last executing test programs:

12m58.917337407s ago: executing program 32 (id=345):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50)
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0)
write$nbd(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="01"], 0x40)

11m53.154694088s ago: executing program 33 (id=1152):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f0000000200)=0x84)

11m30.384455163s ago: executing program 34 (id=1444):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94)
r0 = syz_open_dev$evdev(&(0x7f000001fa80), 0x20000000, 0x0)
ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000000)=""/122)

11m29.281023699s ago: executing program 35 (id=1462):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94)

10m30.157740865s ago: executing program 36 (id=2260):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000000c0)={{}, {}, [], {0x4, 0x1}, [{0x8, 0x6}], {0x10, 0x3}, {0x20, 0x7}}, 0x2c, 0x1)
setreuid(0xffffffffffffffff, 0xee01)
mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', 0x0, 0x0, 0x0)

10m20.655520231s ago: executing program 37 (id=2381):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00fe7d1830daa688de001dfd99d53e5090bd0000", @ANYRES32=0x0, @ANYBLOB='\x00'/15], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
syz_clone(0x20000000, &(0x7f0000001040)="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", 0x1000, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000001c0)="57156587095867f239687b952a8906492ea8f6be83a79fe1e88ade49356be93fc9e1f868197990609f3872c647e26faec0dcbee9f789")
openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x591002, 0x1, 0xc}, 0x18)
ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x8, 0xc, 0x2, 0x2}, {0x7fff, 0x0, 0x0, 0x1}]})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, &(0x7f00000003c0)=0x800001, 0x4)
unshare(0x26000400)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
pipe(&(0x7f00000002c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000080)=[{&(0x7f0000000500)="7c15b6bce0568bdbef75e4667376c6507c51094765fcc21aa8810d5a760327a50bc67e6f84d20215ae0b84a847e4a948b5258b28626336e159ad54d4c00f287cdf1bade52605c3e691", 0x49}], 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f0000000740)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000800)={0xb0, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x810}, 0x80)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)

10m8.699640217s ago: executing program 38 (id=2531):
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b)
close(r0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r2, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x3, [], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]})
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r6=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000340)={0x0, 0x0, r6, <r7=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000200)={r7, 0x0, 0xfffffeff, 0xfffffffe, 0x1, [], [0x800, 0x0, 0x20], [0x1, 0x0, 0x0, 0x77], [0x10000, 0xa54, 0xd1, 0x3]})
close_range(r4, 0xffffffffffffffff, 0x0)

8m58.122773537s ago: executing program 8 (id=3609):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000400)="e4e647c9e0b8e9a2f2ab3026da58", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

8m57.230476434s ago: executing program 8 (id=3622):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1008002, &(0x7f0000000bc0)={[{@grpquota}, {@delalloc}, {@resuid}, {@test_dummy_encryption}, {@dioread_nolock}, {@jqfmt_vfsold}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5e8, &(0x7f0000000f40)="$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")

8m57.141784471s ago: executing program 8 (id=3624):
r0 = socket(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300050018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0xffffffffffffff93)

8m57.141569624s ago: executing program 8 (id=3625):
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x89901)
mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1000, 0x0)

8m56.84213347s ago: executing program 8 (id=3628):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r0}, 0x10)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r1, r0, 0x4, r0}, 0x10)

8m56.652779907s ago: executing program 8 (id=3631):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCSETS(r0, 0x40204706, &(0x7f0000000040)={0x4000, 0x3, 0x5, 0x0, 0x0, "3eccd8f9d20500005a1a320900"})

8m56.637313068s ago: executing program 39 (id=3631):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCSETS(r0, 0x40204706, &(0x7f0000000040)={0x4000, 0x3, 0x5, 0x0, 0x0, "3eccd8f9d20500005a1a320900"})

8m55.307286898s ago: executing program 9 (id=3650):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006780)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x5, 0x2}, {0xc, 0xe}}}, 0x24}}, 0x0)

8m55.277457986s ago: executing program 9 (id=3651):
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2)
r1 = memfd_create(&(0x7f00000003c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3)
ftruncate(r1, 0xffff)
fcntl$addseals(r1, 0x409, 0x7)
ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000009c0)=ANY=[@ANYBLOB="0020000002000000", @ANYRES32=r1, @ANYBLOB="0000000000000000000000000080000000000000", @ANYRES8])

8m55.270443892s ago: executing program 9 (id=3653):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x6}, 0x66)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000300), &(0x7f00000002c0), 0xffffffff, r1}, 0x38)

8m55.182754989s ago: executing program 9 (id=3654):
syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x3800813, &(0x7f0000000480)={[{@cruft}, {@map_acorn}, {@unhide}, {@session={'session', 0x3d, 0x31}}, {@nojoliet}, {@overriderock}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@nocompress}, {@overriderock}, {}, {@block={'block', 0x3d, 0x200}}, {}, {@overriderock}, {@nojoliet}, {@mode={'mode', 0x3d, 0xf}}]}, 0x1, 0xa61, &(0x7f0000001cc0)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020)

8m55.182335004s ago: executing program 9 (id=3655):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000018c0)=@newqdisc={0x150, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_STAB={0x104, 0x2, "768fc5d0efb7f82cc9a57b4f9746bcbc88c1cc681c88f3a113a38e12e2332f10d481a5076eed91de9f6aea516e0e6599fd9c9022436cab017b5cc0435ae6508737978d76a52acee9285348feff6a1bd44ef680ecdcc7f9f03d5f13736d09247683f52146ec81bff38cd29ef7a452ffff4681f6f872ae1c9e742503cf83d3a0f6ba605bec0528b8b8ae1fc5c7c4a5619739acac1df0dd32346c75429e3899968ee07612aa52a05a1b6ba109d24861e108fe7d364d197bc535216cef12f2bd64d6ed252d1f5b46f752eb81792cb7d39e4b1f31cded98b4871e53b2cae7d241b3448d8067e77e7b912207fd73ca6212a77edb197c83dae343b6bf1070783cc1fc45"}, @TCA_RED_MAX_P={0x8, 0x3, 0x5}, @TCA_RED_PARMS={0x14, 0x1, {0x8, 0x3ff, 0x80, 0x1a, 0x20, 0x14, 0x1}}]}}]}, 0x150}}, 0x2200c810)

8m54.949187435s ago: executing program 9 (id=3663):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, 0x40c89}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004880}, 0x0)

8m54.850581125s ago: executing program 40 (id=3663):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, 0x40c89}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004880}, 0x0)

7m11.054164227s ago: executing program 3 (id=5361):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001"], 0x122}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x3d, 0x9, 0xffffffff, 0x0, {0x1}, [@typed={0x4, 0x11f}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x22, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}]}, @typed={0x8, 0xf, 0x0, 0x0, @pid}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0x6}, {0x4, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x40004)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x834)

7m11.053879388s ago: executing program 3 (id=5362):
r0 = socket$nl_route(0x10, 0x3, 0x0)
lsetxattr$security_capability(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080081000000060027"], 0x44}, 0x1, 0x0, 0x0, 0x24048004}, 0x4000)

7m11.053669144s ago: executing program 3 (id=5363):
r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F91 ^x\x85\x80[\xa3B\n#!\xc2R\xdd\xf4)\xba\x1e\xfb6U\xabc\xda\x9a)\xc3\x9a\x06\xc5\xccP)\xdf.\xa7-\x84\xdf8\xbf\xfc1^}B\xee\xccR/z\x1e\xe8\x1e\x99\x99\n\xf4u\xd4\xbd^L\xb2j\xda\xff\x1d\x10\xc8\xad\xbd_OI\xb1\xe8y\x003\a\x06\x92\x8e\n\x8b\xf3\xd4G\x85\xbd\x1a\x81+3\x99jq\xd1\xacK^\xef\xb6!8\xcd?\x1e\\\x16W2\xbd4$zn\xa9\x7f\x9dE\xaf\x0f\xdb\xe0\xfa\x10\xc3\xb2\xf8\x80\x8c\xec$\xda\xc0\x94y1\t\xc5`\xda\xca\xd1\xab:\x18\x10\x9b\xd0w', 0x0)
r1 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9a\b\x00\x00\x00\b\x84\xa2{\x00\v\x18\x004\x03\x96\x00\x00\xd7Uw\x00\xbc\xfa2\x04\x87\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xc83\x12\xd7\xdb\x93\xcc]x\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x81\x01\xe5\x98\r\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\xd9\xf7\xf4\x19\xf2\x14\x0fM\x00\x00\xa9\xf0I{\xf0:\xd7\x802\xf3\r|\x86\x82\xf1\xb2\x06\xb0\x06\xbe\xb1\x0f\xa2\xa6\xedA\xb7\x0f\xda\x9d<\xd6l\xbcF\xcb\xec\x83#?\xf4\x81\x16+\x14\xd0\xb8\x88`W', 0x1)
r2 = dup(r1)
r3 = fanotify_init(0x0, 0x800)
fanotify_mark(r3, 0x1, 0x18, r2, 0x0)
write$binfmt_misc(r0, &(0x7f0000000180)="e5", 0x1)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

7m10.990354075s ago: executing program 3 (id=5364):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000006c0)={[{@orlov}, {@noauto_da_alloc}, {@inlinecrypt}, {@dioread_lock}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@resuid}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40)
write$FUSE_INIT(r0, &(0x7f00000001c0)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x2b, 0x101, 0x12400000, 0x0, 0xff, 0xfff, 0x400, 0x0, 0x0, 0x2, 0x6}}, 0x50)
semop(0x0, &(0x7f0000000300)=[{0x2, 0xd, 0x1800}, {0x1, 0xbbdd, 0x1000}], 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff])
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)='9', 0x1}], 0x1, 0x5405, 0x21, 0x0)

7m10.914907725s ago: executing program 3 (id=5365):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)={0xe0, 0x12, 0x509, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @nested={0xc5, 0x0, 0x0, 0x1, [@generic="697b72d6e2cfefa7b18723d8aabff0cfa727263f72c8035e96468908420120c901b92267f3d044a1b1fd758d51fa6b9f17d25954a107976f78479a83f07cd94dc44c33ab18109ed8dbe762d1e2abbfd2f61a6eb50f897db49083035c64c7ff9873997d5cb0f13148f746af5857d46a7d09e54e1c34ef1ae1d73a", @typed={0x14, 0x21, 0x0, 0x0, @ipv6=@loopback}, @generic="cfe526f5cf847ae75ea1e0089e686ba35681b9a46e85c64bd8b5314397525f74573808ec2d4b31ec30c91491a8aabb08764b0f"]}]}, 0xe0}], 0x1, 0x0, 0x0, 0x40480c5}, 0x0)

7m10.775603023s ago: executing program 3 (id=5366):
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x4e4, &(0x7f0000000480)={0x0, 0x938c, 0x10100, 0x0, 0xfffffffe}, &(0x7f0000000080)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0)

7m10.726780517s ago: executing program 41 (id=5366):
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x4e4, &(0x7f0000000480)={0x0, 0x938c, 0x10100, 0x0, 0xfffffffe}, &(0x7f0000000080)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0)

6m40.040193768s ago: executing program 0 (id=5854):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'vlan0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r4, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x24}}, 0x0)

6m39.714291658s ago: executing program 0 (id=5855):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x3, [@var={0x1, 0x0, 0x0, 0xe, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x80000001}}]}, {0x0, [0x61]}}, 0x0, 0x53}, 0x20)

6m39.683206887s ago: executing program 0 (id=5857):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000100), 0x1, 0x599, &(0x7f0000000540)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0xa}}, 0x5400)

6m39.611256222s ago: executing program 0 (id=5863):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000900)={[{@noblock_validity}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@resuid}, {@dioread_lock}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000340)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})
chdir(&(0x7f0000000140)='./file0\x00')
r0 = open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x0)
sendfile(r0, r0, 0x0, 0x800000009)

6m39.509953258s ago: executing program 0 (id=5865):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, &(0x7f0000000b40)={0x8001, 0x20000009, 0x9, 0x7f, 0x1ae, 0x8, 0x9, 0x6, 0x3a})

6m39.102202324s ago: executing program 0 (id=5866):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="021800001c000000000000000000e60005000600000000000a00030000000000000000000000000000000000000000000000000000000000080012000000000000000000000000003000000000000000000000000000000002000001000000000000000000000000fe8000000000000000000000000000bb05000500000000000a00000000000000fc01000000000000000000000000000f00000000000000000800192f"], 0xe0}}, 0x0)

6m39.026374095s ago: executing program 42 (id=5866):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="021800001c000000000000000000e60005000600000000000a00030000000000000000000000000000000000000000000000000000000000080012000000000000000000000000003000000000000000000000000000000002000001000000000000000000000000fe8000000000000000000000000000bb05000500000000000a00000000000000fc01000000000000000000000000000f00000000000000000800192f"], 0xe0}}, 0x0)

1m57.041635714s ago: executing program 6 (id=10598):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000308000340000000170900010073797a30000000000900020073797a32"], 0x94}}, 0x0)

1m57.040490691s ago: executing program 6 (id=10600):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000340)={0x28, 0x10004, 0x0, 0x0, 0x15f2c0, 0x8, 0x5, 0x2a174e})

1m56.990758215s ago: executing program 6 (id=10602):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000180)=ANY=[@ANYRES64=0x0, @ANYRES64, @ANYRES16=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x120)
fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x100000000000})
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)

1m56.934244701s ago: executing program 6 (id=10605):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0x8c0, &(0x7f00000002c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c726573765f6c6576656c3d30303030303030303030303030303030303030302c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c646174613d77726974656261636b2c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00149e0cb4c679a55808f10855fc0d9b9d7241cc60c5c0b35a9ce6bd73d50a863d736b7f64cdbf2582b25c868128f5a0c3ca71ea7a85f79743e17bbb3291a3c43eb49fcfcab9a806f939773a5895370494ec438f24b77c23cb13a0c7c11503d4e4a25d5e8142cc163f75ca2557bc5b3dd2856dbf2f4fbffb092b1a8d3f410d0daefab8a2f41a23713a02fa9349bc76bc637fe28f733ee38a6de0e2174f54e7f4ebc705a06c4b7d76bcc94f8985dbf4791afe238c9f24f48c0f98d3898ad1f3597c15fdc241ce161617ca162b1d4a17900f12843677d372e706"], 0x1, 0x442a, &(0x7f0000008940)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x40086602, &(0x7f0000000080)={@id={0x2, 0x0, @d}})

1m56.723514973s ago: executing program 6 (id=10606):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x43, 0x9, 0x0, 0x0, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @pid}]}, 0x1c}}, 0x24000044)

1m56.604419166s ago: executing program 6 (id=10610):
r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x7ff, 0xfffffff9, 0xc, 0xfffffffffffffffd, 0x5a0, 0xffffffffffffffff})

1m56.564420458s ago: executing program 43 (id=10610):
r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x7ff, 0xfffffff9, 0xc, 0xfffffffffffffffd, 0x5a0, 0xffffffffffffffff})

1m48.241975836s ago: executing program 5 (id=10703):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1})
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0})

1m48.170989363s ago: executing program 5 (id=10704):
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r1=>0x0}, &(0x7f0000000080)=0xc)
sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000002c0)={0x2c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r1}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x5, 0x1, 0x0, 0x1, [@generic="13"]}]}, 0x2c}], 0x1}, 0xcc000)

1m48.170827675s ago: executing program 5 (id=10705):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {0xffff, 0xffff}, {0xfff0, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048845}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001900)=@deltfilter={0x34, 0x2d, 0x5, 0x70bd2a, 0x25dfdbf9, {0x0, 0x0, 0x0, r3, {0xfff3, 0x9}, {0xffff, 0xf}, {0x1, 0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40088c5}, 0x20008810)

1m48.090619739s ago: executing program 5 (id=10706):
syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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")
mknod$loop(&(0x7f0000000000)='./bus\x00', 0x0, 0x1)
symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x275a, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffc9)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000100)=ANY=[], 0xb, 0x0, &(0x7f0000000100))
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)

1m47.775439787s ago: executing program 5 (id=10707):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0xf, 0x0, 0x5, [{0x9, 0x3, 0x5}]}]}, {0x0, [0x0, 0x2e, 0x0, 0x61, 0x61]}}, 0x0, 0x37, 0x0, 0x0, 0x8}, 0x28)

1m47.44217658s ago: executing program 5 (id=10709):
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x2, 0x0, 0x1, 0x900, 0x0, 0xffffff80}})

1m47.394227655s ago: executing program 44 (id=10709):
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x2, 0x0, 0x1, 0x900, 0x0, 0xffffff80}})

34.788707466s ago: executing program 7 (id=11719):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x2f, 0x7, 0x1, {0x1, @sctp_ip4_spec={@local, @local, 0x4e24, 0x4e20, 0x4b}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, 0x4, 0xea, [0xfffff001, 0x1]}, @sctp_ip6_spec={@private0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4e21, 0x4e22, 0x1}, {0x0, @local, 0x6, 0x6, [0x65832882, 0x6]}, 0xfffffffffffffffc, 0xb}}})

34.78839114s ago: executing program 7 (id=11721):
syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000340)='./bus\x00', 0x80, &(0x7f00000002c0)=ANY=[], 0x1, 0xadd, &(0x7f0000000380)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, 0x0)

34.704235308s ago: executing program 7 (id=11722):
r0 = socket$unix(0x1, 0x1, 0x0)
unshare(0x2c020400)
connect$unix(r0, 0x0, 0x0)

34.703993552s ago: executing program 7 (id=11723):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./bus\x00', 0x810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatacow}, {@enospc_debug}, {@nossd}, {@nodatasum}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x9041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f000000f3c0)={0x2020}, 0x2020)

34.424842447s ago: executing program 7 (id=11729):
socket(0x11, 0xa, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x4)
socket(0x11, 0xa, 0x0)
write(r0, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)

34.168534098s ago: executing program 7 (id=11735):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x600, 0xc, 0xc, 0x2, [@typedef={0x4, 0x0, 0x0, 0x7}]}}, 0x0, 0x26}, 0x28)

34.118190331s ago: executing program 45 (id=11735):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x600, 0xc, 0xc, 0x2, [@typedef={0x4, 0x0, 0x0, 0x7}]}}, 0x0, 0x26}, 0x28)

2.149706951s ago: executing program 4 (id=12320):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getdents64(0xffffffffffffffff, 0x0, 0x0)

