816b"}}]}]]}, 0x124}}, 0x24000080)

7m50.935031532s ago: executing program 5 (id=1385):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x2808044, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x1, 0x294, &(0x7f0000000500)="$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")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x0, 0x0, &(0x7f0000000140))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)

7m50.76474902s ago: executing program 5 (id=1430):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3, 0x3}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10)
bind$tipc(r1, 0x0, 0x0)

7m50.612040789s ago: executing program 5 (id=1433):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")
creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a)
r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r0, 0x2007ffc)
sendfile(r0, r0, 0x0, 0x800000009)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffffb, 0x3, 0x0, 0x0, 0x17, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]})
openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file1\x00', 0x42, 0x0)

7m50.416810485s ago: executing program 5 (id=1434):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00002, &(0x7f0000000680)={[{@data_err_ignore}, {@abort}, {@nombcache}, {@noload}, {@noblock_validity}, {@grpjquota}, {@oldalloc}, {@noblock_validity}, {@bsdgroups}, {@barrier_val={'barrier', 0x3d, 0x53}}]}, 0xfd, 0x49e, &(0x7f0000000e00)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x10980, 0x90)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

7m49.74279619s ago: executing program 5 (id=1437):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e1208001e0000000401040008004000014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)

7m49.515238967s ago: executing program 36 (id=1437):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e1208001e0000000401040008004000014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)

7m33.302451298s ago: executing program 7 (id=1553):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002680)=@mangle={'mangle\x00', 0x2, 0x6, 0x778, 0x0, 0x478, 0x2a0, 0x1b0, 0x388, 0x6a8, 0x6a8, 0x6a8, 0x6a8, 0x6a8, 0x6, 0x0, {[{{@ipv6={@mcast1, @mcast1, [], [0x0, 0xff000000], 'team0\x00', 'vlan1\x00', {}, {}, 0x11}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x5c, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [0x0, 0xff], [0x0, 0xffffffff, 0xffffffff], [0x0, 0x0, 0x0, 0xff]}}, @common=@inet=@multiport={{0x50}, {0x0, 0xc, [0x1, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4e21, 0x0, 0x0, 0x4e20, 0x0, 0xfffd], [0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0xfd, 0xfd]}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x18, 0xff, 0x6}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0xff000000, 0xffffff00], '\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0xa8, 0xe8, 0x48000000}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x8, 0x4, @ipv6=@private0, 0x4e23}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1c}, @mcast1, [0xff000000, 0xffffffff, 0xffffff00, 0xffffff00], [0xffffff00, 0xffffff00, 0xff], 'veth0_vlan\x00', 'veth1_to_bond\x00', {0x9865820c52afa8d5}, {0xff}, 0x84, 0x1, 0x0, 0x28}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x37}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x9, 0x0, 0x0, [@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @local}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x814)

7m33.301967157s ago: executing program 7 (id=1554):
socket$inet6_tcp(0xa, 0x1, 0x0)
memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
fanotify_init(0x8, 0x80000)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"e6891a6b3d40616e96c2c1897fa141a9", 0x0, 0x0, {0x7fffffffffffffff, 0x6}, {0xff800000, 0x2}, 0xd4c, [0xa, 0x10000, 0x81, 0x6, 0x2, 0x0, 0x3, 0x1, 0x6c68, 0x100, 0x708, 0x9, 0xd06, 0xa6b, 0x4, 0x54e0]})
socket$caif_seqpacket(0x25, 0x5, 0x1)
syz_io_uring_setup(0x10d, &(0x7f0000000400)={0x0, 0x1000b6e7, 0x0, 0x3}, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x2)
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000280)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r1=>0x0], 0x40000012})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000040)=[0x1], &(0x7f0000000200), &(0x7f00000000c0), 0x0, 0x7f})

7m33.252396705s ago: executing program 7 (id=1555):
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1)

7m33.131733326s ago: executing program 7 (id=1556):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c3, &(0x7f0000000400)={[{@fat=@time_offset={'time_offset', 0x3d, 0x39e}}, {@utf8}, {@uni_xlate}, {@shortname_lower}, {@rodir}, {@shortname_mixed}, {@numtail}, {@fat=@nfs_stale_rw}, {@fat=@dmask={'dmask', 0x3d, 0x81}}, {@shortname_lower}, {@fat=@sys_immutable}, {@uni_xlate}]}, 0x0, 0x29f, &(0x7f0000000840)="$eJzs3UFrE1sYxvGnSdukKW2yKBfuhct9uW50M7TxEwRpQQwotRF1IUztREPGpGRiJCK2O7d+juLSlYL6Bbpx517cFEFw04UYaZKxaRswra1Tzf8HYU7OOe/MmZyZ8M5AJlvXn94rFwOn6NYVS5pi0rq2pcxOqWuku4y1y+Pqta5zk5/f/Xv1xs1LuXx+ftFsIbd0Pmtm0/+9evDo2f9v6pPXnk+/TGgzc2vrU/b95l+bf299XQrXXpVcW65W6+6y79lKKSg7Zld8zw08K1UCr1a3nvaiX11dbZpbWZlKrda8IDC30rSy17R61eq1prl33FLFHMexqZSGTfzQEYWNxUU3dyKDQRQm+lXWajk33rexsPErBgUAAE6XqPL/u6XASoFVqnvy+4P5f0yHyP+loc7/D4/8fxjs5P+p7vm7F/k/AAAAAAAAAAAAAAAAAAAAAAC/g+1WK91qtdLhMnwlJCUlhe+jHidOBvM/3Hp+uJeU/CeNQqPQWXbac0WV5MvT7Jj0pX08dHXKCxfz87PWltFrf60bv9YoxJUI40OZ/vFznXjrjV/TmFK9288qrZn+8dk+8Y3CuM6eaSW6W/bkKK23t1WVr5X2cb0b/3jO7MLl/L74iXY/AAAAAAD+BI59d+D6vd3uWPjYkH3tncrd+wNK/+D+wL7r61H9MxrdfgMAAAAAMEyC5sOy6/tebQgK4f8fHMsKo//okoN2HpXUrXlxWuZikEJM0lHD4z83yx8l7amZiXy6j6Pw4X7nDBikc5TfSgAAAABOQpj0j0Q9EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhtigDw8L+x/l2WM9m4tHs5cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA6fAtAAD//2kbF4o=")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x15080, 0x0)
mount$bind(&(0x7f0000000080)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020)

7m32.997265979s ago: executing program 7 (id=1557):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x401}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
creat(&(0x7f00000002c0)='./file0\x00', 0x109)
setxattr$incfs_id(&(0x7f0000000740)='./file0\x00', &(0x7f00000007c0), 0x0, 0x0, 0x1)

7m32.842357734s ago: executing program 7 (id=1560):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, 0x0, 0x0)

7m32.615163636s ago: executing program 37 (id=1560):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, 0x0, 0x0)

6m13.388531991s ago: executing program 8 (id=2304):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_pressure(r0, &(0x7f0000000740)='io.pressure\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x40000000000004)

6m13.388191867s ago: executing program 8 (id=2305):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc70, 0xf003, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x80, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x100, 0x9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xc, 0x8, 0x5}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000240)={0x20, 0xb, 0xf0, {0xf0, 0x21, "2c1c7b0a3c2625fe85265b3d1139e361cb1737d07f7cf032419401ce229c9a3e25aee3cf32428fca24ec5c6a503438c89bae07384d3d8105fd1b3133bafb1d31a6ad25efd7885bfd0c85c446839e3f54b761a65e07544ecaf747bbf74d2314bb75eb8961fb367f9d7816ce65f405fe66b54f6b5fb959f11f1ab582972ca66edfe2aeec4b9ee654814548b57b4b6bd72546a6d65cf683eb95e6e27313f5d17e201778661dbac4672767d795d048eec812387acfc1a1b222d43199efd0962db0ee2880b1d13ce08a7548967f3f42b2b77dc429390083234ee5f631ad6200bc7b3b4cf95078b954dea61d1da845cd6b"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

6m11.303346619s ago: executing program 8 (id=2316):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=@mpls_newroute={0x1c, 0x18, 0x1, 0x70bd2c, 0x25dfdbfd, {0x1c, 0x20, 0xc, 0xe, 0xfc, 0x2, 0xfd, 0x0, 0x1c00}}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x0)

6m11.218233162s ago: executing program 8 (id=2317):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa04710, &(0x7f0000000ac0)={[{@nouid32}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@noblock_validity}, {@abort}, {@mblk_io_submit}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x80222a}}, {@delalloc}, {@test_dummy_encryption}]}, 0xfd, 0x461, &(0x7f0000000bc0)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020)
chdir(0x0)

6m11.108078756s ago: executing program 8 (id=2321):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x2, 0x9}}, 0x2e)

6m10.768762088s ago: executing program 8 (id=2322):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

6m10.655643698s ago: executing program 38 (id=2322):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m44.342955869s ago: executing program 6 (id=4836):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffd}}, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)

2m44.342655935s ago: executing program 6 (id=4837):
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x0, &(0x7f00000002c0)={{0x77359400}, {0x0, 0x3938700}}, 0xffffffffffffffff)

2m44.275610496s ago: executing program 6 (id=4838):
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009a47ad20b80402024630000000010902120001000040000904"], 0x0)

2m43.08830373s ago: executing program 6 (id=4864):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x804008, &(0x7f0000000100)=ANY=[], 0x5a, 0x212, &(0x7f0000000440)="$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")
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

2m42.988441748s ago: executing program 6 (id=4868):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x11}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x88, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000340)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

2m42.759165503s ago: executing program 6 (id=4873):
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x40, &(0x7f0000000000)=ANY=[], 0x4, 0xf82, &(0x7f0000003080)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40106e8c, &(0x7f00000001c0)={@id={0x2, 0x0, @c}})

2m42.655482097s ago: executing program 39 (id=4873):
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x40, &(0x7f0000000000)=ANY=[], 0x4, 0xf82, &(0x7f0000003080)="$eJzs3U9sHNX9APA36/W/2MRr4AcGfoQUWhEo2CGJ1PQWBOqlEuLSOygkNMJQ1NBKREBMD4hKiCIhThUHEBdKpRSpSKBKFeqp7alVb+0F9UKlKpWCemgjJa5iv1nvPu9k12N7dtf7+UjffX7zZuf7HXsTz4xn3wZgZNXWHo8dW8hCeOeztx99+ansk2vL7mqucXDtMYu9RghhvKWfJdv7Ii64cumlk53aLBxZe8z74bGLzefOhBBWwsHweWiEj5aWv/rw3UcOffza1C1vnnvmlV3a/aZ0PwAAYC+68Mflv973jz88MH/5woETYbK5PD8+b8T+TDzuPxwPlPPj5Vpo72ct0WoiWW8sRi1ZbyxZr57kqRfkG0+2M16w3kSXfGMtyzrtJwAAAAyj/Ly2EbLaYlu/VltcXD/vv+aLuYls8bkzy6fP9qlQAAAAoLR/n1+76XaIY2oAahBpTOcvsK0976Pvbv0524paxfnqFecbmSj3ehNCCCGE2LlwPCKGIFbnKrzYAAAAANBhvrBNVnZ2pq7m1hq95b/4cK3z82EHJK+/zdNO7PDr//r5pzavUGn+DnY//3if8193/z941f84AACUt1ePJvP9yo+j83kM0nkEx9qeNTO21fOPWrKd+hbrLJpXcFjmGyyqc6ziOsoqqn+rP8d+Kao/nQ9zUBXVn87TOaiK6p+suI6yiurvcOUnDOI/66L6pyuuo6yi+vdVXEdZRfXPVFxHWUX1z1ZcR1lF9d9QcR1lFdW/v+I6yiqqf1huqy2qv1FxHWUV1T+/3gz8YURR/TdWXEdZRfXfVHEdZRXVf3PFdfTLnbHNvw8HCtab6XDwN3AHgwAAAEBH/x36+f9GNOoDUIMQQgx9vLr+y7B9+VSHZWJbURuAGnYrpju9hoQQQoiBjPN9vPYAAAAADIb8fQH5u95Xo3x8bNP4396/9piP11vHpzY2kI+Pd9n+RJfxyS7jAAAAQAi/ef30bW9lG/Pdpe/p3+p8ePm8UdPhk6uhxDxG6XyEW82/3XnPtpu/84QjwzIbGwAAAHtV9p3Pr97/6HsvzF++cOBEy9nv1Xi+m88DWo/XBj6N/fy+gNmkn+Xn0Cfa89QK1kuvD9xQtL3Ht7mjAAAAMMLy8/dGyGqLLefdjVCrLS5unI8vhPHs9JnlU4djP/98lt/PjU9eW/5QxXUDAAAAvds43+98/p9/ju9CmMgWnzuzfPrsen+2uXy81npdYG5jedZ6XaCRLD9SsPxo7MfP7wzfn5teW7548gfLT+30zgMAAMCIOPviuWeeXF4+9cPR+aIeQtjWdsIg7IUvfLGrX/T7fyYAAGCnffnl2+M/Ojr72/X3/2/Mf3c1fnEw9htxbr8/xeX5fQL5+wA2vV//ifY8c0XrPd++XiNZbyzGZFL3VMt2wtp8g+3Pmy/K12jfzkRBvpkk32ySL52noJ6sn3WYSzB0mAkwX28uWZ7Ow1hPcmRJ/rs75AIAAIDc0gvPPr909sVzD5559smnTz196rmjR45/+/jxww9966Gltfv6l1rv7gcAAACG0cZNv/2uBAAAAAAAAAAAAAAAAAAAAEZXFR8n1u99BAAAgFH3r/MhhBUhCiL/gMF+1zHskQ1ADbsXq5P9r2FvR/DvUAghhBDbjP6e9005lhmMWF1NP2keAAAAYHddufTSydZ2k5VsR/M1t9ZYb67GvHk7++Bf5q9FvtrFh9uvl+zb0WoYdVW//uUf1PyTHcc/eHVn869diG9s9Lv//1dr38CJtcd67E33mvfepV8sNPOHEG6v95g/3f/He83Y7lCS/97QW/7V95L8T7T1ar3mvy/Jv6/H/Jv2//miDFPXzX9/zL8Q+4fu6TV/+y5OJtl6fQF8M9n/p0Kv+ZP9b/SYMPFAzA8Ao6j523z1fH8L2WH5UUJ+PD0T+/n+5ges6d0PWz3+ryXbqW+78vbt5sdBt8Z+86hupT1vbqv159+X2djeULLO1LDcVVJU/079HHdbUf3jFddRVlH9ExXXUVZR/Z3P3gdPUf3XP3scHEX193whos+K6h+W68pF9c9UXEdZRfXPVlxHWUX1b/X3eL8U1b+/4jrKKqp/ruI6yiqqv+RltcoV1T9fcR1lFdV/Y8V1lFVU/00V11FWUf03V1xHv9wR26Lz4fz8cy6O5f1G0p/s8L3s+Y8hAAAAwK7650DO/9dy5aDvtQghhBBiGGJsAGoQYpjjP6vr+l2HEGL3YnW1n1cf6LdsiO4VB2Dn7O5sFgw6P//R5uc/2vz8uZ78L/FZ0s+NdRmvdxkf7zI+kYxnyRMni8ajm5LtrubXNaObu4z/X9yDovH9yfN/nIzf2mX7C13Gb+syfnuX8Tu6jAMAADAabomt80MAAADYu17+5adv/PreJy7NX75w4ESY2DTv/OHYn4x/W3899tN573Pj8W/+P4n992P7u9j+PVnf/ScAAACw+/LPifH3fwAAANi78s8pdf4PAAAAe9d8bJ3/AwAAwN51Y2yd/wMAAMAelk11Xhzb/LrA3bHtdV4/AGDw/X9s74ztgdjeFduvxTY/Drgntl+vqD4AYOf8/Hs/Pf5WtjHf/9Fk/EpcnrebrKxfKchq7TP5T8d2X2y/0WM96ecB9Jo/t7/HPLuVf26b+QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvaO29njs2EIWwjufvf3ozybe+PO1ZXc11zi49pjFXiOEMN58Xj660f9VXPHKpZdOtrZXY5uFIyELWXN5eOxiM9NMCGElHAyfh0b4aGn5qw/ffeTQx69N3fLmuWde2cVvQdv+AQAAwF70vwAAAP//7lUWHg==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40106e8c, &(0x7f00000001c0)={@id={0x2, 0x0, @c}})

2m36.75098313s ago: executing program 0 (id=4957):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x40, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x40000)

2m36.685594644s ago: executing program 0 (id=4958):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1)
ioctl$TCSETS(r0, 0x8926, 0x0)

2m36.587784157s ago: executing program 0 (id=4959):
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
fcntl$setpipe(r0, 0x408, 0x7)

2m36.58763141s ago: executing program 0 (id=4960):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000190001002cbd700000c8c3532d"], 0x24}}, 0x0)

2m36.514925675s ago: executing program 0 (id=4961):
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
pwritev(r0, &(0x7f0000000f80)=[{&(0x7f0000000500)="10", 0x1}, {0x0}], 0x2, 0x6, 0x80)

2m36.514637472s ago: executing program 0 (id=4962):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x54)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
sync()

2m21.436350322s ago: executing program 40 (id=4962):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x54)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
sync()

1m37.096921194s ago: executing program 2 (id=5678):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x69, 0x10, 0xae}, [@ldst={0x4, 0x0, 0x6, 0x9}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x49)

1m37.096241769s ago: executing program 2 (id=5680):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40045304, &(0x7f00000002c0)={0xffffffff, 0x0, 0x0, 'queue1\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000040)={0x7, 0x7a124, 0x60, {0x6, 0x100}, 0x0, 0x9})

1m37.036547648s ago: executing program 2 (id=5681):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1m36.887031406s ago: executing program 2 (id=5682):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000001240)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2081413, 0x0, 0x1, 0x0, &(0x7f0000000080))
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000001100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [], 0x2c})

1m36.848941308s ago: executing program 2 (id=5683):
ioprio_set$pid(0x2, 0x0, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sendfile(r0, r0, 0x0, 0x1000)

1m36.594339801s ago: executing program 2 (id=5687):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000021002101000000000000dc000a000000000000000000000008001a"], 0x24}}, 0x0)

1m36.423028107s ago: executing program 41 (id=5687):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000021002101000000000000dc000a000000000000000000000008001a"], 0x24}}, 0x0)

5.816958933s ago: executing program 9 (id=6812):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x38, 0x0, 0x7, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xa3c}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0)

5.747557857s ago: executing program 9 (id=6813):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000006207000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f000000a200)='afs_cell\x00', r0}, 0x10)
r1 = fsopen(&(0x7f0000000040)='afs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000300)='source', &(0x7f00000000c0)='%(,:', 0x0)

5.747243895s ago: executing program 9 (id=6814):
r0 = syz_open_procfs(0x0, &(0x7f0000000480)='pagemap\x00')
preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000500)=""/189, 0xbd}], 0x1, 0x0, 0x0)

5.681017576s ago: executing program 9 (id=6815):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000001380)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6167655f657874656e745f63616368652c646973636172642c6e6f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858"], 0x1, 0x5505, &(0x7f0000002480)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f0000000600)='./bus\x00', 0x226004b, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}]})

