last executing test programs:

5.543836202s ago: executing program 4 (id=4795):
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x40}, 0x38)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000580)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x10000000, 0xfffffffe}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @loopback}, {0x2, 0x4e23, @local}, {0x2, 0x4e22, @remote}, 0x1b5, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)='tunl0\x00', 0xfffffffffffffffb, 0x0, 0x4})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0xfffffffffffffff5, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x5}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xfffffffffffffea4, 0x2, [@TCA_FQ_PLIMIT={0x0, 0x1, 0xffffffff}, @TCA_FQ_FLOW_DEFAULT_RATE={0x0, 0x6, 0x40004}, @TCA_FQ_TIMER_SLACK={0x0, 0xd, 0x2b3}]}}]}, 0x5f}}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec90964", 0x3e}, {0x0}, {&(0x7f0000001400)="9af390e2aadb61017e08249a2485ad46a590a90910858e1ceefc66db2ed8f32bf6be0e2f94e7e4db6454393a128402ed26580c7c5ebc85db639da17c927c23dbde640ab030889e8b61f26d270bc73b21c9ac8ba542e6b4ad2cd147059128ba038e4b9ebb20537f437b23b46ec790720e1fb74cef3c677e9978662a84cf2fcf73c73a5e763358496737af6284226bad34fb9083f87d853ab78c816cf32c90bd5c40ff6446214552d29745d34e0c4bfa623d00e5cbb393972371503122a0f44135db5654ace67cddb85a12df91fcf994fc680afe5d34268b23447589ef3f5383d152bf6dd104984297180f896ec8b1ba50952c5ab76e144f5636692d7cf17922c9b447ed6d59553ec6085e07413034875c1ae0947280e1a6f0d5e7f23b32e56ead8590d3269fdcb624cc870968b2f100bf3bc3d2ab105a5f61456d4969181fbd207b6f4d6d9ca0a1920daabec06d0c5e276d18f2571e88373dd41af9080d72aa88b10f8900b48acb61a61007dd4dd0e9240af5382a26f68bd706a83d8df76a4a5d02b39d07f97c4f86dad9e14eb957cc4be52b027a462262589929e3d035188dd9f0561e3ba2de6bafe743d9ae397e9aa423644fba8b2d6425ac1cd78c76e52e04d3a29e74075625fb5e674bab02843991ce804e0d04961f2978f3749c5ad83f355ae5da936fd6e0178d2bd12aacbe0205aa9a15579fd61d738f8d36412e814ba500edaf28ea68b0e96fb1839acf8416d8f5df7fad3b663f68e2ee5784fd01c7021130a490e629b1348acf3479e0392ecabbeeb18ec421c26e76f6f5c480e7decc85a0583a56180f199d26090b10ee5057ec4c1e04be948a5960acda014d646cf91bfdfb9d327f8ab545f8b41e8dbab94f195b189a8642a6b95e0ceb36b640fbdfe21925cc110bd2ef2c3fe24f12f95771b60e2ffbc47e58b2237b5574cadc32aab0f0db3202e4adc44a0651ef97703957857cfb6022578c97802f486bd7f48129f0c120700d0b70e048618a9f1de9f34dbb1f92dadc86f09e6288eb1bdbd1f700cc2df781654dfd57d9da779607080d3bc6dede5818aa8d6c99fa1ffdbb6a1a43040fe1379cf2a8b4b862db428c29e388a6e6b863bc818c2139a0d4238f10baf22f498b6629181f997ac280547e92fe300d0f8dd8b6724df5aa14be73cd630b808a29bfb52707b8db7d0065bd753b3773f8df58c74ea56f4582caa2fa8532b8049fd9ba775afc5b92b767ed0b35d4c086d9af6f7b7ed96f5f9d3734e703fc683fe0ed82b7763c67734067759e27b60036a3b4c53526716c175d75a9fa6ed019d3e1047bcb9c6510665de23cc2802804a0c3a347faba392282df430e5e6141f9eb660f7cb0eaedb832a7880c953bc0188c1f28eb466799e2768886ef81096847f50159278b572b0cca7744d6a572a81ddd2bcea73da3c8a59680bcaaadaf95e1fe91e41a8036835975b072a9587c560e3da854c96c64011755d08fef5228bb2db62a445bc0b9e17dea88854cd6a7c8a288727d5690fc4941978dee5eda2dbdc85915e7a2fdae978adb217b3f6b31cf69b51b9f805f8b447a4868b442933fc0e03860a7084230ff8fdff70665717f9c0bade31f87f5de99643e800feceb0dfdd6d1b67d4056a52f0efa2ed2b1142132c6242d917b46d939aade6a362bf586058385d7fcef1b4e358a093d6781b9e9bf280520ff083a6026bf701237e38927ed21209dbf407a7944ef687b93619b181b9112477fa902f391a7163f93bec2d6369ffba644f4fd5139890fb66bd6017a61d9fd043154eb0ab0de3046cdb8a182a553cece0701a922518cf09cd1ab421ee8ec677a8d453cd8c21bdaa5f8dd804dfe80fffec8c4d778d5e260b65a2f0d3c1b09e9d6bd1f3746aa7fe07374a028a89fc96eb66affbcddfaa01a72058566e33af88e37f43fbba73c0423d54079fad54c136ec5fcd61d5134f833ab44f6cfbc2348871f190ac4c4bc20c97fcb29f4823a8e3bf76f85b10dfd33df0001646a7e0b2ee3e14455f6c8f225b80eed457e772cb2504ded46a24e911428decff4a130be797b6530c33ec1be7b0dd4df6206eca1c4c8dfda776336bcb876d80043195de773fbcf0d3abe53e9a38da0af7a6598815a71ffc937203f5a04e87eb532e579d66d42b06b791b6ebd50e7855f6645d29434bb0280fdf1511b163b12838f39ca864516711501bbe345d46b34ab2f0d8317d45376f73e302a90f5c362b18e1840668a9f27e90f2b715b4b6ae7a6dc387583110a42fd4977635275f7244a1912d0c67cf53d5da8a384839020d71db234fcc4388a735275763f01b2b4967e99f551e489bcc28f693a1e688ac8c39a971f8ae9d973cc7adac4a642a7a84ecca2d0bd24c300b94dff82fa4f95c1ce5fdb9128466443cb8442048e53cd46334d59774de0e2ceefcd4cd2e6c9da7cdc2162346111f7da236d72f33d509d73133951e1a3f84fa7e767cf56fc9bfb3986c5ec501634b92a780f63e0ee61e3d25f51c39b975ea587027a101059e9386f1eaaaab8ebfd5c453e9f86c851f9c78e4e06184f04fa9a54ba0bba5d18108c2973f50cb626eca6e3d5b2907b00d2ad4fff9546482815291bd220fa31c1d1a735562174644fe06131e31ce66064fa6a02d5bda756994f81163b97e854274183bbc4ddeb9bb823944afc3e07caf510732df2835fd11de82cb318b88f4d385adb57ac73ffe7f3d1e387848766e11000c94123f2a7d33a93d3b030ebb1206f26221a1ceef44a708693796ab80add7d9b6907c653c6becc21d49c380b3fea419276a387ad482fc3614fa7cac6ea9d07dffc85c1d3f01f57aa9816f32e3237b05d191c3f3d2ed31c313346176d18dc53307afc3aea306a5b44189b6fce062cd21319f1c0a5cf3bc84aaff275491d5fa26d12173e134bdb776478c27502dd4786cc079b6eb00d05f1c8c27a2e326ef11ad1866529b60e6a9e9ae776f01071e364a4604dfe79fbdfc9828628e50940398cc6b925ea8806ee3bbd22129c5d37551eb5e1ef613b027aebce0a83963888396f3e7c953e5416b522fd3a0660fefaea0fc97ca7d82191e2e8f23ca2aa56e8b9de2e1d3e093b8c3f4d7e700b7193b3d83c5b6bb1e7ff2a1c574c9d15ad79631573e41d46653601c510ec7cd0d6125c8e600ebb41247988c28305ac47eead817fecf4460c2221a399134d1d11363401090691a7bf1f58f27a09311d6591cef3d879570667e9e10eebf7df32ec9417f0132be9f1485b167b58b0bf88e31fb2d3957fa05a4d3f191c1d1caa189fc0c11c04287ceaee39a147aced6e3e9c2fe8f51a9823401ad4bf92b0fd4070aae1fe886b8c160a0d2a1507259e58c5608654f05f444877bf9ec215933d6f0a89a3f6199a23c535d8cf9541f2eb970261b12325884fe64330f67a8b07748522c58e5096a04afc67f08b4b0b3da2c9e010b8f079fabdbd187b3d1f69b9f8110e0ec3a488aa8b8563745f7e9fdc1faeaf542858f417d3a75d416e8f55c46cd962d9ac96ce8b56f7a0e22350d2b9e8a537780edddd519fd43baec4834aa6abb0b8c4007dfbb9dac74bf3802108966bf7d5a2999d16110ad0d2cab1c72c2d0ddce14e5043ee62fe9b722355dd2b7e728a589da59ef46dae95f1b89c22d5487a855bc1ee5f9d1427f643e2fa8748e07e6b51e365ab5e23e32401acc229c09f56868532ca611fa678b13f7f580392aee230878817f9dadc9b071245f75b7f626ab6f3342e8d80c3735e3a37646dfddeddec617fd3c155bb0735dd74eb1b71b957645978638f6bab555681b1e0047f7ccf370051f8fd42b171d16291a79ab5aad78940d12129d4de9f1d0a17f539fe333c7e3af31703dd147044ab4efd666cda9942c14cb25fae13cdb497bf7d71094192765df81234cf3dc9d38cdf373a06f5b723ab987708c8ed1b1b7c14cf55663298e752621be837d9e8f806552e0d605515dc0346354c76536d7681bac9dce48479abf18fc8b45862471ce1d75957a23c6bee5b2eb0022d557b6ad6153124e4594d26cc4a6e70de89086e0365039d215c2d9c7d881766b564b58be42104b4a4cad074eb1600be3a98fd7e19296066ee8a8d141d1b9f070c06c58c4f6e5c73b43022f39a13e701220064ceac7951818b1a88f68b2241efc57d37f224161533c75e279500896058aa03ce9571567172b57dbd40e1e14f8068cec77cde8da6aebf54039de9c7251289192616dca9d90bcc3ca24708dde9309d00d9a61c7be33f5858729ca3726fd8e8fdf911e58d3908797ec7b53cec49a8d51a3a30c3172b4277a8be98346488f10385ab3396ba34390f5f44a6f51606a392c25f4b6c65d3cee98004c5312b9f2a6349facbb7f0491fa0505ddc859e25963fae59e8ff05282c108be2a267690c8d53cd2ab7189b997cca8f0905ebcdc86a29b851546284870b348d54023e16262e78c034885696e931e1b2a7b2c23c59ef21393370a16f068ce46115e6b1c3ba9375bb9cb644ec9032bb2eb57eb4897284164af7a8b0a7019a610985dad9f1ce9f12a9a2399ee63fd6d21ee4adc8cbeb7ffe22b50e14c959042197ae45c8f8db2a5d03d6d9c2d5e826112a0bf6d21854a6d5fc77604e4117d7e9a92804c7db9f3eeca536b61a079654f8afbccc140602db833e537ac3c591b98549b5c70734e98b5a47eb9cc16ab2e0ed4f32ff69558e5dcfa2a3b54b8cf3326d4cdd7e9a0c19e4b703070a996acb40a882c2c512e38b4e3d31fe918a3562526132c7bbd497d3f5d40881e6c7363f2e21c8ae8d3ade72d57b6fe9a6cce7f100ae63775c6706b5004312b057aa9191e7614a69584974629c81e536b6422072cdb55b5d98418bf0b15268551548fbc6a9c84f4f701461c5e8e9f12573cc7611758c085582c823f9500d1fb8fa0eb44423f78fa60262f1578304c834865ba39ae3a1a393cfc3c9892518fca1ce37752f488faeabcb616700e831239025481f489c56331ea60ab91a77a73aca23da9fc2a2f171a0b42708ca64bc23985acd303b5eb32045bd55755facde52d4c5d134374736438996a956b5515a21c3c92968187235f0ec1cc68f671776f6b9805f2597bf6f0f93e55c843db7e590a923867da924981b1f653882bb744b3642e31fc43edbd028e804a71e40a80f0f3945fef279b7d7e060e3f2c3cf755b26a37f600021015ff3096c726ea948c2a25d1dbd7e5f7a6865109a83e99ec6e57bb1eea68c40131e1237e33766212f5fab50541a7028d734aaf1b6da21ef19b513a83d0f66f2db05960d404f918d23095e731b7f95bf79b04c91e419891fd04338508b1d44d47c954855550b1db8ab5e4c6d433d3e0113a9a5945d8f1bfb76a3cedad512d85103cb0bb1d32f7d3e30c19ee27bcadb3924ac774c79a5f5a7dd0d5e5d37400c070d7d97cd0e8841f55dce9461e98e2a3958dee488518f8481125530fb869e128e299c40e7bf341b363d14ed5707c176fc806997145ac1fbc2295c1b47c42b1cd1a1d455e7346c3a5d3fb29fb105a8b17ec42486f0ef3891aa9aeffaabfbafb0d3660609dfca3880209f18fedcee0b53338e4d3d72a4798c53604bc9adf78789be08fd2b2b227e0f37dcf7e30d3b2308dea145e6cd0c7a0a5cf637e192188b5a9f499fe3382c954cf76a889eb975250066a13f7cf275470491d135b9b61eac107d21c41aa4db597b25a0b579ee93", 0xfb6}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f8f7e05d9639d278d53151a6720a51979ffd78dcc1a000929160435bd61e3f36c78b9bd5baef79be54e537dfc26029f52cfd5b4dd3416fc140fce45c077ab5ee206763130ccdaedd3bff9b7a20b6b02e558fd", 0xaf}, {&(0x7f0000000a40)}], 0x3}}], 0x2, 0x11)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

5.446746147s ago: executing program 4 (id=4796):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}})

5.253864775s ago: executing program 4 (id=4799):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x24, 0x6, @broadcast}, 0x14)
socket$packet(0x11, 0x3, 0x300)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00')
preadv(r2, 0x0, 0x0, 0x78, 0xc)

5.099988742s ago: executing program 4 (id=4801):
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004"], 0x50)
syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x2, 0xfe, 0x0, 0x0, 0x88, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x0, 0x4, 0x20, 0x0, 0x1000000}]})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0xc084}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f00000000c0)={0xe000001a})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4.441268819s ago: executing program 4 (id=4804):
open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80801)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46", 0xb}], 0x2}}], 0x1, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x100, 0x29, 0x4, {0x4, 0x1c, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x64, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x9, "e80ee304ecb784ec46"}]}}}, @hopopts={{0x1a8, 0x29, 0x36, {0x5e, 0x31, '\x00', [@generic={0xff, 0x34, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec42"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x30, {0x3, 0xa, 0x0, 0xfff, [0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xe2, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579221b81"}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0x8000]}}, @generic={0x1}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x360}}], 0x1, 0x810)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

4.189305162s ago: executing program 0 (id=4806):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

3.484998941s ago: executing program 4 (id=4807):
r0 = getpgid(0x0)
r1 = syz_pidfd_open(r0, 0x0)
r2 = pidfd_getfd(r1, r1, 0x0)
setns(r2, 0x66020000)
mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0)
syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)

3.293831869s ago: executing program 3 (id=4809):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
io_setup(0xbf, &(0x7f0000000100)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r0, &(0x7f0000000080)='\x00\x00', 0x2}])

3.105828347s ago: executing program 0 (id=4810):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8)
bind$inet6(r0, 0x0, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)={0x0, 0x558, 0x58d}, 0x8)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000140)={0x0, 0x0, 0x1}, 0x8)

3.006536004s ago: executing program 1 (id=4811):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46", 0xb}], 0x2}}], 0x1, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xe8, 0x29, 0x4, {0x4, 0x19, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x39, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x10, "e80ee304ecb784ec4655260cecea14e4"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x1a0, 0x29, 0x36, {0x5e, 0x30, '\x00', [@generic={0xff, 0x34, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec42"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x30, {0x3, 0xa, 0x0, 0xfff, [0x2, 0x966, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xe2, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579221b81"}, @calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x7, [0x0]}}, @generic={0x1, 0x4, "2bdb86d1"}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x358}}], 0x1, 0x810)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0x7c9}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

2.815306505s ago: executing program 0 (id=4813):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58)

2.654642131s ago: executing program 2 (id=4814):
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50)
socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
open(&(0x7f0000000080)='./file1\x00', 0x66842, 0x90)
inotify_init1(0x80000)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100), 0x13f, 0x9}}, 0x20)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1)

2.084897306s ago: executing program 1 (id=4815):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x0, 0x18, 0x0, 0x2}, 0x28)

1.98272928s ago: executing program 2 (id=4816):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r0 = open(&(0x7f0000000580)='./file0\x00', 0x80242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r0, 0x0, 0x0)