706.602709ms ago: executing program 2 (id=12335):
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x8, 0x0, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xfff}, {0xd, 0x24, 0xf, 0x1, 0xd, 0x101, 0x400, 0xe}, {0xffffff44, 0x24, 0x1a, 0x29e4, 0x12}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x2, 0xf4, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x2, 0x90, 0xc}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xdc, 0x9, 0x3}}}}}}}]}}, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x60, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbcb25fc00000000000000000000000000004000", @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40}, {0x1, 0x0, 0x9}, {0x0, 0x5}}}, 0xb8}}, 0x4000)

277.366243ms ago: executing program 1 (id=12341):
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x2c8, &(0x7f0000000700)="$eJzs3E+LG2UYAPBnmt00XZDsQSiK4IgXT2G34sFbF0mhGFCUIIoHF5uiZNZCAwvJodte9EsofgM9ehU9iBe/ggiyCl4sXkSEkfyZNN1Ok5iaXbC/32Hz8M77vO8zb3ZnZtnN+94zB91rN3rX7949jlotiY0kLsdfEdtxLipR+CYAgP+PP/M8fs/HzroWAOB0rHz/r6ytJABgzcrv/xsnu70+fjk6zdIAgDVZ6ff/P4rgwrrKAgDW6M2333l1r9VqvpGmtYiDTw7bh+3Ra3Frvx4fRhad2Il6/B0xeVTYnBzNr1xtNXfSoV+2o31wNMk/OmyP/0CwV+TvRj22p/mjp43h1ytXk+ZuOnZ//mZsTfJ/3IpOXIp6PFmW32peKs2vxgvPz8zfiPpmvB83Iotrw8Jn8m/tpukrr7XS2IiZ/POjfiPljzn+XwIAAAAAAAAAAAAAAAAAAAAAgJU10qnS/XsajYcdH+fvle8PlOd51Ir9dXZK9+fZiKcf2GYYAAAAAAAAAAAAAAAAAAAAHk+9/qC7n2Wdm/OCj77/4tuI+X36xz/cfmvBOP1BN5nMu3jShwW15WpeGDzx3M+flh3aGgV3ksXrkyyYojIZ418W9vWzJ1rerZSPc262Jbm9xBS1yeovLqMybalG2ezfHX/w1Iu9iy89mF7MMWqZBiemOP9I72A1yg5tzvvW+q0eUTrgnRXKSIfLMW35chgUZ/0o53Vh6XdnJijOeubna7bPvdW4+Nnl/a9u/fTrsiPfd5nI/+PLDgAAAAAAAAAAAAAAAAAAUGL0MfKlfPzyumsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLPS6w+6+1nWqUZ/8HlkWedm0TIvSCJiUZ97wVmfIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/BMAAP//vNB1tA==")
syz_emit_ethernet(0x4e, &(0x7f00000007c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@multicast2}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @ssrr={0x89, 0x3, 0xce}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)

214.692945ms ago: executing program 1 (id=12342):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000180)="0b03feff4f12021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14)

214.319093ms ago: executing program 1 (id=12343):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x2000002, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0xfe, 0xc2d, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir")
sync()
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000))

139.776526ms ago: executing program 2 (id=12344):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x10, 0x701, 0x0, 0xffffffff, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x14\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r0}]}, 0x24}}, 0x20008080)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0)

139.618563ms ago: executing program 2 (id=12345):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000000)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@note=0x5a})

139.517281ms ago: executing program 1 (id=12346):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000005fc0), &(0x7f0000006000)=0xc)

139.367475ms ago: executing program 2 (id=12347):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x0, 0x1000, {0xa, 0x0, 0x0, r1, 0x0, 0x5e}, [@NDA_DST_IPV6={0x14, 0x1, @private2}]}, 0x30}}, 0x4000040)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0xfffffffffffffc73, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x24040854}, 0x0)

76.562561ms ago: executing program 4 (id=12348):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond0\x00'})

76.331355ms ago: executing program 2 (id=12349):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x20000000007)

76.233431ms ago: executing program 1 (id=12350):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$eJzsmD9P6lAYxp/TciH35iY6u2giCTBY2qJGBgdmB038FzeJVIIWMdBB2PwUzn4CZ+JC4sfQQZ1ccHNyqGl7gAP+HdTE+PyG9zzv6dvTc94mT5OCEPJrub15uD5LJS90AP+RRELO3+mDGk2pb489Zi4ry+cn5v1Vu7OUH11PAPD9jz8/BqBT0OHJ3PeH707KcQ1aX69DQ0bqTQgYUm9Dw4bUDgS2pN5TdC2oN4zdiusYOzW3FAgzCFYQ7CDkRvfXPRYoKfsTyvVGs7VfdF2n/oXivf51CxoWlf2p76vXG1PpnwUNltQ5CKxKvYBErzdRS5TzT8QG6+vffH4KCoqfJgb+5J8KpBR/iin+kfWqh9lGszVTqRbLTtk5sO3cvDlrmnN2NjSiKL7hf39Df/qnrP/nldq4iOOo6Hl1K4r93I7iS44bD/1PQ3o6yoWcUwm/B+NiKhjSuswJIYQQQgghhBBCCCHk05mECP+CDpF/NmWvhNVPAQAA//94vnZt")
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0)

76.072197ms ago: executing program 4 (id=12351):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001700)={0x20, 0x140b, 0x1, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x2010)

75.890175ms ago: executing program 2 (id=12352):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000400)={0x20, 0x3, 0x5, "f5a25fba67"}, 0x0, 0x0})

1.309245ms ago: executing program 4 (id=12353):
syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='shortad,partition=00000000000000000005,noadinicb,uid=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00\x00\x00=', @ANYRESDEC=0x0, @ANYBLOB="2c6e6f7374726963745f10"], 0x1, 0x489, &(0x7f0000000580)="$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")
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00')

805.946µs ago: executing program 1 (id=12354):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x2, &(0x7f0000000200)=<r1=>0x0)
r2 = eventfd2(0x0, 0x0)
io_getevents(r1, 0x4, 0x4, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x0)
io_submit(r1, 0x1, &(0x7f00000009c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x4000, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r2}])

729.667µs ago: executing program 4 (id=12355):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x2d, &(0x7f0000000000)=0xffffb1e0, 0x4)

0s ago: executing program 4 (id=12356):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'hsr0\x00', <r1=>0x0})
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote, r1}, 0x14)

kernel console output (not intermixed with test programs):

