last executing test programs:

2m17.068723163s ago: executing program 4 (id=664):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, <r2=>0x0}, 0x2020)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r2}})
file_getattr(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x18, 0x100)

2m16.344884535s ago: executing program 4 (id=669):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x59b801, 0x1ce)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x6, 0x4})

2m13.710235977s ago: executing program 4 (id=675):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000080)={[{@init_itable_val}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@grpjquota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
r1 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r2, r2)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628)

2m13.41247842s ago: executing program 2 (id=677):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000012000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20)
ptrace(0x10, r0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={0x0})

2m11.959634267s ago: executing program 2 (id=681):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_opts(r0, 0x29, 0x4d, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x8)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendto$inet6(r1, &(0x7f0000000040)="54dfb6bf", 0x4, 0x4000800, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000180)={0x0, 0x48, 0x0}, 0x40000020)

2m10.846309903s ago: executing program 2 (id=683):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
r1 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x3, 0x10100}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31})
io_uring_enter(r1, 0x207a98, 0x0, 0x0, 0x0, 0x0)
write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc)
write$vga_arbiter(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='unlock io'], 0xe)

2m10.371893781s ago: executing program 4 (id=684):
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x21000, 0x0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000340)='./file0\x00', &(0x7f0000000500)='./file0/file0\x00', 0x0, 0xb101e, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='\x00', 0x89901)
mount_setattr(r0, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x9, 0xd, 0x80000}, 0x20)

2m9.415168728s ago: executing program 2 (id=687):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0)

2m8.805109114s ago: executing program 4 (id=688):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x4, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, {0x4, 0xb}, {0xb, 0x1}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x200, 0x1080000a, 0x0, 0x1, 0x7ff}}, {0x4}}, {{0x1c, 0x1, {0x6, 0xc, 0x18, 0xd, 0x1, 0x4, 0xfffffffe}}, {0x4}}]}]}, 0x68}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r3, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0)

2m8.488660661s ago: executing program 2 (id=691):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

2m7.985273676s ago: executing program 4 (id=693):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x8, &(0x7f0000000040)={[{@noauto_da_alloc}, {@delalloc}]}, 0x7, 0x511, &(0x7f00000008c0)="$eJzs3c9vU8kdAPCvnZiEEAi0HNqqLZTS0grh/AAixKVwaVUhpKqopx4gTUwUxcZRHFSScgjH3pGK1FP7J/TWQ1VOe9jb3nZPuxf2sBK7i3ZFVtqDV+/5kZjESbybEJP485Fe3psZJ98Z2zNjD9gTQNc6HRHLEXEoIu5ExFCWn8uOuNY4ktu9fPFwcuXFw8lc1Ou3Psul5UleNP1O4kj2N/sj4o+/i/hLbmPc2uLS7ES5XJrP0sMLlbnh2uLShZl8ljM2Pjo+cuXi5bFda+upyn+e/3bmxp/+99+fPHtv+dd/S6o1+PejaVlzO3ZTo+mFGGzK642IG28iWIf0Zs8f9p+kt30vIs6k/X8oetJHEwA4yOr1oagPNacBgIMuef8/GLl8MVsLGIx8vlhsrOGdjIF8uVpbOD9UvX9vKtI1rONRyN+dKZdGsrXC41HIJenR9HotPfZa+nHpYkSciIjHfYfT8uJktTzVyRc+ANDFjqyb/7/sa8z/AMAB19/pCgAAe878DwDdx/wPAN3nW8z/Ph0IAAeE9/8A0H3M/wDQfbad/x/tTT0AgD3xh5s3k6O+0vj+61ff1H1hqlSbLVbuTxYnq/NzxelqdbpcKk7W69v9vXK1Ojd6aTVZW1y6Xanev7dwe6YyMV26XSq8ycYAAG05cerpB8mkv3z1cHpE014O5mo42PKdrgDQMT2drgDQMT7PA92rjff4lgHggGuxRe9rNv0vQk9s/gr71bkfWv+HbrWT9X9rB7C/fbf1/9/sej2AvWcOh+5Vr+fs+Q8AXcYaP7Cjf/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALjWYHrl8Md0LfDn5mS8WI45GxPEo5O7OlEsjEXEsIt7vK/Ql6dFOVxoA2KH8J7ls/69zQ2cH15ceyn3Vl54j4q//vPWPBxMLC/OjSf7nq/kLT7L8sUOdaAAA0OzaxqzGPJ2dm97Iv3zxcPLVsZdVfH69sbloEnclOxolvdGbnvujEBEDX+SydEPyeqVnF+IvP4qIH6y1/0FThMF0DaSx8+n6+Enso28g/tr9vz5+/rX4+bQsORfS++L7u1AX6DZPrzfGyazvJV0s63/5OJ2eW/f//nSE2rlk/EvGkpUN419+dfzr2RA/l/b506vprWvy/NI7v9+QWR9qlD2K+FFvq/i51fi51uNv4Wybbfzoxz89s1lZ/V8R51q2/9WO1JV0mB1eqMwN1xaXLsxUJqZL06V7Y2Pjo+MjVy5eHhtO16gbP99tFePTq+ePbRY/af/AJvH7t25//KLN9v/76zt//tkW8X/189aP/8kt4idz4i/bjD8xcG3T7buT+FObtH+bxz/Otxn/2cdLU23eFADYA7XFpdmJcrk0v81F8lpzu9u42J8XsRyRXPS3+1t92ZOnRVG6KNG66G24KLwtT+P+t+He2PKik6MSsBfWOn2nawIAAAAAAAAAAAAAAGymtrg027dLn9b68P+tizrdRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6ubwIAAP//kVzEKg==")
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
pwritev2(r0, &(0x7f0000000480)=[{&(0x7f0000000100)="c1", 0x1}], 0x1, 0x5412, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
preadv2(r1, &(0x7f0000001040)=[{&(0x7f0000001900)=""/4096, 0x5491}], 0x1, 0x1000, 0x4005, 0x8)

2m2.735049752s ago: executing program 32 (id=693):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x8, &(0x7f0000000040)={[{@noauto_da_alloc}, {@delalloc}]}, 0x7, 0x511, &(0x7f00000008c0)="$eJzs3c9vU8kdAPCvnZiEEAi0HNqqLZTS0grh/AAixKVwaVUhpKqopx4gTUwUxcZRHFSScgjH3pGK1FP7J/TWQ1VOe9jb3nZPuxf2sBK7i3ZFVtqDV+/5kZjESbybEJP485Fe3psZJ98Z2zNjD9gTQNc6HRHLEXEoIu5ExFCWn8uOuNY4ktu9fPFwcuXFw8lc1Ou3Psul5UleNP1O4kj2N/sj4o+/i/hLbmPc2uLS7ES5XJrP0sMLlbnh2uLShZl8ljM2Pjo+cuXi5bFda+upyn+e/3bmxp/+99+fPHtv+dd/S6o1+PejaVlzO3ZTo+mFGGzK642IG28iWIf0Zs8f9p+kt30vIs6k/X8oetJHEwA4yOr1oagPNacBgIMuef8/GLl8MVsLGIx8vlhsrOGdjIF8uVpbOD9UvX9vKtI1rONRyN+dKZdGsrXC41HIJenR9HotPfZa+nHpYkSciIjHfYfT8uJktTzVyRc+ANDFjqyb/7/sa8z/AMAB19/pCgAAe878DwDdx/wPAN3nW8z/Ph0IAAeE9/8A0H3M/wDQfbad/x/tTT0AgD3xh5s3k6O+0vj+61ff1H1hqlSbLVbuTxYnq/NzxelqdbpcKk7W69v9vXK1Ojd6aTVZW1y6Xanev7dwe6YyMV26XSq8ycYAAG05cerpB8mkv3z1cHpE014O5mo42PKdrgDQMT2drgDQMT7PA92rjff4lgHggGuxRe9rNv0vQk9s/gr71bkfWv+HbrWT9X9rB7C/fbf1/9/sej2AvWcOh+5Vr+fs+Q8AXcYaP7Cjf/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALjWYHrl8Md0LfDn5mS8WI45GxPEo5O7OlEsjEXEsIt7vK/Ql6dFOVxoA2KH8J7ls/69zQ2cH15ceyn3Vl54j4q//vPWPBxMLC/OjSf7nq/kLT7L8sUOdaAAA0OzaxqzGPJ2dm97Iv3zxcPLVsZdVfH69sbloEnclOxolvdGbnvujEBEDX+SydEPyeqVnF+IvP4qIH6y1/0FThMF0DaSx8+n6+Enso28g/tr9vz5+/rX4+bQsORfS++L7u1AX6DZPrzfGyazvJV0s63/5OJ2eW/f//nSE2rlk/EvGkpUN419+dfzr2RA/l/b506vprWvy/NI7v9+QWR9qlD2K+FFvq/i51fi51uNv4Wybbfzoxz89s1lZ/V8R51q2/9WO1JV0mB1eqMwN1xaXLsxUJqZL06V7Y2Pjo+MjVy5eHhtO16gbP99tFePTq+ePbRY/af/AJvH7t25//KLN9v/76zt//tkW8X/189aP/8kt4idz4i/bjD8xcG3T7buT+FObtH+bxz/Otxn/2cdLU23eFADYA7XFpdmJcrk0v81F8lpzu9u42J8XsRyRXPS3+1t92ZOnRVG6KNG66G24KLwtT+P+t+He2PKik6MSsBfWOn2nawIAAAAAAAAAAAAAAGymtrg027dLn9b68P+tizrdRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6ubwIAAP//kVzEKg==")
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
pwritev2(r0, &(0x7f0000000480)=[{&(0x7f0000000100)="c1", 0x1}], 0x1, 0x5412, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
preadv2(r1, &(0x7f0000001040)=[{&(0x7f0000001900)=""/4096, 0x5491}], 0x1, 0x1000, 0x4005, 0x8)

2m2.534899842s ago: executing program 2 (id=698):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)

2m2.320790812s ago: executing program 33 (id=698):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)

1m40.539128127s ago: executing program 3 (id=747):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002)
write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8)
write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff", @ANYRESDEC=r0], 0xc8)
dup3(r1, r0, 0x0)

1m39.779831935s ago: executing program 3 (id=748):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$inet(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000000200)="1268a3db5ba40fe82ecf3465af3b988489094125", 0x14}, {&(0x7f00000004c0)="6059337673465062eacefc40e1b438cebc348d134fc35955cd0faaf679", 0x1d}, {&(0x7f0000001840)="571d6d5a94db8ec757a858b2340264bcbb0f3b238f776a7919eb79ad2908006e2de3d078e1208f769a82944fa5f024483379f0abc9c82e3c1a3f085719f730eb821593d78fe60a8032d37c57ed16c931d67fb383204bd2551af8f6ab7173dbf3135c1488c697d5564a85365f9681ab872008aa714934b2606ca460", 0x7b}, {&(0x7f0000001e80)="764ed94d526fcf4f632778c60aa50a21e7fdb60791cb5cc1599eecd2e141278b6cd46986faad9f9d7884a1ee48d1f54d1fd0ea68eb", 0x35}, {&(0x7f0000002140)="2a6a98c76e119c6145b5003076e2820c70f80924e1610f46a8c232a0f421f8dfb88d01318446c33a8e908d54cfdc039a0a4c7456dfb64a66c1a8546d6e499287bfc31aaf2726f80b63c70e9fc8e96886f41a262e3486ac77b9eabcfa6f49ed07e8ac31f05f8657a48045086e7c88f97af83dddac4dc7dc02cf8d544fee6f3f1a0061510a6eb6f7644550e1028685668a67fa9c57d82efdd087223f02d274a6e6bab5ad64c0065a7eb067620f3c89", 0xae}], 0x5}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000580)="56a8c6ad830a8f74a318", 0xa}, {&(0x7f0000000840)="18c01ab5a41c262306d7d5661e70c1f60d254a68318c81aad7e16dd36ba3358d2385a2616333ebb179d83c74ce920187e2d2a1a5c6507cfefcd91f2900bdfb8a75f58a01a375754dd9756703ca8e7387d78db3c315da549d3a18dece16b7951c6983eeb2c377114769295d6498e328acb507395066e37e087d26f4f4389f", 0x7e}, {&(0x7f0000000600)="9c46f2b6aec7ddf8fe83fd452bb6ed0d3949234d4bf8f7f5ae31889f08042779c2a20d1ebee3a5b435b9632debfc43d90571315da865ef", 0x37}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000a80)="5a7bfb23ecd78eb611f04e232fc7a3b9cf746eb059e3ef86a60c", 0x1a}, {&(0x7f0000001400)="4e9c6ea4d55899dde1e3a575597ce06ac118933a2ba40800da2d5febc66f3ddfb40fbf41596fa303000000000000003cc2972f3c9bbdea7d528c", 0x3a}, {&(0x7f00000000c0)="2ae409763e24f92667208f95b620d415abe1a8d13ae7d8e08c33df08129757861044d615b8219fcd9bbda79f0b000000000000c420113264a8fb4b6ab17f732fb18b789685d52d952ba0cc9b7be06f6d734ffda0ad567603f0e9d56ffb", 0x5d}, {&(0x7f0000000d00)="f05a43f1c3a0f11db08405c5f817983bb055efac00000100000000004c093c91b8a4c312d18400198972ee9fbc0b3670008506cbfe", 0x35}, {&(0x7f0000000340)="400e87fe9e83f62c5c5ee658499aaf8407008cc7d163d43d1db356533200bf0025ce8a5613dd452eb917d3280fce0e", 0x2f}], 0x5}}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000700)="ab5aea0bd151f2b012853e83b3d630b72f62d53374645d5bce5728ad78befd38ae96478d1052086b322bed4faa4b9979cabf55baafb3f9eb8878", 0x3a}], 0x1}}], 0x4, 0x44008090)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4011}, 0x40004)