1.981661274s ago: executing program 1 (id=4817):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)}, 0x80)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x12, &(0x7f0000000140)={[{@enospc_debug}, {@enospc_debug}, {@compress_algo={'compress', 0x3d, 'zlib'}}]}, 0x1, 0x510c, &(0x7f0000005180)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000fc0)={'syz1\x00', {0x6, 0x8001, 0x0, 0x529}, 0x52, [0xf5, 0x8, 0x80000001, 0x2, 0x202, 0xffffffff, 0x8e, 0x9, 0x9, 0x4, 0x0, 0x9, 0x7, 0x1, 0xfffffffe, 0x38, 0xffffff7f, 0xac, 0x5, 0x1443, 0x2, 0xea7, 0x1, 0x8557, 0x8, 0x20002, 0x4, 0x9, 0x8, 0x6, 0x84, 0xd3, 0x8001, 0x3, 0x2001, 0xb, 0x2, 0x0, 0xfffffffe, 0xc1e, 0xa, 0x939a, 0x8000, 0x1, 0x5c, 0x8, 0x6e4, 0x3, 0xf2b, 0x1, 0x6, 0xfffffffa, 0xffff, 0x8, 0x7, 0x6, 0xffffff7e, 0xf3, 0x6, 0xd2, 0x8001, 0x5, 0x53, 0x7fffffff], [0x5, 0x2, 0xd91, 0x8, 0x39bb, 0x8, 0x1, 0x5, 0xfffffffe, 0x40a89, 0xffb, 0xffffff4b, 0x1, 0x2, 0x0, 0xfffffffc, 0x8, 0x8, 0xffffffff, 0x405, 0x8ca, 0x9, 0x6, 0x5, 0xd, 0xa, 0x206, 0x9, 0xa, 0x5, 0xf, 0xb2cf, 0x1, 0x200, 0xec, 0x9, 0x100, 0x9, 0x5, 0x10001, 0x1, 0x865f, 0x8ec2, 0x3, 0x802, 0x7, 0x3, 0x29e3, 0xce, 0x40b4e5, 0x20000, 0x200, 0x5, 0x4, 0xfd, 0x1, 0x1d, 0x3, 0x10000, 0xa, 0x26, 0x2, 0x6, 0xad], [0x4343fe9f, 0xfffffffd, 0x101, 0xffffffff, 0x7f, 0x8, 0x3, 0x3, 0xc, 0x0, 0xcb06, 0x3, 0x4, 0x37, 0x5, 0x80003, 0xc8, 0xc, 0x8000, 0x2, 0xdf9e, 0x44005, 0x8, 0xa, 0x0, 0x7, 0x401, 0x5, 0x5, 0x7, 0x6, 0x2, 0x1, 0x0, 0xff, 0x911, 0x7, 0x8000, 0x31c1, 0x8, 0xb, 0x4, 0x2, 0x3, 0x9, 0x1, 0x2, 0x8, 0x7, 0x100402, 0x7, 0xffff, 0x400, 0x80000000, 0xffffffff, 0xb, 0x80, 0xf, 0x8, 0x8, 0x9, 0x4, 0x4, 0xfffffdad], [0x27b, 0x6, 0x6, 0x10, 0x7, 0x4009, 0x8, 0xff, 0x7fffffff, 0xe012, 0xfffffff8, 0x8, 0xffff7bfb, 0xffffffff, 0x2, 0x100, 0x2, 0x0, 0xb, 0x8, 0x8, 0x5, 0xfffffc00, 0x91, 0xb, 0x4, 0x80000000, 0x0, 0xa, 0x27, 0x400, 0x70, 0x9, 0xffc, 0x400002, 0x2, 0xffffffff, 0x8049, 0x80088, 0x10, 0x5, 0x9a4, 0x81, 0xf011, 0x400, 0x103000, 0x8, 0x5, 0x4, 0xfffffffe, 0xb, 0x1, 0xa450, 0x9, 0x807ff, 0x1, 0x3, 0xfffffc02, 0x3, 0xb, 0x5, 0x8, 0xa, 0xfffffff7]}, 0x45c)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r2=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x2, &(0x7f0000000280)=@raw=[@btf_id={0x18, 0x0, 0x3, 0x0, 0x1}], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES16=r4], 0x44}}, 0x44000)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r0, 0x0)
capset(&(0x7f0000000080)={0x20071026}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mount(0x0, 0x0, &(0x7f0000000200)='virtiofs\x00', 0x8000, 0x0)

1.955225319s ago: executing program 3 (id=4818):
open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80801)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46", 0xb}], 0x2}}], 0x1, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x100, 0x29, 0x4, {0x4, 0x1c, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x64, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x9, "e80ee304ecb784ec46"}]}}}, @hopopts={{0x1a8, 0x29, 0x36, {0x5e, 0x31, '\x00', [@generic={0xff, 0x34, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec42"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x30, {0x3, 0xa, 0x0, 0xfff, [0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xe2, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579221b81"}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0x8000]}}, @generic={0x1}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x360}}], 0x1, 0x810)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1.489088364s ago: executing program 2 (id=4819):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x7, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.488385396s ago: executing program 0 (id=4820):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d00000085"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18)
membarrier(0x10, 0x0)

1.147791842s ago: executing program 1 (id=4821):
r0 = openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x1ff)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffa83)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x6071, 0x0, 0xe7}}}}}}, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1.138432096s ago: executing program 0 (id=4822):
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000780)={0x29e9c934, 0x3, 0x7f, 0x404}, 0x10)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2010}, 0x4001)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x0, 0x180, 0x2, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0x1, 0xbdb], 0xdddd0000, 0x1c4213})
ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000380)=@generic={0x3, 0x401, 0x7})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.063326913s ago: executing program 3 (id=4823):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x9}, 0x18)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x144}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0xfffffffffffffff5, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x5}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xfffffffffffffea4, 0x2, [@TCA_FQ_PLIMIT={0x0, 0x1, 0xffffffff}, @TCA_FQ_FLOW_DEFAULT_RATE={0x0, 0x6, 0x40004}, @TCA_FQ_TIMER_SLACK={0x0, 0xd, 0x2b3}]}}]}, 0x5f}}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0e29d36cb8ed369e91698c0e9", 0x7b}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e6821ba9d82e6b8522a6eba1734eccbc5659567aa08b5b93be09bc2a6d6319acbd1aeb751f8e9b7ce9e2f", 0xb7}, {&(0x7f0000001400)="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", 0xeb4}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6", 0x4d}, {&(0x7f0000000a40)}], 0x3}}], 0x2, 0x11)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x4f5b9e40, 0x8, 0x96282c4, 0x2040, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x45, 0x4, 0x2, 0x4}, 0x50)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x0, 0x2, 0x12, @loopback, @mcast2, 0x10, 0x10, 0x6, 0x101}})
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

835.261714ms ago: executing program 0 (id=4824):
socket(0x23, 0x6, 0x1000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040))
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4)
sendmmsg$inet(r2, 0x0, 0x0, 0x2400c042)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000040)={[{@test_dummy_encryption}, {@grpquota}]}, 0x2, 0xbbf, &(0x7f0000000440)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000080))
chdir(&(0x7f00000003c0)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c1042, 0x17c)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
statx(0xffffffffffffffff, &(0x7f00000000c0)='./cgroup\x00', 0x1000, 0x2, &(0x7f0000000100))
symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00')

767.991554ms ago: executing program 3 (id=4825):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
lsetxattr$security_capability(&(0x7f0000000040)='./file1\x00', &(0x7f0000000300), 0x0, 0x0, 0x1)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0)

692.084172ms ago: executing program 2 (id=4826):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000087000000a400000006000000850000009e00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

551.388474ms ago: executing program 3 (id=4827):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="ec4969ce12aee5cbcb87448d7b8d39e591f0817d13f230e360", 0x19}], 0x1}}], 0x1, 0x20000800)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x1000, &(0x7f00005b5000/0x1000)=nil})

531.705529ms ago: executing program 1 (id=4828):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
io_setup(0xbf, &(0x7f0000000100)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r0, &(0x7f0000000080)='\x00\x00', 0x2}])

439.014098ms ago: executing program 2 (id=4829):
mkdir(&(0x7f0000000100)='./file1\x00', 0x13b)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r0 = open(&(0x7f0000000580)='./file0\x00', 0x80242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r0, 0x0, 0x0)

251.576376ms ago: executing program 1 (id=4830):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)}, 0x80)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x12, &(0x7f0000000140)={[{@enospc_debug}, {@enospc_debug}, {@compress_algo={'compress', 0x3d, 'zlib'}}]}, 0x1, 0x510c, &(0x7f0000005180)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000fc0)={'syz1\x00', {0x6, 0x8001, 0x0, 0x529}, 0x52, [0xf5, 0x8, 0x80000001, 0x2, 0x202, 0xffffffff, 0x8e, 0x9, 0x9, 0x4, 0x0, 0x9, 0x7, 0x1, 0xfffffffe, 0x38, 0xffffff7f, 0xac, 0x5, 0x1443, 0x2, 0xea7, 0x1, 0x8557, 0x8, 0x20002, 0x4, 0x9, 0x8, 0x6, 0x84, 0xd3, 0x8001, 0x3, 0x2001, 0xb, 0x2, 0x0, 0xfffffffe, 0xc1e, 0xa, 0x939a, 0x8000, 0x1, 0x5c, 0x8, 0x6e4, 0x3, 0xf2b, 0x1, 0x6, 0xfffffffa, 0xffff, 0x8, 0x7, 0x6, 0xffffff7e, 0xf3, 0x6, 0xd2, 0x8001, 0x5, 0x53, 0x7fffffff], [0x5, 0x2, 0xd91, 0x8, 0x39bb, 0x8, 0x1, 0x5, 0xfffffffe, 0x40a89, 0xffb, 0xffffff4b, 0x1, 0x2, 0x0, 0xfffffffc, 0x8, 0x8, 0xffffffff, 0x405, 0x8ca, 0x9, 0x6, 0x5, 0xd, 0xa, 0x206, 0x9, 0xa, 0x5, 0xf, 0xb2cf, 0x1, 0x200, 0xec, 0x9, 0x100, 0x9, 0x5, 0x10001, 0x1, 0x865f, 0x8ec2, 0x3, 0x802, 0x7, 0x3, 0x29e3, 0xce, 0x40b4e5, 0x20000, 0x200, 0x5, 0x4, 0xfd, 0x1, 0x1d, 0x3, 0x10000, 0xa, 0x26, 0x2, 0x6, 0xad], [0x4343fe9f, 0xfffffffd, 0x101, 0xffffffff, 0x7f, 0x8, 0x3, 0x3, 0xc, 0x0, 0xcb06, 0x3, 0x4, 0x37, 0x5, 0x80003, 0xc8, 0xc, 0x8000, 0x2, 0xdf9e, 0x44005, 0x8, 0xa, 0x0, 0x7, 0x401, 0x5, 0x5, 0x7, 0x6, 0x2, 0x1, 0x0, 0xff, 0x911, 0x7, 0x8000, 0x31c1, 0x8, 0xb, 0x4, 0x2, 0x3, 0x9, 0x1, 0x2, 0x8, 0x7, 0x100402, 0x7, 0xffff, 0x400, 0x80000000, 0xffffffff, 0xb, 0x80, 0xf, 0x8, 0x8, 0x9, 0x4, 0x4, 0xfffffdad], [0x27b, 0x6, 0x6, 0x10, 0x7, 0x4009, 0x8, 0xff, 0x7fffffff, 0xe012, 0xfffffff8, 0x8, 0xffff7bfb, 0xffffffff, 0x2, 0x100, 0x2, 0x0, 0xb, 0x8, 0x8, 0x5, 0xfffffc00, 0x91, 0xb, 0x4, 0x80000000, 0x0, 0xa, 0x27, 0x400, 0x70, 0x9, 0xffc, 0x400002, 0x2, 0xffffffff, 0x8049, 0x80088, 0x10, 0x5, 0x9a4, 0x81, 0xf011, 0x400, 0x103000, 0x8, 0x5, 0x4, 0xfffffffe, 0xb, 0x1, 0xa450, 0x9, 0x807ff, 0x1, 0x3, 0xfffffc02, 0x3, 0xb, 0x5, 0x8, 0xa, 0xfffffff7]}, 0x45c)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x2, &(0x7f0000000280)=@raw=[@btf_id={0x18, 0x0, 0x3, 0x0, 0x1}], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES16=r3], 0x44}}, 0x44000)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r0, 0x0)
capset(&(0x7f0000000080)={0x20071026}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mount(0x0, 0x0, &(0x7f0000000200)='virtiofs\x00', 0x8000, 0x0)

156.767473ms ago: executing program 3 (id=4831):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
socket$unix(0x1, 0x1, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={<r2=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x7, @loopback, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r2, 0x7fff}}, 0x48)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

0s ago: executing program 2 (id=4832):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x7c, 0x3000})

kernel console output (not intermixed with test programs):