5.324833888s ago: executing program 9 (id=6822):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x39, 0x1, 0x7fffa, 0x25dfdbfe, {0x1}, [@typed={0x8, 0xec, 0x0, 0x0, @u32=0x4108}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)

4.447136731s ago: executing program 9 (id=6824):
clock_nanosleep(0x1, 0x1, &(0x7f0000000040), &(0x7f00000000c0))

4.317533999s ago: executing program 42 (id=6824):
clock_nanosleep(0x1, 0x1, &(0x7f0000000040), &(0x7f00000000c0))

834.53309ms ago: executing program 3 (id=6870):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_mreq(r0, 0x29, 0x15, 0x0, 0x14)

780.976546ms ago: executing program 3 (id=6873):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000340)='GPL\x00'}, 0x78)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)="a0", 0x0, 0x1}, 0x50)

714.157264ms ago: executing program 3 (id=6874):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$poke(0x420f, r0, 0x0, 0x7fffffffffffffff)

584.532269ms ago: executing program 3 (id=6875):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0xfffffffb, 0x4)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f00000000c0)=0x1, 0x4)

583.844456ms ago: executing program 3 (id=6876):
syz_usb_connect(0x0, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960400000001030200010006000609240305050306058109240306010104050507240405"], 0x0)

453.621876ms ago: executing program 4 (id=6877):
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x141000, 0x0)
pidfd_send_signal(r0, 0x3b, &(0x7f0000000080)={0xb, 0x8000, 0xfa}, 0x0)

322.891884ms ago: executing program 4 (id=6878):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000840)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002e000000180001801400020067656e65766530"], 0x2c}}, 0x0)

322.648316ms ago: executing program 1 (id=6825):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)

233.207185ms ago: executing program 4 (id=6879):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000340)={<r1=>0xffffffffffffffff}, 0x111, 0xa}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000300), r1, 0x0, 0x1, 0x4}}, 0x20)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead963cdd7f792f14c9b24493f9f830f6de8da93bbd4357095631adec14224dd9bb049e826f3a49624393e6a031103faff0902ba88ae30af4a61caa77ff956214196fcf3c5536d823284306f367afcb46fb43231911cc53091671e7d853ebf015241b18e9fb6ac6d9a7a1b05dfd6d9e56a51567cd8837dd045abf6b85550f0dd8dded43147ab9bfadc18b9984699d5d875cb21a95a7f584d8c466d033df75193f9ae58b85cfacc54f6c6e12a0debe40ee361a839563bc2cb64271672a55370c2b035b482074ce2487ef8a3bc1c68856e6e09539276d961a0c647f1ee3237496fc99623e8fd33faf7797d86a88dcee152d15e10739bcbbd6077b76867e291f350d999024c12faf81f83792f48f7f6dd66aa6854e460ef7f8c755f3a6dd76509ea0d2db39057a5129185b2fb11546cd5d6cc59f640e9028ae6c7075fba5e5b5593d7f79ec387833f465d09bde464112821eaec5e6e8f2aee8d7358f9c14afe2018856f610848706c71cda62493aef2e39efb71b4a8e804847eda66b2b5b1d75b478f19208ee1ac43afb2dbbba5dd0f29f6946022e09fb853cb176ca3474ba2fa67cb245fe85ec61a095d6fd9ac2ac5685920201617342fe56072427b9bd3626a1a371e67041fcda781be0c234d6feb5ad500e8bc7074381fd0d04983a4a6cdb6c8e03d59dc50925e9e4b24e6f8e455f02818959f2927f0a2d9ff62ec3c5c399077048f7d3dad0830b2e6563693f2f9d48eca8c34804a7626282a4a214d13786993c011a88194dbf7b23e25f592e62186c9fb565fac7632de356153c89a6be0b6b26ba48c2427424769fcbd7ee072ed4bd4d0731d06c8537d616b1145a6c70edb13fb4dba3565221b3a2897a23861cd0e8e0060021cdd7de002d5e785e5d6d3d07f4e445ada9c8d9ba8b819d0b5c7b5d15a5192d3a83c125c8e117c823a9e33316b8c9154e7330d3a865048dbd9c14757691bfe56f10423f6ab717bec5eebeac6ba9ad1aeb6cde09d7fda8e475a71ac48d46b8d9a40879c9dec2db5c4799e5fc8e8b3d419031c1033fce88ae2c93d7ca62c9302e6b45ca8dfebe5b92724f035e8e9d7704efb23f445999fe08cfa28404874d8acc8d37870d394d9fcc8dbe763bc85c37f0f3bcc2cbea420cd073db598e7d89c14a31e5bf57cbefa301427c93091505f1f3e5cdf712958b2e8fc56684d3388107c1728f0e5a3be2164246071653e256ed3bf3000c17301da9a5a3d9ca475867c4f311a24e5ae909a62047a9e6bb71cbcb4f159c2ef0f66b4d0f9da51aba99cd9448443dd277362af18d32f111c48a952ef555b2c7c58b997ce61e74cc7551b57eaffe411219baddf490926d8e260dcd87c069e617195c352950f9b51ce88c12c4f7997ba515f77e68d44f831cdf4d7ee8b1b7cedcb4c4fc7e85ba288c8555d49d5b4b9bb70dc4b688bd12e6b38e37150f3ea457a76b23d5abe6551ea598e090aed87822b0954b8db1a7c605c925b7f9240b0e7a020f292a1fd4a37c74139bc6e7ff08373ebfc8feea371ae0b6c61c715f6f1f4b0b994c7e2e129f87db959aae6ff48664d824b29ba9f255890f9c537178db9c5302097891557f8175a46f308b1a2530aa726ea9d4cfce76db50637369724d0c5f51c97edb58ff5eb9b2434b3721b61688ba12471b97c6a65ba085e15406568ac852590701f2ef8451c5cf1191d70f51eaea9ddc4cbdd7428f627db5069111f65062d5cc34581826af3e670613dda99e31c42736aabd87be56e214ed606862a152455f91891b7430bae03284569c234588f495a5ecc4a23fad6ba34e2ee9ebde8c7f5f62c9344659375c2a1fe6fa6e4ef68712223b9471c513bb11429dbb8a45463c8882f462275ee0da567c60c2d8038843e0c20486676e9978f2aec9187820c94a6e7e519d06daf2ab198f5cafcab4d9c90a479800906192d66a3301a34fa6c5a931cea0a479a4d98d86d9de3e061323504b57186dd33df7a16ccb688c0de203666cb0a6b543a9d069dded44a3b432cbb71da921dcab6be1c2d7494d3b07841d9b4f9d659b5d3d3b2ed916f91588d589128e4b2d4448e6aab5a8160eddca0f6e022abb85e251a11cd6bae57a09b2c434ab5bdf6264afb20d5ab022d152e345bd32ba9283aa5b3cd9118bd271a8ac9083c98b8a83064e65428f7ad7b35bf1d60d4e703f22d2d316fc12bd68bcced82cf0962a3d5769c6a3d75d59f7a7b76454661fd3574b8c8e26d20c372407854505ea6c2406fbd8a1ba7bb017c565228aa6d03d18ed309a308ffb1ecec73c246413e7c70f25070eafed9e70d22e9e8b44125c44eceff37e65bf073bc6fad1ea2b72675af4bf70586a8f7e0f35700de94c802522897576ed115fa21b3d23a367844520b33f5b9aedc0245096765f4cb3b2ff4e54f39bd7346c2347875d75a931b17c6c424ddb4767e0e63cc7725a8fc4b1dbe7929b2f909cc5be8b09e63330341e6471dcac0f8b44693d01805a1467b71612260e2a273861b3697440a5f75497796bffcf79d62a4a50a6ed5ef2efe8c83374f2ecd08d8d628aa03b01a11caeb2bdecc0ab2abcecfa15627979d7c3f9dec5389fc6625e957f8075e23e636dd5514596189d568e14d33ae518e6e9978c6a36a74b49fdbd1260095c9abe447e618878039b75e305b1d2c9ddeb9e5cedb11802e0833739d8595d57d749c890c9290cca4aa96e6718747543796a187e54a66c2f71beefddf911a7a74b59c48ba642d5ecd4d415f48dfbde5baac8a4ba063c1b985d9f9f3180e8a1c8b2cf6a25c2ff17688cc858ac8b9c67960f09a1ca5f28f8e877159e00fe7fb10cca73b391508895e7e52c22f9b38d73dabd6ff7c55ebf4e1611daee8d52b4ceee49a6df7daeb81bf9d1c943a74c03d3dda52c5b99f3225c1b87074f5cef6187878bc5b665ec0561adcc9781280dd1c6592555d327afea78b21beeeb66a0af3eab3249245f41cdbca309d3fba5d4b345319dd0a26134c0c896f2c8d32fda28600013f6a4c95b4038faba70d6c480b360c55bdc0595f7ca636e85521ba505d894f9c5f0a90719bc9944f386ad7491422ff12f34a3c048708d51305a8cc5b2a502ac1575a14c75e9fb7219ede2f6d9c1b362230b6189e0d8cd8ccd11fd0325182c6e46c9977bf63aa02f7024aeb4389f989f5733a198b45e4329c4c1a538a009f216ad3ac09cac39547b4fd21a5d7146ea307ad9b9339f39d5161d17b59860a0aed38cd89d1b68c6438346d51a3a283074e34ee01d2eca527b1b3836ccdf7e807007152c79d14324e3d887c9551a9447527db4434810f5b0b73d855f32a0c89aa784e43f4c1657d408dd33f88aeae1e5186bbcc2a348b708e3cec9080e12ee3676beb5ee86a9b5cc4a3496c242b95a248906ed62f984b22373bdfd97515441f34e01006d8d1244aa88403f207cd8820ffe07634fc86d00f871c1e4c9e8fc1a00d295e36d98119599b62379cda10ada85efe7b50c5f38d8d010a2cd53db900939db1ffce14feffb7940d12842f4f2b507e1fa49e526752d1e3d80a0c2a75e870d85f77fd91fc46ac1b1288dd33338cdad154d6b80b5a925431868d62a3fb0036f28fe259a3f555f767526a9ea230c33843efc49ac3182a357845ea122d606ab22c9f937b2b905e02dd1cb07d380e3486be6167f00b6e6d90a3c1d6aee15da439a55542ce177e498998ba8ac69a848e63e4c7564e4dc04aad595fa1ab81275edafa0d352029c304200d2f2c5881cbf5a26b2141bdb117879cc11e7c13bd62f221ae1ac04dca3d8d58a13c130557ecf5f36184c7366d3852d0cbd6ca42f2a971d87c0bb204097af1a3abdab7b95d07fcdbf5f42607695dedcd26e30b8fc5cfd7b333a95f3ee69d5ba7911dadb1394285c437a0f26fc027737ba5ee7d63333f80acb59f1a7faf2ec3031c6533107502bffc92d8726a48ce00cdb5f1258d85ff8eb72bfb162e122022f1f3e8a72b41d2689d5228b1130fbc946384401f3bbe726314bb09d430333ad78de07b3cec5c18a4f4abb69507b6451ca4e610b8fc988c983426e0cc3b9d15393026eb75d3d08634b8a7495cef69aab83d27ea1b5b41f40b996dd10023d81f77d61192930ffc25cae1e149412322fcb0aa47bee3afc44ec3dda96c9294854e2cbaebfea6f9a90f0b3797d5f505824b4de964151569f881f87f9dd9d30a2a2f9ed01059a909cba157902903c77f2f3d056231e7c7483a3f35e04360e084f0d3f94a92c92c77b3f06479fbc417366d7fe87ddfcdfd86274f87a5f817b0f947924cbe2329f16f6b00c8a0ab96164f7b35fed38a388380af05c3600abc37a944c9e75a691728c26896ac3615297766f406aeb0f2fd147d68fad3fb3b032880280ebb4bf89252a36b0d9eb393daae72829b8da870b886676244897d5322b32703fcf138b66eedeb3024666a88fd99d8962f696ab7b34e19ced1bd27488aa2ffe5bfa11f8f9289bd8c052d4e88316cc33b0255ef1bfca4c17067d7f78175c56db481fe8dc6f73b1cbdf9d5823f115c9e03f2dfd07bc1ad88564d48b18cd9a30d83cbd5e6a3eedcb0ee86e5dd47f32820cb74dcf730b2052b31297b529e5e24f042335d13915e4048132fe1a101841e919c7870bb680eddead9a6111394bc12e274fbd88abaf2d254721c42e82abf4d1e319a631794ed6ce319ddd844ac5e9b1fc96dd9aaad42f2e087abe1b85430c4a00631970e3e74a6ed923f49e0df75685e044fae3fcea0af4dbfeebe0a9c2e73e8a89b89603a75f585e3ebba5453ae595da1469ea90ea3c9fb6a22411c56c58dfbf504caa629dbfc73ebbedc91669f2babf8b8215c525edf8feb366f104ffa9eb2bb79232660aece4730ef1ae8585c629ffe1390356a58e900da145b83ad177c7bb2d125e59d7ff4d3a8562efc620b4cf9b33c2305bbf1957e0f8b06f0fbe9c80db73b08fdd0be4a1ea4f91f52af47160040424aed8ac3c10251fb0b5d9be08247edf3dda5d1750d0597d60c8a0d9418a4e0c9325bb90f0886f9e5dda9e88ac1942ec1e53da0cf5ccad66b9cdfc2fdca784dd06a73713ef73785706d024873ddca5ccfcf0b91748a2c1fbd8c241934b5b473007b29d76aec5addf7b945a5f7abd6ddeccc8d0ccb26d69d4793b7224c27ba7bf45aac8a2be56086ab8c65ea69fdd593a01a29e2912378002d824bd98e6ed1c5dd5f33be529e640997f5f1bbde051fb2a669145966db4889bf32aa13777ac6c077c51bb8b2523954cea3adc307cfe53b8cbb00edf0c04c456392aea6613e8078a309dc538a6a24f80fc1b7f9fce3e3291ca6dab8090a634fcdb24e7a9de8aecd595b988f597cd623d148a8841b0a5203953166ea2e85316928f28dd2604d37c9ec80a49c0d91cbfe6d584b9b6a321b97bf99ae1d67985fd441976a828c97456003a7892c7c7f4a51bb49e3d3ea1e95ec29c89a2676", 0x1001}], 0x3)

143.809266ms ago: executing program 4 (id=6880):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020642500000000202020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5ae, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.768809ms ago: executing program 4 (id=6881):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000380)='./bus\x00', 0x63022, &(0x7f0000000140)=ANY=[], 0x1, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000580)='.\x02\x00', 0x0, 0x0, 0x1, 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85)
lseek(r0, 0x50000000, 0x1)
getdents64(r0, 0x0, 0x4f)

3.602217ms ago: executing program 3 (id=6882):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x800)

0s ago: executing program 4 (id=6883):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000580)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0xf, @private1, 0x200}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x60}, 0x1, 0x7}, 0x0)

kernel console output (not intermixed with test programs):