038-01-19 (0x7fffffff)
[  789.796373][ T1450] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 1: comm syz.1.11162: lblock 1 mapped to illegal pblock 1 (length 15)
[  789.802922][ T1450] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117
[  789.808611][ T1450] EXT4-fs (loop1): This should not happen!! Data will be lost
[  789.808611][ T1450] 
[  789.990134][ T1461] loop7: detected capacity change from 0 to 32768
[  789.993907][ T1461] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.11166 (1461)
[  790.001469][ T1461] BTRFS info (device loop7): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  790.005790][ T1461] BTRFS info (device loop7): using xxhash64 (xxhash64-generic) checksum algorithm
[  790.033389][ T1461] BTRFS info (device loop7): enabling ssd optimizations
[  790.036314][ T1461] BTRFS info (device loop7): enabling free space tree
[  790.038924][ T5890] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  790.042022][ T5890] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71
[  790.044665][ T5890] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  790.047732][ T1461] BTRFS info (device loop7): balance: start -susage=34359738372,drange=7..526332,limit=42949673007,stripes=4294967295..4
[  790.047834][ T1461] BTRFS info (device loop7): balance: ended with status: 0
[  790.052541][ T5890] f81534 5-1:0.12: probe with driver f81534 failed with error -71
[  790.054633][ T5890] usb 5-1: USB disconnect, device number 68
[  790.071442][T32742] BTRFS info (device loop7): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  790.124403][ T1478] netlink: 'syz.7.11167': attribute type 10 has an invalid length.
[  790.128215][ T1478] netlink: 40 bytes leftover after parsing attributes in process `syz.7.11167'.
[  790.131468][ T1478] vcan0: entered promiscuous mode
[  790.133681][ T1478] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check.
[  790.379240][ T1490] loop7: detected capacity change from 0 to 32768
[  790.383717][ T1490] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.11173 (1490)
[  790.390648][ T1490] BTRFS info (device loop7): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  790.395017][ T1490] BTRFS info (device loop7): using xxhash64 (xxhash64-generic) checksum algorithm
[  790.398751][ T1490] BTRFS warning (device loop7): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  790.415784][ T1490] BTRFS info (device loop7): rebuilding free space tree
[  790.421128][ T1490] BTRFS info (device loop7): disabling free space tree
[  790.424522][ T1490] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  790.428490][ T1490] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  790.434156][ T1490] BTRFS info (device loop7): setting nodatasum
[  790.436662][ T1490] BTRFS info (device loop7): allowing degraded mounts
[  790.439242][ T1490] BTRFS info (device loop7): enabling disk space caching
[  790.441912][ T1490] BTRFS info (device loop7): force clearing of disk cache
[  790.444379][ T1490] BTRFS info (device loop7): force zlib compression, level 3
[  790.456650][ T1490] BTRFS info (device loop7): balance: start 
[  790.459674][ T1490] BTRFS info (device loop7): balance: ended with status: 0
[  790.475370][T32742] BTRFS info (device loop7): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  790.609364][ T1513] tunl0: entered promiscuous mode
[  790.623704][ T1513] netlink: 'syz.4.11177': attribute type 4 has an invalid length.
[  790.626930][ T1513] netlink: 9 bytes leftover after parsing attributes in process `syz.4.11177'.
[  790.634208][T21251] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  790.861562][ T1539] loop7: detected capacity change from 0 to 1024
[  790.877474][ T1539] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  790.940994][T32742] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  790.961478][ T1544] loop7: detected capacity change from 0 to 128
[  790.964228][ T1544] zonefs: Bad value for 'errors'
[  790.992915][T32661] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[  790.997013][ T5890] usb 5-1: new high-speed USB device number 69 using dummy_hcd
[  791.097609][ T1546] loop7: detected capacity change from 0 to 40427
[  791.100741][ T1546] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  791.103773][ T1546] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  791.107634][ T1546] F2FS-fs (loop7): invalid crc value
[  791.128743][ T1546] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  791.134063][ T1546] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  791.136736][ T1546] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  791.141819][ T1546] fscrypt (loop7, inode 3): Error -61 getting encryption context
[  791.152903][ T5890] usb 5-1: Using ep0 maxpacket: 8
[  791.157700][ T5890] usb 5-1: config 127 has an invalid interface number: 171 but max is 1
[  791.161143][ T5890] usb 5-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config
[  791.168936][ T5890] usb 5-1: config 127 has no interface number 1
[  791.171667][ T5890] usb 5-1: config 127 interface 171 has no altsetting 0
[  791.174637][T32661] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  791.181344][T32661] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  791.184311][T32661] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  791.188115][T32661] usb 2-1: Product: syz
[  791.189772][T32661] usb 2-1: Manufacturer: syz
[  791.191620][ T5890] usb 5-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9
[  791.195201][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  791.198780][T32661] usb 2-1: SerialNumber: syz
[  791.202080][ T5890] usb 5-1: Product: syz
[  791.204445][ T5890] usb 5-1: Manufacturer: syz
[  791.207469][ T5890] usb 5-1: SerialNumber: syz
[  791.432946][ T5890] xr_serial 5-1:127.171: xr_serial converter detected
[  791.436589][ T5890] xr_serial ttyUSB0: Failed to set reg 0x1a: -71
[  791.439365][ T5890] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  791.445937][ T5890] usb 5-1: USB disconnect, device number 69
[  791.449356][ T5890] xr_serial 5-1:127.171: device disconnected
[  791.457593][ T1556] loop7: detected capacity change from 0 to 32768
[  791.465708][ T1556] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  791.479276][ T1556] XFS (loop7): Ending clean mount
[  791.487635][   T33] audit: type=1800 audit(2000525098.963:897): pid=1556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.11194" name="file1" dev="loop7" ino=9286 res=0 errno=0
[  791.509384][T32742] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  791.734418][T12544] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0
[  791.738307][T12544] hid-generic 0000:0000:0000.0026: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  791.743199][ T1575] loop7: detected capacity change from 0 to 1024
[  791.881129][ T1577] loop7: detected capacity change from 0 to 32768
[  791.884309][ T1577] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.11200 (1577)
[  791.891370][ T1577] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  791.894986][ T1577] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm
[  791.974172][ T1577] BTRFS info (device loop7): enabling ssd optimizations
[  791.977767][ T1577] BTRFS info (device loop7): enabling free space tree
[  792.038199][T32742] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  792.091855][T32661] cdc_ncm 2-1:1.0: SET_CRC_MODE failed
[  792.096891][T32661] cdc_ncm 2-1:1.0: SET_NTB_FORMAT failed
[  792.121504][T32661] cdc_ncm 2-1:1.0: bind() failure
[  792.125207][T32661] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  792.135433][T32661] cdc_ncm 2-1:1.1: bind() failure
[  792.140466][T32661] usb 2-1: USB disconnect, device number 81
[  792.253338][ T1615] loop7: detected capacity change from 0 to 8
[  792.265076][ T1615] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  792.286664][ T1615] wlan0 speed is unknown, defaulting to 1000
[  792.290018][ T1615] lo speed is unknown, defaulting to 1000
[  792.293155][ T1615] lo speed is unknown, defaulting to 1000
[  792.297642][   T33] audit: type=1800 audit(2000525099.692:898): pid=1615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.11210" name="file1" dev="loop7" ino=5 res=0 errno=0
[  792.446503][ T5890] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[  792.607065][ T5890] usb 5-1: Using ep0 maxpacket: 8
[  792.612860][ T5890] usb 5-1: config 0 has no interfaces?
[  792.617433][ T5890] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  792.621195][ T5890] usb 5-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3
[  792.624659][ T5890] usb 5-1: Product: syz
[  792.626483][ T5890] usb 5-1: Manufacturer: syz
[  792.629639][ T5890] usb 5-1: SerialNumber: syz
[  792.632985][ T5890] usb 5-1: config 0 descriptor??
[  792.918792][T32661] usb 5-1: USB disconnect, device number 70
[  792.970266][ T5890] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[  793.222491][ T5890] usb 2-1: Using ep0 maxpacket: 16
[  793.226420][ T5890] usb 2-1: config 7 has an invalid interface number: 247 but max is 0
[  793.230855][ T5890] usb 2-1: config 7 has no interface number 0
[  793.233538][ T5890] usb 2-1: config 7 interface 247 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  793.238284][ T5890] usb 2-1: config 7 interface 247 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  793.252776][ T5890] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=6c.22
[  793.256494][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=74, SerialNumber=147
[  793.260109][ T5890] usb 2-1: Product: syz
[  793.261861][ T5890] usb 2-1: Manufacturer: syz
[  793.263756][ T5890] usb 2-1: SerialNumber: syz
[  793.270822][ T5890] ni6501 2-1:7.247: driver 'ni6501' failed to auto-configure device.
[  793.305514][ T1625] loop7: detected capacity change from 0 to 128
[  793.308535][ T1625] EXT4-fs: Ignoring removed nobh option
[  793.315955][ T1625] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c118, mo2=0002]
[  793.319052][ T1625] System zones: 1-3, 19-19, 35-36
[  793.323664][ T1625] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  793.328359][ T1625] ext4 filesystem being mounted at /177/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  793.594511][T12544] usb 2-1: USB disconnect, device number 82
[  794.369593][ T1643] loop1: detected capacity change from 0 to 1024
[  794.373392][ T1643] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  794.380869][ T1643] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  leaving read-only.
[  794.409516][ T1645] vxfs: WRONG superblock magic 00000000 at 1
[  794.412075][ T1645] vxfs: WRONG superblock magic 00000000 at 8
[  794.415063][ T1645] vxfs: can't find superblock.
[  794.440238][ T1647] netlink: 'syz.1.11224': attribute type 2 has an invalid length.
[  794.443520][ T1647] netlink: 1184 bytes leftover after parsing attributes in process `syz.1.11224'.
[  794.532765][ T1650] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  794.537208][ T1650] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  794.602022][ T1650] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  794.606645][ T1650] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  794.657795][ T1650] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  794.661521][ T1650] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  794.717643][ T1650] team0: Failed to send options change via netlink (err -105)
[  794.720467][ T1650] team0: Failed to send port change of device netdevsim0 via netlink (err -105)
[  794.724390][ T1650] team0: Port device netdevsim0 removed
[  794.727304][ T1650] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  794.731205][ T1650] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  794.769515][T32742] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  794.799884][T32518] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  794.803396][T32518] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  794.814921][T32518] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  794.818910][T32518] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  794.827074][T32518] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  794.830772][T32518] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  794.839623][T32518] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  794.843418][T32518] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  794.932822][ T1661] loop7: detected capacity change from 0 to 1024
[  794.958350][ T1663] netlink: 44 bytes leftover after parsing attributes in process `syz.7.11231'.
[  794.962135][ T1663] netlink: 28 bytes leftover after parsing attributes in process `syz.7.11231'.
[  794.999819][ T1671] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11235'.
[  795.003853][ T1671] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11235'.
[  795.383746][ T1691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11244'.
[  795.406018][ T1691] macvtap1: entered promiscuous mode
[  795.411787][ T1691] macvtap1: entered allmulticast mode
[  795.414242][ T1691] vlan0: entered allmulticast mode
[  795.441843][ T1694] loop1: detected capacity change from 0 to 64
[  795.445467][ T1694] MINIX-fs: mounting file system with errors, running fsck is recommended
[  796.309730][ T1729] syzkaller1: entered promiscuous mode
[  796.311669][ T1729] syzkaller1: entered allmulticast mode
[  796.634218][ T1757] loop1: detected capacity change from 0 to 512
[  796.639132][ T1757] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  796.645278][ T1757] EXT4-fs (loop1): 1 truncate cleaned up
[  796.648380][ T1757] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  796.668822][T21251] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  796.738871][ T1768] loop1: detected capacity change from 0 to 512
[  796.742172][ T1768] vfat: Unknown parameter 'UVvS+ &;Sw//S 0xRCk̕.'
[  797.807606][ T1786] loop1: detected capacity change from 0 to 2048
[  798.313921][ T1807] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11297'.
[  798.317464][ T1807] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  798.836220][ T1818] loop1: detected capacity change from 0 to 32768
[  798.842896][ T1818] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[  798.859651][T21251] ocfs2: Unmounting device (7,1) on (node local)
[  798.927491][ T1822] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11303'.
[  799.256526][ T1837] loop1: detected capacity change from 0 to 32768
[  799.259231][ T1837] bcachefs: bch2_fs_parse_param() Error parsing option move_bytes_in_flight: option_value
[  799.348767][ T1845] netlink: 'syz.4.11314': attribute type 20 has an invalid length.
[  799.439081][ T1841] loop1: detected capacity change from 0 to 32768
[  799.480071][ T1861] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  799.486447][ T5890] lo speed is unknown, defaulting to 1000
[  799.502655][ T1841] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,str_hash=crc32c,noacl,usrquota,grpquota,nojournal_transaction_names,allocator_stuck_timeout=256
[  799.502696][ T1841]   allowing incompatible features above 0.0: (unknown version)
[  799.502702][ T1841]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  799.515068][ T1866] netlink: 124 bytes leftover after parsing attributes in process `syz.4.11321'.
[  799.529963][ T1868] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11322'.
[  799.541368][ T1841] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  799.544508][ T1841] bcachefs (loop1): initializing new filesystem
[  799.552964][ T1841] bcachefs (loop1): going read-write
[  799.556744][ T1841] bcachefs (loop1): marking superblocks
[  799.563753][ T1875] Bluetooth: hci0: unsupported parameter 542
[  799.567521][ T1875] Bluetooth: hci0: unsupported parameter 32768
[  799.569578][ T1875] Bluetooth: hci0: unsupported parameter 542
[  799.570708][ T1841] bcachefs (loop1): initializing freespace
[  799.571973][ T1875] Bluetooth: hci0: unsupported parameter 32768
[  799.580555][ T1841] bcachefs (loop1): done initializing freespace
[  799.586174][ T1841] bcachefs (loop1): reading snapshots table
[  799.589731][ T1841] bcachefs (loop1): reading snapshots done
[  799.605123][ T1841] bcachefs (loop1): done starting filesystem
[  799.629837][T21251] bcachefs (loop1): shutting down
[  799.633124][T21251] bcachefs (loop1): going read-only
[  799.635213][T21251] bcachefs (loop1): finished waiting for writes to stop
[  799.638709][T21251] bcachefs (loop1): flushing journal and stopping allocators, journal seq 2
[  799.657275][T21251] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3
[  799.661821][T21251] bcachefs (loop1): clean shutdown complete, journal seq 4
[  799.665162][T21251] bcachefs (loop1): marking filesystem clean
[  799.674254][T21251] bcachefs (loop1): shutdown complete
[  800.219215][ T1898] loop7: detected capacity change from 0 to 40427
[  800.222570][ T1898] F2FS-fs (loop7): build fault injection rate: 771
[  800.225870][ T1898] F2FS-fs (loop7): invalid crc value
[  800.242841][ T1898] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  800.246932][ T1898] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  800.267009][T32742] syz-executor: attempt to access beyond end of device
[  800.267009][T32742] loop7: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  800.273555][T32742] CPU: 0 UID: 0 PID: 32742 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  800.273570][T32742] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  800.273575][T32742] Call Trace:
[  800.273579][T32742]  <TASK>
[  800.273583][T32742]  dump_stack_lvl+0x189/0x250
[  800.273617][T32742]  ? __pfx_dump_stack_lvl+0x10/0x10
[  800.273626][T32742]  ? __pfx_queue_work_on+0x10/0x10
[  800.273635][T32742]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  800.273646][T32742]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  800.273683][T32742]  f2fs_handle_critical_error+0x37c/0x540
[  800.273702][T32742]  f2fs_write_end_io+0x886/0xb60
[  800.273716][T32742]  __submit_merged_bio+0x27a/0x6a0
[  800.273732][T32742]  __submit_merged_write_cond+0x255/0x530
[  800.273743][T32742]  f2fs_write_data_pages+0x261d/0x3000
[  800.273760][T32742]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  800.273772][T32742]  ? arch_stack_walk+0xfc/0x150
[  800.273787][T32742]  ? __mod_zone_page_state+0xd7/0x140
[  800.273799][T32742]  ? folios_put_refs+0x560/0x640
[  800.273809][T32742]  ? __pfx_folios_put_refs+0x10/0x10
[  800.273817][T32742]  ? rcu_is_watching+0x15/0xb0
[  800.273824][T32742]  ? lru_add+0xa2f/0xd80
[  800.273832][T32742]  ? lru_add+0x198/0xd80
[  800.273839][T32742]  ? do_raw_spin_lock+0x121/0x290
[  800.273851][T32742]  ? do_raw_spin_unlock+0x4d/0x240
[  800.273859][T32742]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  800.273869][T32742]  do_writepages+0x32e/0x550
[  800.273879][T32742]  ? rcu_is_watching+0x15/0xb0
[  800.273894][T32742]  ? do_raw_spin_unlock+0x4d/0x240
[  800.273903][T32742]  filemap_fdatawrite+0x199/0x240
[  800.273915][T32742]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  800.273931][T32742]  ? rcu_is_watching+0x15/0xb0
[  800.273938][T32742]  ? do_raw_spin_unlock+0x4d/0x240
[  800.273947][T32742]  f2fs_sync_dirty_inodes+0x31f/0x830
[  800.273957][T32742]  f2fs_write_checkpoint+0x95a/0x1df0
[  800.273968][T32742]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  800.273983][T32742]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  800.273991][T32742]  ? kfree+0x18e/0x440
[  800.274000][T32742]  ? kill_f2fs_super+0x298/0x6c0
[  800.274009][T32742]  kill_f2fs_super+0x2c3/0x6c0
[  800.274017][T32742]  ? __pfx_kill_f2fs_super+0x10/0x10
[  800.274023][T32742]  ? radix_tree_delete_item+0x2b6/0x400
[  800.274040][T32742]  ? shrinker_free+0x2ce/0x3e0
[  800.274052][T32742]  deactivate_locked_super+0xbc/0x130
[  800.274065][T32742]  cleanup_mnt+0x425/0x4c0
[  800.274079][T32742]  task_work_run+0x1d4/0x260
[  800.274094][T32742]  ? __pfx_task_work_run+0x10/0x10
[  800.274107][T32742]  ? __x64_sys_umount+0x122/0x160
[  800.274120][T32742]  ? __pfx___x64_sys_umount+0x10/0x10
[  800.274137][T32742]  ? rcu_is_watching+0x15/0xb0
[  800.274149][T32742]  exit_to_user_mode_loop+0xec/0x110
[  800.274165][T32742]  do_syscall_64+0x2bd/0x3b0
[  800.274183][T32742]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  800.274216][T32742]  ? exc_page_fault+0x9f/0xf0
[  800.274231][T32742]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  800.274242][T32742] RIP: 0033:0x7fd429b8ff17
[  800.274254][T32742] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  800.274264][T32742] RSP: 002b:00007ffd0881f428 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  800.274278][T32742] RAX: 0000000000000000 RBX: 00007fd429c11c05 RCX: 00007fd429b8ff17
[  800.274285][T32742] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd0881f4e0
[  800.274293][T32742] RBP: 00007ffd0881f4e0 R08: 0000000000000000 R09: 0000000000000000
[  800.274302][T32742] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd08820570
[  800.274311][T32742] R13: 00007fd429c11c05 R14: 00000000000bc9e0 R15: 00007ffd088205b0
[  800.274325][T32742]  </TASK>
[  800.274882][T32742] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  800.406972][T32742] CPU: 0 UID: 0 PID: 32742 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  800.406986][T32742] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  800.406992][T32742] Call Trace:
[  800.406995][T32742]  <TASK>
[  800.406998][T32742]  dump_stack_lvl+0x189/0x250
[  800.407014][T32742]  ? __pfx_dump_stack_lvl+0x10/0x10
[  800.407023][T32742]  ? __pfx_queue_work_on+0x10/0x10
[  800.407032][T32742]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  800.407044][T32742]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  800.407054][T32742]  f2fs_handle_critical_error+0x37c/0x540
[  800.407067][T32742]  f2fs_write_end_io+0x886/0xb60
[  800.407094][T32742]  __submit_merged_bio+0x27a/0x6a0
[  800.407107][T32742]  __submit_merged_write_cond+0x255/0x530
[  800.407117][T32742]  f2fs_write_data_pages+0x261d/0x3000
[  800.407135][T32742]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  800.407149][T32742]  ? arch_stack_walk+0xfc/0x150
[  800.407164][T32742]  ? __mod_zone_page_state+0xd7/0x140
[  800.407177][T32742]  ? folios_put_refs+0x560/0x640
[  800.407188][T32742]  ? __pfx_folios_put_refs+0x10/0x10
[  800.407195][T32742]  ? rcu_is_watching+0x15/0xb0
[  800.407203][T32742]  ? lru_add+0xa2f/0xd80
[  800.407210][T32742]  ? lru_add+0x198/0xd80
[  800.407217][T32742]  ? do_raw_spin_lock+0x121/0x290
[  800.407229][T32742]  ? do_raw_spin_unlock+0x4d/0x240
[  800.407237][T32742]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  800.407248][T32742]  do_writepages+0x32e/0x550
[  800.407258][T32742]  ? rcu_is_watching+0x15/0xb0
[  800.407265][T32742]  ? do_raw_spin_unlock+0x4d/0x240
[  800.407274][T32742]  filemap_fdatawrite+0x199/0x240
[  800.407285][T32742]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  800.407303][T32742]  ? rcu_is_watching+0x15/0xb0
[  800.407315][T32742]  ? do_raw_spin_unlock+0x4d/0x240
[  800.407329][T32742]  f2fs_sync_dirty_inodes+0x31f/0x830
[  800.407343][T32742]  f2fs_write_checkpoint+0x95a/0x1df0
[  800.407362][T32742]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  800.407388][T32742]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  800.407401][T32742]  ? kfree+0x18e/0x440
[  800.407417][T32742]  ? kill_f2fs_super+0x298/0x6c0
[  800.407430][T32742]  kill_f2fs_super+0x2c3/0x6c0
[  800.407443][T32742]  ? __pfx_kill_f2fs_super+0x10/0x10
[  800.407455][T32742]  ? radix_tree_delete_item+0x2b6/0x400
[  800.407473][T32742]  ? shrinker_free+0x2ce/0x3e0
[  800.407488][T32742]  deactivate_locked_super+0xbc/0x130
[  800.407503][T32742]  cleanup_mnt+0x425/0x4c0
[  800.407515][T32742]  task_work_run+0x1d4/0x260
[  800.407526][T32742]  ? __pfx_task_work_run+0x10/0x10
[  800.407535][T32742]  ? __x64_sys_umount+0x122/0x160
[  800.407545][T32742]  ? __pfx___x64_sys_umount+0x10/0x10
[  800.407554][T32742]  ? rcu_is_watching+0x15/0xb0
[  800.407562][T32742]  exit_to_user_mode_loop+0xec/0x110
[  800.407574][T32742]  do_syscall_64+0x2bd/0x3b0
[  800.407586][T32742]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  800.407593][T32742]  ? exc_page_fault+0x9f/0xf0
[  800.407602][T32742]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  800.407609][T32742] RIP: 0033:0x7fd429b8ff17
[  800.407618][T32742] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  800.407625][T32742] RSP: 002b:00007ffd0881f428 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  800.407634][T32742] RAX: 0000000000000000 RBX: 00007fd429c11c05 RCX: 00007fd429b8ff17
[  800.407639][T32742] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd0881f4e0
[  800.407644][T32742] RBP: 00007ffd0881f4e0 R08: 0000000000000000 R09: 0000000000000000
[  800.407649][T32742] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd08820570
[  800.407680][T32742] R13: 00007fd429c11c05 R14: 00000000000bc9e0 R15: 00007ffd088205b0
[  800.407693][T32742]  </TASK>
[  800.408122][T32742] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  801.194066][ T1922] libceph: resolve 'R' (ret=-3): failed
[  801.501280][T32661] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[  801.509408][ T1931] netlink: 104 bytes leftover after parsing attributes in process `syz.4.11347'.
[  801.536359][ T1933] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  801.671487][T32661] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  801.679507][T32661] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  801.686769][T32661] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  801.689921][T32661] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  801.693294][T32661] usb 2-1: Product: syz
[  801.699329][T32661] usb 2-1: Manufacturer: syz
[  801.701552][T32661] usb 2-1: SerialNumber: syz
[  801.703926][ T1945] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.11354'.
[  801.705724][T32661] usb 2-1: config 0 descriptor??
[  801.710593][ T1929] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  801.713712][ T1929] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  801.935777][ T1929] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  801.938191][ T1929] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  801.992329][ T1948] loop7: detected capacity change from 0 to 32768
[  801.996224][ T1948] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.11355 (1948)
[  802.003284][ T1948] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  802.007737][ T1948] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm
[  802.030627][ T1948] BTRFS info (device loop7): rebuilding free space tree
[  802.036329][ T1948] BTRFS info (device loop7): enabling ssd optimizations
[  802.038829][ T1948] BTRFS info (device loop7): enabling free space tree
[  802.041223][ T1948] BTRFS info (device loop7): force clearing of disk cache
[  802.044171][ T1948] BTRFS info (device loop7): enabling auto defrag
[  802.046536][ T1948] BTRFS info (device loop7): max_inline set to 0
[  802.083008][T32742] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  802.803259][T32661] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71
[  802.811360][T32661] dm9601 2-1:0.0 eth13: register 'dm9601' at usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet, 6e:f1:98:9e:dd:08
[  802.821022][T32661] usb 2-1: USB disconnect, device number 83
[  802.824687][T32661] dm9601 2-1:0.0 eth13: unregister 'dm9601' usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet
[  803.457156][ T2016] loop1: detected capacity change from 0 to 32768
[  803.465233][ T2016] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  803.481524][ T2016] XFS (loop1): Ending clean mount
[  803.483809][ T2016] XFS (loop1): Quotacheck needed: Please wait.
[  803.488613][ T2016] XFS (loop1): Quotacheck: Done.
[  803.504214][T21251] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  803.568578][ T2026] netlink: 176 bytes leftover after parsing attributes in process `syz.1.11381'.
[  803.851179][ T2047] loop1: detected capacity change from 0 to 32768
[  803.857995][ T2047] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  803.862553][ T2047] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  803.869375][ T2047] __find_get_block_slow() failed. block=504403158265495552, b_blocknr=0, b_state=0x00000019, b_size=512, device loop1 blocksize: 512
[  803.874079][ T2047] grow_buffers: requested out-of-range block 504403158265495552 for device loop1
[  803.877488][ T2047] (syz.1.11390,2047,1):ocfs2_read_blocks:239 ERROR: status = -12
[  803.880210][ T2047] (syz.1.11390,2047,1):ocfs2_search_chain:1852 ERROR: status = -12
[  803.882890][ T2047] (syz.1.11390,2047,1):ocfs2_search_chain:1940 ERROR: status = -12
[  803.886030][ T2047] (syz.1.11390,2047,1):ocfs2_claim_suballoc_bits:2010 ERROR: status = -12
[  803.889410][ T2047] (syz.1.11390,2047,1):ocfs2_claim_suballoc_bits:2063 ERROR: status = -12
[  803.892431][ T2047] (syz.1.11390,2047,1):__ocfs2_claim_clusters:2438 ERROR: status = -12
[  803.895537][ T2047] (syz.1.11390,2047,1):__ocfs2_claim_clusters:2446 ERROR: status = -12
[  803.898518][ T2047] (syz.1.11390,2047,1):ocfs2_local_alloc_new_window:1199 ERROR: status = -12
[  803.901550][ T2047] (syz.1.11390,2047,1):ocfs2_local_alloc_new_window:1224 ERROR: status = -12
[  803.904850][ T2047] (syz.1.11390,2047,1):ocfs2_local_alloc_slide_window:1298 ERROR: status = -12
[  803.907913][ T2047] (syz.1.11390,2047,1):ocfs2_local_alloc_slide_window:1317 ERROR: status = -12
[  803.910834][ T2047] (syz.1.11390,2047,1):ocfs2_reserve_local_alloc_bits:672 ERROR: status = -12
[  803.913739][ T2047] (syz.1.11390,2047,1):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -12
[  803.916960][ T2047] (syz.1.11390,2047,1):ocfs2_reserve_clusters_with_limit:1172 ERROR: status = -12
[  803.920089][ T2047] (syz.1.11390,2047,1):ocfs2_reserve_clusters_with_limit:1221 ERROR: status = -12
[  803.923064][ T2047] (syz.1.11390,2047,1):ocfs2_mknod:360 ERROR: status = -12
[  803.925677][ T2047] (syz.1.11390,2047,1):ocfs2_mknod:505 ERROR: status = -12
[  803.928365][ T2047] (syz.1.11390,2047,1):ocfs2_mkdir:661 ERROR: status = -12
[  803.942197][T21251] ocfs2: Unmounting device (7,1) on (node local)
[  804.074706][ T2051] loop1: detected capacity change from 0 to 32768
[  804.077754][ T2051] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.11391 (2051)
[  804.083425][ T2051] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  804.086954][ T2051] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  804.091253][ T2051] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  804.145121][ T2051] BTRFS info (device loop1): rebuilding free space tree
[  804.151664][ T2051] BTRFS info (device loop1): disabling free space tree
[  804.155025][ T2051] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  804.158703][ T2051] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  804.164480][ T2051] BTRFS info (device loop1): setting nodatasum
[  804.167022][ T2051] BTRFS info (device loop1): setting nodatacow
[  804.169557][ T2051] BTRFS info (device loop1): enabling ssd optimizations
[  804.172022][ T2051] BTRFS info (device loop1): turning off barriers
[  804.175090][ T2051] BTRFS info (device loop1): turning on flush-on-commit
[  804.177759][ T2051] BTRFS info (device loop1): enabling disk space caching
[  804.180379][ T2051] BTRFS info (device loop1): force clearing of disk cache
[  804.183267][ T2051] BTRFS info (device loop1): doing ref verification
[  804.186211][ T2051] BTRFS info (device loop1): max_inline set to 4096
[  804.203828][T21251] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  804.336163][ T2082] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  804.449241][ T2091] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  804.527112][T32661] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[  804.701849][T32661] usb 5-1: unable to get BOS descriptor or descriptor too short
[  804.706647][T32661] usb 5-1: config 4 has an invalid interface number: 180 but max is 0
[  804.709911][T32661] usb 5-1: config 4 has no interface number 0
[  804.712366][T32661] usb 5-1: config 4 interface 180 has no altsetting 0
[  804.717469][T32661] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice=eb.29
[  804.721384][T32661] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  804.724222][T32661] usb 5-1: Product: syz
[  804.725682][T32661] usb 5-1: Manufacturer: syz
[  804.727327][T32661] usb 5-1: SerialNumber: syz
[  804.964497][T32661] qmi_wwan 5-1:4.180: probe with driver qmi_wwan failed with error -22
[  804.980814][T32661] usb 5-1: USB disconnect, device number 71
[  805.572413][ T2104] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11408'.
[  805.737008][ T2108] loop7: detected capacity change from 0 to 32768
[  805.740079][ T2108] bcachefs: bch2_fs_parse_param() Error parsing option move_bytes_in_flight: option_value
[  805.829182][ T2112] loop7: detected capacity change from 0 to 256
[  805.836705][ T2112] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d)
[  805.847813][ T2112] exFAT-fs (loop7): valid_size(150994954) is greater than size(10)
[  805.866172][ T2118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11415'.
[  805.886256][ T2120] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11416'.
[  805.930396][ T2128] loop7: detected capacity change from 0 to 512
[  805.943475][ T2128] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  805.950366][ T2128] ext4 filesystem being mounted at /226/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  806.020044][ T2135] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  806.403922][ T2144] loop1: detected capacity change from 0 to 512
[  806.415291][ T2144] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.11425: Invalid inode bitmap blk 4 in block_group 0
[  806.425102][ T2144] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  806.458492][ T2144] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  806.487020][T21251] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  806.572816][ T2147] openvswitch: netlink: IPv4 frag type 32 is out of range max 2
[  806.847570][   T33] audit: type=1804 audit(2000525119.335:899): pid=2153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.11429" name="/newroot/1631/file0" dev="tmpfs" ino=8537 res=1 errno=0
[  806.955290][T32742] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  807.078160][ T2160] netlink: 'syz.7.11432': attribute type 2 has an invalid length.
[  807.086176][ T2160] : entered promiscuous mode
[  807.302562][ T2164] io-wq is not configured for unbound workers
[  807.560194][ T2171] netlink: 34 bytes leftover after parsing attributes in process `syz.7.11433'.
[  807.570329][ T2171] loop7: detected capacity change from 0 to 512
[  807.575065][ T2171] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  807.586241][ T2171] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  807.591453][ T2171] ext4 filesystem being mounted at /229/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  808.179559][T32742] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  809.530055][T26562] usb 5-1: new high-speed USB device number 72 using dummy_hcd
[  809.650637][   T33] audit: type=1326 audit(2000525121.954:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2224 comm="syz.1.11460" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4170b8ebe9 code=0x7ffc0000
[  809.659856][   T33] audit: type=1326 audit(2000525121.954:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2224 comm="syz.1.11460" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4170b8ebe9 code=0x7ffc0000
[  809.660263][ T2225] loop1: detected capacity change from 0 to 512
[  809.668284][   T33] audit: type=1326 audit(2000525121.954:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2224 comm="syz.1.11460" exe="/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4170b8ebe9 code=0x7ffc0000
[  809.673341][ T2225] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  809.681293][   T33] audit: type=1326 audit(2000525121.954:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2224 comm="syz.1.11460" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4170b8ec23 code=0x7ffc0000
[  809.692740][   T33] audit: type=1326 audit(2000525121.954:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2224 comm="syz.1.11460" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4170b8d69f code=0x7ffc0000
[  809.702055][T26562] usb 5-1: Using ep0 maxpacket: 8
[  809.702606][   T33] audit: type=1326 audit(2000525121.954:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2224 comm="syz.1.11460" exe="/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f4170b8ec77 code=0x7ffc0000
[  809.712956][   T33] audit: type=1326 audit(2000525121.964:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2224 comm="syz.1.11460" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4170b8d550 code=0x7ffc0000
[  809.722044][   T33] audit: type=1326 audit(2000525121.964:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2224 comm="syz.1.11460" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4170b8e7eb code=0x7ffc0000
[  809.730854][   T33] audit: type=1326 audit(2000525121.973:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2224 comm="syz.1.11460" exe="/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4170b8d84a code=0x7ffc0000
[  809.733021][T26562] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  809.744878][T26562] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  809.745958][ T2225] EXT4-fs (loop1): 1 truncate cleaned up
[  809.748551][T26562] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  809.751493][ T2225] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  809.755123][T26562] usb 5-1: config 0 descriptor??
[  809.776953][T21251] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  809.815327][ T2230] : renamed from vlan1 (while UP)
[  809.912874][ T2239] input: syz0 as /devices/virtual/input/input44
[  809.981149][T26562] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  810.060002][ T2251] loop1: detected capacity change from 0 to 1024
[  810.187150][ T2253] loop1: detected capacity change from 0 to 40427
[  810.189879][ T2253] F2FS-fs: heap/no_heap options were deprecated
[  810.193010][ T2253] F2FS-fs (loop1): invalid crc value
[  810.221925][ T2253] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  810.226205][ T2253] F2FS-fs (loop1): Start checkpoint disabled!
[  810.229932][ T2253] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  810.249335][T24872] kworker/u10:58: attempt to access beyond end of device
[  810.249335][T24872] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  810.255445][T24872] CPU: 1 UID: 0 PID: 24872 Comm: kworker/u10:58 Not tainted syzkaller #0 PREEMPT(full) 
[  810.255465][T24872] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  810.255475][T24872] Workqueue: writeback wb_workfn (flush-7:1)
[  810.255498][T24872] Call Trace:
[  810.255503][T24872]  <TASK>
[  810.255510][T24872]  dump_stack_lvl+0x189/0x250
[  810.255530][T24872]  ? __pfx_dump_stack_lvl+0x10/0x10
[  810.255544][T24872]  ? __pfx_queue_work_on+0x10/0x10
[  810.255583][T24872]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  810.255601][T24872]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  810.255619][T24872]  f2fs_handle_critical_error+0x37c/0x540
[  810.255638][T24872]  f2fs_write_end_io+0x886/0xb60
[  810.255657][T24872]  __submit_merged_bio+0x27a/0x6a0
[  810.255675][T24872]  __submit_merged_write_cond+0x255/0x530
[  810.255693][T24872]  f2fs_write_data_pages+0x261d/0x3000
[  810.255722][T24872]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  810.255743][T24872]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  810.255767][T24872]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  810.255788][T24872]  ? trace_f2fs_writepages+0x7f/0x200
[  810.255805][T24872]  ? f2fs_write_node_pages+0x478/0x6e0
[  810.255819][T24872]  ? xa_load+0x60/0x210
[  810.255838][T24872]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  810.255853][T24872]  ? do_raw_spin_lock+0x121/0x290
[  810.255869][T24872]  ? rcu_is_watching+0x15/0xb0
[  810.255882][T24872]  ? set_shrinker_bit+0x7c/0x350
[  810.255897][T24872]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  810.255921][T24872]  do_writepages+0x32e/0x550
[  810.255938][T24872]  ? unwind_next_frame+0xa5/0x2390
[  810.255956][T24872]  __writeback_single_inode+0x145/0xff0
[  810.255971][T24872]  ? do_raw_spin_unlock+0x4d/0x240
[  810.255987][T24872]  writeback_sb_inodes+0x6c7/0x1010
[  810.256008][T24872]  ? fprop_reflect_period_percpu+0x6b/0x330
[  810.256027][T24872]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  810.256054][T24872]  ? rcu_is_watching+0x15/0xb0
[  810.256069][T24872]  wb_writeback+0x43b/0xaf0
[  810.256087][T24872]  ? queue_io+0x3c1/0x590
[  810.256102][T24872]  ? __pfx_wb_writeback+0x10/0x10
[  810.256119][T24872]  ? rcu_is_watching+0x15/0xb0
[  810.256132][T24872]  wb_workfn+0x409/0xef0
[  810.256148][T24872]  ? __pfx_wb_workfn+0x10/0x10
[  810.256160][T24872]  ? rcu_is_watching+0x15/0xb0
[  810.256172][T24872]  ? rcu_is_watching+0x15/0xb0
[  810.256186][T24872]  ? process_scheduled_works+0x9ef/0x17b0
[  810.256197][T24872]  ? rcu_is_watching+0x15/0xb0
[  810.256208][T24872]  ? lock_acquire+0x5f/0x360
[  810.256227][T24872]  ? rcu_is_watching+0x15/0xb0
[  810.256237][T24872]  ? process_scheduled_works+0x9ef/0x17b0
[  810.256247][T24872]  ? process_scheduled_works+0x9ef/0x17b0
[  810.256260][T24872]  process_scheduled_works+0xae1/0x17b0
[  810.256281][T24872]  ? __pfx_process_scheduled_works+0x10/0x10
[  810.256299][T24872]  worker_thread+0x8a0/0xda0
[  810.256320][T24872]  kthread+0x711/0x8a0
[  810.256337][T24872]  ? __pfx_worker_thread+0x10/0x10
[  810.256348][T24872]  ? __pfx_kthread+0x10/0x10
[  810.256363][T24872]  ? rcu_is_watching+0x15/0xb0
[  810.256375][T24872]  ? __pfx_kthread+0x10/0x10
[  810.256389][T24872]  ret_from_fork+0x3fc/0x770
[  810.256403][T24872]  ? __pfx_ret_from_fork+0x10/0x10
[  810.256417][T24872]  ? __switch_to_asm+0x39/0x70
[  810.256431][T24872]  ? __switch_to_asm+0x33/0x70
[  810.256445][T24872]  ? __pfx_kthread+0x10/0x10
[  810.256460][T24872]  ret_from_fork_asm+0x1a/0x30
[  810.256481][T24872]  </TASK>
[  810.256486][T24872] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  810.394676][ T5910] usb 5-1: USB disconnect, device number 72
[  810.549711][ T2258] loop1: detected capacity change from 0 to 764