1930.836780][T24177] loop1: detected capacity change from 0 to 512
[ 1930.844633][T24177] EXT4-fs (loop1): Test dummy encryption mode enabled
[ 1930.853004][T24177] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[ 1930.903670][T24177] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.3945: bad orphan inode 131083
[ 1930.917440][T24177] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1931.706821][T20766] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1932.010433][T24190] loop0: detected capacity change from 0 to 1024
[ 1933.215023][T24198] loop4: detected capacity change from 0 to 512
[ 1933.226973][T24198] EXT4-fs (loop4): Test dummy encryption mode enabled
[ 1933.233915][T24198] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[ 1933.266850][T24198] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.3950: bad orphan inode 131083
[ 1933.280208][T24198] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1934.316084][T24185] hfsplus: b-tree write err: -5, ino 3
[ 1935.017541][T18899] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1935.266974][T24211] loop4: detected capacity change from 0 to 512
[ 1935.274744][T24211] EXT4-fs (loop4): Test dummy encryption mode enabled
[ 1935.281550][T24211] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[ 1935.307171][T24211] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.3954: bad orphan inode 131083
[ 1935.320517][T24211] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1935.544599][T20196] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[ 1935.935772][T20196] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1935.957666][T20196] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1936.000359][T20196] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1936.013436][ T5903] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[ 1936.046647][T20196] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1936.072459][T20196] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1936.092779][T20221] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1936.110066][T18899] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1936.139503][T20196] usb 2-1: config 0 descriptor??
[ 1936.183315][ T5889] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[ 1936.213338][ T5903] usb 1-1: Using ep0 maxpacket: 32
[ 1936.256482][ T5903] usb 1-1: config 0 has an invalid interface number: 16 but max is 0
[ 1936.273307][ T5903] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1936.321868][ T5903] usb 1-1: config 0 has no interface number 0
[ 1936.338524][ T5903] usb 1-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[ 1936.358756][ T5889] usb 3-1: Using ep0 maxpacket: 32
[ 1936.367250][ T5889] usb 3-1: config 0 has an invalid interface number: 16 but max is 0
[ 1936.411870][ T5903] usb 1-1: config 0 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1936.420651][ T5889] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1936.795747][ T5889] usb 3-1: config 0 has no interface number 0
[ 1936.807105][ T5889] usb 3-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[ 1936.884282][ T5889] usb 3-1: config 0 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1936.919405][ T5889] usb 3-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d
[ 1936.940253][ T5903] usb 1-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d
[ 1936.961943][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1936.970063][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1936.970095][ T5903] usb 1-1: Product: syz
[ 1936.970112][ T5903] usb 1-1: Manufacturer: syz
[ 1936.970129][ T5903] usb 1-1: SerialNumber: syz
[ 1936.974130][ T5903] usb 1-1: config 0 descriptor??
[ 1937.024298][T20196] usbhid 2-1:0.0: can't add hid device: -71
[ 1937.030378][T20196] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1937.073809][T24209] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1937.095247][ T5903] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[ 1937.121303][ T5903] usb 1-1: invalid MIDI in EP 0
[ 1937.151790][ T5889] usb 3-1: Product: syz
[ 1937.188965][T20196] usb 2-1: USB disconnect, device number 68
[ 1937.198348][ T5889] usb 3-1: Manufacturer: syz
[ 1937.205668][ T5889] usb 3-1: SerialNumber: syz
[ 1937.214558][ T5889] usb 3-1: config 0 descriptor??
[ 1937.257402][T24215] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 1937.345653][ T5903] snd-usb-audio 1-1:0.16: probe with driver snd-usb-audio failed with error -22
[ 1937.346456][ T5889] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 1937.409019][ T5889] usb 3-1: invalid MIDI in EP 0
[ 1937.432283][ T5903] usb 1-1: USB disconnect, device number 60
[ 1937.589567][T19894] udevd[19894]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.16/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1937.666075][ T5889] snd-usb-audio 3-1:0.16: probe with driver snd-usb-audio failed with error -22
[ 1937.763892][ T5889] usb 3-1: USB disconnect, device number 70
[ 1937.819960][T19894] udevd[19894]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.16/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1937.884613][T24231] veth2: entered promiscuous mode
[ 1937.889787][T24231] veth2: entered allmulticast mode
[ 1938.863480][T21380] usb 5-1: new high-speed USB device number 79 using dummy_hcd
[ 1939.023298][T21380] usb 5-1: Using ep0 maxpacket: 16
[ 1939.047797][T21380] usb 5-1: config 0 has an invalid interface number: 231 but max is 0
[ 1939.121074][T21380] usb 5-1: config 0 has no interface number 0
[ 1939.129909][T24233] loop1: detected capacity change from 0 to 32768
[ 1939.166675][T21380] usb 5-1: New USB device found, idVendor=0411, idProduct=006e, bcdDevice=c1.05
[ 1939.215566][T24233] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3959 (24233)
[ 1939.234065][T21380] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1939.275568][T21380] usb 5-1: config 0 descriptor??
[ 1939.287649][T24245] loop2: detected capacity change from 0 to 4096
[ 1939.316117][T21380] asix 5-1:0.231: probe with driver asix failed with error -22
[ 1939.355769][T24233] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1939.375216][T24245] EXT4-fs (loop2): Test dummy encryption mode enabled
[ 1939.429996][T24233] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[ 1940.139310][T24245] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1940.386999][T10536] usb 5-1: USB disconnect, device number 79
[ 1940.548251][T24233] BTRFS info (device loop1): enabling ssd optimizations
[ 1940.593405][T24233] BTRFS info (device loop1): turning on async discard
[ 1940.621639][T24276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3968'.
[ 1940.641634][T24233] BTRFS info (device loop1): enabling free space tree
[ 1941.604894][T21380] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[ 1941.690824][T24285] loop3: detected capacity change from 0 to 4096
[ 1942.505375][T21380] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1942.549929][T21380] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1942.559877][T21380] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1942.573149][T21380] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1942.618212][T24285] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 1942.660408][T20766] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1942.672931][T21380] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1942.709859][T21380] usb 1-1: config 0 descriptor??
[ 1942.715997][T24285] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1943.444124][T24299] loop4: detected capacity change from 0 to 32768
[ 1943.460967][T21380] usbhid 1-1:0.0: can't add hid device: -71
[ 1943.468619][T21380] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 1943.479842][T24299] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3976 (24299)
[ 1943.525026][T24299] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1943.535687][T24299] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[ 1943.559933][T19461] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1943.577925][T21380] usb 1-1: USB disconnect, device number 61
[ 1943.773683][T24299] BTRFS info (device loop4): enabling ssd optimizations
[ 1943.780742][T24299] BTRFS info (device loop4): turning on async discard
[ 1943.787602][T24299] BTRFS info (device loop4): enabling free space tree
[ 1944.532835][T24319] loop0: detected capacity change from 0 to 512
[ 1944.585260][T24319] EXT4-fs (loop0): can't mount with both data=journal and dax
[ 1944.795312][T24319] loop0: detected capacity change from 0 to 1024
[ 1945.014317][T18899] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1945.056640][T24324] loop2: detected capacity change from 0 to 4096
[ 1945.135811][T24324] EXT4-fs (loop2): Test dummy encryption mode enabled
[ 1945.243711][T24319] hfsplus: b-tree write err: -5, ino 3
[ 1945.572340][T24324] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1946.251178][T20221] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1946.745899][T24340] netlink: 'syz.3.3981': attribute type 1 has an invalid length.
[ 1946.813848][T24340] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[ 1946.825065][T24340] bond4: (slave vxcan3): Error -95 calling set_mac_address
[ 1946.867999][T24342] bond4: (slave bridge3): Enslaving as an active interface with a down link
[ 1947.366548][T24332] loop4: detected capacity change from 0 to 40427
[ 1947.413281][T24332] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[ 1947.421370][T24332] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[ 1947.467534][T24332] F2FS-fs (loop4): invalid crc value
[ 1947.797889][T19461] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1947.822395][T24332] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1947.888494][T24332] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[ 1947.905354][T24332] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[ 1948.602880][T24358] loop2: detected capacity change from 0 to 128
[ 1949.117006][T24358] loop2: detected capacity change from 0 to 65536
[ 1949.175122][T24358] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[ 1949.237757][T24358] XFS (loop2): Ending clean mount
[ 1949.245165][T24358] XFS (loop2): Quotacheck needed: Please wait.
[ 1949.320289][T24368] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3988'.
[ 1949.519706][T24358] XFS (loop2): Quotacheck: Done.
[ 1949.540308][T24373] loop0: detected capacity change from 0 to 512
[ 1949.570058][T24373] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[ 1950.651824][T19461] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[ 1950.725128][T24373] EXT4-fs (loop0): 1 truncate cleaned up
[ 1950.732033][T24373] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1950.998321][T24384] loop1: detected capacity change from 0 to 64
[ 1951.456017][T24387] veth2: entered promiscuous mode
[ 1951.461119][T24387] veth2: entered allmulticast mode
[ 1951.730103][T24387] loop2: detected capacity change from 0 to 32768
[ 1951.790411][T24387] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3991 (24387)
[ 1951.811670][T24387] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1951.822355][T24387] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[ 1952.322814][T24387] BTRFS info (device loop2): enabling ssd optimizations
[ 1952.329897][T24387] BTRFS info (device loop2): turning on async discard
[ 1952.336743][T24387] BTRFS info (device loop2): enabling free space tree
[ 1952.983735][T19461] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1953.060622][T24404] loop4: detected capacity change from 0 to 2048
[ 1953.114581][T24404] ext2: Unknown parameter 'hash'
[ 1954.537264][T24411] netlink: 'syz.2.3993': attribute type 1 has an invalid length.
[ 1954.596625][T24411] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[ 1954.610624][T24411] bond3: (slave vxcan3): Error -95 calling set_mac_address
[ 1954.710185][T24413] bond3: (slave bridge3): Enslaving as an active interface with a down link
[ 1954.910538][T24411] macvlan2: entered promiscuous mode
[ 1955.020997][T24411] macvlan2: entered allmulticast mode
[ 1955.407153][T19702] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1955.512105][T24417] loop3: detected capacity change from 0 to 128
[ 1956.026891][T24417] loop3: detected capacity change from 0 to 65536
[ 1956.124894][T24417] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[ 1956.210395][T24417] XFS (loop3): Ending clean mount
[ 1956.217491][T24417] XFS (loop3): Quotacheck needed: Please wait.
[ 1956.332260][T24417] XFS (loop3): Quotacheck: Done.
[ 1957.169710][T24440] genirq: Flags mismatch irq 7. 00200000 (comedi_parport) vs. 00200080 (ttyS3)
[ 1957.771346][T24433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3996'.
[ 1958.084026][T24448] genirq: Flags mismatch irq 7. 00200000 (comedi_parport) vs. 00200080 (ttyS3)
[ 1958.392166][T20221] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[ 1958.714946][T24452] loop1: detected capacity change from 0 to 2048
[ 1958.762344][T24452] ext2: Unknown parameter 'hash'
[ 1960.009235][T24464] genirq: Flags mismatch irq 7. 00200000 (comedi_parport) vs. 00200080 (ttyS3)
[ 1960.450762][T24461] loop2: detected capacity change from 0 to 4096
[ 1960.506810][T24461] EXT4-fs (loop2): Test dummy encryption mode enabled
[ 1960.968679][T24469] loop0: detected capacity change from 0 to 40427
[ 1960.982257][T24469] F2FS-fs (loop0): build fault injection rate: 14
[ 1960.988921][T24469] F2FS-fs (loop0): build fault injection type: 0x3bfe8c
[ 1961.070156][T24469] F2FS-fs (loop0): invalid crc value
[ 1961.404758][    C0] f2fs_printk: 22 callbacks suppressed
[ 1961.404782][    C0] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[ 1961.440949][T24461] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1961.441429][    C0] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[ 1961.499924][T24469] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1961.508975][T24469] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[ 1961.561796][T24469] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[ 1961.653140][T24469] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[ 1961.672348][T24469] F2FS-fs (loop0): inject dquot initialize in f2fs_dquot_initialize of f2fs_mkdir+0xfa/0x570
[ 1961.910269][T24485] F2FS-fs (loop0): inject lock_op in f2fs_trylock_op of f2fs_write_single_data_page+0xaa9/0x1760
[ 1961.963345][T24485] F2FS-fs (loop0): inject lock_op in f2fs_trylock_op of f2fs_write_single_data_page+0xaa9/0x1760
[ 1961.981518][T24485] F2FS-fs (loop0): inject lock_op in f2fs_trylock_op of f2fs_write_single_data_page+0xaa9/0x1760
[ 1961.998987][T24485] F2FS-fs (loop0): inject lock_op in f2fs_trylock_op of f2fs_write_single_data_page+0xaa9/0x1760
[ 1962.028602][T24485] F2FS-fs (loop0): inject lock_op in f2fs_trylock_op of f2fs_write_single_data_page+0xaa9/0x1760
[ 1962.087748][T24485] syz.0.4008: attempt to access beyond end of device
[ 1962.087748][T24485] loop0: rw=2049, sector=45096, nr_sectors = 800 limit=40427
[ 1963.060818][T19702] F2FS-fs (loop0): inconsistent node block, node_type:3, nid:13, node_footer[nid:13,ino:3,ofs:191623,cpver:0,blkaddr:0]
[ 1963.148207][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) 
[ 1963.148246][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1963.148263][    C1] Call Trace:
[ 1963.148273][    C1]  <TASK>
[ 1963.148285][    C1]  dump_stack_lvl+0x189/0x250
[ 1963.148332][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1963.148373][    C1]  ? __pfx_queue_work_on+0x10/0x10
[ 1963.148406][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1963.148444][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1963.148492][    C1]  f2fs_handle_critical_error+0x37c/0x540
[ 1963.148538][    C1]  f2fs_write_end_io+0x886/0xb60
[ 1963.148582][    C1]  blk_update_request+0x57e/0xe60
[ 1963.148634][    C1]  blk_mq_end_request+0x3e/0x70
[ 1963.148671][    C1]  blk_done_softirq+0x10a/0x160
[ 1963.148706][    C1]  handle_softirqs+0x27d/0x880
[ 1963.148740][    C1]  ? run_ksoftirqd+0x9b/0x100
[ 1963.148779][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[ 1963.148816][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[ 1963.148853][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[ 1963.148887][    C1]  run_ksoftirqd+0x9b/0x100
[ 1963.148924][    C1]  ? __pfx_run_ksoftirqd+0x10/0x10
[ 1963.148967][    C1]  smpboot_thread_fn+0x542/0xa60
[ 1963.149001][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[ 1963.149041][    C1]  kthread+0x711/0x8a0
[ 1963.149066][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[ 1963.149108][    C1]  ? __pfx_kthread+0x10/0x10
[ 1963.149132][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1963.149166][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1963.149201][    C1]  ? __pfx_kthread+0x10/0x10
[ 1963.149225][    C1]  ret_from_fork+0x599/0xb30
[ 1963.149257][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 1963.149300][    C1]  ? __switch_to_asm+0x39/0x70
[ 1963.149324][    C1]  ? __switch_to_asm+0x33/0x70
[ 1963.149347][    C1]  ? __pfx_kthread+0x10/0x10
[ 1963.149371][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1963.149416][    C1]  </TASK>
[ 1963.149426][    C1] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[ 1963.339872][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) 
[ 1963.339894][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1963.339906][    C1] Call Trace:
[ 1963.339914][    C1]  <TASK>
[ 1963.339923][    C1]  dump_stack_lvl+0x189/0x250
[ 1963.339954][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1963.339980][    C1]  ? __pfx_queue_work_on+0x10/0x10
[ 1963.340002][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1963.340027][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1963.340066][    C1]  f2fs_handle_critical_error+0x37c/0x540
[ 1963.340098][    C1]  f2fs_write_end_io+0x886/0xb60
[ 1963.340129][    C1]  blk_update_request+0x57e/0xe60
[ 1963.340176][    C1]  blk_mq_end_request+0x3e/0x70
[ 1963.340211][    C1]  blk_done_softirq+0x10a/0x160
[ 1963.340244][    C1]  handle_softirqs+0x27d/0x880
[ 1963.340280][    C1]  ? run_ksoftirqd+0x9b/0x100
[ 1963.340320][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[ 1963.340345][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[ 1963.340372][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[ 1963.340394][    C1]  run_ksoftirqd+0x9b/0x100
[ 1963.340419][    C1]  ? __pfx_run_ksoftirqd+0x10/0x10
[ 1963.340449][    C1]  smpboot_thread_fn+0x542/0xa60
[ 1963.340474][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[ 1963.340504][    C1]  kthread+0x711/0x8a0
[ 1963.340523][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[ 1963.340546][    C1]  ? __pfx_kthread+0x10/0x10
[ 1963.340563][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1963.340586][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1963.340611][    C1]  ? __pfx_kthread+0x10/0x10
[ 1963.340627][    C1]  ret_from_fork+0x599/0xb30
[ 1963.340650][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 1963.340678][    C1]  ? __switch_to_asm+0x39/0x70
[ 1963.340694][    C1]  ? __switch_to_asm+0x33/0x70
[ 1963.340709][    C1]  ? __pfx_kthread+0x10/0x10
[ 1963.340725][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1963.340755][    C1]  </TASK>
[ 1963.340762][    C1] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[ 1963.530834][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) 
[ 1963.530856][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1963.530866][    C1] Call Trace:
[ 1963.530874][    C1]  <TASK>
[ 1963.530882][    C1]  dump_stack_lvl+0x189/0x250
[ 1963.530914][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1963.530939][    C1]  ? __pfx_queue_work_on+0x10/0x10
[ 1963.530961][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1963.530985][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1963.531017][    C1]  f2fs_handle_critical_error+0x37c/0x540
[ 1963.531053][    C1]  f2fs_write_end_io+0x886/0xb60
[ 1963.531084][    C1]  blk_update_request+0x57e/0xe60
[ 1963.531117][    C1]  blk_mq_end_request+0x3e/0x70
[ 1963.531141][    C1]  blk_done_softirq+0x10a/0x160
[ 1963.531164][    C1]  handle_softirqs+0x27d/0x880
[ 1963.531189][    C1]  ? run_ksoftirqd+0x9b/0x100
[ 1963.531236][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[ 1963.531261][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[ 1963.531286][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[ 1963.531308][    C1]  run_ksoftirqd+0x9b/0x100
[ 1963.531333][    C1]  ? __pfx_run_ksoftirqd+0x10/0x10
[ 1963.531363][    C1]  smpboot_thread_fn+0x542/0xa60
[ 1963.531388][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[ 1963.531418][    C1]  kthread+0x711/0x8a0