nt 0x83 has invalid wMaxPacketSize 0
[  579.112315][T13893] usb 10-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  579.117359][T13893] usb 10-1: config 179 interface 65 has no altsetting 0
[  579.119470][T13893] usb 10-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  579.123872][T13893] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  579.141044][T13893] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:179.65/input/input28
[  579.344811][T13893] usb 10-1: USB disconnect, device number 37
[  579.347053][    C0] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  579.436258][T20538] loop2: detected capacity change from 0 to 1024
[  580.347186][T17600] hfsplus: b-tree write err: -5, ino 4
[  580.722733][T20555] loop9: detected capacity change from 0 to 131072
[  580.734510][T20555] F2FS-fs (loop9): invalid crc value
[  580.895131][T20569] kernel profiling enabled (shift: 9)
[  581.331258][T20555] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  581.339623][T20555] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4
[  583.259899][T20592] loop9: detected capacity change from 0 to 512
[  583.268319][T20592] EXT4-fs: Ignoring removed i_version option
[  583.276354][T20592] EXT4-fs: Ignoring removed bh option
[  583.293094][T20592] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  583.302543][T20592] ext4 filesystem being mounted at /954/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  583.409716][T12300] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  583.666795][T20597] loop9: detected capacity change from 0 to 40427
[  583.674209][T20597] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12
[  583.676439][T20597] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  583.702040][T20597] F2FS-fs (loop9): invalid crc value
[  583.737004][T20597] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  583.741060][T20597] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[  583.743565][T20597] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  584.856191][T12300] syz-executor: attempt to access beyond end of device
[  584.856191][T12300] loop9: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  584.866581][T12300] CPU: 0 UID: 0 PID: 12300 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  584.866603][T12300] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  584.866622][T12300] Call Trace:
[  584.866628][T12300]  <TASK>
[  584.866636][T12300]  dump_stack_lvl+0x189/0x250
[  584.866663][T12300]  ? __pfx_dump_stack_lvl+0x10/0x10
[  584.866681][T12300]  ? __pfx_queue_work_on+0x10/0x10
[  584.866696][T12300]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  584.866715][T12300]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  584.866741][T12300]  f2fs_handle_critical_error+0x37c/0x540
[  584.866768][T12300]  f2fs_write_end_io+0x886/0xb60
[  584.866826][T12300]  __submit_merged_bio+0x27a/0x6a0
[  584.866846][T12300]  ? up_write+0x1c4/0x420
[  584.866866][T12300]  __submit_merged_write_cond+0x44c/0x530
[  584.866891][T12300]  f2fs_sync_node_pages+0x1479/0x15e0
[  584.866927][T12300]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  584.866970][T12300]  ? f2fs_write_checkpoint+0xdad/0x2440
[  584.866989][T12300]  ? up_write+0x1c4/0x420
[  584.867010][T12300]  f2fs_write_checkpoint+0xdde/0x2440
[  584.867024][T12300]  ? __lock_acquire+0xab9/0xd20
[  584.867061][T12300]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  584.867116][T12300]  kill_f2fs_super+0x2cc/0x6d0
[  584.867136][T12300]  ? __pfx_kill_f2fs_super+0x10/0x10
[  584.867164][T12300]  ? shrinker_free+0x2ce/0x3e0
[  584.867182][T12300]  deactivate_locked_super+0xbc/0x130
[  584.867202][T12300]  cleanup_mnt+0x425/0x4c0
[  584.867219][T12300]  ? lockdep_hardirqs_on+0x9c/0x150
[  584.867239][T12300]  task_work_run+0x1d4/0x260
[  584.867261][T12300]  ? __pfx_task_work_run+0x10/0x10
[  584.867278][T12300]  ? __x64_sys_umount+0x122/0x160
[  584.867300][T12300]  ? exit_to_user_mode_loop+0x40/0x130
[  584.867316][T12300]  exit_to_user_mode_loop+0xe9/0x130
[  584.867331][T12300]  do_syscall_64+0x2bd/0xfa0
[  584.867348][T12300]  ? lockdep_hardirqs_on+0x9c/0x150
[  584.867365][T12300]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  584.867379][T12300]  ? exc_page_fault+0xab/0x100
[  584.867398][T12300]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  584.867411][T12300] RIP: 0033:0x7f6bce5902f7
[  584.867425][T12300] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  584.867436][T12300] RSP: 002b:00007ffc5a351508 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  584.867452][T12300] RAX: 0000000000000000 RBX: 00007f6bce611d7d RCX: 00007f6bce5902f7
[  584.867462][T12300] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc5a3515c0
[  584.867470][T12300] RBP: 00007ffc5a3515c0 R08: 0000000000000000 R09: 0000000000000000
[  584.867479][T12300] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc5a352650
[  584.867488][T12300] R13: 00007f6bce611d7d R14: 000000000008e8a0 R15: 00007ffc5a352690
[  584.867514][T12300]  </TASK>
[  584.867521][T12300] F2FS-fs (loop9): Stopped filesystem due to reason: 3
[  586.046034][T20635] loop2: detected capacity change from 0 to 16
[  586.050270][T20635] erofs (device loop2): mounted with root inode @ nid 36.
[  586.619034][T20637] loop2: detected capacity change from 0 to 32768
[  586.644075][T20637] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  586.665914][T20637] XFS (loop2): Ending clean mount
[  586.724029][T19466] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  586.985942][T13893] usb 10-1: new high-speed USB device number 38 using dummy_hcd
[  587.013374][   T33] audit: type=1326 audit(1762393153.289:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20659 comm="syz.3.5609" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7423d8efc9 code=0x7ffc0000
[  587.024836][   T33] audit: type=1326 audit(1762393153.299:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20659 comm="syz.3.5609" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7423d8efc9 code=0x7ffc0000
[  587.033864][   T33] audit: type=1326 audit(1762393153.299:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20659 comm="syz.3.5609" exe="/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f7423d8efc9 code=0x7ffc0000
[  587.045113][   T33] audit: type=1326 audit(1762393153.299:2013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20659 comm="syz.3.5609" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7423d8efc9 code=0x7ffc0000
[  587.053613][   T33] audit: type=1326 audit(1762393153.299:2014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20659 comm="syz.3.5609" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7423d8efc9 code=0x7ffc0000
[  587.070963][   T33] audit: type=1326 audit(1762393153.349:2015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20662 comm="syz.3.5610" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7423d8efc9 code=0x7ffc0000
[  587.079870][   T33] audit: type=1326 audit(1762393153.349:2016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20662 comm="syz.3.5610" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7423d8efc9 code=0x7ffc0000
[  587.092362][   T33] audit: type=1326 audit(1762393153.349:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20662 comm="syz.3.5610" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7423d8efc9 code=0x7ffc0000
[  587.101411][   T33] audit: type=1326 audit(1762393153.349:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20662 comm="syz.3.5610" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7423d8efc9 code=0x7ffc0000
[  587.110276][   T33] audit: type=1326 audit(1762393153.359:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20662 comm="syz.3.5610" exe="/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f7423d8efc9 code=0x7ffc0000
[  587.155279][T13893] usb 10-1: Using ep0 maxpacket: 8
[  587.165854][T13893] usb 10-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62
[  587.169331][T13893] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  587.172650][T13893] usb 10-1: Product: syz
[  587.185517][T13893] usb 10-1: Manufacturer: syz
[  587.187806][T13893] usb 10-1: SerialNumber: syz
[  587.193431][T13893] usb 10-1: config 0 descriptor??
[  587.210649][T13893] usb 10-1: selecting invalid altsetting 3
[  587.213293][T13893] comedi comedi4: could not set alternate setting 3 in high speed
[  587.216449][T13893] usbdux 10-1:0.0: driver 'usbdux' failed to auto-configure device.
[  587.223333][T13893] usbdux 10-1:0.0: probe with driver usbdux failed with error -22
[  587.265677][ T5279] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  587.442631][T10595] usb 10-1: USB disconnect, device number 38
[  587.617683][ T5279] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  587.620258][ T5279] usb 3-1: config 0 has no interface number 0
[  587.624029][ T5279] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  587.627876][ T5279] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  587.630299][ T5279] usb 3-1: Product: syz
[  587.631653][ T5279] usb 3-1: Manufacturer: syz
[  587.633013][ T5279] usb 3-1: SerialNumber: syz
[  587.636318][ T5279] usb 3-1: config 0 descriptor??
[  587.842676][ T5279] dvb_usb_ec168 3-1:0.1: probe with driver dvb_usb_ec168 failed with error -71
[  587.848011][ T5279] usb 3-1: USB disconnect, device number 12
[  588.448350][T20690] loop2: detected capacity change from 0 to 512
[  588.463174][T20690] EXT4-fs (loop2): orphan cleanup on readonly fs
[  588.465131][T20690] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[  588.468415][T20690] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  588.482271][T20690] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.5621: attempt to clear invalid blocks 2 len 1
[  588.490931][T20690] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.5621: invalid indirect mapped block 1819239214 (level 0)
[  588.496600][T20690] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.5621: invalid indirect mapped block 1819239214 (level 1)
[  588.502784][T20690] EXT4-fs (loop2): 1 truncate cleaned up
[  588.506497][T20690] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  588.515377][T20690] EXT4-fs error (device loop2): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.2.5621: bad entry in directory: inode out of bounds - offset=24, inode=85, rec_len=20, size=1024 fake=0
[  588.540618][T19466] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  589.159080][T20709] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  591.153760][   T55] block nbd0: Possible stuck request ffff888109798000: control (read@0,1024B). Runtime 210 seconds
[  591.160533][   T55] block nbd0: Possible stuck request ffff888109798200: control (read@1024,1024B). Runtime 210 seconds
[  591.164208][   T55] block nbd0: Possible stuck request ffff888109798400: control (read@2048,1024B). Runtime 210 seconds
[  591.167805][   T55] block nbd0: Possible stuck request ffff888109798600: control (read@3072,1024B). Runtime 210 seconds
[  591.255632][T20738] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5641'.
[  591.258636][T20738] netlink: 43 bytes leftover after parsing attributes in process `syz.2.5641'.
[  591.261674][T20738] netlink: 'syz.2.5641': attribute type 5 has an invalid length.
[  591.263952][T20738] netlink: 43 bytes leftover after parsing attributes in process `syz.2.5641'.
[  591.405015][T20751] netlink: 60 bytes leftover after parsing attributes in process `syz.9.5644'.
[  591.408814][T20745] netlink: 60 bytes leftover after parsing attributes in process `syz.9.5644'.
[  591.596194][T20755] loop2: detected capacity change from 0 to 32768
[  591.678790][T20753] loop9: detected capacity change from 0 to 32768
[  591.682774][T20753] BTRFS error: failed to parse compression option 'lzo:nobarrier'
[  592.982843][T13907] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  593.135480][T13907] usb 3-1: config 6 has an invalid interface number: 55 but max is 0
[  593.138373][T13907] usb 3-1: config 6 has no interface number 0
[  593.140513][T13907] usb 3-1: config 6 interface 55 altsetting 2 endpoint 0x4 has an invalid bInterval 0, changing to 7
[  593.149187][T13907] usb 3-1: config 6 interface 55 has no altsetting 0
[  593.154591][T13907] usb 3-1: New USB device found, idVendor=0f11, idProduct=2040, bcdDevice=1d.9a
[  593.158472][T13907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  593.161401][T13907] usb 3-1: Product: syz
[  593.163116][T13907] usb 3-1: Manufacturer: syz
[  593.164839][T13907] usb 3-1: SerialNumber: syz
[  593.206493][T20791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5664'.
[  593.209878][T20791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5664'.
[  593.221763][T20791] macvlan5: entered allmulticast mode
[  593.223819][T20791] veth1_vlan: entered allmulticast mode
[  593.381385][T13907] ldusb 3-1:6.55: Interrupt in endpoint not found
[  593.387409][T13907] usb 3-1: USB disconnect, device number 13
[  593.687516][T20812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5672'.
[  594.150320][T20833] loop2: detected capacity change from 0 to 512
[  594.153208][T20833] EXT4-fs (loop2): Test dummy encryption mode enabled
[  594.155582][T20833] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  594.160988][T20833] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.5682: bad orphan inode 131083
[  594.165589][T20833] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  594.182573][T20833] overlayfs: upper fs needs to support d_type.
[  594.213845][T19466] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 13: comm syz-executor: path /159/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  594.436634][T19466] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  594.533518][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  594.642914][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  594.822730][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  594.843248][ T5201] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  594.848238][ T5201] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  594.853538][ T5201] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  594.856772][ T5201] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  594.860157][ T5201] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  594.909344][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  595.041870][T20849] chnl_net:caif_netlink_parms(): no params data found
[  595.104794][   T12] bridge_slave_1: left allmulticast mode
[  595.106767][   T12] bridge_slave_1: left promiscuous mode
[  595.108524][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  595.112608][   T12] bridge_slave_0: left allmulticast mode
[  595.114672][   T12] bridge_slave_0: left promiscuous mode
[  595.118162][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  595.356274][T20858] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  595.981830][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  595.992204][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  595.999547][   T12] bond0 (unregistering): Released all slaves
[  596.468712][T20849] bridge0: port 1(bridge_slave_0) entered blocking state
[  596.471998][T20849] bridge0: port 1(bridge_slave_0) entered disabled state
[  596.475712][T20849] bridge_slave_0: entered allmulticast mode
[  596.486569][T20849] bridge_slave_0: entered promiscuous mode
[  596.498575][T20849] bridge0: port 2(bridge_slave_1) entered blocking state
[  596.502014][T20849] bridge0: port 2(bridge_slave_1) entered disabled state
[  596.505812][T20849] bridge_slave_1: entered allmulticast mode
[  596.530335][T20849] bridge_slave_1: entered promiscuous mode
[  596.643801][   T12] hsr_slave_0: left promiscuous mode
[  596.650348][   T12] hsr_slave_1: left promiscuous mode
[  596.655724][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  596.659257][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  596.664167][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  596.667312][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  596.704942][   T12] veth1_macvtap: left promiscuous mode
[  596.707391][   T12] veth0_macvtap: left promiscuous mode
[  596.709705][   T12] veth1_vlan: left promiscuous mode
[  596.711989][   T12] veth0_vlan: left promiscuous mode
[  596.919021][ T5201] Bluetooth: hci3: command tx timeout
[  597.293543][T20884] loop9: detected capacity change from 0 to 1764
[  597.763716][   T12] team0 (unregistering): Port device team_slave_1 removed
[  597.837534][   T12] team0 (unregistering): Port device team_slave_0 removed
[  598.711141][T20849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  598.722619][T20849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  598.794410][T20849] team0: Port device team_slave_0 added
[  598.799010][T20893] loop9: detected capacity change from 0 to 512
[  598.799101][T20849] team0: Port device team_slave_1 added
[  598.827315][T20893] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  598.854409][T20849] batman_adv: batadv0: Adding interface: batadv_slave_0
[  598.857869][T20849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  598.867431][T20849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  598.893996][T20849] batman_adv: batadv0: Adding interface: batadv_slave_1
[  598.896504][T20849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  598.906269][T20849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  598.944618][T20896] vlan2: entered allmulticast mode
[  599.016189][T20849] hsr_slave_0: entered promiscuous mode
[  599.018636][T20849] hsr_slave_1: entered promiscuous mode
[  599.024888][ T5201] Bluetooth: hci3: command tx timeout
[  599.028647][T20849] debugfs: 'hsr0' already exists in 'hsr'
[  599.039172][T20849] Cannot create hsr debugfs directory
[  600.171733][T13907] usb 10-1: new high-speed USB device number 39 using dummy_hcd
[  600.328746][T13907] usb 10-1: Using ep0 maxpacket: 32
[  600.333326][T13907] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  600.336558][T13907] usb 10-1: config 0 has no interfaces?
[  600.396762][T13907] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  600.400527][T13907] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  600.408433][T13907] usb 10-1: Product: syz
[  600.410079][T13907] usb 10-1: Manufacturer: syz
[  600.420669][T13907] usb 10-1: SerialNumber: syz
[  600.424796][T13907] usb 10-1: config 0 descriptor??
[  600.475219][T20849] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  600.481961][T20849] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  600.494395][T20849] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  600.500329][T20849] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  600.658366][T20849] 8021q: adding VLAN 0 to HW filter on device bond0
[  600.699092][T13907] usb 10-1: USB disconnect, device number 39
[  600.707364][T20849] 8021q: adding VLAN 0 to HW filter on device team0
[  600.737345][T17634] bridge0: port 1(bridge_slave_0) entered blocking state
[  600.740023][T17634] bridge0: port 1(bridge_slave_0) entered forwarding state
[  600.749669][T17634] bridge0: port 2(bridge_slave_1) entered blocking state
[  600.752209][T17634] bridge0: port 2(bridge_slave_1) entered forwarding state
[  601.093355][ T5201] Bluetooth: hci3: command tx timeout
[  601.348439][T20849] 8021q: adding VLAN 0 to HW filter on device batadv0
[  601.831902][T20849] veth0_vlan: entered promiscuous mode
[  601.859343][T20849] veth1_vlan: entered promiscuous mode
[  601.904146][T20849] veth0_macvtap: entered promiscuous mode
[  601.912425][T20849] veth1_macvtap: entered promiscuous mode
[  601.942114][T20849] batman_adv: batadv0: Interface activated: batadv_slave_0
[  601.956659][T20849] batman_adv: batadv0: Interface activated: batadv_slave_1
[  601.978062][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  601.981239][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  601.993735][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  602.011814][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  602.128176][T17600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  602.131186][T17600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  602.174391][T17678] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  602.176695][T17678] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  603.167078][ T5201] Bluetooth: hci3: command tx timeout
[  603.619070][T21063] loop4: detected capacity change from 0 to 512
[  603.640054][T21063] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  603.651704][T21063] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  603.666973][T21063] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  603.672137][T21063] System zones: 0-2, 18-18, 34-35
[  603.685234][T21063] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  603.718226][T21063] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[  603.740191][T21063] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  603.746267][T21063] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  603.879697][T21063] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5746: bg 0: block 353: padding at end of block bitmap is not set
[  603.942253][T20849] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  604.215849][T21071] xt_TPROXY: Can be used only with -p tcp or -p udp
[  604.600776][T21067] loop4: detected capacity change from 0 to 32768
[  604.613391][T21067] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.5747 (21067)
[  604.636017][T21067] BTRFS info (device loop4 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  604.651200][T21067] BTRFS info (device loop4 state S): using crc32c (crc32c-lib) checksum algorithm
[  604.730620][T17678] BTRFS warning (device loop4 state S): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0x4e035593 level 0, ignored
