last executing test programs:

9m12.698001087s ago: executing program 32 (id=191):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
madvise(&(0x7f00003cd000/0x1000)=nil, 0x1018, 0x8)

8m51.836529672s ago: executing program 33 (id=331):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x50000000, @local, 0xb}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

8m24.970230533s ago: executing program 34 (id=494):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48)
close(r0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

7m16.137863542s ago: executing program 35 (id=913):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x0)
syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

6m28.853183592s ago: executing program 36 (id=1481):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000100b060a50000000000001090224000100005000090400020103000000092100000001"], 0x0)
r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000100)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345})
io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0)

4m54.445822139s ago: executing program 37 (id=2216):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
unshare(0x6a040000)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7c, 0xc2, 0x54, 0x8, 0x112a, 0x5, 0xbe68, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1f, 0x0, 0x0, 0x97, 0xde, 0xbe}}]}}]}}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={<r1=>0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x7fffffff, @remote, 0x9}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)

4m16.983655464s ago: executing program 5 (id=2510):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts-cbc-aes-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

4m16.747675826s ago: executing program 5 (id=2512):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100))
syz_clone(0x80804000, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
r0 = gettid()
rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200))
tkill(r0, 0x16)

4m16.134163708s ago: executing program 5 (id=2517):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f0000000440), 0x1, 0x559d, &(0x7f0000005680)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x26600, 0x0)
sendfile(r1, r2, 0x0, 0x20fffe82)

4m14.046581394s ago: executing program 5 (id=2528):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x249, &(0x7f0000000800)="$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")
open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lstat(&(0x7f0000000180)='./file1\x00', 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1c0000000, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]})
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)

4m13.99134678s ago: executing program 9 (id=2529):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @rand_addr=0x64010100}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000)

4m13.256075908s ago: executing program 9 (id=2533):
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f00000006c0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffc}, 0x1c, 0x0}}], 0x1, 0x2000c8c0)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1)
sendmmsg$inet6(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40)

4m12.912466517s ago: executing program 9 (id=2536):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe22, 0x3, @empty, 0xffffffff}, 0x1c)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
syz_emit_ethernet(0x46, &(0x7f0000000580)={@link_local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "04c2ad", 0x10, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], {0x4e21, 0xe22, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0)

4m12.769572286s ago: executing program 9 (id=2537):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002080)=@getchain={0x64, 0x66, 0x400, 0x70bd2b, 0x24dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0xb}, {0xfff2, 0x6}, {0xfff2, 0x8}}, [{0x8, 0xb, 0x39}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0xc1}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xf90}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x10100}]}, 0x64}, 0x1, 0x0, 0x0, 0x4080}, 0xc050)
recvmsg$can_raw(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)=""/4096, 0x1000}], 0x1}, 0x40)

4m12.559456441s ago: executing program 5 (id=2540):
r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x87})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1)
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)=@fd={0x807, 0x1, 0x4, 0x8, 0x6, {}, {0x2, 0x2, 0x9, 0x6, 0x9, 0xfd, 'hT=7'}, 0x0, 0x4, {}, 0x4})
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f046})

4m12.519195415s ago: executing program 9 (id=2541):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x6)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x243014, 0x0)
mount$9p_rdma(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x820, 0x0)

4m12.262867694s ago: executing program 9 (id=2544):
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x2}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000608000540000000020900020073797a310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000004000000000100000a70000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000d2c00128014000180090001006c6173740000000004000280140001800c000100636f756e746572000400028008000340000001"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40)

4m11.546330529s ago: executing program 5 (id=2549):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
pipe2$9p(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x800)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0xfffffd97)

4m10.700477588s ago: executing program 38 (id=2549):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
pipe2$9p(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x800)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0xfffffd97)

3m56.97626072s ago: executing program 39 (id=2544):
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x2}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000608000540000000020900020073797a310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000004000000000100000a70000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000d2c00128014000180090001006c6173740000000004000280140001800c000100636f756e746572000400028008000340000001"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40)

2m49.450732499s ago: executing program 2 (id=3033):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', <r3=>0x0})
sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)

2m49.100793524s ago: executing program 2 (id=3034):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)

2m48.850199846s ago: executing program 2 (id=3036):
syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000094c0)='./file1\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x1, 0xc25, &(0x7f0000002580)="$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")
socket$nl_netfilter(0x10, 0x3, 0xc)
truncate(&(0x7f00000000c0)='./file1\x00', 0x8000008)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x84042, 0x1fb)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4044000)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7)

2m45.513072972s ago: executing program 2 (id=3060):
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x82, &(0x7f0000000700)=ANY=[@ANYBLOB='iocharset=default,noadinicb,gid=forget,gid=ignore,nostrict,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c616e63686f723d30303030000088be0900303030303030303030312c7569643d666f726765742c00215e8c2e42462f3ab5e1f7c0527abbb422be9178aa60681964adb069ae876c4a599d560075ac47c0de1a9bb9146af6433efdcdac853a8e8f16d6bad90ecce0a1fab46f48331e6b3c325c08df3c334e4da28067a30b3b1dc64bf692c712fc273bc1702008f563765c6f3e67d97e1369973c2a87f0ecca7320819863179fb85e394a8cf1d62c70d8306633b6958ebf998a0685bc5cdd1f97291328743add4c867115fae1082f8faf482e15eb939968"], 0xfd, 0xc34, &(0x7f0000001080)="$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")
symlink(&(0x7f0000000400)='./bus\x00', &(0x7f00000000c0)='./file0\x00')
creat(&(0x7f0000000300)='./bus\x00', 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101, 0x1, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "806c64c97808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4, 0x400000]})
lstat(&(0x7f0000000280)='./file0\x00', 0x0)

2m43.199280601s ago: executing program 2 (id=3066):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='contention_end\x00', r2}, 0x18)
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x28, r3, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0xffa6, 0x0, 0xd0}, 0x20008000)
sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000021401004631700001dcdf250800010000000000090002007379"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810)

2m42.134314758s ago: executing program 2 (id=3070):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xecbd5a155ab96c04}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112)

2m41.847051138s ago: executing program 40 (id=3070):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xecbd5a155ab96c04}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112)

1m18.214268267s ago: executing program 7 (id=3635):
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000001600), 0xfc, 0x559e, &(0x7f0000005680)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f00000000c0)='./file2\x00', 0x66842, 0x21)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3)
rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='./file2\x00')

1m16.765472546s ago: executing program 7 (id=3650):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xc})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00001b5000/0x2000)=nil, 0x2000}, 0x3})
madvise(&(0x7f00001b4000/0x4000)=nil, 0x4000, 0x4)
mprotect(&(0x7f00001b6000/0x1000)=nil, 0x1000, 0x4)
dup3(r1, r0, 0x0)

1m15.882266634s ago: executing program 7 (id=3659):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50)
close(r0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff1e}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r1, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x10)

1m15.610567389s ago: executing program 7 (id=3664):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./file2\x00', 0x808d, &(0x7f00000000c0), 0xfe, 0x504, &(0x7f0000000a80)="$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")
syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2000003, &(0x7f0000000040)=ANY=[@ANYBLOB='adinicb,unhide,anchor=000000000000G0003777,lastblock=00000000000000000512,gid=ignore,undelete,volume=00000000000000000007,gid=forget,lastblock=00000000000000000002,\x00'], 0xde, 0xc2e, &(0x7f0000000f40)="$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")
truncate(&(0x7f0000000200)='./file1\x00', 0x20fffffffc)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000280)={0x3, 0x4, 0x0, 0x4})

1m14.140598834s ago: executing program 7 (id=3674):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28)

1m13.278335061s ago: executing program 7 (id=3681):
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @sliced={0x3, [0x7f, 0x6, 0x6, 0xb, 0x81, 0x6, 0x6, 0x1, 0x80, 0x95e, 0x6, 0x4, 0xe06c, 0x4000, 0x9, 0xb, 0x0, 0xa52, 0x9, 0x2, 0x7, 0x4, 0x6, 0xb, 0x1, 0x8001, 0x1, 0xf132, 0x2, 0x33c, 0x65, 0x882, 0x2000, 0x9, 0x5, 0xff, 0x4, 0x8001, 0x7fff, 0x7472, 0x1, 0x620, 0x2, 0x6, 0xc, 0x280, 0x1000, 0x1], 0x400}})
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14)

1m12.644103177s ago: executing program 41 (id=3681):
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @sliced={0x3, [0x7f, 0x6, 0x6, 0xb, 0x81, 0x6, 0x6, 0x1, 0x80, 0x95e, 0x6, 0x4, 0xe06c, 0x4000, 0x9, 0xb, 0x0, 0xa52, 0x9, 0x2, 0x7, 0x4, 0x6, 0xb, 0x1, 0x8001, 0x1, 0xf132, 0x2, 0x33c, 0x65, 0x882, 0x2000, 0x9, 0x5, 0xff, 0x4, 0x8001, 0x7fff, 0x7472, 0x1, 0x620, 0x2, 0x6, 0xc, 0x280, 0x1000, 0x1], 0x400}})
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14)

11.573464836s ago: executing program 8 (id=4140):
socket$inet(0x2, 0x3, 0x2)
r0 = syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x1, 0x0, 0xce})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x55, 0x2000, @fd_index=0xd, 0x7, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

11.217623651s ago: executing program 8 (id=4145):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendto(r2, &(0x7f0000000180)='+', 0x1, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000005cc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/51, 0x33}], 0x1}}], 0x1, 0x102, 0x0)

9.789609223s ago: executing program 8 (id=4150):
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r1=>0x0})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r1, 0xffffffffffffffff, {0x0, 0x1, 0x3}, 0xff}, 0x18)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f0000000180)={0x1d, r1, 0x1, {0x0, 0x0, 0x2}, 0x1}, 0x18)
bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r4, 0x1, {0x0, 0xf0, 0x2}, 0xfe}, 0x18)

9.494113521s ago: executing program 8 (id=4154):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000880), 0x12)

9.019847472s ago: executing program 8 (id=4159):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x120c40a, &(0x7f0000000a00)={[{@noblock_validity}, {@dioread_lock}, {@nobh}, {@errors_remount}, {@inlinecrypt}, {@usrjquota, 0x2e}, {@sb={'sb', 0x3d, 0x7}}, {@nodiscard}, {@jqfmt_vfsv0}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@test_dummy_encryption}], [], 0x2c}, 0x81, 0x463, &(0x7f0000000480)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e)

7.790093192s ago: executing program 8 (id=4166):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8, 0x40, 0x3}, 0x0)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000)

4.963060567s ago: executing program 4 (id=4177):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x25, &(0x7f00000000c0))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1})
fcntl$lock(r1, 0x25, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2})
close(r0)

3.975001551s ago: executing program 4 (id=4184):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000ac0)=@ccm_128={{0x304}, "5c000002010400", "ccaa54dbfef3216ec09b63757e98ed63", "cde21de0", "bcad0b2f6d5df9b2"}, 0x28)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000400)=@gcm_128={{0xdf7837db67183cad}, "656825c085aff93d", "022836e2217e8e1a41b864c3f1d3c3a1", "562714dc", "1af12a53a5fd897f"}, 0x28)

3.901664778s ago: executing program 1 (id=4185):
r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xf0f041, 0x0, '\x00', @ptr}})

3.871687125s ago: executing program 0 (id=4186):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc2241, 0x0)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x7, 0x0, 0x0, 0x15, "0062ba5d8200"})
r1 = syz_open_pts(r0, 0x20800)
dup3(r1, r0, 0x0)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0x8, 0x7fff, 0x1, 0x1ff, 0x6, "29cf29c2b287426ddb33f844374acd18bfcf4f", 0x4, 0x1000000})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x44)
ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0))

3.748840466s ago: executing program 6 (id=4188):
openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket(0x40000000015, 0x5, 0x0)
getsockopt(r1, 0x200000000114, 0x2721, 0x0, &(0x7f0000000040))

3.607096396s ago: executing program 4 (id=4189):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
unshare(0x2c020400)
r0 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000240)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file0\x00', 0x104, 0x0, 0x1})
io_uring_enter(r0, 0x351e, 0x483, 0x0, 0x0, 0x0)

3.071581251s ago: executing program 0 (id=4190):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
write$binfmt_misc(r0, &(0x7f0000000400)="b0dec1", 0x3)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40, 0x0)
sendfile(r2, r3, 0x0, 0x3)

2.905591301s ago: executing program 1 (id=4191):
r0 = socket$inet(0x2, 0x3, 0x8d)
setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={<r1=>0x0, @local, @local}, &(0x7f0000000140)=0xc)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, r1})
r2 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x4c, &(0x7f0000000000)=0xfffffffe, 0x4)
ioctl(r2, 0x8916, &(0x7f0000000000))
ioctl(r2, 0x8936, &(0x7f0000000000))

2.89844748s ago: executing program 6 (id=4192):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0xa)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x5c, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x9}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xffff00, 0xffffffff, 0xffffff00, 0xff]}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @empty}]}}]}, 0x5c}}, 0x4040004)

2.737766772s ago: executing program 0 (id=4193):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000500)={[{@i_version}, {@usrquota}, {@bh}]}, 0x1, 0x523, &(0x7f0000000c00)="$eJzs3c9vHFcdAPDvTLK2k7h1WnoABG1oCwFFWceb1qp6gHJCCFVC9AgiNfbGsrzrtbzrUptIuGeuSFTiBEf+AM49ceeC4MalHJD4YYFqJA5TzezY2di79qaJvZb385FG89688X7fizPvzbxd7wtgbN2IiJ2ImIiIdyNipjyelFu81d3y8z7ZfbC4t/tgMYkse+dfSVGeH4uen8ldK19zKiJ+8J2InyRH47a3tlcXGo36Rpmf7TTXZ9tb27dXmgvL9eX6Wq02Pzd/5427r9ceozVTx5a+1JwoU1/++I873/hZXq3p8khvO56mbtMrB3FylyPie6cRbAQule2ZGHVF+EzSiHg+Il4urv+ZuFT8NgGAiyzLZiKb6c0DABddWsyBJWm1nAuYjjStVrtzeC/E1bTRandu3W9tri1158quRyW9v9Ko3ynnCq9HJcnzc0X6Yb52KH83Ip6LiF9OXiny1cVWY2mUNz4AMMauHRr//zvZHf8BgAvu+I/NAAAXkfEfAMaP8R8Axo/xHwDGT3f8v/K4P5Zl2c9PozoAwBnw/A8A48f4DwBj5ftvv51v2V75/ddL721trrbeu71Ub69Wm5uL1cXWxnp1udVaLr6zp3nS6zVarfW512Lz/evfXG93Zttb2/earc21zr3ie73v1SvFWTtn0DIAYJDnXvroL0k+Ir95pdiiZy2HykhrBpy2dNQVAEbm0qgrAIyM1b5gfD18xn/sDwGYHoALos8SvY+Y6vcHQlmWZadXJeCU3fyC+X8YVz3z/z4FDGPmpPn/Ym1gbxLChWT+H8ZXliXDrvkfw54IAJxvx8zxXz/L+xBgdAa8//98uf9d+ebAj5YOn/HhadYKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzrf99X+r5TK/05Gm1WrEM8UCQJXk/kqjficino2IP09WJvP83IjrDAA8qfTvSbn+182ZV6cfKXrx2kFyIiJ++ut3fvX+Qqez8aeIieTfk/vHOx+Wx2snBps6jRYAAMfbH6eLfc+D/Ce7Dxb3t7Oszz++3b0ryOPu7U7E3kH8y3G52E9FJSKu/icp811Jz9zFk9j5ICI+36/9SUwXcyDdW5bD8fPYz5xp/PSR+Gm5QHNa/lt87inUBcbNR3n/81a/6y+NG8W+//U/VfRQT67s//KXWtwr+sCH8ff7v0sD+r8bw8Z47Q/f7aauHC37IOKLlyP2Y+/19D/78ZMB8V8dMv5fv/Tiy4PKst9E3Iz+8XtjzXaa67Ptre3bK82F5fpyfa1Wm5+bv/PG3ddrs8Uc9ezg0eCfb956dlBZ3v6rA+JPndD+rw7Z/t/+/90ffuWY+F9/pV/8NF44Jn4+Jn5tyPgLV38/8Lk7j790tP3JML//W0PG//hv20eWDQcARqe9tb260GjUNyTGNPHjOBfVGC6R/5c9B9Xom/jWWcWaiP5Fv3ile00fKsqyzxRrUI/xNGbdgPPg4KKPiP+NujIAAAAAAAAAAAAAAEBfZ/EXS6NuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABfXpwEAAP//+E3TQw==")
r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148)
r2 = creat(&(0x7f0000000000)='./file1\x00', 0x14c)
lgetxattr(0x0, 0x0, 0x0, 0x0)
write$binfmt_elf32(r0, &(0x7f0000000900)=ANY=[], 0x58)
fallocate(r2, 0x0, 0x9, 0x2000403)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x1000000000, 0x2, 0xfffefffffdffffff})

2.65164069s ago: executing program 4 (id=4194):
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
r0 = io_uring_setup(0x2e34, &(0x7f0000000180))
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2}, 0x18)
connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18)
sendmsg$can_j1939(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2.584879681s ago: executing program 1 (id=4196):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0xa}, {0x90010026}], 0x10, 0xfffff93e}, 0x94)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd200000006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)

2.362134183s ago: executing program 6 (id=4197):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)

2.286007105s ago: executing program 1 (id=4199):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20)
sendmmsg$inet6(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x1, &(0x7f0000000480), 0x14}}], 0x400, 0x10)
sendto$inet6(r0, &(0x7f0000000580)="fb", 0x1, 0x4008804, 0x0, 0x0)

2.191863036s ago: executing program 6 (id=4200):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x2a, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0)

2.039203918s ago: executing program 1 (id=4201):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000400)=0x4, 0x4)
sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x40000}, 0x8051)
syz_genetlink_get_family_id$nl80211(0x0, r1)
read$FUSE(r1, &(0x7f0000000540)={0x2020}, 0x2020)

1.786428168s ago: executing program 3 (id=4203):
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xb, 0x5, 0x10001, 0xa, 0x1, 0xffffffffffffffff, 0x3}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.489616003s ago: executing program 3 (id=4204):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0)
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000240))
write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)

1.426221156s ago: executing program 0 (id=4205):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
r1 = getgid()
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x2004019, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r1], 0xfc, 0x0, 0x0)
syz_fuse_handle_req(r0, &(0x7f0000002180), 0x2000, &(0x7f0000004180)={&(0x7f00000002c0)={0x50, 0x0, 0x800, {0x7, 0x29, 0x0, 0x400000, 0x8000, 0x0, 0x40}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x90, 0x0, 0x0, {0x2000003, 0x3, 0x6, 0x0, 0x1ff, 0x3, {0x6, 0x4, 0x7, 0x5, 0x100000001, 0x6, 0x3, 0x0, 0x101, 0x6000, 0x5, 0x0, r1, 0x801, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = open(&(0x7f0000000100)='./file0/file1\x00', 0xc03, 0x0)
ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0)

1.324637284s ago: executing program 3 (id=4206):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x6a)
r1 = socket(0x11, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'gre0\x00', <r3=>0x0})
bind$packet(r1, &(0x7f0000000200)={0x11, 0x18, r3, 0x1, 0x0, 0x6, @random="9020f2f9924c"}, 0x14)
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close_range(r4, r5, 0x0)

