last executing test programs:

1m15.340438205s ago: executing program 0 (id=66):
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fchmodat(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0xe0)
r0 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7})
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10)
r2 = socket(0x1e, 0x4, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

1m15.254893844s ago: executing program 0 (id=67):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x17e)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x401000})
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))

1m15.175468722s ago: executing program 0 (id=68):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c00000011000500000000000003000007000000", @ANYRES32=r2, @ANYBLOB="01000000000000000c001a8008000580040003"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4c840)

1m15.056208157s ago: executing program 0 (id=69):
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x14711, &(0x7f00000003c0)={[{@lazytime}, {@inlinecrypt}, {@noblock_validity}, {@abort}, {@mblk_io_submit}, {@dioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x222a}}, {@nouid32}, {@test_dummy_encryption}, {@bsdgroups}]}, 0x3, 0x453, &(0x7f0000000c40)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e)

1m15.028798513s ago: executing program 0 (id=70):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000100)=ANY=[], 0x1, 0x2f4, &(0x7f0000000500)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, 0x0, 0x0)

1m14.806116777s ago: executing program 0 (id=71):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x19, 0x1, 0x0, r0, 0x0, 0x0, 0x1000000, 0x0, 0x10}])

1m14.78286662s ago: executing program 32 (id=71):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x19, 0x1, 0x0, r0, 0x0, 0x0, 0x1000000, 0x0, 0x10}])

1m11.583308359s ago: executing program 2 (id=100):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
io_setup(0x42, &(0x7f0000000100)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000240)="f8", 0x1}])
sendmmsg$alg(r1, &(0x7f0000000300)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="9b", 0x1}], 0x1, &(0x7f0000000280)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2000c001}], 0x1, 0x4000040)

1m11.325664086s ago: executing program 2 (id=101):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13)
ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0xa5f7, 0x0, 0x8, 0x80, 0x1, "48841dd05a6b4ea06f660a5e50c6ada37c1981", 0x0, 0x400})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x3c)

1m11.265371029s ago: executing program 2 (id=102):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8)
close(r1)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r1, r3, 0x4, r4}, 0x10)

1m11.176083702s ago: executing program 2 (id=103):
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1000, 0x0)

1m11.106376179s ago: executing program 2 (id=104):
r0 = socket$inet6(0xa, 0x80002, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={<r1=>0xffffffffffffffff})
fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setreuid(0x0, r2)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x97, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)

1m10.893966666s ago: executing program 2 (id=105):
syz_open_dev$tty20(0xc, 0x4, 0x1)
syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2)
syz_usb_connect$hid(0x4, 0x4743b15c5f5fbd6b, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x12, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x21, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8004, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xfd, 0x0, 0x8}}}}}]}}]}}, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket$unix(0x1, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640))
r0 = socket(0x400000000010, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21, 0x100}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r3}, 0x48)
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x100}, 0x0)
write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a)

1m10.823003224s ago: executing program 33 (id=105):
syz_open_dev$tty20(0xc, 0x4, 0x1)
syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2)
syz_usb_connect$hid(0x4, 0x4743b15c5f5fbd6b, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x12, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x21, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8004, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xfd, 0x0, 0x8}}}}}]}}]}}, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket$unix(0x1, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640))
r0 = socket(0x400000000010, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21, 0x100}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r3}, 0x48)
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x100}, 0x0)
write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a)

1m9.002660241s ago: executing program 3 (id=124):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x3, 0xffffc3fd}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0)
r5 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x80, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000400)={0x48})
setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000040)={0x1, 'bond_slave_1\x00', 0x4}, 0x18)

1m8.09198863s ago: executing program 3 (id=129):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000017c00000400fc80a72601"], 0x26c0}}, 0x4010)

1m7.165618414s ago: executing program 3 (id=143):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @remote, 0xb}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1}, 0x1c)
syz_emit_ethernet(0xfef3, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x100004, "628e0960f6d6d3f6ee6d6b84b345dccac643e7df3e526ff07833b291322d4a74", "882ed6741e7632daeaec0c95f2ad1cd6", {"8fb3d9fd3efe8e4ea8b5ec7448ddd6a3", "215990e1b896120966af96b22cf049f0"}}}}}}}}, 0x0)

1m7.146911786s ago: executing program 3 (id=145):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000140), 0x3, 0x4cd, &(0x7f0000000c80)="$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")
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x60)
getdents64(r0, 0x0, 0x22)

1m7.066833983s ago: executing program 3 (id=146):
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaa270005d70000fe080600010800060400012aaaaaaaaa2aac1414bbaaaaaaaaaa00ac1414bb"], 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14)

1m6.845488284s ago: executing program 3 (id=149):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
shutdown(r1, 0x0)

1m6.708152911s ago: executing program 34 (id=149):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
shutdown(r1, 0x0)

1m2.064632465s ago: executing program 4 (id=223):
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0)
socket$inet(0x2, 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000b40)='./file1\x00', 0x0, 0x100, 0x12345})
r0 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0xfe15, 0x10, 0x0, 0x30f}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000540)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x47bc, 0x0, 0x21, 0x0, 0x0)

1m1.893253834s ago: executing program 4 (id=230):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010026"], &(0x7f0000000740)=""/226, 0x26, 0xe2, 0x2}, 0x28)

1m1.822462806s ago: executing program 4 (id=232):
r0 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
syz_clone(0x2000200, 0x0, 0x0, 0x0, 0x0, 0x0)

1m1.69435747s ago: executing program 4 (id=234):
syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x840, &(0x7f00000000c0), 0x4, 0x9820, &(0x7f0000020bc0)="$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")
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x2007, 0x3a, '\r', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b)
truncate(&(0x7f0000000900)='./file2\x00', 0x258)

1m1.365595597s ago: executing program 4 (id=238):
openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0xd55, {0x4, 0x2, 0x0, 0x9, 0x20000009, 0x40, {0x200000000006, 0xfffffffffffffffb, 0x4, 0x100000001, 0x0, 0x10000000, 0x6, 0x3, 0x80000002, 0xc000, 0x3, 0x0, 0x0, 0x0, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
unshare(0x2a020400)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

1m1.153826106s ago: executing program 4 (id=239):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
r1 = socket$kcm(0x2, 0x2, 0x73)
bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0)
r2 = socket$kcm(0x2, 0x2, 0x73)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10)

1m1.043703066s ago: executing program 35 (id=239):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
r1 = socket$kcm(0x2, 0x2, 0x73)
bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0)
r2 = socket$kcm(0x2, 0x2, 0x73)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10)

10.647512698s ago: executing program 5 (id=959):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80c0c6, &(0x7f0000000340)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@numtail}, {@numtail}, {@shortname_winnt}, {@fat=@umask={'umask', 0x3d, 0x2e8705d3}}, {@fat=@codepage={'codepage', 0x3d, '1250'}}, {@rodir}, {@uni_xlateno}, {@shortname_winnt}, {@shortname_win95}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@shortname_winnt}]}, 0x81, 0x2ae, &(0x7f0000001980)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x275a, 0x0)

10.646135503s ago: executing program 5 (id=960):
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x25, 0x2000, @fd, 0xb, 0x5, 0x8020, 0x7, 0x0, {0x1}})
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000))

10.534256762s ago: executing program 5 (id=962):
syz_mount_image$bcachefs(&(0x7f0000000200), &(0x7f0000000000)='./file1\x00', 0x1800402, &(0x7f0000000840)=ANY=[@ANYBLOB="6a6f75726e616c5f74726d657461646174615f636865636b4079321e09c55c9bf073756d3d63726336342c7f6174615f636865636b73756d3d6372633332632c6673636b2c6a6f75726e616c5f666c7573685f64697361626c65642c726174656cd6ee984c5f6572726f72732c7265636f766572795f706173735f6c6173743d7365745f6d61795f676f5f72772c7265636f6e7374727563745f616c6c6f632c6e6f5f646174615f696f2c7374725f686173683d736970686173682c000f456c33737c01c95301f57184319607791e0389515818ee65b05741a83e2d3412b274e683f19c", @ANYRES16=0x0, @ANYRES64, @ANYRES8, @ANYRES8], 0x1, 0x596c, &(0x7f0000006d80)="$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")

10.051136351s ago: executing program 5 (id=983):
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x818808, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1018000, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c})
chdir(&(0x7f00000001c0)='./file0\x00')
chdir(&(0x7f00000003c0)='./bus\x00')
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x1)
syz_mount_image$minix(&(0x7f0000000100), &(0x7f0000000a40)='./file1\x00', 0x2004010, &(0x7f0000001180)=ANY=[], 0x9, 0x1f2, &(0x7f00000004c0)="$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")
getdents64(r0, &(0x7f0000000180)=""/92, 0x5c)

8.630879662s ago: executing program 5 (id=1019):
syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303"], 0x0)
close(0x3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x9, 0x10}, 0xc)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000240)={0x18, @time={0x53, 0x9}, 0x4, {0x2, 0xca}, 0x3, 0x2, 0x49})
syz_open_dev$evdev(&(0x7f0000000140), 0xe, 0x480)

8.557361121s ago: executing program 5 (id=1020):
syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xabb, &(0x7f0000000340)="$eJzs3U2MW0fhAPCxd73JJuk/Tv8JXdLQJhTa8tFNs1nCRwRJlQiJqKkQl0oVlyhNS0QIEkUCqkokOXGjVRUkTnyIUy9VQUj0gqKeuFSikSqkngoHDkRBVOIAgcQo3hmvPbHzbO/Hs9e/nzQ7njfzPPO8z8/vcyYAE6va/Lu4OFcJ4fKbrx7/28N/nb095UirRL35d7otVQshVGJ6Onu/96eW4psfvHS6W1wJC82/KR2eut6ad2sI4ULYG66Eeth9+eorby88efLiiUv73nnt8LW1WXoAAJgsX71yeHHXn/94/44brz9wNGxqTU/75/WY3hb3+4/GHf+0/18NnelKW2g3k5WbjqE621luqku59npqWbnpHvXPZPXXepTbFO5e/1TbtG7LDeMsrcf1UKnOd6Sr1fn5pWPy0Dyun6nMnz977rkXSmoosOr++WAIYW9bOHapMz1q4cgItGHI0BiBNoxlOLp+dd1oLCl9mdcpNLaXvQUCWJJfL7zDhfzMwsq03m26v/qvP1HtPj+sgvVe/weqf6bk+sPk1p+2Or+6aIvD6tmoa1NarvQ92hbT+XWE/P6l3t///EpH59T8ekStz3b2uo4wLtcXerVzap3bMaxe7c/Xi43qizFOn8OXsvz270/+Px2X/zHQ3b/y8/+TEGoj0AZBGDaEjnRtJe/VKHn7A4yu/L65Rro+GuX39eX5mwryNxfkzxbkbynI31qQD5PsN9/9cXi5snycnx/TD3o+PJ1nuyfG/zdge/LzkYPWn9/3O6iV1p/fTwyj7Hennj7zuWefubp0/3+ltf7fiut7Otyox+/WlVggnS/Mz6u37v2vd9ZT7VHu3qw993Qp33y9s7NcZefy+4S27cwd7ZjrnG97Xm5bLLens1w9Kzcbw+asvfn+yZZsvrT/kbar6fOazpa3li3HTNaOtF3ZEeO8HTCMtD72uv8/rZ9zoVZ57uy5M4/HdFpP/zBV23R7+oF1bjewcv0+/zMXOp//mWlNr1Xbtwvbl6dXlrYLb8T365y+0Kqnc/rBmE6/c9+Ymm1Onz/97XPPrv7iw0R74QcvfvPUuXNnvuPF0C++PBrNGORFOmwZlfas9YvJWdJVe1HyhglYc/t/uLQT8NjZb516/szzZ84fPHTo4MLCoc8fXNzf3K/f37533+5CCa0FVtPyj37ZLQEAAAAAAAAAAAD69b0Tx6+++9Zn31t6/n/5+b/0/H+68zc9//+j7Pn//Dn59Bx8eg5wR5f8Zpmsg9WZrFwthv/P2rszq2dXNt+HYtwaxy8+/5+qy/t1Te25L5te65HMuhO4o7+UmawPkny8wI/G+FKMfxmgRJXZ7pNjXNS/dVrXU/8Ubf1SNPQPPD7S/y2tDakfk/T8d9d+ndr+2TvWoY2svvV4nLDsZQS6+/tE9f/9j+UFL70tGyVMj8l73iX8dHLXiUbPvfR+R7ABWB1lj/+Zznum+Pzvv7L5dkjFrj/Rub3M+y+FQfzp3c70qI4/uV715+P2rXf9ZS9/Uf2rPf5na/y7vrd/2Yh59eHq/ffPrr3XVm3Y3W/9+fKnfqB3Dlb/jVh/WppHQn/1N36R1Z9fEOrTf7L6t/RZ/x3Lv2e4+v8b608f26MP9Vv/Uosr1c525OeN0/W//LxxcjNb/tS3513q/9qL3ZZ/yIEab8X6YZKNyzizg8r2I1o77cOP/xtdWN3xf1uNzTZr+X0Yn4nptCFO9znk450M2v50f0X6HdiVvX+l4PfN+L/j7QsxLvo+pPF/0/pYjz/5benmZ5nStS6f7Ubd1sC4en+irv+NRdg8Am0Q+g+NqSHma40TV3L7G43G2p7QKlBq5ZT++Zd9nFB2/WV//kXy8X/zffh8/N88Px//N8/Px//N82fjf6hXfj7+b/555uP/5vn3Ze+bjw88V5D/4YL83d3zW4ft9xfMv6cg/yMF+fta+Uc6SqT8Bwrmf7Ag/96C/IcK8j9WkP/xgvyHC/IfbctvHwM65X+iYP6NLj2PMqnLD5Msfz7P9x8mR7r+0+v7v7MgHxhfP3n9wLFnfv31+tLz/zOt8yHpOt7RmK7F46fvx3R+3Tu0pW/nvRXTf8nyR/18B0ySvP+M/Pf9kYJ8YHyl+7x8v2ECVTZ3nxzjon6reu3nM14+GeNPxfjTMX4sxvMx3h/jAzFeWKf2sTaOvfHbwy9Xlo/3t2f5/d5Pnj8P1NFPVAjhYJ/tyc8PDHo/e96P36BWWv+Qj4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACUptr8u7g4Vwnh8puvHn/65Nn9t6ccaZWoN/9Ot6VqrflCeDzGUzH+eXxx84OXTrfHt2JcCQuhEiqt6eGp662atoYQLoS94Uqoh92Xr77y9sKTJy+euLTvndcOX1u7TwAAAAA2vv8FAAD//xEiDi0=")
r0 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x80306e85, 0x0)

8.458308637s ago: executing program 36 (id=1020):
syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xabb, &(0x7f0000000340)="$eJzs3U2MW0fhAPCxd73JJuk/Tv8JXdLQJhTa8tFNs1nCRwRJlQiJqKkQl0oVlyhNS0QIEkUCqkokOXGjVRUkTnyIUy9VQUj0gqKeuFSikSqkngoHDkRBVOIAgcQo3hmvPbHzbO/Hs9e/nzQ7njfzPPO8z8/vcyYAE6va/Lu4OFcJ4fKbrx7/28N/nb095UirRL35d7otVQshVGJ6Onu/96eW4psfvHS6W1wJC82/KR2eut6ad2sI4ULYG66Eeth9+eorby88efLiiUv73nnt8LW1WXoAAJgsX71yeHHXn/94/44brz9wNGxqTU/75/WY3hb3+4/GHf+0/18NnelKW2g3k5WbjqE621luqku59npqWbnpHvXPZPXXepTbFO5e/1TbtG7LDeMsrcf1UKnOd6Sr1fn5pWPy0Dyun6nMnz977rkXSmoosOr++WAIYW9bOHapMz1q4cgItGHI0BiBNoxlOLp+dd1oLCl9mdcpNLaXvQUCWJJfL7zDhfzMwsq03m26v/qvP1HtPj+sgvVe/weqf6bk+sPk1p+2Or+6aIvD6tmoa1NarvQ92hbT+XWE/P6l3t///EpH59T8ekStz3b2uo4wLtcXerVzap3bMaxe7c/Xi43qizFOn8OXsvz270/+Px2X/zHQ3b/y8/+TEGoj0AZBGDaEjnRtJe/VKHn7A4yu/L65Rro+GuX39eX5mwryNxfkzxbkbynI31qQD5PsN9/9cXi5snycnx/TD3o+PJ1nuyfG/zdge/LzkYPWn9/3O6iV1p/fTwyj7Hennj7zuWefubp0/3+ltf7fiut7Otyox+/WlVggnS/Mz6u37v2vd9ZT7VHu3qw993Qp33y9s7NcZefy+4S27cwd7ZjrnG97Xm5bLLens1w9Kzcbw+asvfn+yZZsvrT/kbar6fOazpa3li3HTNaOtF3ZEeO8HTCMtD72uv8/rZ9zoVZ57uy5M4/HdFpP/zBV23R7+oF1bjewcv0+/zMXOp//mWlNr1Xbtwvbl6dXlrYLb8T365y+0Kqnc/rBmE6/c9+Ymm1Onz/97XPPrv7iw0R74QcvfvPUuXNnvuPF0C++PBrNGORFOmwZlfas9YvJWdJVe1HyhglYc/t/uLQT8NjZb516/szzZ84fPHTo4MLCoc8fXNzf3K/f37533+5CCa0FVtPyj37ZLQEAAAAAAAAAAAD69b0Tx6+++9Zn31t6/n/5+b/0/H+68zc9//+j7Pn//Dn59Bx8eg5wR5f8Zpmsg9WZrFwthv/P2rszq2dXNt+HYtwaxy8+/5+qy/t1Te25L5te65HMuhO4o7+UmawPkny8wI/G+FKMfxmgRJXZ7pNjXNS/dVrXU/8Ubf1SNPQPPD7S/y2tDakfk/T8d9d+ndr+2TvWoY2svvV4nLDsZQS6+/tE9f/9j+UFL70tGyVMj8l73iX8dHLXiUbPvfR+R7ABWB1lj/+Zznum+Pzvv7L5dkjFrj/Rub3M+y+FQfzp3c70qI4/uV715+P2rXf9ZS9/Uf2rPf5na/y7vrd/2Yh59eHq/ffPrr3XVm3Y3W/9+fKnfqB3Dlb/jVh/WppHQn/1N36R1Z9fEOrTf7L6t/RZ/x3Lv2e4+v8b608f26MP9Vv/Uosr1c525OeN0/W//LxxcjNb/tS3513q/9qL3ZZ/yIEab8X6YZKNyzizg8r2I1o77cOP/xtdWN3xf1uNzTZr+X0Yn4nptCFO9znk450M2v50f0X6HdiVvX+l4PfN+L/j7QsxLvo+pPF/0/pYjz/5benmZ5nStS6f7Ubd1sC4en+irv+NRdg8Am0Q+g+NqSHma40TV3L7G43G2p7QKlBq5ZT++Zd9nFB2/WV//kXy8X/zffh8/N88Px//N8/Px//N82fjf6hXfj7+b/555uP/5vn3Ze+bjw88V5D/4YL83d3zW4ft9xfMv6cg/yMF+fta+Uc6SqT8Bwrmf7Ag/96C/IcK8j9WkP/xgvyHC/IfbctvHwM65X+iYP6NLj2PMqnLD5Msfz7P9x8mR7r+0+v7v7MgHxhfP3n9wLFnfv31+tLz/zOt8yHpOt7RmK7F46fvx3R+3Tu0pW/nvRXTf8nyR/18B0ySvP+M/Pf9kYJ8YHyl+7x8v2ECVTZ3nxzjon6reu3nM14+GeNPxfjTMX4sxvMx3h/jAzFeWKf2sTaOvfHbwy9Xlo/3t2f5/d5Pnj8P1NFPVAjhYJ/tyc8PDHo/e96P36BWWv+Qj4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACUptr8u7g4Vwnh8puvHn/65Nn9t6ccaZWoN/9Ot6VqrflCeDzGUzH+eXxx84OXTrfHt2JcCQuhEiqt6eGp662atoYQLoS94Uqoh92Xr77y9sKTJy+euLTvndcOX1u7TwAAAAA2vv8FAAD//xEiDi0=")
r0 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x80306e85, 0x0)