[ 1963.531436][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[ 1963.531459][    C1]  ? __pfx_kthread+0x10/0x10
[ 1963.531476][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1963.531499][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1963.531523][    C1]  ? __pfx_kthread+0x10/0x10
[ 1963.531539][    C1]  ret_from_fork+0x599/0xb30
[ 1963.531562][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 1963.531590][    C1]  ? __switch_to_asm+0x39/0x70
[ 1963.531606][    C1]  ? __switch_to_asm+0x33/0x70
[ 1963.531622][    C1]  ? __pfx_kthread+0x10/0x10
[ 1963.531638][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1963.531667][    C1]  </TASK>
[ 1963.531674][    C1] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[ 1963.721698][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) 
[ 1963.721729][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1963.721745][    C1] Call Trace:
[ 1963.721755][    C1]  <TASK>
[ 1963.721765][    C1]  dump_stack_lvl+0x189/0x250
[ 1963.721810][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1963.721848][    C1]  ? __pfx_queue_work_on+0x10/0x10
[ 1963.721880][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1963.721916][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1963.721963][    C1]  f2fs_handle_critical_error+0x37c/0x540
[ 1963.722008][    C1]  f2fs_write_end_io+0x886/0xb60
[ 1963.722060][    C1]  blk_update_request+0x57e/0xe60
[ 1963.722111][    C1]  blk_mq_end_request+0x3e/0x70
[ 1963.722146][    C1]  blk_done_softirq+0x10a/0x160
[ 1963.722181][    C1]  handle_softirqs+0x27d/0x880
[ 1963.722219][    C1]  ? run_ksoftirqd+0x9b/0x100
[ 1963.722258][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[ 1963.722292][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[ 1963.722328][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[ 1963.722359][    C1]  run_ksoftirqd+0x9b/0x100
[ 1963.722394][    C1]  ? __pfx_run_ksoftirqd+0x10/0x10
[ 1963.722435][    C1]  smpboot_thread_fn+0x542/0xa60
[ 1963.722471][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[ 1963.722514][    C1]  kthread+0x711/0x8a0
[ 1963.722541][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[ 1963.722574][    C1]  ? __pfx_kthread+0x10/0x10
[ 1963.722599][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1963.722633][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1963.722668][    C1]  ? __pfx_kthread+0x10/0x10
[ 1963.722692][    C1]  ret_from_fork+0x599/0xb30
[ 1963.722725][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 1963.722767][    C1]  ? __switch_to_asm+0x39/0x70
[ 1963.722793][    C1]  ? __switch_to_asm+0x33/0x70
[ 1963.722815][    C1]  ? __pfx_kthread+0x10/0x10
[ 1963.722838][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1963.722874][    C1]  </TASK>
[ 1963.722881][    C1] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[ 1963.913129][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) 
[ 1963.913152][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1963.913173][    C1] Call Trace:
[ 1963.913184][    C1]  <TASK>
[ 1963.913194][    C1]  dump_stack_lvl+0x189/0x250
[ 1963.913238][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1963.913269][    C1]  ? __pfx_queue_work_on+0x10/0x10
[ 1963.913292][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1963.913319][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1963.913352][    C1]  f2fs_handle_critical_error+0x37c/0x540
[ 1963.913383][    C1]  f2fs_write_end_io+0x886/0xb60
[ 1963.913414][    C1]  blk_update_request+0x57e/0xe60
[ 1963.913450][    C1]  blk_mq_end_request+0x3e/0x70
[ 1963.913474][    C1]  blk_done_softirq+0x10a/0x160
[ 1963.913498][    C1]  handle_softirqs+0x27d/0x880
[ 1963.913524][    C1]  ? run_ksoftirqd+0x9b/0x100
[ 1963.913553][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[ 1963.913578][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[ 1963.913604][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[ 1963.913626][    C1]  run_ksoftirqd+0x9b/0x100
[ 1963.913651][    C1]  ? __pfx_run_ksoftirqd+0x10/0x10
[ 1963.913682][    C1]  smpboot_thread_fn+0x542/0xa60
[ 1963.913707][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[ 1963.913737][    C1]  kthread+0x711/0x8a0
[ 1963.913755][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[ 1963.913779][    C1]  ? __pfx_kthread+0x10/0x10
[ 1963.913801][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1963.913829][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1963.913854][    C1]  ? __pfx_kthread+0x10/0x10
[ 1963.913870][    C1]  ret_from_fork+0x599/0xb30
[ 1963.913893][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 1963.913924][    C1]  ? __switch_to_asm+0x39/0x70
[ 1963.913941][    C1]  ? __switch_to_asm+0x33/0x70
[ 1963.913956][    C1]  ? __pfx_kthread+0x10/0x10
[ 1963.913974][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1963.914004][    C1]  </TASK>
[ 1964.096973][    C1] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[ 1964.103989][T19702] F2FS-fs (loop0): do_checkpoint failed err:-5, stop checkpoint
[ 1964.354319][T19461] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1964.613292][T17137] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[ 1964.766451][T17137] usb 4-1: Using ep0 maxpacket: 32
[ 1964.776090][T17137] usb 4-1: config 0 has an invalid interface number: 16 but max is 0
[ 1964.833247][T17137] usb 4-1: config 0 has no interface number 0
[ 1964.839428][T17137] usb 4-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[ 1964.873342][T17137] usb 4-1: config 0 interface 16 altsetting 0 endpoint 0x82 has invalid maxpacket 30768, setting to 1024
[ 1964.886465][T24502] loop4: detected capacity change from 0 to 64
[ 1964.903250][T17137] usb 4-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[ 1964.965724][T17137] usb 4-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d
[ 1965.004539][T17137] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1965.034277][T17137] usb 4-1: Product: syz
[ 1965.038507][T17137] usb 4-1: Manufacturer: syz
[ 1965.078330][T17137] usb 4-1: SerialNumber: syz
[ 1965.107506][T17137] usb 4-1: config 0 descriptor??
[ 1965.128575][T24494] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1965.142058][T24494] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1965.191251][T17137] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 1965.645517][T24506] loop0: detected capacity change from 0 to 40427
[ 1965.661039][T24506] F2FS-fs (loop0): build fault injection rate: 14
[ 1965.669397][T24506] F2FS-fs (loop0): build fault injection type: 0x3bfe8c
[ 1965.678403][T24506] F2FS-fs (loop0): invalid crc value
[ 1965.955387][T24506] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1965.975930][T24507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1966.013627][T24507] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1966.273031][T24506] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[ 1966.927625][T19702] syz-executor: attempt to access beyond end of device
[ 1966.927625][T19702] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1966.964884][T19702] CPU: 1 UID: 0 PID: 19702 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[ 1966.964915][T19702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1966.964930][T19702] Call Trace:
[ 1966.964945][T19702]  <TASK>
[ 1966.964955][T19702]  dump_stack_lvl+0x189/0x250
[ 1966.964998][T19702]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1966.965031][T19702]  ? __pfx_queue_work_on+0x10/0x10
[ 1966.965059][T19702]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1966.965092][T19702]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1966.965137][T19702]  f2fs_handle_critical_error+0x37c/0x540
[ 1966.965179][T19702]  f2fs_write_end_io+0x886/0xb60
[ 1966.965223][T19702]  __submit_merged_bio+0x256/0x6a0
[ 1966.965267][T19702]  __submit_merged_write_cond+0x255/0x530
[ 1966.965309][T19702]  f2fs_write_data_pages+0x261d/0x3000
[ 1966.965368][T19702]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1966.965440][T19702]  ? __page_cache_release+0x8a6/0xbb0
[ 1966.965482][T19702]  ? folios_put_refs+0x584/0x670
[ 1966.965525][T19702]  ? __lock_acquire+0xab9/0xd20
[ 1966.965564][T19702]  ? do_raw_spin_lock+0x121/0x290
[ 1966.965600][T19702]  ? do_raw_spin_unlock+0x122/0x240
[ 1966.965625][T19702]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1966.965652][T19702]  do_writepages+0x32e/0x550
[ 1966.965697][T19702]  ? do_raw_spin_unlock+0x122/0x240
[ 1966.965726][T19702]  filemap_fdatawrite+0x199/0x240
[ 1966.965761][T19702]  ? __pfx_filemap_fdatawrite+0x10/0x10
[ 1966.965862][T19702]  ? do_raw_spin_unlock+0x122/0x240
[ 1966.965891][T19702]  f2fs_sync_dirty_inodes+0x30f/0x830
[ 1966.965936][T19702]  f2fs_write_checkpoint+0x93e/0x2440
[ 1966.965962][T19702]  ? __lock_acquire+0xab9/0xd20
[ 1966.966022][T19702]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[ 1966.966113][T19702]  kill_f2fs_super+0x2cc/0x6d0
[ 1966.966148][T19702]  ? __pfx_kill_f2fs_super+0x10/0x10
[ 1966.966193][T19702]  ? shrinker_free+0x2ce/0x3e0
[ 1966.966226][T19702]  deactivate_locked_super+0xbc/0x130
[ 1966.966255][T19702]  cleanup_mnt+0x425/0x4c0
[ 1966.966280][T19702]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1966.966318][T19702]  task_work_run+0x1d4/0x260
[ 1966.966347][T19702]  ? __pfx_task_work_run+0x10/0x10
[ 1966.966378][T19702]  ? exit_to_user_mode_loop+0x55/0x4f0
[ 1966.966413][T19702]  exit_to_user_mode_loop+0xff/0x4f0
[ 1966.966442][T19702]  ? rcu_is_watching+0x15/0xb0
[ 1966.966482][T19702]  do_syscall_64+0x2e9/0xfa0
[ 1966.966505][T19702]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1966.966528][T19702]  ? clear_bhb_loop+0x60/0xb0
[ 1966.966556][T19702]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1966.966578][T19702] RIP: 0033:0x7f357d7909f7
[ 1966.966600][T19702] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[ 1966.966620][T19702] RSP: 002b:00007ffe30eafbe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1966.966645][T19702] RAX: 0000000000000000 RBX: 00007f357d811d7d RCX: 00007f357d7909f7
[ 1966.966662][T19702] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe30eafca0
[ 1966.966676][T19702] RBP: 00007ffe30eafca0 R08: 0000000000000000 R09: 0000000000000000
[ 1966.966691][T19702] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe30eb0d30
[ 1966.966706][T19702] R13: 00007f357d811d7d R14: 00000000001e02e7 R15: 00007ffe30eb0d70
[ 1966.966744][T19702]  </TASK>
[ 1966.966902][T19702] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[ 1967.366063][T10536] usb 4-1: USB disconnect, device number 66
[ 1967.514470][T24500] loop2: detected capacity change from 0 to 40427
[ 1967.536153][T24500] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[ 1967.544989][T24500] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[ 1967.584354][T24500] F2FS-fs (loop2): invalid crc value
[ 1967.591698][T24516] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport)
[ 1967.626973][T24516] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport)
[ 1968.034159][T24500] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1968.081851][T24500] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[ 1968.119521][T24500] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[ 1969.286308][T24533] veth2: entered promiscuous mode
[ 1969.291460][T24533] veth2: entered allmulticast mode
[ 1969.703710][T24533] loop0: detected capacity change from 0 to 32768
[ 1969.747468][T24533] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4021 (24533)
[ 1969.768467][T24533] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1969.782274][T24533] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[ 1971.059886][T24533] BTRFS info (device loop0): enabling ssd optimizations
[ 1971.067080][T24533] BTRFS info (device loop0): turning on async discard
[ 1971.073947][T24533] BTRFS info (device loop0): enabling free space tree
[ 1971.920905][T18509] Bluetooth: hci5: unexpected event for opcode 0x4c56
[ 1972.162731][T24568] loop4: detected capacity change from 0 to 40427
[ 1972.196825][T24568] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[ 1972.204823][T24568] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[ 1972.229513][T24568] F2FS-fs (loop4): invalid crc value
[ 1972.322949][T24568] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1972.343144][T24568] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[ 1972.350298][T24568] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[ 1972.570935][T24576] loop1: detected capacity change from 0 to 1024
[ 1973.499891][T24576] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1974.178249][T19702] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1974.498123][T24584] loop3: detected capacity change from 0 to 512
[ 1974.506107][T24584] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 1974.512940][T24584] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[ 1974.557979][T24584] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.4033: bad orphan inode 131083
[ 1974.575178][T24584] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1975.258499][T20221] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1976.193993][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1976.200424][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1977.583367][ T5889] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[ 1977.793347][ T5889] usb 4-1: Using ep0 maxpacket: 8
[ 1977.823137][ T5889] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[ 1977.869016][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1977.892881][ T5889] usb 4-1: Product: syz
[ 1977.907883][ T5889] usb 4-1: Manufacturer: syz
[ 1977.933713][ T5889] usb 4-1: SerialNumber: syz
[ 1977.959803][ T5889] usb 4-1: config 0 descriptor??
[ 1977.977634][ T5889] gspca_main: sonixj-2.14.0 probing 0c45:613e
[ 1978.227836][T17137] libceph: connect (1)[c::]:6789 error -101
[ 1978.346253][T17137] libceph: mon0 (1)[c::]:6789 connect error
[ 1978.419696][ T5889] gspca_sonixj: reg_r err -32
[ 1978.427932][ T5889] sonixj 4-1:0.0: probe with driver sonixj failed with error -32
[ 1978.505532][T20766] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1978.614699][T17137] libceph: connect (1)[c::]:6789 error -101
[ 1978.631676][T17137] libceph: mon0 (1)[c::]:6789 connect error
[ 1978.764942][T24607] ceph: No mds server is up or the cluster is laggy
[ 1980.330649][T24629] loop0: detected capacity change from 0 to 2048
[ 1980.362690][T24629] ext2: Unknown parameter 'hash'
[ 1980.460972][T24629] loop0: detected capacity change from 0 to 1024
[ 1981.053413][T17137] usb 4-1: USB disconnect, device number 67
[ 1981.805106][ T6266] hfsplus: b-tree write err: -5, ino 4
[ 1981.969705][T24643] loop0: detected capacity change from 0 to 512
[ 1982.083376][T24643] EXT4-fs (loop0): can't mount with both data=journal and dax
[ 1982.400401][T24643] loop0: detected capacity change from 0 to 1024
[ 1983.320462][T24660] loop4: detected capacity change from 0 to 32768
[ 1983.338945][T24660] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4054 (24660)
[ 1983.373921][T24660] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1983.385416][T24660] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[ 1983.717341][T24660] BTRFS info (device loop4): enabling ssd optimizations
[ 1983.724546][T24660] BTRFS info (device loop4): turning on async discard
[ 1983.731339][T24660] BTRFS info (device loop4): enabling free space tree
[ 1985.014386][T24677] netlink: 'syz.0.4055': attribute type 1 has an invalid length.
[ 1985.139527][T18899] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1985.256081][T24681] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[ 1985.294586][T24681] bond4: (slave vxcan3): Error -95 calling set_mac_address
[ 1985.493067][T24683] bond4: (slave bridge3): Enslaving as an active interface with a down link
[ 1986.347923][T24689] loop2: detected capacity change from 0 to 32768
[ 1986.382448][T24689] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.4058 (24689)
[ 1986.407763][T24689] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1986.418055][T24689] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[ 1986.631412][T24689] BTRFS info (device loop2): enabling ssd optimizations
[ 1986.638513][T24689] BTRFS info (device loop2): turning on async discard
[ 1986.645386][T24689] BTRFS info (device loop2): enabling free space tree
[ 1987.575388][T19461] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1987.632248][T24707] loop0: detected capacity change from 0 to 2048
[ 1987.669303][T24707] ext2: Unknown parameter 'hash'
[ 1987.723982][T24709] loop4: detected capacity change from 0 to 2048
[ 1987.791371][T24709] ext2: Unknown parameter 'hash'
[ 1988.485811][T24709] loop4: detected capacity change from 0 to 1024
[ 1988.965206][T24727] loop0: detected capacity change from 0 to 1024
[ 1989.064354][T24727] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1990.746715][T19702] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1990.994228][T24742] loop2: detected capacity change from 0 to 32768
[ 1991.013760][T24742] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.4068 (24742)
[ 1991.032611][T24742] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1991.043349][T24742] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[ 1991.204772][T24742] BTRFS info (device loop2): enabling ssd optimizations
[ 1991.211777][T24742] BTRFS info (device loop2): turning on async discard
[ 1991.218673][T24742] BTRFS info (device loop2): enabling free space tree
[ 1991.225470][T24742] BTRFS info (device loop2): use zlib compression, level 3
[ 1992.324326][T19461] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1992.476182][T24767] loop3: detected capacity change from 0 to 1024
[ 1992.557343][T24767] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1993.275010][T16245] hfsplus: b-tree write err: -5, ino 4
[ 1993.709129][T24760] loop0: detected capacity change from 0 to 4096
[ 1993.816856][T20221] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1993.999553][T24760] EXT4-fs (loop0): Test dummy encryption mode enabled
[ 1994.358943][T24792] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport)
[ 1994.701682][T24760] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1996.237725][T24806] loop2: detected capacity change from 0 to 32768
[ 1996.245485][T24806] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.4082 (24806)
[ 1996.260816][T24806] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1996.271022][T24806] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[ 1996.345779][T24806] BTRFS info (device loop2): enabling ssd optimizations
[ 1996.352762][T24806] BTRFS info (device loop2): turning on async discard
[ 1996.362592][T24806] BTRFS info (device loop2): enabling free space tree
[ 1997.046418][T19702] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1997.126255][T24797] loop4: detected capacity change from 0 to 4096
[ 1997.191608][T19461] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1997.374014][T24797] EXT4-fs (loop4): Test dummy encryption mode enabled
[ 1997.403669][T24797] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR
[ 1997.403746][T24797] EXT4-fs: failed to create workqueue
[ 1997.431448][T24797] EXT4-fs (loop4): mount failed
[ 1997.474442][T24829] loop0: detected capacity change from 0 to 128
[ 1998.030883][T24829] loop0: detected capacity change from 0 to 65536
[ 1998.154940][T24829] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[ 1998.199654][T24829] XFS (loop0): Ending clean mount
[ 1998.208546][T24829] XFS (loop0): Quotacheck needed: Please wait.
[ 1998.359234][T24829] XFS (loop0): Quotacheck: Done.
[ 1998.632202][T24846] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport)
[ 1999.627954][T19702] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[ 2000.128508][T24866] loop2: detected capacity change from 0 to 2048
[ 2001.273993][T24866] ext2: Unknown parameter 'hash'
[ 2001.657230][T24866] loop2: detected capacity change from 0 to 1024
[ 2002.467775][T24880] netlink: 'syz.0.4096': attribute type 1 has an invalid length.
[ 2002.643763][ T6258] hfsplus: b-tree write err: -5, ino 4
[ 2002.758295][T24883] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[ 2002.821405][T24883] bond5: (slave vxcan3): Error -95 calling set_mac_address
[ 2003.290635][T24888] loop2: detected capacity change from 0 to 65536
[ 2003.311740][T24888] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[ 2003.418235][T24888] XFS (loop2): Ending clean mount
[ 2003.425336][T24888] XFS (loop2): Quotacheck needed: Please wait.
[ 2003.476724][T19781] XFS (loop2): Metadata corruption detected at xfs_dinode_verify+0x1a6/0x1570, inode 0x26 dinode
[ 2003.511978][T24885] bond5: (slave bridge4): Enslaving as an active interface with a down link