1m38.915816329s ago: executing program 3 (id=751):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c)
syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x1100, 0x0, 0x3, 0x6, 0x0, @private=0xa010102, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)

1m37.295266906s ago: executing program 3 (id=756):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x800000, &(0x7f0000000380)={[{@debug}, {@delalloc}, {@resuid}, {@test_dummy_encryption}, {@nodiscard}, {@data_err_ignore}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x0, 0xbd0, &(0x7f0000000b00)="$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")
socket$inet6_udp(0xa, 0x2, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0), 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001900), 0x0)
gettid()
quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000003b80)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000005c00))

1m34.635635014s ago: executing program 3 (id=761):
read$msr(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0)
shutdown(r0, 0x0)
sendfile(r0, r1, 0x0, 0xdc)

1m32.85796835s ago: executing program 3 (id=764):
add_key(&(0x7f00000001c0)='user\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0)
write$cgroup_pid(r0, &(0x7f0000000080), 0x12)
r1 = syz_io_uring_setup(0xc4f, &(0x7f0000000440)={0x0, 0xfffffffc, 0x10100, 0x7fe}, &(0x7f0000000400)=<r2=>0x0, &(0x7f0000000200)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x10, 0x0, r0, 0x0, 0x0})
io_uring_enter(r1, 0x2dbe, 0x0, 0x40, 0x0, 0xffffffffffffffb2)

1m30.359470214s ago: executing program 34 (id=764):
add_key(&(0x7f00000001c0)='user\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0)
write$cgroup_pid(r0, &(0x7f0000000080), 0x12)
r1 = syz_io_uring_setup(0xc4f, &(0x7f0000000440)={0x0, 0xfffffffc, 0x10100, 0x7fe}, &(0x7f0000000400)=<r2=>0x0, &(0x7f0000000200)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x10, 0x0, r0, 0x0, 0x0})
io_uring_enter(r1, 0x2dbe, 0x0, 0x40, 0x0, 0xffffffffffffffb2)

9.003416661s ago: executing program 7 (id=970):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0xfc, 0xa, 0x20, 0x0, 0x73}, {0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}, 0x1, 0x0, 0x0, 0x40800}, 0x2c040010)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x70bd29, 0x0, {{@in=@multicast1=0xe0000002, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x400}, {0x0, 0x0, 0x101}, 0x0, 0x6e6bb5, 0x0, 0x0, 0x1}}, 0xb8}}, 0x10000000)

7.97914869s ago: executing program 5 (id=972):
syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000880)='./file0\x00', 0x8000c6, &(0x7f0000000240)=ANY=[], 0x0, 0x17d, &(0x7f0000001ac0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0x110)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
lchown(&(0x7f0000000000)='./file1\x00', 0x0, 0x0)

7.663917034s ago: executing program 7 (id=973):
r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x17, 0x51, 0x29, 0x20, 0x557, 0x2009, 0xc71e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x58, 0x7, 0x2, 0x8a, 0xb5, 0x38, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)

7.263360815s ago: executing program 0 (id=974):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x6)
fchdir(r1)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
statx(r1, &(0x7f0000000100)='./file0\x00', 0x2000, 0x8, &(0x7f0000000200))

6.832887619s ago: executing program 6 (id=976):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
close_range(r0, 0xffffffffffffffff, 0x0)

6.277474395s ago: executing program 5 (id=977):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x15, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4)
r1 = syz_io_uring_setup(0x279, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r1, 0x1ffe, 0x0, 0x0, 0x0, 0x0)

5.884082762s ago: executing program 0 (id=978):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0)
mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x80000, 0x0)

5.461962601s ago: executing program 1 (id=979):
set_mempolicy(0x3, &(0x7f0000000240)=0x1020fff, 0x6)
r0 = socket(0x11, 0x3, 0x0)
setsockopt(r0, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', <r2=>0x0})
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x18, r2, 0x1, 0xf5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x80, &(0x7f0000001600)=[{&(0x7f0000000280)="abe019d204245f3fb892", 0xa}, {0x0, 0xffffff09}], 0x2}, 0x4004111)

5.350812864s ago: executing program 6 (id=980):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4.862176737s ago: executing program 5 (id=981):
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), r1)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r2, 0x1, 0x8, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0xffff8000, 0x4, 0x0, 0x2}}}}, 0x30}}, 0x2c040090)

4.685256664s ago: executing program 0 (id=982):
pipe(&(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet(0x2, 0x2, 0x88)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
splice(r0, 0x0, r2, 0x0, 0xe8, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0x120)

4.400836934s ago: executing program 1 (id=983):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x6)
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000140)=0xffffffffffffffff)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
shutdown(r0, 0x1)

3.989401226s ago: executing program 5 (id=984):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x83c, 0x2c, 0xd2f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {}, {0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x810, 0x2, [@TCA_FW_POLICE={0x80c, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x401, 0xe, 0x80000001, 0x8, 0x200, 0x6, 0x8, 0x4, 0x10200000, 0x4, 0x3, 0x9, 0x3, 0xffffffff, 0xb, 0x9, 0x4, 0xd4ae, 0x5, 0x300000, 0xe1b5, 0xc5b, 0x6, 0x4, 0x9, 0x6, 0x9, 0x8, 0x3, 0x9, 0xd, 0x7f, 0x7, 0xce0, 0x1ff, 0x6, 0x6, 0x41, 0xff, 0x800, 0xfff, 0x7, 0x9, 0xd, 0x4, 0xffffff1f, 0xa, 0xc, 0x8, 0xfffffffa, 0x155, 0x7, 0x0, 0x18000, 0xc, 0x9, 0x40000, 0x101, 0x6, 0x3ff, 0x1, 0x3, 0x7554, 0x2, 0x4, 0x1, 0x4, 0xd, 0x8000, 0xff, 0x0, 0xeac2, 0x87, 0x3, 0xfe000000, 0x3, 0x8001, 0xff, 0xffff1cac, 0x2892, 0x6, 0x8c5e, 0x1, 0x5, 0xffffffff, 0x80, 0xffffffac, 0x3, 0xff1, 0x2, 0x2, 0x8, 0x2, 0x1, 0x8, 0x8, 0xfff, 0x80000001, 0x9, 0x8, 0x0, 0x8, 0x487, 0x6, 0x8, 0x1000, 0x1ff800, 0x6, 0xfffffffe, 0x3c78, 0xfa1, 0x3, 0x6, 0x9, 0xffffffff, 0x80000002, 0x2, 0xda, 0x9, 0x401, 0x6, 0x7, 0x2, 0x2, 0xe, 0x835, 0x4, 0x3, 0x6cc7, 0x6, 0x8, 0x8, 0x400, 0x8, 0x4, 0x3, 0x5, 0x5, 0x0, 0x9, 0x400, 0x3, 0x0, 0x4cc, 0xb, 0x0, 0xce, 0x6, 0x0, 0xc8, 0x4, 0x5, 0xc38, 0x1ff, 0x1ff, 0x968, 0x5, 0x68cff086, 0x2, 0xfff, 0x2, 0x7ff, 0x1000, 0x80000001, 0x9, 0x9, 0x0, 0x8001, 0x1000, 0x8b7f, 0xfe, 0xc, 0x8, 0x7, 0x8000000, 0x0, 0x7fff, 0xfffffffd, 0x5, 0x815d, 0x5, 0x44, 0x4, 0x6, 0x3, 0x1, 0x8, 0x0, 0x7ff, 0x3, 0x8, 0x1, 0x2, 0x800, 0x7, 0x5, 0x10, 0xfffffff7, 0x8, 0x40, 0x1, 0x10001, 0x1000, 0xe42c, 0x1, 0x101, 0x6, 0x8, 0x4, 0x9a14, 0x4, 0x81, 0x7, 0x0, 0x8, 0x8, 0xfffffffa, 0x0, 0x30000, 0x7ff, 0x4, 0x3, 0xd, 0x5, 0x0, 0xfff, 0x3, 0x7b0, 0x7, 0x9, 0xffff, 0x5, 0xff, 0x4, 0x0, 0x4, 0x9, 0x6, 0x100, 0x81, 0x0, 0x7fc, 0x2, 0x5, 0x80, 0x2, 0xe, 0x1, 0x40, 0x1ff, 0x3, 0x380, 0x6, 0x7, 0x8, 0xfffffffb]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7, 0x8, 0x7, 0xffff, 0x2, 0x3, 0x7fff, 0x8, 0x0, 0x401, 0x4, 0x0, 0xf7b1, 0xa, 0x40, 0x200, 0x0, 0x1, 0x9, 0x9, 0x8, 0xbf2, 0x1, 0xffff9374, 0x9, 0x1, 0x5, 0x3ff, 0x3, 0x6, 0x5, 0x2, 0x7, 0xe, 0x5, 0x4, 0x9, 0x8, 0xf0, 0x5, 0x8000, 0x0, 0x7, 0xff, 0x2, 0x2, 0x400, 0x0, 0x5, 0x2, 0x401, 0x100, 0xf30, 0x8001, 0x9, 0x370, 0x3, 0x1, 0xfffffff9, 0x9, 0x3, 0x5, 0xb9b, 0x1, 0x5, 0x0, 0x4, 0x7, 0x6, 0x3ff, 0x3, 0x7, 0x76, 0x9, 0xffff, 0x8, 0xd, 0x80, 0x4, 0x9, 0x7ff, 0x7, 0x9, 0x6, 0x7f, 0x9, 0x7ff, 0x3, 0x8, 0x31, 0x1, 0x2d, 0x0, 0xf02, 0x15200, 0xa, 0x1, 0xe148, 0x7, 0x1, 0x3, 0x9, 0x6, 0xb, 0xfffffffa, 0x4, 0xdf, 0x80000000, 0x8001, 0x2, 0x3, 0x2971010e, 0x3b655406, 0x1, 0x8, 0x6, 0x6, 0x4, 0x4, 0x8, 0x80000001, 0x5dd, 0x2d3, 0x7, 0x8, 0x5, 0x79d5, 0x2, 0x800, 0x8d, 0x1, 0x2, 0x1, 0x5, 0x6, 0x338, 0x6, 0x2, 0x4, 0x1, 0x3, 0x0, 0x0, 0x8, 0x1, 0x3ff, 0x8, 0x56, 0x7, 0x401, 0x7, 0x0, 0x0, 0x0, 0xda, 0x5, 0x42, 0x18, 0xfffffff7, 0x5, 0xed2, 0x7, 0x211, 0x0, 0x2, 0xc9, 0x3, 0x8, 0x1, 0x9, 0x58, 0x8, 0x5e5, 0x5, 0x3, 0xfffffffb, 0x3, 0xff, 0x6, 0x10, 0xf7ee907a, 0xff, 0xc9, 0x9, 0x0, 0x400, 0x0, 0x7, 0x6, 0x9, 0x8, 0x8, 0x0, 0x0, 0x7, 0x0, 0x4, 0x7, 0x2, 0x3, 0x9, 0x9, 0x0, 0x7, 0x4, 0x0, 0x4, 0x4, 0x4, 0x6f3, 0x6, 0x10, 0x0, 0x7, 0xfffffff9, 0xfffffffa, 0x9, 0x53a, 0x8, 0x1, 0x4, 0xb, 0x8, 0xfffffff9, 0x400, 0x461, 0x81, 0x8, 0x2, 0x7ff, 0x2, 0x8000, 0x7, 0x4, 0xba95, 0x4, 0x4706, 0x7ff, 0x4, 0xffffffff, 0xf7b1, 0x3, 0x2, 0x5, 0x9, 0x1fffc, 0x80000000, 0x2008001, 0x9, 0x4, 0x3, 0x3, 0x6, 0xce, 0x8]}]}]}}]}, 0x83c}, 0x1, 0x0, 0x0, 0x20000005}, 0x40)
r0 = socket(0x2b, 0x1, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e00)=@raw={'raw\x00', 0x9, 0x3, 0x1c8, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x130, 0xffffffff, 0xffffffff, 0x130, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @multicast2, 0xffffff00, 0x0, 'vcan0\x00', 'vlan0\x00', {}, {0xff}, 0x8, 0x2bbe86e5b28b8fc5, 0x30}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4081}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x15, 0xa1, 0xfff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x228)