[  810.615794][ T2259] Symlink component flag not implemented
[  810.618155][ T2259] Symlink component flag not implemented
[  810.620736][ T2259] Symlink component flag not implemented (128)
[  810.623353][ T2259] Symlink component flag not implemented (122)
[  811.449057][ T2273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11480'.
[  811.555395][ T2275] netlink: 'syz.4.11481': attribute type 1 has an invalid length.
[  811.558887][ T2275] netlink: 172 bytes leftover after parsing attributes in process `syz.4.11481'.
[  811.734046][ T2289] loop1: detected capacity change from 0 to 8
[  811.737746][ T2289] squashfs image failed sanity check
[  811.763577][ T2292] netlink: 32 bytes leftover after parsing attributes in process `syz.7.11490'.
[  811.937681][ T2304] loop7: detected capacity change from 0 to 32768
[  811.940681][ T2304] bcachefs (/dev/loop7): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section
[  811.940681][ T2304] clean (size 2912):
[  811.940681][ T2304] flags:          0
[  811.940681][ T2304] journal_seq:    196618
[  811.940681][ T2304] usage: type=inodes v=8
[  811.940681][ T2304] usage: type=key_version v=0
[  811.940681][ T2304] usage: type=reserved v=0
[  811.940681][ T2304] usage: type=reserved v=0
[  811.940681][ T2304] usage: type=reserved v=0
[  811.940681][ T2304] usage: type=reserved v=0
[  811.940681][ T2304] data_usage: btree: 1/1 [0]=2816
[  811.940681][ T2304] data_usage: journal: 1/1 [0]=0
[  811.940681][ T2304] data_usage: user: 1/1 [0]=16
[  811.940681][ T2304] dev_usage: dev=0  
[  811.940681][ T2304]   free: buckets=83 sectors=0 fragmented=0
[  811.940681][ T2304]   sb: buckets=25 sectors=6152 fragmented=248
[  811.940681][ T2304]   journal: buckets=8 sectors=2048 fragmented=0
[  811.940681][ T2304]   btree: buckets=11 sectors=2816 fragmented=0
[  811.940681][ T2304]   user: buckets=1 sectors=16 fragmented=240
[  811.940681][ T2304]   cached: buckets=0 sectors=0 fragmented=0
[  811.940681][ T2304]   parity: buckets=0 sectors=0 fragmented=0
[  811.940681][ T2304]   stripe: buckets=0 sectors=0 fragmented=0
[  811.940681][ T2304]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[  811.940681][ T2304]   need_discard: buckets=0 sectors=0 fragmented=0
[  811.940681][ T2304] clock: read=0
[  811.940681][ T2304] clock: write=1280
[  811.940681][ T2304] btree_root: btree=extents level=0 u64s 11 type btree_ptr_v2 POS_MAX len 511 ver 0: s
[  811.940748][ T2304] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  811.988963][    C0] vkms_vblank_simulate: vblank timer overrun
[  812.000019][ T2300] loop1: detected capacity change from 0 to 40427
[  812.004796][ T2300] F2FS-fs (loop1): invalid crc value
[  812.034396][ T2300] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  812.038508][ T2300] F2FS-fs (loop1): Start checkpoint disabled!
[  812.042707][ T2300] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  812.179922][ T2312] ipip0: entered promiscuous mode
[  812.329529][ T2317] loop7: detected capacity change from 0 to 32768
[  812.334015][ T2317] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.11500 (2317)
[  812.341101][ T2317] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  812.345398][ T2317] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm
[  812.400828][ T2317] BTRFS info (device loop7): enabling ssd optimizations
[  812.403412][ T2317] BTRFS info (device loop7): enabling free space tree
[  812.417977][T32518] BTRFS info (device loop7): qgroup scan completed (inconsistency flag cleared)
[  812.429659][T32742] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  812.547940][ T2344] syz.7.11505: attempt to access beyond end of device
[  812.547940][ T2344] nbd7: rw=0, sector=2, nr_sectors = 2 limit=0
[  812.553445][ T2344] vxfs: unable to read disk superblock at 1
[  812.557008][ T2344] syz.7.11505: attempt to access beyond end of device
[  812.557008][ T2344] nbd7: rw=0, sector=16, nr_sectors = 2 limit=0
[  812.562342][ T2344] vxfs: unable to read disk superblock at 8
[  812.565017][ T2344] vxfs: can't find superblock.
[  814.242585][ T2415] loop7: detected capacity change from 0 to 256
[  814.247145][ T2415] exfat: Deprecated parameter 'utf8'
[  814.253123][ T2415] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  814.460811][ T2423] loop7: detected capacity change from 0 to 4096
[  814.463932][ T2423] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  814.467047][ T2423] ntfs3(loop7): ino=0, mi_enum_attr
[  814.470573][ T2423] ntfs3(loop7): volume is dirty and "force" flag is not set!
[  814.507474][   T33] kauditd_printk_skb: 11 callbacks suppressed
[  814.507488][   T33] audit: type=1326 audit(2000525126.491:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2424 comm="syz.7.11542" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd429b8ebe9 code=0x0
[  814.522980][T26562] usb 5-1: new high-speed USB device number 73 using dummy_hcd
[  814.577534][ T2427] loop7: detected capacity change from 0 to 512
[  814.579892][ T2427] EXT4-fs: Ignoring removed orlov option
[  814.589359][ T2427] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  814.593709][ T2427] ext4 filesystem being mounted at /251/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  814.610672][T32742] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  814.631343][ T2432] lo speed is unknown, defaulting to 1000
[  814.634177][ T2432] lo speed is unknown, defaulting to 1000
[  814.636782][ T2432] lo speed is unknown, defaulting to 1000
[  814.674188][ T2432] infiniband sz1: set active
[  814.675857][   T47] lo speed is unknown, defaulting to 1000
[  814.677778][ T2432] infiniband sz1: added lo
[  814.686713][ T2432] RDS/IB: sz1: added
[  814.688200][ T2432] smc: adding ib device sz1 with port count 1
[  814.690427][ T2432] smc:    ib device sz1 port 1 has pnetid 
[  814.692564][   T47] lo speed is unknown, defaulting to 1000
[  814.695960][ T2432] lo speed is unknown, defaulting to 1000
[  814.697128][T26562] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  814.702883][T26562] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  814.707360][T26562] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  814.711242][T26562] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  814.716922][ T2417] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  814.721917][T26562] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  814.753049][ T2432] lo speed is unknown, defaulting to 1000
[  814.797318][ T2432] lo speed is unknown, defaulting to 1000
[  814.844025][ T2432] lo speed is unknown, defaulting to 1000
[  815.070716][T26562] usb 5-1: USB disconnect, device number 73
[  815.196921][ T2438] loop7: detected capacity change from 0 to 40427
[  815.200159][ T2438] F2FS-fs (loop7): Insane cp_payload (553648128 >= 504)
[  815.202382][ T2438] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  815.205865][ T2438] F2FS-fs (loop7): invalid crc value
[  815.230862][ T2438] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  815.239398][ T2438] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  815.241904][ T2438] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  815.255073][T32742] syz-executor: attempt to access beyond end of device
[  815.255073][T32742] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  815.261080][T32742] CPU: 0 UID: 0 PID: 32742 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  815.261095][T32742] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  815.261100][T32742] Call Trace:
[  815.261103][T32742]  <TASK>
[  815.261107][T32742]  dump_stack_lvl+0x189/0x250
[  815.261123][T32742]  ? __pfx_dump_stack_lvl+0x10/0x10
[  815.261132][T32742]  ? __pfx_queue_work_on+0x10/0x10
[  815.261141][T32742]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  815.261152][T32742]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  815.261163][T32742]  f2fs_handle_critical_error+0x37c/0x540
[  815.261176][T32742]  f2fs_write_end_io+0x886/0xb60
[  815.261187][T32742]  __submit_merged_bio+0x27a/0x6a0
[  815.261198][T32742]  __submit_merged_write_cond+0x255/0x530
[  815.261208][T32742]  f2fs_write_data_pages+0x261d/0x3000
[  815.261224][T32742]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  815.261237][T32742]  ? arch_stack_walk+0xfc/0x150
[  815.261251][T32742]  ? __mod_zone_page_state+0xd7/0x140
[  815.261263][T32742]  ? folios_put_refs+0x560/0x640
[  815.261273][T32742]  ? __pfx_folios_put_refs+0x10/0x10
[  815.261280][T32742]  ? rcu_is_watching+0x15/0xb0
[  815.261289][T32742]  ? lru_add+0xa2f/0xd80
[  815.261296][T32742]  ? lru_add+0x198/0xd80
[  815.261303][T32742]  ? folio_batch_move_lru+0x319/0x3a0
[  815.261311][T32742]  ? filemap_get_folios_tag+0xed/0x630
[  815.261319][T32742]  ? rcu_is_watching+0x15/0xb0
[  815.261326][T32742]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  815.261337][T32742]  do_writepages+0x32e/0x550
[  815.261347][T32742]  ? rcu_is_watching+0x15/0xb0
[  815.261355][T32742]  ? do_raw_spin_unlock+0x4d/0x240
[  815.261365][T32742]  filemap_fdatawrite+0x199/0x240
[  815.261375][T32742]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  815.261390][T32742]  ? rcu_is_watching+0x15/0xb0
[  815.261398][T32742]  ? do_raw_spin_unlock+0x4d/0x240
[  815.261407][T32742]  f2fs_sync_dirty_inodes+0x31f/0x830
[  815.261416][T32742]  f2fs_write_checkpoint+0x95a/0x1df0
[  815.261427][T32742]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  815.261441][T32742]  ? kill_f2fs_super+0x298/0x6c0
[  815.261449][T32742]  kill_f2fs_super+0x2c3/0x6c0
[  815.261457][T32742]  ? __pfx_kill_f2fs_super+0x10/0x10
[  815.261463][T32742]  ? radix_tree_delete_item+0x2b6/0x400
[  815.261474][T32742]  ? shrinker_free+0x2ce/0x3e0
[  815.261482][T32742]  deactivate_locked_super+0xbc/0x130
[  815.261492][T32742]  cleanup_mnt+0x425/0x4c0
[  815.261501][T32742]  task_work_run+0x1d4/0x260
[  815.261539][T32742]  ? __pfx_task_work_run+0x10/0x10
[  815.261547][T32742]  ? __x64_sys_umount+0x122/0x160
[  815.261557][T32742]  ? __pfx___x64_sys_umount+0x10/0x10
[  815.261567][T32742]  ? rcu_is_watching+0x15/0xb0
[  815.261574][T32742]  exit_to_user_mode_loop+0xec/0x110
[  815.261585][T32742]  do_syscall_64+0x2bd/0x3b0
[  815.261596][T32742]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  815.261603][T32742]  ? exc_page_fault+0x9f/0xf0
[  815.261612][T32742]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  815.261619][T32742] RIP: 0033:0x7fd429b8ff17
[  815.261627][T32742] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  815.261634][T32742] RSP: 002b:00007ffd0881f428 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  815.261643][T32742] RAX: 0000000000000000 RBX: 00007fd429c11c05 RCX: 00007fd429b8ff17
[  815.261648][T32742] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd0881f4e0
[  815.261653][T32742] RBP: 00007ffd0881f4e0 R08: 0000000000000000 R09: 0000000000000000
[  815.261657][T32742] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd08820570
[  815.261662][T32742] R13: 00007fd429c11c05 R14: 00000000000c00ab R15: 00007ffd088205b0
[  815.261671][T32742]  </TASK>
[  815.261674][T32742] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  815.537470][ T2444] loop7: detected capacity change from 0 to 1024
[  815.664036][ T2448] netlink: 830 bytes leftover after parsing attributes in process `syz.4.11549'.
[  815.772568][ T2459] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11553'.
[  816.129664][T24793] hfsplus: b-tree write err: -5, ino 4
[  816.152807][ T2472] loop7: detected capacity change from 0 to 512
[  816.156480][ T2472] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  816.916582][ T2495] loop7: detected capacity change from 0 to 8
[  816.928004][ T2495] SQUASHFS error: Failed to read block 0x2fc: -5
[  816.933870][ T2495] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  816.936237][ T2495] SQUASHFS error: Unable to read directory block [247:26]
[  817.113222][ T2506] loop7: detected capacity change from 0 to 40427
[  817.116418][ T2506] F2FS-fs (loop7): Small segment_count (9 < 1 * 24)
[  817.118974][ T2506] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  817.142713][ T5910] usb 2-1: new full-speed USB device number 84 using dummy_hcd
[  817.148425][ T2506] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  817.153435][ T2506] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  817.156536][ T2506] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  817.174110][   T33] audit: type=1800 audit(2000525128.989:921): pid=2506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.11570" name="file1" dev="loop7" ino=10 res=0 errno=0
[  817.193248][T32742] syz-executor: attempt to access beyond end of device
[  817.193248][T32742] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  817.199714][T32742] CPU: 0 UID: 0 PID: 32742 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  817.199736][T32742] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  817.199744][T32742] Call Trace:
[  817.199749][T32742]  <TASK>
[  817.199756][T32742]  dump_stack_lvl+0x189/0x250
[  817.199780][T32742]  ? __pfx_dump_stack_lvl+0x10/0x10
[  817.199794][T32742]  ? __pfx_queue_work_on+0x10/0x10
[  817.199808][T32742]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  817.199825][T32742]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  817.199844][T32742]  f2fs_handle_critical_error+0x37c/0x540
[  817.199865][T32742]  f2fs_write_end_io+0x886/0xb60
[  817.199883][T32742]  __submit_merged_bio+0x27a/0x6a0
[  817.199901][T32742]  __submit_merged_write_cond+0x255/0x530
[  817.199925][T32742]  f2fs_write_data_pages+0x261d/0x3000
[  817.199953][T32742]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  817.199974][T32742]  ? arch_stack_walk+0xfc/0x150
[  817.200017][T32742]  ? __mod_zone_page_state+0xd7/0x140
[  817.200040][T32742]  ? folios_put_refs+0x560/0x640
[  817.200058][T32742]  ? __pfx_folios_put_refs+0x10/0x10
[  817.200070][T32742]  ? rcu_is_watching+0x15/0xb0
[  817.200084][T32742]  ? lru_add+0xa2f/0xd80
[  817.200096][T32742]  ? lru_add+0x198/0xd80
[  817.200109][T32742]  ? folio_batch_move_lru+0x319/0x3a0
[  817.200124][T32742]  ? filemap_get_folios_tag+0xed/0x630
[  817.200136][T32742]  ? rcu_is_watching+0x15/0xb0
[  817.200150][T32742]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  817.200168][T32742]  do_writepages+0x32e/0x550
[  817.200185][T32742]  ? rcu_is_watching+0x15/0xb0
[  817.200199][T32742]  ? do_raw_spin_unlock+0x4d/0x240
[  817.200217][T32742]  filemap_fdatawrite+0x199/0x240
[  817.200233][T32742]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  817.200263][T32742]  ? rcu_is_watching+0x15/0xb0
[  817.200276][T32742]  ? do_raw_spin_unlock+0x4d/0x240
[  817.200292][T32742]  f2fs_sync_dirty_inodes+0x31f/0x830
[  817.200310][T32742]  f2fs_write_checkpoint+0x95a/0x1df0
[  817.200330][T32742]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  817.200357][T32742]  ? rcu_is_watching+0x15/0xb0
[  817.200369][T32742]  ? kill_f2fs_super+0x298/0x6c0
[  817.200384][T32742]  kill_f2fs_super+0x2c3/0x6c0
[  817.200398][T32742]  ? __pfx_kill_f2fs_super+0x10/0x10
[  817.200409][T32742]  ? radix_tree_delete_item+0x2b6/0x400
[  817.200428][T32742]  ? shrinker_free+0x2ce/0x3e0
[  817.200442][T32742]  deactivate_locked_super+0xbc/0x130
[  817.200458][T32742]  cleanup_mnt+0x425/0x4c0
[  817.200473][T32742]  task_work_run+0x1d4/0x260
[  817.200518][T32742]  ? __pfx_task_work_run+0x10/0x10
[  817.200533][T32742]  ? __x64_sys_umount+0x122/0x160
[  817.200550][T32742]  ? __pfx___x64_sys_umount+0x10/0x10
[  817.200566][T32742]  ? rcu_is_watching+0x15/0xb0
[  817.200579][T32742]  exit_to_user_mode_loop+0xec/0x110
[  817.200597][T32742]  do_syscall_64+0x2bd/0x3b0
[  817.200616][T32742]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  817.200628][T32742]  ? exc_page_fault+0x9f/0xf0
[  817.200644][T32742]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  817.200656][T32742] RIP: 0033:0x7fd429b8ff17
[  817.200669][T32742] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  817.200680][T32742] RSP: 002b:00007ffd0881f428 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  817.200695][T32742] RAX: 0000000000000000 RBX: 00007fd429c11c05 RCX: 00007fd429b8ff17
[  817.200704][T32742] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd0881f4e0
[  817.200711][T32742] RBP: 00007ffd0881f4e0 R08: 0000000000000000 R09: 0000000000000000
[  817.200719][T32742] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd08820570
[  817.200728][T32742] R13: 00007fd429c11c05 R14: 00000000000c07b7 R15: 00007ffd088205b0
[  817.200743][T32742]  </TASK>
[  817.201341][T32742] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  817.398220][   T47] usb 5-1: new high-speed USB device number 74 using dummy_hcd
[  817.442432][ T5910] usb 2-1: config 0 has an invalid interface number: 10 but max is 0
[  817.445555][ T5910] usb 2-1: config 0 has no interface number 0
[  817.449654][ T5910] usb 2-1: New USB device found, idVendor=0f3d, idProduct=68a3, bcdDevice=1d.a7
[  817.453716][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  817.458824][ T5910] usb 2-1: Product: syz
[  817.460564][ T5910] usb 2-1: Manufacturer: syz
[  817.463070][ T5910] usb 2-1: SerialNumber: syz
[  817.465844][ T5910] usb 2-1: config 0 descriptor??
[  817.468881][ T5910] usb 2-1: Expected 3 endpoints, found: 0
[  817.560432][   T47] usb 5-1: config 0 has an invalid interface number: 48 but max is 2
[  817.563887][   T47] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[  817.567939][   T47] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3
[  817.572244][   T47] usb 5-1: config 0 has no interface number 0
[  817.574926][   T47] usb 5-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30
[  817.579396][   T47] usb 5-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48
[  817.585455][   T47] usb 5-1: config 0 interface 48 has no altsetting 0
[  817.588438][   T47] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  817.592245][   T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  817.596552][   T47] usb 5-1: config 0 descriptor??
[  817.692963][T26562] usb 2-1: USB disconnect, device number 84
[  817.818836][ T2536] binder_alloc: 2535: binder_alloc_buf size 8 failed, no address space
[  817.821670][ T2536] binder_alloc: allocated: 12288 (num: 1 largest: 12288), free: 0 (num: 0 largest: 0)
[  817.827544][   T47] usb 5-1: string descriptor 0 read error: -71
[  817.832088][   T47] usb 5-1: USB disconnect, device number 74
[  817.855556][ T2540] loop7: detected capacity change from 0 to 512
[  817.859720][ T2540] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[  817.865248][ T2540] EXT4-fs (loop7): orphan cleanup on readonly fs
[  817.867658][ T2540] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.11583: bad orphan inode 15
[  817.872573][ T2540] ext4_test_bit(bit=14, block=18) = 1
[  817.874867][ T2540] is_bad_inode(inode)=0
[  817.876596][ T2540] NEXT_ORPHAN(inode)=1023
[  817.878473][ T2540] max_ino=32
[  817.882137][ T2540] i_nlink=0
[  817.883688][ T2540] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2962: inode #15: comm syz.7.11583: corrupted xattr block 19: e_value size too large
[  817.888983][ T2540] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -117)
[  817.893174][ T2540] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  817.909254][T32742] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  819.340604][ T2574] loop1: detected capacity change from 0 to 512
[  819.347355][ T2574] EXT4-fs (loop1): fragment/cluster size (4096) != block size (1024)
[  819.520184][ T2598] loop1: detected capacity change from 0 to 1024
[  819.540805][ T2598] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  819.545181][ T2598] ext4 filesystem being mounted at /1692/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  819.556662][ T2598] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 3: comm syz.1.11605: lblock 3 mapped to illegal pblock 3 (length 1)
[  819.565278][ T2598] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117
[  819.572980][ T2598] EXT4-fs (loop1): This should not happen!! Data will be lost
[  819.572980][ T2598] 
[  819.577258][ T2598] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.11605: Freeing blocks not in datazone - block = 3, count = 1
[  819.593309][T21251] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  819.711314][ T2621] bridge0: port 4(syz_tun) entered blocking state
[  819.714081][ T2621] bridge0: port 4(syz_tun) entered disabled state
[  819.716803][ T2621] syz_tun: entered allmulticast mode
[  819.721445][ T2621] syz_tun: entered promiscuous mode
[  819.723952][ T2621] bridge0: port 4(syz_tun) entered blocking state
[  819.726741][ T2621] bridge0: port 4(syz_tun) entered forwarding state
[  819.863900][ T2636] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11619'.
[  819.953442][ T5890] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[  820.113586][ T5890] usb 2-1: Using ep0 maxpacket: 16
[  820.118925][ T5890] usb 2-1: config 127 has an invalid interface number: 102 but max is 2
[  820.122536][ T5890] usb 2-1: config 127 has no interface number 2
[  820.127793][ T5890] usb 2-1: config 127 interface 0 has no altsetting 0
[  820.130806][ T5890] usb 2-1: config 127 interface 1 has no altsetting 0