[ 2003.535554][T24898] loop3: detected capacity change from 0 to 64
[ 2003.542620][T19781] XFS (loop2): Unmount and run xfs_repair
[ 2003.564675][T19781] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[ 2003.626314][T24886] macvlan2: entered promiscuous mode
[ 2003.631794][T24886] macvlan2: entered allmulticast mode
[ 2003.643418][T19781] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00  IN..............
[ 2003.670440][T19781] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 2004.173285][T19781] 00000020: 34 f7 58 68 7a bb 44 4d 34 f7 58 68 7a bb 44 4d  4.Xhz.DM4.Xhz.DM
[ 2004.182816][T19781] 00000030: 34 f7 58 68 7a bb 44 4d 00 00 00 00 00 00 00 0a  4.Xhz.DM........
[ 2004.196744][T24886] bond5: (slave macvlan2): Error -98 calling set_mac_address
[ 2004.247139][T19781] 00000040: 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 01  ................
[ 2004.315189][T19781] 00000050: 00 00 25 01 00 00 00 00 00 00 00 00 38 7c 45 d7  ..%.........8|E.
[ 2004.368561][T19781] 00000060: ff ff ff ff da a2 56 a4 00 00 00 00 00 00 00 08  ......V.........
[ 2004.404580][T19781] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[ 2004.481127][T24888] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[ 2004.683106][T24902] XFS (loop2): Metadata corruption detected at xfs_dinode_verify+0x1a6/0x1570, inode 0x26 dinode
[ 2004.694655][T24902] XFS (loop2): Unmount and run xfs_repair
[ 2004.700463][T24902] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[ 2004.708921][T24902] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00  IN..............
[ 2004.718451][T24902] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 2004.728727][T24902] 00000020: 34 f7 58 68 7a bb 44 4d 34 f7 58 68 7a bb 44 4d  4.Xhz.DM4.Xhz.DM
[ 2004.748344][T24902] 00000030: 34 f7 58 68 7a bb 44 4d 00 00 00 00 00 00 00 0a  4.Xhz.DM........
[ 2004.759515][T24902] 00000040: 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 01  ................
[ 2004.770772][T24902] 00000050: 00 00 25 01 00 00 00 00 00 00 00 00 38 7c 45 d7  ..%.........8|E.
[ 2004.780578][T24902] 00000060: ff ff ff ff da a2 56 a4 00 00 00 00 00 00 00 08  ......V.........
[ 2004.794565][T24902] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[ 2005.255832][T19461] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[ 2005.311127][T19461] XFS (loop2): Uncorrected metadata errors detected; please run xfs_repair.
[ 2007.950496][T24931] loop4: detected capacity change from 0 to 128
[ 2008.429320][T24931] loop4: detected capacity change from 0 to 65536
[ 2008.681311][T24934] loop1: detected capacity change from 0 to 32768
[ 2008.693106][T24934] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4111 (24934)
[ 2008.726535][T24934] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 2008.736790][T24934] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[ 2008.804181][T24931] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[ 2008.935019][T24931] XFS (loop4): Ending clean mount
[ 2008.942225][T24931] XFS (loop4): Quotacheck needed: Please wait.
[ 2009.045323][T24934] BTRFS info (device loop1): enabling ssd optimizations
[ 2009.052311][T24934] BTRFS info (device loop1): turning on async discard
[ 2009.059242][T24934] BTRFS info (device loop1): enabling free space tree
[ 2009.066069][T24934] BTRFS info (device loop1): use zlib compression, level 3
[ 2009.113916][T24931] XFS (loop4): Quotacheck: Done.
[ 2010.571513][T20766] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 2010.699460][T18899] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[ 2012.589792][T24991] netlink: 'syz.4.4119': attribute type 12 has an invalid length.
[ 2014.176192][T18509] Bluetooth: hci0: unexpected event for opcode 0x4c56
[ 2014.456048][T25018] loop3: detected capacity change from 0 to 40427
[ 2014.500597][T25018] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[ 2014.508476][T25018] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[ 2014.527308][T25018] F2FS-fs (loop3): invalid crc value
[ 2014.588972][T25018] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 2014.602683][T25018] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[ 2014.609866][T25018] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 2017.062559][T25031] loop2: detected capacity change from 0 to 32768
[ 2017.075809][T25031] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.4131 (25031)
[ 2017.109840][T25031] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 2017.121210][T25031] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[ 2018.160302][T25031] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[ 2018.228645][T25031] BTRFS error (device loop2): open_ctree failed: -12
[ 2018.972756][T25087] loop4: detected capacity change from 0 to 256
[ 2019.179879][T25087] FAT-fs (loop4): Directory bread(block 64) failed
[ 2019.239202][T25092] loop3: detected capacity change from 0 to 64
[ 2019.249723][T25087] FAT-fs (loop4): Directory bread(block 65) failed
[ 2019.807165][T25087] FAT-fs (loop4): Directory bread(block 66) failed
[ 2019.814262][T25087] FAT-fs (loop4): Directory bread(block 67) failed
[ 2019.821049][T25087] FAT-fs (loop4): Directory bread(block 68) failed
[ 2019.833248][T25087] FAT-fs (loop4): Directory bread(block 69) failed
[ 2019.873768][T25087] FAT-fs (loop4): Directory bread(block 70) failed
[ 2019.880407][T25087] FAT-fs (loop4): Directory bread(block 71) failed
[ 2019.897730][T25087] FAT-fs (loop4): Directory bread(block 72) failed
[ 2019.932063][T25087] FAT-fs (loop4): Directory bread(block 73) failed
[ 2021.343674][T17137] usb 3-1: new high-speed USB device number 71 using dummy_hcd
[ 2021.515826][T17137] usb 3-1: Using ep0 maxpacket: 16
[ 2022.043586][T17137] usb 3-1: config 0 has an invalid interface number: 231 but max is 0
[ 2022.051829][T17137] usb 3-1: config 0 has no interface number 0
[ 2022.134310][T17137] usb 3-1: New USB device found, idVendor=0411, idProduct=006e, bcdDevice=c1.05
[ 2022.145834][T17137] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2022.166886][T17137] usb 3-1: config 0 descriptor??
[ 2022.186592][T17137] asix 3-1:0.231: probe with driver asix failed with error -22
[ 2023.279845][T10536] usb 3-1: USB disconnect, device number 71
[ 2023.664549][T25126] netlink: 'syz.0.4154': attribute type 1 has an invalid length.
[ 2023.784030][T25126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4154'.
[ 2023.801170][T25128] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address
[ 2023.837685][T25128] bond6: (slave vxcan3): Error -95 calling set_mac_address
[ 2023.981346][T25126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4154'.
[ 2024.175076][T25138] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4155'.
[ 2024.703780][T25133] macvlan2: entered promiscuous mode
[ 2024.709172][T25133] macvlan2: entered allmulticast mode
[ 2024.763421][T25133] bond6: entered promiscuous mode
[ 2024.769372][T25133] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 2024.934619][T25133] bond6: left promiscuous mode
[ 2025.223525][T17137] usb 3-1: new high-speed USB device number 72 using dummy_hcd
[ 2025.573483][T17137] usb 3-1: Using ep0 maxpacket: 16
[ 2026.104352][T17137] usb 3-1: config 0 has an invalid interface number: 231 but max is 0
[ 2026.147821][T17137] usb 3-1: config 0 has no interface number 0
[ 2026.310716][T17137] usb 3-1: New USB device found, idVendor=0411, idProduct=006e, bcdDevice=c1.05
[ 2026.323392][T17137] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2026.341780][T17137] usb 3-1: config 0 descriptor??
[ 2026.357040][T17137] asix 3-1:0.231: probe with driver asix failed with error -22
[ 2028.483648][T10536] usb 3-1: USB disconnect, device number 72
[ 2030.026118][T25189] process 'syz.2.4170' launched '/dev/fd/5' with NULL argv: empty string added
[ 2030.446798][T25191] netlink: 'syz.2.4171': attribute type 1 has an invalid length.
[ 2030.497375][T25191] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[ 2030.510562][T25191] bond4: (slave vxcan3): Error -95 calling set_mac_address
[ 2030.533112][T25193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4171'.
[ 2030.548078][T25193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4171'.
[ 2030.656536][T25194] macvlan3: entered promiscuous mode
[ 2030.661976][T25194] macvlan3: entered allmulticast mode
[ 2030.734391][T25194] bond4: entered promiscuous mode
[ 2030.747919][T25194] 8021q: adding VLAN 0 to HW filter on device macvlan3
[ 2030.794860][T25194] bond4: left promiscuous mode
[ 2031.079857][T25196] loop2: detected capacity change from 0 to 128
[ 2031.532205][T25196] loop2: detected capacity change from 0 to 65536
[ 2031.593423][T25196] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[ 2031.640969][T25196] XFS (loop2): Ending clean mount
[ 2031.648575][T25196] XFS (loop2): Quotacheck needed: Please wait.
[ 2031.735202][T25196] XFS (loop2): Quotacheck: Done.
[ 2032.639998][T19461] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[ 2033.617080][T25232] netlink: 'syz.0.4182': attribute type 1 has an invalid length.
[ 2033.656469][T18509] Bluetooth: hci3: unexpected event for opcode 0x4c56
[ 2033.767312][T25239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4182'.
[ 2033.786652][T25239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4182'.
[ 2033.843297][T10536] usb 5-1: new high-speed USB device number 80 using dummy_hcd
[ 2033.935285][T25237] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address
[ 2033.990867][T25237] bond7: (slave vxcan3): Error -95 calling set_mac_address
[ 2034.008829][T10536] usb 5-1: Using ep0 maxpacket: 32
[ 2034.022269][T10536] usb 5-1: config 0 has an invalid interface number: 16 but max is 0
[ 2034.040550][T25235] loop2: detected capacity change from 0 to 40427
[ 2034.050914][T25235] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[ 2034.058782][T25235] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[ 2034.060485][T10536] usb 5-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config
[ 2034.076260][T25235] F2FS-fs (loop2): invalid crc value
[ 2034.169355][T10536] usb 5-1: config 0 has no interface number 0
[ 2034.198780][T10536] usb 5-1: config 0 interface 16 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 2034.216281][T25235] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 2034.236435][T25235] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[ 2034.243580][T25235] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[ 2034.278761][T10536] usb 5-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d
[ 2034.297479][T10536] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2034.323321][T25240] macvlan2: entered promiscuous mode
[ 2034.331009][T10536] usb 5-1: Product: syz
[ 2034.339079][T25240] macvlan2: entered allmulticast mode
[ 2034.350669][T10536] usb 5-1: Manufacturer: syz
[ 2034.370556][T10536] usb 5-1: SerialNumber: syz
[ 2034.375617][T25240] bond7: entered promiscuous mode
[ 2034.396509][T25240] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 2034.418395][T10536] usb 5-1: config 0 descriptor??
[ 2034.444673][T25240] bond7: left promiscuous mode
[ 2034.456583][T10536] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[ 2035.335816][T10536] snd-usb-audio 5-1:0.16: probe with driver snd-usb-audio failed with error -2
[ 2035.995062][T25253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2036.109611][T25253] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2036.482397][T25258] loop1: detected capacity change from 0 to 128
[ 2036.590067][ T6962] udevd[6962]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.16/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2036.987750][T25258] loop1: detected capacity change from 0 to 65536
[ 2037.078272][T10536] usb 5-1: USB disconnect, device number 80
[ 2037.155888][T25258] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[ 2037.208837][T25258] XFS (loop1): Ending clean mount
[ 2037.215925][T25258] XFS (loop1): Quotacheck needed: Please wait.
[ 2037.341881][T25258] XFS (loop1): Quotacheck: Done.
[ 2037.575157][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 2037.582550][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 2037.586365][T25272] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4189'.
[ 2038.088775][T25274] loop0: detected capacity change from 0 to 2048
[ 2038.144169][T25274] ext2: Unknown parameter 'hash'
[ 2038.282951][T25274] loop0: detected capacity change from 0 to 1024
[ 2038.455262][ T6260] hfsplus: b-tree write err: -5, ino 4
[ 2038.609263][T20766] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[ 2038.840310][T25284] loop1: detected capacity change from 0 to 64
[ 2040.103372][T25296] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport)
[ 2040.730339][T25300] netlink: 'syz.3.4200': attribute type 1 has an invalid length.
[ 2040.847911][T25308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4200'.
[ 2040.918317][T25308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4200'.
[ 2040.987400][T25306] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[ 2041.009251][T25306] bond5: (slave vxcan3): Error -95 calling set_mac_address
[ 2041.079670][T25300] macvlan2: entered promiscuous mode
[ 2041.105599][T25300] macvlan2: entered allmulticast mode
[ 2041.121703][T25300] bond5: entered promiscuous mode
[ 2041.138598][T25300] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 2041.180087][T25300] bond5: left promiscuous mode
[ 2041.243421][T25288] loop0: detected capacity change from 0 to 32768
[ 2041.313287][T25288] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 2041.504359][T25288] XFS (loop0): Ending clean mount
[ 2042.215074][T19702] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 2042.232903][T25310] loop2: detected capacity change from 0 to 40427
[ 2042.259659][T25310] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[ 2042.289761][T25310] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[ 2042.370456][T25310] F2FS-fs (loop2): invalid crc value
[ 2042.798817][T25310] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 2042.834777][T25310] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[ 2042.847840][T25310] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[ 2043.733933][T25356] loop3: detected capacity change from 0 to 32768
[ 2043.768073][T25356] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4215 (25356)
[ 2043.784259][T25356] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 2043.794489][T25356] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[ 2044.129566][T25356] BTRFS info (device loop3): enabling ssd optimizations
[ 2044.136717][T25356] BTRFS info (device loop3): turning on async discard
[ 2044.143545][T25356] BTRFS info (device loop3): enabling free space tree
[ 2044.150325][T25356] BTRFS info (device loop3): use zlib compression, level 3
[ 2045.077071][T25377] loop1: detected capacity change from 0 to 2048
[ 2045.095840][T25377] ext2: Unknown parameter 'hash'
[ 2045.162838][T25377] loop1: detected capacity change from 0 to 1024
[ 2045.454851][T20221] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 2046.166959][T25388] loop2: detected capacity change from 0 to 64
[ 2047.270755][T25397] loop4: detected capacity change from 0 to 32768
[ 2047.286271][T25397] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4223 (25397)
[ 2047.302533][T25397] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 2047.312903][T25397] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[ 2047.490080][T25397] BTRFS info (device loop4): enabling ssd optimizations
[ 2047.497138][T25397] BTRFS info (device loop4): turning on async discard
[ 2047.503973][T25397] BTRFS info (device loop4): enabling free space tree
[ 2047.510744][T25397] BTRFS info (device loop4): use zlib compression, level 3
[ 2048.298253][T25415] loop0: detected capacity change from 0 to 2048
[ 2048.424343][T25415] ext2: Unknown parameter 'hash'
[ 2048.477103][T18899] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 2048.640957][T25415] loop0: detected capacity change from 0 to 1024
[ 2049.518528][T21380] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[ 2049.631263][   T36] hfsplus: b-tree write err: -5, ino 4
[ 2049.672179][T25435] overlayfs: failed to resolve './file0': -2
[ 2049.764566][T21380] usb 4-1: Using ep0 maxpacket: 16
[ 2049.820587][T21380] usb 4-1: config 0 has an invalid interface number: 231 but max is 0
[ 2049.866865][T21380] usb 4-1: config 0 has no interface number 0
[ 2049.913678][T21380] usb 4-1: New USB device found, idVendor=0411, idProduct=006e, bcdDevice=c1.05
[ 2049.991972][T21380] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2050.257157][T21380] usb 4-1: config 0 descriptor??
[ 2050.307057][T21380] asix 4-1:0.231: probe with driver asix failed with error -22
[ 2050.756758][T10536] usb 4-1: USB disconnect, device number 68
[ 2051.148939][T25441] loop2: detected capacity change from 0 to 128
[ 2051.645364][T25441] loop2: detected capacity change from 0 to 65536
[ 2051.734845][T25441] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[ 2051.827353][T25441] XFS (loop2): Ending clean mount
[ 2051.834494][T25441] XFS (loop2): Quotacheck needed: Please wait.
[ 2051.904291][T25441] XFS (loop2): Quotacheck: Done.
[ 2052.025589][T19781] hfsplus: b-tree write err: -5, ino 4
[ 2052.803498][T25458] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport)
[ 2053.612117][T19461] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[ 2054.706717][T25476] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4241'.
[ 2054.726500][T25476] loop0: detected capacity change from 0 to 512
[ 2054.734349][T25476] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[ 2054.762094][T25476] EXT4-fs (loop0): 1 truncate cleaned up
[ 2054.769284][T25476] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2055.610278][T19702] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2055.712440][T25485] loop3: detected capacity change from 0 to 2048
[ 2055.741253][T25485] ext2: Unknown parameter 'hash'
[ 2055.848458][T25485] loop3: detected capacity change from 0 to 1024
[ 2055.955919][T14892] hfsplus: b-tree write err: -5, ino 4
[ 2057.480727][T25508] loop1: detected capacity change from 0 to 32768
[ 2057.494765][T25508] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4250 (25508)
[ 2057.510160][T25508] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 2057.521775][T25508] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[ 2058.045601][T25528] loop4: detected capacity change from 0 to 32768
[ 2058.088872][T25528] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4252 (25528)
[ 2058.138622][T25528] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 2058.148957][T25528] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[ 2058.163460][T25508] BTRFS info (device loop1): enabling ssd optimizations
[ 2058.170483][T25508] BTRFS info (device loop1): turning on async discard
[ 2058.177316][T25508] BTRFS info (device loop1): enabling free space tree
[ 2058.384412][T25544] overlayfs: failed to resolve './file1': -2
[ 2058.849593][T25528] BTRFS info (device loop4): enabling ssd optimizations
[ 2058.857480][T25528] BTRFS info (device loop4): turning on async discard
[ 2058.864377][T25528] BTRFS info (device loop4): enabling free space tree
[ 2058.871151][T25528] BTRFS info (device loop4): use zlib compression, level 3
[ 2059.265316][T18899] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 2059.334702][T20766] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 2060.014991][T25552] loop1: detected capacity change from 0 to 128
[ 2060.558091][T25552] loop1: detected capacity change from 0 to 65536
[ 2060.724535][T25552] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[ 2061.373905][T25565] genirq: Flags mismatch irq 7. 00200000 (comedi_parport) vs. 00200080 (ttyS3)
[ 2061.420684][T25552] XFS (loop1): Ending clean mount
[ 2061.453676][T25552] XFS (loop1): Quotacheck needed: Please wait.
[ 2061.570852][T25552] XFS (loop1): Quotacheck: Done.
[ 2061.825482][T25570] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4254'.
[ 2062.535397][T25574] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport)
[ 2063.123255][T17137] usb 5-1: new high-speed USB device number 81 using dummy_hcd
[ 2063.139573][T20766] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[ 2063.375298][T17137] usb 5-1: Using ep0 maxpacket: 32
[ 2063.487263][T17137] usb 5-1: config 0 has an invalid interface number: 16 but max is 0
[ 2064.088990][T25583] loop0: detected capacity change from 0 to 32768
[ 2064.102299][T25583] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4262 (25583)
[ 2064.119045][T25583] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 2064.129291][T25583] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[ 2064.169879][T17137] usb 5-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config