2.931179413s ago: executing program 7 (id=1093):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newlink={0x50, 0x10, 0x401, 0x70bd2b, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}}, 0x2000000)

2.870635207s ago: executing program 7 (id=1095):
syz_mount_image$vfat(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x90, &(0x7f0000000140)=ANY=[], 0x6, 0x2d7, &(0x7f0000000340)="$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")
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
write$UHID_INPUT(r0, &(0x7f0000001800)={0x8, {"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", 0x1000}}, 0x1006)
truncate(&(0x7f0000000040)='./file0\x00', 0x8000)
write$UHID_INPUT(r0, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006)

2.800780476s ago: executing program 7 (id=1098):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
ppoll(&(0x7f0000000240)=[{r0, 0x2280}], 0x1, 0x0, 0x0, 0x0)
write$P9_RSTATu(r0, &(0x7f0000000580)={0x21e, 0x2, 0x0, {{0x500, 0xdd, 0x0, 0x4, {}, 0x3810000, 0x0, 0x0, 0x0, 0x1b, '\x04nod\xff\x01{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, '\b\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, 0x0, 0xee01}}, 0x21e)

1.889949856s ago: executing program 7 (id=1115):
r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x44f, 0xb65d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x60, 0x6, [{{0x9, 0x4, 0x0, 0x10, 0x5, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x36, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0xfd, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x81, 0x8}}]}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x4, 0x57, {0x57, 0x1, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87cbfd10f3c080b73385a7015d3a32ed6b5217cdbb6fadb2ea7a288982d5337c364daf03bd400d66293b0a2b103dd93f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

679.448535ms ago: executing program 6 (id=1127):
mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000001300)={0x0, 0x400}, 0x8)

678.986593ms ago: executing program 6 (id=1128):
r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0003420000004203"]}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000500)=ANY=[@ANYBLOB="400f02000000b88c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f00000006c0)=ANY=[@ANYBLOB="00f603000000a181"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

584.336167ms ago: executing program 1 (id=1131):
syz_emit_ethernet(0x7a, &(0x7f0000000280)={@random="856b934629fa", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x896f}, {}, {}, {0xa888}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9}}}}}}}}}, 0x0)
rt_sigqueueinfo(0x0, 0x21, &(0x7f00000002c0)={0x0, 0x0, 0x19})

584.161272ms ago: executing program 1 (id=1132):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bf"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x40247007, 0x0)

554.340454ms ago: executing program 1 (id=1133):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_drop_memb(r0, 0x107, 0x2, 0x0, 0x0)

489.935507ms ago: executing program 1 (id=1134):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000180)={[{@iocharset={'iocharset', 0x3d, 'cp869'}}, {@umask={'umask', 0x3d, 0x5}}, {@namecase}, {}, {@fmask={'fmask', 0x3d, 0xab}}, {@discard}, {@fmask={'fmask', 0x3d, 0x6}}, {@utf8}, {@umask={'umask', 0x3d, 0x6}}, {@allow_utime={'allow_utime', 0x3d, 0xce38}}]}, 0x1, 0x1528, &(0x7f00000037c0)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

489.707941ms ago: executing program 1 (id=1135):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0x0)

441.174807ms ago: executing program 1 (id=1136):
pipe(0x0)
r0 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, r0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r3 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, 0x0, 0x0)
personality(0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newlink={0x30, 0x10, 0x801, 0x70bd26, 0x25dfdbfc, {}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8001}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048050}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4}, 0x94)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

306.944525ms ago: executing program 7 (id=1137):
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0x2, @pix={0xfffffffd, 0x25, 0x47425247, 0x8, 0x101, 0x3, 0x7}})

171.438018ms ago: executing program 7 (id=1138):
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100002afe0620e60405000001010203010902240001000010000904140002a024260009050602ff0300000009058202"], 0x0)

61.270927ms ago: executing program 6 (id=1139):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="010000e70300"})

60.90505ms ago: executing program 6 (id=1140):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
socket$kcm(0x10, 0x2, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40)

219.02µs ago: executing program 6 (id=1141):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
pread64(r0, 0x0, 0x0, 0x81)

0s ago: executing program 6 (id=1142):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x4, 0xffffffffffffffff, 0x0, 0x1000000, 0x0, 0x400000020000000, 0x3d8})

kernel console output (not intermixed with test programs):