[  820.133704][ T5890] usb 2-1: config 127 interface 102 has no altsetting 0
[  820.139568][ T5890] usb 2-1: New USB device found, idVendor=1199, idProduct=9015, bcdDevice=99.2d
[  820.143354][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  820.147941][ T5890] usb 2-1: Product: syz
[  820.149733][ T5890] usb 2-1: Manufacturer: syz
[  820.151700][ T5890] usb 2-1: SerialNumber: syz
[  820.418885][ T5890] usb 2-1: selecting invalid altsetting 0
[  820.421505][ T5890] usb 2-1: Could not set interface, error -22
[  820.431767][ T5890] usb 2-1: selecting invalid altsetting 0
[  820.434338][ T5890] usb 2-1: Could not set interface, error -22
[  820.439538][ T5890] usb 2-1: USB disconnect, device number 85
[  821.201094][ T2685] netlink: 'syz.1.11638': attribute type 9 has an invalid length.
[  821.276502][ T2698] netlink: 16 bytes leftover after parsing attributes in process `syz.7.11643'.
[  821.400569][ T2709] loop7: detected capacity change from 0 to 32768
[  821.405744][ T2709] XFS (loop7): DAX unsupported by block device. Turning off DAX.
[  821.409078][ T2709] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  821.418748][ T2709] XFS (loop7): Ending clean mount
[  821.421344][ T2709] XFS (loop7): Quotacheck needed: Please wait.
[  821.426494][ T2709] XFS (loop7): Quotacheck: Done.
[  821.428536][ T5890] usb 5-1: new high-speed USB device number 75 using dummy_hcd
[  821.442729][T32742] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  821.517775][ T2726] netlink: 'syz.7.11650': attribute type 1 has an invalid length.
[  821.567799][ T5911] usb 2-1: new high-speed USB device number 86 using dummy_hcd
[  821.727964][ T5911] usb 2-1: Using ep0 maxpacket: 16
[  821.732500][ T5911] usb 2-1: config 0 has an invalid interface number: 131 but max is 0
[  821.735838][ T5911] usb 2-1: config 0 has no interface number 0
[  821.737969][ T5911] usb 2-1: config 0 interface 131 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  821.742957][ T5911] usb 2-1: New USB device found, idVendor=0856, idProduct=ac29, bcdDevice=b6.9e
[  821.746011][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  821.751536][ T5911] usb 2-1: config 0 descriptor??
[  821.830020][ T5890] usb 5-1: Using ep0 maxpacket: 16
[  821.834300][ T5890] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  821.838509][ T5890] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  821.844136][ T5890] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  821.847659][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  821.850353][ T5890] usb 5-1: Product: syz
[  821.851789][ T5890] usb 5-1: Manufacturer: syz
[  821.853652][ T5890] usb 5-1: SerialNumber: syz
[  821.974756][ T5911] mos7840 2-1:0.131: missing endpoints
[  821.979522][ T5911] usb 2-1: USB disconnect, device number 86
[  822.018161][ T2740] loop7: detected capacity change from 0 to 32768
[  822.022235][ T2740] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.11655 (2740)
[  822.029236][ T2740] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  822.033491][ T2740] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm
[  822.046784][ T2740] BTRFS info (device loop7): enabling ssd optimizations
[  822.050056][ T2740] BTRFS info (device loop7): using spread ssd allocation scheme
[  822.053340][ T2740] BTRFS info (device loop7): turning on sync discard
[  822.056225][ T2740] BTRFS info (device loop7): enabling free space tree
[  822.069327][T32742] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  822.077539][ T5890] usb 5-1: 0:2 : does not exist
[  822.083576][ T5890] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  822.094323][ T5890] usb 5-1: USB disconnect, device number 75
[  822.296658][ T2768] loop7: detected capacity change from 0 to 32768
[  822.303472][ T2768] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  822.320759][T32742] ocfs2: Unmounting device (7,7) on (node local)
[  822.530979][ T2788] loop7: detected capacity change from 0 to 47
[  822.761532][ T2826] loop7: detected capacity change from 0 to 4096
[  822.767785][ T2826] ntfs3(loop7): try to read out of volume at offset 0x3fffffc0c00
[  822.770479][ T2826] ntfs3(loop7): try to read out of volume at offset 0x3fffffc0c00
[  822.773200][ T2826] ntfs3(loop7): try to read out of volume at offset 0x3fffffc0c00
[  822.776393][ T2826] ntfs3(loop7): try to read out of volume at offset 0x3fffffc0c00
[  822.779955][ T2826] ntfs3(loop7): try to read out of volume at offset 0x3fffffc1c00
[  822.783252][ T2826] ntfs3(loop7): try to read out of volume at offset 0x3fffffc2c00
[  822.790145][ T2826] ntfs3(loop7): try to read out of volume at offset 0x3fffffc4c00
[  822.793710][ T2826] ntfs3(loop7): try to read out of volume at offset 0x3fffffc8c00
[  822.797892][ T2826] ntfs3(loop7): try to read out of volume at offset 0x3fffffd0c00
[  822.801270][ T2826] ntfs3(loop7): try to read out of volume at offset 0x3fffffe0c00
[  822.852689][ T2833] loop7: detected capacity change from 0 to 1764
[  822.926724][ T2847] loop7: detected capacity change from 0 to 128
[  822.930208][ T2847] EXT4-fs (loop7): Test dummy encryption mode enabled
[  822.937156][ T2847] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  822.942415][ T2847] ext4 filesystem being mounted at /303/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  822.964600][ T2852] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  822.968582][ T2852] mac80211_hwsim hwsim32 syzkaller0: entered promiscuous mode
[  822.970147][T32742] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  822.971983][ T2852] mac80211_hwsim hwsim32 syzkaller0: entered allmulticast mode
[  822.981901][ T2852] tipc: Resetting bearer <eth:syzkaller0>
[  822.986566][T24855] tipc: Resetting bearer <eth:syzkaller0>
[  822.992503][ T2852] tipc: Resetting bearer <eth:syzkaller0>
[  823.026534][ T2858] loop7: detected capacity change from 0 to 256
[  823.052855][ T2861] loop7: detected capacity change from 0 to 64
[  823.175533][ T2871] loop7: detected capacity change from 0 to 32768
[  823.179403][ T2871] ocfs2: Slot 0 on device (7,7) was already allocated to this node!
[  823.183765][ T2871] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  823.200728][T32742] ocfs2: Unmounting device (7,7) on (node local)
[  823.643898][ T2888] loop1: detected capacity change from 0 to 4096
[  823.647636][ T2888] ntfs3(loop1): Primary boot: invalid bytes per index 2(-1).
[  823.651063][ T2888] ntfs3(loop1): try to read out of volume at offset 0x1ffe00
[  824.137033][ T2926] netlink: 'syz.4.11714': attribute type 21 has an invalid length.
[  824.139805][ T2926] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11714'.
[  824.142974][ T2926] netlink: 'syz.4.11714': attribute type 1 has an invalid length.
[  824.238783][ T2941] loop7: detected capacity change from 0 to 2048
[  824.248054][ T2943] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  824.426546][ T2948] loop7: detected capacity change from 0 to 32768
[  824.429279][ T2948] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.11723 (2948)
[  824.436583][ T2948] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  824.439986][ T2948] BTRFS info (device loop7): using crc32c (crc32c-lib) checksum algorithm
[  824.503771][ T2948] BTRFS info (device loop7): setting nodatasum
[  824.506015][ T2948] BTRFS info (device loop7): setting nodatacow
[  824.518124][ T2948] BTRFS info (device loop7): enabling free space tree
[  824.521135][ T2948] BTRFS info (device loop7): enabling auto defrag
[  824.523915][ T2948] BTRFS info (device loop7): max_inline set to 0
[  824.775891][T32518] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  824.782739][T32742] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  824.825492][T32518] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  824.890553][T32518] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  824.927552][T32518] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  824.966586][ T2993] netlink: 209832 bytes leftover after parsing attributes in process `syz.4.11740'.
[  825.003990][T32518] bridge_slave_1: left allmulticast mode
[  825.011214][T32518] bridge_slave_1: left promiscuous mode
[  825.020687][T32518] bridge0: port 2(bridge_slave_1) entered disabled state
[  825.024136][T32518] bridge_slave_0: left allmulticast mode
[  825.026288][T32518] bridge_slave_0: left promiscuous mode
[  825.028389][T32518] bridge0: port 1(bridge_slave_0) entered disabled state
[  825.040053][T32465] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  825.044270][T32465] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  825.047612][T32465] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  825.051103][T32465] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  825.054702][T32465] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  825.153492][T32518] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  825.157263][T32518] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  825.161066][T32518] bond0 (unregistering): Released all slaves
[  825.173203][ T2998] wlan0 speed is unknown, defaulting to 1000
[  825.176376][ T2998] lo speed is unknown, defaulting to 1000
[  825.179298][ T2998] lo speed is unknown, defaulting to 1000
[  825.182832][ T2998] lo speed is unknown, defaulting to 1000
[  825.222581][T32518] : left promiscuous mode
[  825.279778][ T2998] chnl_net:caif_netlink_parms(): no params data found
[  825.315522][ T2998] bridge0: port 1(bridge_slave_0) entered blocking state
[  825.318337][ T2998] bridge0: port 1(bridge_slave_0) entered disabled state
[  825.321079][ T2998] bridge_slave_0: entered allmulticast mode
[  825.324125][ T2998] bridge_slave_0: entered promiscuous mode
[  825.327580][ T2998] bridge0: port 2(bridge_slave_1) entered blocking state
[  825.330345][ T2998] bridge0: port 2(bridge_slave_1) entered disabled state
[  825.333306][ T2998] bridge_slave_1: entered allmulticast mode
[  825.336257][ T2998] bridge_slave_1: entered promiscuous mode
[  825.355160][ T2998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  825.360680][ T2998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  825.391022][ T2998] team0: Port device team_slave_0 added
[  825.396931][ T2998] team0: Port device team_slave_1 added
[  825.446143][T32518] hsr_slave_0: left promiscuous mode
[  825.451928][T32518] hsr_slave_1: left promiscuous mode
[  825.454521][T32518] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  825.457712][T32518] batman_adv: batadv0: Removing interface: batadv_slave_0
[  825.461302][T32518] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  825.464601][T32518] batman_adv: batadv0: Removing interface: batadv_slave_1
[  825.472251][T32518] veth1_macvtap: left promiscuous mode
[  825.474677][T32518] veth0_macvtap: left promiscuous mode
[  825.477262][T32518] veth1_vlan: left promiscuous mode
[  825.479657][T32518] veth0_vlan: left promiscuous mode
[  825.547507][T32518] team0 (unregistering): Port device team_slave_1 removed
[  825.553516][T32518] team0 (unregistering): Port device team_slave_0 removed
[  825.604064][T24852] smc: removing ib device sz1
[  825.606852][ T2998] batman_adv: batadv0: Adding interface: batadv_slave_0
[  825.613032][ T2998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  825.626280][ T2998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  825.634164][ T2998] batman_adv: batadv0: Adding interface: batadv_slave_1
[  825.636878][ T2998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  825.649120][ T2998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  825.658307][ T5911] lo speed is unknown, defaulting to 1000
[  825.660382][ T5911] sz1: Port: 1 Link DOWN
[  825.708120][ T2998] hsr_slave_0: entered promiscuous mode
[  825.710517][ T2998] hsr_slave_1: entered promiscuous mode
[  825.726577][ T2998] debugfs: 'hsr0' already exists in 'hsr'
[  825.728754][ T2998] Cannot create hsr debugfs directory
[  826.147258][ T2998] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  826.152010][ T2998] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  826.156346][ T2998] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  826.161368][ T2998] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  826.205601][ T2998] 8021q: adding VLAN 0 to HW filter on device bond0
[  826.216358][ T2998] 8021q: adding VLAN 0 to HW filter on device team0
[  826.222167][T24852] bridge0: port 1(bridge_slave_0) entered blocking state
[  826.225137][T24852] bridge0: port 1(bridge_slave_0) entered forwarding state
[  826.241923][T24852] bridge0: port 2(bridge_slave_1) entered blocking state
[  826.244632][T24852] bridge0: port 2(bridge_slave_1) entered forwarding state
[  826.303731][ T5890] usb 5-1: new high-speed USB device number 76 using dummy_hcd
[  826.334613][ T2998] 8021q: adding VLAN 0 to HW filter on device batadv0
[  826.354708][ T2998] veth0_vlan: entered promiscuous mode
[  826.360431][ T2998] veth1_vlan: entered promiscuous mode
[  826.373177][ T2998] veth0_macvtap: entered promiscuous mode
[  826.377811][ T2998] veth1_macvtap: entered promiscuous mode
[  826.390054][ T2998] batman_adv: batadv0: Interface activated: batadv_slave_0
[  826.397197][ T2998] batman_adv: batadv0: Interface activated: batadv_slave_1
[  826.405328][T32518] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  826.409663][T32518] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  826.413597][T32518] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  826.422219][T32518] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  826.456079][T14403] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  826.459477][T14403] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  826.475788][T24793] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  826.479603][T24793] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  826.487938][ T5890] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  826.495860][ T5890] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  826.502444][ T5890] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  826.506682][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  826.510056][ T5890] usb 5-1: Product: syz
[  826.511877][ T5890] usb 5-1: Manufacturer: syz
[  826.513837][ T5890] usb 5-1: SerialNumber: syz
[  826.635757][ T3030] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  826.737834][ T5890] usb 5-1: Audio class v2/v3 interfaces need an interface association
[  826.743996][ T5890] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[  826.748506][ T5890] usb 5-1: USB disconnect, device number 76
[  826.923729][ T5910] usb 3-1: new full-speed USB device number 31 using dummy_hcd
[  827.085655][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  827.089802][ T5910] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83
[  827.094716][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  827.100016][ T5910] usb 3-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10
[  827.103227][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  827.106610][ T5910] usb 3-1: Product: syz
[  827.108079][ T5910] usb 3-1: Manufacturer: syz
[  827.109668][ T5910] usb 3-1: SerialNumber: syz
[  827.112046][ T5910] usb 3-1: config 0 descriptor??
[  827.115093][ T5910] radioshark2 3-1:0.0: Invalid radioSHARK2 device
[  827.117375][ T5910] radioshark2 3-1:0.0: probe with driver radioshark2 failed with error -22
[  827.120607][ T5910] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  827.212213][T32465] Bluetooth: hci1: command tx timeout
[  827.309693][ T3034] netlink: 'syz.4.11750': attribute type 3 has an invalid length.
[  827.312978][ T3034] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11750'.
[  827.339433][T26562] usb 3-1: USB disconnect, device number 31
[  827.484105][ T3048] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11757'.
[  827.487874][ T3048] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11757'.
[  827.711175][ T3050] loop1: detected capacity change from 0 to 40427
[  827.715774][ T3050] F2FS-fs (loop1): Small segment_count (9 < 1 * 24)
[  827.718553][ T3050] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  827.746952][ T3050] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  827.751709][ T3050] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  827.754414][ T3050] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  828.130936][T21251] syz-executor: attempt to access beyond end of device
[  828.130936][T21251] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  828.136098][T21251] CPU: 0 UID: 0 PID: 21251 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  828.136113][T21251] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  828.136118][T21251] Call Trace:
[  828.136121][T21251]  <TASK>
[  828.136125][T21251]  dump_stack_lvl+0x189/0x250
[  828.136140][T21251]  ? __pfx_dump_stack_lvl+0x10/0x10
[  828.136150][T21251]  ? __pfx_queue_work_on+0x10/0x10
[  828.136158][T21251]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  828.136170][T21251]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  828.136181][T21251]  f2fs_handle_critical_error+0x37c/0x540
[  828.136194][T21251]  f2fs_write_end_io+0x886/0xb60
[  828.136204][T21251]  __submit_merged_bio+0x27a/0x6a0
[  828.136215][T21251]  __submit_merged_write_cond+0x255/0x530
[  828.136225][T21251]  f2fs_write_data_pages+0x261d/0x3000
[  828.136245][T21251]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  828.136273][T21251]  ? __mod_zone_page_state+0xd7/0x140
[  828.136291][T21251]  ? folios_put_refs+0x560/0x640
[  828.136310][T21251]  ? __pfx_folios_put_refs+0x10/0x10
[  828.136322][T21251]  ? rcu_is_watching+0x15/0xb0
[  828.136334][T21251]  ? lru_add+0xa2f/0xd80
[  828.136345][T21251]  ? lru_add+0x198/0xd80
[  828.136358][T21251]  ? folio_batch_move_lru+0x319/0x3a0
[  828.136372][T21251]  ? filemap_get_folios_tag+0xed/0x630
[  828.136407][T21251]  ? rcu_is_watching+0x15/0xb0
[  828.136415][T21251]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  828.136425][T21251]  do_writepages+0x32e/0x550
[  828.136436][T21251]  ? rcu_is_watching+0x15/0xb0
[  828.136444][T21251]  ? do_raw_spin_unlock+0x4d/0x240
[  828.136454][T21251]  filemap_fdatawrite+0x199/0x240
[  828.136465][T21251]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  828.136485][T21251]  ? rcu_is_watching+0x15/0xb0
[  828.136497][T21251]  ? do_raw_spin_unlock+0x4d/0x240
[  828.136511][T21251]  f2fs_sync_dirty_inodes+0x31f/0x830
[  828.136528][T21251]  f2fs_write_checkpoint+0x95a/0x1df0
[  828.136547][T21251]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  828.136573][T21251]  ? rcu_is_watching+0x15/0xb0
[  828.136587][T21251]  ? kill_f2fs_super+0x298/0x6c0
[  828.136600][T21251]  kill_f2fs_super+0x2c3/0x6c0
[  828.136612][T21251]  ? __pfx_kill_f2fs_super+0x10/0x10
[  828.136622][T21251]  ? radix_tree_delete_item+0x2b6/0x400
[  828.136634][T21251]  ? shrinker_free+0x2ce/0x3e0
[  828.136643][T21251]  deactivate_locked_super+0xbc/0x130
[  828.136654][T21251]  cleanup_mnt+0x425/0x4c0
[  828.136664][T21251]  task_work_run+0x1d4/0x260
[  828.136675][T21251]  ? __pfx_task_work_run+0x10/0x10
[  828.136684][T21251]  ? __x64_sys_umount+0x122/0x160
[  828.136693][T21251]  ? __pfx___x64_sys_umount+0x10/0x10
[  828.136703][T21251]  ? rcu_is_watching+0x15/0xb0
[  828.136710][T21251]  exit_to_user_mode_loop+0xec/0x110
[  828.136721][T21251]  do_syscall_64+0x2bd/0x3b0
[  828.136733][T21251]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  828.136740][T21251]  ? exc_page_fault+0x9f/0xf0
[  828.136750][T21251]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  828.136757][T21251] RIP: 0033:0x7f4170b8ff17
[  828.136764][T21251] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  828.136772][T21251] RSP: 002b:00007ffea7795638 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  828.136781][T21251] RAX: 0000000000000000 RBX: 00007f4170c11c05 RCX: 00007f4170b8ff17
[  828.136787][T21251] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffea77956f0
[  828.136791][T21251] RBP: 00007ffea77956f0 R08: 0000000000000000 R09: 0000000000000000
[  828.136796][T21251] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffea7796780
[  828.136802][T21251] R13: 00007f4170c11c05 R14: 00000000000c2f9d R15: 00007ffea77967c0
[  828.136810][T21251]  </TASK>
[  828.136814][T21251] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  828.556354][ T3088] hsr0: entered promiscuous mode
[  828.558338][ T3088] macsec1: entered allmulticast mode
[  828.561159][ T3088] hsr0: entered allmulticast mode
[  828.563114][ T3088] hsr_slave_0: entered allmulticast mode
[  828.565345][ T3088] hsr_slave_1: entered allmulticast mode
[  828.569328][ T3088] hsr0: left allmulticast mode
[  828.569604][ T3082] loop2: detected capacity change from 0 to 32768
[  828.571154][ T3088] hsr_slave_0: left allmulticast mode
[  828.571165][ T3088] hsr_slave_1: left allmulticast mode
[  828.579671][ T3082] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.11772 (3082)
[  828.589957][ T3082] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  828.593956][ T3082] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  828.644525][ T3082] BTRFS info (device loop2): enabling ssd optimizations
[  828.647558][ T3082] BTRFS info (device loop2): enabling free space tree