1.314144235s ago: executing program 0 (id=4207):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x72bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd1f, 0x25dfdbfc, {0x0, 0x0, 0xf2ff, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_ACT={0x48, 0x3, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x9, 0x20000000, 0x9}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xf0, 0x8}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8848}, 0x80)

1.202528227s ago: executing program 6 (id=4208):
r0 = syz_io_uring_setup(0x109, &(0x7f0000000100)={0x0, 0xfffffffb, 0x80, 0x0, 0x364}, &(0x7f0000000180)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9})
io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e24, @loopback}, 0x10)
recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000000a40)=""/4096, 0x1000}], 0x1}, 0x10001}], 0x1, 0x10122, 0x0)

1.109690666s ago: executing program 3 (id=4209):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8)
sendto$inet6(r0, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x80000000}, 0x1c)
socket$inet6(0x10, 0x2, 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x50)
close(0x3)

1.05494612s ago: executing program 1 (id=4210):
syz_mount_image$jfs(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x1010003, &(0x7f0000000140)=ANY=[@ANYBLOB="696e746567726974792c646973636172643d3078303030303030303030303030303030302c75737271756f74612c696f636861727365743d6370383530006572726f72733d72656d6f756e742d726f2c64697363ea7353b72433e73b", @ANYRES8=0x0, @ANYRES32=0x0], 0x0, 0x61fb, &(0x7f0000009680)="$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")
mount$nfs(0x0, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x1c0030, 0x0)
creat(&(0x7f0000000300)='./bus\x00', 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]})
chdir(&(0x7f0000000080)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)

916.676625ms ago: executing program 3 (id=4211):
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)

837.430232ms ago: executing program 0 (id=4212):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x4)
sched_setaffinity(r0, 0xff69, &(0x7f0000000100)=0x3)

742.356691ms ago: executing program 3 (id=4213):
r0 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x2, {0x2, 0xf0, 0x3}, 0xfd}, 0x18)
r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x3, 0x8069}, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x800)

636.013212ms ago: executing program 4 (id=4214):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000180)='./file1\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000380)={0x4, 0x2, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x6, 0x5})
capset(&(0x7f00000003c0)={0x19980330}, &(0x7f0000000400))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_INPUT(r1, &(0x7f0000001980)={0x8, {"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", 0x1000}}, 0x1006)

398.286185ms ago: executing program 4 (id=4215):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)

0s ago: executing program 6 (id=4216):
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})

kernel console output (not intermixed with test programs):