or??
[   62.657709][ T5886] smartjoyplus 0003:0925:8888.0003: item fetching failed at offset 3/5
[   62.676143][ T5886] smartjoyplus 0003:0925:8888.0003: parse failed
[   62.684098][ T5886] smartjoyplus 0003:0925:8888.0003: probe with driver smartjoyplus failed with error -22
[   62.695849][ T5847] Bluetooth: hci1: command tx timeout
[   62.695890][ T5233] Bluetooth: hci2: command tx timeout
[   62.714351][ T6086] loop0: detected capacity change from 0 to 512
[   62.767178][ T6086] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   62.771395][ T6086] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   62.795335][ T5841] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.859308][ T5886] usb 2-1: USB disconnect, device number 4
[   62.884312][ T6092] loop0: detected capacity change from 0 to 512
[   62.887896][ T6092] EXT4-fs: inline encryption not supported
[   62.890187][ T6092] EXT4-fs: Ignoring removed mblk_io_submit option
[   62.893290][ T6092] EXT4-fs (loop0): Test dummy encryption mode enabled
[   62.897715][ T6092] EXT4-fs (loop0): orphan cleanup on readonly fs
[   62.900159][ T6092] EXT4-fs error (device loop0): ext4_orphan_get:1392: comm syz.0.69: inode #13: comm syz.0.69: iget: illegal inode #
[   62.904937][ T6092] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.69: couldn't read orphan inode 13 (err -117)
[   62.910405][ T6092] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   62.932493][ T5841] EXT4-fs error (device loop0): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[   62.942973][ T5841] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 15
[   62.949480][ T5841] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 15
[   63.048186][ T5886] r8152-cfgselector 3-1: USB disconnect, device number 3
[   63.118334][ T5841] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.131430][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.180864][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.231082][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.277159][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.280080][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.282820][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.286726][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.289879][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.293876][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.375420][ T6095] chnl_net:caif_netlink_parms(): no params data found
[   63.462981][   T13] bridge_slave_1: left allmulticast mode
[   63.465038][   T13] bridge_slave_1: left promiscuous mode
[   63.467742][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.478484][   T13] bridge_slave_0: left allmulticast mode
[   63.480724][   T13] bridge_slave_0: left promiscuous mode
[   63.483114][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.821053][ T6114] IPVS: fo: SCTP 172.20.20.187:0 - no destination available
[   63.886197][ T5908] IPVS: starting estimator thread 0...
[   63.976398][ T6115] IPVS: using max 94 ests per chain, 225600 per kthread
[   64.572428][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   64.587258][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   64.593901][   T13] bond0 (unregistering): Released all slaves
[   64.630990][ T6095] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.633178][ T6095] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.640698][ T6095] bridge_slave_0: entered allmulticast mode
[   64.643034][ T6095] bridge_slave_0: entered promiscuous mode
[   64.653582][ T6095] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.656455][ T6095] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.658724][ T6095] bridge_slave_1: entered allmulticast mode
[   64.661074][ T6095] bridge_slave_1: entered promiscuous mode
[   64.680067][   T13] tipc: Left network mode
[   64.692062][ T6095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.728129][ T6095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.769358][ T6095] team0: Port device team_slave_0 added
[   64.773133][ T6095] team0: Port device team_slave_1 added
[   64.783246][ T6123] loop2: detected capacity change from 0 to 32768
[   64.790871][ T6123] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.81 (6123)
[   64.797624][ T6123] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   64.801132][ T6123] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[   64.828449][ T6123] BTRFS info (device loop2): enabling ssd optimizations
[   64.831233][ T6123] BTRFS info (device loop2): enabling free space tree
[   64.838138][ T6123] BTRFS info (device loop2): use lzo compression, level 0
[   64.850230][ T6095] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.852784][ T6095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.857545][   T33] audit: type=1800 audit(1755905867.236:3): pid=6123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.81" name="file1" dev="loop2" ino=260 res=0 errno=0
[   64.876884][ T6095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.889618][   T13] hsr_slave_0: left promiscuous mode
[   64.892218][   T13] hsr_slave_1: left promiscuous mode
[   64.894671][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   64.906031][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   64.913030][   T33] audit: type=1800 audit(1755905867.296:4): pid=6157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.81" name="file1" dev="loop2" ino=260 res=0 errno=0
[   64.926124][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   64.928513][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   64.955128][   T13] veth1_macvtap: left promiscuous mode
[   64.958430][   T13] veth0_macvtap: left promiscuous mode
[   64.963818][   T13] veth1_vlan: left promiscuous mode
[   64.973379][   T13] veth0_vlan: left promiscuous mode
[   65.063665][ T6138] loop1: detected capacity change from 0 to 32768
[   65.141563][   T35] read_mapping_page failed!
[   65.147013][   T35] ERROR: (device loop1): txCommit: 
[   65.147013][   T35] 
[   65.153834][   T35] ERROR: (device loop1): remounting filesystem as read-only
[   65.158963][   T35] jfs_write_inode: jfs_commit_inode failed!
[   65.220930][   T13] team0 (unregistering): Port device team_slave_1 removed
[   65.238788][   T13] team0 (unregistering): Port device team_slave_0 removed
[   65.325816][ T5847] Bluetooth: hci0: command tx timeout
[   65.376475][ T6095] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.379362][ T6095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.399260][ T6095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.439999][ T5851] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   65.471354][ T6095] hsr_slave_0: entered promiscuous mode
[   65.479397][ T6095] hsr_slave_1: entered promiscuous mode
[   65.481938][ T6095] debugfs: 'hsr0' already exists in 'hsr'
[   65.484113][ T6095] Cannot create hsr debugfs directory
[   65.551284][ T6166] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   65.554051][ T6166] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   65.721911][ T6095] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   65.737441][ T6095] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   65.743622][ T6095] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   65.758188][ T6095] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   65.774125][ T6168] loop2: detected capacity change from 0 to 32768
[   65.785910][ T6168] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.87 (6168)
[   65.807111][ T6168] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[   65.810110][ T6168] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[   65.831897][ T6095] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.850293][ T6095] 8021q: adding VLAN 0 to HW filter on device team0
[   65.857141][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.859528][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.862764][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.865154][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.911598][ T6095] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   65.919102][ T6095] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.925394][ T6168] BTRFS info (device loop2): enabling ssd optimizations
[   65.928752][   T47] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   65.942098][ T6168] BTRFS info (device loop2): enabling free space tree
[   65.970436][   T33] audit: type=1800 audit(1755905868.356:5): pid=6168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.87" name="file0" dev="loop2" ino=258 res=0 errno=0
[   65.978383][ T6168] BTRFS info (device loop2): setting compat-ro feature flag for VERITY (0x4)
[   66.019891][ T5851] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[   66.054226][ T6095] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.093234][ T6223] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   66.100324][   T47] usb 2-1: config 0 has an invalid interface number: 73 but max is 0
[   66.101404][ T6095] veth0_vlan: entered promiscuous mode
[   66.102871][   T47] usb 2-1: config 0 has no interface number 0
[   66.109698][ T6095] veth1_vlan: entered promiscuous mode
[   66.109758][   T47] usb 2-1: New USB device found, idVendor=06f8, idProduct=300c, bcdDevice=39.64
[   66.123267][   T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   66.124551][ T6095] veth0_macvtap: entered promiscuous mode
[   66.130926][ T6095] veth1_macvtap: entered promiscuous mode
[   66.133909][   T47] usb 2-1: Product: syz
[   66.135187][   T47] usb 2-1: Manufacturer: syz
[   66.146361][   T47] usb 2-1: SerialNumber: syz
[   66.146681][ T6095] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.159522][ T6095] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.162553][   T47] usb 2-1: config 0 descriptor??
[   66.173293][ T5872] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.176708][ T5872] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.191787][ T5872] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.202998][ T5872] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.237415][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.242478][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.260477][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.264004][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.299524][ T6234] loop2: detected capacity change from 0 to 512
[   66.307712][ T6234] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   66.316425][ T6234] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002]
[   66.319862][ T6234] EXT4-fs (loop2): orphan cleanup on readonly fs
[   66.322325][ T6234] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.97: bad orphan inode 267
[   66.326548][ T6234] EXT4-fs (loop2): Remounting filesystem read-only
[   66.329292][ T6234] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[   66.347693][ T5851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[   66.367398][   T47] usb 2-1: Found UVC 0.00 device syz (06f8:300c)
[   66.370041][   T47] usb 2-1: No valid video chain found.
[   66.574038][   T47] usb 2-1: USB disconnect, device number 5
[   67.024048][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.073643][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.134144][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.165136][   T33] audit: type=1326 audit(1755905869.546:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6261 comm="syz.1.107" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f38a0b8ebe9 code=0x0
[   67.182893][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.306020][ T5233] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   67.309037][ T5233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   67.311671][ T5233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   67.315189][ T5233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   67.318810][ T5233] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   67.346604][   T12] bridge_slave_1: left allmulticast mode
[   67.351901][   T12] bridge_slave_1: left promiscuous mode
[   67.355754][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.364363][   T12] bridge_slave_0: left allmulticast mode
[   67.367001][   T12] bridge_slave_0: left promiscuous mode
[   67.369187][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.406307][ T5233] Bluetooth: hci0: command tx timeout
[   67.413363][ T6268] syz.3.108 (6268) used greatest stack depth: 18960 bytes left
[   67.494381][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   67.504140][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   67.510363][ T6279] gfs2: path_lookup on tmpfs returned error -2
[   67.511093][   T12] bond0 (unregistering): Released all slaves
[   67.633603][ T6287] capability: warning: `syz.3.112' uses 32-bit capabilities (legacy support in use)
[   67.712146][ T6265] chnl_net:caif_netlink_parms(): no params data found
[   67.796312][ T6265] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.799221][ T6265] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.804030][ T6265] bridge_slave_0: entered allmulticast mode
[   67.809091][ T6265] bridge_slave_0: entered promiscuous mode
[   67.821636][   T12] hsr_slave_0: left promiscuous mode
[   67.827450][   T12] hsr_slave_1: left promiscuous mode
[   67.829815][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.832234][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   67.832484][ T6303] netlink: 'syz.3.115': attribute type 1 has an invalid length.
[   67.838621][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.842466][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   67.858980][   T12] veth1_macvtap: left promiscuous mode
[   67.861332][   T12] veth0_macvtap: left promiscuous mode
[   67.863759][   T12] veth1_vlan: left promiscuous mode
[   67.866419][   T12] veth0_vlan: left promiscuous mode
[   68.004554][   T12] team0 (unregistering): Port device team_slave_1 removed
[   68.023803][   T12] team0 (unregistering): Port device team_slave_0 removed
[   68.124490][ T6265] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.133444][ T6265] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.142412][ T6265] bridge_slave_1: entered allmulticast mode
[   68.146212][ T6265] bridge_slave_1: entered promiscuous mode
[   68.239221][ T6265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   68.272952][ T6265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   68.376044][ T6265] team0: Port device team_slave_0 added
[   68.397537][ T6265] team0: Port device team_slave_1 added
[   68.419256][ T6319] Zero length message leads to an empty skb
[   68.479096][ T6319] syz_tun: entered allmulticast mode
[   68.485524][ T6265] batman_adv: batadv0: Adding interface: batadv_slave_0
[   68.497790][ T6265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.513470][ T6265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   68.539710][ T6319] dvmrp1: entered allmulticast mode
[   68.548471][ T6265] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.551850][ T6265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.567097][ T6265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.683532][   T12] IPVS: stop unused estimator thread 0...
[   68.725427][ T6318] syz_tun: left allmulticast mode
[   68.823662][ T6265] hsr_slave_0: entered promiscuous mode
[   68.833826][ T6265] hsr_slave_1: entered promiscuous mode
[   68.850194][ T6265] debugfs: 'hsr0' already exists in 'hsr'
[   68.852253][ T6265] Cannot create hsr debugfs directory
[   69.203555][ T6265] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   69.210081][ T6265] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   69.213972][ T6265] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   69.325856][ T5233] Bluetooth: hci2: command tx timeout
[   69.388882][ T6265] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   69.486685][ T5233] Bluetooth: hci0: command tx timeout
[   69.507306][ T6265] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.537783][ T6265] 8021q: adding VLAN 0 to HW filter on device team0
[   69.548911][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.551871][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.563816][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.566815][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.700665][ T6351] loop1: detected capacity change from 0 to 32768
[   69.713775][ T6265] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.729334][ T6351] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   69.755179][ T6351] XFS (loop1): Ending clean mount
[   69.758524][ T6351] XFS (loop1): Quotacheck needed: Please wait.
[   69.767504][ T6351] XFS (loop1): Quotacheck: Done.
[   69.793855][ T5845] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   69.927833][ T6265] veth0_vlan: entered promiscuous mode
[   69.932370][ T6265] veth1_vlan: entered promiscuous mode
[   69.957985][ T6265] veth0_macvtap: entered promiscuous mode
[   69.962967][ T6383] loop1: detected capacity change from 0 to 128
[   69.966825][ T6265] veth1_macvtap: entered promiscuous mode
[   69.975839][ T6383] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[   69.981783][ T6265] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.994178][ T6265] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.003391][ T5872] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.032113][ T5872] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.047446][ T5872] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.052663][ T5872] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.078446][ T6384] netlink: set zone limit has 4 unknown bytes
[   70.132230][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.134928][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.149062][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.153488][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.268921][ T6396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   70.825267][ T6416] loop3: detected capacity change from 0 to 512
[   70.851331][ T6411] loop4: detected capacity change from 0 to 32768
[   70.854447][ T6416] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.145: iget: bad i_size value: 38620345925642
[   70.862767][ T6416] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.145: couldn't read orphan inode 15 (err -117)
[   70.868834][ T6416] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   70.884806][ T6411] (syz.4.142,6411,1):ocfs2_verify_volume:2314 ERROR: bad root_blkno: 0
[   70.894895][ T6411] (syz.4.142,6411,1):ocfs2_verify_volume:2331 ERROR: status = -22
[   70.908601][ T6411] (syz.4.142,6411,1):ocfs2_fill_super:989 ERROR: superblock probe failed!
[   70.919375][ T6411] (syz.4.142,6411,1):ocfs2_fill_super:1177 ERROR: status = -22
[   71.038188][ T6418] loop1: detected capacity change from 0 to 32768
[   71.088762][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.091638][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.091720][ T6095] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.149156][ T5872] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.258792][ T5872] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.320549][ T5872] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.360375][ T5871] IPVS: starting estimator thread 0...
[   71.403286][ T5872] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.417030][ T5233] Bluetooth: hci2: command tx timeout
[   71.446955][ T6432] IPVS: using max 93 ests per chain, 223200 per kthread
[   71.488893][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   71.493264][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   71.496740][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   71.504366][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   71.512425][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   71.566872][ T5872] bridge_slave_1: left allmulticast mode
[   71.577644][ T5872] bridge_slave_1: left promiscuous mode
[   71.579984][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.607653][ T5872] bridge_slave_0: left allmulticast mode
[   71.610023][ T5872] bridge_slave_0: left promiscuous mode
[   71.620900][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.725608][ T5872] dvmrp1 (unregistering): left allmulticast mode
[   71.772248][ T5872] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   71.777290][ T5872] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   71.781617][ T5872] bond0 (unregistering): Released all slaves
[   71.810745][ T6463] tipc: Started in network mode
[   71.812326][ T6463] tipc: Node identity ceb4c2bdbf9a, cluster identity 4711
[   71.814984][ T6463] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   71.833394][ T6463] syzkaller0: entered promiscuous mode
[   71.838220][ T6463] syzkaller0: entered allmulticast mode
[   71.860809][ T6463] tipc: Resetting bearer <eth:syzkaller0>
[   71.865614][ T6462] tipc: Resetting bearer <eth:syzkaller0>
[   71.875209][ T6462] tipc: Disabling bearer <eth:syzkaller0>
[   72.097801][ T6441] chnl_net:caif_netlink_parms(): no params data found
[   72.318806][ T5872] hsr_slave_0: left promiscuous mode
[   72.321339][ T5872] hsr_slave_1: left promiscuous mode
[   72.325056][ T5872] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.329186][ T5872] batman_adv: batadv0: Removing interface: batadv_slave_0
[   72.334904][ T5872] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.339380][ T5872] batman_adv: batadv0: Removing interface: batadv_slave_1
[   72.348003][ T5872] veth1_macvtap: left promiscuous mode
[   72.350359][ T5872] veth0_macvtap: left promiscuous mode
[   72.352880][ T5872] veth1_vlan: left promiscuous mode
[   72.356041][ T5872] veth0_vlan: left promiscuous mode
[   72.475168][ T5872] team0 (unregistering): Port device team_slave_1 removed
[   72.488153][ T5872] team0 (unregistering): Port device team_slave_0 removed
[   72.563211][ T6441] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.566512][ T6441] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.575213][ T6441] bridge_slave_0: entered allmulticast mode
[   72.587204][ T6441] bridge_slave_0: entered promiscuous mode
[   72.594706][ T6441] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.598802][ T6441] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.601352][ T6441] bridge_slave_1: entered allmulticast mode
[   72.604130][ T6441] bridge_slave_1: entered promiscuous mode
[   72.633082][ T6441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.652459][ T6441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.694895][ T6507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.175'.
[   72.700804][ T6441] team0: Port device team_slave_0 added
[   72.704766][ T6441] team0: Port device team_slave_1 added
[   72.742489][ T6441] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.744911][ T6441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.751893][ T6511] CUSE: unknown device info ""
[   72.755581][ T6511] CUSE: unknown device info ""
[   72.760909][ T6441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.763484][ T6511] CUSE: unknown device info ""
[   72.765533][ T6441] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.769775][ T6511] CUSE: unknown device info ""
[   72.769897][ T6441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.771615][ T6511] CUSE: zero length info key specified
[   72.780343][ T6441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.819070][ T6441] hsr_slave_0: entered promiscuous mode
[   72.821342][ T6441] hsr_slave_1: entered promiscuous mode
[   72.823482][ T6441] debugfs: 'hsr0' already exists in 'hsr'
[   72.826174][ T6441] Cannot create hsr debugfs directory
[   72.903724][ T6516] loop1: detected capacity change from 0 to 4096
[   72.913058][ T6516] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[   72.931038][ T6516] ntfs3(loop1): ino=4, mi_enum_attr
[   72.933239][ T6516] ntfs3(loop1): ino=4, Correct links count -> 2.
[   72.943026][ T6516] ntfs3(loop1): Failed to load $AttrDef (-22)
[   73.001054][ T6441] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   73.013019][ T6441] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   73.029882][ T6441] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   73.041954][ T6441] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   73.112230][ T6441] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.120690][ T6441] 8021q: adding VLAN 0 to HW filter on device team0
[   73.140180][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.143218][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.157329][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.160129][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.183257][ T6441] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   73.187531][ T6537] netlink: 12 bytes leftover after parsing attributes in process `syz.1.181'.
[   73.190555][ T6537] netlink: 12 bytes leftover after parsing attributes in process `syz.1.181'.
[   73.262941][ T6441] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.324302][ T6555] loop1: detected capacity change from 0 to 256
[   73.330438][ T6555] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[   73.382941][ T6441] veth0_vlan: entered promiscuous mode
[   73.387503][ T6441] veth1_vlan: entered promiscuous mode
[   73.399059][ T6441] veth0_macvtap: entered promiscuous mode
[   73.402688][ T6441] veth1_macvtap: entered promiscuous mode