[  604.741162][ T7457] BTRFS warning (device loop4 state S): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xbeadaddc level 0, ignored
[  604.746127][ T7457] BTRFS warning (device loop4 state S): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x48746f3c level 0, ignored
[  604.753772][T17678] BTRFS warning (device loop4 state S): checksum verify failed on logical 5328896 mirror 1 wanted 0x51ec978b found 0x49206b5e level 0, ignored
[  604.759226][T21067] BTRFS info (device loop4 state S): bdev /dev/loop4 errs: wr 0, rd 0, flush 0, corrupt 7, gen 0
[  604.767541][T21067] BTRFS info (device loop4 state S): enabling ssd optimizations
[  604.769795][T21067] BTRFS info (device loop4 state S): disabling tree log
[  604.771896][T21067] BTRFS info (device loop4 state S): turning on flush-on-commit
[  604.774708][T21067] BTRFS info (device loop4 state S): enabling free space tree
[  604.778381][T21067] BTRFS info (device loop4 state S): ignoring meta csums
[  604.781162][T21067] BTRFS info (device loop4 state S): use zlib compression, level 3
[  604.784492][T17678] BTRFS warning (device loop4 state S): checksum verify failed on logical 5308416 mirror 1 wanted 0xe1d58233 found 0x9b2456e4 level 0, ignored
[  604.816823][T20849] BTRFS info (device loop4 state S): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  604.966996][T13893] usb 10-1: new high-speed USB device number 40 using dummy_hcd
[  605.056246][T21103] xt_hashlimit: max too large, truncated to 1048576
[  605.138638][T13893] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  605.145051][T13893] usb 10-1: config 0 interface 0 has no altsetting 0
[  605.150200][T13893] usb 10-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9
[  605.153575][T13893] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  605.156473][T13893] usb 10-1: Product: syz
[  605.164502][T13893] usb 10-1: Manufacturer: syz
[  605.166307][T13893] usb 10-1: SerialNumber: syz
[  605.172216][T13893] usb 10-1: config 0 descriptor??
[  605.177298][T13893] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  605.183516][T13893] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  605.187725][T13893] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  605.192622][T13893] usb 10-1: media controller created
[  605.214192][T13893] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  605.275074][T13893] DVB: Unable to find symbol tda10046_attach()
[  605.277630][T13893] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  605.280781][T13893] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  605.422498][T21119] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  605.625188][T21124] loop4: detected capacity change from 0 to 64
[  605.951793][T21146] ipt_REJECT: ECHOREPLY no longer supported.
[  606.089659][   T24] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  606.186733][T21093] [U] 
[  606.189041][T21093] [U] 
[  606.190078][T21093] [U] 
[  606.191135][T21093] [U] 
[  606.192319][T21093] [U] 
[  606.193341][T21093] [U] 
[  606.194446][T21093] [U] 
[  606.195548][T21093] [U] 
[  606.196868][T21093] [U] 
[  606.197934][T21093] [U] 
[  606.198968][T21093] [U] 
[  606.404912][T21086] [U] 
[  606.438397][T13893] dvb_usb_m920x 10-1:0.0: probe with driver dvb_usb_m920x failed with error -71
[  606.453890][T13893] usb 10-1: USB disconnect, device number 40
[  606.758967][   T24] usb 5-1: Using ep0 maxpacket: 8
[  606.763626][   T24] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  606.766894][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  606.776511][   T24] pvrusb2: Hardware description: Terratec Grabster AV400
[  606.779142][   T24] pvrusb2: **********
[  606.780551][   T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  606.784087][   T24] pvrusb2: Important functionality might not be entirely working.
[  606.786882][   T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  606.791585][   T24] pvrusb2: **********
[  606.985938][ T2397] pvrusb2: Invalid write control endpoint
[  607.038536][ T2397] pvrusb2: Invalid write control endpoint
[  607.047560][ T2397] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  607.052993][ T2397] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  607.055757][ T2397] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  607.059515][ T2397] pvrusb2: Device being rendered inoperable
[  607.066295][ T2397] cx25840 4-0044: Unable to detect h/w, assuming cx23887
[  607.069365][ T2397] cx25840 4-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  607.080714][ T2397] pvrusb2: Attached sub-driver cx25840
[  607.083219][ T2397] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  607.086902][ T2397] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  607.198881][ T5962] usb 5-1: USB disconnect, device number 16
[  607.399200][T21161] loop9: detected capacity change from 0 to 40427
[  607.405421][T21161] F2FS-fs (loop9): invalid crc value
[  607.463392][T21161] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  607.467279][T21161] F2FS-fs (loop9): Start checkpoint disabled!
[  607.470769][T21161] F2FS-fs (loop9): f2fs_disable_checkpoint() finish, err:0
[  607.474036][T21161] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6
[  607.483191][   T33] kauditd_printk_skb: 4 callbacks suppressed
[  607.483206][   T33] audit: type=1800 audit(1762393173.734:2024): pid=21161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.5782" name="bus" dev="loop9" ino=10 res=0 errno=0
[  607.516045][T17634] kworker/u9:50: attempt to access beyond end of device
[  607.516045][T17634] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  607.521399][T17634] CPU: 0 UID: 0 PID: 17634 Comm: kworker/u9:50 Not tainted syzkaller #0 PREEMPT(full) 
[  607.521420][T17634] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  607.521430][T17634] Workqueue: writeback wb_workfn (flush-7:9)
[  607.521454][T17634] Call Trace:
[  607.521460][T17634]  <TASK>
[  607.521468][T17634]  dump_stack_lvl+0x189/0x250
[  607.521491][T17634]  ? __pfx_dump_stack_lvl+0x10/0x10
[  607.521509][T17634]  ? __pfx_queue_work_on+0x10/0x10
[  607.521524][T17634]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  607.521542][T17634]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  607.521568][T17634]  f2fs_handle_critical_error+0x37c/0x540
[  607.521595][T17634]  f2fs_write_end_io+0x886/0xb60
[  607.521625][T17634]  __submit_merged_bio+0x27a/0x6a0
[  607.521651][T17634]  __submit_merged_write_cond+0x255/0x530
[  607.521677][T17634]  f2fs_write_data_pages+0x261d/0x3000
[  607.521720][T17634]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  607.521747][T17634]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  607.521793][T17634]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  607.521813][T17634]  ? look_up_lock_class+0x74/0x170
[  607.521839][T17634]  ? trace_f2fs_writepages+0x7f/0x200
[  607.521859][T17634]  ? f2fs_write_node_pages+0x478/0x6e0
[  607.521880][T17634]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  607.521903][T17634]  ? __lock_acquire+0xab9/0xd20
[  607.521924][T17634]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  607.521938][T17634]  do_writepages+0x32e/0x550
[  607.521958][T17634]  ? reacquire_held_locks+0x127/0x1d0
[  607.521972][T17634]  ? writeback_sb_inodes+0x384/0x1010
[  607.521997][T17634]  __writeback_single_inode+0x145/0xff0
[  607.522014][T17634]  ? do_raw_spin_unlock+0x4d/0x240
[  607.522035][T17634]  writeback_sb_inodes+0x6c7/0x1010
[  607.522102][T17634]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  607.522171][T17634]  ? rcu_is_watching+0x15/0xb0
[  607.522197][T17634]  wb_writeback+0x43b/0xaf0
[  607.522224][T17634]  ? queue_io+0x311/0x590
[  607.522245][T17634]  ? __pfx_wb_writeback+0x10/0x10
[  607.522272][T17634]  ? _raw_spin_unlock_irq+0x23/0x50
[  607.522295][T17634]  wb_workfn+0x409/0xef0
[  607.522326][T17634]  ? __pfx_wb_workfn+0x10/0x10
[  607.522347][T17634]  ? __lock_acquire+0xab9/0xd20
[  607.522372][T17634]  ? process_scheduled_works+0x9ef/0x17b0
[  607.522394][T17634]  ? _raw_spin_unlock_irq+0x23/0x50
[  607.522409][T17634]  ? process_scheduled_works+0x9ef/0x17b0
[  607.522421][T17634]  ? process_scheduled_works+0x9ef/0x17b0
[  607.522438][T17634]  process_scheduled_works+0xae1/0x17b0
[  607.522479][T17634]  ? __pfx_process_scheduled_works+0x10/0x10
[  607.522509][T17634]  worker_thread+0x8a0/0xda0
[  607.522551][T17634]  kthread+0x711/0x8a0
[  607.522573][T17634]  ? __pfx_worker_thread+0x10/0x10
[  607.522589][T17634]  ? __pfx_kthread+0x10/0x10
[  607.522609][T17634]  ? _raw_spin_unlock_irq+0x23/0x50
[  607.522625][T17634]  ? lockdep_hardirqs_on+0x9c/0x150
[  607.522640][T17634]  ? __pfx_kthread+0x10/0x10
[  607.522660][T17634]  ret_from_fork+0x4bc/0x870
[  607.522678][T17634]  ? __pfx_ret_from_fork+0x10/0x10
[  607.522701][T17634]  ? __switch_to_asm+0x39/0x70
[  607.522712][T17634]  ? __switch_to_asm+0x33/0x70
[  607.522722][T17634]  ? __pfx_kthread+0x10/0x10
[  607.522741][T17634]  ret_from_fork_asm+0x1a/0x30
[  607.522770][T17634]  </TASK>
[  607.522778][T17634] F2FS-fs (loop9): Stopped filesystem due to reason: 3
[  608.149728][T21187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5793'.
[  608.344056][T21196] loop9: detected capacity change from 0 to 4096
[  608.347537][T21196] ntfs3: Invalid value for dmask.
[  608.528292][T21200] loop4: detected capacity change from 0 to 32768
[  608.538793][T21200] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  608.578227][T21200] XFS (loop4): Ending clean mount
[  608.585651][T21200] XFS (loop4): Quotacheck needed: Please wait.
[  608.661433][T21200] XFS (loop4): Quotacheck: Done.
[  609.068609][T20849] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  609.100236][T21215] loop9: detected capacity change from 0 to 16
[  609.104321][T21215] erofs (device loop9): mounted with root inode @ nid 36.
[  609.359485][T21227] loop4: detected capacity change from 0 to 512
[  609.441999][T10595] usb 10-1: new high-speed USB device number 41 using dummy_hcd
[  609.447443][T21233] loop4: detected capacity change from 0 to 512
[  609.451537][T21233] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  609.468796][T21233] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  609.475016][T21233] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  609.500497][T20849] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  609.734953][T10595] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  609.738994][T10595] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  609.744135][T10595] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  609.748661][T10595] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  609.751969][T10595] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  609.758006][T10595] usb 10-1: config 0 descriptor??
[  610.241478][T10595] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0
[  610.269670][T21262] loop4: detected capacity change from 0 to 128
[  610.351627][T21264] loop4: detected capacity change from 0 to 1024
[  610.368795][T21264] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  610.403516][T20849] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  610.505981][T13892] usb 10-1: USB disconnect, device number 41
[  610.539385][T21272] loop4: detected capacity change from 0 to 512
[  610.542600][T21272] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00080000 (sector = 1)
[  610.545675][T21272] FAT-fs (loop4): error, invalid access to FAT (entry 0x0001ffff)
[  610.735658][T21289] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5834'.
[  610.739092][T21289] netlink: 'syz.4.5834': attribute type 6 has an invalid length.
[  610.741993][T21289] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5834'.
[  611.075187][T21315] loop4: detected capacity change from 0 to 1024
[  611.079869][T21315] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  611.197227][T21315] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  611.233153][T20849] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  611.607626][T21316] loop9: detected capacity change from 0 to 131072
[  611.611412][T21316] F2FS-fs (loop9): Test dummy encryption mode enabled
[  611.618965][T21316] F2FS-fs (loop9): invalid crc value
[  611.669397][T21316] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  611.674300][T21316] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  611.716158][T21336] loop4: detected capacity change from 0 to 128
[  611.732414][T21336] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  611.740212][T21336] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  611.760102][T20849] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  612.205056][T13906] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  612.358028][T13906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  612.361842][T13906] usb 5-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00
[  612.368475][T13906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  612.379428][T13906] usb 5-1: config 0 descriptor??
[  612.395143][T13892] usb 10-1: new high-speed USB device number 42 using dummy_hcd
[  612.444485][T21362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5866'.
[  612.448922][T21362] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5866'.
[  612.545306][T13892] usb 10-1: Using ep0 maxpacket: 8
[  612.551571][T13892] usb 10-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10
[  612.554365][T13892] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  612.557840][T13892] usb 10-1: Product: syz
[  612.559427][T13892] usb 10-1: Manufacturer: syz
[  612.561285][T13892] usb 10-1: SerialNumber: syz
[  612.567282][T13892] usb 10-1: config 0 descriptor??
[  612.572976][T13892] radioshark2 10-1:0.0: Invalid radioSHARK2 device
[  612.575957][T13892] radioshark2 10-1:0.0: probe with driver radioshark2 failed with error -22
[  612.578940][T13892] usbhid 10-1:0.0: couldn't find an input interrupt endpoint
[  612.732750][T21374] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5872'.
[  612.761031][T21374] bond2: entered promiscuous mode
[  612.763224][T21374] bond2: entered allmulticast mode
[  612.765708][T21374] 8021q: adding VLAN 0 to HW filter on device bond2
[  612.777239][T13892] usb 10-1: USB disconnect, device number 42
[  612.793720][T13906] zeroplus 0003:0C12:0005.001A: hidraw0: USB HID v0.02 Device [HID 0c12:0005] on usb-dummy_hcd.4-1/input0
[  612.797459][T13906] zeroplus 0003:0C12:0005.001A: no inputs found
[  612.810742][T21377] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5873'.
[  612.996387][T13892] usb 5-1: USB disconnect, device number 17
[  613.325744][T21405] program syz.9.5887 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  613.565275][T21422] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5894'.
[  613.644969][T21427] loop9: detected capacity change from 0 to 64
[  613.649545][T21427] BFS-fs: bfs_fill_super(): loop9 is unclean, continuing
[  613.651721][T21427] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop9
[  613.774295][T21435] loop9: detected capacity change from 0 to 512
[  613.792253][T21435] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  613.806635][T21435] ext4 filesystem being mounted at /1016/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  614.175746][T12300] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  614.487488][   T24] usb 10-1: new high-speed USB device number 43 using dummy_hcd
[  614.647585][   T24] usb 10-1: Using ep0 maxpacket: 32
[  614.654257][   T24] usb 10-1: unable to get BOS descriptor or descriptor too short
[  614.659050][   T24] usb 10-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  614.665878][   T24] usb 10-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  614.669645][   T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  614.674156][   T24] usb 10-1: Product: syz
[  614.675849][   T24] usb 10-1: Manufacturer: syz
[  614.677708][   T24] usb 10-1: SerialNumber: syz
[  614.892643][   T24] usb 10-1: Invalid number of CPorts: 0
[  614.894406][   T24] es2_ap_driver 10-1:7.0: probe with driver es2_ap_driver failed with error -22
[  614.988037][T10595] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  615.096893][T13892] usb 10-1: USB disconnect, device number 43
[  615.138088][T10595] usb 5-1: Using ep0 maxpacket: 32
[  615.141866][T10595] usb 5-1: config 0 has an invalid interface number: 89 but max is 0
[  615.144856][T10595] usb 5-1: config 0 has no interface number 0
[  615.148051][T10595] usb 5-1: config 0 interface 89 has no altsetting 0
[  615.152873][T10595] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  615.156183][T10595] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  615.159177][T10595] usb 5-1: Product: syz
[  615.160468][T10595] usb 5-1: Manufacturer: syz
[  615.162144][T10595] usb 5-1: SerialNumber: syz
[  615.166652][T10595] usb 5-1: config 0 descriptor??
[  615.171598][T10595] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  615.175068][T10595] em28xx 5-1:0.89: Video interface 89 found: bulk
[  615.433000][T10595] em28xx 5-1:0.89: unknown em28xx chip ID (0)
[  615.491964][T10595] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[  615.494858][T10595] em28xx 5-1:0.89: board has no eeprom
[  615.548390][T10595] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67)
[  615.551272][T10595] em28xx 5-1:0.89: analog set to bulk mode.
[  615.554142][   T24] em28xx 5-1:0.89: Registering V4L2 extension
[  615.561312][T10595] usb 5-1: USB disconnect, device number 18
[  615.564750][T10595] em28xx 5-1:0.89: Disconnecting em28xx
[  615.583715][   T24] em28xx 5-1:0.89: Config register raw data: 0xffffffed
[  615.587705][   T24] em28xx 5-1:0.89: AC97 chip type couldn't be determined
[  615.590639][   T24] em28xx 5-1:0.89: No AC97 audio processor
[  615.609645][   T24] usb 5-1: Decoder not found
[  615.611956][   T24] em28xx 5-1:0.89: failed to create media graph
[  615.617803][   T24] em28xx 5-1:0.89: V4L2 device video103 deregistered
[  615.626026][   T24] em28xx 5-1:0.89: Registering snapshot button...
[  615.640937][   T24] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input30
[  615.656284][   T24] em28xx 5-1:0.89: Remote control support is not available for this card.
[  615.660136][T10595] em28xx 5-1:0.89: Closing input extension
[  615.664428][T10595] em28xx 5-1:0.89: Deregistering snapshot button
[  615.699076][T10595] em28xx 5-1:0.89: Freeing device
[  615.742294][T21467] loop9: detected capacity change from 0 to 64
[  615.760922][T21467] minix_free_block (loop9:2): bit already cleared
[  615.763231][T21467] minix_free_block (loop9:3): bit already cleared
[  615.765299][T21467] minix_free_block (loop9:4): bit already cleared
[  615.857733][T21471] loop9: detected capacity change from 0 to 512
[  615.876992][T21471] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  615.883781][T21471] ext4 filesystem being mounted at /1022/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  616.312716][T21483] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  617.507570][T12300] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  617.694809][T21499] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  618.547098][T21509] loop4: detected capacity change from 0 to 40427
[  618.550109][T21509] F2FS-fs (loop4): build fault injection rate: 771
[  618.553795][T21509] F2FS-fs (loop4): invalid crc value
[  618.593729][T21509] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  618.596923][T21509] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  618.624387][T17651] kworker/u10:32: attempt to access beyond end of device
[  618.624387][T17651] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  618.628359][T17651] CPU: 1 UID: 0 PID: 17651 Comm: kworker/u10:32 Not tainted syzkaller #0 PREEMPT(full) 
[  618.628372][T17651] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  618.628377][T17651] Workqueue: writeback wb_workfn (flush-7:4)
[  618.628393][T17651] Call Trace:
[  618.628397][T17651]  <TASK>
[  618.628401][T17651]  dump_stack_lvl+0x189/0x250
[  618.628416][T17651]  ? __pfx_dump_stack_lvl+0x10/0x10
[  618.628426][T17651]  ? __pfx_queue_work_on+0x10/0x10
[  618.628435][T17651]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  618.628446][T17651]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  618.628462][T17651]  f2fs_handle_critical_error+0x37c/0x540
[  618.628478][T17651]  f2fs_write_end_io+0x886/0xb60
[  618.628496][T17651]  __submit_merged_bio+0x27a/0x6a0
[  618.628510][T17651]  __submit_merged_write_cond+0x255/0x530
[  618.628525][T17651]  f2fs_write_data_pages+0x261d/0x3000
[  618.628551][T17651]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  618.628557][T17651]  ? __local_bh_enable_ip+0x12d/0x1c0
[  618.628574][T17651]  ? cfg80211_inform_single_bss_data+0x13da/0x1ac0
[  618.628599][T17651]  ? __lock_acquire+0xab9/0xd20
[  618.628618][T17651]  ? __lock_acquire+0xab9/0xd20
[  618.628630][T17651]  ? do_raw_spin_lock+0x121/0x290
[  618.628647][T17651]  ? do_raw_spin_unlock+0x4d/0x240
[  618.628657][T17651]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  618.628665][T17651]  do_writepages+0x32e/0x550
[  618.628678][T17651]  ? reacquire_held_locks+0x127/0x1d0
[  618.628686][T17651]  ? writeback_sb_inodes+0x384/0x1010
[  618.628701][T17651]  __writeback_single_inode+0x145/0xff0
[  618.628711][T17651]  ? do_raw_spin_unlock+0x4d/0x240
[  618.628724][T17651]  writeback_sb_inodes+0x6c7/0x1010
[  618.628747][T17651]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  618.628780][T17651]  ? rcu_is_watching+0x15/0xb0
[  618.628794][T17651]  wb_writeback+0x43b/0xaf0
[  618.628809][T17651]  ? queue_io+0x311/0x590
[  618.628820][T17651]  ? __pfx_wb_writeback+0x10/0x10