3.830354606s ago: executing program 7 (id=985):
unshare(0x22020400)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0)
r0 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0)
ftruncate(r1, 0x1)

3.683036216s ago: executing program 6 (id=986):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={0x1, 0x40, 0x0, {}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x1, 0x1}, 0x6, 0x2, 0x0, 0x0, "0a20fde243ba535f"}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x80)
sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000018bc9b573e6016ed0000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x0)

3.556351143s ago: executing program 0 (id=987):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4)
fcntl$setstatus(r0, 0x4, 0x42000)
read$FUSE(r0, &(0x7f00000040c0)={0x2020}, 0x2020)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1)

3.416072859s ago: executing program 1 (id=988):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c)
shutdown(r0, 0x1)

2.97748531s ago: executing program 6 (id=989):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x16)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1)
r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x13100, 0x0, 0x6}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0)

2.956326259s ago: executing program 5 (id=990):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x10, &(0x7f0000000080)={[{@acl}, {@nodiscard}, {@oldalloc}]}, 0x1, 0x3f7, &(0x7f0000003080)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

2.888572604s ago: executing program 7 (id=991):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x63, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50)

2.630709375s ago: executing program 0 (id=992):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f0000000000)={[{@uqnoenforce}]}, 0x1, 0x990f, &(0x7f0000013080)="$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")
setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), &(0x7f00000001c0)=ANY=[], 0xfe37, 0x0)
llistxattr(&(0x7f0000000140)='./file1\x00', 0x0, 0x35)

2.54678893s ago: executing program 1 (id=993):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0x7, 0x4)
syz_emit_ethernet(0x2e, &(0x7f0000000340)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0x3, 0x58}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0)
setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000001c0)=0x3f7, 0x4)
recvmmsg(r0, &(0x7f0000002540)=[{{&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, 0x0, 0x0, &(0x7f00000005c0)=""/17, 0x11}, 0x5}], 0x1, 0x2, 0x0)

1.94110904s ago: executing program 7 (id=994):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r1=>0x0})
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r3 = dup(r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000)
ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000000)={0x20, r1, 0x1, 0x0, &(0x7f00000022c0)=[{}]})

1.758190166s ago: executing program 1 (id=995):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x28102, 0x0)
shmget(0x1, 0x3000, 0x10, &(0x7f0000a9c000/0x3000)=nil)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r1, 0x0, 0xc, &(0x7f00000000c0)="e0", 0x1)
getsockopt$inet_opts(r1, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f0000000080)=0x2b)

1.322751264s ago: executing program 6 (id=996):
openat(0xffffffffffffff9c, 0x0, 0x42, 0x58)
keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0xd733043595a52279}, "a8e0930a1a884884", "74743275e5fc20c3ab14916504a8ca92", '\x00', "3e6a809941a488cc"}, 0x28)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x5}, 0x1c)

732.633103ms ago: executing program 7 (id=997):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x44, 0x30, 0x9, 0x0, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0)
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x8, 0x2})
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004)
sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x300, 0x0, 0x1000, 0x0, 0xa, 0x20}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0)

606.837441ms ago: executing program 0 (id=998):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d032, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
mlock2(&(0x7f0000510000/0x4000)=nil, 0x4000, 0x0)

474.919982ms ago: executing program 6 (id=999):
syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f00000000c0)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x297, &(0x7f0000000480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000006e40), 0xa2400, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_INPUT(r2, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006)
sendfile(r0, r1, 0x0, 0x20fffe82)

348.597134ms ago: executing program 1 (id=1000):
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e21, @broadcast}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x32b, @tick=0x440, 0xff})

0s ago: executing program 5 (id=1001):
syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[], 0x2, 0x638, &(0x7f0000000ac0)="$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")
creat(&(0x7f0000000840)='./file1\x00', 0x14)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101100, 0x0)
sendfile(r0, r1, 0x0, 0x20fffe82)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x41)

kernel console output (not intermixed with test programs):