[   73.411568][ T6441] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.442823][ T6441] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.449561][ T5704] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.453309][ T5704] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.460566][ T5704] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.464411][ T5704] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.485520][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.488530][ T5233] Bluetooth: hci2: command tx timeout
[   73.489201][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.555833][ T6159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.561050][ T6159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.565971][ T5233] Bluetooth: hci0: command tx timeout
[   73.828845][ T6564] loop5: detected capacity change from 0 to 4096
[   73.845959][ T6564] ntfs3(loop5): Failed to load $Extend (-22).
[   73.848554][ T6564] ntfs3(loop5): Failed to initialize $Extend.
[   73.980641][ T6573] loop5: detected capacity change from 0 to 128
[   74.251471][ T6581] loop5: detected capacity change from 0 to 32768
[   74.254238][ T6581] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.192 (6581)
[   74.261810][ T6581] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   74.265431][ T6581] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm
[   74.275338][ T6581] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   74.364908][ T6581] BTRFS info (device loop5): rebuilding free space tree
[   74.372544][ T6581] BTRFS info (device loop5): disabling free space tree
[   74.375304][ T6581] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   74.395983][ T6581] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   74.402660][ T6581] BTRFS info (device loop5): setting nodatasum
[   74.405104][ T6581] BTRFS info (device loop5): setting nodatacow
[   74.411609][ T6581] BTRFS info (device loop5): enabling ssd optimizations
[   74.414094][ T6581] BTRFS info (device loop5): turning off barriers
[   74.425772][ T6581] BTRFS info (device loop5): enabling disk space caching
[   74.428057][ T6581] BTRFS info (device loop5): force clearing of disk cache
[   74.435753][ T6581] BTRFS info (device loop5): max_inline set to 4096
[   74.487039][ T6441] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   74.541758][ T6606] loop1: detected capacity change from 0 to 32768
[   74.580753][ T6606] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   74.599344][ T6606] XFS (loop1): Ending clean mount
[   74.612308][   T33] audit: type=1800 audit(1755905876.996:7): pid=6606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.197" name="file1" dev="loop1" ino=6150 res=0 errno=0
[   74.655114][ T6623] vlan2: entered allmulticast mode
[   74.657522][ T5845] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   74.836756][ T6634] : entered promiscuous mode
[   75.020577][ T6652] deleting an unspecified loop device is not supported.
[   75.567331][ T5233] Bluetooth: hci2: command tx timeout
[   75.568391][ T6666] process 'syz.4.216' launched './file0' with NULL argv: empty string added
[   75.645821][ T5233] Bluetooth: hci0: command tx timeout
[   75.649540][ T6668] loop4: detected capacity change from 0 to 4096
[   75.653808][ T6668] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[   75.675370][ T6668] ntfs3(loop4): Failed to initialize $Extend/$Reparse.
[   75.691008][ T6668] ntfs3(loop4): ino=1e, mi_enum_attr
[   75.694769][ T6668] ntfs3(loop4): ino=1e, mi_enum_attr
[   76.183697][   T33] audit: type=1800 audit(1755905878.566:8): pid=6700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.232" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[   76.472580][ T6705] loop4: detected capacity change from 0 to 32768
[   76.500795][ T6705] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   76.524976][ T6705] XFS (loop4): Ending clean mount
[   76.578769][ T5908] XFS (loop4): Metadata CRC error detected at xfs_rmapbt_read_verify+0x42/0xe0, xfs_rmapbt block 0x14 
[   76.582319][ T5908] XFS (loop4): Unmount and run xfs_repair
[   76.584451][ T5908] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[   76.588279][ T5908] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff  RMB3............
[   76.591458][ T5908] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 80  ................
[   76.595360][ T5908] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[   76.604817][ T5908] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01  ....[.;.........
[   76.610713][ T5908] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00  ................
[   76.613797][ T5908] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb  ................
[   76.618568][ T5908] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02  ................
[   76.621681][ T5908] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00  ................
[   76.624884][ T5908] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x14 len 4 error 74
[   76.630986][ T5908] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8e0 (fs/xfs/xfs_trans_buf.c:311).  Shutting down filesystem.
[   76.638297][ T5908] XFS (loop4): Please unmount the filesystem and rectify the problem(s)
[   76.790495][ T5704] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.823280][ T5704] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.888945][ T5704] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.943874][ T5704] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.008788][ T6721] ALSA: mixer_oss: invalid OSS volume 'u'
[   77.052258][ T5704] bridge_slave_1: left allmulticast mode
[   77.054143][ T5704] bridge_slave_1: left promiscuous mode
[   77.057834][ T5704] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.061188][ T5704] bridge_slave_0: left allmulticast mode
[   77.063447][ T5704] bridge_slave_0: left promiscuous mode
[   77.066561][ T5704] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.101841][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   77.104388][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   77.107528][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   77.110332][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   77.113365][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   77.167152][ T5704] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   77.171946][ T5704] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   77.176984][ T5704] bond0 (unregistering): Released all slaves
[   77.305578][ T6725] chnl_net:caif_netlink_parms(): no params data found
[   77.327629][ T6744] netlink: 'syz.1.245': attribute type 15 has an invalid length.
[   77.438254][ T5872] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   77.441115][ T5872] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   77.455286][ T6725] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.459194][ T6725] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.462275][ T6725] bridge_slave_0: entered allmulticast mode
[   77.476469][ T6725] bridge_slave_0: entered promiscuous mode
[   77.480556][ T5872] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   77.484537][ T6725] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.495838][ T6725] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.498905][ T6725] bridge_slave_1: entered allmulticast mode
[   77.501979][ T6725] bridge_slave_1: entered promiscuous mode
[   77.525300][ T5872] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   77.587483][ T5704] hsr_slave_0: left promiscuous mode
[   77.592563][ T5704] hsr_slave_1: left promiscuous mode
[   77.602191][ T5704] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   77.605317][ T5704] batman_adv: batadv0: Removing interface: batadv_slave_0
[   77.619116][ T5704] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   77.624456][ T5704] batman_adv: batadv0: Removing interface: batadv_slave_1
[   77.637996][ T5704] veth1_macvtap: left promiscuous mode
[   77.641495][ T6758] loop5: detected capacity change from 0 to 32768
[   77.642591][ T5704] veth0_macvtap: left promiscuous mode
[   77.651776][ T5704] veth1_vlan: left promiscuous mode
[   77.657847][ T5704] veth0_vlan: left promiscuous mode
[   77.666890][ T6758] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   77.678355][ T6758] XFS (loop5): Ending clean mount
[   77.715438][ T6441] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   77.727177][ T5847] Bluetooth: hci0: command tx timeout
[   77.922670][ T5704] team0 (unregistering): Port device team_slave_1 removed
[   77.935638][ T5704] team0 (unregistering): Port device team_slave_0 removed
[   78.007270][ T6725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.030235][ T6725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.058969][ T6725] team0: Port device team_slave_0 added
[   78.063297][ T6725] team0: Port device team_slave_1 added
[   78.080554][ T6725] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.083426][ T6725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.096307][ T6725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.102493][ T6725] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.107149][ T6725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.117345][ T6725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.152568][ T6725] hsr_slave_0: entered promiscuous mode
[   78.155487][ T6725] hsr_slave_1: entered promiscuous mode
[   78.158611][ T6725] debugfs: 'hsr0' already exists in 'hsr'
[   78.160874][ T6725] Cannot create hsr debugfs directory
[   78.229182][ T5704] IPVS: stop unused estimator thread 0...
[   78.249278][ T6725] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   78.254127][ T6725] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   78.259153][ T6725] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   78.263969][ T6725] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   78.327285][ T6725] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.341218][ T6725] 8021q: adding VLAN 0 to HW filter on device team0
[   78.347719][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.350661][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.367902][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.370825][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.385576][ T6725] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   78.391935][ T6725] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   78.488516][ T6725] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.629320][ T6725] veth0_vlan: entered promiscuous mode
[   78.636393][ T6725] veth1_vlan: entered promiscuous mode
[   78.651073][ T6725] veth0_macvtap: entered promiscuous mode
[   78.654468][ T6725] veth1_macvtap: entered promiscuous mode
[   78.662263][ T6725] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.671425][ T6725] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.678635][ T5704] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.682278][ T5704] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.692047][ T5704] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.696660][ T5704] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.724334][ T6159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.731433][ T6159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.747225][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.750357][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.813773][ T6840] loop6: detected capacity change from 0 to 512
[   78.832821][ T6840] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   78.841164][ T6840] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[   78.846853][ T6840] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.240: bg 0: block 384: padding at end of block bitmap is not set
[   78.852874][ T6840] EXT4-fs (loop6): Remounting filesystem read-only
[   78.855512][ T6840] EXT4-fs (loop6): 1 truncate cleaned up
[   78.868304][ T6840] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   78.907482][ T6725] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.053464][ T6864] loop6: detected capacity change from 0 to 64
[   79.087110][   T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   79.168087][ T6872] loop6: detected capacity change from 0 to 16
[   79.177827][ T5847] Bluetooth: hci2: command tx timeout
[   79.185386][ T6872] erofs (device loop6): mounted with root inode @ nid 36.
[   79.192025][ T6872] loop6: Can't mount, would change RO state
[   79.237266][   T10] usb 6-1: Using ep0 maxpacket: 8
[   79.244440][   T10] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[   79.250961][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.257757][   T10] usb 6-1: config 0 descriptor??
[   79.318596][ T5876] Process accounting resumed
[   79.347111][ T6883] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   79.478955][   T10] asix 6-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[   79.816148][ T5847] Bluetooth: hci0: command tx timeout
[   80.016744][ T6891] loop1: detected capacity change from 0 to 32768
[   80.023107][ T6891] XFS: attr2 mount option is deprecated.
[   80.039173][ T6891] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[   80.046439][ T6891] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   80.067330][ T6891] XFS (loop1): Ending clean mount
[   80.071461][ T6891] XFS (loop1): Quotacheck needed: Please wait.
[   80.081401][ T6891] XFS (loop1): Quotacheck: Done.
[   80.121693][ T5845] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   81.029589][ T6919] loop1: detected capacity change from 0 to 32768
[   81.045608][ T6919] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.280 (6919)
[   81.070103][ T6919] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   81.081953][ T6919] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[   81.197042][ T5923] BTRFS warning (device loop1): checksum verify failed on logical 1052672 mirror 1 wanted 0x11f3e929624b680852cd2754314153a53c00b22ae8936d589814e00d5ed09030 found 0xe38ba9bd71c513db051652ecf0e4e83d075b6f90790e6c1c1ddb1c188093d1e0 level 0
[   81.218733][ T6919] BTRFS error (device loop1): failed to read chunk root
[   81.223576][ T6919] BTRFS error (device loop1): open_ctree failed: -5
[   81.245861][ T5847] Bluetooth: hci2: command tx timeout
[   81.370353][  T973] cfg80211: failed to load regulatory.db
[   81.533587][ T6952] program syz.6.283 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   81.573866][   T10] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[   81.580520][   T10] asix 6-1:0.0: probe with driver asix failed with error -71
[   81.592566][   T10] usb 6-1: USB disconnect, device number 2
[   81.605866][  T790] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   81.911820][  T790] usb 2-1: Using ep0 maxpacket: 8
[   81.916436][  T790] usb 2-1: config 0 has an invalid interface number: 124 but max is 0
[   81.919666][  T790] usb 2-1: config 0 has no interface number 0
[   81.923888][  T790] usb 2-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=72.01
[   81.927729][  T790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.930786][  T790] usb 2-1: Product: syz
[   81.932380][  T790] usb 2-1: Manufacturer: syz
[   81.934148][  T790] usb 2-1: SerialNumber: syz
[   81.937817][  T790] usb 2-1: config 0 descriptor??
[   82.155844][  T790] usb 2-1: USB disconnect, device number 6
[   82.218383][ T6983] netlink: 8 bytes leftover after parsing attributes in process `syz.5.288'.
[   82.487773][ T6954] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   82.578243][ T6996] loop6: detected capacity change from 0 to 2048
[   82.580772][ T6996] EXT4-fs: Ignoring removed mblk_io_submit option
[   82.611229][ T6996] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   82.656374][ T6954] usb 6-1: too many configurations: 65, using maximum allowed: 8
[   82.670560][ T6954] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c
[   82.680603][ T6954] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.683167][ T6954] usb 6-1: Product: syz
[   82.684560][ T6954] usb 6-1: Manufacturer: syz
[   82.700222][ T6954] usb 6-1: SerialNumber: syz
[   82.704207][ T6954] usb 6-1: config 0 descriptor??
[   82.933905][ T5876] usb 6-1: USB disconnect, device number 3
[   82.992628][ T7023] loop1: detected capacity change from 0 to 32768
[   83.005899][ T7023] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.296 (7023)
[   83.015481][ T7023] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   83.020136][ T7023] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[   83.039473][ T1090] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u10:6: bg 0: block 234: padding at end of block bitmap is not set
[   83.045293][ T1090] EXT4-fs (loop6): Remounting filesystem read-only
[   83.070540][ T7023] BTRFS info (device loop1): setting nodatasum
[   83.073175][ T7023] BTRFS info (device loop1): enabling ssd optimizations
[   83.087942][ T7023] BTRFS info (device loop1): disabling tree log
[   83.090577][ T7023] BTRFS info (device loop1): enabling free space tree
[   83.093334][ T7023] BTRFS info (device loop1): enabling auto defrag
[   83.154648][ T7023] BTRFS info (device loop1): setting compat-ro feature flag for VERITY (0x4)
[   83.220480][ T5845] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   83.264291][ T6725] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.328720][ T5847] Bluetooth: hci2: command tx timeout
[   83.422852][ T7048] loop1: detected capacity change from 0 to 40427
[   83.429920][ T7048] F2FS-fs (loop1): invalid crc value
[   83.457582][ T7048] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   83.463587][ T7048] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   83.564253][ T7065] netlink: 'syz.5.304': attribute type 21 has an invalid length.
[   83.583201][ T7067] netlink: 5 bytes leftover after parsing attributes in process `syz.5.305'.
[   83.585960][ T5886] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[   83.701405][ T7079] loop1: detected capacity change from 0 to 512
[   83.721932][ T7079] EXT4-fs (loop1): orphan cleanup on readonly fs
[   83.724206][ T7079] Quota error (device loop1): v2_read_file_info: Block with free entry 9 out of range (1, 6).
[   83.728045][ T7079] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   83.738439][ T5886] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   83.741228][ T7079] EXT4-fs (loop1): Cannot turn on quotas: error -117
[   83.746304][ T5886] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[   83.752290][ T7079] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.302: bg 0: block 248: padding at end of block bitmap is not set
[   83.755995][ T5886] usb 7-1: config 0 interface 0 has no altsetting 0
[   83.765812][ T5886] usb 7-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00
[   83.770057][ T5886] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.776481][ T7079] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem
[   83.784123][ T5886] usb 7-1: config 0 descriptor??
[   83.787904][ T7079] EXT4-fs (loop1): 1 orphan inode deleted
[   83.790610][ T7079] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   83.818658][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.873752][ T7078] loop5: detected capacity change from 0 to 32768
[   83.881486][ T7078] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.309 (7078)
[   83.902890][ T7078] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   83.945419][ T7078] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[   84.050234][ T7078] BTRFS info (device loop5): enabling ssd optimizations
[   84.052788][ T7078] BTRFS info (device loop5): enabling free space tree
[   84.089345][ T7087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   84.109896][ T6441] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   84.150188][ T7109] loop5: detected capacity change from 0 to 1024
[   84.204446][ T5886] hid-steam 0003:28DE:1102.0004: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.6-1/input0
[   84.404662][ T5876] usb 7-1: USB disconnect, device number 2
[   84.455959][ T5871] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   84.609183][ T5871] usb 6-1: Using ep0 maxpacket: 16
[   84.617364][ T5871] usb 6-1: unable to get BOS descriptor or descriptor too short
[   84.621605][ T5871] usb 6-1: config 1 has an invalid interface descriptor of length 5, skipping
[   84.629907][ T5871] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   84.635164][ T5871] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[   84.647716][ T5871] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   84.651196][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.654276][ T5871] usb 6-1: Product: syz
[   84.656276][ T5871] usb 6-1: Manufacturer: syz
[   84.658203][ T5871] usb 6-1: SerialNumber: syz
[   84.892292][ T5871] usb 6-1: USB disconnect, device number 4
[   85.018069][ T7140] loop1: detected capacity change from 0 to 256
[   85.042192][ T7140] FAT-fs (loop1): Directory bread(block 64) failed
[   85.055090][ T7140] FAT-fs (loop1): Directory bread(block 65) failed
[   85.058111][ T7140] FAT-fs (loop1): Directory bread(block 66) failed
[   85.060295][ T7140] FAT-fs (loop1): Directory bread(block 67) failed
[   85.062712][ T7140] FAT-fs (loop1): Directory bread(block 68) failed
[   85.065090][ T7140] FAT-fs (loop1): Directory bread(block 69) failed
[   85.074519][ T7140] FAT-fs (loop1): Directory bread(block 70) failed
[   85.081292][ T7140] FAT-fs (loop1): Directory bread(block 71) failed
[   85.083870][ T7140] FAT-fs (loop1): Directory bread(block 72) failed
[   85.092623][ T7140] FAT-fs (loop1): Directory bread(block 73) failed
[   85.108136][ T7140] syz.1.322: attempt to access beyond end of device
[   85.108136][ T7140] loop1: rw=0, sector=1160, nr_sectors = 4 limit=256
[   85.235620][ T7155] loop1: detected capacity change from 0 to 512
[   85.271899][ T7155] EXT4-fs (loop1): corrupt root inode, run e2fsck
[   85.274438][ T7155] EXT4-fs (loop1): mount failed
[   85.350230][ T7163] loop1: detected capacity change from 0 to 4096
[   85.353327][ T7163] EXT4-fs: Ignoring removed nomblk_io_submit option
[   85.377542][ T7163] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   85.380851][ T7163] EXT4-fs (loop1): Test dummy encryption mode enabled
[   85.385134][ T7163] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   85.393222][ T7163] EXT4-fs: Ignoring removed nomblk_io_submit option
[   85.395416][ T7163] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   85.413181][ T5847] Bluetooth: hci2: command tx timeout
[   85.423439][ T7163] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   85.460893][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.502768][ T7173] IPv6: addrconf: prefix option has invalid lifetime
[   85.505168][ T7173] IPv6: addrconf: prefix option has invalid lifetime
[   85.671653][ T7169] loop5: detected capacity change from 0 to 40427
[   85.680474][ T7183] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[   85.683725][ T7169] F2FS-fs (loop5): Image doesn't support compression
[   85.690408][ T7169] F2FS-fs (loop5): build fault injection rate: 690
[   85.693010][ T7169] F2FS-fs (loop5): build fault injection type: 0x35f7
[   85.695299][   T10] IPVS: starting estimator thread 0...
[   85.699760][ T7169] F2FS-fs (loop5): invalid crc value
[   85.759714][ T7169] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   85.763080][ T7169] F2FS-fs (loop5): Start checkpoint disabled!
[   85.765560][ T7169] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[   85.799572][ T7187] IPVS: using max 93 ests per chain, 223200 per kthread
[   86.181793][ T7202] loop5: detected capacity change from 0 to 512
[   86.184869][ T7202] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   86.188081][ T7202] EXT4-fs (loop5): #clusters per group too big: 268443648
[   86.227696][ T7204] netlink: 'syz.5.346': attribute type 1 has an invalid length.
[   86.230107][ T7204] netlink: 'syz.5.346': attribute type 3 has an invalid length.
[   86.232804][ T7204] netlink: 224 bytes leftover after parsing attributes in process `syz.5.346'.
[   86.273624][ T7208] netlink: 'syz.5.348': attribute type 2 has an invalid length.
[   86.285619][ T7208] netlink: 132 bytes leftover after parsing attributes in process `syz.5.348'.
[   86.462967][ T7216] mmap: syz.1.349 (7216) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   86.473376][   T33] audit: type=1326 audit(1755905888.856:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7219 comm="syz.5.353" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3625b8ebe9 code=0x7ffc0000
[   86.489817][   T33] audit: type=1326 audit(1755905888.866:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7219 comm="syz.5.353" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3625b8ebe9 code=0x7ffc0000
[   86.507354][   T33] audit: type=1326 audit(1755905888.866:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7219 comm="syz.5.353" exe="/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f3625b8ebe9 code=0x7ffc0000
[   86.522908][   T33] audit: type=1326 audit(1755905888.866:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7219 comm="syz.5.353" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3625b8ebe9 code=0x7ffc0000
[   86.537863][   T33] audit: type=1326 audit(1755905888.866:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7219 comm="syz.5.353" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3625b8ebe9 code=0x7ffc0000
[   86.876042][ T7226] loop5: detected capacity change from 0 to 40427