[ 2064.257957][T25583] BTRFS info (device loop0): enabling ssd optimizations
[ 2064.265048][T25583] BTRFS info (device loop0): turning on async discard
[ 2064.271818][T25583] BTRFS info (device loop0): enabling free space tree
[ 2064.279807][T25583] BTRFS info (device loop0): use zlib compression, level 3
[ 2064.303308][T17137] usb 5-1: config 0 has no interface number 0
[ 2064.309499][T17137] usb 5-1: config 0 interface 16 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 2064.378768][T17137] usb 5-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d
[ 2064.443334][T17137] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2064.451400][T17137] usb 5-1: Product: syz
[ 2064.563508][T25594] loop2: detected capacity change from 0 to 2048
[ 2064.577461][T17137] usb 5-1: Manufacturer: syz
[ 2064.584280][T17137] usb 5-1: SerialNumber: syz
[ 2064.638927][T25594] ext2: Unknown parameter 'hash'
[ 2065.183264][T17137] usb 5-1: config 0 descriptor??
[ 2065.196842][T17137] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[ 2066.191515][T17137] snd-usb-audio 5-1:0.16: probe with driver snd-usb-audio failed with error -2
[ 2066.536450][T17137] usb 5-1: USB disconnect, device number 81
[ 2066.638302][ T5837] udevd[5837]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.16/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2066.682885][T19702] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 2067.462160][T25633] loop1: detected capacity change from 0 to 128
[ 2068.520414][T25633] loop1: detected capacity change from 0 to 65536
[ 2068.677074][T25633] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[ 2068.790892][T25633] XFS (loop1): Ending clean mount
[ 2068.797621][T25633] XFS (loop1): Quotacheck needed: Please wait.
[ 2068.851693][T25633] XFS (loop1): Quotacheck: Done.
[ 2069.484714][T20766] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[ 2070.166092][T25661] genirq: Flags mismatch irq 7. 00200000 (comedi_parport) vs. 00200080 (ttyS3)
[ 2071.148453][T25665] netlink: 'syz.1.4275': attribute type 1 has an invalid length.
[ 2071.581197][T25671] loop4: detected capacity change from 0 to 32768
[ 2071.596583][T25671] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4277 (25671)
[ 2071.743326][T25671] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 2071.754681][T25671] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[ 2072.006534][T25671] BTRFS info (device loop4): enabling ssd optimizations
[ 2072.014774][T25671] BTRFS info (device loop4): turning on async discard
[ 2072.021559][T25671] BTRFS info (device loop4): enabling free space tree
[ 2072.028496][T25671] BTRFS info (device loop4): use zlib compression, level 3
[ 2072.100673][T25672] macvlan2: entered promiscuous mode
[ 2072.115164][T25672] macvlan2: entered allmulticast mode
[ 2072.129842][T25672] bond3: entered promiscuous mode
[ 2072.148268][T25672] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 2072.208118][T25672] bond3: left promiscuous mode
[ 2072.572136][T18899] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 2072.975475][T25696] loop3: detected capacity change from 0 to 32768
[ 2072.992360][T25696] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4281 (25696)
[ 2073.046622][T25696] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 2073.056850][T25696] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[ 2073.676718][T25696] BTRFS info (device loop3): enabling ssd optimizations
[ 2073.683853][T25696] BTRFS info (device loop3): turning on async discard
[ 2073.690674][T25696] BTRFS info (device loop3): enabling free space tree
[ 2075.746840][T25732] genirq: Flags mismatch irq 7. 00200000 (comedi_parport) vs. 00200080 (ttyS3)
[ 2076.127174][T20221] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 2083.535864][T19808] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[ 2083.776729][T19808] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[ 2083.787612][T19808] usb 1-1: config 0 has no interface number 0
[ 2083.801222][T19808] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 2083.812761][T25775] loop4: detected capacity change from 0 to 32768
[ 2083.822225][T19808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2083.831437][T19808] usb 1-1: Product: syz
[ 2083.836164][T19808] usb 1-1: Manufacturer: syz
[ 2083.858100][T19808] usb 1-1: SerialNumber: syz
[ 2083.894475][T19808] usb 1-1: config 0 descriptor??
[ 2083.900627][T25775] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4300 (25775)
[ 2083.997689][T25775] BTRFS error (device loop4): open_ctree failed: -4
[ 2084.170688][T19808] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[ 2084.220899][T19808] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 2084.267018][T19808] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[ 2084.324415][T19808] usb 1-1: media controller created
[ 2084.474845][T19808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2084.637708][T19808] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[ 2085.029386][T19808] usb 1-1: USB disconnect, device number 62
[ 2088.955792][T25831] loop0: detected capacity change from 0 to 32768
[ 2089.007910][T25831] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4317 (25831)
[ 2089.100076][T25845] genirq: Flags mismatch irq 7. 00200000 (comedi_parport) vs. 00200080 (ttyS3)
[ 2089.188333][T25831] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 2089.493425][T25831] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[ 2090.184565][T25831] BTRFS info (device loop0): enabling ssd optimizations
[ 2090.225285][T25831] BTRFS info (device loop0): turning on async discard
[ 2090.411351][T25865] loop2: detected capacity change from 0 to 32768
[ 2090.429449][T25865] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.4324 (25865)
[ 2090.445110][T25865] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 2090.455296][T25865] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[ 2090.506798][T25831] BTRFS info (device loop0): enabling free space tree
[ 2090.634337][T25865] BTRFS info (device loop2): enabling ssd optimizations
[ 2090.641428][T25865] BTRFS info (device loop2): turning on async discard
[ 2090.648441][T25865] BTRFS info (device loop2): enabling free space tree
[ 2090.655267][T25865] BTRFS info (device loop2): use zlib compression, level 3
[ 2091.593254][T12328] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[ 2091.763356][T12328] usb 4-1: Using ep0 maxpacket: 8
[ 2091.780725][T12328] usb 4-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30
[ 2092.168779][T12328] usb 4-1: config 0 interface 0 altsetting 250 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2092.266296][T12328] usb 4-1: config 0 interface 0 altsetting 250 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2092.333275][T12328] usb 4-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[ 2092.350448][T25898] loop1: detected capacity change from 0 to 1024
[ 2092.408666][T19702] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 2092.452133][T12328] usb 4-1: config 0 interface 0 has no altsetting 0
[ 2092.483230][T19461] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 2092.617045][T12328] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00
[ 2092.683320][T12328] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2092.735564][T10536] usb 5-1: new high-speed USB device number 82 using dummy_hcd
[ 2092.993581][T10536] usb 5-1: Using ep0 maxpacket: 32
[ 2093.082479][T12328] usb 4-1: config 0 descriptor??
[ 2093.095225][T10536] usb 5-1: config 0 has an invalid interface number: 16 but max is 0
[ 2093.123741][T10536] usb 5-1: config 0 has an invalid descriptor of length 120, skipping remainder of the config
[ 2093.183191][T10536] usb 5-1: config 0 has no interface number 0
[ 2093.189392][T10536] usb 5-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[ 2093.251217][T10536] usb 5-1: config 0 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2093.315553][T10536] usb 5-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d
[ 2093.338345][T10536] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2093.347048][   T36] hfsplus: b-tree write err: -5, ino 4
[ 2093.362372][T10536] usb 5-1: Product: syz
[ 2093.448590][T10536] usb 5-1: Manufacturer: syz
[ 2093.585527][T10536] usb 5-1: SerialNumber: syz
[ 2093.599986][T12328] gt683r_led 0003:1770:FF00.0030: ignoring exceeding usage max
[ 2093.958877][T10536] usb 5-1: config 0 descriptor??
[ 2093.985108][T12328] gt683r_led 0003:1770:FF00.0030: hidraw0: USB HID vf4.f6 Device [HID 1770:ff00] on usb-dummy_hcd.3-1/input0
[ 2093.989333][T25900] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 2094.054381][T10536] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[ 2094.086438][T10536] usb 5-1: invalid MIDI in EP 0
[ 2094.199046][T12328] usb 4-1: USB disconnect, device number 69
[ 2094.227780][T21380] gt683r_led 0003:1770:FF00.0030: failed to send set report request: -19
[ 2094.288808][T21380] gt683r_led 0003:1770:FF00.0030: failed to send set report request: -19
[ 2094.810035][T25918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2094.833822][T25918] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2094.925640][T25916] fido_id[25916]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[ 2094.948474][T10536] snd-usb-audio 5-1:0.16: probe with driver snd-usb-audio failed with error -22
[ 2095.651050][T10536] usb 5-1: USB disconnect, device number 82
[ 2095.690803][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.16/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2095.732914][T25927] loop3: detected capacity change from 0 to 1024
[ 2096.821269][   T49] hfsplus: b-tree write err: -5, ino 4
[ 2097.744977][T25943] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 2097.808431][T25946] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 2098.927296][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 2099.005693][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 2100.132788][T25961] genirq: Flags mismatch irq 7. 00200000 (comedi_parport) vs. 00200080 (ttyS3)
[ 2103.889471][T26001] loop1: detected capacity change from 0 to 128
[ 2104.578763][T26001] loop1: detected capacity change from 0 to 512
[ 2104.587272][T26001] EXT4-fs: Ignoring removed nobh option
[ 2104.596452][T26001] EXT4-fs (loop1): Test dummy encryption mode enabled
[ 2104.632204][T26001] EXT4-fs error (device loop1): __ext4_iget:5447: inode #11: block 1: comm syz.1.4360: invalid block
[ 2104.703459][T26001] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.4360: couldn't read orphan inode 11 (err -117)
[ 2104.721231][T26001] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 2105.403990][T20766] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2105.707496][T18509] Bluetooth: hci1: unexpected event for opcode 0x4c56
[ 2105.949986][T26016] loop1: detected capacity change from 0 to 40427
[ 2105.969053][T26016] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[ 2105.978077][T26016] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[ 2105.989179][T26016] F2FS-fs (loop1): invalid crc value
[ 2106.053468][T26016] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 2106.079845][T26016] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[ 2106.087706][T26016] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[ 2107.542479][T26030] loop2: detected capacity change from 0 to 32768
[ 2107.558133][T26030] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.4367 (26030)
[ 2107.597268][T26030] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 2107.607468][T26030] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[ 2107.804280][T26030] BTRFS info (device loop2): enabling ssd optimizations
[ 2107.811397][T26030] BTRFS info (device loop2): turning on async discard
[ 2107.818315][T26030] BTRFS info (device loop2): enabling free space tree
[ 2107.825113][T26030] BTRFS info (device loop2): use zlib compression, level 3
[ 2108.020748][T26046] loop0: detected capacity change from 0 to 512
[ 2108.033458][T26046] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[ 2108.117223][T26046] EXT4-fs (loop0): 1 truncate cleaned up
[ 2108.124425][T26046] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2109.078163][T19702] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2109.173691][T19461] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 2109.655433][T18509] Bluetooth: hci2: unexpected event for opcode 0x4c56
[ 2109.903457][T26075] loop0: detected capacity change from 0 to 40427
[ 2109.941671][T26075] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[ 2109.950548][T26075] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[ 2110.019061][T26075] F2FS-fs (loop0): invalid crc value
[ 2110.087949][T26075] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 2110.132768][T26075] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[ 2110.141370][T26075] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[ 2110.223270][T20196] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[ 2110.379852][T20196] usb 3-1: Using ep0 maxpacket: 32
[ 2110.405973][T20196] usb 3-1: config 0 has an invalid interface number: 16 but max is 0
[ 2111.127298][T20196] usb 3-1: config 0 has no interface number 0
[ 2111.147705][T20196] usb 3-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[ 2111.221101][T20196] usb 3-1: config 0 interface 16 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 2111.235247][T20196] usb 3-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d
[ 2111.245902][T20196] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2111.293933][T20196] usb 3-1: Product: syz
[ 2111.322241][T20196] usb 3-1: Manufacturer: syz
[ 2111.339085][T20196] usb 3-1: SerialNumber: syz
[ 2111.379975][T20196] usb 3-1: config 0 descriptor??
[ 2111.421987][T26073] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 2111.509703][T20196] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 2111.548231][T20196] usb 3-1: invalid MIDI in EP 0
[ 2111.952789][T26092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2111.964325][T26092] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2112.209811][T20196] snd-usb-audio 3-1:0.16: probe with driver snd-usb-audio failed with error -22
[ 2112.220040][T26090] fuse: Bad value for 'fd'
[ 2112.299927][T20995] udevd[20995]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.16/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2112.399098][T26095] loop3: detected capacity change from 0 to 128
[ 2112.436351][T26096] loop1: detected capacity change from 0 to 512
[ 2112.448746][T26096] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[ 2112.459783][ T5903] usb 3-1: USB disconnect, device number 73
[ 2112.476747][T26096] EXT4-fs (loop1): 1 truncate cleaned up
[ 2112.483818][T26096] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2112.888594][T26095] loop3: detected capacity change from 0 to 65536
[ 2113.034929][T26095] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[ 2113.067366][T20766] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2113.074451][T26095] XFS (loop3): Ending clean mount
[ 2113.098346][T26095] XFS (loop3): Quotacheck needed: Please wait.
[ 2113.168891][T26095] XFS (loop3): Quotacheck: Done.
[ 2113.194883][T26108] loop1: detected capacity change from 0 to 2048
[ 2113.284774][T26108] ext2: Unknown parameter 'hash'
[ 2114.559400][T26118] loop0: detected capacity change from 0 to 128
[ 2114.599018][T20221] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[ 2115.094152][T26118] loop0: detected capacity change from 0 to 65536
[ 2115.189016][T26118] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[ 2115.232481][T26118] XFS (loop0): Ending clean mount
[ 2115.240040][T26118] XFS (loop0): Quotacheck needed: Please wait.
[ 2115.354583][T26118] XFS (loop0): Quotacheck: Done.
[ 2116.560996][T26151] netlink: 'syz.1.4387': attribute type 12 has an invalid length.
[ 2116.599918][T19702] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[ 2117.369235][T26163] genirq: Flags mismatch irq 7. 00200000 (comedi_parport) vs. 00200080 (ttyS3)
[ 2117.603798][T26173] overlayfs: missing 'lowerdir'
[ 2118.547229][T26186] loop4: detected capacity change from 0 to 32768
[ 2118.586068][T26186] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4407 (26186)
[ 2118.635802][T26186] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 2118.646061][T26186] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[ 2118.850851][T26186] BTRFS info (device loop4): enabling ssd optimizations
[ 2118.858972][T26186] BTRFS info (device loop4): turning on async discard
[ 2118.865852][T26186] BTRFS info (device loop4): enabling free space tree
[ 2119.236446][T18899] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 2119.961034][T26219] loop1: detected capacity change from 0 to 40427
[ 2119.983385][T18509] Bluetooth: hci1: unexpected event for opcode 0x4c56
[ 2120.001719][T26219] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[ 2120.009541][T26219] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[ 2120.024178][T26219] F2FS-fs (loop1): invalid crc value
[ 2120.139759][T26219] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 2120.163339][T26219] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[ 2120.170439][T26219] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[ 2121.535090][T26235] loop4: detected capacity change from 0 to 32768
[ 2121.546294][T26235] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4417 (26235)
[ 2121.611101][T26235] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 2121.623942][T26235] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[ 2121.819639][T26235] BTRFS info (device loop4): enabling ssd optimizations
[ 2121.827016][T26235] BTRFS info (device loop4): turning on async discard
[ 2121.834564][T26235] BTRFS info (device loop4): enabling free space tree
[ 2123.839759][T26280] loop3: detected capacity change from 0 to 128
[ 2124.470301][T26280] loop3: detected capacity change from 0 to 512
[ 2124.478582][T26280] EXT4-fs: Ignoring removed nobh option
[ 2124.486365][T26280] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 2124.505515][T26280] EXT4-fs error (device loop3): __ext4_iget:5447: inode #11: block 1: comm syz.3.4428: invalid block
[ 2124.517367][T26280] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.4428: couldn't read orphan inode 11 (err -117)
[ 2124.537289][T26280] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 2125.287769][T20221] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2125.448862][T18899] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 2125.594770][T26295] loop2: detected capacity change from 0 to 1024
[ 2125.761200][T26295] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 2127.140012][T26327] overlayfs: missing 'workdir'
[ 2127.940757][T26339] loop4: detected capacity change from 0 to 128
[ 2128.747704][T26339] loop4: detected capacity change from 0 to 512
[ 2128.754655][T26339] EXT4-fs: Ignoring removed nobh option
[ 2128.762222][T26339] EXT4-fs (loop4): Test dummy encryption mode enabled
[ 2128.849247][T26339] EXT4-fs error (device loop4): __ext4_iget:5447: inode #11: block 1: comm syz.4.4446: invalid block
[ 2128.881057][T26339] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.4446: couldn't read orphan inode 11 (err -117)
[ 2128.897008][T26339] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 2128.967233][T19461] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2129.726362][T18899] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2131.148578][T26381] loop4: detected capacity change from 0 to 128
[ 2132.343505][T12328] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[ 2132.424753][T26381] loop4: detected capacity change from 0 to 65536
[ 2132.425799][T26392] loop0: detected capacity change from 0 to 2048
[ 2132.441974][T26392] ext2: Unknown parameter 'hash'
[ 2132.478895][T26381] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[ 2132.500423][T26392] loop0: detected capacity change from 0 to 1024
[ 2132.514140][T12328] usb 3-1: Using ep0 maxpacket: 32
[ 2132.600521][T12328] usb 3-1: config 0 has an invalid interface number: 16 but max is 0
[ 2132.740333][T12328] usb 3-1: config 0 has no interface number 0
[ 2132.812886][T12328] usb 3-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[ 2132.816851][T26381] XFS (loop4): Ending clean mount
[ 2132.877658][T26381] XFS (loop4): Quotacheck needed: Please wait.
[ 2132.947813][T12328] usb 3-1: config 0 interface 16 altsetting 0 endpoint 0x82 has invalid maxpacket 30768, setting to 1024
[ 2133.107472][T12328] usb 3-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[ 2133.159884][T26381] XFS (loop4): Quotacheck: Done.