2fs_stop_checkpoint+0x65/0x80
[  353.199940][   T13]  f2fs_write_end_io+0x1013/0x2470
[  353.200152][   T13]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  353.200304][   T13]  bio_endio+0xf92/0x10e0
[  353.200462][   T13]  submit_bio_noacct+0x200d/0x2960
[  353.200674][   T13]  submit_bio+0x57a/0x620
[  353.200843][   T13]  f2fs_submit_write_bio+0x92/0x250
[  353.201054][   T13]  __submit_merged_bio+0x16f/0x6a0
[  353.201258][   T13]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  353.201500][   T13]  __submit_merged_write_cond+0x44a/0x990
[  353.201730][   T13]  f2fs_write_data_pages+0x4d18/0x57a0
[  353.202082][   T13]  ? f2fs_balance_fs_bg+0x11ee/0x1250
[  353.202283][   T13]  ? stack_depot_save_flags+0x35/0x790
[  353.202458][   T13]  ? kmsan_get_metadata+0xf1/0x160
[  353.202665][   T13]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[  353.202871][   T13]  ? kmsan_get_metadata+0xf1/0x160
[  353.203074][   T13]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  353.203297][   T13]  ? kmsan_get_metadata+0xf1/0x160
[  353.203492][   T13]  ? kmsan_get_metadata+0xf1/0x160
[  353.203687][   T13]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  353.203966][   T13]  ? kmsan_get_metadata+0xf1/0x160
[  353.204175][   T13]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  353.204385][   T13]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  353.204547][   T13]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  353.204704][   T13]  do_writepages+0x3f2/0x860
[  353.205106][   T13]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  353.205338][   T13]  ? kmsan_get_metadata+0xf1/0x160
[  353.205547][   T13]  ? kmsan_get_metadata+0xf1/0x160
[  353.205781][   T13]  __writeback_single_inode+0x101/0x1180
[  353.205982][   T13]  ? kmsan_get_metadata+0xf1/0x160
[  353.206230][   T13]  writeback_sb_inodes+0xb2d/0x1f10
[  353.206508][   T13]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  353.206768][   T13]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  353.207005][   T13]  wb_writeback+0x4d0/0xc00
[  353.207207][   T13]  ? queue_io+0x411/0x790
[  353.207393][   T13]  wb_workfn+0x397/0x1900
[  353.207542][   T13]  ? kmsan_get_metadata+0xf1/0x160
[  353.207774][   T13]  ? __pfx_wb_workfn+0x10/0x10
[  353.207915][   T13]  process_scheduled_works+0xae7/0x1d60
[  353.208188][   T13]  worker_thread+0x1741/0x1de0
[  353.208456][   T13]  kthread+0xd5a/0xf00
[  353.208605][   T13]  ? __pfx_worker_thread+0x10/0x10
[  353.208828][   T13]  ? __pfx_kthread+0x10/0x10
[  353.208971][   T13]  ret_from_fork+0x207/0x6f0
[  353.209179][   T13]  ? __switch_to+0x521/0x750
[  353.209353][   T13]  ? __pfx_kthread+0x10/0x10
[  353.209500][   T13]  ret_from_fork_asm+0x1a/0x30
[  353.209712][   T13]  </TASK>
[  353.518641][   T13] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  353.906823][   T10] usb 3-1: config 0 descriptor??
[  354.673288][   T10] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  354.722550][ T7132] bridge_slave_0: invalid flags given to default FDB implementation
[  355.040838][   T10] usb 3-1: USB disconnect, device number 5
[  355.561413][ T7141] 9pnet: p9_errstr2errno: server reported unknown error 0x00000
[  355.673705][ T7136] fido_id[7136]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  357.018317][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  357.291333][ T7155] loop1: detected capacity change from 0 to 4096
[  357.353633][ T7155] EXT4-fs (loop1): Test dummy encryption mode enabled
[  357.402786][ T7155] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  357.678308][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  357.685031][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  357.725632][ T7165] loop3: detected capacity change from 0 to 1024
[  357.949953][   T30] audit: type=1800 audit(1770685919.622:57): pid=7166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.378" name="file1" dev="loop3" ino=20 res=0 errno=0
[  358.124632][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  358.465039][ T7171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.380'.
[  358.798814][ T5915] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  359.047005][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  359.058644][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  359.069092][ T5915] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  359.069341][ T5915] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  359.069493][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  359.151755][ T5915] usb 2-1: config 0 descriptor??
[  359.900170][ T5915] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  360.016025][ T5915] usb 2-1: USB disconnect, device number 6
[  360.049279][ T7184] loop2: detected capacity change from 0 to 128
[  360.122448][ T7184] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  360.166651][ T7184] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  361.120930][ T7190] fido_id[7190]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  361.246822][ T7201] loop0: detected capacity change from 0 to 256
[  361.576273][   T30] audit: type=1800 audit(1770685923.242:58): pid=7201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.391" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=1048632 res=0 errno=0
[  362.763093][ T7207] loop1: detected capacity change from 0 to 4096
[  363.292109][ T7227] syz.2.399 uses obsolete (PF_INET,SOCK_PACKET)
[  364.774311][ T7244] loop4: detected capacity change from 0 to 512
[  364.985699][ T7244] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  365.108116][ T7244] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  365.601941][ T6084] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  366.118213][ T5915] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  366.322530][ T5915] usb 4-1: Using ep0 maxpacket: 32
[  366.401300][ T5915] usb 4-1: config 6 has an invalid interface number: 247 but max is 0
[  366.410060][ T5915] usb 4-1: config 6 has no interface number 0
[  366.483160][ T5915] usb 4-1: config 6 interface 247 has no altsetting 0
[  366.596410][ T5915] usb 4-1: New USB device found, idVendor=12d1, idProduct=1442, bcdDevice=b2.76
[  366.606208][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  366.614787][ T5915] usb 4-1: Product: syz
[  366.621402][ T5915] usb 4-1: Manufacturer: syz
[  366.626224][ T5915] usb 4-1: SerialNumber: syz
[  367.068304][ T7265] loop1: detected capacity change from 0 to 40427
[  367.210880][ T7265] F2FS-fs (loop1): Image doesn't support compression
[  367.218048][ T7265] F2FS-fs (loop1): build fault injection rate: 690
[  367.271161][ T7265] F2FS-fs (loop1): invalid crc value
[  367.632913][ T7268] loop2: detected capacity change from 0 to 32768
[  367.708151][ T7268] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.416 (7268)
[  367.782116][ T7265] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  367.825467][ T7265] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  367.831260][ T7268] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  367.843838][ T7268] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  368.040197][   T30] audit: type=1326 audit(1770685929.652:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.3.411" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f992479af79 code=0x0
[  368.161745][ T5915] usb 4-1: bad CDC descriptors
[  368.171368][ T5915] option 4-1:6.247: GSM modem (1-port) converter detected
[  368.204067][ T5915] usb 4-1: USB disconnect, device number 6
[  368.221173][ T5915] option 4-1:6.247: device disconnected
[  368.473898][ T7268] BTRFS info (device loop2): rebuilding free space tree
[  368.521087][ T7268] BTRFS info (device loop2): disabling free space tree
[  368.531845][ T7268] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  368.542057][ T7268] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  368.580249][ T7268] BTRFS info (device loop2): setting nodatasum
[  368.586700][ T7268] BTRFS info (device loop2): setting nodatacow
[  368.593401][ T7268] BTRFS info (device loop2): turning off barriers
[  368.600389][ T7268] BTRFS info (device loop2): force clearing of disk cache
[  369.000052][ T5794] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  369.987932][   T50] Bluetooth: hci0: command 0x0406 tx timeout
[  370.319749][ T7298] loop0: detected capacity change from 0 to 32768
[  370.336077][ T7298] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.422 (7298)
[  370.368515][ T7298] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  370.381157][ T7298] BTRFS info (device loop0): using blake2b (blake2b-256-lib) checksum algorithm
[  370.796003][ T7298] BTRFS info (device loop0): enabling ssd optimizations
[  370.803458][ T7298] BTRFS info (device loop0): turning on async discard
[  370.810968][ T7298] BTRFS info (device loop0): enabling free space tree
[  370.818142][ T7298] BTRFS info (device loop0): use zstd compression, level 3
[  371.668351][ T5785] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  372.026152][ T7327] loop4: detected capacity change from 0 to 1024
[  372.071300][ T7327] EXT4-fs: inline encryption not supported
[  372.155764][ T7327] EXT4-fs: Ignoring removed nobh option
[  372.161753][ T7327] EXT4-fs: Ignoring removed bh option
[  372.476825][ T7327] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  372.615352][ T7340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.427'.
[  372.871503][ T7342] loop1: detected capacity change from 0 to 128
[  373.149399][ T7342] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  373.265914][ T7342] ext4 filesystem being mounted at /88/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  373.333557][ T6084] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  373.611828][ T7349] loop3: detected capacity change from 0 to 16
[  373.758492][ T7349] erofs (device loop3): unidentified incompatible feature 600, please upgrade kernel
[  373.970136][ T5840] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  374.232336][ T5840] usb 2-1: config 0 has no interfaces?
[  374.238360][ T5840] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  374.250964][ T5840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  374.420838][ T5840] usb 2-1: config 0 descriptor??
[  374.682751][ T5840] usb 2-1: USB disconnect, device number 7
[  375.201563][ T7362] loop4: detected capacity change from 0 to 512
[  375.484561][ T5840] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  375.671340][ T5783] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  375.773444][ T5840] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  375.787085][ T5840] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  375.797447][ T5840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  375.924583][ T7368] loop3: detected capacity change from 0 to 512
[  375.956707][ T5840] usb 3-1: config 0 descriptor??
[  376.028018][ T7368] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  376.148264][ T7368] EXT4-fs (loop3): 1 truncate cleaned up
[  376.218490][ T7368] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  377.439526][ T5793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  377.575634][ T7386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.449'.
[  377.585251][ T7386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.449'.
[  377.712274][ T7386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.449'.
[  377.725977][ T7386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.449'.
[  378.518522][ T5840] usbhid 3-1:0.0: can't add hid device: -71
[  378.525628][ T5840] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  378.630287][ T5840] usb 3-1: USB disconnect, device number 6
[  378.838195][ T5915] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  378.858245][ T5847] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  379.047841][ T5915] usb 4-1: Using ep0 maxpacket: 8
[  379.075600][ T5847] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  379.118543][ T5847] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  379.130111][ T5847] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  379.140035][ T5915] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13
[  379.149813][ T5847] usb 2-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  379.165349][ T5847] usb 2-1: config 7 interface 0 has no altsetting 0
[  379.173198][ T5847] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[  379.182893][ T5847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  379.233586][ T5915] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  379.243546][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  379.252082][ T5915] usb 4-1: Product: syz
[  379.256505][ T5915] usb 4-1: Manufacturer: syz
[  379.266336][ T5915] usb 4-1: SerialNumber: syz
[  379.386395][ T5915] usb 4-1: config 0 descriptor??
[  379.459867][ T5915] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  380.492153][ T5915] gspca_zc3xx: reg_w_i err -71
[  380.530191][ T7407] loop4: detected capacity change from 0 to 32768
[  380.618011][ T7407] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.459 (7407)
[  380.648909][ T7407] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  380.659717][ T7407] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  380.787355][ T5847] input: HID 0458:5010 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:7.0/0003:0458:5010.0008/input/input8
[  380.922610][ T5847] kye 0003:0458:5010.0008: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.1-1/input0
[  380.965475][ T7407] BTRFS info (device loop4): rebuilding free space tree
[  380.993260][ T7407] BTRFS info (device loop4): turning off barriers
[  381.004767][ T7407] BTRFS info (device loop4): turning on async discard
[  381.011938][ T7407] BTRFS info (device loop4): enabling free space tree
[  381.019093][ T7407] BTRFS info (device loop4): force clearing of disk cache
[  381.026455][ T7407] BTRFS info (device loop4): max_inline set to 17
[  381.078021][ T5915] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  381.085079][ T5915] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71
[  381.206722][ T5846] usb 2-1: USB disconnect, device number 8
[  381.240666][ T5915] usb 4-1: USB disconnect, device number 7
[  381.724863][ T6084] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  382.033982][ T7430] fido_id[7430]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  382.254558][ T7436] loop3: detected capacity change from 0 to 512
[  382.425186][ T7436] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  382.529520][ T7446] loop2: detected capacity change from 0 to 512
[  382.547033][ T7436] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  382.590666][ T7446] EXT4-fs (loop2): 1 truncate cleaned up
[  382.600018][ T7446] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  382.632518][ T7436] capability: warning: `syz.3.465' uses deprecated v2 capabilities in a way that may be insecure
[  382.756539][   T30] audit: type=1800 audit(1770685944.422:60): pid=7446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.468" name="file0" dev="loop2" ino=13 res=0 errno=0
[  382.835820][ T7446] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.468: bg 0: block 465: padding at end of block bitmap is not set
[  382.926509][ T7446] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem
[  383.009651][ T7446] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.468: invalid indirect mapped block 234881024 (level 0)
[  383.099933][ T5793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  383.484927][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  383.918786][ T7456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.471'.
[  384.165329][ T7460] loop2: detected capacity change from 0 to 128
[  385.933370][ T7461] loop1: detected capacity change from 0 to 65536
[  386.007140][ T7468] loop3: detected capacity change from 0 to 1024
[  386.080410][ T7461] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  386.112668][ T7468] EXT4-fs: Ignoring removed bh option
[  386.144166][ T7470] loop0: detected capacity change from 0 to 1024
[  386.206626][ T7470] EXT4-fs: Ignoring removed nobh option
[  386.212790][ T7470] EXT4-fs: Ignoring removed nomblk_io_submit option
[  386.305122][ T7468] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  386.407410][ T7461] XFS (loop1): Ending clean mount