[   86.878711][ T7226] F2FS-fs: heap/no_heap options were deprecated
[   86.881090][ T7226] F2FS-fs (loop5): build fault injection rate: 19
[   86.883361][ T7226] F2FS-fs (loop5): build fault injection type: 0x3bfe8c
[   86.888943][ T7226] F2FS-fs (loop5): invalid crc value
[   86.898612][ T7226] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970
[   86.908693][ T5847] Bluetooth: hci2: Unable to find connection for big 0x00
[   86.920712][ T7226] F2FS-fs (loop5): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x20a/0x3f0
[   86.924910][ T7226] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   86.928943][ T7226] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[   86.937319][ T7226] F2FS-fs (loop5): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[   86.943127][ T7226] F2FS-fs (loop5): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x11a/0xab0
[   86.960687][ T6441] syz-executor: attempt to access beyond end of device
[   86.960687][ T6441] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   86.966824][ T6441] CPU: 0 UID: 0 PID: 6441 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   86.966845][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   86.966855][ T6441] Call Trace:
[   86.966872][ T6441]  <TASK>
[   86.966877][ T6441]  dump_stack_lvl+0x189/0x250
[   86.966901][ T6441]  ? __pfx_dump_stack_lvl+0x10/0x10
[   86.966917][ T6441]  ? __pfx_queue_work_on+0x10/0x10
[   86.966931][ T6441]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   86.966947][ T6441]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   86.966969][ T6441]  f2fs_handle_critical_error+0x37c/0x540
[   86.966992][ T6441]  f2fs_write_end_io+0x886/0xb60
[   86.967011][ T6441]  __submit_merged_bio+0x27a/0x6a0
[   86.967032][ T6441]  __submit_merged_write_cond+0x255/0x530
[   86.967051][ T6441]  f2fs_write_data_pages+0x261d/0x3000
[   86.967081][ T6441]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   86.967126][ T6441]  ? kthread_stop+0x194/0x5c0
[   86.967140][ T6441]  ? kill_f2fs_super+0x137/0x6c0
[   86.967153][ T6441]  ? deactivate_locked_super+0xbc/0x130
[   86.967168][ T6441]  ? cleanup_mnt+0x425/0x4c0
[   86.967181][ T6441]  ? task_work_run+0x1d4/0x260
[   86.967198][ T6441]  ? do_syscall_64+0x2bd/0x3b0
[   86.967217][ T6441]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   86.967237][ T6441]  ? filemap_get_folios_tag+0xed/0x630
[   86.967250][ T6441]  ? rcu_is_watching+0x15/0xb0
[   86.967265][ T6441]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   86.967285][ T6441]  do_writepages+0x32e/0x550
[   86.967302][ T6441]  ? rcu_is_watching+0x15/0xb0
[   86.967317][ T6441]  ? do_raw_spin_unlock+0x4d/0x240
[   86.967337][ T6441]  filemap_fdatawrite+0x199/0x240
[   86.967375][ T6441]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   86.967432][ T6441]  ? rcu_is_watching+0x15/0xb0
[   86.967448][ T6441]  ? do_raw_spin_unlock+0x4d/0x240
[   86.967466][ T6441]  f2fs_sync_dirty_inodes+0x31f/0x830
[   86.967485][ T6441]  f2fs_write_checkpoint+0x95a/0x1df0
[   86.967508][ T6441]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   86.967538][ T6441]  ? kill_f2fs_super+0x298/0x6c0
[   86.967554][ T6441]  kill_f2fs_super+0x2c3/0x6c0
[   86.967569][ T6441]  ? __pfx_kill_f2fs_super+0x10/0x10
[   86.967580][ T6441]  ? radix_tree_delete_item+0x2b6/0x400
[   86.967600][ T6441]  ? shrinker_free+0x2ce/0x3e0
[   86.967617][ T6441]  deactivate_locked_super+0xbc/0x130
[   86.967632][ T6441]  cleanup_mnt+0x425/0x4c0
[   86.967647][ T6441]  task_work_run+0x1d4/0x260
[   86.967666][ T6441]  ? __pfx_task_work_run+0x10/0x10
[   86.967683][ T6441]  ? __x64_sys_umount+0x122/0x160
[   86.967707][ T6441]  ? __pfx___x64_sys_umount+0x10/0x10
[   86.967725][ T6441]  ? rcu_is_watching+0x15/0xb0
[   86.967739][ T6441]  exit_to_user_mode_loop+0xec/0x110
[   86.967759][ T6441]  do_syscall_64+0x2bd/0x3b0
[   86.967778][ T6441]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   86.967791][ T6441]  ? exc_page_fault+0x9f/0xf0
[   86.967807][ T6441]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   86.967821][ T6441] RIP: 0033:0x7f3625b8ff17
[   86.967835][ T6441] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   86.967846][ T6441] RSP: 002b:00007fffdcbca828 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   86.967862][ T6441] RAX: 0000000000000000 RBX: 00007f3625c11c05 RCX: 00007f3625b8ff17
[   86.967871][ T6441] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffdcbca8e0
[   86.967879][ T6441] RBP: 00007fffdcbca8e0 R08: 0000000000000000 R09: 0000000000000000
[   86.967887][ T6441] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffdcbcb970
[   86.967896][ T6441] R13: 00007f3625c11c05 R14: 000000000001533e R15: 00007fffdcbcb9b0
[   86.967912][ T6441]  </TASK>
[   86.968616][ T6441] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[   87.230069][ T7243] loop1: detected capacity change from 0 to 1024
[   87.238846][ T7243] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   87.269350][ T7246] netlink: 'syz.5.363': attribute type 1 has an invalid length.
[   87.272356][ T7246] netlink: 228 bytes leftover after parsing attributes in process `syz.5.363'.
[   87.284748][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.425875][   T33] audit: type=1326 audit(1755905889.806:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7261 comm="syz.1.371" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a0b8ebe9 code=0x7ffc0000
[   87.444905][   T33] audit: type=1326 audit(1755905889.806:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7261 comm="syz.1.371" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a0b8ebe9 code=0x7ffc0000
[   87.457717][   T33] audit: type=1326 audit(1755905889.816:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7261 comm="syz.1.371" exe="/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f38a0b8ebe9 code=0x7ffc0000
[   87.474312][   T33] audit: type=1326 audit(1755905889.816:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7261 comm="syz.1.371" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a0b8ebe9 code=0x7ffc0000
[   87.667688][ T7278] batman_adv: batadv0: Adding interface: dummy0
[   87.670774][ T7278] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.715858][ T7278] batman_adv: batadv0: Interface activated: dummy0
[   87.721969][ T7281] loop5: detected capacity change from 0 to 64
[   87.743423][ T7278] batadv0: mtu less than device minimum
[   87.757103][ T7278] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   87.762113][ T7278] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   87.767139][ T7278] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   87.771759][ T7278] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   87.777106][ T7278] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   87.781812][ T7278] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   87.793666][ T7284] tipc: Started in network mode
[   87.796616][ T7284] tipc: Node identity 2d000000400000000075000000000001, cluster identity 4711
[   87.799446][ T7284] tipc: Enabling of bearer <udp:sy> rejected, failed to enable media
[   87.852042][ T7288] loop5: detected capacity change from 0 to 256
[   87.855487][ T7288] vfat: Bad value for 'time_offset'
[   87.883185][ T7292] loop1: detected capacity change from 0 to 512
[   87.978062][ T7300] netlink: 36 bytes leftover after parsing attributes in process `syz.6.390'.
[   88.117107][ T7298] loop1: detected capacity change from 0 to 32768
[   88.120792][ T7298] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.389 (7298)
[   88.137299][ T7298] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   88.141285][ T7298] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[   88.166085][ T6954] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   88.219437][ T7298] BTRFS info (device loop1): enabling ssd optimizations
[   88.226202][ T7298] BTRFS info (device loop1): enabling free space tree
[   88.277796][ T5845] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   88.321719][ T6954] usb 6-1: Using ep0 maxpacket: 16
[   88.326248][ T6954] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   88.330822][ T6954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   88.349079][ T6954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 42580, setting to 1024
[   88.353539][ T6954] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a
[   88.368646][ T6954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.374917][ T6954] usb 6-1: config 0 descriptor??
[   88.386599][ T7295] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[   88.395880][ T6954] pegasus_notetaker 6-1:0.0: probe with driver pegasus_notetaker failed with error -12
[   88.535351][ T7327] loop1: detected capacity change from 0 to 32768
[   88.538094][ T7327] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.394 (7327)
[   88.545256][ T7327] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   88.554952][ T7327] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[   88.581403][ T7327] BTRFS info (device loop1): rebuilding free space tree
[   88.585499][ T7327] BTRFS info (device loop1): enabling ssd optimizations
[   88.588660][ T7327] BTRFS info (device loop1): using spread ssd allocation scheme
[   88.591033][ T7327] BTRFS info (device loop1): enabling free space tree
[   88.593171][ T7327] BTRFS info (device loop1): force clearing of disk cache
[   88.605053][   T10] usb 6-1: USB disconnect, device number 5
[   88.612652][ T5704] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared)
[   88.626633][ T5845] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   88.842222][   T33] kauditd_printk_skb: 16 callbacks suppressed
[   88.842613][   T33] audit: type=1400 audit(1755905891.226:34): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name="hfs" pid=7346 comm="syz.1.397"
[   89.441497][ T7369] netlink: 'syz.5.402': attribute type 27 has an invalid length.
[   89.467123][ T7369] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.470545][ T7369] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.520801][ T7369] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   89.525431][ T7369] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   89.614158][ T7370] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.619214][ T7370] 8021q: adding VLAN 0 to HW filter on device team0
[   89.623016][ T5704] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.626059][ T5704] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.633650][ T5704] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.639339][ T5704] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.785794][ T5886] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[   89.935820][ T5886] usb 6-1: Using ep0 maxpacket: 16
[   89.940158][ T5886] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   89.944088][ T5886] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   89.971916][ T5886] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[   89.975904][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.986274][ T5886] usb 6-1: Product: syz
[   89.987990][ T5886] usb 6-1: Manufacturer: syz
[   89.994962][ T5886] usb 6-1: SerialNumber: syz
[   89.998346][ T5886] usb 6-1: config 0 descriptor??
[   90.061456][ T7391] loop1: detected capacity change from 0 to 32768
[   90.069351][ T7391] JBD2: Ignoring recovery information on journal
[   90.107282][ T7391] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   90.135955][ T7391] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad parent pointer (312, expected 74)
[   90.143369][ T7391] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[   90.148498][ T7391] OCFS2: File system is now read-only.
[   90.150716][ T7391] (syz.1.408,7391,0):_ocfs2_free_suballoc_bits:2579 ERROR: status = -30
[   90.154072][ T7391] (syz.1.408,7391,0):ocfs2_remove_inode:775 ERROR: status = -30
[   90.157484][ T7391] (syz.1.408,7391,0):ocfs2_wipe_inode:897 ERROR: status = -30
[   90.160641][ T7391] (syz.1.408,7391,0):ocfs2_delete_inode:1158 ERROR: status = -30
[   90.183948][ T5845] ocfs2: Unmounting device (7,1) on (node local)
[   90.310046][ T7399] loop1: detected capacity change from 0 to 4096
[   90.328614][ T7399] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   90.370864][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.248395][ T7436] overlayfs: failed to clone lowerpath
[   91.350090][   T33] audit: type=1800 audit(1755905893.736:35): pid=7442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.425" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[   91.802007][ T7466] lo speed is unknown, defaulting to 1000
[   91.804581][ T7466] lo speed is unknown, defaulting to 1000
[   91.808842][ T7466] lo speed is unknown, defaulting to 1000
[   91.819756][ T7466] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   91.839018][ T7466] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   91.889831][ T7466] lo speed is unknown, defaulting to 1000
[   91.893672][ T7466] lo speed is unknown, defaulting to 1000
[   91.897444][ T7466] lo speed is unknown, defaulting to 1000
[   92.450178][ T5886] usb 6-1: USB disconnect, device number 6
[   92.513978][ T7472] netlink: 'syz.1.438': attribute type 11 has an invalid length.
[   92.519087][ T7472] netlink: 228 bytes leftover after parsing attributes in process `syz.1.438'.
[   92.605063][ T7479] loop5: detected capacity change from 0 to 256
[   92.610366][ T7479] msdos: Bad value for 'time_offset'
[   92.937096][ T7508] netlink: 16 bytes leftover after parsing attributes in process `syz.6.454'.
[   93.256897][ T7529] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[   93.607033][ T5886] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[   93.808654][ T5886] usb 6-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31
[   93.825763][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.832728][ T5886] usb 6-1: config 0 descriptor??
[   93.875331][ T5886] usb 6-1: selecting invalid altsetting 3
[   93.885760][ T5886] comedi comedi5: could not set alternate setting 3 in high speed
[   93.895794][ T5886] usbduxsigma 6-1:0.0: driver 'usbduxsigma' failed to auto-configure device.
[   93.906077][ T5886] usbduxsigma 6-1:0.0: probe with driver usbduxsigma failed with error -22
[   94.071245][ T5886] usb 6-1: USB disconnect, device number 7
[   94.308037][ T7543] netlink: 'syz.1.468': attribute type 1 has an invalid length.
[   94.311173][ T7543] netlink: 244 bytes leftover after parsing attributes in process `syz.1.468'.
[   95.609168][ T7581] loop5: detected capacity change from 0 to 8192
[   95.661687][ T6047]  loop5: p1[EZD] p2 p3 p4
[   95.676041][ T6047] loop5: p3 start 117772289 is beyond EOD, truncated
[   95.679168][ T6047] loop5: p4 size 262144 extends beyond EOD, truncated
[   95.701739][ T7581]  loop5: p1[EZD] p2 p3 p4
[   95.721983][ T7581] loop5: p3 start 117772289 is beyond EOD, truncated
[   95.725032][ T7581] loop5: p4 size 262144 extends beyond EOD, truncated
[   96.032786][ T6047] udevd[6047]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[   96.042532][ T5842] udevd[5842]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory
[   96.048658][ T6270] udevd[6270]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[   96.664339][ T7616] loop1: detected capacity change from 0 to 32768
[   96.723371][ T7616] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow
[   96.723394][ T7616]   allowing incompatible features above 0.0: (unknown version)
[   96.723403][ T7616]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   96.742007][ T7616] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[   96.745409][ T7616] bcachefs (loop1): initializing new filesystem
[   96.755588][ T7616] bcachefs (loop1): going read-write
[   96.760190][ T7616] bcachefs (loop1): marking superblocks
[   96.769232][ T7616] bcachefs (loop1): initializing freespace
[   96.774196][ T7616] bcachefs (loop1): done initializing freespace
[   96.781611][ T7616] bcachefs (loop1): reading snapshots table
[   96.784056][ T7616] bcachefs (loop1): reading snapshots done
[   96.791725][ T7616] bcachefs (loop1): done starting filesystem
[   96.796101][ T5871] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[   96.820310][ T7616] syz.1.500 (7616) used greatest stack depth: 16752 bytes left
[   96.831242][ T5845] bcachefs (loop1): shutting down
[   96.833270][ T5845] bcachefs (loop1): going read-only
[   96.836047][ T5845] bcachefs (loop1): finished waiting for writes to stop
[   96.840327][ T5845] bcachefs (loop1): flushing journal and stopping allocators, journal seq 4
[   96.852474][ T5845] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 5
[   96.857230][ T5845] bcachefs (loop1): clean shutdown complete, journal seq 6
[   96.860476][ T5845] bcachefs (loop1): marking filesystem clean
[   96.873945][ T5845] bcachefs (loop1): shutdown complete
[   96.957472][ T5871] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   96.961609][ T5871] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   96.965398][ T5871] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00
[   96.969682][ T5871] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.974078][ T5871] usb 6-1: config 0 descriptor??
[   97.229909][ T7642] netlink: 'syz.6.507': attribute type 1 has an invalid length.
[   97.383414][ T5871] konepure 0003:1E7D:2DBE.0005: unbalanced collection at end of report description
[   97.389747][ T5871] konepure 0003:1E7D:2DBE.0005: parse failed
[   97.392123][ T5871] konepure 0003:1E7D:2DBE.0005: probe with driver konepure failed with error -22
[   97.585337][ T5871] usb 6-1: USB disconnect, device number 8
[   97.673997][ T7656] netlink: 44 bytes leftover after parsing attributes in process `syz.6.514'.
[   97.679128][ T7656] netlink: 43 bytes leftover after parsing attributes in process `syz.6.514'.
[   97.682452][ T7656] netlink: 'syz.6.514': attribute type 5 has an invalid length.
[   97.685381][ T7656] netlink: 43 bytes leftover after parsing attributes in process `syz.6.514'.
[   97.891755][ T7662] loop1: detected capacity change from 0 to 8
[   97.894864][ T7662] MTD: Attempt to mount non-MTD device "/dev/loop1"
[   98.426211][ T7698] loop5: detected capacity change from 0 to 32768
[   98.429163][ T7698] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.532 (7698)
[   98.439967][ T7698] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   98.444245][ T7698] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[   98.448778][ T7698] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   98.480982][ T7698] BTRFS info (device loop5): rebuilding free space tree
[   98.488070][ T7698] BTRFS info (device loop5): disabling free space tree
[   98.491161][ T7698] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   98.495217][ T7698] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   98.503424][ T7698] BTRFS info (device loop5): enabling ssd optimizations
[   98.507205][ T7698] BTRFS info (device loop5): enabling disk space caching
[   98.510127][ T7698] BTRFS info (device loop5): force clearing of disk cache
[   98.513196][ T7698] BTRFS info (device loop5): enabling auto defrag
[   98.517252][ T7698] BTRFS info (device loop5): max_inline set to 0
[   98.541095][ T6229] BTRFS info (device loop5): qgroup scan completed (inconsistency flag cleared)
[   98.561962][ T6441] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   98.647861][ T7716] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[   98.651999][ T7716] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[   98.657236][ T7716] overlayfs: missing 'lowerdir'
[   98.738882][ T7718] fuse: root generation should be zero
[   99.457384][ T7743] netlink: 'syz.6.544': attribute type 21 has an invalid length.
[   99.460657][ T7743] netlink: 8 bytes leftover after parsing attributes in process `syz.6.544'.
[  100.029403][ T7776] netlink: 9280 bytes leftover after parsing attributes in process `syz.5.559'.
[  100.635792][   T33] audit: type=1800 audit(1755905902.986:36): pid=7796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.567" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  101.074647][ T7815] loop1: detected capacity change from 0 to 8
[  101.099852][ T7815] SQUASHFS error: Unable to read inode 0x127
[  101.116554][ T7817] netlink: 112 bytes leftover after parsing attributes in process `syz.6.577'.
[  101.121583][ T7817] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  101.542280][ T7827] netlink: 32 bytes leftover after parsing attributes in process `syz.6.581'.
[  101.555023][ T7827] netlink: 32 bytes leftover after parsing attributes in process `syz.6.581'.
[  102.515225][ T7840] netlink: 12 bytes leftover after parsing attributes in process `syz.5.587'.
[  102.604016][ T7851] Bluetooth: MGMT ver 1.23
[  103.615204][ T7869] bond0: (slave bond_slave_1): Releasing backup interface
[  103.683645][ T7877] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0
[  103.707437][ T7878] loop5: detected capacity change from 0 to 4096
[  103.712824][ T7878] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  103.727146][ T7878] ntfs3(loop5): ino=19, mi_enum_attr
[  103.728981][ T7878] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  103.731499][ T7878] ntfs3(loop5): ino=1a, mi_enum_attr
[  103.842497][ T7893] netlink: 596 bytes leftover after parsing attributes in process `syz.6.607'.
[  103.858759][ T7895] loop5: detected capacity change from 0 to 128
[  103.861996][ T7895] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  103.867010][ T7895] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  103.900315][ T1090] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  103.992320][   T33] audit: type=1326 audit(1755905906.376:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7904 comm="syz.1.616" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a0b8ebe9 code=0x7ffc0000
[  104.003664][   T33] audit: type=1326 audit(1755905906.376:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7904 comm="syz.1.616" exe="/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f38a0b8ebe9 code=0x7ffc0000
[  104.024601][   T33] audit: type=1326 audit(1755905906.376:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7904 comm="syz.1.616" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a0b8ebe9 code=0x7ffc0000
[  104.034598][   T33] audit: type=1326 audit(1755905906.386:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7904 comm="syz.1.616" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a0b8ebe9 code=0x7ffc0000
[  104.463588][ T7907] loop5: detected capacity change from 0 to 32768
[  104.489326][ T7907] XFS (loop5): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent.
[  104.513588][ T6441] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  104.980808][ T7942] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  105.857317][ T7983] loop5: detected capacity change from 0 to 512
[  105.864930][ T7983] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  105.872665][ T7983] EXT4-fs (loop5): 1 orphan inode deleted
[  105.875169][ T7983] EXT4-fs (loop5): 1 truncate cleaned up
[  105.880222][ T7983] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.893002][ T7983] EXT4-fs error (device loop5): ext4_lookup:1787: inode #15: comm syz.5.645: iget: bad extra_isize 46 (inode size 256)
[  105.900068][ T7983] EXT4-fs (loop5): Remounting filesystem read-only
[  105.918668][ T6441] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.181109][ T7991] loop5: detected capacity change from 0 to 40427
[  106.184345][ T7991] F2FS-fs: heap/no_heap options were deprecated
[  106.188741][ T7991] F2FS-fs (loop5): invalid crc value
[  106.223258][ T7991] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  106.228015][ T7991] F2FS-fs (loop5): Start checkpoint disabled!
[  106.231628][ T7991] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  106.246743][ T7991] syz.5.648: attempt to access beyond end of device
[  106.246743][ T7991] loop5: rw=2049, sector=77824, nr_sectors = 136 limit=40427
[  106.254486][ T7991] syz.5.648: attempt to access beyond end of device
[  106.254486][ T7991] loop5: rw=2049, sector=77960, nr_sectors = 120 limit=40427
[  106.261974][ T7991] syz.5.648: attempt to access beyond end of device
[  106.261974][ T7991] loop5: rw=2049, sector=77824, nr_sectors = 16 limit=40427
[  106.270941][ T7991] syz.5.648: attempt to access beyond end of device
[  106.270941][ T7991] loop5: rw=2049, sector=77960, nr_sectors = 120 limit=40427
[  106.279471][ T7991] syz.5.648: attempt to access beyond end of device
[  106.279471][ T7991] loop5: rw=2049, sector=78080, nr_sectors = 544 limit=40427
[  106.285224][ T7991] syz.5.648: attempt to access beyond end of device
[  106.285224][ T7991] loop5: rw=2049, sector=77824, nr_sectors = 136 limit=40427
[  106.312258][ T1090] kworker/u10:6: attempt to access beyond end of device
[  106.312258][ T1090] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  106.318773][ T1090] CPU: 1 UID: 0 PID: 1090 Comm: kworker/u10:6 Not tainted syzkaller #0 PREEMPT(full) 
[  106.318793][ T1090] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  106.318802][ T1090] Workqueue: writeback wb_workfn (flush-7:5)
[  106.318825][ T1090] Call Trace:
[  106.318830][ T1090]  <TASK>
[  106.318836][ T1090]  dump_stack_lvl+0x189/0x250
[  106.318855][ T1090]  ? __pfx_dump_stack_lvl+0x10/0x10
[  106.318870][ T1090]  ? __pfx_queue_work_on+0x10/0x10
[  106.318883][ T1090]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  106.318900][ T1090]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  106.318919][ T1090]  f2fs_handle_critical_error+0x37c/0x540