[  618.628835][T17651]  ? _raw_spin_unlock_irq+0x23/0x50
[  618.628847][T17651]  wb_workfn+0x409/0xef0
[  618.628863][T17651]  ? __pfx_wb_workfn+0x10/0x10
[  618.628875][T17651]  ? __lock_acquire+0xab9/0xd20
[  618.628888][T17651]  ? process_scheduled_works+0x9ef/0x17b0
[  618.628900][T17651]  ? _raw_spin_unlock_irq+0x23/0x50
[  618.628908][T17651]  ? process_scheduled_works+0x9ef/0x17b0
[  618.628916][T17651]  ? process_scheduled_works+0x9ef/0x17b0
[  618.628925][T17651]  process_scheduled_works+0xae1/0x17b0
[  618.628949][T17651]  ? __pfx_process_scheduled_works+0x10/0x10
[  618.628966][T17651]  worker_thread+0x8a0/0xda0
[  618.628989][T17651]  kthread+0x711/0x8a0
[  618.629001][T17651]  ? __pfx_worker_thread+0x10/0x10
[  618.629009][T17651]  ? __pfx_kthread+0x10/0x10
[  618.629020][T17651]  ? _raw_spin_unlock_irq+0x23/0x50
[  618.629029][T17651]  ? lockdep_hardirqs_on+0x9c/0x150
[  618.629038][T17651]  ? __pfx_kthread+0x10/0x10
[  618.629053][T17651]  ret_from_fork+0x4bc/0x870
[  618.629063][T17651]  ? __pfx_ret_from_fork+0x10/0x10
[  618.629076][T17651]  ? __switch_to_asm+0x39/0x70
[  618.629082][T17651]  ? __switch_to_asm+0x33/0x70
[  618.629087][T17651]  ? __pfx_kthread+0x10/0x10
[  618.629098][T17651]  ret_from_fork_asm+0x1a/0x30
[  618.629114][T17651]  </TASK>
[  618.629118][T17651] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  619.337430][T21522] overlayfs: statfs failed on './file0'
[  619.401994][T21557] binder: 21556:21557 ioctl c018620c 200000000000 returned -1
[  619.441659][T21561] loop9: detected capacity change from 0 to 512
[  619.463017][T21561] EXT4-fs: Ignoring removed nobh option
[  619.470202][T21561] EXT4-fs (loop9): orphan cleanup on readonly fs
[  619.474705][T21561] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  619.478869][T21561] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it
[  619.487194][T21561] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.5949: Corrupt directory, running e2fsck is recommended
[  619.504835][T21561] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117
[  619.508219][T21561] EXT4-fs error (device loop9): ext4_iget_extra_inode:5075: inode #15: comm syz.9.5949: corrupted in-inode xattr: invalid ea_ino
[  619.518415][T21561] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.5949: couldn't read orphan inode 15 (err -117)
[  619.526863][T21561] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  619.561218][T21568] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5952'.
[  619.615398][T21561] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  619.620856][T21561] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it
[  619.625695][T21561] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.5949: Corrupt directory, running e2fsck is recommended
[  619.634174][T21561] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  619.639061][T21561] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it
[  619.642944][T21561] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.5949: Corrupt directory, running e2fsck is recommended
[  619.655423][T21561] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  619.659612][T21561] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it
[  619.664708][T21561] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.5949: Corrupt directory, running e2fsck is recommended
[  619.670885][T21561] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  619.711547][T12300] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  619.754633][T21579] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5957'.
[  619.790250][T21583] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  619.799372][T21583] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  619.802512][T21583] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3)
[  620.050242][T21601] xt_connbytes: Forcing CT accounting to be enabled
[  620.075329][T21603] sctp: [Deprecated]: syz.9.5968 (pid 21603) Use of struct sctp_assoc_value in delayed_ack socket option.
[  620.075329][T21603] Use struct sctp_sack_info instead
[  620.131705][T21605] loop4: detected capacity change from 0 to 4096
[  620.177881][T21605] ntfs3(loop4): failed to convert "0080" to macinuit
[  620.181206][T21605] ntfs3(loop4): failed to convert name for inode 1e.
[  620.185261][T21605] ntfs3(loop4): ino=1f, mi_enum_attr
[  620.187424][T21605] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  620.199520][T21610] loop9: detected capacity change from 0 to 4096
[  620.224525][T21610] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  620.236740][T21615] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  620.239400][T21615] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  620.283550][T12300] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  620.461564][T21637] loop4: detected capacity change from 0 to 512
[  620.484532][T21637] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  620.488918][T21637] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  620.528588][T20849] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  620.950598][T21666] xt_hashlimit: max too large, truncated to 1048576
[  621.601041][   T55] block nbd0: Possible stuck request ffff888109798000: control (read@0,1024B). Runtime 240 seconds
[  621.605241][   T55] block nbd0: Possible stuck request ffff888109798200: control (read@1024,1024B). Runtime 240 seconds
[  621.609182][   T55] block nbd0: Possible stuck request ffff888109798400: control (read@2048,1024B). Runtime 240 seconds
[  621.613107][   T55] block nbd0: Possible stuck request ffff888109798600: control (read@3072,1024B). Runtime 240 seconds
[  622.094571][T21706] overlayfs: failed to clone upperpath
[  622.663962][T21728] loop9: detected capacity change from 0 to 2048
[  622.738667][T21728] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  622.749172][T21728] ext4 filesystem being mounted at /1038/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  622.787559][T12300] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  623.207329][T21762] Bluetooth: hci0: unsupported parameter 178
[  623.209192][T21762] Bluetooth: hci0: invalid length 0, exp 2 for type 12
[  623.311642][T21774] loop9: detected capacity change from 0 to 512
[  623.313881][T21774] EXT4-fs: Ignoring removed mblk_io_submit option
[  623.333469][T21774] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  623.340736][T21774] ext4 filesystem being mounted at /1041/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  623.565891][T12300] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  623.630952][T21784] ieee802154 phy0 wpan0: encryption failed: -22
[  623.745709][T21792] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6052'.
[  623.779400][T21795] @: renamed from veth0_vlan (while UP)
[  623.894089][T21803] loop4: detected capacity change from 0 to 256
[  623.908444][T21803] FAT-fs (loop4): Directory bread(block 64) failed
[  623.910748][T21803] FAT-fs (loop4): Directory bread(block 65) failed
[  623.913499][T21803] FAT-fs (loop4): Directory bread(block 66) failed
[  623.915930][T21803] FAT-fs (loop4): Directory bread(block 67) failed
[  623.924541][T21803] FAT-fs (loop4): Directory bread(block 68) failed
[  623.930086][T21803] FAT-fs (loop4): Directory bread(block 69) failed
[  623.931934][T21803] FAT-fs (loop4): Directory bread(block 70) failed
[  623.933866][T21803] FAT-fs (loop4): Directory bread(block 71) failed
[  623.936980][T21803] FAT-fs (loop4): Directory bread(block 72) failed
[  623.939565][T21803] FAT-fs (loop4): Directory bread(block 73) failed
[  624.036514][T21813] loop4: detected capacity change from 0 to 512
[  624.061450][T21813] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  624.065503][T21813] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  624.107827][T21813] EXT4-fs error (device loop4): ext4_add_entry:2417: inode #12: comm syz.4.6062: Directory hole found for htree leaf block 0
[  624.129192][T20849] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  624.467846][T10595] usb 10-1: new high-speed USB device number 44 using dummy_hcd
[  624.624948][T21857] loop4: detected capacity change from 0 to 764
[  624.660589][T10595] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  624.664946][T10595] usb 10-1: config 0 has no interfaces?
[  624.670390][T10595] usb 10-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  624.673220][T10595] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  624.676384][T10595] usb 10-1: Product: syz
[  624.678655][T10595] usb 10-1: Manufacturer: syz
[  624.680051][T10595] usb 10-1: SerialNumber: syz
[  624.682846][T10595] usb 10-1: config 0 descriptor??
[  625.032135][T10595] usb 10-1: USB disconnect, device number 44
[  625.130251][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  625.133351][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  625.793594][T21904] loop4: detected capacity change from 0 to 128
[  625.804868][T21904] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  625.812040][T21904] ext4 filesystem being mounted at /125/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  626.339161][T21922] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.6108'.
[  626.352899][T21922] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  626.374880][T21910] loop9: detected capacity change from 0 to 32768
[  626.603915][T21932] loop9: detected capacity change from 0 to 4096
[  626.607753][T21932] ntfs3(loop9): Different NTFS sector size (4096) and media sector size (512).
[  626.714837][T20849] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  626.769708][T21941] Invalid ELF header magic: != ELF
[  626.881017][T21948] loop4: detected capacity change from 0 to 2048
[  626.898946][T21948] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  626.961510][T21952] /dev/nullb0: Can't lookup blockdev
[  627.129896][T13892] usb 10-1: new high-speed USB device number 45 using dummy_hcd
[  627.161225][T21959] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6126'.
[  627.279977][T13892] usb 10-1: Using ep0 maxpacket: 16
[  627.292252][T13892] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  627.294928][T13892] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  627.298585][T13892] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[  627.308998][T13892] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  627.311848][T13892] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  627.317185][T13892] usb 10-1: Product: syz
[  627.318580][T13892] usb 10-1: Manufacturer: syz
[  627.321408][T13892] usb 10-1: SerialNumber: syz
[  627.759274][T13892] usb 10-1: 0:2 : does not exist
[  627.800449][ T5962] usb 5-1: new low-speed USB device number 19 using dummy_hcd
[  627.963385][ T5962] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  627.966930][ T5962] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  627.970951][ T5962] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  627.978563][ T5962] usb 5-1: string descriptor 0 read error: -22
[  627.981213][ T5962] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  627.984662][ T5962] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  628.386294][T13892] usb 10-1: 1:0: failed to get current value for ch 0 (-22)
[  628.410453][ T5962] usb 5-1: 0:2 : does not exist
[  628.411334][T13892] usb 10-1: USB disconnect, device number 45
[  628.427880][ T5962] usb 5-1: USB disconnect, device number 19
[  628.625386][T21978] netlink: 424 bytes leftover after parsing attributes in process `syz.3.6134'.
[  628.628342][T21978] netlink: 'syz.3.6134': attribute type 1 has an invalid length.
[  628.767324][T21987] netlink: 220 bytes leftover after parsing attributes in process `syz.4.6138'.
[  629.047949][T21995] overlayfs: failed to clone upperpath
[  629.066733][T21996] loop9: detected capacity change from 0 to 4096
[  629.084268][T21996] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  629.167726][   T33] audit: type=1800 audit(1762393195.343:2025): pid=21996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.6142" name="file1" dev="loop9" ino=15 res=0 errno=0
[  629.185727][T12300] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  629.533627][T22018] bond1: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  629.580054][T22018] bond1 (unregistering): Released all slaves
[  630.273034][ T5279] usb 10-1: new high-speed USB device number 46 using dummy_hcd
[  630.423003][ T5279] usb 10-1: Using ep0 maxpacket: 16
[  630.427088][ T5279] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  630.430289][ T5279] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  630.435870][ T5279] usb 10-1: config 0 descriptor??
[  630.440277][ T5279] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected
[  630.648161][ T5279] usb 10-1: Detected FT232A
[  630.650989][ T5279] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  630.654865][ T5279] usb 10-1: USB disconnect, device number 46
[  630.658789][ T5279] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  630.662393][ T5279] ftdi_sio 10-1:0.0: device disconnected
[  631.476889][T22037] loop9: detected capacity change from 0 to 32768
[  631.488650][T22037] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[  631.517586][T12300] ocfs2: Unmounting device (7,9) on (node local)
[  631.658027][T22043] loop9: detected capacity change from 0 to 256
[  631.909702][T22053] loop9: detected capacity change from 0 to 512
[  631.913458][T22053] EXT4-fs: inline encryption not supported
[  631.916515][T22053] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  631.923744][T22053] EXT4-fs (loop9): 1 truncate cleaned up
[  631.928061][T22053] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  631.938571][T22053] EXT4-fs warning (device loop9): ext4_empty_dir:3099: inode #2: comm syz.9.6166: directory missing '..'
[  631.969829][T12300] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  632.147111][T22063] loop9: detected capacity change from 0 to 512
[  632.151984][T22063] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended
[  632.158077][T22063] EXT4-fs (loop9): warning: maximal mount count reached, running e2fsck is recommended
[  632.162846][T22063] EXT4-fs error (device loop9): ext4_orphan_get:1392: comm syz.9.6170: inode #15: comm syz.9.6170: iget: illegal inode #
[  632.167592][T22063] EXT4-fs (loop9): Remounting filesystem read-only
[  632.170954][T22063] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  632.180910][T22063] EXT4-fs (loop9): shut down requested (1)
[  632.202161][T12300] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  633.025789][T22081] netlink: 'syz.3.6177': attribute type 8 has an invalid length.
[  634.033193][T22119] netlink: 'syz.3.6195': attribute type 3 has an invalid length.
[  634.065371][T22121] 9pnet_fd: Insufficient options for proto=fd
[  634.092114][T22105] loop4: detected capacity change from 0 to 40427
[  634.095844][T22105] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  634.100444][T22105] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  634.110163][T22105] F2FS-fs (loop4): invalid crc value
[  634.183823][T22105] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  634.187713][T22105] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  634.189963][T22105] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  634.383370][T22131] netlink: 'syz.3.6200': attribute type 21 has an invalid length.
[  634.386129][T22131] netlink: 'syz.3.6200': attribute type 6 has an invalid length.
[  634.389822][T22131] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6200'.
[  634.402225][T22133] netlink: 'syz.9.6201': attribute type 1 has an invalid length.
[  634.529689][T22141] ip6gre2: entered promiscuous mode
[  634.531735][T22141] ip6gre2: entered allmulticast mode
[  634.535375][ T5909] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  634.546893][ T5909] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  634.560918][T13893] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  634.725941][T22149] loop4: detected capacity change from 0 to 64
[  634.777899][T22136] loop9: detected capacity change from 0 to 32768
[  634.810000][T22136] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  634.861313][T22136] XFS (loop9): Ending clean mount
[  634.868854][T22136] XFS (loop9): Quotacheck needed: Please wait.
[  634.905132][T22136] XFS (loop9): Quotacheck: Done.
[  635.096342][T12300] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  635.204531][T22170] loop4: detected capacity change from 0 to 512
[  635.222510][T22170] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  635.278260][T22170] EXT4-fs (loop4): 1 truncate cleaned up
[  635.281813][T22170] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  635.302298][T22170] EXT4-fs error (device loop4): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.4.6216: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  635.336493][T22170] EXT4-fs (loop4): Remounting filesystem read-only
[  635.339082][T22170] EXT4-fs warning (device loop4): ext4_rename_delete:3731: inode #2: comm syz.4.6216: Deleting old file: nlink 5, error=-117
[  635.364295][ T5279] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  635.386112][T22176] loop9: detected capacity change from 0 to 1024
[  635.427630][T20849] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  635.429682][T22176] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  635.615106][ T5279] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  635.671029][T22185] CIFS: iocharset name too long
[  636.321016][T12300] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  636.545342][T22209] loop9: detected capacity change from 0 to 256
[  636.564660][T22209] FAT-fs (loop9): Directory bread(block 64) failed
[  636.567216][T22209] FAT-fs (loop9): Directory bread(block 65) failed
[  636.570619][T22209] FAT-fs (loop9): Directory bread(block 66) failed
[  636.573462][T22209] FAT-fs (loop9): Directory bread(block 67) failed
[  636.576603][T22209] FAT-fs (loop9): Directory bread(block 68) failed
[  636.581627][T22209] FAT-fs (loop9): Directory bread(block 69) failed
[  636.584747][T22209] FAT-fs (loop9): Directory bread(block 70) failed
[  636.587201][T22209] FAT-fs (loop9): Directory bread(block 71) failed
[  636.591353][T22209] FAT-fs (loop9): Directory bread(block 72) failed
[  636.593797][T22209] FAT-fs (loop9): Directory bread(block 73) failed
[  636.875070][T22221] overlayfs: failed to clone upperpath
[  637.259671][ T5962] Process accounting resumed
[  637.811132][ T5962] usb 10-1: new high-speed USB device number 47 using dummy_hcd
[  637.960457][ T5962] usb 10-1: Using ep0 maxpacket: 32
[  637.964879][ T5962] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  637.968938][ T5962] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  637.972556][ T5962] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  637.976205][ T5962] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  637.979987][ T5962] usb 10-1: config 0 descriptor??
[  638.320267][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  638.398115][ T5962] savu 0003:1E7D:2D5A.001B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.9-1/input0
[  638.662628][ T5962] usb 10-1: USB disconnect, device number 47
[  638.719647][T22288] loop4: detected capacity change from 0 to 2048
[  638.734954][T22288] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  638.756701][   T33] audit: type=1800 audit(1762393204.974:2026): pid=22288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6267" name="file1" dev="loop4" ino=15 res=0 errno=0
[  638.779104][T20849] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  639.379929][T22303] netlink: 252 bytes leftover after parsing attributes in process `syz.9.6272'.
[  639.620799][T22319] PKCS8: Unsupported PKCS#8 version
[  639.677255][T22323] loop9: detected capacity change from 0 to 512
[  639.695739][T22323] Quota error (device loop9): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  639.699435][T22323] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota
[  639.703261][T22323] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.6282: Failed to acquire dquot type 1
[  639.708193][T22323] Quota error (device loop9): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  639.711208][T22323] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota
[  639.713904][T22323] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.6282: Failed to acquire dquot type 1
[  639.717430][T22323] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.6282: bg 0: block 248: padding at end of block bitmap is not set
[  639.722245][T22323] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  639.725408][T22323] Quota error (device loop9): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  639.728294][T22323] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota
[  639.730950][T22323] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.6282: Failed to acquire dquot type 1
[  639.735451][T22323] EXT4-fs (loop9): 1 orphan inode deleted
[  639.737889][T22323] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  639.741907][T22323] ext4 filesystem being mounted at /1102/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  639.749150][T22323] Quota error (device loop9): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  639.755343][T22323] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota
[  639.758202][T22323] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.6282: Failed to acquire dquot type 1
[  639.782995][T12300] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  639.950698][T22339] loop9: detected capacity change from 0 to 8192
[  639.954821][T22339] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  640.084930][T22345] loop9: detected capacity change from 0 to 2048