[ 2133.265327][T12328] usb 3-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d
[ 2133.312739][T12328] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2133.436651][ T6266] hfsplus: b-tree write err: -5, ino 4
[ 2133.652188][T12328] usb 3-1: Product: syz
[ 2133.670434][T12328] usb 3-1: Manufacturer: syz
[ 2133.680475][T12328] usb 3-1: SerialNumber: syz
[ 2133.850333][T12328] usb 3-1: config 0 descriptor??
[ 2133.900722][T26386] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 2133.919158][T26386] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 2133.950712][T12328] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 2134.210325][T18899] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[ 2134.756869][T26424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2134.803209][T26424] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2135.036001][T16396] usb 3-1: USB disconnect, device number 74
[ 2135.255274][T26427] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4471'.
[ 2136.465841][T26436] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport)
[ 2136.944971][T26449] loop2: detected capacity change from 0 to 2048
[ 2136.972606][T26449] ext2: Unknown parameter 'hash'
[ 2137.792001][T26459] loop2: detected capacity change from 0 to 128
[ 2138.277232][T26459] loop2: detected capacity change from 0 to 65536
[ 2138.330687][T26459] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[ 2138.357406][T26459] XFS (loop2): Ending clean mount
[ 2138.365066][T26459] XFS (loop2): Quotacheck needed: Please wait.
[ 2138.436653][T26459] XFS (loop2): Quotacheck: Done.
[ 2139.486799][T26483] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4484'.
[ 2140.028767][T19461] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[ 2140.476605][T26496] kvm: pic: single mode not supported
[ 2140.476630][T26496] kvm: pic: level sensitive irq not supported
[ 2140.498740][T26496] kvm: pic: single mode not supported
[ 2140.505583][T26496] kvm: pic: level sensitive irq not supported
[ 2140.530472][T26496] kvm: pic: non byte read
[ 2140.543020][T26496] kvm: pic: non byte read
[ 2140.549807][T26496] kvm: pic: single mode not supported
[ 2140.549827][T26496] kvm: pic: level sensitive irq not supported
[ 2140.558386][T26496] kvm: pic: non byte read
[ 2140.572688][T26496] kvm: pic: single mode not supported
[ 2140.574893][T26496] kvm: pic: level sensitive irq not supported
[ 2140.581095][T26496] kvm: pic: non byte read
[ 2140.614047][T26496] kvm: pic: single mode not supported
[ 2140.614069][T26496] kvm: pic: level sensitive irq not supported
[ 2140.622096][T26496] kvm: pic: single mode not supported
[ 2140.628358][T26496] kvm: pic: level sensitive irq not supported
[ 2140.688446][T26496] kvm: pic: non byte read
[ 2140.704713][T26496] picdev_write: 2 callbacks suppressed
[ 2140.704731][T26496] kvm: pic: non byte write
[ 2140.715770][T26496] kvm: pic: non byte write
[ 2140.721729][T26496] kvm: pic: non byte write
[ 2140.731067][T26496] kvm: pic: non byte write
[ 2140.738473][T26496] kvm: pic: non byte write
[ 2140.752276][T26496] kvm: pic: non byte write
[ 2140.760037][T26496] kvm: pic: non byte write
[ 2140.765466][T26496] kvm: pic: non byte write
[ 2140.772835][T26496] kvm: pic: non byte write
[ 2140.778412][T26496] kvm: pic: non byte write
[ 2141.981723][T26527] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4501'.
[ 2143.049628][T26538] netlink: 'syz.1.4508': attribute type 1 has an invalid length.
[ 2143.210745][T26542] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[ 2143.222211][T26525] loop3: detected capacity change from 0 to 40427
[ 2143.237443][T26525] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[ 2143.255557][T26542] bond4: (slave vxcan3): Error -95 calling set_mac_address
[ 2143.263557][T26525] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[ 2143.296470][T26525] F2FS-fs (loop3): invalid crc value
[ 2143.359912][T26544] macvlan2: entered promiscuous mode
[ 2143.372098][T26544] macvlan2: entered allmulticast mode
[ 2143.393925][T26544] bond4: entered promiscuous mode
[ 2143.403948][T26544] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 2143.458335][T26544] bond4: left promiscuous mode
[ 2143.510204][T26525] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 2143.560719][T26525] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[ 2143.568762][T26525] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 2144.656613][T26567] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4516'.
[ 2146.006648][T26592] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 2146.039804][T26594] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 2146.054712][T26594] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 2146.675431][T26587] loop1: detected capacity change from 0 to 40427
[ 2146.684210][T26587] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[ 2146.692304][T26587] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[ 2146.717213][T26587] F2FS-fs (loop1): invalid crc value
[ 2146.976550][T26587] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 2147.024172][T26587] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[ 2147.043220][T26587] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[ 2147.372640][T26610] loop0: detected capacity change from 0 to 128
[ 2148.002661][T26610] loop0: detected capacity change from 0 to 65536
[ 2148.046822][T26610] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[ 2148.100587][T26610] XFS (loop0): Ending clean mount
[ 2148.108539][T26610] XFS (loop0): Quotacheck needed: Please wait.
[ 2148.202665][T26610] XFS (loop0): Quotacheck: Done.
[ 2149.010585][T19702] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[ 2149.514212][T26645] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4533'.
[ 2150.501663][T26657] 9p: Bad value for 'rfdno'
[ 2150.613546][T20196] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[ 2150.830081][T20196] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 2150.838356][T20196] usb 2-1: config 0 has no interface number 0
[ 2150.874135][T20196] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 2151.463236][T20196] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2151.471303][T20196] usb 2-1: Product: syz
[ 2151.495291][T20196] usb 2-1: Manufacturer: syz
[ 2151.521748][T20196] usb 2-1: SerialNumber: syz
[ 2151.564753][T20196] usb 2-1: config 0 descriptor??
[ 2151.799718][T20196] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[ 2151.824933][T20196] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 2151.843442][T20196] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[ 2151.851997][T20196] usb 2-1: media controller created
[ 2151.869085][T20196] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2152.645197][T26686] loop2: detected capacity change from 0 to 2048
[ 2152.672657][T26686] ext2: Unknown parameter 'hash'
[ 2153.184578][T26694] loop0: detected capacity change from 0 to 32768
[ 2153.200923][T26694] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4561 (26694)
[ 2153.226287][T20196] i2c i2c-1: ec100: i2c rd failed=-110 reg=33
[ 2153.249474][T26694] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 2153.259734][T26694] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[ 2153.360032][T26694] BTRFS info (device loop0): enabling ssd optimizations
[ 2153.368384][T26694] BTRFS info (device loop0): turning on async discard
[ 2153.375246][T26694] BTRFS info (device loop0): enabling free space tree
[ 2153.382020][T26694] BTRFS info (device loop0): use zlib compression, level 3
[ 2153.510920][T20196] usb 2-1: USB disconnect, device number 69
[ 2155.206587][T19702] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 2155.236890][T26725] loop3: detected capacity change from 0 to 128
[ 2156.021737][T26725] loop3: detected capacity change from 0 to 512
[ 2156.030394][T26725] EXT4-fs: Ignoring removed nobh option
[ 2156.037835][T26725] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 2156.072181][T26725] EXT4-fs error (device loop3): __ext4_iget:5447: inode #11: block 1: comm syz.3.4566: invalid block
[ 2156.087081][T26725] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.4566: couldn't read orphan inode 11 (err -117)
[ 2156.105359][T26725] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 2157.130717][T20221] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2157.464809][T26747] loop4: detected capacity change from 0 to 2048
[ 2157.499392][T26747] ext2: Unknown parameter 'hash'
[ 2158.524446][T26767] netlink: 'syz.4.4579': attribute type 1 has an invalid length.
[ 2158.645275][T26772] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4579'.
[ 2158.811973][T26774] macvlan2: entered promiscuous mode
[ 2158.846791][T26774] macvlan2: entered allmulticast mode
[ 2158.862855][T26774] bond6: entered promiscuous mode
[ 2158.885814][T26774] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 2158.919359][T26774] bond6: left promiscuous mode
[ 2160.350119][T26794] loop4: detected capacity change from 0 to 128
[ 2160.369419][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 2160.383525][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 2160.855188][T26794] loop4: detected capacity change from 0 to 65536
[ 2160.928793][T26794] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[ 2160.981236][T26794] XFS (loop4): Ending clean mount
[ 2160.989452][T26794] XFS (loop4): Quotacheck needed: Please wait.
[ 2161.142634][T26794] XFS (loop4): Quotacheck: Done.
[ 2161.169935][T16396] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[ 2161.898375][T16396] usb 1-1: Using ep0 maxpacket: 32
[ 2161.908008][T16396] usb 1-1: config 0 has an invalid interface number: 16 but max is 0
[ 2161.939946][T16396] usb 1-1: config 0 has no interface number 0
[ 2161.966968][T16396] usb 1-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[ 2162.191249][T16396] usb 1-1: config 0 interface 16 altsetting 0 endpoint 0x82 has invalid maxpacket 30768, setting to 1024
[ 2162.203523][T16396] usb 1-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[ 2162.246876][T16396] usb 1-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d
[ 2162.281309][T16396] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2162.308741][T16396] usb 1-1: Product: syz
[ 2162.331967][T16396] usb 1-1: Manufacturer: syz
[ 2162.395901][T16396] usb 1-1: SerialNumber: syz
[ 2162.462019][T16396] usb 1-1: config 0 descriptor??
[ 2162.614071][T26801] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 2162.635191][T26801] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 2162.721248][T18899] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[ 2162.761956][T16396] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[ 2163.152714][T26801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2163.161643][T26801] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2163.196277][T16396] usb 1-1: USB disconnect, device number 63
[ 2165.063025][T26862] loop0: detected capacity change from 0 to 65536
[ 2165.136395][T26862] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[ 2165.257662][T26862] XFS (loop0): Ending clean mount
[ 2165.264235][T26862] XFS (loop0): Quotacheck needed: Please wait.
[ 2165.286510][T22992] XFS (loop0): Metadata corruption detected at xfs_dinode_verify+0x1a6/0x1570, inode 0x26 dinode
[ 2165.332238][T22992] XFS (loop0): Unmount and run xfs_repair
[ 2165.357142][T22992] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[ 2165.386657][T22992] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00  IN..............
[ 2165.405291][T22992] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 2165.414826][T22992] 00000020: 34 f7 58 68 7a bb 44 4d 34 f7 58 68 7a bb 44 4d  4.Xhz.DM4.Xhz.DM
[ 2165.427383][T22992] 00000030: 34 f7 58 68 7a bb 44 4d 00 00 00 00 00 00 00 0a  4.Xhz.DM........
[ 2165.437501][T22992] 00000040: 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 01  ................
[ 2165.448785][T22992] 00000050: 00 00 25 01 00 00 00 00 00 00 00 00 38 7c 45 d7  ..%.........8|E.
[ 2165.460507][T22992] 00000060: ff ff ff ff da a2 56 a4 00 00 00 00 00 00 00 08  ......V.........
[ 2165.470401][T22992] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[ 2165.526694][T26862] XFS (loop0): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[ 2165.605143][T26862] XFS (loop0): Metadata corruption detected at xfs_dinode_verify+0x1a6/0x1570, inode 0x26 dinode
[ 2165.615858][T26862] XFS (loop0): Unmount and run xfs_repair
[ 2165.621578][T26862] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[ 2165.629016][T26862] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00  IN..............
[ 2165.637900][T26862] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 2165.646942][T26862] 00000020: 34 f7 58 68 7a bb 44 4d 34 f7 58 68 7a bb 44 4d  4.Xhz.DM4.Xhz.DM
[ 2165.656836][T26862] 00000030: 34 f7 58 68 7a bb 44 4d 00 00 00 00 00 00 00 0a  4.Xhz.DM........
[ 2165.665762][T26862] 00000040: 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 01  ................
[ 2165.674649][T26862] 00000050: 00 00 25 01 00 00 00 00 00 00 00 00 38 7c 45 d7  ..%.........8|E.
[ 2165.683531][T26862] 00000060: ff ff ff ff da a2 56 a4 00 00 00 00 00 00 00 08  ......V.........
[ 2165.692392][T26862] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[ 2165.750724][T19702] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[ 2165.768225][T19702] XFS (loop0): Uncorrected metadata errors detected; please run xfs_repair.
[ 2166.096875][T18509] Bluetooth: hci5: unexpected event for opcode 0x4c56
[ 2166.439202][T26890] loop4: detected capacity change from 0 to 40427
[ 2166.448663][T26890] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[ 2166.456506][T26890] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[ 2166.471139][T26890] F2FS-fs (loop4): invalid crc value
[ 2166.564901][T26890] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 2166.582644][T26890] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[ 2166.590022][T26890] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[ 2167.004302][T26890] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 2167.013195][T26890] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 2167.391268][T26909] loop0: detected capacity change from 0 to 128
[ 2167.966865][T26909] loop0: detected capacity change from 0 to 65536
[ 2168.036123][T26909] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[ 2168.077786][T26909] XFS (loop0): Ending clean mount
[ 2168.094610][T26909] XFS (loop0): Quotacheck needed: Please wait.
[ 2168.182199][T26909] XFS (loop0): Quotacheck: Done.
[ 2168.946146][T26935] loop2: detected capacity change from 0 to 128
[ 2169.411710][T26935] loop2: detected capacity change from 0 to 65536
[ 2170.047707][T26935] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[ 2170.103691][T26935] XFS (loop2): Ending clean mount
[ 2170.110522][T26935] XFS (loop2): Quotacheck needed: Please wait.
[ 2170.217568][T19702] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[ 2170.303802][T26935] XFS (loop2): Quotacheck: Done.
[ 2170.782289][T26960] loop4: detected capacity change from 0 to 256
[ 2170.911420][T26960] FAT-fs (loop4): Directory bread(block 64) failed
[ 2170.933366][T26960] FAT-fs (loop4): Directory bread(block 65) failed
[ 2170.950425][T26960] FAT-fs (loop4): Directory bread(block 66) failed
[ 2170.981922][T26960] FAT-fs (loop4): Directory bread(block 67) failed
[ 2171.005554][T26960] FAT-fs (loop4): Directory bread(block 68) failed
[ 2171.032711][T26960] FAT-fs (loop4): Directory bread(block 69) failed
[ 2171.133292][T26960] FAT-fs (loop4): Directory bread(block 70) failed
[ 2171.150724][T26960] FAT-fs (loop4): Directory bread(block 71) failed
[ 2171.160792][T26960] FAT-fs (loop4): Directory bread(block 72) failed
[ 2171.190131][T26960] FAT-fs (loop4): Directory bread(block 73) failed
[ 2171.567504][T19461] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[ 2171.673351][T21380] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[ 2171.878378][T26968] loop3: detected capacity change from 0 to 128
[ 2172.117162][T21380] usb 2-1: Using ep0 maxpacket: 32
[ 2172.135508][T21380] usb 2-1: config 0 has an invalid interface number: 16 but max is 0
[ 2172.153923][T21380] usb 2-1: config 0 has no interface number 0
[ 2172.160098][T21380] usb 2-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[ 2172.190784][T21380] usb 2-1: config 0 interface 16 altsetting 0 endpoint 0x82 has invalid maxpacket 30768, setting to 1024
[ 2172.260021][T21380] usb 2-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[ 2172.337961][T21380] usb 2-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d
[ 2172.385365][T21380] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2172.432306][T21380] usb 2-1: Product: syz
[ 2172.460082][T21380] usb 2-1: Manufacturer: syz
[ 2172.474434][T26968] loop3: detected capacity change from 0 to 65536
[ 2172.501578][T21380] usb 2-1: SerialNumber: syz
[ 2172.561309][T26968] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[ 2172.562820][T21380] usb 2-1: config 0 descriptor??
[ 2172.613334][T26965] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 2172.630859][T26965] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 2172.661521][T26968] XFS (loop3): Ending clean mount
[ 2172.669920][T26968] XFS (loop3): Quotacheck needed: Please wait.
[ 2172.701153][T21380] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[ 2172.746904][T26968] XFS (loop3): Quotacheck: Done.
[ 2173.850563][T20221] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[ 2174.212637][T16396] usb 2-1: USB disconnect, device number 70
[ 2174.373806][T19808] usb 5-1: new high-speed USB device number 83 using dummy_hcd
[ 2174.452482][T27005] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4648'.
[ 2174.554279][T19808] usb 5-1: Using ep0 maxpacket: 32
[ 2174.562670][T19808] usb 5-1: config 0 has an invalid interface number: 16 but max is 0
[ 2174.586674][T19808] usb 5-1: config 0 has no interface number 0
[ 2174.603396][T19808] usb 5-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[ 2174.623236][T19808] usb 5-1: config 0 interface 16 altsetting 0 endpoint 0x82 has invalid maxpacket 30768, setting to 1024
[ 2174.653152][T19808] usb 5-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[ 2174.677305][T19808] usb 5-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d
[ 2174.694493][T19808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2174.714215][T19808] usb 5-1: Product: syz
[ 2174.718456][T19808] usb 5-1: Manufacturer: syz
[ 2174.734621][T19808] usb 5-1: SerialNumber: syz
[ 2174.750136][T19808] usb 5-1: config 0 descriptor??
[ 2174.786748][T26999] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 2174.809181][T26999] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 2174.861890][T19808] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[ 2175.301116][T27021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2175.323304][T27021] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2175.951190][T16396] usb 5-1: USB disconnect, device number 83
[ 2179.921047][T27071] loop4: detected capacity change from 0 to 128
[ 2179.933465][T27073] loop2: detected capacity change from 0 to 7
[ 2179.982269][ T6962] Dev loop2: unable to read RDB block 7
[ 2180.359430][T27071] loop4: detected capacity change from 0 to 65536
[ 2180.404204][ T6962]  loop2: unable to read partition table
[ 2180.443815][ T6962] loop2: partition table beyond EOD, truncated
[ 2180.445159][T27071] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[ 2180.461701][T27073] Dev loop2: unable to read RDB block 7
[ 2180.483973][T27073]  loop2: unable to read partition table
[ 2180.506374][T27073] loop2: partition table beyond EOD, truncated
[ 2180.529239][T27073] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 2180.712852][T27071] XFS (loop4): Ending clean mount
[ 2180.727934][T27071] XFS (loop4): Quotacheck needed: Please wait.
[ 2182.825824][T27071] XFS (loop4): Quotacheck: Done.
[ 2183.069588][T18899] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[ 2184.442358][T27110] loop2: detected capacity change from 0 to 32768
[ 2184.533520][T27110] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.4686 (27110)
[ 2184.551360][T27110] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 2184.561688][T27110] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[ 2184.636815][T27110] BTRFS info (device loop2): enabling ssd optimizations
[ 2184.643868][T27110] BTRFS info (device loop2): turning on async discard
[ 2184.650646][T27110] BTRFS info (device loop2): enabling free space tree
[ 2184.657509][T27110] BTRFS info (device loop2): use zlib compression, level 3
[ 2186.771713][T19461] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 2188.727952][T27163] loop4: detected capacity change from 0 to 65536