  517.282020][T15055] BTRFS info (device loop8): enabling ssd optimizations
[  517.289034][T15055] BTRFS info (device loop8): turning on async discard
[  517.300241][T15055] BTRFS info (device loop8): enabling free space tree
[  517.434508][T15048] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  517.450588][T15048] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  517.657034][T13979] BTRFS info (device loop8): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  517.880293][ T5921] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32
[  517.922391][ T5921] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32
[  518.028165][ T5921] aqc111 3-1:1.105 eth13: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 16:f2:25:bf:f6:e1
[  518.217124][ T5921] usb 3-1: USB disconnect, device number 21
[  518.245203][ T5921] aqc111 3-1:1.105 eth13: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[  518.322111][T15108] loop7: detected capacity change from 0 to 1024
[  518.342031][ T5921] aqc111 3-1:1.105 eth13 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  518.361349][ T5921] aqc111 3-1:1.105 eth13 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  518.380928][ T5921] aqc111 3-1:1.105 eth13 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[  518.589979][T15119] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2970'.
[  518.636494][T15119] bridge_slave_1: left allmulticast mode
[  518.651083][T15119] bridge_slave_1: left promiscuous mode
[  518.669954][T15119] bridge0: port 2(bridge_slave_1) entered disabled state
[  518.795946][T15119] bridge_slave_0: left allmulticast mode
[  518.801773][T15119] bridge_slave_0: left promiscuous mode
[  518.807726][T15119] bridge0: port 1(bridge_slave_0) entered disabled state
[  519.173772][T15126] io-wq is not configured for unbound workers
[  519.580329][ T5893] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  519.621344][T15139] loop6: detected capacity change from 0 to 4096
[  519.702730][T15134] clip:clip_setentry: non-CLIP VCC
[  519.752143][ T5893] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  519.771945][ T5893] usb 9-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00
[  519.806288][ T5893] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  519.831737][   T10] usb 3-1: new full-speed USB device number 22 using dummy_hcd
[  519.855576][ T5893] usb 9-1: config 0 descriptor??
[  519.992276][   T10] usb 3-1: config 1 has an invalid descriptor of length 148, skipping remainder of the config
[  520.007550][   T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  520.037938][   T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  520.053794][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  520.083741][   T10] usb 3-1: SerialNumber: syz
[  520.107510][   T10] usb 3-1: 0:2 : does not exist
[  520.125992][   T10] usb 3-1: unit 135 not found!
[  520.175045][ T5893] usbhid 9-1:0.0: can't add hid device: -71
[  520.193782][ T5893] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  520.230237][ T5921] usb 7-1: new full-speed USB device number 6 using dummy_hcd
[  520.248353][ T5893] usb 9-1: USB disconnect, device number 2
[  520.362239][ T5866] usb 3-1: USB disconnect, device number 22
[  520.423811][ T5921] usb 7-1: unable to get BOS descriptor or descriptor too short
[  520.437346][T15145] loop7: detected capacity change from 0 to 512
[  520.444877][ T5921] usb 7-1: not running at top speed; connect to a high speed hub
[  520.454187][ T5921] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  520.468259][ T5921] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  520.480083][T15145] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.2982: bad orphan inode 15
[  520.493156][T15145] ext4_test_bit(bit=14, block=18) = 1
[  520.499085][T15145] is_bad_inode(inode)=0
[  520.511000][ T5921] usb 7-1: string descriptor 0 read error: -22
[  520.517530][ T5921] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  520.529744][ T5921] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  520.537941][T15145] NEXT_ORPHAN(inode)=1023
[  520.545714][T15145] max_ino=32
[  520.549485][T15145] i_nlink=0
[  520.557011][ T5921] usb 7-1: 0:2 : does not exist
[  520.565196][T15145] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2967: inode #15: comm syz.7.2982: corrupted xattr block 19: invalid header
[  520.602826][T15145] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -117)
[  520.635341][T15145] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none.
[  520.638916][T15151] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2984'.
[  520.650626][T15145] ext4 filesystem being mounted at /458/�q�Y�3aK supports timestamps until 2038-01-19 (0x7fffffff)
[  520.688348][T15151] erspan0: entered promiscuous mode
[  520.696318][T15151] macvtap1: entered promiscuous mode
[  520.703336][T15151] macvtap1: entered allmulticast mode
[  520.709126][T15151] erspan0: entered allmulticast mode
[  520.728699][T15152] erspan0: left allmulticast mode
[  520.734205][T15152] erspan0: left promiscuous mode
[  520.776026][ T6979] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0009-000000000000.
[  520.958511][T15156] loop4: detected capacity change from 0 to 512
[  521.032778][T15156] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  521.084646][T15156] ext4 filesystem being mounted at /500/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  522.116231][ T5921] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5)
[  522.139085][ T5921] usb 7-1: 5:0: failed to get current value for ch 1 (-22)
[  522.229827][ T5921] usb 7-1: USB disconnect, device number 6
[  522.336124][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  524.380240][ T5921] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  524.564103][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  524.585585][ T5921] usb 5-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00
[  524.625003][T15176] loop8: detected capacity change from 0 to 32768
[  524.631570][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  524.658085][ T5921] usb 5-1: config 0 descriptor??
[  524.671203][T15176] btrfs: Deprecated parameter 'usebackuproot'
[  524.682697][T15176] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  524.694206][T15176] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2994 (15176)
[  524.716671][T15176] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  524.727347][T15176] BTRFS info (device loop8): using crc32c (crc32c-lib) checksum algorithm
[  524.770371][   T24] usb 7-1: new low-speed USB device number 7 using dummy_hcd
[  524.932579][   T24] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  524.941266][   T24] usb 7-1: config 0 has no interface number 0
[  524.947672][   T24] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  524.958982][   T24] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  524.970013][ T5921] usbhid 5-1:0.0: can't add hid device: -71
[  524.976766][ T5921] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  524.987403][ T5921] usb 5-1: USB disconnect, device number 12
[  524.994802][   T24] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  525.014314][T15176] BTRFS info (device loop8): rebuilding free space tree
[  525.034319][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  525.064696][   T24] usb 7-1: config 0 descriptor??
[  525.070584][T15208] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  525.091179][   T24] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  525.126833][T15176] BTRFS info (device loop8): turning on async discard
[  525.144446][T15176] BTRFS info (device loop8): enabling free space tree
[  525.156732][T15176] BTRFS info (device loop8): force clearing of disk cache
[  525.181170][T15176] BTRFS info (device loop8): trying to use backup root at mount time
[  525.403105][   T30] audit: type=1804 audit(1760754822.413:148): pid=15176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.2994" name="/newroot/40/file1/bus" dev="loop8" ino=263 res=1 errno=0
[  525.708456][ T5866] usb 7-1: USB disconnect, device number 7
[  525.887718][T15242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3008'.
[  525.948496][T13979] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  526.091573][T15246] loop7: detected capacity change from 0 to 1024
[  526.404436][T15245] hfsplus: invalid extended attribute record
[  526.422019][T15250] overlayfs: failed to get inode (-116)
[  526.428390][T15250] overlayfs: failed to get inode (-116)
[  526.570984][T15252] loop4: detected capacity change from 0 to 1024
[  526.637000][ T6020] hfsplus: b-tree write err: -5, ino 8
[  526.820608][ T6020] hfsplus: b-tree write err: -5, ino 8
[  527.310298][T12322] usb 5-1: new full-speed USB device number 13 using dummy_hcd
[  527.488190][T12322] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  527.525756][T12322] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  527.590205][T12322] usb 5-1: Product: syz
[  527.598750][T12322] usb 5-1: Manufacturer: syz
[  527.641379][T12322] usb 5-1: SerialNumber: syz
[  527.663999][T12322] usb 5-1: config 0 descriptor??
[  528.140400][T12322] airspy 5-1:0.0: Board ID: 00
[  528.145217][T12322] airspy 5-1:0.0: Firmware version: 
[  528.390382][T15287] loop8: detected capacity change from 0 to 512
[  528.455260][T15287] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended
[  528.479282][T15287] EXT4-fs (loop8): blocks per group (42) and clusters per group (32768) inconsistent
[  528.915819][T15303] loop2: detected capacity change from 0 to 2048
[  528.928942][T15303] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  528.959272][   T30] audit: type=1800 audit(1760754825.973:149): pid=15303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3036" name="file1" dev="loop2" ino=1415 res=0 errno=0
[  529.056009][T15306] loop7: detected capacity change from 0 to 128
[  529.122277][T15306] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  529.149673][T12322] airspy 5-1:0.0: usb_control_msg() failed -71 request 10
[  529.167159][T12322] airspy 5-1:0.0: Registered as swradio24
[  529.189351][T12322] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  529.221070][T12322] usb 5-1: USB disconnect, device number 13
[  529.240479][T15306] hpfs: filesystem error: improperly stopped
[  529.246694][T15306] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  529.280199][T15306] hpfs: You really don't want any checks? You are crazy...
[  529.311719][T15306] hpfs: hpfs_map_sector(): read error
[  529.317104][T15306] hpfs: code page support is disabled
[  529.350195][T15306] hpfs: hpfs_map_4sectors(): unaligned read
[  529.356304][T15306] hpfs: hpfs_map_4sectors(): unaligned read
[  529.381370][T15306] hpfs: filesystem error: unable to find root dir
[  529.432720][T15306] hpfs: hpfs_map_4sectors(): unaligned read
[  529.439884][T15306] hpfs: hpfs_map_sector(): read error
[  529.471782][T15306] hpfs: hpfs_map_4sectors(): unaligned read
[  529.480265][T15306] hpfs: hpfs_map_sector(): read error
[  531.258287][T15325] loop6: detected capacity change from 0 to 32768
[  531.297621][T15325] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3045 (15325)
[  531.351149][T15325] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  531.390360][T15325] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm
[  531.734423][T15325] BTRFS info (device loop6): rebuilding free space tree
[  531.862240][T15325] BTRFS info (device loop6): setting nodatasum
[  531.868456][T15325] BTRFS info (device loop6): setting nodatacow
[  531.890220][T15325] BTRFS info (device loop6): turning on async discard
[  531.907851][   T30] audit: type=1800 audit(1760754828.923:150): pid=15303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3036" name="file1" dev="loop2" ino=1415 res=0 errno=0
[  531.937112][T15325] BTRFS info (device loop6): enabling free space tree
[  531.973287][T15325] BTRFS info (device loop6): force clearing of disk cache
[  531.999438][T15325] BTRFS info (device loop6): max_inline set to 83
[  532.464786][T15359] loop4: detected capacity change from 0 to 32768
[  532.505651][T15359] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  532.530487][T13665] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  533.509676][T15359] XFS (loop4): Ending clean mount
[  533.590829][T15359] XFS (loop4): Quotacheck needed: Please wait.
[  533.700278][T15359] XFS (loop4): Quotacheck: Done.
[  533.834060][T15391] loop2: detected capacity change from 0 to 2048
[  533.873402][T12322] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  533.940731][T15391] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  533.993774][T15391] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  534.075877][T12322] usb 9-1: Using ep0 maxpacket: 8
[  534.103898][   T10] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  534.115048][ T5835] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  534.141251][T12322] usb 9-1: New USB device found, idVendor=0c45, idProduct=6128, bcdDevice=c4.6d
[  534.170198][T12322] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  534.178236][T12322] usb 9-1: Product: syz
[  534.200290][T15391] loop2: detected capacity change from 2048 to 0
[  534.218368][T12322] usb 9-1: Manufacturer: syz
[  534.224144][T12322] usb 9-1: SerialNumber: syz
[  534.244856][T12322] usb 9-1: config 0 descriptor??
[  534.253460][T12322] gspca_main: sonixj-2.14.0 probing 0c45:6128
[  534.307163][   T10] usb 7-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db
[  534.353223][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  534.379167][   T10] usb 7-1: config 0 descriptor??
[  535.129752][T15393] loop6: detected capacity change from 0 to 2048
[  535.177883][T15393] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  535.230054][T15393] EXT4-fs (loop6): changing journal_checksum during remount not supported; ignoring
[  535.243985][ T7166] Buffer I/O error on dev loop2, logical block 128, lost sync page write
[  535.258493][T15393] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  535.283230][   T24] usb 7-1: USB disconnect, device number 8
[  535.505677][T15409] input: syz0 as /devices/virtual/input/input47
[  535.528026][ T6022] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  535.529159][T12322] input: sonixj as /devices/platform/dummy_hcd.8/usb9/9-1/input/input48
[  535.542410][ T6022] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  535.702473][ T6022] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  535.714898][ T6022] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  535.757584][   T24] usb 9-1: USB disconnect, device number 3
[  535.892841][ T6022] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  535.908160][T13665] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  535.920220][ T6022] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  536.221840][ T6022] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  536.244723][ T6022] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  536.341334][T15421] netlink: 'syz.4.3076': attribute type 12 has an invalid length.
[  537.299871][   T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  537.321699][   T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  537.375437][   T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  537.392776][   T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  537.407164][   T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  538.064222][T15455] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3085'.
[  538.430422][T15456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3085'.
[  538.898083][T15459] netlink: 'syz.8.3086': attribute type 39 has an invalid length.
[  539.035315][ T6022] bond1 (unregistering): (slave geneve2): Releasing active interface
[  539.144792][T15464] netlink: 'syz.4.3089': attribute type 1 has an invalid length.
[  539.285740][ T6022] bond1 (unregistering): Released all slaves
[  539.383885][ T6022] bond2 (unregistering): Released all slaves
[  539.494690][ T5827] Bluetooth: hci4: command tx timeout
[  539.527275][ T6022] bond3 (unregistering): Released all slaves
[  539.741985][T15465] bond2: (slave bridge1): making interface the new active one
[  539.793936][T15465] bond2: (slave bridge1): Enslaving as an active interface with an up link
[  539.948509][T15470] loop7: detected capacity change from 0 to 2048
[  540.017291][T15470] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  540.100778][   T30] audit: type=1800 audit(1760754837.123:151): pid=15470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3092" name="file1" dev="loop7" ino=1415 res=0 errno=0
[  540.796481][ T6022] batadv0: left promiscuous mode
[  541.010858][ T6022] hsr_slave_0: left promiscuous mode
[  541.051381][ T6022] hsr_slave_1: left promiscuous mode
[  541.057639][ T6022] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  541.080475][ T6022] batman_adv: batadv0: Removing interface: batadv_slave_0
[  541.111496][ T6022] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  541.118904][ T6022] batman_adv: batadv0: Removing interface: batadv_slave_1
[  541.123331][T15489] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22)
[  541.155963][T15485] loop8: detected capacity change from 0 to 8192
[  541.167653][T15485] UDF-fs: warning (device loop8): udf_load_vrs: No VRS found
[  541.181457][T15485] UDF-fs: Scanning with blocksize 512 failed
[  541.193619][T15485] UDF-fs: warning (device loop8): udf_load_vrs: No VRS found
[  541.210588][T15485] UDF-fs: Scanning with blocksize 1024 failed
[  541.227521][T15485] UDF-fs: warning (device loop8): udf_load_vrs: No VRS found
[  541.240348][T15485] UDF-fs: Scanning with blocksize 2048 failed
[  541.265598][T15485] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  541.275167][ T6022] veth1_macvtap: left promiscuous mode
[  541.281225][ T6022] veth0_macvtap: left promiscuous mode
[  541.570399][ T5827] Bluetooth: hci4: command tx timeout
[  542.861218][   T30] audit: type=1800 audit(1760754839.883:152): pid=15470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3092" name="file1" dev="loop7" ino=1415 res=0 errno=0
[  542.950354][T15510] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3108'.
[  543.068863][ T6022] team0 (unregistering): Port device team_slave_1 removed
[  543.222052][ T6022] team0 (unregistering): Port device team_slave_0 removed
[  543.651335][ T5827] Bluetooth: hci4: command tx timeout
[  544.469077][T15493] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3102'.
[  544.649297][ T5973] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  544.669620][ T5973] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  544.680560][T15493] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3102'.
[  544.732056][ T5973] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  544.842213][ T5973] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  545.420629][T15439] chnl_net:caif_netlink_parms(): no params data found
[  545.456688][T15549] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3122'.
[  545.739003][ T5827] Bluetooth: hci4: command tx timeout
[  546.279267][T15439] bridge0: port 1(bridge_slave_0) entered blocking state
[  546.288258][T15439] bridge0: port 1(bridge_slave_0) entered disabled state
[  546.296140][T15439] bridge_slave_0: entered allmulticast mode
[  546.315644][T15439] bridge_slave_0: entered promiscuous mode
[  546.329064][T15439] bridge0: port 2(bridge_slave_1) entered blocking state
[  546.351575][T15439] bridge0: port 2(bridge_slave_1) entered disabled state
[  546.358933][T15439] bridge_slave_1: entered allmulticast mode
[  546.385944][T15439] bridge_slave_1: entered promiscuous mode
[  546.474557][T15439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  546.504252][T15439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  546.821504][T15439] team0: Port device team_slave_0 added
[  546.860452][T15439] team0: Port device team_slave_1 added
[  546.976003][T15439] batman_adv: batadv0: Adding interface: batadv_slave_0
[  546.984861][T15439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  547.012701][T15439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  547.050405][T15439] batman_adv: batadv0: Adding interface: batadv_slave_1
[  547.057371][T15439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  547.083971][T15439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  547.207016][T15439] hsr_slave_0: entered promiscuous mode
[  547.217759][T15439] hsr_slave_1: entered promiscuous mode
[  547.224472][T15439] debugfs: 'hsr0' already exists in 'hsr'
[  547.231293][T15439] Cannot create hsr debugfs directory
[  547.837844][T15439] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  547.849506][T15439] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  547.859695][T15439] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  547.872079][T15439] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  547.956204][T15439] 8021q: adding VLAN 0 to HW filter on device bond0
[  547.978751][T15439] 8021q: adding VLAN 0 to HW filter on device team0
[  547.993914][ T6020] bridge0: port 1(bridge_slave_0) entered blocking state
[  548.001044][ T6020] bridge0: port 1(bridge_slave_0) entered forwarding state
[  548.015874][ T6023] bridge0: port 2(bridge_slave_1) entered blocking state
[  548.023019][ T6023] bridge0: port 2(bridge_slave_1) entered forwarding state
[  548.265804][T15439] 8021q: adding VLAN 0 to HW filter on device batadv0
[  548.311198][T15439] veth0_vlan: entered promiscuous mode
[  548.324091][T15439] veth1_vlan: entered promiscuous mode
[  548.356633][T15439] veth0_macvtap: entered promiscuous mode
[  548.368036][T15439] veth1_macvtap: entered promiscuous mode
[  548.387920][T15439] batman_adv: batadv0: Interface activated: batadv_slave_0
[  548.403231][T15439] batman_adv: batadv0: Interface activated: batadv_slave_1
[  548.417712][ T5973] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  548.426650][ T6023] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  548.437190][ T6023] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  548.446093][ T6023] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  548.524486][ T5982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  548.532477][ T5982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  548.571398][ T5973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  548.579231][ T5973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  548.734536][   T30] audit: type=1800 audit(1760754845.753:153): pid=15580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3143" name="file0" dev="overlay" ino=2896 res=0 errno=0
[  548.763123][   T30] audit: type=1800 audit(1760754845.783:154): pid=15580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3143" name="file0" dev="overlay" ino=2896 res=0 errno=0
[  551.891207][T15594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3131'.
[  551.900229][T15599] netlink: 63503 bytes leftover after parsing attributes in process `syz.7.3132'.
[  551.921823][T15594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3131'.
[  552.257198][ T5866] IPVS: starting estimator thread 0...
[  552.263330][T15602] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  552.355031][T15617] IPVS: using max 28 ests per chain, 67200 per kthread
[  552.368736][T15615] loop4: detected capacity change from 0 to 4096
[  553.209210][T15629] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  553.260314][T15629] block device autoloading is deprecated and will be removed.
[  553.600486][  T977] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  553.760337][  T977] usb 9-1: Using ep0 maxpacket: 8