[  106.318939][ T1090]  f2fs_write_end_io+0x886/0xb60
[  106.318957][ T1090]  __submit_merged_bio+0x27a/0x6a0
[  106.318976][ T1090]  __submit_merged_write_cond+0x255/0x530
[  106.318995][ T1090]  f2fs_write_data_pages+0x261d/0x3000
[  106.319024][ T1090]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  106.319047][ T1090]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  106.319078][ T1090]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  106.319100][ T1090]  ? trace_f2fs_writepages+0x7f/0x200
[  106.319149][ T1090]  ? f2fs_write_node_pages+0x478/0x6e0
[  106.319166][ T1090]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  106.319184][ T1090]  ? f2fs_update_inode+0x13d9/0x2620
[  106.319201][ T1090]  ? f2fs_write_inode+0x3fb/0x5f0
[  106.319218][ T1090]  ? __pfx_f2fs_balance_fs+0x10/0x10
[  106.319235][ T1090]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  106.319254][ T1090]  do_writepages+0x32e/0x550
[  106.319272][ T1090]  ? unwind_next_frame+0xa5/0x2390
[  106.319290][ T1090]  __writeback_single_inode+0x145/0xff0
[  106.319308][ T1090]  ? do_raw_spin_unlock+0x4d/0x240
[  106.319324][ T1090]  writeback_sb_inodes+0x6c7/0x1010
[  106.319345][ T1090]  ? fprop_reflect_period_percpu+0x6b/0x330
[  106.319365][ T1090]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  106.319392][ T1090]  ? rcu_is_watching+0x15/0xb0
[  106.319408][ T1090]  wb_writeback+0x43b/0xaf0
[  106.319426][ T1090]  ? queue_io+0x3d1/0x590
[  106.319442][ T1090]  ? __pfx_wb_writeback+0x10/0x10
[  106.319460][ T1090]  ? rcu_is_watching+0x15/0xb0
[  106.319472][ T1090]  wb_workfn+0x409/0xef0
[  106.319489][ T1090]  ? __pfx_wb_workfn+0x10/0x10
[  106.319501][ T1090]  ? rcu_is_watching+0x15/0xb0
[  106.319515][ T1090]  ? rcu_is_watching+0x15/0xb0
[  106.319529][ T1090]  ? process_scheduled_works+0x9ef/0x17b0
[  106.319541][ T1090]  ? rcu_is_watching+0x15/0xb0
[  106.319553][ T1090]  ? lock_acquire+0x5f/0x360
[  106.319574][ T1090]  ? rcu_is_watching+0x15/0xb0
[  106.319585][ T1090]  ? process_scheduled_works+0x9ef/0x17b0
[  106.319598][ T1090]  ? process_scheduled_works+0x9ef/0x17b0
[  106.319611][ T1090]  process_scheduled_works+0xae1/0x17b0
[  106.319632][ T1090]  ? __pfx_process_scheduled_works+0x10/0x10
[  106.319650][ T1090]  worker_thread+0x8a0/0xda0
[  106.319667][ T1090]  ? __kthread_parkme+0x7b/0x200
[  106.319683][ T1090]  kthread+0x711/0x8a0
[  106.319699][ T1090]  ? __pfx_worker_thread+0x10/0x10
[  106.319712][ T1090]  ? __pfx_kthread+0x10/0x10
[  106.319728][ T1090]  ? rcu_is_watching+0x15/0xb0
[  106.319740][ T1090]  ? __pfx_kthread+0x10/0x10
[  106.319756][ T1090]  ret_from_fork+0x3fc/0x770
[  106.319789][ T1090]  ? __pfx_ret_from_fork+0x10/0x10
[  106.319806][ T1090]  ? __switch_to_asm+0x39/0x70
[  106.319822][ T1090]  ? __switch_to_asm+0x33/0x70
[  106.319838][ T1090]  ? __pfx_kthread+0x10/0x10
[  106.319854][ T1090]  ret_from_fork_asm+0x1a/0x30
[  106.319876][ T1090]  </TASK>
[  106.320550][ T1090] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  107.058363][   T33] audit: type=1326 audit(1755905909.446:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8042 comm="syz.1.673" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a0b8ebe9 code=0x7ffc0000
[  107.092208][   T33] audit: type=1326 audit(1755905909.456:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8042 comm="syz.1.673" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a0b8ebe9 code=0x7ffc0000
[  107.394339][ T8070] netlink: 28 bytes leftover after parsing attributes in process `syz.6.684'.
[  107.398926][ T8070] netlink: 28 bytes leftover after parsing attributes in process `syz.6.684'.
[  107.402583][ T8070] netlink: 40 bytes leftover after parsing attributes in process `syz.6.684'.
[  108.354372][ T5908] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  108.537779][ T5908] usb 6-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0
[  108.541771][ T5908] usb 6-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  108.546343][ T5908] usb 6-1: config 0 interface 0 has no altsetting 0
[  108.548939][ T5908] usb 6-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.00
[  108.552395][ T5908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.556825][ T5908] usb 6-1: config 0 descriptor??
[  108.775398][ T5908] usb 6-1: string descriptor 0 read error: -71
[  108.786988][ T5908] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input6
[  108.798518][ T5277] bcm5974 6-1:0.0: could not read from device
[  108.803807][ T5277] bcm5974 6-1:0.0: could not read from device
[  108.814789][ T8111] cifs: Bad value for 'port'
[  108.827784][ T5908] usb 6-1: USB disconnect, device number 9
[  108.830378][ T5277] bcm5974 6-1:0.0: could not read from device
[  108.855107][ T5842] udevd[5842]: Error opening device "/dev/input/event3": No such file or directory
[  108.862987][ T5842] udevd[5842]: Unable to EVIOCGABS device "/dev/input/event3"
[  108.866855][ T5842] udevd[5842]: Unable to EVIOCGABS device "/dev/input/event3"
[  108.869903][ T5842] udevd[5842]: Unable to EVIOCGABS device "/dev/input/event3"
[  108.872817][ T5842] udevd[5842]: Unable to EVIOCGABS device "/dev/input/event3"
[  109.589914][ T8125] loop5: detected capacity change from 0 to 4096
[  109.603661][ T8126] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  109.614734][   T33] audit: type=1800 audit(1755905911.996:43): pid=8125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.708" name="file1" dev="loop5" ino=15 res=0 errno=0
[  109.899591][ T8139] ptrace attach of "/syz-executor exec"[5845] was attempted by ""[8139]
[  109.905508][ T8141] cgroup: Invalid name
[  110.153214][ T8147] syz_tun: entered allmulticast mode
[  111.448020][ T8176] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  111.451663][ T8176] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  111.637711][ T8187] loop5: detected capacity change from 0 to 2048
[  111.642606][ T8187] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  111.671695][ T8188] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  111.757722][ T8191] netlink: 28 bytes leftover after parsing attributes in process `syz.5.735'.
[  111.760024][ T8192] netlink: 20 bytes leftover after parsing attributes in process `syz.6.736'.
[  111.761267][ T8191] netlink: 8 bytes leftover after parsing attributes in process `syz.5.735'.
[  111.789413][ T8191] bridge_slave_0: left promiscuous mode
[  111.791866][ T8191] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.801078][ T8191] bridge_slave_1: left allmulticast mode
[  111.803458][ T8191] bridge_slave_1: left promiscuous mode
[  111.808568][ T8191] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.813956][ T8191] bond0: (slave bond_slave_0): Releasing backup interface
[  111.828912][ T8191] team0: Port device team_slave_0 removed
[  111.832685][ T8191] team0: Port device team_slave_1 removed
[  111.835358][ T8191] batman_adv: batadv0: Removing interface: batadv_slave_0
[  111.857156][ T8191] batman_adv: batadv0: Removing interface: batadv_slave_1
[  112.112694][ T8199] loop5: detected capacity change from 0 to 32768
[  112.126026][ T8199] JBD2: Ignoring recovery information on journal
[  112.169979][ T8199] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  112.211193][ T6441] ocfs2: Unmounting device (7,5) on (node local)
[  113.611928][ T8245] loop5: detected capacity change from 0 to 256
[  113.618650][ T8245] exfat: Bad value for 'uid'
[  113.624500][ T8245] exfat: Bad value for 'uid'
[  114.313761][ T8304] netlink: 8 bytes leftover after parsing attributes in process `syz.5.779'.
[  114.935815][ T5908] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  115.085879][ T5908] usb 6-1: Using ep0 maxpacket: 16
[  115.091418][ T5908] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  115.095125][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.099014][ T5908] usb 6-1: Product: syz
[  115.100714][ T5908] usb 6-1: Manufacturer: syz
[  115.102596][ T5908] usb 6-1: SerialNumber: syz
[  115.105138][ T5908] usb 6-1: config 0 descriptor??
[  115.522067][ T5908] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  115.527372][ T5908] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  115.533722][ T5908] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  115.537209][ T5908] usb 6-1: media controller created
[  115.551898][ T5908] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  115.723839][ T5908] zl10353_read_register: readreg error (reg=127, ret==0)
[  115.728997][ T5908] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  115.732153][ T5908] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  115.738401][ T5908] usb 6-1: USB disconnect, device number 10
[  115.749970][ T5908] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  116.118879][ T8364] Driver unsupported XDP return value 0 on prog  (id 77) dev N/A, expect packet loss!
[  116.655925][ T5908] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  116.809107][ T5908] usb 6-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  116.813893][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.825787][ T5908] usb 6-1: Product: syz
[  116.827240][ T5908] usb 6-1: Manufacturer: syz
[  116.829001][ T5908] usb 6-1: SerialNumber: syz
[  116.831595][ T5908] usb 6-1: config 0 descriptor??
[  117.039003][ T8387] netlink: 4 bytes leftover after parsing attributes in process `syz.5.815'.
[  117.050456][ T8387] bridge0: entered promiscuous mode
[  117.052950][ T8387] macvtap1: entered promiscuous mode
[  117.055375][ T8387] macvtap1: entered allmulticast mode
[  117.059894][ T8387] bridge0: entered allmulticast mode
[  117.069528][ T8387] bridge0: left allmulticast mode
[  117.071785][ T8387] bridge0: left promiscuous mode
[  117.080210][ T5908] cx82310_eth 6-1:0.0: probe with driver cx82310_eth failed with error -22
[  117.085652][ T5908] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19!
[  117.090377][ T5908] usb 6-1: USB disconnect, device number 11
[  117.946102][ T8456] kernel profiling enabled (shift: 3)
[  119.121367][ T8472] loop5: detected capacity change from 0 to 256
[  119.129596][ T8472] FAT-fs (loop5): Directory bread(block 1285) failed
[  119.139747][ T8472] FAT-fs (loop5): Directory bread(block 1285) failed
[  119.143600][ T8472] FAT-fs (loop5): FAT read failed (blocknr 1281)
[  119.147573][ T8472] FAT-fs (loop5): Directory bread(block 1285) failed
[  119.150552][ T8472] FAT-fs (loop5): Directory bread(block 1285) failed
[  119.153770][ T8472] FAT-fs (loop5): Directory bread(block 1285) failed
[  119.158211][ T8472] FAT-fs (loop5): Directory bread(block 1285) failed
[  119.161114][ T8472] FAT-fs (loop5): Directory bread(block 1285) failed
[  119.163865][ T8472] FAT-fs (loop5): Directory bread(block 1285) failed
[  119.181476][ T8472] FAT-fs (loop5): Directory bread(block 1285) failed
[  119.226982][ T8473] fuse: Bad value for 'fd'
[  119.743806][ T8494] bridge: RTM_NEWNEIGH with invalid ether address
[  120.602753][ T8531] bond1: entered promiscuous mode
[  120.604923][ T8531] bond1: entered allmulticast mode
[  120.608578][ T8531] 8021q: adding VLAN 0 to HW filter on device bond1
[  120.784202][ T8538] netlink: 40 bytes leftover after parsing attributes in process `syz.5.874'.
[  120.791523][ T8540] netlink: 45 bytes leftover after parsing attributes in process `syz.1.876'.
[  121.098562][ T8544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.878'.
[  121.102495][ T8544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.878'.
[  121.230715][ T8553] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.233296][ T8553] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.323008][ T8553] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  121.332862][ T8553] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  121.622169][ T8566] loop5: detected capacity change from 0 to 512
[  121.629166][ T8566] EXT4-fs (loop5): couldn't mount RDWR because of unsupported optional features (d8000000)
[  121.647799][ T5872] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.653799][ T5872] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.658124][ T5872] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.661321][ T5872] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.715097][ T8568] net_ratelimit: 14 callbacks suppressed
[  121.715109][ T8568] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  121.812596][ T8578] netlink: 16 bytes leftover after parsing attributes in process `syz.6.889'.
[  121.901152][ T8586] tmpfs: Bad value for 'mpol'
[  122.031201][ T8596] loop5: detected capacity change from 0 to 1024
[  122.034468][ T8596] EXT4-fs: Ignoring removed nomblk_io_submit option
[  122.043656][ T8596] EXT4-fs: Mount option(s) incompatible with ext3
[  122.077228][ T8598] 9pnet_fd: Insufficient options for proto=fd
[  122.932839][ T8632] netlink: 'syz.5.915': attribute type 10 has an invalid length.
[  122.936888][ T8632] netlink: 40 bytes leftover after parsing attributes in process `syz.5.915'.
[  122.941779][ T8632] team0: Port device geneve0 added
[  122.944051][ T6229] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  122.949681][ T6229] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  122.952546][ T6229] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  122.962063][ T6229] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  123.275384][   T33] audit: type=1800 audit(1755905925.656:44): pid=8638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.6.914" name="/" dev="tmpfs" ino=85 res=0 errno=0
[  123.336557][ T8652] loop5: detected capacity change from 0 to 8
[  123.341581][ T8652] SQUASHFS error: lzo decompression failed, data probably corrupt
[  123.344835][ T8652] SQUASHFS error: Failed to read block 0x91: -5
[  123.349397][ T8652] SQUASHFS error: Unable to read metadata cache entry [8f]
[  123.352579][ T8652] SQUASHFS error: Unable to read inode 0x11f
[  124.541838][ T8672] netlink: 12 bytes leftover after parsing attributes in process `syz.5.929'.
[  124.553278][ T8672] netlink: 12 bytes leftover after parsing attributes in process `syz.5.929'.
[  125.950259][ T8711] netlink: 4 bytes leftover after parsing attributes in process `syz.6.946'.
[  126.886549][ T8728] loop5: detected capacity change from 0 to 32768
[  126.890421][ T8728] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.954 (8728)
[  126.907763][ T8728] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  126.911948][ T8728] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm
[  126.971752][ T8728] BTRFS info (device loop5): rebuilding free space tree
[  126.987617][ T8728] BTRFS info (device loop5): allowing degraded mounts
[  127.008234][ T8728] BTRFS info (device loop5): enabling ssd optimizations
[  127.011081][ T8728] BTRFS info (device loop5): enabling free space tree
[  127.013817][ T8728] BTRFS info (device loop5): force clearing of disk cache
[  127.038853][ T8728] BTRFS info (device loop5): use zstd compression, level 3
[  127.041798][ T8728] BTRFS info (device loop5): max_inline set to 0
[  127.093450][ T6047] udevd[6047]: '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0' [8750] terminated by signal 33 (Unknown signal 33)
[  127.137794][ T6441] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  127.299764][ T8760] loop5: detected capacity change from 0 to 256
[  127.499185][ T8777] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  127.507337][ T8766] loop5: detected capacity change from 0 to 32768
[  127.601230][ T8766] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,nojournal_transaction_names,reconstruct_alloc,no_data_io
[  127.601260][ T8766]   allowing incompatible features above 0.0: (unknown version)
[  127.601270][ T8766]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  127.634854][ T8766] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0
[  127.638653][ T8766] bcachefs (loop5): recovering from clean shutdown, journal seq 10
[  127.642098][ T8766] bcachefs (loop5): Version upgrade required:
[  127.642098][ T8766] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  127.642098][ T8766] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  127.642098][ T8766]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  127.671503][ T8766] bcachefs (loop5): dropping and reconstructing all alloc info
[  127.693901][ T8766] bcachefs (loop5): invalid bkey in btree_node btree=inodes level=0: u64s 18 type inode_v3 0:536870913:U32_MAX len 0 ver 0: 
[  127.693914][ T8766]     mode=177777
[  127.693918][ T8766]     flags=(fb300000)
[  127.693921][ T8766]     journal_seq=5
[  127.693924][ T8766]     hash_seed=b68791a594a6d5ae
[  127.693928][ T8766]     hash_type=siphash
[  127.693931][ T8766]     bi_size=9000
[  127.693935][ T8766]     bi_sectors=24
[  127.693938][ T8766]     bi_version=0
[  127.693941][ T8766]     bi_atime=2780562352
[  127.693945][ T8766]     bi_ctime=2780562352
[  127.693948][ T8766]     bi_mtime=2780562352
[  127.693952][ T8766]     bi_otime=2780562352
[  127.693955][ T8766]     bi_uid=0
[  127.693958][ T8766]     bi_gid=0
[  127.693961][ T8766]     bi_nlink=1
[  127.693964][ T8766]     bi_generation=0
[  127.693968][ T8766]     bi_dev=0
[  127.693971][ T8766]     bi_data_checksum=0
[  127.693974][ T8766]     bi_compression=0
[  127.693977][ T8766]     bi_project=0
[  127.693981][ T8766]     bi_background_compression=0
[  127.693985][ T8766]     bi_data_replicas=0
[  127.693988][ T8766]     bi_promote_target=0
[  127.693992][ T8766]     bi_foreground_target=0
[  127.693995][ T8766]     bi_background_target=0
[  127.693998][ T8766]     bi_erasure_code=0
[  127.694002][ T8766]     bi_fields_set=0
[  127.694005][ T8766]     bi_dir=4096
[  127.694008][ T8766]     bi_dir_offset=1896155912177158345
[  127.694012][ T8766]     bi_subvol=0
[  127.694015][ T8766]     bi_parent_subvol=0
[  127.694019][ T8766]     bi_nocow=0
[  127.694022][ T8766]     bi_depth=0
[  127.694025][ T8766]     bi_inodes_32bit=0
[  127.694029][ T8766]     bi_casefold=0
[  127.694033][ T8766]   invalid fields_start (got 31, min 6 max 13), deleting
[  127.770177][ T8806] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  127.775921][ T8766] bcachefs (loop5): accounting_read... done
[  127.788033][ T8766] bcachefs (loop5): alloc_read... done
[  127.791385][ T8766] bcachefs (loop5): snapshots_read... done
[  127.795241][ T8766] bcachefs (loop5): check_allocations... done
[  127.808208][ T8766] bcachefs (loop5): going read-write
[  127.816974][ T8766] bcachefs (loop5): Fixed errors, running fsck a second time to verify fs is clean
[  127.824385][ T8766] bcachefs (loop5): done starting filesystem
[  127.829708][   T53] bcachefs (loop5): bucket incorrectly unset in freespace btree
[  127.829723][   T53]   u64s 5 type deleted 0:28:0 len 0 ver 0, , continuing
[  127.848430][   T53] bcachefs (loop5): bucket incorrectly unset in freespace btree
[  127.848444][   T53]   u64s 5 type deleted 0:26:0 len 0 ver 0, , continuing
[  127.857015][   T53] bcachefs (loop5): bucket incorrectly unset in freespace btree
[  127.857024][   T53]   u64s 5 type deleted 0:29:0 len 0 ver 0, , continuing
[  127.898386][ T6441] bcachefs (loop5): shutting down
[  127.900586][ T6441] bcachefs (loop5): going read-only
[  127.903100][ T6441] bcachefs (loop5): finished waiting for writes to stop
[  127.917026][ T6441] bcachefs (loop5): flushing journal and stopping allocators, journal seq 12
[  127.928930][   T53] bcachefs (loop5): bucket incorrectly unset in freespace btree
[  127.928941][   T53]   u64s 5 type deleted 0:40:0 len 0 ver 0, , continuing
[  127.931270][ T8819] netlink: 'syz.6.984': attribute type 4 has an invalid length.
[  127.940916][ T6441] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 12
[  127.944425][ T6441] bcachefs (loop5): unclean shutdown complete, journal seq 13
[  127.948528][ T6441] bcachefs (loop5): done going read-only, filesystem not clean
[  127.959694][ T6441] bcachefs (loop5): shutdown complete
[  127.978296][ T8823] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  128.467251][ T8847] overlayfs: failed to clone upperpath
[  129.242413][ T8895] loop5: detected capacity change from 0 to 64
[  129.386200][ T6229] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.428103][ T6229] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.489406][ T6229] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.538338][ T6229] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.651642][ T5233] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  129.656379][ T5233] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  129.659434][ T5233] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  129.667871][ T5233] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  129.673368][ T5233] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  129.689110][ T8909] overlayfs: failed to clone upperpath
[  129.718598][ T6229] team0: Port device geneve0 removed
[  129.799267][ T6229] bond0 (unregistering): Released all slaves
[  129.823867][ T8906] lo speed is unknown, defaulting to 1000
[  129.914637][   T24] IPVS: starting estimator thread 0...
[  129.941817][ T8906] chnl_net:caif_netlink_parms(): no params data found
[  130.015783][ T8933] IPVS: using max 93 ests per chain, 223200 per kthread
[  130.018797][ T8906] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.021142][ T8906] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.023592][ T8906] bridge_slave_0: entered allmulticast mode
[  130.026540][ T8906] bridge_slave_0: entered promiscuous mode
[  130.030132][ T8906] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.033745][ T8906] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.038551][ T8906] bridge_slave_1: entered allmulticast mode
[  130.043636][ T8906] bridge_slave_1: entered promiscuous mode
[  130.067271][ T8906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  130.071765][ T8906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  130.104154][ T8906] team0: Port device team_slave_0 added
[  130.168631][ T8906] team0: Port device team_slave_1 added
[  130.182960][ T8906] batman_adv: batadv0: Adding interface: batadv_slave_0
[  130.185389][ T8906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  130.193761][ T8906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  130.202218][ T8906] batman_adv: batadv0: Adding interface: batadv_slave_1
[  130.204874][ T8906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  130.215380][ T8906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  130.423988][ T8906] hsr_slave_0: entered promiscuous mode
[  130.433260][ T8906] hsr_slave_1: entered promiscuous mode
[  130.442096][ T8906] debugfs: 'hsr0' already exists in 'hsr'
[  130.444197][ T8906] Cannot create hsr debugfs directory
[  130.502928][ T8962] syz.6.1040 uses obsolete (PF_INET,SOCK_PACKET)
[  130.615324][ T8906] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  130.626546][ T8906] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  130.630979][ T8906] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  130.634934][ T8906] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  130.692770][ T8906] 8021q: adding VLAN 0 to HW filter on device bond0
[  130.707064][ T8906] 8021q: adding VLAN 0 to HW filter on device team0
[  130.714272][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.717357][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[  130.735446][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.738538][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[  130.776039][   T33] audit: type=1326 audit(1755905933.136:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8973 comm="syz.6.1042" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaab98ebe9 code=0x7ffc0000
[  130.784454][ T8906] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  130.790847][   T33] audit: type=1326 audit(1755905933.136:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8973 comm="syz.6.1042" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaab98ebe9 code=0x7ffc0000
[  130.801799][   T33] audit: type=1326 audit(1755905933.146:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8973 comm="syz.6.1042" exe="/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fbaab98ebe9 code=0x7ffc0000
[  130.812210][   T33] audit: type=1326 audit(1755905933.146:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8973 comm="syz.6.1042" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaab98ebe9 code=0x7ffc0000
[  130.820645][   T33] audit: type=1326 audit(1755905933.146:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8973 comm="syz.6.1042" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaab98ebe9 code=0x7ffc0000
[  130.828920][   T33] audit: type=1326 audit(1755905933.146:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8973 comm="syz.6.1042" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbaab98ebe9 code=0x7ffc0000
[  130.836838][   T33] audit: type=1326 audit(1755905933.146:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8973 comm="syz.6.1042" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaab98ebe9 code=0x7ffc0000
[  130.844581][   T33] audit: type=1326 audit(1755905933.146:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8973 comm="syz.6.1042" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaab98ebe9 code=0x7ffc0000
[  130.861310][   T33] audit: type=1326 audit(1755905933.146:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8973 comm="syz.6.1042" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbaab98ebe9 code=0x7ffc0000