[ 2188.814159][T27163] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[ 2188.855828][T27163] XFS (loop4): Ending clean mount
[ 2188.864792][T27163] XFS (loop4): Quotacheck needed: Please wait.
[ 2188.952298][ T6266] XFS (loop4): Metadata corruption detected at xfs_dinode_verify+0x1a6/0x1570, inode 0x26 dinode
[ 2188.992029][ T6266] XFS (loop4): Unmount and run xfs_repair
[ 2189.037940][ T6266] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[ 2189.069649][ T6266] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00  IN..............
[ 2189.095619][T21380] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[ 2189.104368][ T6266] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 2189.133831][ T6266] 00000020: 34 f7 58 68 7a bb 44 4d 34 f7 58 68 7a bb 44 4d  4.Xhz.DM4.Xhz.DM
[ 2189.159696][ T6266] 00000030: 34 f7 58 68 7a bb 44 4d 00 00 00 00 00 00 00 0a  4.Xhz.DM........
[ 2189.175340][ T6266] 00000040: 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 01  ................
[ 2189.185765][ T6266] 00000050: 00 00 25 01 00 00 00 00 00 00 00 00 38 7c 45 d7  ..%.........8|E.
[ 2189.197078][ T6266] 00000060: ff ff ff ff da a2 56 a4 00 00 00 00 00 00 00 08  ......V.........
[ 2189.215986][ T6266] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[ 2189.258060][T27163] XFS (loop4): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[ 2189.292622][T27163] XFS (loop4): Metadata corruption detected at xfs_dinode_verify+0x1a6/0x1570, inode 0x26 dinode
[ 2189.304069][T27163] XFS (loop4): Unmount and run xfs_repair
[ 2189.311474][T27163] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[ 2189.318907][T27163] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00  IN..............
[ 2189.327785][T27163] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 2189.336674][T27163] 00000020: 34 f7 58 68 7a bb 44 4d 34 f7 58 68 7a bb 44 4d  4.Xhz.DM4.Xhz.DM
[ 2189.345550][T27163] 00000030: 34 f7 58 68 7a bb 44 4d 00 00 00 00 00 00 00 0a  4.Xhz.DM........
[ 2189.354404][T27163] 00000040: 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 01  ................
[ 2189.363753][T27163] 00000050: 00 00 25 01 00 00 00 00 00 00 00 00 38 7c 45 d7  ..%.........8|E.
[ 2189.372605][T27163] 00000060: ff ff ff ff da a2 56 a4 00 00 00 00 00 00 00 08  ......V.........
[ 2189.381471][T27163] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[ 2189.413610][T21380] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[ 2189.421659][T21380] usb 4-1: config 0 has no interface number 0
[ 2189.432343][T18899] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[ 2189.445647][T18899] XFS (loop4): Uncorrected metadata errors detected; please run xfs_repair.
[ 2189.447265][T21380] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 2189.466039][T21380] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2189.493158][T21380] usb 4-1: Product: syz
[ 2189.526492][T21380] usb 4-1: Manufacturer: syz
[ 2189.573167][T21380] usb 4-1: SerialNumber: syz
[ 2189.606384][T21380] usb 4-1: config 0 descriptor??
[ 2189.827929][T21380] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[ 2189.880754][T21380] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 2189.920567][T21380] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[ 2190.016077][T21380] usb 4-1: media controller created
[ 2190.448748][T27198] loop0: detected capacity change from 0 to 2048
[ 2190.460925][T21380] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2190.573867][T27198] ext2: Unknown parameter 'hash'
[ 2190.638694][T21380] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[ 2191.314931][T21380] usb 4-1: USB disconnect, device number 70
[ 2191.633957][T27221] loop2: detected capacity change from 0 to 7
[ 2191.681812][T27221] Dev loop2: unable to read RDB block 7
[ 2191.718599][T27221]  loop2: AHDI p1 p2 p3
[ 2192.142416][T27221] loop2: partition table partially beyond EOD, truncated
[ 2192.168278][T27221] loop2: p1 start 1601398130 is beyond EOD, truncated
[ 2192.208264][T27221] loop2: p2 start 1702059890 is beyond EOD, truncated
[ 2194.086511][T27259] loop3: detected capacity change from 0 to 32768
[ 2194.101720][T27259] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4732 (27259)
[ 2194.135035][T27259] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 2194.145274][T27259] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[ 2194.281443][T27259] BTRFS info (device loop3): enabling ssd optimizations
[ 2194.288874][T27259] BTRFS info (device loop3): turning on async discard
[ 2194.295740][T27259] BTRFS info (device loop3): enabling free space tree
[ 2194.302524][T27259] BTRFS info (device loop3): use zlib compression, level 3
[ 2194.955854][T27285] loop2: detected capacity change from 0 to 128
[ 2196.088178][T27285] loop2: detected capacity change from 0 to 65536
[ 2196.354311][T27297] loop4: detected capacity change from 0 to 32768
[ 2196.362135][T27285] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[ 2196.381170][T27297] BTRFS info: device /dev/loop4 (7:4) using temp-fsid d62e7e87-00ed-4be3-b3a3-4003e9e806f9
[ 2196.391318][T27297] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4738 (27297)
[ 2196.407245][T27297] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 2196.417425][T27297] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[ 2196.503512][T27285] XFS (loop2): Ending clean mount
[ 2196.515330][T27285] XFS (loop2): Quotacheck needed: Please wait.
[ 2196.645864][T27297] BTRFS info (device loop4): enabling ssd optimizations
[ 2196.652837][T27297] BTRFS info (device loop4): turning on async discard
[ 2196.659657][T27297] BTRFS info (device loop4): enabling free space tree
[ 2196.666466][T27297] BTRFS info (device loop4): use zlib compression, level 3
[ 2196.719164][T27285] XFS (loop2): Quotacheck: Done.
[ 2196.737933][T20221] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 2199.768998][T19461] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[ 2199.880871][T18899] BTRFS info (device loop4): last unmount of filesystem d62e7e87-00ed-4be3-b3a3-4003e9e806f9
[ 2201.487948][T16396] usb 5-1: new high-speed USB device number 84 using dummy_hcd
[ 2201.708524][T16396] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[ 2201.758815][T16396] usb 5-1: config 0 has no interface number 0
[ 2201.794174][T16396] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 2201.806967][T16396] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2201.820486][T16396] usb 5-1: Product: syz
[ 2201.837066][T16396] usb 5-1: Manufacturer: syz
[ 2201.841788][T16396] usb 5-1: SerialNumber: syz
[ 2201.871009][T16396] usb 5-1: config 0 descriptor??
[ 2202.088741][T16396] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[ 2202.111078][T16396] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 2202.134814][T16396] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[ 2202.144650][T16396] usb 5-1: media controller created
[ 2202.160947][T16396] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2202.806225][T27392] loop2: detected capacity change from 0 to 7
[ 2202.831801][T27394] fuse: Bad value for 'group_id'
[ 2202.838695][T27394] fuse: Bad value for 'group_id'
[ 2202.866745][T27392] Dev loop2: unable to read RDB block 7
[ 2202.895418][T27392]  loop2: AHDI p1 p2 p3
[ 2202.920672][T27392] loop2: partition table partially beyond EOD, truncated
[ 2202.932559][T27392] loop2: p1 start 1601398130 is beyond EOD, truncated
[ 2202.942276][T27392] loop2: p2 start 1702059890 is beyond EOD, truncated
[ 2203.243653][T16396] i2c i2c-1: ec100: i2c rd failed=-110 reg=33
[ 2203.567494][T16396] usb 5-1: USB disconnect, device number 84
[ 2203.855105][T27413] loop2: detected capacity change from 0 to 7
[ 2203.882519][T27413] Dev loop2: unable to read RDB block 7
[ 2203.911615][T27413]  loop2: AHDI p1 p2 p3
[ 2203.932615][T27413] loop2: partition table partially beyond EOD, truncated
[ 2203.960238][T27413] loop2: p1 start 1601398130 is beyond EOD, truncated
[ 2204.070233][T27413] loop2: p2 start 1702059890 is beyond EOD, truncated
[ 2205.303993][T16396] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[ 2205.517824][T16396] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 2205.557725][T16396] usb 2-1: config 0 has no interface number 0
[ 2205.586472][T16396] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 2205.675181][T16396] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2205.736703][T16396] usb 2-1: Product: syz
[ 2205.767188][T16396] usb 2-1: Manufacturer: syz
[ 2205.795799][T16396] usb 2-1: SerialNumber: syz
[ 2205.852263][T16396] usb 2-1: config 0 descriptor??
[ 2206.106038][T16396] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[ 2206.144719][T16396] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 2206.175722][T16396] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[ 2206.191997][T16396] usb 2-1: media controller created
[ 2206.229030][T16396] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2206.347016][T27472] overlayfs: failed to resolve './file1': -2
[ 2206.541083][T27480] loop2: detected capacity change from 0 to 7
[ 2206.551656][T27480] Dev loop2: unable to read RDB block 7
[ 2206.559075][T27480]  loop2: AHDI p1 p2 p3
[ 2206.564800][T27480] loop2: partition table partially beyond EOD, truncated
[ 2206.572214][T27480] loop2: p1 start 1601398130 is beyond EOD, truncated
[ 2206.598910][T27480] loop2: p2 start 1702059890 is beyond EOD, truncated
[ 2207.323508][T16396] i2c i2c-1: ec100: i2c rd failed=-110 reg=33
[ 2207.430213][T16396] usb 2-1: USB disconnect, device number 71
[ 2207.430748][T27493] loop3: detected capacity change from 0 to 65536
[ 2207.506063][T27493] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[ 2207.643323][T27493] XFS (loop3): Ending clean mount
[ 2207.656472][T27493] XFS (loop3): Quotacheck needed: Please wait.
[ 2207.678825][T27512] overlayfs: failed to resolve './file1': -2
[ 2207.714796][ T6266] XFS (loop3): Metadata corruption detected at xfs_dinode_verify+0x1a6/0x1570, inode 0x26 dinode
[ 2207.777283][ T6266] XFS (loop3): Unmount and run xfs_repair
[ 2207.800934][ T6266] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[ 2207.833164][ T6266] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00  IN..............
[ 2208.023262][ T6266] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 2208.031425][T27497] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 2208.088293][ T6266] 00000020: 34 f7 58 68 7a bb 44 4d 34 f7 58 68 7a bb 44 4d  4.Xhz.DM4.Xhz.DM
[ 2208.294109][ T6266] 00000030: 34 f7 58 68 7a bb 44 4d 00 00 00 00 00 00 00 0a  4.Xhz.DM........
[ 2208.404573][ T6266] 00000040: 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 01  ................
[ 2208.430639][ T6266] 00000050: 00 00 25 01 00 00 00 00 00 00 00 00 38 7c 45 d7  ..%.........8|E.
[ 2208.442436][ T6266] 00000060: ff ff ff ff da a2 56 a4 00 00 00 00 00 00 00 08  ......V.........
[ 2208.455391][ T6266] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[ 2208.478271][T27493] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[ 2208.504274][T27493] XFS (loop3): Metadata corruption detected at xfs_dinode_verify+0x1a6/0x1570, inode 0x26 dinode
[ 2208.514934][T27493] XFS (loop3): Unmount and run xfs_repair
[ 2208.520666][T27493] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[ 2208.528398][T27493] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00  IN..............
[ 2208.537315][T27493] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 2208.546353][T27493] 00000020: 34 f7 58 68 7a bb 44 4d 34 f7 58 68 7a bb 44 4d  4.Xhz.DM4.Xhz.DM
[ 2208.555243][T27493] 00000030: 34 f7 58 68 7a bb 44 4d 00 00 00 00 00 00 00 0a  4.Xhz.DM........
[ 2208.565439][T27493] 00000040: 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 01  ................
[ 2208.574359][T27493] 00000050: 00 00 25 01 00 00 00 00 00 00 00 00 38 7c 45 d7  ..%.........8|E.
[ 2208.583362][T27493] 00000060: ff ff ff ff da a2 56 a4 00 00 00 00 00 00 00 08  ......V.........
[ 2208.592213][T27493] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[ 2208.653227][T20221] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[ 2208.693828][T20221] XFS (loop3): Uncorrected metadata errors detected; please run xfs_repair.
[ 2210.048943][T27543] overlayfs: failed to resolve './file1': -2
[ 2210.260486][T27547] loop1: detected capacity change from 0 to 32768
[ 2210.275424][T27547] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4817 (27547)
[ 2210.292071][T27547] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 2210.303210][T27547] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[ 2210.394487][T27547] BTRFS info (device loop1): enabling ssd optimizations
[ 2210.401463][T27547] BTRFS info (device loop1): turning on async discard
[ 2210.409325][T27547] BTRFS info (device loop1): enabling free space tree
[ 2210.416184][T27547] BTRFS info (device loop1): use zlib compression, level 3
[ 2210.837483][T20766] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 2211.254536][T27584] overlayfs: upper fs does not support file handles, falling back to index=off.
[ 2211.687535][T27581] loop0: detected capacity change from 0 to 4096
[ 2211.726383][T27596] overlayfs: failed to resolve './file0': -2
[ 2211.749154][T27581] EXT4-fs (loop0): Test dummy encryption mode enabled
[ 2212.086786][T27598] loop1: detected capacity change from 0 to 32768
[ 2212.121840][T27598] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4830 (27598)
[ 2212.170737][T27598] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 2212.180956][T27598] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[ 2212.315176][    C1] ------------[ cut here ]------------
[ 2212.321070][    C1] WARNING: ./include/linux/ns_common.h:255 at put_cred_rcu+0x2c5/0x340, CPU#1: ksoftirqd/1/23
[ 2212.331395][    C1] Modules linked in:
[ 2212.335557][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) 
[ 2212.344777][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2212.354859][    C1] RIP: 0010:put_cred_rcu+0x2c5/0x340
[ 2212.360168][    C1] Code: 5c 41 5d 41 5e 41 5f 5d e9 d8 e3 8d 00 e8 23 8e 32 00 4c 89 e7 be 03 00 00 00 e8 76 5a 00 03 e9 b8 fe ff ff e8 0c 8e 32 00 90 <0f> 0b 90 eb 9f e8 01 8e 32 00 4c 89 ff be 03 00 00 00 e8 54 5a 00
[ 2212.379858][    C1] RSP: 0018:ffffc900001d7888 EFLAGS: 00010246
[ 2212.385959][    C1] RAX: ffffffff818e9174 RBX: ffff88802df988a0 RCX: ffff88801d2f5b80
[ 2212.393956][    C1] RDX: 0000000000000100 RSI: 0000000000000004 RDI: 0000000000000000
[ 2212.401932][    C1] RBP: 0000000000000004 R08: ffff88802f970193 R09: 1ffff11005f2e032
[ 2212.409919][    C1] R10: dffffc0000000000 R11: ffffed1005f2e033 R12: dffffc0000000000
[ 2212.417909][    C1] R13: ffff88802df98800 R14: ffff88802f970000 R15: ffff88802f970190
[ 2212.425892][    C1] FS:  0000000000000000(0000) GS:ffff888125fcc000(0000) knlGS:0000000000000000
[ 2212.434837][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2212.441417][    C1] CR2: 00007fd95427af98 CR3: 000000007c77c000 CR4: 00000000003526f0
[ 2212.449404][    C1] Call Trace:
[ 2212.452684][    C1]  <TASK>
[ 2212.455636][    C1]  ? __pfx_put_cred_rcu+0x10/0x10
[ 2212.460659][    C1]  ? rcu_core+0xc37/0x1770
[ 2212.465089][    C1]  rcu_core+0xcab/0x1770
[ 2212.469345][    C1]  ? __pfx_rcu_core+0x10/0x10
[ 2212.474049][    C1]  ? rcu_qs+0xc4/0x170
[ 2212.478124][    C1]  ? __pfx_rcu_qs+0x10/0x10
[ 2212.482624][    C1]  ? sched_clock_cpu+0x74/0x430
[ 2212.487497][    C1]  ? rcu_softirq_qs+0xf2/0x350
[ 2212.492261][    C1]  ? __pfx_rcu_softirq_qs+0x10/0x10
[ 2212.497491][    C1]  handle_softirqs+0x27d/0x880
[ 2212.502266][    C1]  ? run_ksoftirqd+0x9b/0x100
[ 2212.506988][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[ 2212.512279][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[ 2212.517347][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[ 2212.522392][    C1]  run_ksoftirqd+0x9b/0x100
[ 2212.526922][    C1]  ? __pfx_run_ksoftirqd+0x10/0x10
[ 2212.532053][    C1]  smpboot_thread_fn+0x542/0xa60
[ 2212.537031][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[ 2212.542064][    C1]  kthread+0x711/0x8a0
[ 2212.546144][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[ 2212.551603][    C1]  ? __pfx_kthread+0x10/0x10
[ 2212.556227][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2212.561468][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2212.566716][    C1]  ? __pfx_kthread+0x10/0x10
[ 2212.571310][    C1]  ret_from_fork+0x599/0xb30
[ 2212.575963][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 2212.581132][    C1]  ? __switch_to_asm+0x39/0x70
[ 2212.585951][    C1]  ? __switch_to_asm+0x33/0x70
[ 2212.590758][    C1]  ? __pfx_kthread+0x10/0x10
[ 2212.595428][    C1]  ret_from_fork_asm+0x1a/0x30
[ 2212.600230][    C1]  </TASK>
[ 2212.603317][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 2212.610617][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) 
[ 2212.619816][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2212.629873][    C1] Call Trace:
[ 2212.633178][    C1]  <TASK>
[ 2212.636132][    C1]  dump_stack_lvl+0x99/0x250
[ 2212.640752][    C1]  ? __asan_memcpy+0x40/0x70
[ 2212.645359][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2212.650569][    C1]  ? __pfx__printk+0x10/0x10
[ 2212.655176][    C1]  vpanic+0x237/0x6d0
[ 2212.659162][    C1]  ? __pfx_vpanic+0x10/0x10
[ 2212.663670][    C1]  ? is_bpf_text_address+0x292/0x2b0
[ 2212.668962][    C1]  ? is_bpf_text_address+0x26/0x2b0
[ 2212.674174][    C1]  panic+0xb9/0xc0
[ 2212.677900][    C1]  ? __pfx_panic+0x10/0x10
[ 2212.682321][    C1]  ? ret_from_fork_asm+0x1a/0x30
[ 2212.687282][    C1]  __warn+0x318/0x4d0
[ 2212.691306][    C1]  ? put_cred_rcu+0x2c5/0x340
[ 2212.695996][    C1]  ? put_cred_rcu+0x2c5/0x340
[ 2212.700681][    C1]  report_bug+0x2be/0x4f0
[ 2212.705025][    C1]  ? put_cred_rcu+0x2c5/0x340
[ 2212.709704][    C1]  ? put_cred_rcu+0x2c5/0x340
[ 2212.714469][    C1]  ? put_cred_rcu+0x2c7/0x340
[ 2212.719156][    C1]  handle_bug+0x84/0x160
[ 2212.723404][    C1]  exc_invalid_op+0x1a/0x50
[ 2212.727917][    C1]  asm_exc_invalid_op+0x1a/0x20
[ 2212.732788][    C1] RIP: 0010:put_cred_rcu+0x2c5/0x340
[ 2212.738091][    C1] Code: 5c 41 5d 41 5e 41 5f 5d e9 d8 e3 8d 00 e8 23 8e 32 00 4c 89 e7 be 03 00 00 00 e8 76 5a 00 03 e9 b8 fe ff ff e8 0c 8e 32 00 90 <0f> 0b 90 eb 9f e8 01 8e 32 00 4c 89 ff be 03 00 00 00 e8 54 5a 00
[ 2212.757723][    C1] RSP: 0018:ffffc900001d7888 EFLAGS: 00010246
[ 2212.763811][    C1] RAX: ffffffff818e9174 RBX: ffff88802df988a0 RCX: ffff88801d2f5b80
[ 2212.771812][    C1] RDX: 0000000000000100 RSI: 0000000000000004 RDI: 0000000000000000
[ 2212.779790][    C1] RBP: 0000000000000004 R08: ffff88802f970193 R09: 1ffff11005f2e032
[ 2212.787764][    C1] R10: dffffc0000000000 R11: ffffed1005f2e033 R12: dffffc0000000000
[ 2212.795740][    C1] R13: ffff88802df98800 R14: ffff88802f970000 R15: ffff88802f970190
[ 2212.803725][    C1]  ? put_cred_rcu+0x2c4/0x340
[ 2212.808413][    C1]  ? put_cred_rcu+0x2c4/0x340
[ 2212.813093][    C1]  ? __pfx_put_cred_rcu+0x10/0x10
[ 2212.818153][    C1]  ? rcu_core+0xc37/0x1770
[ 2212.822584][    C1]  rcu_core+0xcab/0x1770
[ 2212.826848][    C1]  ? __pfx_rcu_core+0x10/0x10
[ 2212.831531][    C1]  ? rcu_qs+0xc4/0x170
[ 2212.835609][    C1]  ? __pfx_rcu_qs+0x10/0x10
[ 2212.840143][    C1]  ? sched_clock_cpu+0x74/0x430
[ 2212.845010][    C1]  ? rcu_softirq_qs+0xf2/0x350
[ 2212.849783][    C1]  ? __pfx_rcu_softirq_qs+0x10/0x10
[ 2212.855010][    C1]  handle_softirqs+0x27d/0x880
[ 2212.859788][    C1]  ? run_ksoftirqd+0x9b/0x100
[ 2212.864481][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[ 2212.869776][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[ 2212.874818][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[ 2212.879870][    C1]  run_ksoftirqd+0x9b/0x100
[ 2212.884442][    C1]  ? __pfx_run_ksoftirqd+0x10/0x10
[ 2212.889594][    C1]  smpboot_thread_fn+0x542/0xa60
[ 2212.894564][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[ 2212.899632][    C1]  kthread+0x711/0x8a0
[ 2212.903710][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[ 2212.909178][    C1]  ? __pfx_kthread+0x10/0x10
[ 2212.913774][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2212.918981][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2212.924186][    C1]  ? __pfx_kthread+0x10/0x10
[ 2212.928779][    C1]  ret_from_fork+0x599/0xb30
[ 2212.933380][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 2212.938508][    C1]  ? __switch_to_asm+0x39/0x70
[ 2212.943277][    C1]  ? __switch_to_asm+0x33/0x70
[ 2212.948051][    C1]  ? __pfx_kthread+0x10/0x10
[ 2212.952639][    C1]  ret_from_fork_asm+0x1a/0x30
[ 2212.957420][    C1]  </TASK>
[ 2212.960606][    C1] Kernel Offset: disabled
[ 2212.964928][    C1] Rebooting in 86400 seconds..