[  386.458256][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  386.576096][ T5783] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  386.662392][ T7470] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  386.691142][ T7468] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #12: block 7: comm syz.3.477: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[  386.773621][ T7468] EXT4-fs (loop3): Remounting filesystem read-only
[  387.889659][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  387.990412][ T5793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  388.206303][ T7496] netlink: 6 bytes leftover after parsing attributes in process `syz.2.484'.
[  388.345761][ T7498] team_slave_0: entered allmulticast mode
[  388.453070][ T7498] team_slave_0: entered promiscuous mode
[  389.842097][ T7504] loop2: detected capacity change from 0 to 32768
[  389.863294][ T7504] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.487 (7504)
[  389.890652][ T7504] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  389.901374][ T7504] BTRFS info (device loop2): using blake2b (blake2b-256-lib) checksum algorithm
[  390.480712][ T7504] BTRFS info (device loop2): enabling ssd optimizations
[  390.488999][ T7504] BTRFS info (device loop2): turning on async discard
[  390.496149][ T7504] BTRFS info (device loop2): enabling free space tree
[  390.503443][ T7504] BTRFS info (device loop2): use zstd compression, level 3
[  391.166665][ T5794] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  393.119093][ T7565] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.503'.
[  394.110768][ T7577] Invalid ELF header magic: != ELF
[  395.711303][ T7587] loop3: detected capacity change from 0 to 32768
[  395.728719][ T7587] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.511 (7587)
[  395.842504][ T7587] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  395.857366][ T7587] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  395.874249][ T7587] workqueue: max_active 33554440 requested for btrfs-worker is out of range, clamping between 1 and 2048
[  395.908413][ T7587] workqueue: max_active 33554440 requested for btrfs-delalloc is out of range, clamping between 1 and 2048
[  395.931469][ T7593] loop2: detected capacity change from 0 to 16
[  395.980933][ T7587] workqueue: max_active 33554440 requested for btrfs-endio is out of range, clamping between 1 and 2048
[  396.012027][ T7587] workqueue: max_active 33554440 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048
[  396.083442][ T7587] workqueue: max_active 33554440 requested for btrfs-rmw is out of range, clamping between 1 and 2048
[  396.103157][ T7593] erofs (device loop2): mounted with root inode @ nid 36.
[  396.134708][ T7587] workqueue: max_active 33554440 requested for btrfs-endio-write is out of range, clamping between 1 and 2048
[  396.348046][ T7587] BTRFS info (device loop3): rebuilding free space tree
[  396.459688][ T7587] BTRFS info (device loop3): disabling free space tree
[  396.470560][ T7587] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  396.481972][ T7587] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  396.543350][ T7587] BTRFS info (device loop3): disabling tree log
[  396.550509][ T7587] BTRFS info (device loop3): turning on async discard
[  396.558204][ T7587] BTRFS info (device loop3): force clearing of disk cache
[  396.727785][   T30] audit: type=1800 audit(1770685958.342:61): pid=7587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.511" name="file1" dev="loop3" ino=260 res=0 errno=0
[  397.065710][ T5793] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  397.665433][ T7615] loop2: detected capacity change from 0 to 2048
[  397.784272][ T7613] loop1: detected capacity change from 0 to 4096
[  397.878108][ T7615] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  399.110063][ T7633] netlink: 'syz.1.524': attribute type 4 has an invalid length.
[  400.308433][ T7637] loop3: detected capacity change from 0 to 32768
[  400.488733][ T7637] JBD2: Ignoring recovery information on journal
[  400.596044][ T7637] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  400.669255][ T7637] (syz.3.527,7637,0):ocfs2_read_blocks_sync:112 ERROR: status = -12
[  400.678971][ T7637] (syz.3.527,7637,0):ocfs2_group_add:503 ERROR: Can't read the group descriptor # 35184372089856 from the device.
[  401.032636][ T5793] ocfs2: Unmounting device (7,3) on (node local)
[  401.236320][ T5847] libceph: connect (1)[c::]:6789 error -101
[  401.293152][ T5847] libceph: mon0 (1)[c::]:6789 connect error
[  401.316765][ T5840] libceph: connect (1)[b::]:6789 error -101
[  401.328788][ T5840] libceph: mon0 (1)[b::]:6789 connect error
[  401.361309][ T5840] libceph: connect (1)[b::]:6789 error -101
[  401.383221][ T5840] libceph: mon0 (1)[b::]:6789 connect error
[  401.599073][ T5840] libceph: connect (1)[c::]:6789 error -101
[  401.605467][ T5840] libceph: mon0 (1)[c::]:6789 connect error
[  401.773243][ T5840] libceph: connect (1)[b::]:6789 error -101
[  401.812919][ T5840] libceph: mon0 (1)[b::]:6789 connect error
[  401.865656][ T7650] ceph: No mds server is up or the cluster is laggy
[  401.908875][ T7657] ceph: No mds server is up or the cluster is laggy
[  402.100477][ T7666] netlink: 104 bytes leftover after parsing attributes in process `syz.0.536'.
[  403.504265][ T7681] loop4: detected capacity change from 0 to 128
[  403.604847][ T7681] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  403.961630][ T7688] netlink: 16 bytes leftover after parsing attributes in process `syz.2.544'.
[  404.172975][ T1332] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  405.259484][ T5840] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  405.551362][ T7692] loop4: detected capacity change from 0 to 40427
[  405.557809][ T5840] usb 2-1: Using ep0 maxpacket: 32
[  405.582275][ T7692] F2FS-fs (loop4): invalid crc value
[  405.691619][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  405.703122][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  405.978736][ T5840] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.50
[  405.991932][ T5840] usb 2-1: New USB device strings: Mfr=0, Product=32, SerialNumber=0
[  406.001272][ T5840] usb 2-1: Product: syz
[  406.097273][ T7692] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  406.130178][ T5840] usb 2-1: config 0 descriptor??
[  406.148407][ T7692] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  406.226946][ T5840] hub 2-1:0.0: USB hub found
[  406.268230][ T7692] F2FS-fs (loop4): Stopped filesystem due to reason: 0
[  406.538641][ T5840] hub 2-1:0.0: 1 port detected
[  407.511899][ T5840] hub 2-1:0.0: activate --> -90
[  407.918828][ T5915] usb 2-1: USB disconnect, device number 9
[  408.990066][ T7734] sctp: [Deprecated]: syz.0.561 (pid 7734) Use of int in maxseg socket option.
[  408.990066][ T7734] Use struct sctp_assoc_value instead
[  409.032694][ T7736] netlink: 24 bytes leftover after parsing attributes in process `syz.3.562'.
[  409.068141][ T7736] bond0: invalid ARP target 0.0.0.0 specified for addition
[  409.075630][ T7736] bond0: option arp_ip_target: invalid value (0)
[  411.599965][ T7771] loop3: detected capacity change from 0 to 512
[  411.992684][ T7771] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  412.071107][ T7771] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  412.342331][ T7771] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.576: corrupted inode contents
[  412.531048][ T7771] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #2: comm syz.3.576: mark_inode_dirty error
[  412.577842][ T7765] loop0: detected capacity change from 0 to 65536
[  412.658106][ T7765] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  412.673122][ T7771] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.576: corrupted inode contents
[  412.689836][ T7771] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.576: mark_inode_dirty error
[  412.797404][ T7765] XFS (loop0): Ending clean mount
[  412.809513][ T7765] XFS (loop0): Quotacheck needed: Please wait.
[  412.918928][ T7765] XFS (loop0): Quotacheck: Done.
[  413.208687][ T5785] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  413.580750][ T5793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  414.174406][ T7809] netlink: 'syz.3.583': attribute type 8 has an invalid length.
[  415.380506][ T7816] loop4: detected capacity change from 0 to 32768
[  415.423749][ T7816] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.587 (7816)
[  415.444877][ T7816] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  415.455833][ T7816] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  415.620730][ T7826] netlink: 'syz.2.590': attribute type 9 has an invalid length.
[  415.706895][ T5840] kernel read not supported for file /vcs (pid: 5840 comm: kworker/1:3)
[  415.733352][ T7816] BTRFS info (device loop4): enabling ssd optimizations
[  415.741169][ T7816] BTRFS info (device loop4): turning on async discard
[  415.748356][ T7816] BTRFS info (device loop4): enabling free space tree
[  416.626153][ T7839] loop1: detected capacity change from 0 to 32768
[  416.642487][ T7839] btrfs: Deprecated parameter 'usebackuproot'
[  416.649062][ T7839] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  416.677297][ T7839] BTRFS info: device /dev/loop1 (7:1) using temp-fsid a28707bc-1cbf-45c6-92f9-40bd9280a29f
[  416.688994][ T7839] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.592 (7839)
[  416.755627][ T7839] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  416.766303][ T7839] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  416.922727][ T6084] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  417.105103][ T7839] BTRFS info (device loop1): rebuilding free space tree
[  417.195443][ T7839] BTRFS info (device loop1): disabling free space tree
[  417.202756][ T7839] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  417.212789][ T7839] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  417.254028][ T7839] BTRFS info (device loop1): turning on async discard
[  417.261242][ T7839] BTRFS info (device loop1): force clearing of disk cache
[  417.268656][ T7839] BTRFS info (device loop1): trying to use backup root at mount time
[  417.276954][ T7839] BTRFS info (device loop1): force lzo compression, level 1
[  417.286062][ T7859] loop0: detected capacity change from 0 to 128
[  417.369587][   T30] audit: type=1800 audit(1770685979.042:62): pid=7839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.592" name="file1" dev="loop1" ino=260 res=0 errno=0
[  417.848595][ T5783] BTRFS info (device loop1): last unmount of filesystem a28707bc-1cbf-45c6-92f9-40bd9280a29f
[  419.181784][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  419.188980][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  419.203130][ T7867] loop0: detected capacity change from 0 to 32768
[  419.251583][ T7867] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.598 (7867)
[  419.300590][ T7867] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  419.312183][ T7867] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  419.775997][ T7867] BTRFS info (device loop0): enabling ssd optimizations
[  419.783912][ T7867] BTRFS info (device loop0): turning on async discard
[  419.791175][ T7867] BTRFS info (device loop0): enabling free space tree
[  419.888988][   T30] audit: type=1800 audit(1770685981.552:63): pid=7867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.598" name="file2" dev="loop0" ino=261 res=0 errno=0
[  420.355219][ T5785] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  421.099167][ T7909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.605'.
[  421.108366][ T7909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.605'.
[  422.388933][ T7916] loop4: detected capacity change from 0 to 512
[  423.205326][ T7916] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.608: ea_inode with extended attributes
[  423.539365][ T7916] EXT4-fs (loop4): Remounting filesystem read-only
[  423.602505][ T7916] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -30)
[  423.680735][ T7921] loop3: detected capacity change from 0 to 40427
[  423.772343][ T7921] F2FS-fs (loop3): invalid crc value
[  423.897949][ T7916] EXT4-fs (loop4): 1 orphan inode deleted
[  424.082953][ T7916] EXT4-fs (loop4): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  424.147285][ T7927] loop2: detected capacity change from 0 to 2048
[  424.164518][ T7921] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  424.185179][ T7921] F2FS-fs (loop3): Start checkpoint disabled!
[  424.205418][ T7921] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0
[  424.235526][ T7921] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  424.374096][ T7927] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  424.595609][ T7927] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  424.685463][ T7927] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28
[  424.698661][ T7927] EXT4-fs (loop2): This should not happen!! Data will be lost
[  424.698661][ T7927] 
[  424.708746][ T7927] EXT4-fs (loop2): Total free blocks count 0
[  424.714948][ T7927] EXT4-fs (loop2): Free/Dirty block details
[  424.721398][ T7927] EXT4-fs (loop2): free_blocks=2415919504
[  424.731122][ T7927] EXT4-fs (loop2): dirty_blocks=48
[  424.736458][ T7927] EXT4-fs (loop2): Block reservation details
[  424.743848][ T7927] EXT4-fs (loop2): i_reserved_data_blocks=3
[  427.262907][ T5793] INFO: The task syz-executor:5793 has been waiting for writeback completion for more than 2 seconds.
[  427.266054][ T4353] kworker/u8:8: attempt to access beyond end of device
[  427.266054][ T4353] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  427.299659][ T4353] CPU: 1 UID: 0 PID: 4353 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  427.299818][ T4353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  427.299936][ T4353] Workqueue: writeback wb_workfn (flush-7:3)
[  427.300119][ T4353] Call Trace:
[  427.300171][ T4353]  <TASK>
[  427.300226][ T4353]  __dump_stack+0x26/0x30
[  427.300393][ T4353]  dump_stack_lvl+0x14c/0x1c0
[  427.300584][ T4353]  dump_stack+0x1e/0x25
[  427.300744][ T4353]  f2fs_handle_critical_error+0xa6f/0xc20
[  427.301009][ T4353]  f2fs_stop_checkpoint+0x65/0x80
[  427.301162][ T4353]  f2fs_write_end_io+0x1013/0x2470
[  427.301373][ T4353]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  427.301532][ T4353]  bio_endio+0xf92/0x10e0
[  427.301682][ T4353]  submit_bio_noacct+0x200d/0x2960
[  427.301888][ T4353]  submit_bio+0x57a/0x620
[  427.302043][ T4353]  f2fs_submit_write_bio+0x92/0x250
[  427.302250][ T4353]  __submit_merged_bio+0x16f/0x6a0
[  427.302464][ T4353]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  427.302693][ T4353]  __submit_merged_write_cond+0x44a/0x990
[  427.302916][ T4353]  f2fs_write_data_pages+0x4d18/0x57a0
[  427.303164][ T4353]  ? kmsan_get_metadata+0xf1/0x160
[  427.303418][ T4353]  ? kmsan_get_metadata+0xf1/0x160
[  427.303614][ T4353]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  427.303829][ T4353]  ? kmsan_get_metadata+0xf1/0x160
[  427.304038][ T4353]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[  427.304235][ T4353]  ? kmsan_internal_unpoison_memory+0x14/0x20
[  427.304450][ T4353]  ? sysvec_apic_timer_interrupt+0x52/0x90
[  427.304645][ T4353]  ? kmsan_get_metadata+0xf1/0x160
[  427.304846][ T4353]  ? kmsan_get_metadata+0xf1/0x160
[  427.305045][ T4353]  ? kmsan_get_metadata+0xf1/0x160
[  427.305251][ T4353]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  427.305462][ T4353]  ? kmsan_get_metadata+0xf1/0x160
[  427.305674][ T4353]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  427.305886][ T4353]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  427.306042][ T4353]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  427.306194][ T4353]  do_writepages+0x3f2/0x860
[  427.306352][ T4353]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  427.306582][ T4353]  ? queue_io+0x711/0x790
[  427.306734][ T4353]  ? kmsan_get_metadata+0xf1/0x160
[  427.306967][ T4353]  __writeback_single_inode+0x101/0x1180
[  427.307153][ T4353]  ? kmsan_get_metadata+0xf1/0x160
[  427.307379][ T4353]  writeback_sb_inodes+0xb2d/0x1f10
[  427.307675][ T4353]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  427.307911][ T4353]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  427.308140][ T4353]  wb_writeback+0x4d0/0xc00
[  427.308321][ T4353]  ? queue_io+0x411/0x790