[  553.779532][  T977] usb 9-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  553.797563][  T977] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  553.823334][  T977] usb 9-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  553.840414][  T977] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  553.850612][  T977] usb 9-1: Product: syz
[  553.857869][  T977] usb 9-1: Manufacturer: syz
[  553.862670][  T977] usb 9-1: SerialNumber: syz
[  553.872607][  T977] usb 9-1: config 0 descriptor??
[  553.885241][   T30] audit: type=1326 audit(1760754850.903:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15651 comm="syz.4.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb53a78efc9 code=0x7fc00000
[  553.907585][    C0] vkms_vblank_simulate: vblank timer overrun
[  553.958026][   T30] audit: type=1326 audit(1760754850.933:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15651 comm="syz.4.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fb53a78efc9 code=0x7fc00000
[  553.993660][   T30] audit: type=1326 audit(1760754850.943:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15651 comm="syz.4.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb53a78efc9 code=0x7fc00000
[  554.151008][  T977] usb 9-1: USB disconnect, device number 4
[  554.968692][T15671] loop8: detected capacity change from 0 to 512
[  555.033257][T15671] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002]
[  555.050806][T15671] System zones: 1-12
[  555.066796][T15671] EXT4-fs error (device loop8): ext4_iget_extra_inode:5074: inode #15: comm syz.8.3164: corrupted in-inode xattr: e_value size too large
[  555.081496][T15671] EXT4-fs error (device loop8): ext4_orphan_get:1395: comm syz.8.3164: couldn't read orphan inode 15 (err -117)
[  555.104491][T15671] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  555.286756][T15688] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3172'.
[  555.295906][T15688] netlink: 'syz.7.3172': attribute type 30 has an invalid length.
[  555.303812][T15688] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3172'.
[  555.415709][T13979] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  555.956424][T15707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3177'.
[  556.132944][ T6026] libceph: connect (1)[c::]:6789 error -101
[  556.140775][ T6026] libceph: mon0 (1)[c::]:6789 connect error
[  556.159381][T15710] ceph: No mds server is up or the cluster is laggy
[  556.345213][T15707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3177'.
[  557.096117][T15728] loop4: detected capacity change from 0 to 2048
[  558.020981][T15728] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  558.036680][T15741] loop8: detected capacity change from 0 to 2048
[  558.733012][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  558.745753][T15747] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3189'.
[  558.768576][T15747] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3189'.
[  559.021086][T15753] loop1: detected capacity change from 0 to 4096
[  559.449840][T15768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3195'.
[  561.065479][T15801] loop8: detected capacity change from 0 to 4096
[  561.110595][T15801] ntfs3(loop8): Different NTFS sector size (1024) and media sector size (512).
[  561.140930][T15801] ntfs3(loop8): ino=3, mi_enum_attr
[  561.327059][   T30] audit: type=1804 audit(1760754858.343:158): pid=15801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.3209" name="/newroot/70/file1/file1" dev="loop8" ino=30 res=1 errno=0
[  562.122078][T15820] loop4: detected capacity change from 0 to 32768
[  562.127770][T15827] loop1: detected capacity change from 0 to 4096
[  562.153828][T15820] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  562.162252][T15820] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  562.190248][T15820] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[  562.200340][  T977] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  562.207173][  T977] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  562.321245][  T977] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 114ms
[  562.328920][  T977] gfs2: fsid=syz:syz.0: jid=0: Done
[  562.334461][T15820] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  563.563504][T15855] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3229'.
[  564.075866][T15865] loop7: detected capacity change from 0 to 4096
[  564.539066][  T977] libceph: connect (1)[c::]:6789 error -101
[  564.545622][  T977] libceph: mon0 (1)[c::]:6789 connect error
[  564.589097][T15881] ceph: No mds server is up or the cluster is laggy
[  564.829719][T15888] loop1: detected capacity change from 0 to 4096
[  564.927872][T15887] loop8: detected capacity change from 0 to 32768
[  564.972604][T15887] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  564.980957][T15887] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  565.046506][T15895] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  565.070873][T15887] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[  565.084635][ T5866] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  565.100250][ T5866] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  565.232038][ T5866] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 131ms
[  565.320552][ T5866] gfs2: fsid=syz:syz.0: jid=0: Done
[  565.335336][T15887] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  565.473089][T15887] gfs2: fsid=syz:syz.0: found 1 quota changes
[  565.631885][T13979] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 404
[  565.648989][T13979] gfs2: fsid=syz:syz.0: G:  s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1
[  565.664384][T13979] gfs2: fsid=syz:syz.0:  H: s:EX f:H e:0 p:13979 [syz-executor] gfs2_quota_sync+0x322/0x570
[  565.681192][T13979] gfs2: fsid=syz:syz.0:  I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0
[  565.692035][T13979] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  567.468544][T15964] loop6: detected capacity change from 0 to 4096
[  568.090251][ T5893] usb 7-1: new full-speed USB device number 9 using dummy_hcd
[  568.254047][ T5893] usb 7-1: config 1 interface 0 has no altsetting 0
[  568.288264][ T5893] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  568.307571][ T5893] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  568.320772][ T5893] usb 7-1: Product: syz
[  568.334330][ T5893] usb 7-1: Manufacturer: syz
[  568.343630][ T5893] usb 7-1: SerialNumber: syz
[  568.626352][ T5893] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[  568.642794][ T5893] usb 7-1: USB disconnect, device number 9
[  568.656949][ T5893] usblp0: removed
[  568.816863][T16011] loop1: detected capacity change from 0 to 4096
[  569.301386][T16019] loop7: detected capacity change from 0 to 2048
[  569.367955][T16019] Alternate GPT is invalid, using primary GPT.
[  569.383920][T16019]  loop7: p1 p2 p3
[  569.478117][T16020] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3290'.
[  570.809947][T13979] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[  570.840207][T13979] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[  570.870332][T13979] gfs2: fsid=syz:syz.0: File system withdrawn
[  570.884127][T13979] CPU: 1 UID: 0 PID: 13979 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  570.884173][T13979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  570.884195][T13979] Call Trace:
[  570.884207][T13979]  <TASK>
[  570.884221][T13979]  dump_stack_lvl+0x16c/0x1f0
[  570.884284][T13979]  gfs2_withdraw+0xa8b/0x1130
[  570.884355][T13979]  ? __pfx_gfs2_withdraw+0x10/0x10
[  570.884413][T13979]  ? srso_alias_return_thunk+0x5/0xfbef5
[  570.884457][T13979]  ? gfs2_meta_buffer+0x194/0x3d0
[  570.884505][T13979]  ? __pfx_autoremove_wake_function+0x10/0x10
[  570.884557][T13979]  ? srso_alias_return_thunk+0x5/0xfbef5
[  570.884609][T13979]  inode_go_instantiate+0xe68/0x1290
[  570.884669][T13979]  ? __pfx_bit_wait+0x10/0x10
[  570.884736][T13979]  ? __pfx_inode_go_instantiate+0x10/0x10
[  570.884793][T13979]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  570.884851][T13979]  ? srso_alias_return_thunk+0x5/0xfbef5
[  570.884907][T13979]  gfs2_instantiate+0x16c/0x250
[  570.884953][T13979]  gfs2_glock_wait+0x214/0x330
[  570.884998][T13979]  ? __pfx_gfs2_glock_wait+0x10/0x10
[  570.885046][T13979]  ? srso_alias_return_thunk+0x5/0xfbef5
[  570.885096][T13979]  gfs2_glock_nq+0xd24/0x17a0
[  570.885153][T13979]  ? srso_alias_return_thunk+0x5/0xfbef5
[  570.885204][T13979]  do_sync+0x70d/0xd60
[  570.885248][T13979]  ? srso_alias_return_thunk+0x5/0xfbef5
[  570.885291][T13979]  ? do_raw_spin_unlock+0x172/0x230
[  570.885363][T13979]  ? __pfx_do_sync+0x10/0x10
[  570.885406][T13979]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  570.885476][T13979]  ? gfs2_quota_sync+0x322/0x570
[  570.885524][T13979]  ? srso_alias_return_thunk+0x5/0xfbef5
[  570.885581][T13979]  gfs2_quota_sync+0x322/0x570
[  570.885644][T13979]  gfs2_sync_fs+0x44/0xb0
[  570.885679][T13979]  ? __pfx_gfs2_sync_fs+0x10/0x10
[  570.885720][T13979]  sync_filesystem+0x111/0x290
[  570.885770][T13979]  generic_shutdown_super+0x74/0x390
[  570.885833][T13979]  kill_block_super+0x3b/0x90
[  570.885890][T13979]  gfs2_kill_sb+0x371/0x420
[  570.885959][T13979]  deactivate_locked_super+0xc1/0x1a0
[  570.886000][T13979]  deactivate_super+0xde/0x100
[  570.886040][T13979]  cleanup_mnt+0x225/0x450
[  570.886084][T13979]  task_work_run+0x150/0x240
[  570.886140][T13979]  ? __pfx_task_work_run+0x10/0x10
[  570.886190][T13979]  ? srso_alias_return_thunk+0x5/0xfbef5
[  570.886239][T13979]  ? __pfx___x64_sys_umount+0x10/0x10
[  570.886294][T13979]  exit_to_user_mode_loop+0xec/0x130
[  570.886350][T13979]  do_syscall_64+0x426/0xfa0
[  570.886415][T13979]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  570.886452][T13979] RIP: 0033:0x7fcd5f7902f7
[  570.886481][T13979] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  570.886517][T13979] RSP: 002b:00007ffcffc12ed8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  570.886552][T13979] RAX: 0000000000000000 RBX: 00007fcd5f811d7d RCX: 00007fcd5f7902f7
[  570.886577][T13979] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcffc12f90
[  570.886600][T13979] RBP: 00007ffcffc12f90 R08: 0000000000000000 R09: 0000000000000000
[  570.886624][T13979] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcffc14020
[  570.886648][T13979] R13: 00007fcd5f811d7d R14: 000000000008a106 R15: 00007ffcffc14060
[  570.886700][T13979]  </TASK>
[  570.974942][T16027] kexec: Could not allocate control_code_buffer
[  571.227483][T16042] random: crng reseeded on system resumption
[  572.299812][T16054] loop7: detected capacity change from 0 to 32768
[  572.334534][T16054] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  572.342919][T16054] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  572.365001][T16054] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[  572.381764][ T5921] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  572.388586][ T5921] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  572.456558][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  572.484486][ T5921] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 95ms
[  572.512792][ T5921] gfs2: fsid=syz:syz.0: jid=0: Done
[  572.518062][T16054] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  573.772273][ T6022] nci: nci_ntf_packet: unknown ntf opcode 0x27
[  574.016624][T16115] loop4: detected capacity change from 0 to 1024
[  574.046435][T16115] EXT4-fs: Ignoring removed i_version option
[  574.067895][T16115] EXT4-fs: Ignoring removed nobh option
[  574.105196][T16115] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  574.173753][   T30] audit: type=1800 audit(574.151:159): pid=16115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3323" name="file1" dev="loop4" ino=15 res=0 errno=0
[  574.545815][   T52] Bluetooth: hci0: command 0x1407 tx timeout
[  575.031022][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  575.413827][T16153] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3337'.
[  580.370759][T16233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3370'.
[  580.651049][T16234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3370'.
[  581.473634][T16252] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  581.631620][T16257] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3380'.
[  582.512149][T16257] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  584.936473][ T6026] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[  585.090426][ T5827] Bluetooth: hci1: command 0x0406 tx timeout
[  585.120547][ T6026] usb 8-1: Using ep0 maxpacket: 32
[  585.132704][ T6026] usb 8-1: config 0 has an invalid interface number: 51 but max is 0
[  585.141529][ T6026] usb 8-1: config 0 has no interface number 0
[  585.182839][ T6026] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  585.202811][ T6026] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  585.219351][ T6026] usb 8-1: Product: syz
[  585.230735][ T6026] usb 8-1: Manufacturer: syz
[  585.235358][ T6026] usb 8-1: SerialNumber: syz
[  585.256645][ T6026] usb 8-1: config 0 descriptor??
[  585.294006][ T6026] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  585.431827][T16320] fuse: Bad value for 'fd'
[  585.560532][ T6026] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  585.590586][ T6026] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  585.966410][T16325] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  586.012469][    C0] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71
[  586.020758][ T5866] usb 8-1: USB disconnect, device number 16
[  586.041444][ T5866] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  586.063901][ T5866] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  586.096734][ T5866] quatech2 8-1:0.51: device disconnected
[  586.398359][T16330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3410'.
[  586.432812][ T5982] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  586.432963][T16330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3410'.
[  586.445499][ T5982] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  586.469589][ T5982] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  586.478681][ T5982] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  587.717419][T16343] loop7: detected capacity change from 0 to 512
[  587.818945][T16343] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  588.436493][T16357] ip6erspan0: entered promiscuous mode
[  588.802722][ T6979] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  588.893588][    C1] vkms_vblank_simulate: vblank timer overrun
[  589.438917][T16372] Bluetooth: Invalid esc byte 0xe8
[  589.801373][ T5921] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  589.970336][ T5921] usb 9-1: Using ep0 maxpacket: 8
[  589.985115][ T5921] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  590.005339][ T5921] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  590.047860][ T5921] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  590.082244][ T5921] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  590.083440][T16387] loop4: detected capacity change from 0 to 4096
[  590.111376][T16390] netlink: 'syz.1.3432': attribute type 4 has an invalid length.
[  590.126403][ T5921] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  590.166096][ T5921] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  590.168622][T16387] ntfs3(loop4): ino=1a, mi_enum_attr
[  590.195159][T16390] netlink: 'syz.1.3432': attribute type 4 has an invalid length.
[  590.201793][T16387] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  590.328981][T16395] overlayfs: failed to clone upperpath
[  590.436109][ T5921] usb 9-1: GET_CAPABILITIES returned 0
[  590.449243][ T5921] usbtmc 9-1:16.0: can't read capabilities
[  590.675397][ T6026] usb 9-1: USB disconnect, device number 5
[  591.789618][T16433] netlink: 'syz.8.3449': attribute type 1 has an invalid length.
[  591.807044][T16433] netlink: 128 bytes leftover after parsing attributes in process `syz.8.3449'.
[  591.851956][T16433] netlink: 'syz.8.3449': attribute type 2 has an invalid length.
[  591.862180][T16433] netlink: 'syz.8.3449': attribute type 1 has an invalid length.
[  592.170784][ T6023] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  592.631962][T16454] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3456'.
[  592.676647][T16454] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3456'.
[  592.699533][T16451] loop7: detected capacity change from 0 to 2048
[  592.728457][T16457] netlink: 'syz.8.3458': attribute type 1 has an invalid length.
[  592.864246][T16451] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found
[  592.955237][T16451] UDF-fs: Scanning with blocksize 512 failed
[  592.964216][T16461] bond1: (slave geneve2): making interface the new active one
[  592.981414][T16461] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  593.002638][ T6023] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  593.024515][ T6023] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  593.055042][T16451] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  593.174887][T16467] overlayfs: failed to clone upperpath
[  593.184962][ T6016] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  593.212192][ T6016] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  593.528404][T16449] UDF-fs: warning (device loop7): udf_truncate_tail_extent: Too long extent after EOF in inode 818: i_size: 134220898 lbcount: 134222848 extent 0+133657600
[  593.600412][T16449] UDF-fs: error (device loop7): udf_truncate_tail_extent: Extent after EOF in inode 818
[  594.450001][ T6017] kworker/u8:49: attempt to access beyond end of device
[  594.450001][ T6017] loop7: rw=1, sector=2076, nr_sectors = 2 limit=2048
[  594.510272][ T6017] Buffer I/O error on dev loop7, logical block 1038, lost async page write
[  594.520942][ T6017] kworker/u8:49: attempt to access beyond end of device
[  594.520942][ T6017] loop7: rw=1, sector=2078, nr_sectors = 2 limit=2048
[  594.535640][ T6017] Buffer I/O error on dev loop7, logical block 1039, lost async page write
[  594.567923][ T6017] kworker/u8:49: attempt to access beyond end of device
[  594.567923][ T6017] loop7: rw=1, sector=2078, nr_sectors = 2 limit=2048
[  594.607828][ T6017] Buffer I/O error on dev loop7, logical block 1039, lost async page write
[  594.658855][ T6017] kworker/u8:49: attempt to access beyond end of device
[  594.658855][ T6017] loop7: rw=1, sector=2080, nr_sectors = 2 limit=2048
[  594.672563][ T6017] Buffer I/O error on dev loop7, logical block 1040, lost async page write
[  594.703738][ T6017] kworker/u8:49: attempt to access beyond end of device
[  594.703738][ T6017] loop7: rw=1, sector=2080, nr_sectors = 2 limit=2048
[  594.717539][ T6017] Buffer I/O error on dev loop7, logical block 1040, lost async page write
[  594.726245][ T6017] kworker/u8:49: attempt to access beyond end of device
[  594.726245][ T6017] loop7: rw=1, sector=2082, nr_sectors = 2 limit=2048
[  594.757659][ T6017] Buffer I/O error on dev loop7, logical block 1041, lost async page write
[  594.770771][ T6017] kworker/u8:49: attempt to access beyond end of device
[  594.770771][ T6017] loop7: rw=1, sector=2082, nr_sectors = 2 limit=2048
[  594.794585][ T6017] Buffer I/O error on dev loop7, logical block 1041, lost async page write
[  594.812275][ T6017] kworker/u8:49: attempt to access beyond end of device
[  594.812275][ T6017] loop7: rw=1, sector=2084, nr_sectors = 2 limit=2048
[  594.830378][ T6017] Buffer I/O error on dev loop7, logical block 1042, lost async page write
[  594.843757][ T6017] kworker/u8:49: attempt to access beyond end of device
[  594.843757][ T6017] loop7: rw=1, sector=2084, nr_sectors = 2 limit=2048
[  594.882449][ T6017] Buffer I/O error on dev loop7, logical block 1042, lost async page write
[  594.891341][ T6017] kworker/u8:49: attempt to access beyond end of device
[  594.891341][ T6017] loop7: rw=1, sector=2086, nr_sectors = 2 limit=2048
[  594.898869][T16502] fuse: Bad value for 'fd'
[  594.905108][ T6017] Buffer I/O error on dev loop7, logical block 1043, lost async page write
[  595.122377][T16505] loop8: detected capacity change from 0 to 4096
[  595.418782][T16513] loop4: detected capacity change from 0 to 512
[  595.454373][T16513] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  595.486734][T16513] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.3481: bad orphan inode 131083
[  595.507018][T16518] ipip0: entered promiscuous mode
[  595.524998][T16513] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  595.541588][T16515] loop8: detected capacity change from 0 to 2048
[  595.581644][T16515] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found
[  595.629104][T16515] UDF-fs: Scanning with blocksize 512 failed
[  595.732002][T16515] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  595.832679][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  595.970561][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  596.590581][T16530] loop7: detected capacity change from 0 to 65536
[  596.651374][T16514] UDF-fs: warning (device loop8): udf_truncate_tail_extent: Too long extent after EOF in inode 818: i_size: 134220898 lbcount: 134222848 extent 0+133838848
[  596.670357][T16530] XFS (loop7): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  596.679896][T16514] UDF-fs: error (device loop8): udf_truncate_tail_extent: Extent after EOF in inode 818
[  596.724747][T16530] XFS (loop7): Ending clean mount
[  596.951688][ T6023] XFS (loop7): Metadata CRC error detected at xfs_agf_read_verify+0x139/0x1e0, xfs_agf block 0x1 
[  597.003742][ T6023] XFS (loop7): Unmount and run xfs_repair
[  597.030728][ T6023] XFS (loop7): First 128 bytes of corrupted metadata buffer:
[  597.038262][ T6023] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  597.060292][ T6023] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  597.078152][ T6023] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  597.117849][ T6023] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  597.139777][ T6023] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  597.159640][ T6023] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  597.183159][ T6023] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  597.223831][ T6023] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  597.253366][ T6023] XFS (loop7): metadata I/O error in "xfs_read_agf+0x290/0x560" at daddr 0x1 len 1 error 74
[  597.289254][ T6023] XFS (loop7): page discard on page ffffea0001276e00, inode 0x29, pos 0.
[  597.330087][ T6023] XFS (loop7): Metadata CRC error detected at xfs_agf_read_verify+0x139/0x1e0, xfs_agf block 0x1 
[  597.373377][ T6023] XFS (loop7): Unmount and run xfs_repair
[  597.379215][ T6023] XFS (loop7): First 128 bytes of corrupted metadata buffer:
[  597.451975][ T6023] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  597.500569][ T6023] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  597.531395][ T6023] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  597.564784][ T6023] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  597.592814][ T6023] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  597.622889][ T6023] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  597.646788][ T6023] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  597.657784][ T6023] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  597.689849][ T6023] XFS (loop7): metadata I/O error in "xfs_read_agf+0x290/0x560" at daddr 0x1 len 1 error 74