[  130.872124][   T33] audit: type=1326 audit(1755905933.146:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8973 comm="syz.6.1042" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaab98ebe9 code=0x7ffc0000
[  130.883501][ T8906] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  131.205546][ T8906] 8021q: adding VLAN 0 to HW filter on device batadv0
[  131.590077][ T6229] hsr_slave_0: left promiscuous mode
[  131.593993][ T6229] hsr_slave_1: left promiscuous mode
[  131.725761][ T5847] Bluetooth: hci0: command tx timeout
[  131.773078][ T8906] veth0_vlan: entered promiscuous mode
[  131.781381][ T8906] veth1_vlan: entered promiscuous mode
[  131.790309][ T9020] RDS: rds_bind could not find a transport for 0:0:4::1, load rds_tcp or rds_rdma?
[  131.809562][ T8906] veth0_macvtap: entered promiscuous mode
[  131.815530][ T8906] veth1_macvtap: entered promiscuous mode
[  131.832900][ T8906] batman_adv: batadv0: Interface activated: batadv_slave_0
[  131.842635][ T8906] batman_adv: batadv0: Interface activated: batadv_slave_1
[  131.850182][ T5704] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  131.853373][ T5704] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  131.857959][ T5704] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  131.866231][ T5704] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  131.913171][ T6159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.925297][ T6159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.948370][ T5923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.951864][ T5923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.193433][ T9039] loop7: detected capacity change from 0 to 32768
[  132.202507][ T9039] XFS: noikeep mount option is deprecated.
[  132.222690][ T9039] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  132.235360][ T9039] XFS (loop7): Ending clean mount
[  132.238471][ T9039] XFS (loop7): Quotacheck needed: Please wait.
[  132.244894][ T9039] XFS (loop7): Quotacheck: Done.
[  132.264603][ T8906] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  132.468210][ T9054] loop7: detected capacity change from 0 to 32768
[  132.477408][ T9054] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  132.487649][ T9054] (syz.7.1061,9054,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=16, inode=65, rec_len=12, name_len=0
[  132.493565][ T9054] (syz.7.1061,9054,0):ocfs2_prepare_dir_for_insert:4302 ERROR: status = -2
[  132.496924][ T9054] (syz.7.1061,9054,0):ocfs2_rename:1486 ERROR: status = -2
[  132.499310][ T9054] (syz.7.1061,9054,0):ocfs2_rename:1702 ERROR: status = -2
[  132.514599][ T8906] ocfs2: Unmounting device (7,7) on (node local)
[  132.529522][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.532188][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  132.750039][ T9061] loop7: detected capacity change from 0 to 32768
[  132.762715][ T9061] ocfs2: Mounting device (7,7) on (node local, slot 0) with writeback data mode.
[  132.789735][ T8906] ocfs2: Unmounting device (7,7) on (node local)
[  133.904193][ T5847] Bluetooth: hci0: command tx timeout
[  134.676377][ T9107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1077'.
[  134.680020][ T9107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1077'.
[  134.713763][ T9113] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1080'.
[  134.719394][ T9113] netlink: 75 bytes leftover after parsing attributes in process `syz.7.1080'.
[  134.747657][ T9117] loop7: detected capacity change from 0 to 512
[  134.751871][ T9117] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  134.759972][ T9117] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ce01c, mo2=0002]
[  134.765574][ T9117] System zones: 1-12
[  134.767612][ T9117] EXT4-fs (loop7): orphan cleanup on readonly fs
[  134.770805][ T9117] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.1082: invalid indirect mapped block 12 (level 1)
[  134.779706][ T9117] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.1082: invalid indirect mapped block 2 (level 2)
[  134.789940][ T9117] EXT4-fs (loop7): 1 truncate cleaned up
[  134.792756][ T9117] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback.
[  134.827435][ T8906] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  134.878942][ T9126] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1086'.
[  134.924704][ T9132] netlink: 100 bytes leftover after parsing attributes in process `syz.7.1089'.
[  134.960234][ T9136] loop7: detected capacity change from 0 to 8
[  134.963241][ T9136] MTD: Attempt to mount non-MTD device "/dev/loop7"
[  134.977968][ T9136] cramfs: Error -3 while decompressing!
[  134.981947][ T9136] cramfs: ffffffff99bf05b8(16)->ffff88803346a000(4096)
[  134.984661][ T9136] cramfs: Error -3 while decompressing!
[  134.987156][ T9136] cramfs: ffffffff99bf05b8(16)->ffff88803346a000(4096)
[  135.066977][ T9144] loop7: detected capacity change from 0 to 256
[  135.091137][ T9144] syz.7.1095: attempt to access beyond end of device
[  135.091137][ T9144] loop7: rw=2049, sector=256, nr_sectors = 12 limit=256
[  135.101671][ T9144] syz.7.1095: attempt to access beyond end of device
[  135.101671][ T9144] loop7: rw=2049, sector=268, nr_sectors = 4 limit=256
[  135.108150][ T9144] Buffer I/O error on dev loop7, logical block 67, lost async page write
[  135.112075][ T9144] syz.7.1095: attempt to access beyond end of device
[  135.112075][ T9144] loop7: rw=2049, sector=272, nr_sectors = 48 limit=256
[  135.119229][ T9144] syz.7.1095: attempt to access beyond end of device
[  135.119229][ T9144] loop7: rw=2049, sector=256, nr_sectors = 8 limit=256
[  135.125510][ T9144] syz.7.1095: attempt to access beyond end of device
[  135.125510][ T9144] loop7: rw=2049, sector=264, nr_sectors = 4 limit=256
[  135.132764][ T9144] Buffer I/O error on dev loop7, logical block 66, lost async page write
[  135.146266][ T9148] bridge0: entered allmulticast mode
[  135.150908][ T9148] pim6reg: entered allmulticast mode
[  135.157766][ T9148] pim6reg: left allmulticast mode
[  135.160575][ T9148] bridge0: left allmulticast mode
[  135.288807][ T9163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1103'.
[  135.292437][ T9163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1103'.
[  135.296354][ T9163] netlink: 'syz.1.1103': attribute type 18 has an invalid length.
[  135.299939][ T9163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1103'.
[  135.354576][ T9167] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.359259][ T9167] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.384428][ T6954] lo speed is unknown, defaulting to 1000
[  135.409718][ T9167] netlink: 'syz.1.1106': attribute type 16 has an invalid length.
[  135.412940][ T9167] netlink: 'syz.1.1106': attribute type 17 has an invalid length.
[  135.427853][ T9167] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  135.542415][ T9177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1110'.
[  135.966028][ T5847] Bluetooth: hci0: command tx timeout
[  136.305882][ T6954] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  136.465959][ T6954] usb 8-1: Using ep0 maxpacket: 32
[  136.471482][ T6954] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  136.474825][ T6954] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 129, changing to 11
[  136.480137][ T6954] usb 8-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  136.485133][ T6954] usb 8-1: config 0 interface 0 has no altsetting 0
[  136.488795][ T6954] usb 8-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  136.492452][ T6954] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.499370][ T6954] usb 8-1: config 0 descriptor??
[  136.927706][ T6954] hid-thrustmaster 0003:044F:B65D.0006: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.7-1/input0
[  137.122877][ T6954] hid-thrustmaster 0003:044F:B65D.0006: setup data couldn't be sent
[  137.125489][    C0] hid-thrustmaster 0003:044F:B65D.0006: URB to get model id failed with error -71
[  137.134708][ T6954] usb 8-1: USB disconnect, device number 2
[  137.604631][   T33] kauditd_printk_skb: 37 callbacks suppressed
[  137.604648][   T33] audit: type=1326 audit(1755905939.986:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9233 comm="syz.1.1136" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a0b8ebe9 code=0x7ffc0000
[  137.626388][   T33] audit: type=1326 audit(1755905939.986:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9233 comm="syz.1.1136" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a0b8ebe9 code=0x7ffc0000
[  137.635024][   T33] audit: type=1326 audit(1755905939.986:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9233 comm="syz.1.1136" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f38a0b8ebe9 code=0x7ffc0000
[  137.668434][   T33] audit: type=1326 audit(1755905939.986:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9233 comm="syz.1.1136" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a0b8ebe9 code=0x7ffc0000
[  137.688493][   T33] audit: type=1326 audit(1755905939.986:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9233 comm="syz.1.1136" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a0b8ebe9 code=0x7ffc0000
[  137.699068][ T9238] vim2m vim2m.0: Fourcc format (0x47425247) invalid.
[  137.699239][   T33] audit: type=1326 audit(1755905939.996:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9233 comm="syz.1.1136" exe="/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f38a0b8ebe9 code=0x7ffc0000
[  137.708605][   T33] audit: type=1326 audit(1755905939.996:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9233 comm="syz.1.1136" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a0b8ebe9 code=0x7ffc0000
[  137.732381][   T33] audit: type=1326 audit(1755905939.996:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9233 comm="syz.1.1136" exe="/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f38a0b8ebe9 code=0x7ffc0000
[  137.744646][   T33] audit: type=1326 audit(1755905939.996:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9233 comm="syz.1.1136" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a0b8ebe9 code=0x7ffc0000
[  137.777763][   T33] audit: type=1326 audit(1755905939.996:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9233 comm="syz.1.1136" exe="/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f38a0b8ebe9 code=0x7ffc0000
[  137.901308][ T9244] netlink: 'syz.6.1140': attribute type 10 has an invalid length.
[  137.906972][ T9244] team0: Port device dummy0 added
[  137.982536][ T9250] ==================================================================
[  137.985816][ T9250] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x570/0xf30
[  137.988874][ T9250] Read of size 4 at addr ffff888036b940c4 by task syz.6.1143/9250
[  137.993102][ T9250] 
[  137.994051][ T9250] CPU: 0 UID: 0 PID: 9250 Comm: syz.6.1143 Not tainted syzkaller #0 PREEMPT(full) 
[  137.994070][ T9250] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  137.994079][ T9250] Call Trace:
[  137.994085][ T9250]  <TASK>
[  137.994091][ T9250]  dump_stack_lvl+0x189/0x250
[  137.994112][ T9250]  ? __pfx_dump_stack_lvl+0x10/0x10
[  137.994128][ T9250]  ? lock_release+0x4b/0x3e0
[  137.994151][ T9250]  ? __virt_addr_valid+0x4a5/0x5c0
[  137.994168][ T9250]  print_report+0xca/0x240
[  137.994181][ T9250]  ? xfrm_alloc_spi+0x570/0xf30
[  137.994196][ T9250]  kasan_report+0x118/0x150
[  137.994214][ T9250]  ? lock_acquire+0x5f/0x360
[  137.994232][ T9250]  ? xfrm_alloc_spi+0x570/0xf30
[  137.994249][ T9250]  xfrm_alloc_spi+0x570/0xf30
[  137.994262][ T9250]  ? xfrm_alloc_spi+0x2a0/0xf30
[  137.994280][ T9250]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  137.994292][ T9250]  ? xfrm_find_acq+0x87/0xa0
[  137.994309][ T9250]  xfrm_alloc_userspi+0x70b/0xc90
[  137.994329][ T9250]  ? apparmor_capable+0x137/0x1b0
[  137.994345][ T9250]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  137.994362][ T9250]  ? __nla_parse+0x40/0x60
[  137.994383][ T9250]  xfrm_user_rcv_msg+0x7a3/0xab0
[  137.994400][ T9250]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  137.994426][ T9250]  ? __pfx___mutex_trylock_common+0x10/0x10
[  137.994439][ T9250]  ? kasan_save_track+0x4f/0x80
[  137.994455][ T9250]  ? rcu_is_watching+0x15/0xb0
[  137.994468][ T9250]  ? trace_contention_end+0x39/0x120
[  137.994482][ T9250]  ? __mutex_lock+0x335/0x1350
[  137.994501][ T9250]  netlink_rcv_skb+0x208/0x470
[  137.994521][ T9250]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  137.994537][ T9250]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  137.994561][ T9250]  ? lock_release+0x4b/0x3e0
[  137.994579][ T9250]  ? net_generic+0x1e/0x240
[  137.994592][ T9250]  ? net_generic+0x1e/0x240
[  137.994607][ T9250]  ? netlink_deliver_tap+0x2e/0x1b0
[  137.994626][ T9250]  xfrm_netlink_rcv+0x79/0x90
[  137.994640][ T9250]  netlink_unicast+0x82f/0x9e0
[  137.994661][ T9250]  ? __pfx_netlink_unicast+0x10/0x10
[  137.994677][ T9250]  ? netlink_sendmsg+0x642/0xb30
[  137.994694][ T9250]  ? skb_put+0x11b/0x210
[  137.994707][ T9250]  netlink_sendmsg+0x805/0xb30
[  137.994727][ T9250]  ? __pfx_netlink_sendmsg+0x10/0x10
[  137.994746][ T9250]  ? futex_unqueue+0x22/0x240
[  137.994759][ T9250]  ? aa_sock_msg_perm+0xf1/0x1d0
[  137.994772][ T9250]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  137.994787][ T9250]  ? __pfx_netlink_sendmsg+0x10/0x10
[  137.994808][ T9250]  __sock_sendmsg+0x21c/0x270
[  137.994828][ T9250]  ____sys_sendmsg+0x505/0x830
[  137.994843][ T9250]  ? __pfx_____sys_sendmsg+0x10/0x10
[  137.994859][ T9250]  ? import_iovec+0x74/0xa0
[  137.994875][ T9250]  ___sys_sendmsg+0x21f/0x2a0
[  137.994889][ T9250]  ? __pfx____sys_sendmsg+0x10/0x10
[  137.994905][ T9250]  ? futex_wait+0x285/0x360
[  137.994930][ T9250]  ? __fget_files+0x2a/0x420
[  137.994963][ T9250]  ? __fget_files+0x3a0/0x420
[  137.995021][ T9250]  __x64_sys_sendmsg+0x19b/0x260
[  137.995037][ T9250]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  137.995058][ T9250]  ? rcu_is_watching+0x15/0xb0
[  137.995073][ T9250]  do_syscall_64+0xfa/0x3b0
[  137.995094][ T9250]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.995109][ T9250]  ? exc_page_fault+0x9f/0xf0
[  137.995128][ T9250]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.995142][ T9250] RIP: 0033:0x7fbaab98ebe9
[  137.995155][ T9250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  137.995168][ T9250] RSP: 002b:00007fbaac857038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  137.995185][ T9250] RAX: ffffffffffffffda RBX: 00007fbaabbb5fa0 RCX: 00007fbaab98ebe9
[  137.995197][ T9250] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003
[  137.995207][ T9250] RBP: 00007fbaaba11e19 R08: 0000000000000000 R09: 0000000000000000
[  137.995217][ T9250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  137.995226][ T9250] R13: 00007fbaabbb6038 R14: 00007fbaabbb5fa0 R15: 00007ffeaa4fc448
[  137.995242][ T9250]  </TASK>
[  137.995248][ T9250] 
[  138.026014][ T5908] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  138.026787][ T9250] Allocated by task 7652:
[  138.026800][ T9250]  kasan_save_track+0x3e/0x80
[  138.026822][ T9250]  __kasan_slab_alloc+0x6c/0x80
[  138.026839][ T9250]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  138.161398][ T9250]  xfrm_state_alloc+0x24/0x2f0
[  138.163212][ T9250]  __find_acq_core+0x8a7/0x1c00
[  138.165077][ T9250]  xfrm_find_acq+0x78/0xa0
[  138.166719][ T9250]  xfrm_alloc_userspi+0x6b3/0xc90
[  138.168783][ T9250]  xfrm_user_rcv_msg+0x7a3/0xab0
[  138.170840][ T9250]  netlink_rcv_skb+0x208/0x470
[  138.172688][ T9250]  xfrm_netlink_rcv+0x79/0x90
[  138.174490][ T9250]  netlink_unicast+0x82f/0x9e0
[  138.176420][ T9250]  netlink_sendmsg+0x805/0xb30
[  138.178328][ T9250]  __sock_sendmsg+0x21c/0x270
[  138.180117][ T9250]  ____sys_sendmsg+0x505/0x830
[  138.181928][ T9250]  ___sys_sendmsg+0x21f/0x2a0
[  138.183864][ T9250]  __x64_sys_sendmsg+0x19b/0x260
[  138.185747][ T9250]  do_syscall_64+0xfa/0x3b0
[  138.187476][ T9250]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.189728][ T9250] 
[  138.190687][ T9250] Freed by task 5886:
[  138.192231][ T9250]  kasan_save_track+0x3e/0x80
[  138.194090][ T9250]  kasan_save_free_info+0x46/0x50
[  138.196062][ T9250]  __kasan_slab_free+0x5b/0x80
[  138.198024][ T9250]  kmem_cache_free+0x18f/0x400
[  138.199812][ T9250]  xfrm_state_gc_task+0x52d/0x6b0
[  138.201786][ T9250]  process_scheduled_works+0xae1/0x17b0
[  138.203879][ T9250]  worker_thread+0x8a0/0xda0
[  138.205859][ T9250]  kthread+0x711/0x8a0
[  138.207476][ T9250]  ret_from_fork+0x3fc/0x770
[  138.209255][ T9250]  ret_from_fork_asm+0x1a/0x30
[  138.211121][ T9250] 
[  138.212040][ T9250] The buggy address belongs to the object at ffff888036b94000
[  138.212040][ T9250]  which belongs to the cache xfrm_state of size 928
[  138.217945][ T9250] The buggy address is located 196 bytes inside of
[  138.217945][ T9250]  freed 928-byte region [ffff888036b94000, ffff888036b943a0)
[  138.223706][ T9250] 
[  138.224658][ T9250] The buggy address belongs to the physical page:
[  138.227097][ T9250] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888036b94000 pfn:0x36b94
[  138.231022][ T9250] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  138.234223][ T9250] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  138.237202][ T9250] page_type: f5(slab)
[  138.238718][ T9250] raw: 00fff00000000040 ffff88801d77b280 dead000000000122 0000000000000000
[  138.242511][ T9250] raw: ffff888036b94000 00000000800e000b 00000000f5000000 0000000000000000
[  138.246165][ T9250] head: 00fff00000000040 ffff88801d77b280 dead000000000122 0000000000000000
[  138.249493][ T9250] head: ffff888036b94000 00000000800e000b 00000000f5000000 0000000000000000
[  138.253093][ T9250] head: 00fff00000000002 ffffea0000dae501 00000000ffffffff 00000000ffffffff
[  138.256712][ T9250] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  138.260180][ T9250] page dumped because: kasan: bad access detected
[  138.262777][ T9250] page_owner tracks the page as allocated
[  138.265123][ T9250] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7652, tgid 7651 (syz.6.512), ts 97623104846, free_ts 97356209966
[  138.272466][ T9250]  post_alloc_hook+0x240/0x2a0
[  138.274302][ T9250]  get_page_from_freelist+0x21e4/0x22c0
[  138.276387][ T9250]  __alloc_frozen_pages_noprof+0x181/0x370
[  138.278303][ T9250]  alloc_pages_mpol+0x232/0x4a0
[  138.279697][ T9250]  allocate_slab+0x8a/0x370
[  138.281459][ T9250]  ___slab_alloc+0xbeb/0x1410
[  138.282934][ T9250]  kmem_cache_alloc_noprof+0x283/0x3c0
[  138.284864][ T9250]  xfrm_state_alloc+0x24/0x2f0
[  138.286790][ T9250]  __find_acq_core+0x8a7/0x1c00
[  138.288735][ T9250]  xfrm_find_acq+0x78/0xa0
[  138.290565][ T9250]  xfrm_alloc_userspi+0x6b3/0xc90
[  138.292625][ T9250]  xfrm_user_rcv_msg+0x7a3/0xab0
[  138.294620][ T9250]  netlink_rcv_skb+0x208/0x470
[  138.296551][ T9250]  xfrm_netlink_rcv+0x79/0x90
[  138.298438][ T9250]  netlink_unicast+0x82f/0x9e0
[  138.300374][ T9250]  netlink_sendmsg+0x805/0xb30
[  138.302330][ T9250] page last free pid 5845 tgid 5845 stack trace:
[  138.304828][ T9250]  __free_frozen_pages+0xbc4/0xd30
[  138.306916][ T9250]  stack_depot_save_flags+0x436/0x860
[  138.309074][ T9250]  kasan_save_track+0x4f/0x80
[  138.310980][ T9250]  __kasan_kmalloc+0x93/0xb0
[  138.312808][ T9250]  __kmalloc_cache_noprof+0x230/0x3d0
[  138.314982][ T9250]  kmem_cache_free+0x166/0x400
[  138.316868][ T9250]  mempool_exit+0xc8/0x1a0
[  138.318686][ T9250]  bioset_exit+0x3b6/0x690
[  138.320456][ T9250]  bch2_fs_io_write_exit+0x19/0x30
[  138.322434][ T9250]  bch2_fs_release+0x244/0x830
[  138.324316][ T9250]  kobject_put+0x22b/0x480
[  138.326079][ T9250]  deactivate_locked_super+0xbc/0x130
[  138.328165][ T9250]  cleanup_mnt+0x425/0x4c0
[  138.329939][ T9250]  task_work_run+0x1d4/0x260
[  138.331855][ T9250]  exit_to_user_mode_loop+0xec/0x110
[  138.334024][ T9250]  do_syscall_64+0x2bd/0x3b0
[  138.335896][ T9250] 
[  138.336868][ T9250] Memory state around the buggy address:
[  138.339146][ T9250]  ffff888036b93f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  138.342342][ T9250]  ffff888036b94000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  138.345534][ T9250] >ffff888036b94080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  138.348611][ T9250]                                            ^
[  138.351039][ T9250]  ffff888036b94100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  138.354214][ T9250]  ffff888036b94180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  138.357343][ T9250] ==================================================================
[  138.360592][ T9250] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  138.363420][ T9250] CPU: 0 UID: 0 PID: 9250 Comm: syz.6.1143 Not tainted syzkaller #0 PREEMPT(full) 
[  138.367149][ T9250] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  138.371207][ T9250] Call Trace:
[  138.372560][ T9250]  <TASK>
[  138.373788][ T9250]  dump_stack_lvl+0x99/0x250
[  138.375682][ T9250]  ? __asan_memcpy+0x40/0x70
[  138.377567][ T9250]  ? __pfx_dump_stack_lvl+0x10/0x10
[  138.379677][ T9250]  ? __pfx__printk+0x10/0x10
[  138.381604][ T9250]  vpanic+0x281/0x750
[  138.383280][ T9250]  ? __pfx_vpanic+0x10/0x10
[  138.385157][ T9250]  ? rcu_is_watching+0x15/0xb0
[  138.387092][ T9250]  panic+0xb9/0xc0
[  138.388622][ T9250]  ? __pfx_panic+0x10/0x10
[  138.390451][ T9250]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  138.392856][ T9250]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  138.395443][ T9250]  ? xfrm_alloc_spi+0x570/0xf30
[  138.397363][ T9250]  check_panic_on_warn+0x89/0xb0
[  138.399403][ T9250]  ? xfrm_alloc_spi+0x570/0xf30
[  138.401363][ T9250]  end_report+0x78/0x160
[  138.403092][ T9250]  kasan_report+0x129/0x150
[  138.404975][ T9250]  ? lock_acquire+0x5f/0x360
[  138.406829][ T9250]  ? xfrm_alloc_spi+0x570/0xf30
[  138.408785][ T9250]  xfrm_alloc_spi+0x570/0xf30
[  138.410627][ T9250]  ? xfrm_alloc_spi+0x2a0/0xf30
[  138.412616][ T9250]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  138.414734][ T9250]  ? xfrm_find_acq+0x87/0xa0
[  138.416628][ T9250]  xfrm_alloc_userspi+0x70b/0xc90
[  138.418734][ T9250]  ? apparmor_capable+0x137/0x1b0
[  138.420801][ T9250]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  138.422978][ T9250]  ? __nla_parse+0x40/0x60
[  138.424766][ T9250]  xfrm_user_rcv_msg+0x7a3/0xab0
[  138.426802][ T9250]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  138.428991][ T9250]  ? __pfx___mutex_trylock_common+0x10/0x10
[  138.431341][ T9250]  ? kasan_save_track+0x4f/0x80
[  138.433314][ T9250]  ? rcu_is_watching+0x15/0xb0
[  138.435344][ T9250]  ? trace_contention_end+0x39/0x120
[  138.437498][ T9250]  ? __mutex_lock+0x335/0x1350
[  138.439403][ T9250]  netlink_rcv_skb+0x208/0x470
[  138.441380][ T9250]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  138.443514][ T9250]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  138.445575][ T9250]  ? lock_release+0x4b/0x3e0
[  138.447433][ T9250]  ? net_generic+0x1e/0x240
[  138.449226][ T9250]  ? net_generic+0x1e/0x240
[  138.451005][ T9250]  ? netlink_deliver_tap+0x2e/0x1b0
[  138.453017][ T9250]  xfrm_netlink_rcv+0x79/0x90
[  138.454902][ T9250]  netlink_unicast+0x82f/0x9e0
[  138.456996][ T9250]  ? __pfx_netlink_unicast+0x10/0x10
[  138.459205][ T9250]  ? netlink_sendmsg+0x642/0xb30
[  138.461277][ T9250]  ? skb_put+0x11b/0x210
[  138.463076][ T9250]  netlink_sendmsg+0x805/0xb30
[  138.465058][ T9250]  ? __pfx_netlink_sendmsg+0x10/0x10
[  138.467246][ T9250]  ? futex_unqueue+0x22/0x240
[  138.469201][ T9250]  ? aa_sock_msg_perm+0xf1/0x1d0
[  138.471254][ T9250]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  138.473435][ T9250]  ? __pfx_netlink_sendmsg+0x10/0x10
[  138.475645][ T9250]  __sock_sendmsg+0x21c/0x270
[  138.477592][ T9250]  ____sys_sendmsg+0x505/0x830
[  138.479649][ T9250]  ? __pfx_____sys_sendmsg+0x10/0x10
[  138.481916][ T9250]  ? import_iovec+0x74/0xa0
[  138.483871][ T9250]  ___sys_sendmsg+0x21f/0x2a0
[  138.485770][ T9250]  ? __pfx____sys_sendmsg+0x10/0x10
[  138.487799][ T9250]  ? futex_wait+0x285/0x360
[  138.489596][ T9250]  ? __fget_files+0x2a/0x420
[  138.491456][ T9250]  ? __fget_files+0x3a0/0x420
[  138.493321][ T9250]  __x64_sys_sendmsg+0x19b/0x260
[  138.495290][ T9250]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  138.497422][ T9250]  ? rcu_is_watching+0x15/0xb0
[  138.499328][ T9250]  do_syscall_64+0xfa/0x3b0
[  138.501121][ T9250]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.503413][ T9250]  ? exc_page_fault+0x9f/0xf0
[  138.505229][ T9250]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.507487][ T9250] RIP: 0033:0x7fbaab98ebe9
[  138.509243][ T9250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  138.516177][ T9250] RSP: 002b:00007fbaac857038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  138.518739][ T9250] RAX: ffffffffffffffda RBX: 00007fbaabbb5fa0 RCX: 00007fbaab98ebe9
[  138.521517][ T9250] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003
[  138.524204][ T9250] RBP: 00007fbaaba11e19 R08: 0000000000000000 R09: 0000000000000000
[  138.527213][ T9250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  138.530198][ T9250] R13: 00007fbaabbb6038 R14: 00007fbaabbb5fa0 R15: 00007ffeaa4fc448
[  138.533147][ T9250]  </TASK>
[  138.534995][ T9250] Kernel Offset: disabled
[  138.536614][ T9250] Rebooting in 86400 seconds..