[  828.679896][ T2998] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  828.752189][ T5910] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[  828.870954][ T3119] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11783'.
[  828.925649][ T5910] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  828.929775][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  828.935218][ T5910] usb 2-1: config 0 descriptor??
[  828.940480][ T5910] gspca_main: spca508-2.14.0 probing 8086:0110
[  829.159839][ T5910] gspca_spca508: reg_read err -32
[  829.184646][ T3133] loop2: detected capacity change from 0 to 32768
[  829.187137][ T3133] XFS: ikeep mount option is deprecated.
[  829.191990][ T3133] XFS (loop2): Invalid superblock magic number
[  829.376901][ T5910] gspca_spca508: reg_read err -71
[  829.380003][ T5910] gspca_spca508: reg_read err -71
[  829.382447][ T5910] gspca_spca508: reg_read err -71
[  829.384975][ T5910] gspca_spca508: reg write: error -71
[  829.387410][ T5910] spca508 2-1:0.0: probe with driver spca508 failed with error -71
[  829.391660][ T5910] usb 2-1: USB disconnect, device number 87
[  829.435841][T32465] Bluetooth: hci1: command tx timeout
[  829.868806][ T3143] tmpfs: Unknown parameter 'no'
[  830.127277][ T3152] loop1: detected capacity change from 0 to 32768
[  830.133014][ T3152] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  830.152122][ T3152] XFS (loop1): Ending clean mount
[  830.154691][ T3152] XFS (loop1): Quotacheck needed: Please wait.
[  830.158825][ T3152] XFS (loop1): Quotacheck: Done.
[  830.171443][T21251] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  830.355721][ T5910] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  830.515553][   T47] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[  830.515677][ T5910] usb 3-1: Using ep0 maxpacket: 32
[  830.521612][ T5910] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  830.525025][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  830.529075][ T5910] usb 3-1: config 0 descriptor??
[  830.533036][ T5910] gspca_main: sunplus-2.14.0 probing 041e:400b
[  830.675941][   T47] usb 2-1: Using ep0 maxpacket: 32
[  830.679568][   T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  830.684122][   T47] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00
[  830.688160][   T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  830.692422][   T47] usb 2-1: config 0 descriptor??
[  831.131673][   T47] belkin 0003:1020:0006.0027: hidraw0: USB HID v0.00 Device [HID 1020:0006] on usb-dummy_hcd.1-1/input0
[  831.231843][ T5911] usb 5-1: new full-speed USB device number 77 using dummy_hcd
[  831.350833][   T47] usb 2-1: USB disconnect, device number 88
[  831.397241][ T5911] usb 5-1: config 0 has an invalid interface number: 251 but max is 0
[  831.400599][ T5911] usb 5-1: config 0 has no interface number 0
[  831.405262][ T5911] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  831.408816][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  831.412004][ T5911] usb 5-1: Product: syz
[  831.414413][ T5911] usb 5-1: Manufacturer: syz
[  831.416335][ T5911] usb 5-1: SerialNumber: syz
[  831.421255][ T5911] usb 5-1: config 0 descriptor??
[  831.659715][T32465] Bluetooth: hci1: command tx timeout
[  831.859615][ T5911] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  831.863595][ T5911] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71
[  831.867476][ T5911] asix 5-1:0.251: probe with driver asix failed with error -5
[  831.871546][ T5911] usb 5-1: USB disconnect, device number 77
[  832.041911][ T5910] gspca_sunplus: reg_w_riv err -71
[  832.044482][ T5910] sunplus 3-1:0.0: probe with driver sunplus failed with error -71
[  832.048957][ T5910] usb 3-1: USB disconnect, device number 32
[  832.463012][ T3229] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  832.465723][ T3229] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  832.568970][ T3234] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  832.578859][ T3234] CIFS mount error: No usable UNC path provided in device string!
[  832.578859][ T3234] 
[  832.582395][ T3234] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  832.803463][ T5910] usb 5-1: new high-speed USB device number 78 using dummy_hcd
[  832.830828][ T3238] loop2: detected capacity change from 0 to 32768
[  832.833804][ T3238] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.11832 (3238)
[  832.839865][ T3238] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  832.843934][ T3238] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  832.858044][ T3238] BTRFS info (device loop2): enabling ssd optimizations
[  832.860475][ T3238] BTRFS info (device loop2): enabling free space tree
[  832.882569][ T2998] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  832.987088][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  832.991891][ T5910] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  832.997449][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  833.001790][ T5910] usb 5-1: config 0 descriptor??
[  833.438210][ T5910] keytouch 0003:0926:3333.0028: fixing up Keytouch IEC report descriptor
[  833.442266][ T5910] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0028/input/input46
[  833.525490][ T5910] keytouch 0003:0926:3333.0028: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[  833.534317][ T3286] loop2: detected capacity change from 0 to 32768
[  833.537827][ T3286] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.11846 (3286)
[  833.544733][ T3286] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  833.548685][ T3286] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  833.596850][ T3286] BTRFS info (device loop2): enabling ssd optimizations
[  833.599878][ T3286] BTRFS info (device loop2): enabling free space tree
[  833.621991][ T2998] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  833.637299][   T47] usb 2-1: new full-speed USB device number 89 using dummy_hcd
[  833.814692][   T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  833.821226][   T47] usb 2-1: New USB device found, idVendor=056a, idProduct=032b, bcdDevice= 0.00
[  833.824840][   T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  833.830918][   T47] usb 2-1: config 0 descriptor??
[  833.883432][T32465] Bluetooth: hci1: command tx timeout
[  833.973669][ T5910] usb 5-1: USB disconnect, device number 78
[  834.019791][ T3319] loop2: detected capacity change from 0 to 32768
[  834.022863][ T3319] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.11855 (3319)
[  834.028366][ T3319] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  834.032108][ T3319] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  834.049465][ T3319] BTRFS info (device loop2): enabling ssd optimizations
[  834.052204][ T3319] BTRFS info (device loop2): enabling free space tree
[  834.078531][ T2998] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  834.391356][T32465] Bluetooth: hci1: Unable to find connection for big 0x00
[  834.497251][ T5910] usb 2-1: USB disconnect, device number 89
[  834.732580][   T33] audit: type=1326 audit(2000525145.414:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3363 comm="syz.4.11867" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a538ebe9 code=0x7ff00000
[  834.741411][   T33] audit: type=1326 audit(2000525145.414:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3363 comm="syz.4.11867" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a538ebe9 code=0x7ff00000
[  834.749719][   T33] audit: type=1326 audit(2000525145.414:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3363 comm="syz.4.11867" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a538ebe9 code=0x7ff00000
[  834.758561][   T33] audit: type=1326 audit(2000525145.414:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3363 comm="syz.4.11867" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a538ebe9 code=0x7ff00000
[  834.767408][   T33] audit: type=1326 audit(2000525145.414:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3363 comm="syz.4.11867" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a538ebe9 code=0x7ff00000
[  834.775410][   T33] audit: type=1326 audit(2000525145.414:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3363 comm="syz.4.11867" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a538ebe9 code=0x7ff00000
[  834.783885][   T33] audit: type=1326 audit(2000525145.414:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3363 comm="syz.4.11867" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a538ebe9 code=0x7ff00000
[  834.793342][   T33] audit: type=1326 audit(2000525145.414:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3363 comm="syz.4.11867" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a538ebe9 code=0x7ff00000
[  834.802909][   T33] audit: type=1326 audit(2000525145.414:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3363 comm="syz.4.11867" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a538ebe9 code=0x7ff00000
[  834.811984][   T33] audit: type=1326 audit(2000525145.414:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3363 comm="syz.4.11867" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a538ebe9 code=0x7ff00000
[  834.939530][ T3372] openvswitch: netlink: Flow key attribute not present in set flow.
[  834.959458][ T3374] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.11872'.
[  835.307296][ T3409] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  835.380601][ T3401] loop2: detected capacity change from 0 to 32768
[  835.386375][ T3414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11891'.
[  835.404198][ T3401] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  835.430492][ T3401] XFS (loop2): Ending clean mount
[  835.436964][ T3401] XFS (loop2): Quotacheck needed: Please wait.
[  835.443129][ T3401] XFS (loop2): Quotacheck: Done.
[  835.833879][ T3433] loop1: detected capacity change from 0 to 4096
[  835.851665][ T3433] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  835.873322][ T3433] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #15: comm syz.1.11896: corrupted inode contents
[  835.878354][ T3433] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #15: comm syz.1.11896: mark_inode_dirty error
[  835.883985][ T3433] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #15: comm syz.1.11896: corrupted inode contents
[  835.889089][ T3433] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #15: comm syz.1.11896: mark_inode_dirty error
[  835.894792][ T3433] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #15: comm syz.1.11896: corrupted inode contents
[  835.899065][ T3433] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #15: comm syz.1.11896: mark_inode_dirty error
[  835.904667][ T3433] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #15: comm syz.1.11896: corrupted inode contents
[  835.909904][ T3433] EXT4-fs error (device loop1): ext4_truncate:4666: inode #15: comm syz.1.11896: mark_inode_dirty error
[  835.913935][ T3433] EXT4-fs error (device loop1) in ext4_setattr:6071: Corrupt filesystem
[  835.935387][ T3433] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #15: comm syz.1.11896: corrupted inode contents
[  835.989257][ T5890] usb 5-1: new high-speed USB device number 79 using dummy_hcd
[  835.998905][T21251] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  836.183746][ T5890] usb 5-1: Using ep0 maxpacket: 32
[  836.188978][ T5890] usb 5-1: config 0 has an invalid interface number: 136 but max is 0
[  836.191583][ T5890] usb 5-1: config 0 has no interface number 0
[  836.197849][ T5890] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=ee.df
[  836.204911][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  836.212062][ T5890] usb 5-1: Product: syz
[  836.214490][ T5890] usb 5-1: Manufacturer: syz
[  836.216405][ T5890] usb 5-1: SerialNumber: syz
[  836.219630][ T5890] usb 5-1: config 0 descriptor??
[  836.227265][ T5890] usb_ehset_test 5-1:0.136: probe with driver usb_ehset_test failed with error -32
[  836.447774][ T5911] usb 5-1: USB disconnect, device number 79
[  836.481006][   T47] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[  836.639580][ T2998] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  836.642843][   T47] usb 2-1: config 0 has an invalid interface number: 69 but max is 0
[  836.646636][   T47] usb 2-1: config 0 has no interface number 0
[  836.649527][   T47] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  836.654262][   T47] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  836.674606][   T47] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  836.678348][   T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  836.681562][   T47] usb 2-1: Product: syz
[  836.683270][   T47] usb 2-1: Manufacturer: syz
[  836.686606][   T47] usb 2-1: SerialNumber: syz
[  836.689792][   T47] usb 2-1: config 0 descriptor??
[  836.697602][ T3441] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  836.701589][   T47] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  836.707241][   T47] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  836.733534][ T3443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11900'.
[  836.789095][ T3447] No control pipe specified
[  836.815671][ T3449] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  837.074756][ T3481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11914'.
[  837.078928][ T3481] netlink: 'syz.4.11914': attribute type 5 has an invalid length.
[  837.084552][ T3481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11914'.
[  837.146594][   T47] usb 2-1: USB disconnect, device number 90
[  837.150594][   T47] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  837.162836][   T47] cyberjack 2-1:0.69: device disconnected
[  837.194503][ T3496] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  837.204101][ T5911] lo speed is unknown, defaulting to 1000
[  837.206110][ T5911] 3yz0: Port: 1 Link DOWN
[  837.234070][ T3500] loop2: detected capacity change from 0 to 256
[  837.237618][ T3500] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  837.242238][ T3500] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  837.249030][ T3500] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  837.702341][ T3530] Option '    ' to dns_resolver key: bad/missing value
[  837.977611][ T5911] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[  838.035581][ T3546] bridge0: entered promiscuous mode
[  838.037470][ T3546] vlan2: entered promiscuous mode
[  838.140402][ T5911] usb 2-1: config 0 has an invalid interface number: 194 but max is 0
[  838.148638][ T5911] usb 2-1: config 0 has no interface number 0
[  838.154400][ T5911] usb 2-1: New USB device found, idVendor=19d2, idProduct=5755, bcdDevice=df.b8
[  838.158144][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  838.162414][ T5911] usb 2-1: Product: syz
[  838.164199][ T5911] usb 2-1: Manufacturer: syz
[  838.166136][ T5911] usb 2-1: SerialNumber: syz
[  838.169050][ T5911] usb 2-1: config 0 descriptor??
[  838.173042][ T5911] usb 2-1: bad CDC descriptors
[  838.212322][ T3554] cgroup: Invalid name
[  838.296310][ T3564] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  838.353786][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  838.356427][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  838.394857][ T5910] usb 2-1: USB disconnect, device number 91
[  838.701165][ T3581] fuse: Bad value for 'fd'
[  839.989347][ T3612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11975'.
[  840.000276][ T3612] netlink: 'syz.2.11975': attribute type 14 has an invalid length.
[  840.026552][ T5714] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  840.026691][ T3612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11975'.
[  840.043696][ T3612] netlink: 'syz.2.11975': attribute type 14 has an invalid length.
[  840.072721][ T5714] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  840.105697][ T5714] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  840.109530][ T5714] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  840.309670][ T3621] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11980'.
[  840.476023][ T3625] loop1: detected capacity change from 0 to 32768
[  840.482388][ T3625] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  840.503643][ T3625] XFS (loop1): Ending clean mount
[  840.506728][ T3625] XFS (loop1): Quotacheck needed: Please wait.
[  840.511792][ T3625] XFS (loop1): Quotacheck: Done.
[  840.531505][T21251] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  840.819536][ T3649] loop1: detected capacity change from 0 to 256
[  840.823826][ T3649] FAT-fs (loop1): bogus sectors per cluster 223
[  840.826566][ T3649] FAT-fs (loop1): Can't find a valid FAT filesystem
[  840.858152][ T3651] loop1: detected capacity change from 0 to 1024
[  840.861447][ T3651] EXT4-fs: Ignoring removed nobh option
[  840.863830][ T3651] EXT4-fs: Ignoring removed bh option
[  840.877950][ T3651] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  840.911116][T21251] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  841.032374][ T3660] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  842.264757][   T47] usb 5-1: new high-speed USB device number 80 using dummy_hcd
[  842.425260][   T47] usb 5-1: Using ep0 maxpacket: 16
[  842.430840][   T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  842.452003][   T47] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  842.456469][   T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  842.459962][   T47] usb 5-1: Product: syz
[  842.461700][   T47] usb 5-1: Manufacturer: syz
[  842.463924][   T47] usb 5-1: SerialNumber: syz
[  842.469959][   T47] usb 5-1: config 0 descriptor??
[  842.695546][   T47] usb 5-1: USB disconnect, device number 80
[  843.489615][ T3735] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12025'.
[  843.638620][ T3743] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12029'.
[  843.753549][   T33] kauditd_printk_skb: 306 callbacks suppressed
[  843.753567][   T33] audit: type=1326 audit(2000525153.852:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3754 comm="syz.1.12034" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4170b8ebe9 code=0x7ffc0000
[  843.763670][   T33] audit: type=1326 audit(2000525153.852:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3754 comm="syz.1.12034" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4170b8ebe9 code=0x7ffc0000
[  843.774259][   T33] audit: type=1326 audit(2000525153.861:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3754 comm="syz.1.12034" exe="/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f4170b8ebe9 code=0x7ffc0000
[  843.789497][   T33] audit: type=1326 audit(2000525153.861:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3754 comm="syz.1.12034" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4170b8ebe9 code=0x7ffc0000
[  843.882298][ T3769] loop1: detected capacity change from 0 to 1024
[  843.907296][T24793] hfsplus: b-tree write err: -5, ino 4
[  844.067774][ T3788] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  844.178198][ T5910] usb 2-1: new high-speed USB device number 92 using dummy_hcd
[  844.304405][ T3794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12053'.
[  844.345139][ T5910] usb 2-1: config 0 has an invalid interface number: 9 but max is 0
[  844.352990][ T5910] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  844.357987][ T5910] usb 2-1: config 0 has no interface number 0
[  844.366601][ T5910] usb 2-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=45.e8
[  844.369574][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  844.376836][ T5910] usb 2-1: config 0 descriptor??
[  844.382136][ T5910] rndis_host 2-1:0.9: More than one union descriptor, skipping ...
[  844.384899][ T5910] usb 2-1: bad CDC descriptors
[  844.386687][ T5910] cdc_acm 2-1:0.9: More than one union descriptor, skipping ...
[  844.471712][ T3811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12061'.
[  844.475565][ T3811] netlink: 'syz.2.12061': attribute type 21 has an invalid length.
[  844.596002][ T5910] usb 2-1: USB disconnect, device number 92
[  845.224714][ T3837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12072'.
[  845.277128][ T3847] input: syz0 as /devices/virtual/input/input47
[  845.280472][ T5911] tipc: Resetting bearer <eth:syzkaller0>
[  845.839037][ T3857] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  845.841945][ T3857] overlayfs: failed to set xattr on upper
[  845.844268][ T3857] overlayfs: ...falling back to redirect_dir=nofollow.
[  845.846964][ T3857] overlayfs: ...falling back to index=off.
[  845.849166][ T3857] overlayfs: ...falling back to uuid=null.
[  846.227568][ T3863] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  846.256838][ T3868] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12083'.
[  846.375390][ T3881] loop1: detected capacity change from 0 to 1024
[  846.378759][ T3881] EXT4-fs: Ignoring removed orlov option
[  846.382996][ T3881] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  846.405375][ T3881] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  846.414696][ T3881] EXT4-fs error (device loop1): ext4_check_all_de:659: inode #12: block 7: comm syz.1.12090: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0