[  597.723024][ T6023] XFS (loop7): page discard on page ffffea00012153c0, inode 0x26, pos 1024.
[  597.814401][ T6026] loop7: writeback error on inode 38, offset 0, sector 22
[  597.906071][ T6017] XFS (loop7): Metadata CRC error detected at xfs_agf_read_verify+0x139/0x1e0, xfs_agf block 0x1 
[  597.968049][ T6017] XFS (loop7): Unmount and run xfs_repair
[  597.980242][ T6017] XFS (loop7): First 128 bytes of corrupted metadata buffer:
[  597.999878][ T6017] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  598.018176][ T6017] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  598.040755][ T6017] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  598.049732][ T6017] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  598.096920][ T6017] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  598.116466][ T6017] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  598.160286][ T6017] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  598.198250][ T6017] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  598.218507][ T6017] XFS (loop7): metadata I/O error in "xfs_read_agf+0x290/0x560" at daddr 0x1 len 1 error 74
[  598.235922][ T6017] XFS (loop7): page discard on page ffffea0001accc00, inode 0x29, pos 32768.
[  598.267600][ T6017] XFS (loop7): Metadata CRC error detected at xfs_agf_read_verify+0x139/0x1e0, xfs_agf block 0x1 
[  598.278783][ T6017] XFS (loop7): Unmount and run xfs_repair
[  598.284709][ T6017] XFS (loop7): First 128 bytes of corrupted metadata buffer:
[  598.303010][ T6017] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  598.312846][ T6017] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  598.322178][ T6017] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  598.333310][ T6017] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  598.342383][ T6017] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  598.351584][ T6017] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  598.360797][ T6017] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  598.369782][ T6017] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  598.390367][ T6017] XFS (loop7): metadata I/O error in "xfs_read_agf+0x290/0x560" at daddr 0x1 len 1 error 74
[  598.417604][T16572] overlayfs: failed to clone upperpath
[  598.423422][ T6017] XFS (loop7): page discard on page ffffea0001276d80, inode 0x29, pos 49152.
[  598.450998][ T6017] XFS (loop7): Metadata CRC error detected at xfs_agf_read_verify+0x139/0x1e0, xfs_agf block 0x1 
[  598.485796][ T6017] XFS (loop7): Unmount and run xfs_repair
[  598.487471][T16574] loop4: detected capacity change from 0 to 2048
[  598.500222][ T6017] XFS (loop7): First 128 bytes of corrupted metadata buffer:
[  598.685245][T16574] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  598.703519][T16574] UDF-fs: Scanning with blocksize 512 failed
[  598.742728][T16574] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  598.831023][T16565] loop8: detected capacity change from 0 to 32768
[  598.838025][ T6017] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  598.869774][ T6017] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  598.890218][ T6017] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  598.910733][T16576] netlink: 277 bytes leftover after parsing attributes in process `syz.6.3502'.
[  598.950248][ T6017] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  598.996008][ T6017] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  599.038311][T16565]  loop8: p1 p3 < >
[  599.053434][ T6017] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  599.089331][ T6017] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  599.118596][ T6017] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  599.173488][ T6017] XFS (loop7): metadata I/O error in "xfs_read_agf+0x290/0x560" at daddr 0x1 len 1 error 74
[  599.203020][ T6017] XFS (loop7): page discard on page ffffea0001fdae80, inode 0x29, pos 57344.
[  599.224156][T16573] UDF-fs: warning (device loop4): udf_truncate_tail_extent: Too long extent after EOF in inode 818: i_size: 134220898 lbcount: 134222848 extent 0+133659648
[  599.246248][T16568] loop1: detected capacity change from 0 to 32768
[  599.273504][ T6017] XFS (loop7): Metadata CRC error detected at xfs_agf_read_verify+0x139/0x1e0, xfs_agf block 0x1 
[  599.284796][T16568] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3500 (16568)
[  599.308119][ T6017] XFS (loop7): Unmount and run xfs_repair
[  599.314292][T16573] UDF-fs: error (device loop4): udf_truncate_tail_extent: Extent after EOF in inode 818
[  599.325052][ T6017] XFS (loop7): First 128 bytes of corrupted metadata buffer:
[  599.339151][ T6017] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  599.410422][ T6017] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  599.430811][T16568] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  599.431406][ T6017] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  599.470554][T16568] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  599.480286][ T6017] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  599.536038][ T6017] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  599.563575][ T6023] bio_check_eod: 208 callbacks suppressed
[  599.563613][ T6023] kworker/u8:55: attempt to access beyond end of device
[  599.563613][ T6023] loop4: rw=1, sector=2094, nr_sectors = 2 limit=2048
[  599.585936][ T6017] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  599.609481][ T6017] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  599.637638][ T6017] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  599.667260][ T6023] buffer_io_error: 206 callbacks suppressed
[  599.667296][ T6023] Buffer I/O error on dev loop4, logical block 1047, lost async page write
[  599.705950][ T6023] kworker/u8:55: attempt to access beyond end of device
[  599.705950][ T6023] loop4: rw=1, sector=2094, nr_sectors = 2 limit=2048
[  599.725825][ T6017] XFS (loop7): metadata I/O error in "xfs_read_agf+0x290/0x560" at daddr 0x1 len 1 error 74
[  599.775653][ T6017] XFS (loop7): page discard on page ffffea0001cca040, inode 0x29, pos 61440.
[  599.785079][ T6023] Buffer I/O error on dev loop4, logical block 1047, lost async page write
[  599.796192][ T6023] kworker/u8:55: attempt to access beyond end of device
[  599.796192][ T6023] loop4: rw=1, sector=2094, nr_sectors = 2 limit=2048
[  599.821613][ T6017] XFS (loop7): Metadata CRC error detected at xfs_agf_read_verify+0x139/0x1e0, xfs_agf block 0x1 
[  599.839411][ T6023] Buffer I/O error on dev loop4, logical block 1047, lost async page write
[  599.841023][T16568] BTRFS info (device loop1): enabling ssd optimizations
[  599.848428][ T6017] XFS (loop7): Unmount and run xfs_repair
[  599.860392][ T6023] kworker/u8:55: attempt to access beyond end of device
[  599.860392][ T6023] loop4: rw=1, sector=2096, nr_sectors = 2 limit=2048
[  599.862345][ T6017] XFS (loop7): First 128 bytes of corrupted metadata buffer:
[  599.883150][ T6017] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  599.892301][ T6017] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  599.901739][ T6017] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  599.910722][ T6017] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  599.919622][ T6017] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  599.928615][ T6017] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  599.937612][ T6017] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  599.946558][ T6017] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  599.955551][ T6017] XFS (loop7): metadata I/O error in "xfs_read_agf+0x290/0x560" at daddr 0x1 len 1 error 74
[  599.964974][T16568] BTRFS info (device loop1): turning on async discard
[  599.965973][ T6023] Buffer I/O error on dev loop4, logical block 1048, lost async page write
[  600.000542][ T6023] kworker/u8:55: attempt to access beyond end of device
[  600.000542][ T6023] loop4: rw=1, sector=2096, nr_sectors = 2 limit=2048
[  600.010585][ T6017] XFS (loop7): page discard on page ffffea00011d4300, inode 0x26, pos 4096.
[  600.015413][ T6023] Buffer I/O error on dev loop4, logical block 1048, lost async page write
[  600.032159][ T6023] kworker/u8:55: attempt to access beyond end of device
[  600.032159][ T6023] loop4: rw=1, sector=2096, nr_sectors = 2 limit=2048
[  600.033379][T16568] BTRFS info (device loop1): enabling free space tree
[  600.045950][ T6023] Buffer I/O error on dev loop4, logical block 1048, lost async page write
[  600.046131][ T6023] kworker/u8:55: attempt to access beyond end of device
[  600.046131][ T6023] loop4: rw=1, sector=2098, nr_sectors = 2 limit=2048
[  600.094627][ T6017] XFS (loop7): Metadata CRC error detected at xfs_agf_read_verify+0x139/0x1e0, xfs_agf block 0x1 
[  600.110320][ T6023] Buffer I/O error on dev loop4, logical block 1049, lost async page write
[  600.126021][ T6017] XFS (loop7): Unmount and run xfs_repair
[  600.129496][ T6023] kworker/u8:55: attempt to access beyond end of device
[  600.129496][ T6023] loop4: rw=1, sector=2098, nr_sectors = 2 limit=2048
[  600.146455][ T6017] XFS (loop7): First 128 bytes of corrupted metadata buffer:
[  600.180335][ T6017] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  600.210002][ T6017] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  600.224161][ T6023] Buffer I/O error on dev loop4, logical block 1049, lost async page write
[  600.239997][ T6017] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  600.254002][ T6023] kworker/u8:55: attempt to access beyond end of device
[  600.254002][ T6023] loop4: rw=1, sector=2098, nr_sectors = 2 limit=2048
[  600.271870][ T6017] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  600.304802][ T6017] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  600.320586][ T6023] Buffer I/O error on dev loop4, logical block 1049, lost async page write
[  600.329507][ T6023] kworker/u8:55: attempt to access beyond end of device
[  600.329507][ T6023] loop4: rw=1, sector=2100, nr_sectors = 2 limit=2048
[  600.345964][ T6017] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  600.370307][ T6023] Buffer I/O error on dev loop4, logical block 1050, lost async page write
[  600.410281][ T6017] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  600.441458][ T6017] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  600.470261][ T6017] XFS (loop7): metadata I/O error in "xfs_read_agf+0x290/0x560" at daddr 0x1 len 1 error 74
[  600.502857][ T6017] XFS (loop7): page discard on page ffffea0001a0c700, inode 0x26, pos 8192.
[  600.565277][ T6017] XFS (loop7): Metadata CRC error detected at xfs_agf_read_verify+0x139/0x1e0, xfs_agf block 0x1 
[  600.590258][ T6017] XFS (loop7): Unmount and run xfs_repair
[  600.596072][ T6017] XFS (loop7): First 128 bytes of corrupted metadata buffer:
[  600.665033][ T6017] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  600.685380][T16601] veth0_to_bridge: entered promiscuous mode
[  600.695252][ T6017] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  600.730263][ T6017] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  600.756001][T16601] vlan2: entered allmulticast mode
[  600.765508][ T6017] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  600.805402][ T6017] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  600.835446][ T6017] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  600.860305][ T6017] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  600.911168][ T6017] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  600.941237][ T6017] XFS (loop7): metadata I/O error in "xfs_read_agf+0x290/0x560" at daddr 0x1 len 1 error 74
[  601.015475][ T6017] XFS (loop7): page discard on page ffffea0001accd00, inode 0x26, pos 16384.
[  601.059428][ T6017] XFS (loop7): Metadata CRC error detected at xfs_agf_read_verify+0x139/0x1e0, xfs_agf block 0x1 
[  601.100214][ T6017] XFS (loop7): Unmount and run xfs_repair
[  601.148579][ T6017] XFS (loop7): First 128 bytes of corrupted metadata buffer:
[  601.180294][ T6017] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  601.212074][ T6017] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  601.253336][ T6017] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  601.280224][ T6017] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  601.294526][T16600] veth0_to_bridge: left promiscuous mode
[  601.331131][ T6017] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  601.350585][ T6017] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  601.359496][ T6017] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  601.412105][ T6017] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  601.441838][ T6017] XFS (loop7): metadata I/O error in "xfs_read_agf+0x290/0x560" at daddr 0x1 len 1 error 74
[  601.470712][ T6017] XFS (loop7): page discard on page ffffea0001acce00, inode 0x26, pos 32768.
[  601.515026][ T6017] XFS (loop7): Metadata CRC error detected at xfs_agf_read_verify+0x139/0x1e0, xfs_agf block 0x1 
[  601.580595][ T6017] XFS (loop7): Unmount and run xfs_repair
[  601.586420][ T6017] XFS (loop7): First 128 bytes of corrupted metadata buffer:
[  601.630334][ T6017] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  601.639281][ T6017] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  601.682936][ T6017] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  601.713473][ T6017] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  601.750252][ T6017] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  601.778727][ T6017] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  601.817888][ T6017] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  601.863966][ T6017] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  601.950258][ T6017] XFS (loop7): Metadata CRC error detected at xfs_agf_read_verify+0x139/0x1e0, xfs_agf block 0x1 
[  601.999598][ T6017] XFS (loop7): Unmount and run xfs_repair
[  602.006636][ T6017] XFS (loop7): First 128 bytes of corrupted metadata buffer:
[  602.049259][ T6017] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  602.070468][ T6017] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  602.100013][ T6017] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  602.119041][T15439] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  602.169885][ T6017] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  602.212776][ T6017] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  602.260247][ T6017] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  602.269192][ T6017] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  602.286323][T16615] loop8: detected capacity change from 0 to 4096
[  602.302317][ T6017] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  602.330722][ T6017] xfs_discard_folio: 1 callbacks suppressed
[  602.330755][ T6017] XFS (loop7): page discard on page ffffea00010dfe00, inode 0x26, pos 57344.
[  602.347240][ T6017] XFS (loop7): Metadata CRC error detected at xfs_agf_read_verify+0x139/0x1e0, xfs_agf block 0x1 
[  602.359419][ T6017] XFS (loop7): Unmount and run xfs_repair
[  602.399627][ T6017] XFS (loop7): First 128 bytes of corrupted metadata buffer:
[  602.407309][ T6017] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  602.417270][ T6017] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  602.449108][ T6017] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  602.499447][ T6017] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  602.516276][ T6017] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  602.548027][ T6017] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  602.610214][ T6017] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  602.639754][ T6017] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  602.669514][ T6017] XFS (loop7): page discard on page ffffea00013c5f00, inode 0x26, pos 61440.
[  602.733450][ T6979] XFS (loop7): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  602.757657][ T6979] XFS (loop7): Uncorrected metadata errors detected; please run xfs_repair.
[  603.058993][T16624] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3517'.
[  603.113125][T16624] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3517'.
[  603.765689][T16633] loop1: detected capacity change from 0 to 32768
[  603.776714][T16633] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3514 (16633)
[  603.814711][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  603.822804][T16633] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  603.832997][T16633] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  603.950727][T16633] BTRFS info (device loop1): enabling ssd optimizations
[  603.957722][T16633] BTRFS info (device loop1): turning on async discard
[  603.965231][T16633] BTRFS info (device loop1): enabling free space tree
[  604.360951][   T30] audit: type=1800 audit(604.341:160): pid=16661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3514" name="file2" dev="loop1" ino=261 res=0 errno=0
[  606.504510][T15439] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  606.864053][   T10] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  606.944804][   T10] hid-generic 0000:0000:0000.001D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  607.780287][  T977] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  607.957979][  T977] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  607.984847][  T977] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  608.015868][  T977] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  608.051450][  T977] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  608.083080][  T977] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  608.111312][  T977] usb 9-1: config 0 descriptor??
[  608.593397][  T977] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0
[  608.955040][    C1] plantronics 0003:047F:FFFF.001E: hid_field_extract() called with n (132) > 32! (syz.4.3552)
[  609.170349][  T977] usb 9-1: USB disconnect, device number 6
[  609.183781][T16741] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3551'.
[  610.070402][ T5893] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  610.213888][T16760] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  610.261106][ T5893] usb 5-1: Using ep0 maxpacket: 8
[  610.306566][ T5893] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  610.362881][ T5893] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  610.438493][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  610.520003][ T5893] usb 5-1: config 0 descriptor??
[  610.578891][ T5893] gspca_main: vc032x-2.14.0 probing 046d:0892
[  610.677157][T16763] loop8: detected capacity change from 0 to 16
[  610.690299][T16763] erofs (device loop8): mounted with root inode @ nid 36.
[  610.991826][T16768] erofs (device loop8): corrupted dir block 72 @ nid 36
[  611.302907][T16770] loop7: detected capacity change from 0 to 2048
[  611.421074][T16770] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  612.021818][ T5893] usb 5-1: USB disconnect, device number 14
[  613.038235][T16786] loop1: detected capacity change from 0 to 2048
[  613.074796][T16784] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  613.120454][T16786] udf: Unexpected value for 'shortad'
[  614.157044][T16822] netlink: 'syz.0.3585': attribute type 1 has an invalid length.
[  614.288708][T16822] 8021q: adding VLAN 0 to HW filter on device bond5
[  614.496616][T16827] bond5: (slave gretap2): making interface the new active one
[  614.544132][T16827] bond5: (slave gretap2): Enslaving as an active interface with an up link
[  615.616757][T16861] netlink: 84 bytes leftover after parsing attributes in process `syz.7.3601'.
[  615.643117][T16861] netlink: 84 bytes leftover after parsing attributes in process `syz.7.3601'.
[  615.749891][T16865] loop8: detected capacity change from 0 to 512
[  615.770293][T16865] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  615.807170][T16865] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #15: comm syz.8.3602: inode has both inline data and extents flags
[  615.835399][T16865] EXT4-fs (loop8): Remounting filesystem read-only
[  615.862111][T16865] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  615.936064][T16865] netlink: 'syz.8.3602': attribute type 29 has an invalid length.
[  615.949290][T16865] netlink: 'syz.8.3602': attribute type 29 has an invalid length.
[  615.959815][T16865] netlink: 500 bytes leftover after parsing attributes in process `syz.8.3602'.
[  616.021381][T13979] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  616.607583][T16895] input: syz1 as /devices/virtual/input/input50
[  616.881392][T16902] loop4: detected capacity change from 0 to 512
[  616.908307][T16902] EXT4-fs: Ignoring removed oldalloc option
[  616.958787][T16902] EXT4-fs warning (device loop4): dx_probe:859: inode #2: comm syz.4.3620: dx entry: limit 1024 != root limit 124
[  616.973959][T16902] EXT4-fs warning (device loop4): dx_probe:933: inode #2: comm syz.4.3620: Corrupt directory, running e2fsck is recommended
[  617.408113][T16902] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  617.512326][T16902] EXT4-fs error (device loop4): ext4_iget_extra_inode:5074: inode #15: comm syz.4.3620: corrupted in-inode xattr: invalid ea_ino
[  617.559673][T16902] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.3620: couldn't read orphan inode 15 (err -117)
[  617.597272][T16902] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  617.703604][T16919] loop8: detected capacity change from 0 to 512
[  617.706328][ T6026] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[  617.726473][T16922] fuse: Bad value for 'fd'
[  617.740312][T16919] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  617.830625][T16906] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  617.898375][T16919] EXT4-fs error (device loop8): ext4_free_branches:1020: inode #16: comm syz.8.3625: invalid indirect mapped block 4294967295 (level 0)
[  617.898902][ T6026] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  617.927343][ T5866] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  617.940889][T16919] EXT4-fs error (device loop8): ext4_free_branches:1020: inode #16: comm syz.8.3625: invalid indirect mapped block 4294967295 (level 1)
[  618.005404][T16919] EXT4-fs (loop8): 1 orphan inode deleted
[  618.009634][ T6026] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  618.022116][ T6026] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  618.031435][ T6026] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  618.082457][ T5866] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[  618.093034][ T5866] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  618.110514][T16919] EXT4-fs (loop8): 1 truncate cleaned up
[  618.267687][T16911] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  618.282511][T16919] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  618.284577][ T5866] usb 5-1: config 220 has an invalid descriptor of length 48, skipping remainder of the config
[  618.336940][ T6026] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[  618.365951][ T5866] usb 5-1: config 220 has no interface number 2
[  618.389970][ T5866] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  618.420808][ T5866] usb 5-1: config 220 interface 0 has no altsetting 0
[  618.441687][ T5866] usb 5-1: config 220 interface 76 has no altsetting 0
[  618.449406][ T5866] usb 5-1: config 220 interface 1 has no altsetting 0
[  618.458817][T16919] EXT4-fs error (device loop8): htree_dirblock_to_tree:1077: inode #2: block 13: comm syz.8.3625: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0