[  427.308516][ T4353]  wb_workfn+0x397/0x1900
[  427.308659][ T4353]  ? kmsan_get_metadata+0xf1/0x160
[  427.308896][ T4353]  ? __pfx_wb_workfn+0x10/0x10
[  427.309034][ T4353]  process_scheduled_works+0xae7/0x1d60
[  427.309298][ T4353]  worker_thread+0x1741/0x1de0
[  427.309559][ T4353]  kthread+0xd5a/0xf00
[  427.309703][ T4353]  ? __pfx_worker_thread+0x10/0x10
[  427.309919][ T4353]  ? __pfx_kthread+0x10/0x10
[  427.310069][ T4353]  ret_from_fork+0x207/0x6f0
[  427.310268][ T4353]  ? __switch_to+0x521/0x750
[  427.310434][ T4353]  ? __pfx_kthread+0x10/0x10
[  427.310585][ T4353]  ret_from_fork_asm+0x1a/0x30
[  427.310805][ T4353]  </TASK>
[  427.629098][ T4353] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  427.636349][ T4353] CPU: 1 UID: 0 PID: 4353 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  427.636504][ T4353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  427.636612][ T4353] Workqueue: writeback wb_workfn (flush-7:3)
[  427.636783][ T4353] Call Trace:
[  427.636834][ T4353]  <TASK>
[  427.636883][ T4353]  __dump_stack+0x26/0x30
[  427.637048][ T4353]  dump_stack_lvl+0x14c/0x1c0
[  427.637219][ T4353]  dump_stack+0x1e/0x25
[  427.637370][ T4353]  f2fs_handle_critical_error+0xa6f/0xc20
[  427.637627][ T4353]  f2fs_stop_checkpoint+0x65/0x80
[  427.637775][ T4353]  f2fs_write_end_io+0x1013/0x2470
[  427.638002][ T4353]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  427.638155][ T4353]  bio_endio+0xf92/0x10e0
[  427.638324][ T4353]  submit_bio_noacct+0x200d/0x2960
[  427.638547][ T4353]  submit_bio+0x57a/0x620
[  427.638713][ T4353]  f2fs_submit_write_bio+0x92/0x250
[  427.638923][ T4353]  __submit_merged_bio+0x16f/0x6a0
[  427.639125][ T4353]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  427.639352][ T4353]  __submit_merged_write_cond+0x44a/0x990
[  427.639604][ T4353]  f2fs_write_data_pages+0x4d18/0x57a0
[  427.639848][ T4353]  ? kmsan_get_metadata+0xf1/0x160
[  427.640097][ T4353]  ? kmsan_get_metadata+0xf1/0x160
[  427.640324][ T4353]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  427.640546][ T4353]  ? kmsan_get_metadata+0xf1/0x160
[  427.640755][ T4353]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[  427.640963][ T4353]  ? kmsan_internal_unpoison_memory+0x14/0x20
[  427.641171][ T4353]  ? sysvec_apic_timer_interrupt+0x52/0x90
[  427.641371][ T4353]  ? kmsan_get_metadata+0xf1/0x160
[  427.641648][ T4353]  ? kmsan_get_metadata+0xf1/0x160
[  427.641906][ T4353]  ? kmsan_get_metadata+0xf1/0x160
[  427.642191][ T4353]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  427.642473][ T4353]  ? kmsan_get_metadata+0xf1/0x160
[  427.642728][ T4353]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  427.642969][ T4353]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  427.643126][ T4353]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  427.643282][ T4353]  do_writepages+0x3f2/0x860
[  427.643456][ T4353]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  427.643677][ T4353]  ? queue_io+0x711/0x790
[  427.643822][ T4353]  ? kmsan_get_metadata+0xf1/0x160
[  427.644055][ T4353]  __writeback_single_inode+0x101/0x1180
[  427.644237][ T4353]  ? kmsan_get_metadata+0xf1/0x160
[  427.644482][ T4353]  writeback_sb_inodes+0xb2d/0x1f10
[  427.644748][ T4353]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  427.644986][ T4353]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  427.645212][ T4353]  wb_writeback+0x4d0/0xc00
[  427.645404][ T4353]  ? queue_io+0x411/0x790
[  427.645577][ T4353]  wb_workfn+0x397/0x1900
[  427.645714][ T4353]  ? kmsan_get_metadata+0xf1/0x160
[  427.645942][ T4353]  ? __pfx_wb_workfn+0x10/0x10
[  427.646076][ T4353]  process_scheduled_works+0xae7/0x1d60
[  427.646341][ T4353]  worker_thread+0x1741/0x1de0
[  427.646603][ T4353]  kthread+0xd5a/0xf00
[  427.646749][ T4353]  ? __pfx_worker_thread+0x10/0x10
[  427.646974][ T4353]  ? __pfx_kthread+0x10/0x10
[  427.647122][ T4353]  ret_from_fork+0x207/0x6f0
[  427.647321][ T4353]  ? __switch_to+0x521/0x750
[  427.647499][ T4353]  ? __pfx_kthread+0x10/0x10
[  427.647645][ T4353]  ret_from_fork_asm+0x1a/0x30
[  427.647869][ T4353]  </TASK>
[  427.973213][ T4353] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  428.576974][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  429.458458][ T8013] loop0: detected capacity change from 0 to 32768
[  429.586688][ T8013] 
[  429.586688][ T8013]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  429.586688][ T8013] 
[  429.681080][ T8013] 
[  429.681080][ T8013]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  429.681080][ T8013] 
[  429.692065][ T8013] 
[  429.692065][ T8013]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  429.692065][ T8013] 
[  429.702904][ T8013] 
[  429.702904][ T8013]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  429.702904][ T8013] 
[  429.713697][ T8013] 
[  429.713697][ T8013]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  429.713697][ T8013] 
[  429.724435][ T8013] 
[  429.724435][ T8013]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  429.724435][ T8013] 
[  429.761279][  T112] 
[  429.761279][  T112]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  429.761279][  T112] 
[  430.535666][ T7987] 
[  430.535666][ T7987]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  430.535666][ T7987] 
[  430.647714][ T7987] 
[  430.647714][ T7987]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  430.647714][ T7987] 
[  430.708414][ T5847] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  430.769602][ T5785] 
[  430.769602][ T5785]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  430.769602][ T5785] 
[  430.783735][  T111] 
[  430.783735][  T111]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  430.783735][  T111] 
[  430.880765][ T5785] 
[  430.880765][ T5785]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  430.880765][ T5785] 
[  430.933488][ T7914] syz.4.608 (7914) used greatest stack depth: 3072 bytes left
[  430.994073][ T5847] usb 3-1: Using ep0 maxpacket: 16
[  431.081995][ T5847] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  431.093453][ T5847] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  431.106855][ T5847] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  431.116372][ T5847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  431.149808][ T6084] EXT4-fs (loop4): unmounting filesystem 00000800-0000-0000-0000-000000000000.
[  431.334672][ T5847] usb 3-1: config 0 descriptor??
[  432.031458][ T5847] HID 045e:07da: Invalid code 65791 type 1
[  432.349554][ T5847] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0009/input/input9
[  432.616378][ T5847] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  433.034246][ T5847] usb 3-1: USB disconnect, device number 7
[  433.126395][ T8040] loop3: detected capacity change from 0 to 32768
[  433.310118][ T8040] JBD2: Ignoring recovery information on journal
[  433.516033][ T8040] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  434.038645][ T5793] ocfs2: Unmounting device (7,3) on (node local)
[  435.093160][ T8050] fido_id[8050]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  436.908058][ T5915] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  437.118356][ T8067] loop0: detected capacity change from 0 to 32768
[  437.141407][ T8067] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.633 (8067)
[  437.186824][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  437.198573][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  437.208856][ T5915] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  437.225492][ T5915] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  437.236154][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  437.308462][ T8067] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  437.323998][ T8067] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[  437.392736][ T5915] usb 5-1: config 0 descriptor??
[  437.539120][ T8067] BTRFS info (device loop0): enabling ssd optimizations
[  437.546453][ T8067] BTRFS info (device loop0): turning on async discard
[  437.553646][ T8067] BTRFS info (device loop0): enabling free space tree
[  437.721374][ T8067] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8)
[  438.094807][ T5915] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  438.613155][ T5847] usb 5-1: USB disconnect, device number 2
[  438.621484][ T5785] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  439.338142][   T50] Bluetooth: hci0: command 0x0406 tx timeout
[  439.851686][ T8100] fido_id[8100]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  440.229949][ T8110] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  440.269955][ T8110] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  440.277270][ T8110] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  440.284730][ T8110] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  440.292063][ T8110] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  440.299704][ T8110] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  440.306931][ T8110] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  440.314396][ T8110] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  440.321785][ T8110] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  440.329100][ T8110] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  443.714093][ T8122] loop2: detected capacity change from 0 to 128
[  444.632467][ T7969] kworker/u8:13: attempt to access beyond end of device
[  444.632467][ T7969] loop2: rw=1, sector=145, nr_sectors = 8 limit=128
[  444.698142][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  444.769285][ T7969] kworker/u8:13: attempt to access beyond end of device
[  444.769285][ T7969] loop2: rw=1, sector=161, nr_sectors = 8 limit=128
[  445.080297][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  446.231723][    T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!!
[  449.926489][ T8174] loop4: detected capacity change from 0 to 40427
[  449.949404][ T8174] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  449.957390][ T8174] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  450.023315][ T8174] F2FS-fs (loop4): invalid crc value
[  450.414238][ T8174] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  450.463975][ T8174] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  450.474089][ T8174] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  450.577172][ T8177] loop0: detected capacity change from 0 to 4096
[  450.861524][ T8177] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  451.022212][   T30] audit: type=1800 audit(1770686012.692:64): pid=8177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.670" name="file1" dev="loop0" ino=15 res=0 errno=0
[  451.153542][ T8177] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.670: corrupted inode contents
[  451.270235][ T8177] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #15: comm syz.0.670: mark_inode_dirty error
[  451.397891][ T8177] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.670: corrupted inode contents
[  451.767982][ T8177] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #15: comm syz.0.670: mark_inode_dirty error
[  451.878083][ T8177] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.670: corrupted inode contents
[  452.035583][ T8177] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #15: comm syz.0.670: mark_inode_dirty error
[  452.156286][ T8177] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.670: corrupted inode contents
[  452.159424][ T8197] loop3: detected capacity change from 0 to 512
[  452.272344][ T8177] EXT4-fs error (device loop0): ext4_truncate:4635: inode #15: comm syz.0.670: mark_inode_dirty error
[  452.397787][ T8177] EXT4-fs error (device loop0) in ext4_setattr:6035: Corrupt filesystem
[  452.567089][ T8197] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  452.688705][ T8197] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  452.760630][ T8206] loop4: detected capacity change from 0 to 512
[  452.920387][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  452.930518][ T8206] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  453.264152][ T8206] EXT4-fs (loop4): 1 truncate cleaned up
[  453.330155][ T8206] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  454.460771][ T6084] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  454.515822][ T8215] loop1: detected capacity change from 0 to 32768
[  454.530720][ T8215] btrfs: Deprecated parameter 'usebackuproot'
[  454.537067][ T8215] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  454.560644][ T8215] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.682 (8215)
[  454.640277][ T8215] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  454.652496][ T8215] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  454.720721][ T5793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  454.908118][ T7969] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  454.922874][ T8215] BTRFS error (device loop1): failed to load root extent
[  454.935228][ T8215] BTRFS warning (device loop1): try to load backup roots slot 1
[  454.966190][ T7969] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  454.980367][ T8215] BTRFS warning (device loop1): couldn't read tree root
[  454.991750][ T8215] BTRFS warning (device loop1): try to load backup roots slot 2
[  455.021785][ T7969] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  455.032741][ T8215] BTRFS warning (device loop1): couldn't read tree root
[  455.044573][ T8215] BTRFS warning (device loop1): try to load backup roots slot 3
[  455.154040][ T8215] BTRFS info (device loop1): rebuilding free space tree
[  455.253738][ T8215] BTRFS info (device loop1): disabling free space tree
[  455.261612][ T8215] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  455.271839][ T8215] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  455.362837][ T8215] BTRFS info (device loop1): allowing degraded mounts
[  455.370232][ T8215] BTRFS info (device loop1): enabling ssd optimizations
[  455.377416][ T8215] BTRFS info (device loop1): turning on sync discard
[  455.384635][ T8215] BTRFS info (device loop1): force clearing of disk cache
[  455.392960][ T8215] BTRFS info (device loop1): trying to use backup root at mount time
[  455.401405][ T8215] BTRFS info (device loop1): use lzo compression, level 1
[  455.408901][ T8215] BTRFS info (device loop1): max_inline set to 0
[  455.795191][ T8241] kernel read not supported for file /file0 (pid: 8241 comm: syz.3.685)
[  455.857776][   T30] audit: type=1800 audit(1770686017.522:65): pid=8241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.685" name="file0" dev="mqueue" ino=16553 res=0 errno=0
[  456.063699][ T5783] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  456.664856][ T8244] loop0: detected capacity change from 0 to 512
[  456.837274][ T7961] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  457.092471][ T8244] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  457.209382][ T8248] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  457.235551][ T8244] ext4 filesystem being mounted at /146/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  457.248926][ T7961] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  457.436927][ T8244] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #2: comm syz.0.689: corrupted inode contents
[  457.548332][ T7961] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  457.577106][ T8244] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #2: comm syz.0.689: mark_inode_dirty error
[  457.667871][ T8244] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #2: comm syz.0.689: corrupted inode contents
[  457.778181][ T8244] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.689: mark_inode_dirty error
[  457.824216][ T8247] loop3: detected capacity change from 0 to 32768
[  457.890766][ T7961] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  457.979720][ T8247] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  458.538131][ T8247] XFS (loop3): Ending clean mount
[  458.556515][ T8247] XFS (loop3): Quotacheck needed: Please wait.
[  458.642948][ T8247] XFS (loop3): Quotacheck: Done.
[  459.001975][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  459.065156][ T7961] bridge_slave_1: left allmulticast mode
[  459.071452][ T7961] bridge_slave_1: left promiscuous mode
[  459.078343][ T7961] bridge0: port 2(bridge_slave_1) entered disabled state