[  640.087497][T22345] EXT4-fs: Ignoring removed bh option
[  640.095265][T22345] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  640.131842][T12300] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  640.421861][T13893] usb 10-1: new full-speed USB device number 48 using dummy_hcd
[  640.578665][T13893] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  640.581937][T13893] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22
[  640.587051][T13893] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  640.589704][T13893] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  640.594729][T13893] usb 10-1: SerialNumber: syz
[  640.600260][T13893] rndis_host 10-1:1.0: probe with driver rndis_host failed with error -22
[  640.806951][T10595] usb 10-1: USB disconnect, device number 48
[  641.321843][T22362] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6298'.
[  641.346537][T22364] loop9: detected capacity change from 0 to 512
[  641.383041][T22364] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  641.390991][T22364] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it
[  641.394917][T22364] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.6299: Corrupt directory, running e2fsck is recommended
[  641.402024][T22364] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117
[  641.406087][T22364] EXT4-fs error (device loop9): ext4_iget_extra_inode:5075: inode #15: comm syz.9.6299: corrupted in-inode xattr: invalid ea_ino
[  641.411355][T22364] EXT4-fs (loop9): Remounting filesystem read-only
[  641.419712][T22364] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  641.437565][T22364] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  641.441763][T22364] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it
[  641.447811][T22364] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.6299: Corrupt directory, running e2fsck is recommended
[  641.458085][T22364] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  641.462167][T22364] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it
[  641.468501][T22364] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.6299: Corrupt directory, running e2fsck is recommended
[  641.474408][T22364] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  641.479409][T22364] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it
[  641.485061][T22364] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.6299: Corrupt directory, running e2fsck is recommended
[  641.490234][T22364] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  641.527835][T12300] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  641.550406][T22378] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  641.574640][T22381] netlink: 848 bytes leftover after parsing attributes in process `syz.9.6305'.
[  642.113265][T10595] usb 10-1: new high-speed USB device number 49 using dummy_hcd
[  642.273474][T10595] usb 10-1: Using ep0 maxpacket: 16
[  642.277040][T10595] usb 10-1: config index 0 descriptor too short (expected 16456, got 72)
[  642.279572][T10595] usb 10-1: config 0 has an invalid interface number: 125 but max is 1
[  642.282206][T10595] usb 10-1: config 0 has an invalid interface number: 125 but max is 1
[  642.286825][T10595] usb 10-1: config 0 has an invalid interface number: 125 but max is 1
[  642.289948][T10595] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2
[  642.294871][T10595] usb 10-1: config 0 has no interface number 0
[  642.298877][T10595] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  642.304251][T10595] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  642.308010][T10595] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  642.311723][T10595] usb 10-1: config 0 interface 125 has no altsetting 1
[  642.318608][T10595] usb 10-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  642.321918][T10595] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  642.325194][T10595] usb 10-1: Product: syz
[  642.326942][T10595] usb 10-1: Manufacturer: syz
[  642.328812][T10595] usb 10-1: SerialNumber: syz
[  642.333798][T10595] usb 10-1: config 0 descriptor??
[  642.727144][T10595] usb 10-1: USB disconnect, device number 49
[  642.794461][T22417] loop4: detected capacity change from 0 to 2048
[  642.798796][T22417] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  642.803498][T22417] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  643.745532][T22425] loop9: detected capacity change from 0 to 32768
[  643.932652][T22439] loop4: detected capacity change from 0 to 256
[  644.112509][T22447] loop9: detected capacity change from 0 to 4096
[  644.123146][T22450] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  644.573458][T22462] loop9: detected capacity change from 0 to 4096
[  644.595531][T22463] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  644.595926][T22462] NILFS error (device loop9): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  644.610405][T22462] NILFS (loop9): mounting fs with errors
[  644.692972][T22469] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  645.080984][T22481] loop9: detected capacity change from 0 to 128
[  645.137339][T22481] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  645.141784][T22481] hpfs: filesystem error: improperly stopped
[  645.144144][T22481] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  645.147974][T22481] hpfs: You really don't want any checks? You are crazy...
[  645.150344][T22481] hpfs: hpfs_map_sector(): read error
[  645.151912][T22481] hpfs: code page support is disabled
[  645.155649][T22481] hpfs: hpfs_map_4sectors(): unaligned read
[  645.158015][T22481] hpfs: hpfs_map_4sectors(): unaligned read
[  645.160017][T22481] hpfs: filesystem error: unable to find root dir
[  645.391336][T22492] ip6erspan0: entered promiscuous mode
[  645.805035][T22500] SET target dimension over the limit!
[  646.217123][T22505] loop9: detected capacity change from 0 to 32768
[  646.219872][T22505] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.6361 (22505)
[  646.225374][T22505] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  646.228315][T22505] BTRFS info (device loop9): using sha256 (sha256-lib) checksum algorithm
[  646.248009][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  646.269739][T22505] BTRFS info (device loop9): enabling ssd optimizations
[  646.271860][T22505] BTRFS info (device loop9): turning on async discard
[  646.273816][T22505] BTRFS info (device loop9): enabling free space tree
[  646.301561][T12300] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  646.534375][T22539] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  648.798844][T10595] usb 10-1: new high-speed USB device number 50 using dummy_hcd
[  648.949306][T10595] usb 10-1: Using ep0 maxpacket: 8
[  648.953726][T10595] usb 10-1: config index 0 descriptor too short (expected 301, got 45)
[  648.961328][T10595] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  648.969146][T10595] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  648.973173][T10595] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  648.987074][T10595] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  648.992862][T10595] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  648.996381][T10595] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  650.964344][   T33] audit: type=1326 audit(1762393217.174:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22590 comm="syz.4.6391" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb78fd8efc9 code=0x7fc00000
[  651.572123][T13906] usb 10-1: USB disconnect, device number 50
[  651.606567][   T33] audit: type=1326 audit(1762393217.813:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22590 comm="syz.4.6391" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb78fd8efc9 code=0x7fc00000
[  652.338495][   T55] block nbd0: Possible stuck request ffff888109798000: control (read@0,1024B). Runtime 270 seconds
[  652.343203][   T55] block nbd0: Possible stuck request ffff888109798200: control (read@1024,1024B). Runtime 270 seconds
[  652.347337][   T55] block nbd0: Possible stuck request ffff888109798400: control (read@2048,1024B). Runtime 270 seconds
[  652.351387][   T55] block nbd0: Possible stuck request ffff888109798600: control (read@3072,1024B). Runtime 270 seconds
[  652.556995][   T33] audit: type=1804 audit(1762393218.762:2029): pid=22618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.6401" name="/newroot/182/file0" dev="tmpfs" ino=970 res=1 errno=0
[  652.558345][T22618] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -14123, delta: 1
[  652.573292][T22618] ref_ctr increment failed for inode: 0x3ca offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888116af4b40
[  652.602942][T22618] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -14123, delta: -1
[  652.608947][T22618] ref_ctr decrement failed for inode: 0x3ca offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888116af4b40
[  652.613323][T22618] uprobe: syz.4.6401:22618 failed to unregister, leaking uprobe
[  652.812214][ T5925] Bluetooth: hci1: command 0x0406 tx timeout
[  652.893355][T22622] bridge1: entered promiscuous mode
[  652.895295][T22622] bridge1: entered allmulticast mode
[  653.124526][T22636] loop4: detected capacity change from 0 to 40427
[  653.127505][T22636] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  653.130316][T22636] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  653.134289][T22636] F2FS-fs (loop4): invalid crc value
[  653.174016][T22636] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  653.177977][T22636] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  653.180033][T22636] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  653.199402][T22641] Bluetooth: hci0: invalid length 0, exp 2 for type 18
[  653.954946][T22649] loop9: detected capacity change from 0 to 32768
[  653.958179][T22649] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.6413 (22649)
[  653.964850][T22649] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  653.967869][T22649] BTRFS info (device loop9): using sha256 (sha256-lib) checksum algorithm
[  653.985798][T22649] BTRFS info (device loop9): enabling ssd optimizations
[  653.988244][T22649] BTRFS info (device loop9): turning on sync discard
[  653.990171][T22649] BTRFS info (device loop9): enabling free space tree
[  654.030580][T12300] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  654.630265][T22684] loop9: detected capacity change from 0 to 2048
[  654.649790][T22684] NILFS (loop9): broken superblock, retrying with spare superblock (blocksize = 1024)
[  654.673873][T22687] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  654.694683][T22684] kAFS: unable to lookup cell '̅?ۛkմ]-״8ވ>~OC1sߘi?Ϯaya<C'
[  654.765490][T22675] loop4: detected capacity change from 0 to 32768
[  655.361364][T22702] loop4: detected capacity change from 0 to 32768
[  655.365110][T22702] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.6426 (22702)
[  655.371276][T22702] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  655.375202][T22702] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  655.394269][T22702] BTRFS info (device loop4): enabling ssd optimizations
[  655.396849][T22702] BTRFS info (device loop4): turning on async discard
[  655.399233][T22702] BTRFS info (device loop4): enabling free space tree
[  655.424620][T20849] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  655.494206][T13893] usb 10-1: new high-speed USB device number 51 using dummy_hcd
[  655.645252][T13893] usb 10-1: Using ep0 maxpacket: 32
[  655.652262][T13893] usb 10-1: config 5 has an invalid interface number: 197 but max is 0
[  655.656553][T13893] usb 10-1: config 5 has no interface number 0
[  655.658771][T13893] usb 10-1: config 5 interface 197 has no altsetting 0
[  655.665789][T13893] usb 10-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice=70.5c
[  655.669236][T13893] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  655.672115][T13893] usb 10-1: Product: syz
[  655.673688][T13893] usb 10-1: Manufacturer: syz
[  655.680760][T13893] usb 10-1: SerialNumber: syz
[  655.969130][T13893] usb 10-1: USB disconnect, device number 51
[  656.619069][T22759] netlink: 212368 bytes leftover after parsing attributes in process `syz.9.6450'.
[  656.654101][T22763] x_tables: duplicate underflow at hook 4
[  656.970488][T22778] loop9: detected capacity change from 0 to 32768
[  656.986159][T22778] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  656.999796][T22778] XFS (loop9): Ending clean mount
[  657.065774][T12300] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  658.460738][T22819] netlink: 'syz.9.6475': attribute type 3 has an invalid length.
[  658.533098][T22822] binder: BINDER_SET_CONTEXT_MGR already set
[  658.535677][T22822] binder: 22821:22822 ioctl 4018620d 2000000000c0 returned -16
[  658.749742][T22832] binder: BINDER_SET_CONTEXT_MGR already set
[  658.751991][T22832] binder: 22821:22832 ioctl 4018620d 200000000040 returned -16
[  659.588280][T22848] loop9: detected capacity change from 0 to 32768
[  659.590902][T22848] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.6487 (22848)
[  659.597046][T22848] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  659.600137][T22848] BTRFS info (device loop9): using sha256 (sha256-lib) checksum algorithm
[  659.620261][T22848] BTRFS info (device loop9): enabling ssd optimizations
[  659.622552][T22848] BTRFS info (device loop9): turning on async discard
[  659.624654][T22848] BTRFS info (device loop9): enabling free space tree
[  659.695029][T12300] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  659.911265][T22868] netlink: 'syz.4.6490': attribute type 1 has an invalid length.
[  659.937323][    C1] vkms_vblank_simulate: vblank timer overrun
[  659.944124][T22868] netlink: 244 bytes leftover after parsing attributes in process `syz.4.6490'.
[  659.947803][T22868] NCSI netlink: No device for ifindex 0
[  660.891310][T22901] loop9: detected capacity change from 0 to 8
[  660.905743][T22901] SQUASHFS error: lzo decompression failed, data probably corrupt
[  660.908099][T22901] SQUASHFS error: Failed to read block 0x91: -5
[  660.912137][T22901] SQUASHFS error: Unable to read metadata cache entry [8f]
[  660.914417][T22901] SQUASHFS error: Unable to read inode 0x11f
[  661.482535][T22918] loop9: detected capacity change from 0 to 32768
[  661.500188][T22918] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[  661.516135][T22918] OCFS2: ERROR (device loop9): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature 
[  661.537208][T22918] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  661.559110][T22918] OCFS2: File system is now read-only.
[  661.560666][T22918] (syz.9.6513,22918,1):ocfs2_find_entry_dx:1037 ERROR: status = -30
[  661.568517][T22918] OCFS2: ERROR (device loop9): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature 
[  661.580015][T22918] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  661.583200][T22918] (syz.9.6513,22918,1):ocfs2_find_entry_dx:1037 ERROR: status = -30
[  661.585441][T22918] (syz.9.6513,22918,1):ocfs2_mknod:505 ERROR: status = -30
[  661.587607][T22918] (syz.9.6513,22918,1):ocfs2_create:678 ERROR: status = -30
[  661.626464][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  661.648583][T12300] ocfs2: Unmounting device (7,9) on (node local)
[  661.797891][T22930] loop4: detected capacity change from 0 to 32768
[  661.801766][T22930] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.6519 (22930)
[  661.808873][T22930] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  661.812787][T22930] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  661.924759][T22930] BTRFS info (device loop4): rebuilding free space tree
[  661.934085][T22930] BTRFS info (device loop4): disabling free space tree
[  661.936613][T22930] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  661.940133][T22930] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  661.947435][T22930] BTRFS info (device loop4): enabling ssd optimizations
[  661.950005][T22930] BTRFS info (device loop4): turning on sync discard
[  661.952400][T22930] BTRFS info (device loop4): force clearing of disk cache
[  661.954923][T22930] BTRFS info (device loop4): enabling auto defrag
[  661.957317][T22930] BTRFS info (device loop4): force zlib compression, level 3
[  661.960179][T22930] BTRFS info (device loop4): max_inline set to 0
[  661.970587][   T33] audit: type=1800 audit(1762393228.175:2030): pid=22930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6519" name="file1" dev="loop4" ino=260 res=0 errno=0
[  662.031361][T20849] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  662.237945][    C1] hpet: Lost 1 RTC interrupts
[  662.336894][T22963] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma?
[  663.033442][   T33] audit: type=1326 audit(1762393228.954:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22969 comm="syz.3.6530" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7423d8efc9 code=0x7ffc0000
[  663.088426][   T33] audit: type=1326 audit(1762393228.954:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22969 comm="syz.3.6530" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7423d8efc9 code=0x7ffc0000
[  663.479461][T22978] loop4: detected capacity change from 0 to 4096
[  664.044824][T22981] loop9: detected capacity change from 0 to 131072
[  664.055409][T22981] F2FS-fs (loop9): invalid crc value
[  664.117098][T22981] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  664.121499][T22981] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  664.123921][T22994] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6537'.
[  664.133971][T22994] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  664.137143][T22994] gretap1: entered promiscuous mode
[  664.138703][T22994] gretap1: entered allmulticast mode
[  664.180496][T22986] loop4: detected capacity change from 0 to 32768
[  664.206442][T22986] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  664.233515][T22986] XFS (loop4): Ending clean mount
[  664.237778][T22986] XFS (loop4): Quotacheck needed: Please wait.
[  664.294256][T22986] XFS (loop4): Quotacheck: Done.
[  664.319253][T20849] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  664.692389][T23021] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  664.695262][T23021] overlayfs: missing 'lowerdir'
[  666.800644][T23082] netlink: 'syz.9.6562': attribute type 10 has an invalid length.
[  666.855212][T23087] loop9: detected capacity change from 0 to 1024
[  666.858228][T23087] EXT4-fs: inline encryption not supported
[  666.860444][T23087] EXT4-fs: Ignoring removed bh option
[  666.888229][T23087] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  666.933129][T12300] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  667.422604][T23111] loop9: detected capacity change from 0 to 32768
[  667.426703][T23111] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.6566 (23111)
[  667.438037][T23111] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  667.442072][T23111] BTRFS info (device loop9): using sha256 (sha256-lib) checksum algorithm
[  667.467532][T23111] BTRFS info (device loop9): enabling ssd optimizations
[  667.470203][T23111] BTRFS info (device loop9): turning on async discard
[  667.472890][T23111] BTRFS info (device loop9): enabling free space tree
[  667.557686][T20897] BTRFS info (device loop9): qgroup scan completed (inconsistency flag cleared)
[  667.593872][T23117] loop4: detected capacity change from 0 to 32768
[  667.597013][T23117] BTRFS info: device /dev/loop4 (7:4) using temp-fsid dba69638-cd30-4589-972b-3c0dd91ba9aa
[  667.600977][T23117] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.6569 (23117)
[  667.606759][T23117] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  667.610414][T23117] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  667.630852][T23117] BTRFS info (device loop4): enabling ssd optimizations
[  667.633116][T23117] BTRFS info (device loop4): turning on async discard
[  667.635160][T23117] BTRFS info (device loop4): enabling free space tree
[  667.661787][T20849] BTRFS info (device loop4): last unmount of filesystem dba69638-cd30-4589-972b-3c0dd91ba9aa
[  667.715918][T12300] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  667.989770][T23154] MPI: mpi too large (107144 bits)
[  668.284329][T23162] loop9: detected capacity change from 0 to 4096
[  668.290124][T23162] EXT4-fs (loop9): Test dummy encryption mode enabled
[  668.297021][T23162] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  668.300449][T23162] System zones: 0-5
[  668.307747][T23162] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  669.072774][T23162] ext4: Unknown parameter 'memory'
[  670.045373][T12300] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  670.131211][T23174] loop9: detected capacity change from 0 to 64
[  670.531419][T23196] loop4: detected capacity change from 0 to 2048
[  670.924868][T23221] loop9: detected capacity change from 0 to 164
[  670.930611][T23221] isofs_fill_super: bread failed, dev=loop9, iso_blknum=41, block=82
[  672.464814][T23259] loop9: detected capacity change from 0 to 1024
[  672.476213][T23259] syz.9.6621: attempt to access beyond end of device
[  672.476213][T23259] loop9: rw=0, sector=201326592, nr_sectors = 2 limit=1024
[  672.484257][T23259] Buffer I/O error on dev loop9, logical block 100663296, async page read
[  672.490202][T23259] hfsplus: unable to mark blocks free: error -5
[  672.492484][T23259] hfsplus: can't free extent: start 135, count 2
[  673.606337][T23285] xt_hashlimit: size too large, truncated to 1048576
[  673.817740][T23283] loop9: detected capacity change from 0 to 40427
[  673.820946][T23283] F2FS-fs: heap/no_heap options were deprecated
[  673.823421][T23283] F2FS-fs (loop9): build fault injection rate: 19