[  618.461981][ T5866] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  618.512490][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  618.532097][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  618.600291][ T5866] usb 5-1: Product: syz
[  618.601580][ T5893] usb 8-1: USB disconnect, device number 17
[  618.635643][ T5866] usb 5-1: Manufacturer: syz
[  618.681609][ T5866] usb 5-1: SerialNumber: syz
[  618.711653][T13979] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  618.953846][ T5866] usb 5-1: selecting invalid altsetting 0
[  618.974067][ T5866] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  618.990379][ T5866] uvcvideo 5-1:220.0: No valid video chain found.
[  619.042365][ T5866] usb 5-1: selecting invalid altsetting 0
[  619.077492][ T5866] usbtest 5-1:220.1: probe with driver usbtest failed with error -22
[  619.116472][ T5866] usb 5-1: USB disconnect, device number 15
[  619.257173][ T5893] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  619.367346][T16942] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3634'.
[  619.397309][T16942] netlink: 'syz.0.3634': attribute type 20 has an invalid length.
[  619.421756][T16942] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3634'.
[  619.440646][ T5893] usb 9-1: Using ep0 maxpacket: 8
[  619.442010][T16942] netlink: 'syz.0.3634': attribute type 20 has an invalid length.
[  619.742116][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  619.765408][T16945] loop7: detected capacity change from 0 to 32768
[  619.774252][T16945] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.3635 (16945)
[  619.801402][ T5893] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  619.813289][T16945] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  619.823701][T16945] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm
[  619.840734][ T5893] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  619.851291][ T5893] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  619.874848][ T5893] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  619.905033][ T5893] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  619.914657][ T5893] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  619.994673][T16945] BTRFS info (device loop7): enabling ssd optimizations
[  620.001886][T16945] BTRFS info (device loop7): turning on async discard
[  620.008698][T16945] BTRFS info (device loop7): enabling free space tree
[  620.315945][ T5893] usb 9-1: GET_CAPABILITIES returned 0
[  620.323462][ T5893] usbtmc 9-1:16.0: can't read capabilities
[  620.329992][   T30] audit: type=1800 audit(620.291:161): pid=16976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3635" name="file2" dev="loop7" ino=261 res=0 errno=0
[  620.380768][T16974] ieee802154 phy1 wpan1: encryption failed: -22
[  620.444787][   T10] usb 9-1: USB disconnect, device number 7
[  620.952067][ T6979] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  622.208727][T17024] loop7: detected capacity change from 0 to 512
[  622.360528][T17024] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  622.405175][T17024] EXT4-fs (loop7): orphan cleanup on readonly fs
[  622.446197][T17024] Quota error (device loop7): v2_read_file_info: Block with free entry 1 out of range (1, 6).
[  622.541200][T17024] EXT4-fs warning (device loop7): ext4_enable_quotas:7176: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  622.618914][T17024] EXT4-fs (loop7): Cannot turn on quotas: error -117
[  622.630290][T17024] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #16: comm syz.7.3664: inode has both inline data and extents flags
[  622.653822][T17024] EXT4-fs error (device loop7): ext4_orphan_get:1395: comm syz.7.3664: couldn't read orphan inode 16 (err -117)
[  622.776236][T17024] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  623.138829][T17024] EXT4-fs error (device loop7): ext4_lookup:1787: inode #15: comm syz.7.3664: iget: bad i_size value: 360287970189639690
[  623.685637][ T9104] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  623.743442][T17060] loop8: detected capacity change from 0 to 4096
[  624.794311][ T6016] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  624.810008][ T6016] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  624.968041][ T6016] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  624.990642][ T6016] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  625.212840][ T6016] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  625.256059][ T6016] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  625.431980][T17123] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  625.459542][T17105] loop8: detected capacity change from 0 to 32768
[  625.472919][ T6016] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  625.514983][ T6016] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  625.534035][T17123] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  625.555914][T17123] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  625.574464][T17123] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  625.590911][T17123] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  625.595331][T17105] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  625.608491][T17123] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  625.620679][T17123] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  625.627850][T17123] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  625.750490][T17123] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  625.768163][T17123] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  626.081129][T13979] (syz-executor,13979,1):ocfs2_inode_is_valid_to_delete:947 ERROR: Skipping delete of system file 72
[  626.163821][T13979] ocfs2: Unmounting device (7,8) on (node local)
[  626.210641][ T6016] bridge_slave_1: left allmulticast mode
[  626.216351][ T6016] bridge_slave_1: left promiscuous mode
[  626.229204][ T6016] bridge0: port 2(bridge_slave_1) entered disabled state
[  626.271947][   T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  626.296238][   T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  626.307879][   T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  626.319335][   T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  626.334544][   T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  626.381520][ T6016] bridge_slave_0: left allmulticast mode
[  626.442742][ T6016] bridge_slave_0: left promiscuous mode
[  626.451648][ T6016] bridge0: port 1(bridge_slave_0) entered disabled state
[  626.975404][T17147] loop1: detected capacity change from 0 to 4096
[  627.458562][T17164] loop8: detected capacity change from 0 to 2048
[  627.536223][T17164] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  627.724801][  T977] libceph: connect (1)[c::]:6789 error -101
[  627.731342][  T977] libceph: mon0 (1)[c::]:6789 connect error
[  627.770160][T17164] EXT4-fs error (device loop8): ext4_validate_block_bitmap:440: comm syz.8.3703: bg 0: block 234: padding at end of block bitmap is not set
[  627.866745][T17164] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 258 with error 117
[  627.930240][T17164] EXT4-fs (loop8): This should not happen!! Data will be lost
[  627.930240][T17164] 
[  628.021022][  T977] libceph: connect (1)[c::]:6789 error -101
[  628.029394][  T977] libceph: mon0 (1)[c::]:6789 connect error
[  628.047776][T17160] loop1: detected capacity change from 0 to 32768
[  628.128354][T17160] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  628.143806][T13979] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  628.205433][T17160] XFS (loop1): Ending clean mount
[  628.369486][T15439] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  628.393463][   T52] Bluetooth: hci2: command tx timeout
[  628.444127][T17172] ceph: No mds server is up or the cluster is laggy
[  628.542541][  T977] libceph: connect (1)[c::]:6789 error -101
[  628.559149][  T977] libceph: mon0 (1)[c::]:6789 connect error
[  628.726222][ T6016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  628.777849][ T6016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  628.808046][ T6016] bond0 (unregistering): Released all slaves
[  629.243166][T17209] [U] 
[  629.247014][T17209] [U] K{�
[  629.312165][T17209] [U] �T �1��Š�F���Fˊ�`G�Jǘ�G���������O��/�MC�
[  629.322779][T17209] [U] T�ؖ/,�~�Ĝ��J���}8���'O1��"�7-΂JQ�K��W��Q�5C%"�H12��Y������X�`���ȼ`+��(�¿!(���Z'�TXLN�I�G�J����ݭ�P�~�7�!���"ب���(�5�OBܤ�̓J�
[  629.339069][T17209] [U] �K\&�}6�6�X�HX��Ե���.`�A�$�40|϶��9��ި����U��4��ĮVBZ��}�W�M�T���Q��ΦR�4��
[  629.351564][T17209] [U] ".H6��"�KÇ[����J�4��I�N��[Z(��C|T�]Z{��3�C=��X�Ԟ˅�4�W�)\T�XJ��SH{Q;̹���T��+���G��߮D�.˂�>Y����WUH�FN����HL]S�2���\G%�O�&Z)�К'�PUL�_<�	�ذ�Ү��`ұT��ޜ���;_�"(�U{7J��2X �/�'��C���I����H�C�ճ�V�=��AI�%W�ES� R��J�Μ���G��R��͡HI
���A��6-�D��V�� I"��Nƨ ��ASC~4���8C�*�OO5/ߜJ�~���W�VK+����3��Y)��M���V��YQƽ�DTR�
OTPEM%F��EJ�A5��T_-X~�^AAۂҘ�Q��
[  629.403656][T17209] [U] 	+�W�G?]��'A:	��)�
����' B>T���F/��<'�U�'��H�I�.+]E�.�-ɿ߿�%��>2`�^U�8F.�6��3��+�A�«���G3�P��6:�^0��T��V�'E�T����YC�N��Rϩ�N�PJ�;�Z����ۑ8!��\م�A�ʖ2��$е�­WI.��#��/BAI���`��4J��D�Y@�Z��GW�5˿B��ٜ�N�Y"VI2��
[  629.453537][T17209] [U] �T�_K5�T�YJ���9��C�$BR�L�NUL��9W���|�G�"ʃ�%�ڶ�C�؝���Q��
 ��3��Q��N^HP*��$	�.�7Yӱ�2�
[  629.488595][T17209] [U] �?���H��*����3͝7�ɍ�^#Q�"0~���(�O�XL�B�,'V��=���C�S���G�S��0�ւ��`���ه��=1(�ξ��P#�2DO*Ƀ
[  629.511419][T17209] [U] �S��G������GU��D-{���|&�����ѐ2��L�C_��!`��OZ֥�B��%>�RѶ�WχݎSS�H"�YA4�O.�Y��ď�RTԶ�B�[+/<<R�B����|ФE���۠�V96#���ͤʦJ�U�%
S851���ҩS�P��\��?Q�|L��QX�0�K�1ORɴ2��|��D�F���ِ��2ޔ���0��H�}C[/����PX^��O
[  629.550382][T17209] [U] �؛���(J�Л��M��XZ�;�����؝_����*3�3��5�\�XM��U��AK!AQ`��;FЕ�I+��VUH���M�J��Ʒ��Z�C��Z���)_ǟ�	ԑ�&�֡��A�XTO���_� ڼ�:���%��P���Cֲ�Y�+_�ܛ��}U�M��ƫC�!KJ�7пG��=B�
[  629.615193][T17209] [U] ٽ�F�%�XA��L�2R*G��VW��$��J	�A��F����+ؾ9̈́VI�֗�Kپ�1}_��
��%�R6��(]��/��ؐřYܺ��Hä���R G��RN/ܫ�#!�D����%���D��-{�$�VU��T���$:MTR�E�C1V�D~��];[�����SQ����(��E,X�8�"�
��G�D�ڵ2@T8���҃����T8.RC+�@�ʦ�P�U�
P����C���'ńYL�-SS1E?�7�O���^]����C�½H]�JKR]RKQ܆��ݣ޴OTC��X���4�N�	��&����ڋ��@�:M7�~�+�W*���XM��>>��{Q���
_�՝LX8�U����{�Z��ؐ)��7?�RR;�C�R�Hײڣ����1�>)�Mă‰�T���(��Aϝ�}9�ڥ�J*Mќ�ġ�'L��Q	�DW��ظ=��|Q�	�Æ�W;5��Ž�!�DB�X`ɧ�/��E�`ƦM��X��"�\
[  629.679436][T17209] [U] {;�ե�٘_�O2��)�O��.2�W2ʲ��Y���X_  HPϱ�S�D����:]�{�����Ƚ
[  629.689530][T17209] [U] I,�>�Ӥ	��5�1��^1�N4�OǶ�'0�?֒I�9W.�_.�W�A���V��`)�Z���C6GIӹ�A��XL[����F�*��O�W)+��'\N�
[K@����2�Ǭ���P"^`���	ؿ
[  629.705236][T17209] [U] 22��Ʃ�۩X?0;3U�
[  629.714460][T17209] [U] ޜ�
ƍ�SOBX�8�W�4��(�~/���K�U��ԖOQ�E+�G�-Y�GY_
�>V�����3.H�ә]̈́�2��)�D�,	��	�D~�D���+�W;A\�F
P��Ș|$��)�
KؐI���ɿK�YT^R���Ǚ���A=�#�ܜ	�Ϳ�AE��T�1��ݯ4K�.E"R�S|П�S���:��>P��R�"Z�ڭ���#P!�KY"�}��F�N84ܳ��Hޱ�O��S��̫%DLW�MƲ�
[  629.744907][T17209] [U] [�['XN�'�����,MR��/����1D=!D�X91B�
WǻR�LF���K̤Z��#�`̑L؛�˜��B~�M���
[  629.754894][T17209] [U] �L�>�сD+�D�����"5�ʍ�H3<���IR=F^�F�N��������V���D�OIO�:U�>�Y�
[  629.768038][T17209] [U] 'B�6V�20�ķǞ��׌�"T8�{9�FW��]���̩�
[  629.778601][T17209] [U] �72މ���U�C6����τI]8C��TۨQSK�Y��I��¹ �|V'�TV/��G�$[� 9KH`�"ܑ��}��[^=��0�]��%�̂T�����F�_V�4C���
[  629.791376][T17209] [U] �EC�
[  629.796099][T17209] [U] ���|���<��:^�3$7NK~�-�@��?��/MTL��۾�I�WȬ@G~T�{��P�+�$�JP|���I�RIӍPM� ��Y� ڔ8�T���V�����,�L�,�
[  629.822651][T17208] [U] �K�����)0���~ܳʪ�IP'�F�ҜZ��R���@B�]�5��{��ʼ�'�8�ƥF��UTQUD
ǩ�K;7ͪ0C[��Y���YC���ذM��L�8�T�͚�5���RX����W� X���OQHVI'8����L�
[  630.450286][   T52] Bluetooth: hci2: command tx timeout
[  630.639402][T17224] loop8: detected capacity change from 0 to 32768
[  630.718090][T17224] XFS (loop8): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  630.876168][T17224] XFS (loop8): Ending clean mount
[  630.908169][ T6016] veth0_macvtap: left promiscuous mode
[  630.943442][ T6016] veth1_vlan: left promiscuous mode
[  630.958987][ T6016] veth0_vlan: left promiscuous mode
[  631.047160][T17250] input: syz0 as /devices/virtual/input/input51
[  631.084065][T17224] XFS (loop8): User initiated shutdown received.
[  631.108053][T17224] XFS (loop8): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0xf5/0x190 (fs/xfs/xfs_fsops.c:466).  Shutting down filesystem.
[  631.141002][T17224] XFS (loop8): Please unmount the filesystem and rectify the problem(s)
[  631.142399][   T24] IPVS: starting estimator thread 0...
[  631.270921][T17254] IPVS: using max 21 ests per chain, 50400 per kthread
[  631.340402][T13979] XFS (loop8): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  632.531031][   T52] Bluetooth: hci2: command tx timeout
[  632.567103][ T6016] team0 (unregistering): Port device team_slave_0 removed
[  633.360382][T17140] chnl_net:caif_netlink_parms(): no params data found
[  633.897321][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  634.016392][T17140] bridge0: port 1(bridge_slave_0) entered blocking state
[  634.046489][T17140] bridge0: port 1(bridge_slave_0) entered disabled state
[  634.079219][T17140] bridge_slave_0: entered allmulticast mode
[  634.122733][T17140] bridge_slave_0: entered promiscuous mode
[  634.222276][T17140] bridge0: port 2(bridge_slave_1) entered blocking state
[  634.264232][T17140] bridge0: port 2(bridge_slave_1) entered disabled state
[  634.294706][T17140] bridge_slave_1: entered allmulticast mode
[  634.333654][T17140] bridge_slave_1: entered promiscuous mode
[  634.610438][   T52] Bluetooth: hci2: command tx timeout
[  634.698787][T17329] fanotify_encode_fh: 864 callbacks suppressed
[  634.698814][T17329] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  634.731231][T17140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  634.742482][T17329] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  634.749785][T17329] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  634.767917][T17140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  634.780804][T17329] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  634.793632][T17329] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  634.833238][T17329] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  634.850669][T17329] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  634.882371][T17329] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  634.930342][T17329] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  634.937485][T17329] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  635.587463][T17140] team0: Port device team_slave_0 added
[  635.623740][T17140] team0: Port device team_slave_1 added
[  635.733317][   T30] audit: type=1326 audit(635.711:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17347 comm="syz.4.3761" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb53a78efc9 code=0x0
[  635.805037][T17140] batman_adv: batadv0: Adding interface: batadv_slave_0
[  635.830791][T17140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  635.985174][T17140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  636.016173][T17140] batman_adv: batadv0: Adding interface: batadv_slave_1
[  636.025117][T17140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  636.130501][T17140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  636.323651][T17367] 9pnet_fd: Insufficient options for proto=fd
[  636.418178][T17140] hsr_slave_0: entered promiscuous mode
[  636.427756][T17140] hsr_slave_1: entered promiscuous mode
[  636.438087][T17140] debugfs: 'hsr0' already exists in 'hsr'
[  636.444338][T17140] Cannot create hsr debugfs directory
[  637.145262][T17378] loop8: detected capacity change from 0 to 512
[  637.175725][T17378] EXT4-fs: Ignoring removed oldalloc option
[  637.263679][T17378] EXT4-fs warning (device loop8): dx_probe:859: inode #2: comm syz.8.3769: dx entry: limit 1024 != root limit 124
[  637.281322][T17378] EXT4-fs warning (device loop8): dx_probe:933: inode #2: comm syz.8.3769: Corrupt directory, running e2fsck is recommended
[  637.338890][T17378] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117
[  637.360289][   T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  637.402989][T17378] EXT4-fs error (device loop8): ext4_iget_extra_inode:5074: inode #15: comm syz.8.3769: corrupted in-inode xattr: invalid ea_ino
[  637.444614][T17378] EXT4-fs error (device loop8): ext4_orphan_get:1395: comm syz.8.3769: couldn't read orphan inode 15 (err -117)
[  637.481110][T17378] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  637.605166][   T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  637.650724][   T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  637.659816][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  637.664321][T17140] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  637.694858][   T10] usb 5-1: Product: syz
[  637.705735][   T10] usb 5-1: Manufacturer: syz
[  637.710579][   T10] usb 5-1: SerialNumber: syz
[  637.736566][T17140] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  637.765636][T17140] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  637.785885][T17140] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  637.920255][   T24] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  638.132360][   T24] usb 9-1: config 220 has an invalid interface number: 76 but max is 2
[  638.140853][   T24] usb 9-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  638.149718][   T24] usb 9-1: config 220 has an invalid descriptor of length 48, skipping remainder of the config
[  638.171109][   T24] usb 9-1: config 220 has no interface number 2
[  638.177445][   T24] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  638.191033][   T24] usb 9-1: config 220 interface 0 has no altsetting 0
[  638.197833][   T24] usb 9-1: config 220 interface 76 has no altsetting 0
[  638.210567][   T24] usb 9-1: config 220 interface 1 has no altsetting 0
[  638.220350][   T24] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  638.229405][   T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  638.260472][   T24] usb 9-1: Product: syz
[  638.266015][   T24] usb 9-1: Manufacturer: syz
[  638.297858][   T24] usb 9-1: SerialNumber: syz
[  638.458976][T17140] 8021q: adding VLAN 0 to HW filter on device bond0
[  638.546227][T17140] 8021q: adding VLAN 0 to HW filter on device team0
[  638.592004][   T24] usb 9-1: selecting invalid altsetting 0
[  638.613196][   T24] uvcvideo 9-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  638.640095][T17095] bridge0: port 1(bridge_slave_0) entered blocking state
[  638.643013][   T24] uvcvideo 9-1:220.0: No valid video chain found.
[  638.647288][T17095] bridge0: port 1(bridge_slave_0) entered forwarding state
[  638.695496][   T24] usb 9-1: selecting invalid altsetting 0
[  638.719852][   T24] usbtest 9-1:220.1: probe with driver usbtest failed with error -22
[  638.739935][T17095] bridge0: port 2(bridge_slave_1) entered blocking state
[  638.747144][T17095] bridge0: port 2(bridge_slave_1) entered forwarding state
[  638.762192][   T24] usb 9-1: USB disconnect, device number 8
[  638.939719][   T10] cdc_ncm 5-1:1.0: failed to get mac address
[  638.952527][   T10] cdc_ncm 5-1:1.0: bind() failure
[  638.971287][   T10] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71
[  638.985153][   T10] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71
[  639.002536][   T10] usbtest 5-1:1.1: probe with driver usbtest failed with error -71
[  639.045520][   T10] usb 5-1: USB disconnect, device number 16
[  639.305625][T13979] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  639.545215][T17140] 8021q: adding VLAN 0 to HW filter on device batadv0
[  639.694512][T17140] veth0_vlan: entered promiscuous mode
[  639.732022][T17140] veth1_vlan: entered promiscuous mode
[  639.815381][T17140] veth0_macvtap: entered promiscuous mode
[  639.841155][T17140] veth1_macvtap: entered promiscuous mode
[  639.869972][T17140] batman_adv: batadv0: Interface activated: batadv_slave_0
[  639.901929][T17140] batman_adv: batadv0: Interface activated: batadv_slave_1
[  639.944810][ T6022] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  639.958628][ T6022] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  639.992696][ T6022] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  640.023620][ T6022] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  640.233454][T17443] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3788'.
[  640.263754][ T6022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  640.274809][ T6022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  640.413309][T17093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  640.435891][T17093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  641.668500][T17451] 9pnet_fd: p9_fd_create_tcp (17451): problem connecting socket to 127.0.0.1
[  642.573664][   T24] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0
[  642.610456][   T24] hid-generic 0000:0000:0000.001F: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  643.098415][T17475] loop1: detected capacity change from 0 to 32768
[  643.156668][T17475] XFS (loop1): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  643.253180][T17475] XFS (loop1): Ending clean mount
[  643.425050][T17475] XFS (loop1): User initiated shutdown received.
[  643.444343][T17475] XFS (loop1): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0xf5/0x190 (fs/xfs/xfs_fsops.c:466).  Shutting down filesystem.
[  643.505977][T17475] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[  644.028707][T15439] XFS (loop1): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  644.951795][T17536] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3820'.
[  645.000747][T17536] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3820'.
[  645.009813][T17536] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3820'.
[  645.098480][T17542] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3820'.
[  645.127274][T17542] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3820'.
[  645.140407][T17542] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3820'.
[  645.262493][T17548] loop8: detected capacity change from 0 to 8
[  645.350302][T17536] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3820'.
[  645.379795][T17548] SQUASHFS error: Failed to read block 0x6a4: -5
[  645.389880][T17536] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3820'.
[  645.420929][T17548] SQUASHFS error: Unable to read metadata cache entry [6a2]
[  645.449013][T17536] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3820'.
[  645.517613][T17542] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3820'.
[  645.548190][T17542] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3820'.
[  645.588872][T17558] loop1: detected capacity change from 0 to 1024
[  645.596605][T17542] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3820'.
[  645.607731][T17558] EXT4-fs: Ignoring removed oldalloc option
[  645.641463][T17558] EXT4-fs: Ignoring removed bh option
[  645.884618][T17558] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  646.140231][   T30] audit: type=1804 audit(646.101:163): pid=17558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3826" name="/newroot/120/file1/bus" dev="loop1" ino=18 res=1 errno=0
[  646.187449][T17536] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3820'.
[  646.220100][T17536] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3820'.
[  646.278816][T17536] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3820'.
[  646.529121][T17542] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3820'.
[  646.582827][T15439] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  646.587111][T17598] loop3: detected capacity change from 0 to 256