[  846.440725][T21251] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  846.499133][ T3886] loop1: detected capacity change from 0 to 4096
[  846.755627][ T3918] netlink: 'syz.4.12107': attribute type 10 has an invalid length.
[  846.759585][ T3918] netdevsim netdevsim4 netdevsim0: left allmulticast mode
[  846.776813][ T3906] loop1: detected capacity change from 0 to 32768
[  846.776887][ T3918] bridge0: port 3(netdevsim0) entered disabled state
[  846.780434][ T3906] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.12101 (3906)
[  846.791960][ T3906] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  846.795873][ T3906] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  846.800294][ T3906] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  846.828131][ T3906] BTRFS info (device loop1): rebuilding free space tree
[  846.834320][ T3906] BTRFS info (device loop1): disabling free space tree
[  846.838158][ T3906] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  846.842694][ T3906] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  846.847245][ T3906] BTRFS info (device loop1): allowing degraded mounts
[  846.849587][ T3906] BTRFS info (device loop1): enabling ssd optimizations
[  846.852614][ T3906] BTRFS info (device loop1): enabling disk space caching
[  846.856003][ T3906] BTRFS info (device loop1): force clearing of disk cache
[  846.858735][ T3906] BTRFS info (device loop1): use zlib compression, level 3
[  846.865987][T32465] Bluetooth: unknown link type 97
[  846.866657][ T3906] BTRFS info (device loop1): balance: start -f -sprofiles=raid0|dup|0x800,usage=47244704239,drange=5..0,vrange=288230376151711744..1,limit=471..128,stripes=0..0
[  846.868211][T32465] Bluetooth: hci1: connection err: -111
[  846.874562][ T3906] BTRFS info (device loop1): balance: ended with status: 0
[  846.905585][T21251] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  847.027261][ T3956] netlink: 64 bytes leftover after parsing attributes in process `syz.1.12116'.
[  847.086853][ T3964] binder: 3963:3964 unknown command 0
[  847.089235][ T3964] binder: 3963:3964 ioctl c0306201 200000000080 returned -22
[  847.481577][T32465] Bluetooth: hci1: command 0x0c1a tx timeout
[  847.481751][ T5911] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[  847.487021][ T5911] Bluetooth: hci1: Error when powering off device on rfkill (-110)
[  848.245772][   T33] audit: type=1326 audit(2000525158.052:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3998 comm="syz.2.12134" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe6df18ebe9 code=0x0
[  848.426672][ T4008] loop1: detected capacity change from 0 to 32768
[  848.429446][ T4008] XFS: noikeep mount option is deprecated.
[  848.434077][ T4008] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  848.444145][ T4008] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  848.451261][ T4008] XFS (loop1): Starting recovery (logdev: internal)
[  848.457236][ T4008] XFS (loop1): Ending recovery (logdev: internal)
[  848.473999][T21251] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  848.634227][ T4028] loop1: detected capacity change from 0 to 1024
[  848.637077][ T4028] EXT4-fs: Ignoring removed nomblk_io_submit option
[  848.650617][ T4028] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  848.663859][T21251] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  848.967724][ T5910] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[  849.125402][ T4044] netlink: set zone limit has 4 unknown bytes
[  849.130674][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  849.134851][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  849.138244][ T5910] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  849.143847][ T5910] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  849.147628][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  849.152999][ T5910] usb 2-1: config 0 descriptor??
[  849.588880][ T5910] plantronics 0003:047F:FFFF.002A: reserved main item tag 0xd
[  849.593035][ T5910] plantronics 0003:047F:FFFF.002A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  849.779082][ T4054] netlink: 'syz.4.12154': attribute type 1 has an invalid length.
[  849.782947][ T4054] netlink: 'syz.4.12154': attribute type 1 has an invalid length.
[  849.819650][ T5910] usb 2-1: USB disconnect, device number 93
[  850.242343][ T4085] bridge0: port 3(macsec1) entered blocking state
[  850.245225][ T4085] bridge0: port 3(macsec1) entered disabled state
[  850.248215][ T4085] macsec1: entered allmulticast mode
[  850.255068][ T4085] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  850.258967][ T4085] macsec1: entered promiscuous mode
[  850.262374][ T4085] bridge0: port 3(macsec1) entered blocking state
[  850.265146][ T4085] bridge0: port 3(macsec1) entered forwarding state
[  850.455407][ T4098] loop1: detected capacity change from 0 to 256
[  850.571272][ T5911] usb 5-1: new high-speed USB device number 81 using dummy_hcd
[  850.679442][ T4124] veth2: entered promiscuous mode
[  850.681457][ T4124] veth2: entered allmulticast mode
[  850.745617][ T5911] usb 5-1: config index 0 descriptor too short (expected 23569, got 27)
[  850.878656][ T5911] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x55, changing to 0x5
[  850.882561][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  850.887206][ T5911] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  850.889971][ T5911] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  850.894110][ T5911] usb 5-1: Manufacturer: syz
[  850.897894][ T5911] usb 5-1: config 0 descriptor??
[  850.901693][ T5911] igorplugusb 5-1:0.0: endpoint incorrect
[  851.107408][ T4138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12191'.
[  851.110378][ T4138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12191'.
[  851.117293][ T5911] usb 5-1: USB disconnect, device number 81
[  851.615380][ T4146] loop1: detected capacity change from 0 to 1024
[  851.623628][   T33] audit: type=1800 audit(2000525161.213:1243): pid=4146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.12195" name="file1" dev="loop1" ino=20 res=0 errno=0
[  851.655937][ T4148] loop1: detected capacity change from 0 to 128
[  851.658857][ T4148] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  851.670353][ T4148] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  852.421397][ T4161] netlink: 'syz.2.12201': attribute type 2 has an invalid length.
[  852.656691][ T4155] loop1: detected capacity change from 0 to 40427
[  852.660316][ T4155] F2FS-fs (loop1): build fault injection rate: 14
[  852.662342][ T4155] F2FS-fs (loop1): build fault injection type: 0x77fd1
[  852.667566][ T4155] F2FS-fs (loop1): invalid crc value
[  852.700846][ T4155] F2FS-fs (loop1): inject kmalloc in f2fs_kmalloc of f2fs_fill_super+0x4429/0x6ff0
[  852.704311][ T4155] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-12)
[  853.533533][ T4209] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  853.876721][ T4241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12238'.
[  854.244731][ T4269] netlink: 27 bytes leftover after parsing attributes in process `syz.2.12251'.
[  855.074050][ T4327] loop1: detected capacity change from 0 to 164
[  855.093734][ T4327] rock: corrupted directory entry. extent=32, offset=131072, size=237
[  856.408218][T26562] usb 2-1: new high-speed USB device number 94 using dummy_hcd
[  856.486819][ T4405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12314'.
[  856.571055][T26562] usb 2-1: config 48 interface 0 altsetting 98 bulk endpoint 0x4 has invalid maxpacket 1024
[  856.575429][T26562] usb 2-1: config 48 interface 0 altsetting 98 bulk endpoint 0x9 has invalid maxpacket 1024
[  856.579928][T26562] usb 2-1: config 48 interface 0 has no altsetting 0
[  856.585735][T26562] usb 2-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f
[  856.589025][T26562] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  856.592529][T26562] usb 2-1: Product: syz
[  856.594851][T26562] usb 2-1: Manufacturer: syz
[  856.598042][T26562] usb 2-1: SerialNumber: syz
[  856.606295][ T4388] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  856.609302][ T4388] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  856.838896][T26562] usb 2-1: USB disconnect, device number 94
[  857.081726][ T5911] usb 5-1: new high-speed USB device number 82 using dummy_hcd
[  857.242226][ T5911] usb 5-1: Using ep0 maxpacket: 16
[  857.246134][ T5911] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  857.250145][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  857.254835][ T5911] usb 5-1: config 0 descriptor??
[  857.258824][ T5911] gspca_main: sonixj-2.14.0 probing 0471:0327
[  857.648518][ T5910] usb 2-1: new full-speed USB device number 95 using dummy_hcd
[  857.822806][ T5910] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  857.826415][ T5910] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  857.831230][ T5910] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  857.834374][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  857.838433][ T5910] usbtmc 2-1:16.0: bulk endpoints not found
[  858.057715][ T5910] usb 2-1: USB disconnect, device number 95
[  858.085355][ T4439] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.12329'.
[  858.184839][ T4447] vcan0: tx drop: invalid da for name 0x0000000000000001
[  858.331214][ T5911] gspca_sonixj: reg_w1 err -71
[  858.354143][ T5911] sonixj 5-1:0.0: probe with driver sonixj failed with error -71
[  858.358015][ T5911] usb 5-1: USB disconnect, device number 82
[  858.725770][ T4463] loop1: detected capacity change from 0 to 256
[  858.731175][ T4463] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  858.734927][ T4463] FAT-fs (loop1): bogus number of directory entries (1)
[  858.737840][ T4463] FAT-fs (loop1): Can't find a valid FAT filesystem
[  858.794065][ T4467] loop1: detected capacity change from 0 to 2048
[  858.797705][ T4467] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  858.903187][ T4478] bond0: Error: Cannot enslave bond to itself.
[  858.926971][ T4482] loop1: detected capacity change from 0 to 16
[  858.929941][ T4482] erofs (device loop1): mounted with root inode @ nid 36.
[  858.936266][ T6334] erofs (device loop1): failed to decompress -26 in[46, 0] out[9000]
[  858.939623][ T4482] erofs (device loop1): failed to decompress -26 in[46, 4050] out[8192]
[  858.946607][ T4482] erofs (device loop1): read error -117 @ 1 of nid 89
[  858.950280][   T33] audit: type=1800 audit(2000525168.060:1244): pid=4482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.12350" name="file2" dev="loop1" ino=89 res=0 errno=0
[  859.022033][ T4494] ------------[ cut here ]------------
[  859.024348][ T4494] RTNL: assertion failed at net/core/dev.c (9330)
[  859.027449][ T4494] WARNING: CPU: 0 PID: 4494 at net/core/dev.c:9330 __dev_set_promiscuity+0x569/0x740
[  859.031284][ T4494] Modules linked in:
[  859.033130][ T4494] CPU: 0 UID: 0 PID: 4494 Comm: syz.4.12356 Not tainted syzkaller #0 PREEMPT(full) 
[  859.038110][ T4494] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  859.042295][ T4494] RIP: 0010:__dev_set_promiscuity+0x569/0x740
[  859.044801][ T4494] Code: ed fb ff ff e8 48 ef 5b f8 c6 05 32 c1 29 06 01 90 48 c7 c7 00 14 94 8c 48 c7 c6 00 13 94 8c ba 72 24 00 00 e8 28 8e 1f f8 90 <0f> 0b 90 90 e9 06 fb ff ff e8 19 ef 5b f8 48 8b 7c 24 08 48 c7 c6
[  859.052615][ T4494] RSP: 0018:ffffc900075b7680 EFLAGS: 00010246
[  859.055148][ T4494] RAX: 6b0d6a642ed5c500 RBX: ffff888044f54000 RCX: 0000000000080000
[  859.058433][ T4494] RDX: ffffc90003dd1000 RSI: 0000000000000ce4 RDI: 0000000000000ce5
[  859.061856][ T4494] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
[  859.065001][ T4494] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: 00000000ffffffff
[  859.068319][ T4494] R13: 0000000000000000 R14: ffff888044f540b0 R15: 1ffff110089ea816
[  859.071723][ T4494] FS:  00007f69a61b06c0(0000) GS:ffff8880b861b000(0000) knlGS:0000000000000000
[  859.075422][ T4494] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  859.078160][ T4494] CR2: 000055557da84808 CR3: 00000000389e2000 CR4: 00000000000006f0
[  859.081760][ T4494] Call Trace:
[  859.083174][ T4494]  <TASK>
[  859.084411][ T4494]  ? __hw_addr_add_ex+0x3c5/0x770
[  859.086543][ T4494]  __dev_set_rx_mode+0x17c/0x260
[  859.088660][ T4494]  dev_mc_add+0xc8/0x120
[  859.090353][ T4494]  igmp6_group_added+0x225/0x800
[  859.092495][ T4494]  ? __pfx_igmp6_group_added+0x10/0x10
[  859.094831][ T4494]  ? mld_del_delrec+0x1af/0xcd0
[  859.096816][ T4494]  ? __ipv6_dev_mc_inc+0x548/0xa50
[  859.098876][ T4494]  __ipv6_dev_mc_inc+0x897/0xa50
[  859.100980][ T4494]  addrconf_join_solict+0xf8/0x170
[  859.103153][ T4494]  ? __pfx_addrconf_join_solict+0x10/0x10
[  859.105565][ T4494]  ? do_raw_spin_unlock+0x4d/0x240
[  859.107642][ T4494]  __ipv6_dev_ac_inc+0x87b/0xaf0
[  859.109597][ T4494]  ipv6_sock_ac_join+0x6ef/0x8c0
[  859.111634][ T4494]  ? __pfx_ipv6_sock_ac_join+0x10/0x10
[  859.113906][ T4494]  ? _copy_from_user+0x94/0xb0
[  859.115843][ T4494]  do_ipv6_setsockopt+0x1e90/0x2eb0
[  859.117893][ T4494]  ? __pfx_do_ipv6_setsockopt+0x10/0x10
[  859.120128][ T4494]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  859.122423][ T4494]  ? futex_wait+0x285/0x360
[  859.124383][ T4494]  ? __pfx_futex_wait+0x10/0x10
[  859.126334][ T4494]  ? __pfx___might_resched+0x10/0x10
[  859.128463][ T4494]  ? file_init_path+0x3b/0x590
[  859.130400][ T4494]  ? do_futex+0x333/0x420
[  859.132174][ T4494]  ? aa_sk_perm+0x81e/0x950
[  859.134433][ T4494]  ? rcu_is_watching+0x15/0xb0
[  859.136422][ T4494]  ? __pfx_aa_sk_perm+0x10/0x10
[  859.138392][ T4494]  ? lock_release+0x4b/0x3e0
[  859.140383][ T4494]  ? __se_sys_futex+0x36f/0x400
[  859.142397][ T4494]  ? aa_sock_opt_perm+0xff/0x1b0
[  859.144436][ T4494]  ipv6_setsockopt+0x59/0x170
[  859.146405][ T4494]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  859.148785][ T4494]  do_sock_setsockopt+0x17c/0x1b0
[  859.150876][ T4494]  __x64_sys_setsockopt+0x13f/0x1b0
[  859.153055][ T4494]  do_syscall_64+0xfa/0x3b0
[  859.154975][ T4494]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  859.157573][ T4494]  ? exc_page_fault+0x9f/0xf0
[  859.159603][ T4494]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  859.162049][ T4494] RIP: 0033:0x7f69a538ebe9
[  859.163924][ T4494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  859.171657][ T4494] RSP: 002b:00007f69a61b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  859.175039][ T4494] RAX: ffffffffffffffda RBX: 00007f69a55b5fa0 RCX: 00007f69a538ebe9
[  859.178346][ T4494] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000004
[  859.181624][ T4494] RBP: 00007f69a5411e19 R08: 0000000000000014 R09: 0000000000000000
[  859.184874][ T4494] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000
[  859.188216][ T4494] R13: 00007f69a55b6038 R14: 00007f69a55b5fa0 R15: 00007ffe55c8b358
[  859.191499][ T4494]  </TASK>
[  859.192798][ T4494] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  859.195718][ T4494] CPU: 0 UID: 0 PID: 4494 Comm: syz.4.12356 Not tainted syzkaller #0 PREEMPT(full) 
[  859.199558][ T4494] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  859.203551][ T4494] Call Trace:
[  859.204923][ T4494]  <TASK>
[  859.206149][ T4494]  dump_stack_lvl+0x99/0x250
[  859.208035][ T4494]  ? __asan_memcpy+0x40/0x70
[  859.209880][ T4494]  ? __pfx_dump_stack_lvl+0x10/0x10
[  859.212015][ T4494]  ? __pfx__printk+0x10/0x10
[  859.213961][ T4494]  vpanic+0x281/0x750
[  859.215620][ T4494]  ? __pfx__printk+0x10/0x10
[  859.217549][ T4494]  ? __pfx_vpanic+0x10/0x10
[  859.219353][ T4494]  ? is_bpf_text_address+0x26/0x2b0
[  859.221502][ T4494]  panic+0xb9/0xc0
[  859.223060][ T4494]  ? __pfx_panic+0x10/0x10
[  859.224866][ T4494]  __warn+0x31b/0x4b0
[  859.226492][ T4494]  ? __dev_set_promiscuity+0x569/0x740
[  859.228694][ T4494]  ? __dev_set_promiscuity+0x569/0x740
[  859.230964][ T4494]  report_bug+0x2be/0x4f0
[  859.232767][ T4494]  ? __dev_set_promiscuity+0x569/0x740
[  859.235009][ T4494]  ? __dev_set_promiscuity+0x569/0x740
[  859.237260][ T4494]  ? __dev_set_promiscuity+0x56b/0x740
[  859.239429][ T4494]  handle_bug+0x84/0x160
[  859.241172][ T4494]  exc_invalid_op+0x1a/0x50
[  859.243102][ T4494]  asm_exc_invalid_op+0x1a/0x20
[  859.245145][ T4494] RIP: 0010:__dev_set_promiscuity+0x569/0x740
[  859.247658][ T4494] Code: ed fb ff ff e8 48 ef 5b f8 c6 05 32 c1 29 06 01 90 48 c7 c7 00 14 94 8c 48 c7 c6 00 13 94 8c ba 72 24 00 00 e8 28 8e 1f f8 90 <0f> 0b 90 90 e9 06 fb ff ff e8 19 ef 5b f8 48 8b 7c 24 08 48 c7 c6
[  859.255127][ T4494] RSP: 0018:ffffc900075b7680 EFLAGS: 00010246
[  859.257502][ T4494] RAX: 6b0d6a642ed5c500 RBX: ffff888044f54000 RCX: 0000000000080000
[  859.260587][ T4494] RDX: ffffc90003dd1000 RSI: 0000000000000ce4 RDI: 0000000000000ce5
[  859.263726][ T4494] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
[  859.266732][ T4494] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: 00000000ffffffff
[  859.269751][ T4494] R13: 0000000000000000 R14: ffff888044f540b0 R15: 1ffff110089ea816
[  859.272916][ T4494]  ? __hw_addr_add_ex+0x3c5/0x770
[  859.274912][ T4494]  __dev_set_rx_mode+0x17c/0x260
[  859.276858][ T4494]  dev_mc_add+0xc8/0x120
[  859.278531][ T4494]  igmp6_group_added+0x225/0x800
[  859.280479][ T4494]  ? __pfx_igmp6_group_added+0x10/0x10
[  859.282650][ T4494]  ? mld_del_delrec+0x1af/0xcd0
[  859.284589][ T4494]  ? __ipv6_dev_mc_inc+0x548/0xa50
[  859.286599][ T4494]  __ipv6_dev_mc_inc+0x897/0xa50
[  859.288617][ T4494]  addrconf_join_solict+0xf8/0x170
[  859.290730][ T4494]  ? __pfx_addrconf_join_solict+0x10/0x10
[  859.293003][ T4494]  ? do_raw_spin_unlock+0x4d/0x240
[  859.295050][ T4494]  __ipv6_dev_ac_inc+0x87b/0xaf0
[  859.297053][ T4494]  ipv6_sock_ac_join+0x6ef/0x8c0
[  859.298996][ T4494]  ? __pfx_ipv6_sock_ac_join+0x10/0x10
[  859.301164][ T4494]  ? _copy_from_user+0x94/0xb0
[  859.303047][ T4494]  do_ipv6_setsockopt+0x1e90/0x2eb0
[  859.305140][ T4494]  ? __pfx_do_ipv6_setsockopt+0x10/0x10
[  859.307301][ T4494]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  859.309387][ T4494]  ? futex_wait+0x285/0x360
[  859.311244][ T4494]  ? __pfx_futex_wait+0x10/0x10
[  859.313163][ T4494]  ? __pfx___might_resched+0x10/0x10
[  859.315225][ T4494]  ? file_init_path+0x3b/0x590
[  859.317102][ T4494]  ? do_futex+0x333/0x420
[  859.318811][ T4494]  ? aa_sk_perm+0x81e/0x950
[  859.320605][ T4494]  ? rcu_is_watching+0x15/0xb0
[  859.322481][ T4494]  ? __pfx_aa_sk_perm+0x10/0x10
[  859.324398][ T4494]  ? lock_release+0x4b/0x3e0
[  859.326190][ T4494]  ? __se_sys_futex+0x36f/0x400
[  859.328119][ T4494]  ? aa_sock_opt_perm+0xff/0x1b0
[  859.330143][ T4494]  ipv6_setsockopt+0x59/0x170
[  859.331953][ T4494]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  859.334278][ T4494]  do_sock_setsockopt+0x17c/0x1b0
[  859.336289][ T4494]  __x64_sys_setsockopt+0x13f/0x1b0
[  859.338348][ T4494]  do_syscall_64+0xfa/0x3b0
[  859.340181][ T4494]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  859.342588][ T4494]  ? exc_page_fault+0x9f/0xf0
[  859.344516][ T4494]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  859.346843][ T4494] RIP: 0033:0x7f69a538ebe9
[  859.348621][ T4494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  859.356124][ T4494] RSP: 002b:00007f69a61b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  859.359387][ T4494] RAX: ffffffffffffffda RBX: 00007f69a55b5fa0 RCX: 00007f69a538ebe9
[  859.362537][ T4494] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000004
[  859.365628][ T4494] RBP: 00007f69a5411e19 R08: 0000000000000014 R09: 0000000000000000
[  859.368743][ T4494] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000
[  859.371895][ T4494] R13: 00007f69a55b6038 R14: 00007f69a55b5fa0 R15: 00007ffe55c8b358
[  859.375026][ T4494]  </TASK>
[  859.377042][ T4494] Kernel Offset: disabled
[  859.378710][ T4494] Rebooting in 86400 seconds..

VM DIAGNOSIS:
17:47:57  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000e3d7 RDI=000000000000e3d8 RBP=00000000000003f8 RSP=ffffc900075b6e30
R8 =ffff8881076d0237 R9 =1ffff11020eda046 R10=dffffc0000000000 R11=ffffffff854f1d00
R12=dffffc0000000000 R13=ffffffff99afa8e3 R14=ffffffff99def3e0 R15=0000000000000000
RIP=ffffffff854f1d7c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f69a61b06c0 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055557da84808 CR3=00000000389e2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f69a5587498 00007f69a5587470 XMM03=00007f69a55874a8 00007f69a55874a0
XMM04=00007f69a60ed100 00007f69a5587460 XMM05=00007f69a5587478 00007f69a55874c0
XMM06=00007f69a55874b8 00007f69a55874b0 XMM07=00007f69a55874a8 00007f69a55874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f69a5412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=c9b463a9f5b09300 RBX=ffffffff819683b8 RCX=c9b463a9f5b09300 RDX=0000000000000001
RSI=ffffffff8be33660 RDI=ffffffff819683b8 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa38330 R13=0000000000000001 R14=0000000000000001 R15=1ffff11020007000
RIP=ffffffff8b7973f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055da566127e8 CR3=000000010f718000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