[  673.825376][T23283] F2FS-fs (loop9): build fault injection type: 0x77e8c
[  673.828828][T23283] F2FS-fs (loop9): invalid crc value
[  673.848144][T23283] F2FS-fs (loop9): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x1cb/0x970
[  673.865986][T23283] F2FS-fs (loop9): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_bio+0x18f/0xaa0
[  673.876926][    C0] F2FS-fs (loop9): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  673.886338][T23291] loop4: detected capacity change from 0 to 16
[  673.899287][T23291] erofs (device loop4): mounted with root inode @ nid 36.
[  673.903520][T23297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6636'.
[  673.917143][   T33] audit: type=1800 audit(1762393240.096:2033): pid=23291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6635" name="file1" dev="loop4" ino=86 res=0 errno=0
[  673.966114][T23283] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  673.974511][T23283] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  674.000527][T23283] F2FS-fs (loop9): inject page alloc in f2fs_grab_cache_folio of f2fs_new_node_folio+0x131/0xa40
[  674.040962][T12300] F2FS-fs (loop9): inject page alloc in f2fs_grab_cache_folio of f2fs_grab_meta_folio+0x6a/0x1d0
[  674.061262][T23300] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  674.068536][T23300] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  674.071873][T12300] F2FS-fs (loop9): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x4ef/0x21b0
[  674.080728][T12300] F2FS-fs (loop9): invalid blkaddr: 1024, type: 10, run fsck to fix.
[  674.193881][T23300] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  674.200559][T23300] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  674.313801][T23300] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  674.323686][T23300] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  674.466204][T23318] loop4: detected capacity change from 0 to 4096
[  674.469415][T23300] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  674.472782][T23300] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  674.487109][T23318] ntfs3(loop4): ino=b, mi_enum_attr
[  674.489153][T23318] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  674.491788][T23318] ntfs3(loop4): Failed to load $Extend (-2).
[  674.493655][T23318] ntfs3(loop4): Failed to initialize $Extend.
[  674.588110][T20897] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  674.592083][T20897] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  674.610249][T20897] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  674.613095][T20897] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  674.627245][ T5961] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  674.630271][ T5961] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  674.657350][ T5961] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  674.661261][ T5961] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  674.698579][ T5962] usb 10-1: new high-speed USB device number 52 using dummy_hcd
[  674.852455][ T5962] usb 10-1: Using ep0 maxpacket: 16
[  674.856471][ T5962] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  674.865268][ T5962] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[  674.876004][ T5962] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  674.880823][ T5962] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  674.884705][ T5962] usb 10-1: Product: syz
[  674.886339][ T5962] usb 10-1: Manufacturer: syz
[  674.888107][ T5962] usb 10-1: SerialNumber: syz
[  674.950544][T23345] pimreg: entered allmulticast mode
[  674.955310][T23345] pimreg: left allmulticast mode
[  675.104928][ T5962] usb 10-1: 0:2 : does not exist
[  675.120749][ T5962] usb 10-1: 5:0: failed to get current value for ch 0 (-22)
[  675.137678][ T5962] usb 10-1: USB disconnect, device number 52
[  675.276365][T23353] loop4: detected capacity change from 0 to 512
[  675.280409][T23353] EXT4-fs (loop4): Test dummy encryption mode enabled
[  675.283181][T23353] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  675.289398][T23353] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.6662: bad orphan inode 131083
[  675.295934][T23353] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  675.327029][T20849] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  677.743589][T23423] loop9: detected capacity change from 0 to 128
[  677.746385][T23423] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80413772 (sector = 1)
[  677.755829][T17569] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80413772 (sector = 1)
[  678.217683][T23441] netlink: 88 bytes leftover after parsing attributes in process `syz.9.6701'.
[  678.225527][T23441] netlink: 48 bytes leftover after parsing attributes in process `syz.9.6701'.
[  678.237165][T23441] netlink: 88 bytes leftover after parsing attributes in process `syz.9.6701'.
[  678.240692][T23441] netlink: 48 bytes leftover after parsing attributes in process `syz.9.6701'.
[  678.348800][T23449] loop9: detected capacity change from 0 to 8
[  678.358350][T23449] SQUASHFS error: Unable to read inode 0xa7
[  678.467239][T23455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6708'.
[  678.657035][T23471] loop9: detected capacity change from 0 to 1024
[  678.660822][T23471] EXT4-fs: Ignoring removed orlov option
[  678.679706][T23471] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  678.738112][T12300] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  678.906651][T23489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6722'.
[  678.909815][T23489] netlink: 'syz.3.6722': attribute type 5 has an invalid length.
[  678.920029][T23489] netlink: 'syz.3.6722': attribute type 8 has an invalid length.
[  678.923794][T23489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6722'.
[  678.931857][T23489] geneve4: entered promiscuous mode
[  678.933839][T23489] geneve4: entered allmulticast mode
[  678.937020][   T12] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  678.940456][   T12] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  678.945732][   T12] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  678.948809][   T12] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  679.140319][T23501] loop9: detected capacity change from 0 to 4096
[  679.143886][T23501] ntfs3(loop9): Different NTFS sector size (1024) and media sector size (512).
[  679.163846][T23501] ntfs3(loop9): Mark volume as dirty due to NTFS errors
[  679.170666][T23501] ntfs3(loop9): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr
[  679.204775][T23487] loop4: detected capacity change from 0 to 40427
[  679.228784][T23487] F2FS-fs (loop4): invalid crc value
[  679.285548][T23487] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  679.289128][T23487] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  679.346282][T20849] syz-executor: attempt to access beyond end of device
[  679.346282][T20849] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  679.350286][T20849] CPU: 1 UID: 0 PID: 20849 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  679.350299][T20849] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  679.350305][T20849] Call Trace:
[  679.350309][T20849]  <TASK>
[  679.350313][T20849]  dump_stack_lvl+0x189/0x250
[  679.350330][T20849]  ? __pfx_dump_stack_lvl+0x10/0x10
[  679.350341][T20849]  ? __pfx_queue_work_on+0x10/0x10
[  679.350349][T20849]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  679.350360][T20849]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  679.350376][T20849]  f2fs_handle_critical_error+0x37c/0x540
[  679.350391][T20849]  f2fs_write_end_io+0x886/0xb60
[  679.350409][T20849]  __submit_merged_bio+0x27a/0x6a0
[  679.350424][T20849]  __submit_merged_write_cond+0x255/0x530
[  679.350439][T20849]  f2fs_write_data_pages+0x261d/0x3000
[  679.350464][T20849]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  679.350497][T20849]  ? folio_unqueue_deferred_split+0x93/0x230
[  679.350509][T20849]  ? folios_put_refs+0x584/0x670
[  679.350524][T20849]  ? __lock_acquire+0xab9/0xd20
[  679.350536][T20849]  ? do_raw_spin_lock+0x121/0x290
[  679.350552][T20849]  ? do_raw_spin_unlock+0x4d/0x240
[  679.350562][T20849]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  679.350587][T20849]  do_writepages+0x32e/0x550
[  679.350605][T20849]  ? do_raw_spin_unlock+0x4d/0x240
[  679.350622][T20849]  filemap_fdatawrite+0x199/0x240
[  679.350633][T20849]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  679.350667][T20849]  ? do_raw_spin_unlock+0x4d/0x240
[  679.350680][T20849]  f2fs_sync_dirty_inodes+0x31f/0x830
[  679.350697][T20849]  f2fs_write_checkpoint+0x93e/0x2440
[  679.350707][T20849]  ? __lock_acquire+0xab9/0xd20
[  679.350730][T20849]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  679.350767][T20849]  kill_f2fs_super+0x2cc/0x6d0
[  679.350779][T20849]  ? __pfx_kill_f2fs_super+0x10/0x10
[  679.350799][T20849]  ? shrinker_free+0x2ce/0x3e0
[  679.350809][T20849]  deactivate_locked_super+0xbc/0x130
[  679.350821][T20849]  cleanup_mnt+0x425/0x4c0
[  679.350830][T20849]  ? lockdep_hardirqs_on+0x9c/0x150
[  679.350842][T20849]  task_work_run+0x1d4/0x260
[  679.350855][T20849]  ? __pfx_task_work_run+0x10/0x10
[  679.350864][T20849]  ? __x64_sys_umount+0x122/0x160
[  679.350877][T20849]  ? exit_to_user_mode_loop+0x40/0x130
[  679.350887][T20849]  exit_to_user_mode_loop+0xe9/0x130
[  679.350895][T20849]  do_syscall_64+0x2bd/0xfa0
[  679.350905][T20849]  ? lockdep_hardirqs_on+0x9c/0x150
[  679.350914][T20849]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  679.350922][T20849]  ? exc_page_fault+0xab/0x100
[  679.350933][T20849]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  679.350941][T20849] RIP: 0033:0x7fb78fd902f7
[  679.350950][T20849] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  679.350957][T20849] RSP: 002b:00007ffe60cae038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  679.350966][T20849] RAX: 0000000000000000 RBX: 00007fb78fe11d7d RCX: 00007fb78fd902f7
[  679.350972][T20849] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe60cae0f0
[  679.350977][T20849] RBP: 00007ffe60cae0f0 R08: 0000000000000000 R09: 0000000000000000
[  679.350982][T20849] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe60caf180
[  679.350987][T20849] R13: 00007fb78fe11d7d R14: 00000000000a5aee R15: 00007ffe60caf1c0
[  679.351003][T20849]  </TASK>
[  679.351006][T20849] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  679.882732][T10595] usb 10-1: new high-speed USB device number 53 using dummy_hcd
[  680.042857][T10595] usb 10-1: Using ep0 maxpacket: 16
[  680.053852][T10595] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  680.057639][T10595] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[  680.064181][T10595] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  680.067598][T10595] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  680.070512][T10595] usb 10-1: Product: syz
[  680.072413][T10595] usb 10-1: Manufacturer: syz
[  680.074166][T10595] usb 10-1: SerialNumber: syz
[  680.313170][ T5962] usb 10-1: USB disconnect, device number 53
[  680.937214][T23550] binder: BINDER_SET_CONTEXT_MGR already set
[  680.939877][T23550] binder: 23549:23550 ioctl 4018620d 200000000100 returned -16
[  680.946848][T23550] binder: BINDER_SET_CONTEXT_MGR already set
[  680.948733][T23550] binder: 23549:23550 ioctl 4018620d 200000004a80 returned -16
[  680.951910][T23550] binder: 23549:23550 unknown command 0
[  680.953868][T23550] binder: 23549:23550 ioctl c0306201 200000000240 returned -22
[  682.517711][T23579] loop9: detected capacity change from 0 to 32768
[  682.520463][T23579] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.6761 (23579)
[  682.526702][T23579] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  682.529622][T23579] BTRFS info (device loop9): using sha256 (sha256-lib) checksum algorithm
[  682.584265][T23579] BTRFS info (device loop9): enabling ssd optimizations
[  682.586663][T23579] BTRFS info (device loop9): turning on async discard
[  682.588793][T23579] BTRFS info (device loop9): enabling free space tree
[  682.612658][T12300] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  682.775561][   T55] block nbd0: Possible stuck request ffff888109798000: control (read@0,1024B). Runtime 300 seconds
[  682.778452][   T55] block nbd0: Possible stuck request ffff888109798200: control (read@1024,1024B). Runtime 300 seconds
[  682.781370][   T55] block nbd0: Possible stuck request ffff888109798400: control (read@2048,1024B). Runtime 300 seconds
[  682.785537][   T55] block nbd0: Possible stuck request ffff888109798600: control (read@3072,1024B). Runtime 300 seconds
[  682.892416][T23605] loop9: detected capacity change from 0 to 4096
[  682.906678][T23605] ntfs3(loop9): Mark volume as dirty due to NTFS errors
[  682.921459][T23605] ntfs3(loop9): ino=b, mi_enum_attr
[  682.923985][T23605] ntfs3(loop9): Failed to load $Extend (-22).
[  682.947556][T23605] ntfs3(loop9): Failed to initialize $Extend.
[  682.977202][T23605] ntfs3(loop9): ino=21, "file1" fiemap is not supported for compressed file (cp -r)
[  683.007544][T17653] ntfs3(loop9): ino=5, mi_enum_attr
[  683.023759][T23617] netlink: 'syz.4.6772': attribute type 1 has an invalid length.
[  683.024614][T17653] ntfs3(loop9): ino=5, mi_enum_attr
[  683.040802][T23617] netlink: 1 bytes leftover after parsing attributes in process `syz.4.6772'.
[  683.471644][T23629] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  683.480408][T23629] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  683.496761][T23629] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  683.503654][T23629] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  683.509844][T23629] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  683.650561][T23640] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6782'.
[  684.263230][T23662] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  684.308062][T23664] macsec2: entered allmulticast mode
[  684.309987][T23664] macsec0: entered allmulticast mode
[  684.316080][T23664] veth1_macvtap: entered allmulticast mode
[  684.412127][T23666] loop9: detected capacity change from 0 to 4096
[  684.416451][T23666] ntfs3(loop9): Different NTFS sector size (1024) and media sector size (512).
[  684.480716][T23672] 9pnet_fd: Insufficient options for proto=fd
[  685.396240][ T5201] Bluetooth: hci1: command 0x0406 tx timeout
[  685.459540][T23713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6817'.
[  685.537024][T23709] loop9: detected capacity change from 0 to 40427
[  685.542952][T23709] F2FS-fs (loop9): invalid crc value
[  685.559702][ T5201] Bluetooth: hci3: command 0x0c1a tx timeout
[  685.603145][T23709] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  685.606820][T23709] F2FS-fs (loop9): Start checkpoint disabled!
[  685.609795][T23709] F2FS-fs (loop9): f2fs_disable_checkpoint() finish, err:0
[  685.613194][T23709] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6
[  685.698941][T12300] syz-executor: attempt to access beyond end of device
[  685.698941][T12300] loop9: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  685.703694][T12300] syz-executor: attempt to access beyond end of device
[  685.703694][T12300] loop9: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  685.744822][T17678] kworker/u10:59: attempt to access beyond end of device
[  685.744822][T17678] loop9: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  685.751765][T17678] CPU: 1 UID: 0 PID: 17678 Comm: kworker/u10:59 Not tainted syzkaller #0 PREEMPT(full) 
[  685.751779][T17678] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  685.751785][T17678] Workqueue: writeback wb_workfn (flush-7:9)
[  685.751802][T17678] Call Trace:
[  685.751806][T17678]  <TASK>
[  685.751811][T17678]  dump_stack_lvl+0x189/0x250
[  685.751825][T17678]  ? __pfx_dump_stack_lvl+0x10/0x10
[  685.751836][T17678]  ? __pfx_queue_work_on+0x10/0x10
[  685.751845][T17678]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  685.751856][T17678]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  685.751871][T17678]  f2fs_handle_critical_error+0x37c/0x540
[  685.751887][T17678]  f2fs_write_end_io+0x886/0xb60
[  685.751905][T17678]  __submit_merged_bio+0x27a/0x6a0
[  685.751919][T17678]  __submit_merged_write_cond+0x255/0x530
[  685.751934][T17678]  f2fs_write_data_pages+0x261d/0x3000
[  685.751964][T17678]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  685.751979][T17678]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  685.752006][T17678]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  685.752024][T17678]  ? trace_f2fs_writepages+0x7f/0x200
[  685.752035][T17678]  ? f2fs_write_node_pages+0x478/0x6e0
[  685.752048][T17678]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  685.752061][T17678]  ? __lock_acquire+0xab9/0xd20
[  685.752073][T17678]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  685.752099][T17678]  do_writepages+0x32e/0x550
[  685.752115][T17678]  ? reacquire_held_locks+0x127/0x1d0
[  685.752123][T17678]  ? writeback_sb_inodes+0x384/0x1010
[  685.752138][T17678]  __writeback_single_inode+0x145/0xff0
[  685.752148][T17678]  ? do_raw_spin_unlock+0x4d/0x240
[  685.752165][T17678]  writeback_sb_inodes+0x6c7/0x1010
[  685.752200][T17678]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  685.752238][T17678]  ? rcu_is_watching+0x15/0xb0
[  685.752258][T17678]  wb_writeback+0x43b/0xaf0
[  685.752284][T17678]  ? queue_io+0x311/0x590
[  685.752302][T17678]  ? __pfx_wb_writeback+0x10/0x10
[  685.752328][T17678]  ? _raw_spin_unlock_irq+0x23/0x50
[  685.752348][T17678]  wb_workfn+0x409/0xef0
[  685.752366][T17678]  ? __pfx_wb_workfn+0x10/0x10
[  685.752378][T17678]  ? __lock_acquire+0xab9/0xd20
[  685.752391][T17678]  ? process_scheduled_works+0x9ef/0x17b0
[  685.752404][T17678]  ? _raw_spin_unlock_irq+0x23/0x50
[  685.752412][T17678]  ? process_scheduled_works+0x9ef/0x17b0
[  685.752419][T17678]  ? process_scheduled_works+0x9ef/0x17b0
[  685.752429][T17678]  process_scheduled_works+0xae1/0x17b0
[  685.752452][T17678]  ? __pfx_process_scheduled_works+0x10/0x10
[  685.752470][T17678]  worker_thread+0x8a0/0xda0
[  685.752480][T17678]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  685.752494][T17678]  ? __kthread_parkme+0x7b/0x200
[  685.752509][T17678]  kthread+0x711/0x8a0
[  685.752521][T17678]  ? __pfx_worker_thread+0x10/0x10
[  685.752529][T17678]  ? __pfx_kthread+0x10/0x10
[  685.752539][T17678]  ? _raw_spin_unlock_irq+0x23/0x50
[  685.752548][T17678]  ? lockdep_hardirqs_on+0x9c/0x150
[  685.752557][T17678]  ? __pfx_kthread+0x10/0x10
[  685.752567][T17678]  ret_from_fork+0x4bc/0x870
[  685.752578][T17678]  ? __pfx_ret_from_fork+0x10/0x10
[  685.752590][T17678]  ? __switch_to_asm+0x39/0x70
[  685.752596][T17678]  ? __switch_to_asm+0x33/0x70
[  685.752602][T17678]  ? __pfx_kthread+0x10/0x10
[  685.752612][T17678]  ret_from_fork_asm+0x1a/0x30
[  685.752628][T17678]  </TASK>
[  685.752632][T17678] F2FS-fs (loop9): Stopped filesystem due to reason: 3
[  685.865918][T17678] CPU: 1 UID: 0 PID: 17678 Comm: kworker/u10:59 Not tainted syzkaller #0 PREEMPT(full) 
[  685.865932][T17678] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  685.865938][T17678] Workqueue: writeback wb_workfn (flush-7:9)
[  685.865962][T17678] Call Trace:
[  685.865966][T17678]  <TASK>
[  685.865970][T17678]  dump_stack_lvl+0x189/0x250
[  685.865985][T17678]  ? __pfx_dump_stack_lvl+0x10/0x10
[  685.865995][T17678]  ? __pfx_queue_work_on+0x10/0x10
[  685.866004][T17678]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  685.866015][T17678]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  685.866030][T17678]  f2fs_handle_critical_error+0x37c/0x540
[  685.866047][T17678]  f2fs_write_end_io+0x886/0xb60
[  685.866064][T17678]  __submit_merged_bio+0x27a/0x6a0
[  685.866113][T17678]  __submit_merged_write_cond+0x255/0x530
[  685.866129][T17678]  f2fs_write_data_pages+0x261d/0x3000
[  685.866168][T17678]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  685.866185][T17678]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  685.866214][T17678]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  685.866232][T17678]  ? trace_f2fs_writepages+0x7f/0x200
[  685.866257][T17678]  ? f2fs_write_node_pages+0x478/0x6e0
[  685.866276][T17678]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  685.866294][T17678]  ? __lock_acquire+0xab9/0xd20
[  685.866312][T17678]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  685.866327][T17678]  do_writepages+0x32e/0x550
[  685.866341][T17678]  ? reacquire_held_locks+0x127/0x1d0
[  685.866350][T17678]  ? writeback_sb_inodes+0x384/0x1010
[  685.866365][T17678]  __writeback_single_inode+0x145/0xff0
[  685.866376][T17678]  ? do_raw_spin_unlock+0x4d/0x240
[  685.866389][T17678]  writeback_sb_inodes+0x6c7/0x1010
[  685.866413][T17678]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  685.866446][T17678]  ? rcu_is_watching+0x15/0xb0
[  685.866460][T17678]  wb_writeback+0x43b/0xaf0
[  685.866475][T17678]  ? queue_io+0x311/0x590
[  685.866487][T17678]  ? __pfx_wb_writeback+0x10/0x10
[  685.866502][T17678]  ? _raw_spin_unlock_irq+0x23/0x50
[  685.866514][T17678]  wb_workfn+0x409/0xef0
[  685.866531][T17678]  ? __pfx_wb_workfn+0x10/0x10
[  685.866543][T17678]  ? __lock_acquire+0xab9/0xd20
[  685.866556][T17678]  ? process_scheduled_works+0x9ef/0x17b0
[  685.866568][T17678]  ? _raw_spin_unlock_irq+0x23/0x50
[  685.866576][T17678]  ? process_scheduled_works+0x9ef/0x17b0
[  685.866584][T17678]  ? process_scheduled_works+0x9ef/0x17b0
[  685.866593][T17678]  process_scheduled_works+0xae1/0x17b0
[  685.866616][T17678]  ? __pfx_process_scheduled_works+0x10/0x10
[  685.866634][T17678]  worker_thread+0x8a0/0xda0