[  646.643576][T17598] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  646.716401][T17604] loop8: detected capacity change from 0 to 512
[  646.741113][T17604] EXT4-fs: Ignoring removed i_version option
[  646.747121][T17604] EXT4-fs: Ignoring removed bh option
[  646.805954][T17604] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  647.056926][T13979] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  647.316642][T17601] loop4: detected capacity change from 0 to 32768
[  647.335870][T17623] syz_tun: entered allmulticast mode
[  647.389857][T17601] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  647.411126][T17622] syz_tun: left allmulticast mode
[  647.482981][T17640] loop8: detected capacity change from 0 to 136
[  647.502095][T17601] XFS (loop4): Ending clean mount
[  647.558347][T17640] rock: directory entry would overflow storage
[  647.568437][T17640] rock: sig=0x4f50, size=4, remaining=3
[  647.589380][T17640] iso9660: Corrupted directory entry in block 2 of inode 1472
[  647.806732][ T5835] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  647.837228][T17647] netlink: 'syz.1.3846': attribute type 7 has an invalid length.
[  647.850485][T17647] netlink: 'syz.1.3846': attribute type 8 has an invalid length.
[  648.667430][T17666] loop1: detected capacity change from 0 to 256
[  651.611477][T17719] loop4: detected capacity change from 0 to 32768
[  651.642511][T17719] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3873 (17719)
[  651.698846][T17719] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  651.725108][T17719] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  651.900588][T17719] BTRFS info (device loop4): enabling ssd optimizations
[  651.937871][T17719] BTRFS info (device loop4): turning on async discard
[  651.950350][T17719] BTRFS info (device loop4): enabling free space tree
[  652.652764][T17758] loop8: detected capacity change from 0 to 32768
[  652.701987][T17758] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  652.712666][T17758] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  652.733199][T17758] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[  652.743118][  T977] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  652.749878][  T977] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  652.872150][ T6020] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared)
[  653.039852][  T977] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 289ms
[  653.080568][  T977] gfs2: fsid=syz:syz.0: jid=0: Done
[  653.086251][T17758] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  653.396426][ T5835] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  655.007476][T17790] loop4: detected capacity change from 0 to 1024
[  655.031756][T17790] EXT4-fs: Ignoring removed nobh option
[  655.120227][T17790] EXT4-fs: Ignoring removed bh option
[  655.126233][T17786] loop8: detected capacity change from 0 to 2048
[  655.186701][T17790] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  655.533820][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  655.926246][T17814] bridge_slave_0: default FDB implementation only supports local addresses
[  655.974397][T17814] __nla_validate_parse: 6 callbacks suppressed
[  655.974424][T17814] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3902'.
[  656.058976][T17814] bridge_slave_0: default FDB implementation only supports local addresses
[  656.205619][T17825] loop8: detected capacity change from 0 to 512
[  656.237867][T17825] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  656.257958][T17827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3908'.
[  656.325898][T17825] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  656.538489][T17838] loop1: detected capacity change from 0 to 1024
[  656.967346][T17838] EXT4-fs: Ignoring removed nobh option
[  656.998872][T17838] EXT4-fs: Ignoring removed bh option
[  657.072098][T17838] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  657.406547][T15439] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  657.532086][T13979] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  657.986818][T17870] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3918'.
[  658.868981][T17868] lec:lec_vcc_attach: copy from user failed for 28 bytes
[  659.452042][T17911] overlayfs: invalid redirect (./file1)
[  659.639383][ T5921] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  659.688782][ T5921] hid-generic 0000:0000:0000.0020: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  659.725175][T17920] sctp: [Deprecated]: syz.6.3942 (pid 17920) Use of int in max_burst socket option.
[  659.725175][T17920] Use struct sctp_assoc_value instead
[  659.830058][T17924] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3943'.
[  659.859475][T17924] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3943'.
[  659.917165][T17924] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3943'.
[  659.981894][T17932] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3943'.
[  660.022454][T17932] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3943'.
[  660.070300][T17932] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3943'.
[  660.121863][T17924] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3943'.
[  661.419071][T17967] lo speed is unknown, defaulting to 1000
[  661.438928][T17967] lo speed is unknown, defaulting to 1000
[  661.467481][T17967] lo speed is unknown, defaulting to 1000
[  661.489128][T17967] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  661.530976][T17967] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  661.582862][   T52] Bluetooth: hci4: command 0x0406 tx timeout
[  661.678354][T17967] lo speed is unknown, defaulting to 1000
[  661.787538][T17967] lo speed is unknown, defaulting to 1000
[  661.908473][T17967] lo speed is unknown, defaulting to 1000
[  661.927017][T17967] lo speed is unknown, defaulting to 1000
[  661.954652][T17967] lo speed is unknown, defaulting to 1000
[  661.963260][T17967] lo speed is unknown, defaulting to 1000
[  662.098097][T17985] __nla_validate_parse: 12 callbacks suppressed
[  662.098131][T17985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3965'.
[  664.578634][T18008] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3973'.
[  664.609697][T18008] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3973'.
[  664.670367][T18008] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3973'.
[  664.702162][T18011] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3974'.
[  664.926386][T18009] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3973'.
[  664.940375][T18009] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3973'.
[  664.949455][T18009] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3973'.
[  665.169998][T18009] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3973'.
[  665.215003][T18009] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3973'.
[  665.413707][T18029] netlink: 'syz.4.3980': attribute type 3 has an invalid length.
[  665.460622][T18029] netlink: 'syz.4.3980': attribute type 3 has an invalid length.
[  665.499080][T18029] netlink: 'syz.4.3980': attribute type 3 has an invalid length.
[  665.518312][T18029] netlink: 'syz.4.3980': attribute type 3 has an invalid length.
[  665.533862][T18029] netlink: 'syz.4.3980': attribute type 3 has an invalid length.
[  665.546139][T18029] netlink: 'syz.4.3980': attribute type 3 has an invalid length.
[  665.554137][T18029] netlink: 'syz.4.3980': attribute type 3 has an invalid length.
[  665.563806][T18029] netlink: 'syz.4.3980': attribute type 3 has an invalid length.
[  665.575039][T18029] netlink: 'syz.4.3980': attribute type 3 has an invalid length.
[  665.660392][T18029] netlink: 'syz.4.3980': attribute type 3 has an invalid length.
[  665.690993][T18034] tipc: Started in network mode
[  665.711351][T18034] tipc: Node identity 4, cluster identity 4711
[  665.729230][T18034] tipc: Node number set to 4
[  667.527450][T18057] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  667.534798][T18057] IPv6: NLM_F_CREATE should be set when creating new route
[  667.542144][T18057] IPv6: NLM_F_CREATE should be set when creating new route
[  667.549439][T18057] IPv6: NLM_F_CREATE should be set when creating new route
[  668.834099][T18081] batman_adv: batadv0: Adding interface: vxlan0
[  668.857132][T18081] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  668.919102][T18081] batman_adv: batadv0: Interface activated: vxlan0
[  668.933719][T17084] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  668.950455][T17084] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  669.293418][T18089] 8021q: adding VLAN 0 to HW filter on device bond3
[  669.301774][T17084] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  669.316376][T17084] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  669.413944][ T5827] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  669.423835][ T5827] Bluetooth: hci1: Injecting HCI hardware error event
[  669.433186][   T52] Bluetooth: hci1: hardware error 0x00
[  670.865107][T18131] fuse: Bad value for 'fd'
[  671.220554][T18138] fuse: Bad value for 'fd'
[  671.500684][   T52] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  671.873388][T18153] lo speed is unknown, defaulting to 1000
[  671.974884][T18163] syz.3.4034 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  672.828372][T18194] validate_nla: 42 callbacks suppressed
[  672.828399][T18194] netlink: 'syz.3.4044': attribute type 1 has an invalid length.
[  672.863507][T18194] netlink: 'syz.3.4044': attribute type 4 has an invalid length.
[  672.873603][T18194] __nla_validate_parse: 10 callbacks suppressed
[  672.873627][T18194] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.4044'.
[  672.919729][T18195] netlink: 'syz.3.4044': attribute type 1 has an invalid length.
[  672.968862][T18195] netlink: 'syz.3.4044': attribute type 4 has an invalid length.
[  673.042260][T18195] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.4044'.
[  673.064535][T18197] loop4: detected capacity change from 0 to 256
[  673.211808][T18199] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4046'.
[  673.236660][T18199] netem: invalid attributes len -8
[  673.261072][T18199] netem: change failed
[  673.306042][T18205] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4047'.
[  673.980287][   T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  674.150671][   T24] usb 5-1: Using ep0 maxpacket: 8
[  674.162443][   T24] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  674.181465][   T24] usb 5-1: config 0 has no interface number 0
[  674.187589][   T24] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  674.201425][T18231] overlayfs: failed to clone upperpath
[  674.239290][   T24] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  674.239342][   T24] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  674.239391][   T24] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  674.239460][   T24] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  674.239503][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  674.251206][   T24] usb 5-1: config 0 descriptor??
[  674.268330][   T24] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  674.481400][   T24] usb 5-1: USB disconnect, device number 17
[  674.495993][   T24] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[  674.556634][T18246] siw: device registration error -23
[  674.708873][T18250] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  674.757543][T18250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4065'.
[  675.791451][T18285] siw: device registration error -23
[  676.622997][ T6026] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  676.988818][ T6026] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  677.040223][ T6026] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  677.050025][ T6026] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  677.140192][ T6026] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  677.192680][ T6026] usb 5-1: config 0 descriptor??
[  677.635680][ T6026] cp2112 0003:10C4:EA90.0021: unknown main item tag 0x0
[  677.642811][ T6026] cp2112 0003:10C4:EA90.0021: unknown main item tag 0x0
[  677.664714][ T6026] cp2112 0003:10C4:EA90.0021: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0
[  677.833202][ T6026] cp2112 0003:10C4:EA90.0021: Part Number: 0x82 Device Version: 0xFE
[  678.525952][ T6026] cp2112 0003:10C4:EA90.0021: error reading lock byte: -71
[  678.556651][ T6026] usb 5-1: USB disconnect, device number 18
[  680.030537][T18343] loop1: detected capacity change from 0 to 512
[  680.037954][T18343] ext4: Unknown parameter 'obj_user'
[  680.175699][T18343] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  680.190581][T18343] overlayfs: failed to clone lowerpath
[  680.674217][T18356] 9pnet_fd: Insufficient options for proto=fd
[  681.334585][T18347] loop4: detected capacity change from 0 to 32768
[  681.674116][T18347] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4102 (18347)
[  681.721716][T18347] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  681.765676][T18347] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  681.836816][T18384] overlayfs: failed to clone upperpath
[  681.874468][T18347] BTRFS info (device loop4): setting nodatasum
[  681.902622][T18389] overlayfs: failed to clone upperpath
[  681.915318][T18347] BTRFS info (device loop4): setting nodatacow
[  681.944187][T18347] BTRFS info (device loop4): enabling ssd optimizations
[  682.095077][T18347] BTRFS info (device loop4): turning off barriers
[  682.104972][T18390] overlayfs: failed to resolve './file0': -2
[  682.112444][T18347] BTRFS info (device loop4): turning on async discard
[  682.119237][T18347] BTRFS info (device loop4): enabling free space tree
[  682.288392][T18393] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4113'.
[  682.328599][ T5835] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  683.081735][T18412] loop4: detected capacity change from 0 to 1024
[  683.101483][T18412] EXT4-fs: Ignoring removed oldalloc option
[  683.107894][T18412] EXT4-fs: Ignoring removed bh option
[  683.181494][T18412] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  683.359407][   T30] audit: type=1804 audit(683.331:164): pid=18412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.4117" name="/newroot/683/file1/bus" dev="loop4" ino=18 res=1 errno=0
[  684.606136][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  684.986786][T18439] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4129'.
[  687.582682][   T30] audit: type=1326 audit(686.761:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18484 comm="syz.3.4147" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa43418efc9 code=0x0
[  687.769475][   T30] audit: type=1326 audit(686.821:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18484 comm="syz.3.4147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43418efc9 code=0x7ffc0000
[  687.890309][   T30] audit: type=1326 audit(686.821:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18484 comm="syz.3.4147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43418efc9 code=0x7ffc0000
[  687.960627][   T30] audit: type=1326 audit(686.821:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18484 comm="syz.3.4147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa4341c1885 code=0x7ffc0000
[  688.011196][T18495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4151'.
[  688.021792][   T30] audit: type=1326 audit(686.821:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18484 comm="syz.3.4147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa4341c1885 code=0x7ffc0000
[  688.120568][   T30] audit: type=1326 audit(686.821:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18484 comm="syz.3.4147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa4341c1885 code=0x7ffc0000
[  688.207341][   T30] audit: type=1326 audit(686.821:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18484 comm="syz.3.4147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa4341c1885 code=0x7ffc0000
[  688.277172][   T30] audit: type=1326 audit(686.821:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18484 comm="syz.3.4147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa4341c1885 code=0x7ffc0000
[  688.332456][   T30] audit: type=1326 audit(686.821:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18484 comm="syz.3.4147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa4341c1885 code=0x7ffc0000
[  688.360766][   T30] kauditd_printk_skb: 56 callbacks suppressed
[  688.360790][   T30] audit: type=1326 audit(688.341:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18484 comm="syz.3.4147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa4341c1885 code=0x7ffc0000
[  688.543144][   T30] audit: type=1326 audit(688.371:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18484 comm="syz.3.4147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa43418efc9 code=0x7ffc0000
[  688.670241][   T30] audit: type=1326 audit(688.371:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18484 comm="syz.3.4147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa43418efc9 code=0x7ffc0000
[  688.818780][T18515] loop8: detected capacity change from 0 to 512
[  688.845788][T18515] EXT4-fs: Ignoring removed nobh option
[  688.880269][T18515] EXT4-fs: inline encryption not supported
[  688.920251][T18515] EXT4-fs (loop8): Test dummy encryption mode enabled
[  689.018064][T18515] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2
[  689.131984][T18515] EXT4-fs error (device loop8): ext4_free_branches:1020: inode #13: comm syz.8.4159: invalid indirect mapped block 2683928664 (level 1)
[  689.235297][T18515] EXT4-fs (loop8): Remounting filesystem read-only
[  689.345862][T18515] EXT4-fs (loop8): 1 truncate cleaned up
[  689.375624][T18515] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  691.866746][T18550] fuse: Bad value for 'fd'
[  692.205550][T18559] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  692.260635][T18559] overlayfs: failed to set xattr on upper
[  692.270355][T18559] overlayfs: ...falling back to redirect_dir=nofollow.
[  692.277628][T18559] overlayfs: ...falling back to uuid=null.
[  693.013670][T18575] overlayfs: orphan index entry (index/00fb2100017c6a49a24aec42d8821fc2dd16b0d4a12c30ff7d8403000000000000, ftype=8000, nlink=1)
[  694.046743][T18592] vivid-002: disconnect
[  694.656251][T18588] vivid-002: reconnect
[  695.006847][T18605] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4192'.
[  695.341345][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  695.463746][T18620] fuse: Bad value for 'fd'
[  695.560293][T18624] netlink: 165 bytes leftover after parsing attributes in process `syz.6.4200'.
[  695.637803][T18625] netlink: 165 bytes leftover after parsing attributes in process `syz.6.4200'.
[  696.396073][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807c32ec00: rx timeout, send abort
[  696.404868][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807c32ec00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[  697.635462][T18653] loop1: detected capacity change from 0 to 32768
[  697.846110][T18669] loop1: detected capacity change from 32768 to 0
[  697.846392][    C1] I/O error, dev loop1, sector 30728 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2
[  697.862457][    C1] lbmIODone: I/O error in JFS log
[  697.869383][T18653] ==================================================================
[  697.877477][T18653] BUG: KASAN: slab-use-after-free in lmLogInit+0x1722/0x1ae0
[  697.884880][T18653] Read of size 8 at addr ffff8880766d7718 by task syz.1.4210/18653
[  697.892776][T18653] 
[  697.895101][T18653] CPU: 0 UID: 0 PID: 18653 Comm: syz.1.4210 Not tainted syzkaller #0 PREEMPT(full) 
[  697.895143][T18653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  697.895164][T18653] Call Trace:
[  697.895178][T18653]  <TASK>
[  697.895196][T18653]  dump_stack_lvl+0x116/0x1f0
[  697.895255][T18653]  print_report+0xcd/0x630
[  697.895298][T18653]  ? srso_alias_return_thunk+0x5/0xfbef5
[  697.895339][T18653]  ? srso_alias_return_thunk+0x5/0xfbef5
[  697.895380][T18653]  ? __phys_addr+0xe8/0x180
[  697.895418][T18653]  ? lmLogInit+0x1722/0x1ae0
[  697.895460][T18653]  kasan_report+0xe0/0x110
[  697.895505][T18653]  ? lmLogInit+0x1722/0x1ae0
[  697.895553][T18653]  lmLogInit+0x1722/0x1ae0
[  697.895601][T18653]  ? __pfx_lmLogInit+0x10/0x10
[  697.895653][T18653]  ? srso_alias_return_thunk+0x5/0xfbef5
[  697.895694][T18653]  ? srso_alias_return_thunk+0x5/0xfbef5
[  697.895734][T18653]  ? lockdep_init_map_type+0x5c/0x280
[  697.895780][T18653]  ? srso_alias_return_thunk+0x5/0xfbef5
[  697.895824][T18653]  lmLogOpen+0x7f0/0x13c0
[  697.895871][T18653]  jfs_mount_rw+0x2e9/0x6f0
[  697.895913][T18653]  ? __pfx_jfs_mount_rw+0x10/0x10
[  697.895956][T18653]  ? srso_alias_return_thunk+0x5/0xfbef5
[  697.895997][T18653]  ? list_lru_count_node+0x41/0x80
[  697.896051][T18653]  ? srso_alias_return_thunk+0x5/0xfbef5
[  697.896092][T18653]  ? shrink_dcache_sb+0x287/0x350
[  697.896146][T18653]  ? __pfx_shrink_dcache_sb+0x10/0x10
[  697.896207][T18653]  jfs_reconfigure+0x91e/0xb90
[  697.896244][T18653]  reconfigure_super+0x450/0xb60
[  697.896283][T18653]  ? __pfx_jfs_reconfigure+0x10/0x10
[  697.896320][T18653]  path_mount+0x1a40/0x23a0
[  697.896369][T18653]  ? __pfx_path_mount+0x10/0x10
[  697.896413][T18653]  ? srso_alias_return_thunk+0x5/0xfbef5
[  697.896453][T18653]  ? kmem_cache_free+0x2d4/0x6c0
[  697.896487][T18653]  ? putname+0x154/0x1a0
[  697.896537][T18653]  ? srso_alias_return_thunk+0x5/0xfbef5
[  697.896578][T18653]  ? putname+0x154/0x1a0
[  697.896625][T18653]  ? __x64_sys_mount+0x293/0x310
[  697.896668][T18653]  __x64_sys_mount+0x293/0x310
[  697.896713][T18653]  ? __pfx___x64_sys_mount+0x10/0x10
[  697.896759][T18653]  ? srso_alias_return_thunk+0x5/0xfbef5
[  697.896805][T18653]  do_syscall_64+0xcd/0xfa0
[  697.896861][T18653]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  697.896896][T18653] RIP: 0033:0x7f74a438efc9
[  697.896923][T18653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  697.896957][T18653] RSP: 002b:00007f74a51f0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  697.896988][T18653] RAX: ffffffffffffffda RBX: 00007f74a45e5fa0 RCX: 00007f74a438efc9
[  697.897012][T18653] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000
[  697.897034][T18653] RBP: 00007f74a4411f91 R08: 0000000000000000 R09: 0000000000000000
[  697.897056][T18653] R10: 00000000001c0030 R11: 0000000000000246 R12: 0000000000000000
[  697.897077][T18653] R13: 00007f74a45e6038 R14: 00007f74a45e5fa0 R15: 00007ffdbbc2a2b8
[  697.897112][T18653]  </TASK>
[  697.897124][T18653] 
[  698.189434][T18653] Allocated by task 18653:
[  698.193843][T18653]  kasan_save_stack+0x33/0x60
[  698.198527][T18653]  kasan_save_track+0x14/0x30
[  698.203206][T18653]  __kasan_kmalloc+0xaa/0xb0
[  698.207797][T18653]  lmLogInit+0x40c/0x1ae0
[  698.212135][T18653]  lmLogOpen+0x7f0/0x13c0
[  698.216478][T18653]  jfs_mount_rw+0x2e9/0x6f0
[  698.220986][T18653]  jfs_reconfigure+0x91e/0xb90
[  698.225746][T18653]  reconfigure_super+0x450/0xb60
[  698.230686][T18653]  path_mount+0x1a40/0x23a0
[  698.235202][T18653]  __x64_sys_mount+0x293/0x310
[  698.239982][T18653]  do_syscall_64+0xcd/0xfa0
[  698.244512][T18653]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  698.250414][T18653] 
[  698.252723][T18653] Freed by task 18653:
[  698.256775][T18653]  kasan_save_stack+0x33/0x60
[  698.261458][T18653]  kasan_save_track+0x14/0x30