VM DIAGNOSIS:
23:39:00  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000062 RBX=0000000000000062 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001090 RDI=0000000000001091 RBP=00000000000003f8 RSP=ffffc9000344e9f0
R8 =ffff888107a08237 R9 =1ffff11020f41046 R10=dffffc0000000000 R11=ffffffff854f1d00
R12=dffffc0000000000 R13=ffffffff99afa900 R14=ffffffff99def3e0 R15=0000000000000000
RIP=ffffffff854f1d7c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fbaac8576c0 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=0000000040e70000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fbaabb87498 00007fbaabb87470 XMM03=00007fbaabb874a8 00007fbaabb874a0
XMM04=00007fbaac6ed100 00007fbaabb87460 XMM05=00007fbaabb87478 00007fbaabb874c0
XMM06=00007fbaabb874b8 00007fbaabb874b0 XMM07=00007fbaabb874a8 00007fbaabb874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fbaaba12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=d6dc3d3c282caf00 RBX=ffffffff819683b8 RCX=d6dc3d3c282caf00 RDX=0000000000000001
RSI=ffffffff8be33660 RDI=ffffffff819683b8 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa38330 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001f000
RIP=ffffffff8b7973f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000563c1aa4d7e8 CR3=000000010fbd0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff8167991b ffffffff8167991b
XMM02=ffffffff8164d056 ffffffff8167991b XMM03=ffffffff8164cdcd ffffffff8164cd0d
XMM04=ffffffff8189564e ffffffff81895520 XMM05=ffffffff816889f6 ffffffff8168898d
XMM06=ffffffff81688949 ffffffff816884cd XMM07=ffffffff81688452 ffffffff8168840d
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f38a0c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