[  459.271431][ T7961] bridge_slave_0: left allmulticast mode
[  459.277862][ T7961] bridge_slave_0: left promiscuous mode
[  459.284524][ T7961] bridge0: port 1(bridge_slave_0) entered disabled state
[  459.432593][ T5793] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  460.836048][ T7961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  460.920038][ T7961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  460.965650][ T7961] bond0 (unregistering): Released all slaves
[  461.980259][ T7961] hsr_slave_0: left promiscuous mode
[  462.010831][ T7961] hsr_slave_1: left promiscuous mode
[  462.049387][ T7961] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  462.056998][ T7961] batman_adv: batadv0: Removing interface: batadv_slave_0
[  462.140620][ T7961] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  462.148401][ T7961] batman_adv: batadv0: Removing interface: batadv_slave_1
[  462.264009][ T7961] veth1_macvtap: left promiscuous mode
[  462.306396][ T7961] veth0_macvtap: left promiscuous mode
[  462.314223][ T7961] veth0_vlan: left promiscuous mode
[  463.462304][ T5076] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  463.479274][ T5076] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  463.489297][ T5076] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  463.532332][ T5076] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  463.553569][ T5076] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  463.767009][   T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  463.783925][   T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  463.799387][   T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  463.834529][   T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  463.863823][   T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  464.772935][ T7961] team0 (unregistering): Port device team_slave_1 removed
[  464.976388][ T7961] team0 (unregistering): Port device team_slave_0 removed
[  465.662380][   T50] Bluetooth: hci0: command tx timeout
[  465.998172][   T50] Bluetooth: hci4: command tx timeout
[  467.748077][   T50] Bluetooth: hci0: command tx timeout
[  468.070172][   T50] Bluetooth: hci4: command tx timeout
[  469.040860][ T8278] chnl_net:caif_netlink_parms(): no params data found
[  469.224738][ T8332] batadv_slave_1: entered promiscuous mode
[  469.234467][ T8284] chnl_net:caif_netlink_parms(): no params data found
[  469.591995][ T8331] batadv_slave_1: left promiscuous mode
[  469.818406][   T50] Bluetooth: hci0: command tx timeout
[  470.138087][   T50] Bluetooth: hci4: command tx timeout
[  471.003754][ T8278] bridge0: port 1(bridge_slave_0) entered blocking state
[  471.017266][ T8278] bridge0: port 1(bridge_slave_0) entered disabled state
[  471.091779][ T8278] bridge_slave_0: entered allmulticast mode
[  471.125793][ T8278] bridge_slave_0: entered promiscuous mode
[  471.347648][ T8278] bridge0: port 2(bridge_slave_1) entered blocking state
[  471.355235][ T8278] bridge0: port 2(bridge_slave_1) entered disabled state
[  471.374263][ T8278] bridge_slave_1: entered allmulticast mode
[  471.400706][ T8278] bridge_slave_1: entered promiscuous mode
[  471.819716][ T8284] bridge0: port 1(bridge_slave_0) entered blocking state
[  471.831543][ T8284] bridge0: port 1(bridge_slave_0) entered disabled state
[  471.871088][ T8284] bridge_slave_0: entered allmulticast mode
[  471.896054][ T8284] bridge_slave_0: entered promiscuous mode
[  471.904260][   T50] Bluetooth: hci0: command tx timeout
[  471.967082][ T8284] bridge0: port 2(bridge_slave_1) entered blocking state
[  471.979830][ T8284] bridge0: port 2(bridge_slave_1) entered disabled state
[  472.039325][ T8284] bridge_slave_1: entered allmulticast mode
[  472.060508][ T8284] bridge_slave_1: entered promiscuous mode
[  472.217746][   T50] Bluetooth: hci4: command tx timeout
[  472.394488][ T8278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  472.503813][ T8278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  472.548712][ T8284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  472.786568][ T8284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  472.826776][ T8278] team0: Port device team_slave_0 added
[  473.037272][ T8278] team0: Port device team_slave_1 added
[  473.085804][ T8284] team0: Port device team_slave_0 added
[  473.231777][ T8284] team0: Port device team_slave_1 added
[  473.247992][ T5408] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  473.456679][ T5408] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  473.469036][ T5408] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  473.477288][ T5408] usb 2-1: Product: syz
[  473.482706][ T5408] usb 2-1: Manufacturer: syz
[  473.487641][ T5408] usb 2-1: SerialNumber: syz
[  473.530823][ T8278] batman_adv: batadv0: Adding interface: batadv_slave_0
[  473.538334][ T8278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  473.564815][ T8278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  473.630681][ T5408] usb 2-1: config 0 descriptor??
[  473.800096][ T8278] batman_adv: batadv0: Adding interface: batadv_slave_1
[  473.807316][ T8278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  473.834604][ T8278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  473.917381][ T8284] batman_adv: batadv0: Adding interface: batadv_slave_0
[  473.924731][ T8284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  473.952104][ T8284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  474.057666][ T8284] batman_adv: batadv0: Adding interface: batadv_slave_1
[  474.065040][ T8284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  474.094465][ T8284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  474.257885][ T5847] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  474.426755][ T5847] usb 4-1: Using ep0 maxpacket: 8
[  474.453540][ T5847] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  474.463277][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  474.471709][ T5847] usb 4-1: Product: syz
[  474.476096][ T5847] usb 4-1: Manufacturer: syz
[  474.480977][ T5847] usb 4-1: SerialNumber: syz
[  474.590507][ T5847] usb 4-1: config 0 descriptor??
[  474.684664][ T8278] hsr_slave_0: entered promiscuous mode
[  474.716400][ T5408] usb 2-1: non-Atmel transceiver xxxx19f5
[  474.756852][ T8278] hsr_slave_1: entered promiscuous mode
[  474.783501][ T8278] debugfs: 'hsr0' already exists in 'hsr'
[  474.789890][ T8278] Cannot create hsr debugfs directory
[  474.891748][ T5847] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  474.920441][ T5408] usb 2-1: Firmware version (0.0) predates our first public release.
[  474.929195][ T5408] usb 2-1: Please update to version 0.2 or newer
[  474.969080][ T5408] usb 2-1: atusb_probe: initialization failed, error = -19
[  475.034582][ T5408] usb 2-1: USB disconnect, device number 10
[  475.080961][ T5840] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  475.150893][ T5847] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  475.218110][ T5847] usb 4-1: USB disconnect, device number 8
[  475.294220][ T5840] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  475.306921][ T5840] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  475.320284][ T5840] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  475.335268][ T5840] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  475.345501][ T5840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  475.434645][ T5840] usb 1-1: config 0 descriptor??
[  475.523053][ T8284] hsr_slave_0: entered promiscuous mode
[  475.541750][ T8284] hsr_slave_1: entered promiscuous mode
[  475.578622][ T8284] debugfs: 'hsr0' already exists in 'hsr'
[  475.584673][ T8284] Cannot create hsr debugfs directory
[  476.081763][ T5840] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  476.245575][ T8409] netlink: 'syz.3.730': attribute type 10 has an invalid length.
[  476.399551][ T8412] netlink: 'syz.3.730': attribute type 10 has an invalid length.
[  476.803683][ T8409] team0: Port device dummy0 added
[  476.980708][ T8412] team0: Port device dummy0 removed
[  477.158616][ T8412] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  477.791110][ T8422] loop1: detected capacity change from 0 to 1024
[  477.957829][ T5845] usb 1-1: USB disconnect, device number 5
[  477.976138][ T8422] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  478.077949][ T8422] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  478.285246][ T8422] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: comm syz.1.733: lblock 0 mapped to illegal pblock 0 (length 1)
[  478.425610][ T8422] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  478.438570][ T8422] EXT4-fs (loop1): This should not happen!! Data will be lost
[  478.438570][ T8422] 
[  478.545127][ T8435] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: comm syz.1.733: lblock 0 mapped to illegal pblock 0 (length 1)
[  478.599986][ T8421] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: comm syz.1.733: lblock 0 mapped to illegal pblock 0 (length 1)
[  478.615929][ T8433] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: comm syz.1.733: lblock 0 mapped to illegal pblock 0 (length 1)
[  478.636378][ T8421] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: comm syz.1.733: lblock 0 mapped to illegal pblock 0 (length 1)
[  478.670802][ T8433] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: comm syz.1.733: lblock 0 mapped to illegal pblock 0 (length 1)
[  478.727180][ T8421] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: comm syz.1.733: lblock 0 mapped to illegal pblock 0 (length 1)
[  478.770295][ T8433] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: comm syz.1.733: lblock 0 mapped to illegal pblock 0 (length 1)
[  478.886057][ T8421] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: comm syz.1.733: lblock 0 mapped to illegal pblock 0 (length 1)
[  478.987048][ T8421] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: comm syz.1.733: lblock 0 mapped to illegal pblock 0 (length 1)
[  479.330397][ T8278] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  479.415179][ T8278] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  479.491768][ T8278] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  479.571993][ T8278] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  480.137421][ T8440] loop0: detected capacity change from 0 to 40427
[  480.184420][ T8440] F2FS-fs (loop0): invalid crc value
[  480.498464][ T8440] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  480.523327][ T8440] F2FS-fs (loop0): Start checkpoint disabled!
[  480.557013][ T8284] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  480.569341][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  480.576010][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  480.596116][ T8440] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0
[  480.617202][ T8440] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  480.676410][ T8284] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  480.797430][ T8284] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  480.856458][ T8284] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  480.945717][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  481.048007][ T5902] kworker/u8:9: attempt to access beyond end of device
[  481.048007][ T5902] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  481.062574][ T5902] CPU: 0 UID: 0 PID: 5902 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  481.062725][ T5902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  481.062839][ T5902] Workqueue: writeback wb_workfn (flush-7:0)
[  481.063018][ T5902] Call Trace:
[  481.063074][ T5902]  <TASK>
[  481.063126][ T5902]  __dump_stack+0x26/0x30
[  481.063295][ T5902]  dump_stack_lvl+0x14c/0x1c0
[  481.063483][ T5902]  dump_stack+0x1e/0x25
[  481.063646][ T5902]  f2fs_handle_critical_error+0xa6f/0xc20
[  481.063908][ T5902]  f2fs_stop_checkpoint+0x65/0x80
[  481.064060][ T5902]  f2fs_write_end_io+0x1013/0x2470
[  481.064272][ T5902]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  481.064430][ T5902]  bio_endio+0xf92/0x10e0
[  481.064597][ T5902]  submit_bio_noacct+0x200d/0x2960
[  481.064810][ T5902]  submit_bio+0x57a/0x620
[  481.064976][ T5902]  f2fs_submit_write_bio+0x92/0x250
[  481.065188][ T5902]  __submit_merged_bio+0x16f/0x6a0
[  481.065409][ T5902]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  481.065641][ T5902]  __submit_merged_write_cond+0x44a/0x990
[  481.065869][ T5902]  f2fs_write_data_pages+0x4d18/0x57a0
[  481.066178][ T5902]  ? kmsan_get_metadata+0xf1/0x160
[  481.066392][ T5902]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  481.066621][ T5902]  ? update_load_avg+0x1b96/0x2bd0
[  481.066811][ T5902]  ? kmsan_get_metadata+0xf1/0x160
[  481.067020][ T5902]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  481.067219][ T5902]  ? kmsan_get_metadata+0xf1/0x160
[  481.067425][ T5902]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  481.067633][ T5902]  ? kmsan_get_metadata+0xf1/0x160
[  481.067831][ T5902]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  481.068050][ T5902]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  481.068202][ T5902]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  481.068363][ T5902]  do_writepages+0x3f2/0x860
[  481.068518][ T5902]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  481.068736][ T5902]  ? queue_io+0x711/0x790
[  481.068882][ T5902]  ? kmsan_get_metadata+0xf1/0x160
[  481.069116][ T5902]  __writeback_single_inode+0x101/0x1180
[  481.069292][ T5902]  ? kmsan_get_metadata+0xf1/0x160
[  481.069584][ T5902]  writeback_sb_inodes+0xb2d/0x1f10
[  481.069859][ T5902]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  481.070101][ T5902]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  481.070350][ T5902]  wb_writeback+0x4d0/0xc00
[  481.070537][ T5902]  ? queue_io+0x411/0x790
[  481.070712][ T5902]  wb_workfn+0x397/0x1900
[  481.070856][ T5902]  ? kmsan_get_metadata+0xf1/0x160
[  481.071095][ T5902]  ? __pfx_wb_workfn+0x10/0x10
[  481.071234][ T5902]  process_scheduled_works+0xae7/0x1d60
[  481.071511][ T5902]  worker_thread+0x1741/0x1de0
[  481.071767][ T5902]  kthread+0xd5a/0xf00
[  481.071910][ T5902]  ? __pfx_worker_thread+0x10/0x10
[  481.072141][ T5902]  ? __pfx_kthread+0x10/0x10
[  481.072288][ T5902]  ret_from_fork+0x207/0x6f0
[  481.072504][ T5902]  ? __switch_to+0x521/0x750
[  481.072678][ T5902]  ? __pfx_kthread+0x10/0x10
[  481.072829][ T5902]  ret_from_fork_asm+0x1a/0x30
[  481.073049][ T5902]  </TASK>
[  481.366520][ T5902] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  483.409346][ T8278] 8021q: adding VLAN 0 to HW filter on device bond0
[  483.662724][ T8284] 8021q: adding VLAN 0 to HW filter on device bond0
[  483.857291][ T8278] 8021q: adding VLAN 0 to HW filter on device team0
[  484.036536][ T5902] bridge0: port 1(bridge_slave_0) entered blocking state
[  484.044269][ T5902] bridge0: port 1(bridge_slave_0) entered forwarding state
[  484.138471][ T8284] 8021q: adding VLAN 0 to HW filter on device team0
[  484.368780][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[  484.376348][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[  484.416695][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[  484.424338][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[  484.676150][ T7961] bridge0: port 2(bridge_slave_1) entered blocking state
[  484.683877][ T7961] bridge0: port 2(bridge_slave_1) entered forwarding state
[  486.727297][ T8507] netlink: 'syz.0.753': attribute type 1 has an invalid length.
[  486.735771][ T8507] netlink: 56 bytes leftover after parsing attributes in process `syz.0.753'.
[  487.589388][ T8278] 8021q: adding VLAN 0 to HW filter on device batadv0
[  488.449917][ T8517] loop0: detected capacity change from 0 to 32768
[  488.570330][ T8517] jfs_unlink: dtDelete returned -2
[  488.763991][ T8520] loop3: detected capacity change from 0 to 4096
[  488.888723][ T8520] EXT4-fs (loop3): Test dummy encryption mode enabled
[  488.922020][ T8284] 8021q: adding VLAN 0 to HW filter on device batadv0
[  489.005319][ T8520] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  489.091898][ T8520] System zones: 0-5
[  489.225945][ T8520] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  490.316680][ T8545] loop0: detected capacity change from 0 to 128
[  490.419960][ T5793] VFS: Lookup of '!d' in ext4 loop3 would have caused loop