[  685.866644][T17678]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  685.866657][T17678]  ? __kthread_parkme+0x7b/0x200
[  685.866672][T17678]  kthread+0x711/0x8a0
[  685.866683][T17678]  ? __pfx_worker_thread+0x10/0x10
[  685.866691][T17678]  ? __pfx_kthread+0x10/0x10
[  685.866702][T17678]  ? _raw_spin_unlock_irq+0x23/0x50
[  685.866711][T17678]  ? lockdep_hardirqs_on+0x9c/0x150
[  685.866720][T17678]  ? __pfx_kthread+0x10/0x10
[  685.866730][T17678]  ret_from_fork+0x4bc/0x870
[  685.866740][T17678]  ? __pfx_ret_from_fork+0x10/0x10
[  685.866753][T17678]  ? __switch_to_asm+0x39/0x70
[  685.866759][T17678]  ? __switch_to_asm+0x33/0x70
[  685.866764][T17678]  ? __pfx_kthread+0x10/0x10
[  685.866775][T17678]  ret_from_fork_asm+0x1a/0x30
[  685.866791][T17678]  </TASK>
[  685.964478][    C1] vkms_vblank_simulate: vblank timer overrun
[  685.967189][    C1] hpet: Lost 5 RTC interrupts
[  685.996462][T17678] F2FS-fs (loop9): Stopped filesystem due to reason: 3
[  686.605700][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  686.608459][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  686.829263][T23729] loop4: detected capacity change from 0 to 8
[  686.837779][T23729] SQUASHFS error: Unable to read inode 0x11f
[  686.909476][ T5925] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  686.914823][ T5925] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  686.920936][ T5925] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  686.933894][ T5925] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  686.938583][ T5925] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  687.039417][T23739] netlink: 'syz.3.6829': attribute type 7 has an invalid length.
[  687.086033][T23731] chnl_net:caif_netlink_parms(): no params data found
[  687.186878][T23731] bridge0: port 1(bridge_slave_0) entered blocking state
[  687.198287][T23731] bridge0: port 1(bridge_slave_0) entered disabled state
[  687.200908][T23731] bridge_slave_0: entered allmulticast mode
[  687.204372][T23731] bridge_slave_0: entered promiscuous mode
[  687.213056][T23731] bridge0: port 2(bridge_slave_1) entered blocking state
[  687.215747][T23731] bridge0: port 2(bridge_slave_1) entered disabled state
[  687.220707][T23731] bridge_slave_1: entered allmulticast mode
[  687.224885][T23731] bridge_slave_1: entered promiscuous mode
[  687.294672][T23731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  687.310872][T23731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  687.367017][T23763] loop4: detected capacity change from 0 to 256
[  687.380718][T23763] FAT-fs (loop4): Directory bread(block 64) failed
[  687.383672][T23731] team0: Port device team_slave_0 added
[  687.385999][T23763] FAT-fs (loop4): Directory bread(block 65) failed
[  687.392149][T23763] FAT-fs (loop4): Directory bread(block 66) failed
[  687.394068][T23763] FAT-fs (loop4): Directory bread(block 67) failed
[  687.396001][T23763] FAT-fs (loop4): Directory bread(block 68) failed
[  687.401738][T23731] team0: Port device team_slave_1 added
[  687.413822][T23763] FAT-fs (loop4): Directory bread(block 69) failed
[  687.415999][T23763] FAT-fs (loop4): Directory bread(block 70) failed
[  687.419152][T23763] FAT-fs (loop4): Directory bread(block 71) failed
[  687.421088][T23763] FAT-fs (loop4): Directory bread(block 72) failed
[  687.423395][T23763] FAT-fs (loop4): Directory bread(block 73) failed
[  687.440772][T23731] batman_adv: batadv0: Adding interface: batadv_slave_0
[  687.443273][T23731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  687.463260][T23731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  687.471633][T23731] batman_adv: batadv0: Adding interface: batadv_slave_1
[  687.473891][T23731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  687.482785][ T5925] Bluetooth: hci1: command 0x0406 tx timeout
[  687.497731][T23731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  687.637586][ T5925] Bluetooth: hci3: command 0x0c1a tx timeout
[  687.914318][T23731] hsr_slave_0: entered promiscuous mode
[  687.939434][T23731] hsr_slave_1: entered promiscuous mode
[  687.962698][T23731] debugfs: 'hsr0' already exists in 'hsr'
[  687.971251][T23731] Cannot create hsr debugfs directory
[  689.009863][ T5925] Bluetooth: hci0: command tx timeout
[  689.031508][T23781] loop4: detected capacity change from 0 to 128
[  689.129146][T23781] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  689.145242][T23781] ext4 filesystem being mounted at /292/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  689.276304][T20849] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  689.295335][T23793] 9pnet_fd: Insufficient options for proto=fd
[  689.584028][T23814] dummy0: entered promiscuous mode
[  689.586836][T23813] dummy0: left promiscuous mode
[  689.719893][ T5925] Bluetooth: hci3: command 0x0c1a tx timeout
[  689.755256][T23827] netlink: 'syz.3.6859': attribute type 29 has an invalid length.
[  689.932731][T23731] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  689.943441][T23731] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  689.964900][T23731] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  689.971362][T23731] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  690.095175][T23731] 8021q: adding VLAN 0 to HW filter on device bond0
[  690.123564][T23731] 8021q: adding VLAN 0 to HW filter on device team0
[  690.136168][T17569] bridge0: port 1(bridge_slave_0) entered blocking state
[  690.138523][T17569] bridge0: port 1(bridge_slave_0) entered forwarding state
[  690.156976][T17569] bridge0: port 2(bridge_slave_1) entered blocking state
[  690.159358][T17569] bridge0: port 2(bridge_slave_1) entered forwarding state
[  690.412926][T23731] 8021q: adding VLAN 0 to HW filter on device batadv0
[  690.460642][T23731] veth0_vlan: entered promiscuous mode
[  690.474108][T23731] veth1_vlan: entered promiscuous mode
[  690.518620][T23731] veth0_macvtap: entered promiscuous mode
[  690.524436][T23731] veth1_macvtap: entered promiscuous mode
[  690.537051][T23731] batman_adv: batadv0: Interface activated: batadv_slave_0
[  690.545790][T23731] batman_adv: batadv0: Interface activated: batadv_slave_1
[  690.563434][T20897] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  690.566010][T20897] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  690.568498][T20897] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  690.580961][T20897] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  690.678088][T17644] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  690.688950][T17644] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  690.707674][T17644] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  690.710538][T17644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  691.084375][   T34] INFO: task syz.0.4962:19000 blocked for more than 143 seconds.
[  691.086634][   T34]       Not tainted syzkaller #0
[  691.088413][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  691.097165][ T5925] Bluetooth: hci0: command tx timeout
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  691.113368][   T34] task:syz.0.4962      state:D stack:26280 pid:19000 tgid:18999 ppid:18776  task_flags:0x400140 flags:0x00080002
[  691.136451][   T34] Call Trace:
[  691.137626][   T34]  <TASK>
[  691.138633][   T34]  __schedule+0x1798/0x4cc0
[  691.140328][   T34]  ? __lock_acquire+0xab9/0xd20
[  691.142618][   T34]  ? __lock_acquire+0xab9/0xd20
[  691.144170][   T34]  ? __pfx___schedule+0x10/0x10
[  691.145623][   T34]  ? schedule+0x91/0x360
[  691.146855][   T34]  schedule+0x165/0x360
[  691.148167][   T34]  schedule_preempt_disabled+0x13/0x30
[  691.150161][   T34]  __mutex_lock+0x7e6/0x1350
[  691.151700][   T34]  ? __mutex_lock+0x5bb/0x1350
[  691.153384][   T34]  ? sync_bdevs+0x1ac/0x340
[  691.155152][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  691.157425][   T34]  ? iput+0x5eb/0xc50
[  691.158922][   T34]  sync_bdevs+0x1ac/0x340
[  691.160781][   T34]  ksys_sync+0xb9/0x150
[  691.162310][   T34]  ? __pfx_ksys_sync+0x10/0x10
[  691.163810][   T34]  ? do_syscall_64+0xbe/0xfa0
[  691.165216][   T34]  __ia32_sys_sync+0xe/0x20
[  691.166571][   T34]  do_syscall_64+0xfa/0xfa0
[  691.167987][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  691.169649][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.172072][   T34]  ? exc_page_fault+0xab/0x100
[  691.174268][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.176439][   T34] RIP: 0033:0x7f08cc38efc9
[  691.178321][   T34] RSP: 002b:00007f08cd2ec038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2
[  691.181045][   T34] RAX: ffffffffffffffda RBX: 00007f08cc5e5fa0 RCX: 00007f08cc38efc9
[  691.183319][   T34] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  691.185579][   T34] RBP: 00007f08cc5e5fa0 R08: 0000000000000000 R09: 0000000000000000
[  691.188295][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  691.190590][   T34] R13: 00007f08cc5e6038 R14: 00007f08cc5e5fa0 R15: 00007ffdb2d27878
[  691.192870][   T34]  </TASK>
[  691.193808][   T34] 
[  691.193808][   T34] Showing all locks held in the system:
[  691.196117][   T34] 1 lock held by khungtaskd/34:
[  691.197779][   T34]  #0: ffffffff8df3d620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  691.229835][   T34] 2 locks held by getty/5645:
[  691.231198][   T34]  #0: ffff8881126310a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  691.234201][   T34]  #1: ffffc9000357b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  691.237489][   T34] 2 locks held by sshd/5739:
[  691.238882][   T34] 1 lock held by udevd/5935:
[  691.260039][   T34]  #0: ffff8881096fb358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  691.262699][   T34] 3 locks held by kworker/0:13/13893:
[  691.264143][   T34]  #0: ffff888100075948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  691.267752][   T34]  #1: ffffc9000908fba0 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  691.272361][   T34]  #2: ffff888116af9240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1f7/0x3b0
[  691.275150][   T34] 1 lock held by syz.0.4962/19000:
[  691.276544][   T34]  #0: ffff8881096fb358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ac/0x340
[  691.279046][   T34] 1 lock held by syz-executor/20849:
[  691.281224][   T34]  #0: ffffffff8df430b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[  691.284699][   T34] 1 lock held by syz-executor/23731:
[  691.286167][   T34]  #0: ffffffff8df430b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  691.289206][   T34] 1 lock held by syz.3.6882/23914:
[  691.299910][   T34]  #0: ffff88812123a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  691.303179][   T34] 
[  691.321651][   T34] =============================================
[  691.321651][   T34] 
[  691.324086][   T34] NMI backtrace for cpu 1
[  691.324095][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  691.324104][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  691.324109][   T34] Call Trace:
[  691.324114][   T34]  <TASK>
[  691.324118][   T34]  dump_stack_lvl+0x189/0x250
[  691.324134][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  691.324144][   T34]  ? __pfx__printk+0x10/0x10
[  691.324157][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  691.324167][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  691.324176][   T34]  ? __pfx__printk+0x10/0x10
[  691.324185][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  691.324198][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  691.324207][   T34]  watchdog+0xf60/0xfa0
[  691.324217][   T34]  ? watchdog+0x1e2/0xfa0
[  691.324227][   T34]  kthread+0x711/0x8a0
[  691.324238][   T34]  ? __pfx_watchdog+0x10/0x10
[  691.324245][   T34]  ? __pfx_kthread+0x10/0x10
[  691.324255][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  691.324265][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  691.324274][   T34]  ? __pfx_kthread+0x10/0x10
[  691.324283][   T34]  ret_from_fork+0x4bc/0x870
[  691.324292][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  691.324303][   T34]  ? __switch_to_asm+0x39/0x70
[  691.324323][   T34]  ? __switch_to_asm+0x33/0x70
[  691.324329][   T34]  ? __pfx_kthread+0x10/0x10
[  691.324338][   T34]  ret_from_fork_asm+0x1a/0x30
[  691.324351][   T34]  </TASK>
[  691.324355][   T34] Sending NMI from CPU 1 to CPUs 0:
[  691.367774][    C0] NMI backtrace for cpu 0
[  691.367791][    C0] CPU: 0 UID: 0 PID: 20849 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  691.367800][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  691.367806][    C0] RIP: 0010:unwind_next_frame+0x7cd/0x2390
[  691.367819][    C0] Code: 0f 84 d3 0d 00 00 48 83 c7 38 e8 0e 28 00 00 49 89 c4 48 8b 34 24 e9 a9 02 00 00 49 8d 5e 40 48 89 d8 48 c1 e8 03 80 3c 28 00 <74> 11 48 89 df e8 29 2c b2 00 48 8b 34 24 48 8b 54 24 08 4c 8b 23
[  691.367826][    C0] RSP: 0018:ffffc900099cf538 EFLAGS: 00000246
[  691.367834][    C0] RAX: 1ffff92001339ec9 RBX: ffffc900099cf648 RCX: ffffffff8ffeb954
[  691.367839][    C0] RDX: ffffffff90b04ffc RSI: ffffffff90b05000 RDI: ffffffff8bbf0800
[  691.367845][    C0] RBP: dffffc0000000000 R08: 0000000000000001 R09: ffffffff81738d25
[  691.367850][    C0] R10: ffffc900099cf658 R11: ffffffff81ac2f50 R12: ffffffff90b05001
[  691.367855][    C0] R13: ffffc900099cf658 R14: ffffc900099cf608 R15: ffffc900099cf640
[  691.367861][    C0] FS:  000055555b309500(0000) GS:ffff88818eb3d000(0000) knlGS:0000000000000000
[  691.367867][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  691.367872][    C0] CR2: 0000561199a1a950 CR3: 0000000118b66000 CR4: 00000000000006f0
[  691.367894][    C0] Call Trace:
[  691.367898][    C0]  <TASK>
[  691.367903][    C0]  ? unwind_next_frame+0xa5/0x2390
[  691.367913][    C0]  ? do_syscall_64+0x2bd/0xfa0
[  691.367924][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  691.367934][    C0]  arch_stack_walk+0x11c/0x150
[  691.367944][    C0]  ? do_syscall_64+0x2bd/0xfa0
[  691.367954][    C0]  stack_trace_save+0x9c/0xe0
[  691.367963][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  691.367974][    C0]  save_stack+0xf5/0x1f0
[  691.367984][    C0]  ? __pfx_save_stack+0x10/0x10
[  691.367993][    C0]  ? __free_frozen_pages+0xbc4/0xd30
[  691.368003][    C0]  ? vfree+0x25a/0x400
[  691.368011][    C0]  ? kcov_close+0x28/0x50
[  691.368018][    C0]  ? __fput+0x44c/0xa70
[  691.368026][    C0]  ? task_work_run+0x1d4/0x260
[  691.368035][    C0]  ? do_exit+0x6b5/0x2300
[  691.368044][    C0]  ? do_group_exit+0x21c/0x2d0
[  691.368053][    C0]  ? get_signal+0x1285/0x1340
[  691.368060][    C0]  ? arch_do_signal_or_restart+0xa0/0x790
[  691.368070][    C0]  ? exit_to_user_mode_loop+0x72/0x130
[  691.368076][    C0]  ? do_syscall_64+0x2bd/0xfa0
[  691.368087][    C0]  __reset_page_owner+0x71/0x1f0
[  691.368097][    C0]  __free_frozen_pages+0xbc4/0xd30
[  691.368108][    C0]  vfree+0x25a/0x400
[  691.368117][    C0]  ? __pfx_kcov_close+0x10/0x10
[  691.368124][    C0]  kcov_close+0x28/0x50
[  691.368130][    C0]  __fput+0x44c/0xa70
[  691.368140][    C0]  task_work_run+0x1d4/0x260
[  691.368150][    C0]  ? __pfx_task_work_run+0x10/0x10
[  691.368160][    C0]  ? do_exit+0x6b0/0x2300
[  691.368168][    C0]  ? kmem_cache_free+0x19b/0x690
[  691.368179][    C0]  do_exit+0x6b5/0x2300
[  691.368189][    C0]  ? do_raw_spin_lock+0x121/0x290
[  691.368199][    C0]  ? __pfx_do_exit+0x10/0x10
[  691.368207][    C0]  ? add_device_randomness+0xbf/0x100
[  691.368218][    C0]  do_group_exit+0x21c/0x2d0
[  691.368227][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  691.368237][    C0]  get_signal+0x1285/0x1340
[  691.368248][    C0]  arch_do_signal_or_restart+0xa0/0x790
[  691.368258][    C0]  ? __pfx___x64_sys_clone+0x10/0x10
[  691.368267][    C0]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  691.368281][    C0]  ? exit_to_user_mode_loop+0x40/0x130
[  691.368288][    C0]  exit_to_user_mode_loop+0x72/0x130
[  691.368295][    C0]  do_syscall_64+0x2bd/0xfa0
[  691.368303][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  691.368311][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.368319][    C0]  ? exc_page_fault+0xab/0x100
[  691.368327][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.368334][    C0] RIP: 0033:0x7fb78fd85713
[  691.368341][    C0] Code: Unable to access opcode bytes at 0x7fb78fd856e9.
[  691.368345][    C0] RSP: 002b:00007ffe60caf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  691.368353][    C0] RAX: fffffffffffffff4 RBX: 0000000000000000 RCX: 00007fb78fd85713
[  691.368358][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  691.368363][    C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001
[  691.368367][    C0] R10: 000055555b3097d0 R11: 0000000000000246 R12: 0000000000000000
[  691.368372][    C0] R13: 00000000000927c0 R14: 00000000000a88ae R15: 00007ffe60caf1c0
[  691.368381][    C0]  </TASK>
[  691.720514][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  692.150063][ T5961] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  692.277156][ T5961] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  692.324640][ T5961] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  692.413005][ T5961] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  692.557098][ T5961] bridge_slave_1: left allmulticast mode
[  692.559108][ T5961] bridge_slave_1: left promiscuous mode
[  692.561056][ T5961] bridge0: port 2(bridge_slave_1) entered disabled state
[  692.564873][ T5961] bridge_slave_0: left allmulticast mode
[  692.566666][ T5961] bridge_slave_0: left promiscuous mode
[  692.568490][ T5961] bridge0: port 1(bridge_slave_0) entered disabled state
[  693.193447][ T5961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  693.198258][ T5961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  693.202164][ T5961] bond0 (unregistering): Released all slaves
[  693.519822][ T5961] hsr_slave_0: left promiscuous mode
[  693.523082][ T5961] hsr_slave_1: left promiscuous mode
[  693.525618][ T5961] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  693.528217][ T5961] batman_adv: batadv0: Removing interface: batadv_slave_0
[  693.532117][ T5961] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  693.535203][ T5961] batman_adv: batadv0: Removing interface: batadv_slave_1
[  693.561099][ T5961] veth1_macvtap: left promiscuous mode
[  693.565260][ T5961] veth0_macvtap: left promiscuous mode
[  693.567339][ T5961] veth1_vlan: left promiscuous mode
[  693.569267][ T5961] veth0_vlan: left promiscuous mode
[  694.209331][ T5961] team0 (unregistering): Port device team_slave_1 removed
[  694.266555][ T5961] team0 (unregistering): Port device team_slave_0 removed
[  695.376010][    C1] hpet: Lost 1 RTC interrupts
[  695.402929][ T5961] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  695.529621][ T5961] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  695.631101][ T5961] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  695.719344][ T5961] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  695.840809][ T5961] bridge_slave_1: left allmulticast mode
[  695.844546][ T5961] bridge_slave_1: left promiscuous mode
[  695.846768][ T5961] bridge0: port 2(bridge_slave_1) entered disabled state
[  695.852437][ T5961] bridge_slave_0: left allmulticast mode
[  695.854917][ T5961] bridge_slave_0: left promiscuous mode
[  695.857154][ T5961] bridge0: port 1(bridge_slave_0) entered disabled state
[  696.368314][ T5961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  696.373044][ T5961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  696.377111][ T5961] bond0 (unregistering): Released all slaves
[  696.658920][ T5961] hsr_slave_0: left promiscuous mode
[  696.660886][ T5961] hsr_slave_1: left promiscuous mode
[  696.662796][ T5961] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  696.665080][ T5961] batman_adv: batadv0: Removing interface: batadv_slave_0
[  696.667652][ T5961] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  696.669786][ T5961] batman_adv: batadv0: Removing interface: batadv_slave_1
[  696.686240][ T5961] veth1_macvtap: left promiscuous mode
[  696.688293][ T5961] veth0_macvtap: left promiscuous mode
[  696.689949][ T5961] veth1_vlan: left promiscuous mode
[  696.691574][ T5961] veth0_vlan: left promiscuous mode
[  697.471220][ T5961] team0 (unregistering): Port device team_slave_1 removed
[  697.535506][ T5961] team0 (unregistering): Port device team_slave_0 removed

VM DIAGNOSIS:
01:23:53  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000079 RBX=0000000000000079 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000aa7690
R8 =ffff88816ac90237 R9 =1ffff1102d592046 R10=dffffc0000000000 R11=ffffffff8514d8e0
R12=dffffc0000000000 R13=ffffffff997d7929 R14=ffffffff99aeaf20 R15=0000000000000000
RIP=ffffffff8514d95c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88818eb3d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055cfe7370131 CR3=000000000dd38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f XMM01=0000000000000000 0000000000000000
XMM02=ffffffffffffffff ffffffffffffff00 XMM03=00000000000000ff 000000000000ff00
XMM04=0000000000ff0000 0000ff0000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b4974b RBX=1ffff11024248441 RCX=ffff8881a7001d00 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc9000825fac0 RSP=ffffc9000825f940
R8 =ffffffff8f7cdc77 R9 =1ffffffff1ef9b8e R10=dffffc0000000000 R11=fffffbfff1ef9b8f
R12=ffff888121242208 R13=dffffc0000000000 R14=ffff88823c63b240 R15=0000000000000000
RIP=ffffffff81b49733 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555568f10500 ffffffff 00c00000
GS =0000 ffff8882a9f3d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000561a558dc7b8 CR3=000000011a32c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