[  698.266143][T18653]  __kasan_save_free_info+0x3b/0x60
[  698.271368][T18653]  __kasan_slab_free+0x5f/0x80
[  698.276142][T18653]  kfree+0x2b8/0x6d0
[  698.280072][T18653]  lmLogInit+0x912/0x1ae0
[  698.284419][T18653]  lmLogOpen+0x7f0/0x13c0
[  698.288759][T18653]  jfs_mount_rw+0x2e9/0x6f0
[  698.293270][T18653]  jfs_reconfigure+0x91e/0xb90
[  698.298041][T18653]  reconfigure_super+0x450/0xb60
[  698.302984][T18653]  path_mount+0x1a40/0x23a0
[  698.307495][T18653]  __x64_sys_mount+0x293/0x310
[  698.312270][T18653]  do_syscall_64+0xcd/0xfa0
[  698.316794][T18653]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  698.322686][T18653] 
[  698.324998][T18653] The buggy address belongs to the object at ffff8880766d7700
[  698.324998][T18653]  which belongs to the cache kmalloc-192 of size 192
[  698.339051][T18653] The buggy address is located 24 bytes inside of
[  698.339051][T18653]  freed 192-byte region [ffff8880766d7700, ffff8880766d77c0)
[  698.352768][T18653] 
[  698.355083][T18653] The buggy address belongs to the physical page:
[  698.361479][T18653] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x766d7
[  698.370237][T18653] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  698.377339][T18653] page_type: f5(slab)
[  698.381325][T18653] raw: 00fff00000000000 ffff88813ffa63c0 ffffea0000a43080 dead000000000004
[  698.389911][T18653] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[  698.398482][T18653] page dumped because: kasan: bad access detected
[  698.404882][T18653] page_owner tracks the page as allocated
[  698.410583][T18653] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5835, tgid 5835 (syz-executor), ts 114881421736, free_ts 114871252569
[  698.430058][T18653]  post_alloc_hook+0x1c0/0x230
[  698.434858][T18653]  get_page_from_freelist+0x10a3/0x3a30
[  698.440435][T18653]  __alloc_frozen_pages_noprof+0x25f/0x2470
[  698.446327][T18653]  alloc_pages_mpol+0x1fb/0x550
[  698.451189][T18653]  new_slab+0x24a/0x360
[  698.455362][T18653]  ___slab_alloc+0xdc4/0x1ae0
[  698.460054][T18653]  __slab_alloc.constprop.0+0x63/0x110
[  698.465532][T18653]  __kmalloc_cache_noprof+0x477/0x780
[  698.470927][T18653]  netdevice_event+0x365/0x9d0
[  698.475706][T18653]  notifier_call_chain+0xbc/0x410
[  698.480751][T18653]  call_netdevice_notifiers_info+0xbe/0x140
[  698.486662][T18653]  netif_set_mac_address+0x36f/0x4a0
[  698.491972][T18653]  do_setlink.constprop.0+0x75f/0x4380
[  698.497460][T18653]  rtnl_newlink+0x1446/0x2000
[  698.502135][T18653]  rtnetlink_rcv_msg+0x95e/0xe90
[  698.507076][T18653]  netlink_rcv_skb+0x158/0x420
[  698.511845][T18653] page last free pid 44 tgid 44 stack trace:
[  698.517817][T18653]  __free_frozen_pages+0x7df/0x1160
[  698.523035][T18653]  vfree+0x1fd/0xb50
[  698.526937][T18653]  delayed_vfree_work+0x56/0x70
[  698.531796][T18653]  process_one_work+0x9cf/0x1b70
[  698.536747][T18653]  worker_thread+0x6c8/0xf10
[  698.541349][T18653]  kthread+0x3c5/0x780
[  698.545424][T18653]  ret_from_fork+0x675/0x7d0
[  698.550022][T18653]  ret_from_fork_asm+0x1a/0x30
[  698.554788][T18653] 
[  698.557095][T18653] Memory state around the buggy address:
[  698.562712][T18653]  ffff8880766d7600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  698.570768][T18653]  ffff8880766d7680: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  698.578827][T18653] >ffff8880766d7700: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  698.586902][T18653]                             ^
[  698.591749][T18653]  ffff8880766d7780: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  698.599805][T18653]  ffff8880766d7800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  698.607856][T18653] ==================================================================
[  698.717579][T18653] Disabling lock debugging due to kernel taint
[  698.745088][T18653] ==================================================================
[  698.753172][T18653] BUG: KASAN: slab-use-after-free in lmLogInit+0x1740/0x1ae0
[  698.760569][T18653] Read of size 8 at addr ffff8880766d7740 by task syz.1.4210/18653
[  698.768466][T18653] 
[  698.770797][T18653] CPU: 1 UID: 0 PID: 18653 Comm: syz.1.4210 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  698.770852][T18653] Tainted: [B]=BAD_PAGE
[  698.770866][T18653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  698.770889][T18653] Call Trace:
[  698.770901][T18653]  <TASK>
[  698.770916][T18653]  dump_stack_lvl+0x116/0x1f0
[  698.770984][T18653]  print_report+0xcd/0x630
[  698.771032][T18653]  ? srso_alias_return_thunk+0x5/0xfbef5
[  698.771078][T18653]  ? srso_alias_return_thunk+0x5/0xfbef5
[  698.771123][T18653]  ? __phys_addr+0xe8/0x180
[  698.771165][T18653]  ? lmLogInit+0x1740/0x1ae0
[  698.771212][T18653]  kasan_report+0xe0/0x110
[  698.771260][T18653]  ? lmLogInit+0x1740/0x1ae0
[  698.771312][T18653]  lmLogInit+0x1740/0x1ae0
[  698.771365][T18653]  ? __pfx_lmLogInit+0x10/0x10
[  698.771421][T18653]  ? srso_alias_return_thunk+0x5/0xfbef5
[  698.771466][T18653]  ? srso_alias_return_thunk+0x5/0xfbef5
[  698.771511][T18653]  ? lockdep_init_map_type+0x5c/0x280
[  698.771561][T18653]  ? srso_alias_return_thunk+0x5/0xfbef5
[  698.771609][T18653]  lmLogOpen+0x7f0/0x13c0
[  698.771660][T18653]  jfs_mount_rw+0x2e9/0x6f0
[  698.771706][T18653]  ? __pfx_jfs_mount_rw+0x10/0x10
[  698.771754][T18653]  ? srso_alias_return_thunk+0x5/0xfbef5
[  698.771799][T18653]  ? list_lru_count_node+0x41/0x80
[  698.771859][T18653]  ? srso_alias_return_thunk+0x5/0xfbef5
[  698.771903][T18653]  ? shrink_dcache_sb+0x287/0x350
[  698.771967][T18653]  ? __pfx_shrink_dcache_sb+0x10/0x10
[  698.772030][T18653]  jfs_reconfigure+0x91e/0xb90
[  698.772070][T18653]  reconfigure_super+0x450/0xb60
[  698.772113][T18653]  ? __pfx_jfs_reconfigure+0x10/0x10
[  698.772153][T18653]  path_mount+0x1a40/0x23a0
[  698.772206][T18653]  ? __pfx_path_mount+0x10/0x10
[  698.772255][T18653]  ? srso_alias_return_thunk+0x5/0xfbef5
[  698.772300][T18653]  ? kmem_cache_free+0x2d4/0x6c0
[  698.772338][T18653]  ? putname+0x154/0x1a0
[  698.772391][T18653]  ? srso_alias_return_thunk+0x5/0xfbef5
[  698.772435][T18653]  ? putname+0x154/0x1a0
[  698.772486][T18653]  ? __x64_sys_mount+0x293/0x310
[  698.772534][T18653]  __x64_sys_mount+0x293/0x310
[  698.772583][T18653]  ? __pfx___x64_sys_mount+0x10/0x10
[  698.772634][T18653]  ? srso_alias_return_thunk+0x5/0xfbef5
[  698.772685][T18653]  do_syscall_64+0xcd/0xfa0
[  698.772745][T18653]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  698.772782][T18653] RIP: 0033:0x7f74a438efc9
[  698.772811][T18653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  698.772848][T18653] RSP: 002b:00007f74a51f0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  698.772884][T18653] RAX: ffffffffffffffda RBX: 00007f74a45e5fa0 RCX: 00007f74a438efc9
[  698.772910][T18653] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000
[  698.772934][T18653] RBP: 00007f74a4411f91 R08: 0000000000000000 R09: 0000000000000000
[  698.772964][T18653] R10: 00000000001c0030 R11: 0000000000000246 R12: 0000000000000000
[  698.772988][T18653] R13: 00007f74a45e6038 R14: 00007f74a45e5fa0 R15: 00007ffdbbc2a2b8
[  698.773027][T18653]  </TASK>
[  698.773040][T18653] 
[  699.070856][T18653] Allocated by task 18653:
[  699.075265][T18653]  kasan_save_stack+0x33/0x60
[  699.079988][T18653]  kasan_save_track+0x14/0x30
[  699.084674][T18653]  __kasan_kmalloc+0xaa/0xb0
[  699.089364][T18653]  lmLogInit+0x40c/0x1ae0
[  699.093710][T18653]  lmLogOpen+0x7f0/0x13c0
[  699.098059][T18653]  jfs_mount_rw+0x2e9/0x6f0
[  699.102577][T18653]  jfs_reconfigure+0x91e/0xb90
[  699.107342][T18653]  reconfigure_super+0x450/0xb60
[  699.112289][T18653]  path_mount+0x1a40/0x23a0
[  699.116807][T18653]  __x64_sys_mount+0x293/0x310
[  699.121587][T18653]  do_syscall_64+0xcd/0xfa0
[  699.126110][T18653]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  699.132004][T18653] 
[  699.134312][T18653] Freed by task 18653:
[  699.138363][T18653]  kasan_save_stack+0x33/0x60
[  699.143049][T18653]  kasan_save_track+0x14/0x30
[  699.147729][T18653]  __kasan_save_free_info+0x3b/0x60
[  699.152952][T18653]  __kasan_slab_free+0x5f/0x80
[  699.157721][T18653]  kfree+0x2b8/0x6d0
[  699.161628][T18653]  lmLogInit+0x912/0x1ae0
[  699.165965][T18653]  lmLogOpen+0x7f0/0x13c0
[  699.170301][T18653]  jfs_mount_rw+0x2e9/0x6f0
[  699.174820][T18653]  jfs_reconfigure+0x91e/0xb90
[  699.179583][T18653]  reconfigure_super+0x450/0xb60
[  699.184529][T18653]  path_mount+0x1a40/0x23a0
[  699.189051][T18653]  __x64_sys_mount+0x293/0x310
[  699.193831][T18653]  do_syscall_64+0xcd/0xfa0
[  699.198362][T18653]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  699.204262][T18653] 
[  699.206577][T18653] The buggy address belongs to the object at ffff8880766d7700
[  699.206577][T18653]  which belongs to the cache kmalloc-192 of size 192
[  699.220626][T18653] The buggy address is located 64 bytes inside of
[  699.220626][T18653]  freed 192-byte region [ffff8880766d7700, ffff8880766d77c0)
[  699.234342][T18653] 
[  699.236652][T18653] The buggy address belongs to the physical page:
[  699.243049][T18653] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x766d7
[  699.251806][T18653] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  699.258911][T18653] page_type: f5(slab)
[  699.262897][T18653] raw: 00fff00000000000 ffff88813ffa63c0 ffffea0000a43080 dead000000000004
[  699.271484][T18653] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[  699.280057][T18653] page dumped because: kasan: bad access detected
[  699.286457][T18653] page_owner tracks the page as allocated
[  699.292158][T18653] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5835, tgid 5835 (syz-executor), ts 114881421736, free_ts 114871252569
[  699.311631][T18653]  post_alloc_hook+0x1c0/0x230
[  699.316514][T18653]  get_page_from_freelist+0x10a3/0x3a30
[  699.322086][T18653]  __alloc_frozen_pages_noprof+0x25f/0x2470
[  699.327983][T18653]  alloc_pages_mpol+0x1fb/0x550
[  699.332841][T18653]  new_slab+0x24a/0x360
[  699.337014][T18653]  ___slab_alloc+0xdc4/0x1ae0
[  699.341705][T18653]  __slab_alloc.constprop.0+0x63/0x110
[  699.347193][T18653]  __kmalloc_cache_noprof+0x477/0x780
[  699.352603][T18653]  netdevice_event+0x365/0x9d0
[  699.357384][T18653]  notifier_call_chain+0xbc/0x410
[  699.362416][T18653]  call_netdevice_notifiers_info+0xbe/0x140
[  699.368319][T18653]  netif_set_mac_address+0x36f/0x4a0
[  699.373631][T18653]  do_setlink.constprop.0+0x75f/0x4380
[  699.379115][T18653]  rtnl_newlink+0x1446/0x2000
[  699.383798][T18653]  rtnetlink_rcv_msg+0x95e/0xe90
[  699.388741][T18653]  netlink_rcv_skb+0x158/0x420
[  699.393505][T18653] page last free pid 44 tgid 44 stack trace:
[  699.399476][T18653]  __free_frozen_pages+0x7df/0x1160
[  699.404704][T18653]  vfree+0x1fd/0xb50
[  699.408617][T18653]  delayed_vfree_work+0x56/0x70
[  699.413482][T18653]  process_one_work+0x9cf/0x1b70
[  699.418436][T18653]  worker_thread+0x6c8/0xf10
[  699.423040][T18653]  kthread+0x3c5/0x780
[  699.427118][T18653]  ret_from_fork+0x675/0x7d0
[  699.431714][T18653]  ret_from_fork_asm+0x1a/0x30
[  699.436479][T18653] 
[  699.438787][T18653] Memory state around the buggy address:
[  699.444410][T18653]  ffff8880766d7600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  699.452469][T18653]  ffff8880766d7680: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  699.460526][T18653] >ffff8880766d7700: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  699.468576][T18653]                                            ^
[  699.474718][T18653]  ffff8880766d7780: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  699.482783][T18653]  ffff8880766d7800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  699.490840][T18653] ==================================================================
[  699.510118][T18653] ==================================================================
[  699.518257][T18653] BUG: KASAN: double-free in lmLogInit+0x912/0x1ae0
[  699.524896][T18653] Free of addr ffff8880766d7700 by task syz.1.4210/18653
[  699.531938][T18653] 
[  699.534292][T18653] CPU: 0 UID: 0 PID: 18653 Comm: syz.1.4210 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  699.534348][T18653] Tainted: [B]=BAD_PAGE
[  699.534363][T18653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  699.534387][T18653] Call Trace:
[  699.534400][T18653]  <TASK>
[  699.534414][T18653]  dump_stack_lvl+0x116/0x1f0
[  699.534477][T18653]  print_report+0xcd/0x630
[  699.534526][T18653]  ? srso_alias_return_thunk+0x5/0xfbef5
[  699.534572][T18653]  ? srso_alias_return_thunk+0x5/0xfbef5
[  699.534618][T18653]  ? __phys_addr+0xe8/0x180
[  699.534658][T18653]  ? lmLogInit+0x912/0x1ae0
[  699.534708][T18653]  kasan_report_invalid_free+0xb8/0xe0
[  699.534761][T18653]  ? lmLogInit+0x912/0x1ae0
[  699.534812][T18653]  ? lmLogInit+0x912/0x1ae0
[  699.534860][T18653]  check_slab_allocation+0xe8/0x110
[  699.534903][T18653]  kfree+0x119/0x6d0
[  699.534959][T18653]  ? lmLogInit+0x912/0x1ae0
[  699.535010][T18653]  ? lmLogInit+0x912/0x1ae0
[  699.535057][T18653]  lmLogInit+0x912/0x1ae0
[  699.535110][T18653]  ? __pfx_lmLogInit+0x10/0x10
[  699.535167][T18653]  ? srso_alias_return_thunk+0x5/0xfbef5
[  699.535217][T18653]  ? srso_alias_return_thunk+0x5/0xfbef5
[  699.535263][T18653]  ? lockdep_init_map_type+0x5c/0x280
[  699.535314][T18653]  ? srso_alias_return_thunk+0x5/0xfbef5
[  699.535363][T18653]  lmLogOpen+0x7f0/0x13c0
[  699.535415][T18653]  jfs_mount_rw+0x2e9/0x6f0
[  699.535463][T18653]  ? __pfx_jfs_mount_rw+0x10/0x10
[  699.535511][T18653]  ? srso_alias_return_thunk+0x5/0xfbef5
[  699.535556][T18653]  ? list_lru_count_node+0x41/0x80
[  699.535618][T18653]  ? srso_alias_return_thunk+0x5/0xfbef5
[  699.535663][T18653]  ? shrink_dcache_sb+0x287/0x350
[  699.535723][T18653]  ? __pfx_shrink_dcache_sb+0x10/0x10
[  699.535788][T18653]  jfs_reconfigure+0x91e/0xb90
[  699.535829][T18653]  reconfigure_super+0x450/0xb60
[  699.535872][T18653]  ? __pfx_jfs_reconfigure+0x10/0x10
[  699.535912][T18653]  path_mount+0x1a40/0x23a0
[  699.535966][T18653]  ? __pfx_path_mount+0x10/0x10
[  699.536016][T18653]  ? srso_alias_return_thunk+0x5/0xfbef5
[  699.536062][T18653]  ? kmem_cache_free+0x2d4/0x6c0
[  699.536100][T18653]  ? putname+0x154/0x1a0
[  699.536155][T18653]  ? srso_alias_return_thunk+0x5/0xfbef5
[  699.536205][T18653]  ? putname+0x154/0x1a0
[  699.536256][T18653]  ? __x64_sys_mount+0x293/0x310
[  699.536304][T18653]  __x64_sys_mount+0x293/0x310
[  699.536354][T18653]  ? __pfx___x64_sys_mount+0x10/0x10
[  699.536406][T18653]  ? srso_alias_return_thunk+0x5/0xfbef5
[  699.536458][T18653]  do_syscall_64+0xcd/0xfa0
[  699.536520][T18653]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  699.536558][T18653] RIP: 0033:0x7f74a438efc9
[  699.536587][T18653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  699.536626][T18653] RSP: 002b:00007f74a51f0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  699.536662][T18653] RAX: ffffffffffffffda RBX: 00007f74a45e5fa0 RCX: 00007f74a438efc9
[  699.536687][T18653] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000
[  699.536712][T18653] RBP: 00007f74a4411f91 R08: 0000000000000000 R09: 0000000000000000
[  699.536737][T18653] R10: 00000000001c0030 R11: 0000000000000246 R12: 0000000000000000
[  699.536762][T18653] R13: 00007f74a45e6038 R14: 00007f74a45e5fa0 R15: 00007ffdbbc2a2b8
[  699.536800][T18653]  </TASK>
[  699.536814][T18653] 
[  699.858123][T18653] Allocated by task 18653:
[  699.862616][T18653]  kasan_save_stack+0x33/0x60
[  699.867302][T18653]  kasan_save_track+0x14/0x30
[  699.871983][T18653]  __kasan_kmalloc+0xaa/0xb0
[  699.876572][T18653]  lmLogInit+0x40c/0x1ae0
[  699.880912][T18653]  lmLogOpen+0x7f0/0x13c0
[  699.885248][T18653]  jfs_mount_rw+0x2e9/0x6f0
[  699.889756][T18653]  jfs_reconfigure+0x91e/0xb90
[  699.894514][T18653]  reconfigure_super+0x450/0xb60
[  699.899454][T18653]  path_mount+0x1a40/0x23a0
[  699.903967][T18653]  __x64_sys_mount+0x293/0x310
[  699.908743][T18653]  do_syscall_64+0xcd/0xfa0
[  699.913273][T18653]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  699.919167][T18653] 
[  699.921481][T18653] Freed by task 18653:
[  699.925535][T18653]  kasan_save_stack+0x33/0x60
[  699.930214][T18653]  kasan_save_track+0x14/0x30
[  699.934894][T18653]  __kasan_save_free_info+0x3b/0x60
[  699.940111][T18653]  __kasan_slab_free+0x5f/0x80
[  699.944888][T18653]  kfree+0x2b8/0x6d0
[  699.948799][T18653]  lmLogInit+0x912/0x1ae0
[  699.953138][T18653]  lmLogOpen+0x7f0/0x13c0
[  699.957476][T18653]  jfs_mount_rw+0x2e9/0x6f0
[  699.961984][T18653]  jfs_reconfigure+0x91e/0xb90
[  699.966746][T18653]  reconfigure_super+0x450/0xb60
[  699.971686][T18653]  path_mount+0x1a40/0x23a0
[  699.976200][T18653]  __x64_sys_mount+0x293/0x310
[  699.980973][T18653]  do_syscall_64+0xcd/0xfa0
[  699.985491][T18653]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  699.991383][T18653] 
[  699.993693][T18653] The buggy address belongs to the object at ffff8880766d7700
[  699.993693][T18653]  which belongs to the cache kmalloc-192 of size 192
[  700.007741][T18653] The buggy address is located 0 bytes inside of
[  700.007741][T18653]  192-byte region [ffff8880766d7700, ffff8880766d77c0)
[  700.020838][T18653] 
[  700.023155][T18653] The buggy address belongs to the physical page:
[  700.029555][T18653] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x766d7
[  700.038327][T18653] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  700.045440][T18653] page_type: f5(slab)
[  700.049428][T18653] raw: 00fff00000000000 ffff88813ffa63c0 ffffea0000a43080 dead000000000004
[  700.058037][T18653] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  700.066623][T18653] page dumped because: kasan: bad access detected
[  700.073040][T18653] page_owner tracks the page as allocated
[  700.078743][T18653] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5835, tgid 5835 (syz-executor), ts 114881421736, free_ts 114871252569
[  700.098212][T18653]  post_alloc_hook+0x1c0/0x230
[  700.103006][T18653]  get_page_from_freelist+0x10a3/0x3a30
[  700.108579][T18653]  __alloc_frozen_pages_noprof+0x25f/0x2470
[  700.114476][T18653]  alloc_pages_mpol+0x1fb/0x550
[  700.119344][T18653]  new_slab+0x24a/0x360
[  700.123530][T18653]  ___slab_alloc+0xdc4/0x1ae0
[  700.128231][T18653]  __slab_alloc.constprop.0+0x63/0x110
[  700.133713][T18653]  __kmalloc_cache_noprof+0x477/0x780
[  700.139107][T18653]  netdevice_event+0x365/0x9d0
[  700.143891][T18653]  notifier_call_chain+0xbc/0x410
[  700.148926][T18653]  call_netdevice_notifiers_info+0xbe/0x140
[  700.154825][T18653]  netif_set_mac_address+0x36f/0x4a0
[  700.160134][T18653]  do_setlink.constprop.0+0x75f/0x4380
[  700.165627][T18653]  rtnl_newlink+0x1446/0x2000
[  700.170299][T18653]  rtnetlink_rcv_msg+0x95e/0xe90
[  700.175235][T18653]  netlink_rcv_skb+0x158/0x420
[  700.179999][T18653] page last free pid 44 tgid 44 stack trace:
[  700.185966][T18653]  __free_frozen_pages+0x7df/0x1160
[  700.191181][T18653]  vfree+0x1fd/0xb50
[  700.195089][T18653]  delayed_vfree_work+0x56/0x70
[  700.199955][T18653]  process_one_work+0x9cf/0x1b70
[  700.204905][T18653]  worker_thread+0x6c8/0xf10
[  700.209507][T18653]  kthread+0x3c5/0x780
[  700.213583][T18653]  ret_from_fork+0x675/0x7d0
[  700.218185][T18653]  ret_from_fork_asm+0x1a/0x30
[  700.222961][T18653] 
[  700.225271][T18653] Memory state around the buggy address:
[  700.230890][T18653]  ffff8880766d7600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  700.238947][T18653]  ffff8880766d7680: 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  700.247000][T18653] >ffff8880766d7700: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  700.255047][T18653]                    ^
[  700.259101][T18653]  ffff8880766d7780: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  700.267154][T18653]  ffff8880766d7800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  700.275211][T18653] ==================================================================
[  700.300584][T18653] Kernel panic - not syncing: kasan.fault=panic_on_write set ...
[  700.308408][T18653] CPU: 1 UID: 0 PID: 18653 Comm: syz.1.4210 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  700.319356][T18653] Tainted: [B]=BAD_PAGE
[  700.323491][T18653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  700.333534][T18653] Call Trace:
[  700.336797][T18653]  <TASK>
[  700.339713][T18653]  dump_stack_lvl+0x3d/0x1f0
[  700.344323][T18653]  vpanic+0x640/0x6f0
[  700.348334][T18653]  ? lmLogInit+0x912/0x1ae0
[  700.352841][T18653]  panic+0xca/0xd0
[  700.356564][T18653]  ? __pfx_panic+0x10/0x10
[  700.360982][T18653]  ? srso_alias_return_thunk+0x5/0xfbef5
[  700.366613][T18653]  ? preempt_schedule_thunk+0x16/0x30
[  700.371994][T18653]  end_report+0x159/0x170
[  700.376325][T18653]  kasan_report_invalid_free+0xc8/0xe0
[  700.381790][T18653]  ? lmLogInit+0x912/0x1ae0
[  700.386299][T18653]  ? lmLogInit+0x912/0x1ae0
[  700.390804][T18653]  check_slab_allocation+0xe8/0x110
[  700.396006][T18653]  kfree+0x119/0x6d0
[  700.399910][T18653]  ? lmLogInit+0x912/0x1ae0
[  700.404445][T18653]  ? lmLogInit+0x912/0x1ae0
[  700.408966][T18653]  lmLogInit+0x912/0x1ae0
[  700.413314][T18653]  ? __pfx_lmLogInit+0x10/0x10
[  700.418109][T18653]  ? srso_alias_return_thunk+0x5/0xfbef5
[  700.423742][T18653]  ? srso_alias_return_thunk+0x5/0xfbef5
[  700.429389][T18653]  ? lockdep_init_map_type+0x5c/0x280
[  700.434777][T18653]  ? srso_alias_return_thunk+0x5/0xfbef5
[  700.440422][T18653]  lmLogOpen+0x7f0/0x13c0
[  700.444766][T18653]  jfs_mount_rw+0x2e9/0x6f0
[  700.449279][T18653]  ? __pfx_jfs_mount_rw+0x10/0x10
[  700.454315][T18653]  ? srso_alias_return_thunk+0x5/0xfbef5
[  700.459960][T18653]  ? list_lru_count_node+0x41/0x80
[  700.465108][T18653]  ? srso_alias_return_thunk+0x5/0xfbef5
[  700.470767][T18653]  ? shrink_dcache_sb+0x287/0x350
[  700.475819][T18653]  ? __pfx_shrink_dcache_sb+0x10/0x10
[  700.481224][T18653]  jfs_reconfigure+0x91e/0xb90
[  700.485996][T18653]  reconfigure_super+0x450/0xb60
[  700.490950][T18653]  ? __pfx_jfs_reconfigure+0x10/0x10
[  700.496244][T18653]  path_mount+0x1a40/0x23a0
[  700.500765][T18653]  ? __pfx_path_mount+0x10/0x10
[  700.505632][T18653]  ? srso_alias_return_thunk+0x5/0xfbef5
[  700.511281][T18653]  ? kmem_cache_free+0x2d4/0x6c0
[  700.516221][T18653]  ? putname+0x154/0x1a0
[  700.520483][T18653]  ? srso_alias_return_thunk+0x5/0xfbef5
[  700.526129][T18653]  ? putname+0x154/0x1a0
[  700.530395][T18653]  ? __x64_sys_mount+0x293/0x310
[  700.535351][T18653]  __x64_sys_mount+0x293/0x310
[  700.540130][T18653]  ? __pfx___x64_sys_mount+0x10/0x10
[  700.545445][T18653]  ? srso_alias_return_thunk+0x5/0xfbef5
[  700.551110][T18653]  do_syscall_64+0xcd/0xfa0
[  700.555651][T18653]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  700.561551][T18653] RIP: 0033:0x7f74a438efc9
[  700.565969][T18653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  700.585589][T18653] RSP: 002b:00007f74a51f0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  700.594017][T18653] RAX: ffffffffffffffda RBX: 00007f74a45e5fa0 RCX: 00007f74a438efc9
[  700.601988][T18653] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000
[  700.609975][T18653] RBP: 00007f74a4411f91 R08: 0000000000000000 R09: 0000000000000000
[  700.617950][T18653] R10: 00000000001c0030 R11: 0000000000000246 R12: 0000000000000000
[  700.625921][T18653] R13: 00007f74a45e6038 R14: 00007f74a45e5fa0 R15: 00007ffdbbc2a2b8
[  700.633915][T18653]  </TASK>
[  700.637155][T18653] Kernel Offset: disabled
[  700.641472][T18653] Rebooting in 86400 seconds..