[  490.474026][ T5793] VFS: Lookup of '!d' in ext4 loop3 would have caused loop
[  490.526380][ T8545] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  490.577427][ T8545] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  490.705388][ T8545] EXT4-fs (loop0): shut down requested (1)
[  490.730577][ T8545] syz.0.760 (pid 8545) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  491.324480][ T5785] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  491.364933][ T6211] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  491.860386][ T8278] veth0_vlan: entered promiscuous mode
[  491.975422][ T7969] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  492.258300][ T8278] veth1_vlan: entered promiscuous mode
[  492.353593][ T7969] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  492.574113][ T7969] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  492.778830][ T7969] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  492.927841][ T8559] loop1: detected capacity change from 0 to 4096
[  492.967119][ T8559] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  493.226366][ T8278] veth0_macvtap: entered promiscuous mode
[  493.485034][ T8278] veth1_macvtap: entered promiscuous mode
[  493.759199][ T8284] veth0_vlan: entered promiscuous mode
[  493.794115][ T7969] bridge_slave_1: left allmulticast mode
[  493.800340][ T7969] bridge_slave_1: left promiscuous mode
[  493.806994][ T7969] bridge0: port 2(bridge_slave_1) entered disabled state
[  493.852487][ T7969] bridge_slave_0: left allmulticast mode
[  493.858874][ T7969] bridge_slave_0: left promiscuous mode
[  493.865497][ T7969] bridge0: port 1(bridge_slave_0) entered disabled state
[  494.644184][ T7969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  494.690519][ T7969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  494.749963][ T7969] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  494.791363][ T7969] bond0 (unregistering): Released all slaves
[  494.946531][ T8278] batman_adv: batadv0: Interface activated: batadv_slave_0
[  495.114431][ T8284] veth1_vlan: entered promiscuous mode
[  495.154094][ T8278] batman_adv: batadv0: Interface activated: batadv_slave_1
[  495.329743][ T5076] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  495.339313][ T5076] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  495.348840][ T5076] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  495.382356][ T5076] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  495.402829][ T5076] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  495.525904][ T8571] loop1: detected capacity change from 0 to 256
[  495.534082][   T35] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  495.643029][ T8571] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  495.728764][   T35] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  495.784684][ T8571] exFAT-fs (loop1): start_clu is invalid cluster(0x0)
[  495.859577][ T8573] Bluetooth: MGMT ver 1.23
[  495.967787][   T35] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  495.976996][   T35] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  496.389286][ T7969] hsr_slave_0: left promiscuous mode
[  496.418014][ T7969] hsr_slave_1: left promiscuous mode
[  496.437259][ T7969] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  496.444999][ T7969] batman_adv: batadv0: Removing interface: batadv_slave_0
[  496.536434][ T7969] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  496.545475][ T7969] batman_adv: batadv0: Removing interface: batadv_slave_1
[  496.631410][ T7969] veth1_macvtap: left promiscuous mode
[  496.637284][ T7969] veth0_macvtap: left promiscuous mode
[  496.678878][ T7969] veth1_vlan: left promiscuous mode
[  496.684519][ T7969] veth0_vlan: left promiscuous mode
[  497.517985][ T5076] Bluetooth: hci3: command tx timeout
[  497.869646][ T8580] loop1: detected capacity change from 0 to 40427
[  497.900204][ T8580] F2FS-fs (loop1): Image doesn't support compression
[  497.907273][ T8580] F2FS-fs (loop1): build fault injection rate: 690
[  497.935627][ T8580] F2FS-fs (loop1): invalid crc value
[  498.262877][ T8580] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  498.273475][ T8580] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  498.345737][ T8580] F2FS-fs (loop1): Stopped filesystem due to reason: 0
[  499.571340][ T7969] team0 (unregistering): Port device team_slave_1 removed
[  499.583717][ T5076] Bluetooth: hci3: command tx timeout
[  499.637272][ T7969] team0 (unregistering): Port device team_slave_0 removed
[  501.402745][ T5846] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  501.530814][ T8594] loop1: detected capacity change from 0 to 40427
[  501.579761][ T8594] F2FS-fs (loop1): invalid crc value
[  501.658255][ T5076] Bluetooth: hci3: command tx timeout
[  501.686091][ T5846] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  501.696624][ T5846] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  501.705001][ T5846] usb 1-1: Product: syz
[  501.709567][ T5846] usb 1-1: Manufacturer: syz
[  501.714466][ T5846] usb 1-1: SerialNumber: syz
[  501.878202][ T7969] IPVS: stop unused estimator thread 0...
[  501.941204][ T8594] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  501.992173][ T8594] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  502.415465][ T8284] veth0_macvtap: entered promiscuous mode
[  502.474475][ T8284] veth1_macvtap: entered promiscuous mode
[  502.522196][ T5846] usb 1-1: config 0 descriptor??
[  502.780510][ T5846] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  503.067699][ T8284] batman_adv: batadv0: Interface activated: batadv_slave_0
[  503.425047][ T5846] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  503.476508][ T8284] batman_adv: batadv0: Interface activated: batadv_slave_1
[  503.546456][ T5846] usb 1-1: USB disconnect, device number 6
[  503.739242][ T1332] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  503.758943][ T5076] Bluetooth: hci3: command tx timeout
[  503.847088][ T1332] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  504.018499][ T1332] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  504.104513][ T7969] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  504.286169][ T8617] loop1: detected capacity change from 0 to 4096
[  504.696055][ T8568] chnl_net:caif_netlink_parms(): no params data found
[  505.593082][ T8636] loop0: detected capacity change from 0 to 128
[  505.737883][ T8636] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  505.851688][ T8636] hpfs: filesystem error: improperly stopped
[  505.858851][ T8636] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  505.866817][ T8636] hpfs: You really don't want any checks? You are crazy...
[  505.989954][ T8636] hpfs: hpfs_map_sector(): read error
[  505.995557][ T8636] hpfs: code page support is disabled
[  506.076766][ T8636] hpfs: hpfs_map_4sectors(): unaligned read
[  506.105114][ T8636] hpfs: hpfs_map_4sectors(): unaligned read
[  506.111512][ T8636] hpfs: filesystem error: unable to find root dir
[  506.207431][ T5902] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  506.328281][ T8636] hpfs: hpfs_map_4sectors(): unaligned read
[  506.499472][ T5902] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  506.756846][ T5902] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  506.800483][ T5847] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  506.963350][ T5902] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  507.007985][ T5847] usb 2-1: Using ep0 maxpacket: 16
[  507.079675][ T5847] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  507.091026][ T5847] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  507.103098][ T5847] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  507.116710][ T5847] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  507.126163][ T5847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  507.493826][ T5847] usb 2-1: config 0 descriptor??
[  507.675562][ T8568] bridge0: port 1(bridge_slave_0) entered blocking state
[  507.683667][ T8568] bridge0: port 1(bridge_slave_0) entered disabled state
[  507.722534][ T8568] bridge_slave_0: entered allmulticast mode
[  507.754133][ T8568] bridge_slave_0: entered promiscuous mode
[  507.920400][ T8568] bridge0: port 2(bridge_slave_1) entered blocking state
[  507.928461][ T8568] bridge0: port 2(bridge_slave_1) entered disabled state
[  507.950326][ T8568] bridge_slave_1: entered allmulticast mode
[  507.965004][ T8568] bridge_slave_1: entered promiscuous mode
[  508.049857][ T5847] microsoft 0003:045E:07DA.000C: ignoring exceeding usage max
[  508.102818][ T5847] microsoft 0003:045E:07DA.000C: unsupported Resolution Multiplier 0
[  508.261749][ T5847] microsoft 0003:045E:07DA.000C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  508.273881][ T5847] microsoft 0003:045E:07DA.000C: no inputs found
[  508.280914][ T5847] microsoft 0003:045E:07DA.000C: could not initialize ff, continuing anyway
[  508.441673][ T5847] usb 2-1: USB disconnect, device number 11
[  508.708852][ T5902] bridge_slave_1: left allmulticast mode
[  508.714754][ T5902] bridge_slave_1: left promiscuous mode
[  508.722037][ T5902] bridge0: port 2(bridge_slave_1) entered disabled state
[  508.787023][ T5902] bridge_slave_0: left allmulticast mode
[  508.793216][ T5902] bridge_slave_0: left promiscuous mode
[  508.802702][ T5902] bridge0: port 1(bridge_slave_0) entered disabled state
[  508.948611][ T8660] fido_id[8660]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  509.385999][ T5902] batman_adv: batadv0: Removing interface: ip6gretap1
[  509.775856][ T5902] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  509.800354][ T5902] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  509.815050][ T5902] bond0 (unregistering): Released all slaves
[  509.839206][ T5902] bond1 (unregistering): Released all slaves
[  509.886454][ T8568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  509.909664][ T8669] tipc: Started in network mode
[  509.915049][ T8669] tipc: Node identity ac1414aa, cluster identity 4711
[  509.950733][ T8669] tipc: New replicast peer: 100.1.1.1
[  509.959448][ T8669] tipc: Enabled bearer <udp:syz2>, priority 10
[  510.010624][ T8568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  510.494065][   T30] audit: type=1326 audit(1770686072.162:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8674 comm="syz.0.789" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff9a139af79 code=0x0
[  510.712766][ T8568] team0: Port device team_slave_0 added
[  510.734471][ T7961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  510.747778][ T7961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  510.851901][ T8568] team0: Port device team_slave_1 added
[  510.934778][ T8679] loop1: detected capacity change from 0 to 4096
[  511.085659][ T8682] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  511.183519][   T30] audit: type=1800 audit(1770686072.852:67): pid=8679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.790" name="file1" dev="loop1" ino=15 res=0 errno=0
[  511.304209][ T5902] hsr_slave_0: left promiscuous mode
[  511.324545][ T5902] hsr_slave_1: left promiscuous mode
[  511.349885][ T5902] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  511.358461][ T5902] batman_adv: batadv0: Removing interface: batadv_slave_0
[  511.387002][ T5902] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  511.394960][ T5902] batman_adv: batadv0: Removing interface: batadv_slave_1
[  511.491537][ T5902] veth1_macvtap: left promiscuous mode
[  511.497313][ T5902] veth0_macvtap: left promiscuous mode
[  511.517942][ T5902] veth1_vlan: left promiscuous mode
[  511.526662][ T5902] veth0_vlan: left promiscuous mode
[  512.923091][ T5902] team0 (unregistering): Port device team_slave_1 removed
[  512.955141][ T5902] team0 (unregistering): Port device team_slave_0 removed
[  513.688839][ T8696] loop1: detected capacity change from 0 to 32768
[  513.700845][ T8696] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.795 (8696)
[  513.733131][ T8696] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  513.744892][ T8696] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  513.846969][   T10] tipc: Node number set to 2886997162
[  513.878310][ T8568] batman_adv: batadv0: Adding interface: batadv_slave_0
[  513.885596][ T8568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  513.912531][ T8568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  513.986258][ T8696] BTRFS info (device loop1): enabling ssd optimizations
[  513.993579][ T8696] BTRFS info (device loop1): turning on async discard
[  514.000725][ T8696] BTRFS info (device loop1): enabling free space tree
[  514.020387][ T8568] batman_adv: batadv0: Adding interface: batadv_slave_1
[  514.028260][ T8568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  514.055014][ T8568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  514.576190][ T5783] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  514.620856][ T7961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  514.629070][ T7961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  514.836146][ T8568] hsr_slave_0: entered promiscuous mode
[  514.879756][ T8568] hsr_slave_1: entered promiscuous mode
[  516.767686][ T1332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  516.775939][ T1332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  517.408350][   T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  517.416747][   T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  517.631445][ T8742] netlink: 'syz.5.803': attribute type 83 has an invalid length.
[  517.975465][ T8568] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  518.062782][ T8568] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  518.180446][ T8568] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  518.287235][ T8568] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  519.491051][ T8764] fuse: root generation should be zero
[  520.009128][ T8568] 8021q: adding VLAN 0 to HW filter on device bond0
[  520.195911][ T8568] 8021q: adding VLAN 0 to HW filter on device team0
[  520.329492][ T7987] bridge0: port 1(bridge_slave_0) entered blocking state
[  520.337043][ T7987] bridge0: port 1(bridge_slave_0) entered forwarding state
[  520.496714][ T7987] bridge0: port 2(bridge_slave_1) entered blocking state
[  520.504361][ T7987] bridge0: port 2(bridge_slave_1) entered forwarding state
[  520.534589][ T8773] loop5: detected capacity change from 0 to 2048
[  520.718480][ T8773] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  520.928809][   T30] audit: type=1800 audit(1770686082.582:68): pid=8773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.810" name="file1" dev="loop5" ino=1346 res=0 errno=0
[  520.950004][   T30] audit: type=1800 audit(1770686082.582:69): pid=8773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.810" name="file1" dev="loop5" ino=1346 res=0 errno=0
[  521.430735][   T30] audit: type=1804 audit(1770686082.712:70): pid=8780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.810" name="/newroot/5/file0/file1" dev="loop5" ino=1346 res=1 errno=0
[  521.453324][   T30] audit: type=1800 audit(1770686082.732:71): pid=8780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.810" name="file1" dev="loop5" ino=1346 res=0 errno=0
[  522.289530][ T8782] loop0: detected capacity change from 0 to 32768
[  522.362124][ T8782] jfs_strtoUCS: char2uni returned -22.
[  522.368456][ T8782] charset = cp950, char = 0xb9
[  523.536864][ T8803] loop6: detected capacity change from 0 to 128
[  525.832475][ T8814] loop1: detected capacity change from 0 to 40427
[  525.858622][ T8814] F2FS-fs (loop1): invalid crc value
[  526.187790][ T8814] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  526.198527][ T8814] F2FS-fs (loop1): Start checkpoint disabled!
[  526.213747][ T8814] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0
[  526.235429][ T8814] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  526.489589][ T7969] kworker/u8:13: attempt to access beyond end of device
[  526.489589][ T7969] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  526.504430][ T7969] CPU: 0 UID: 0 PID: 7969 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  526.504577][ T7969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  526.504693][ T7969] Workqueue: writeback wb_workfn (flush-7:1)
[  526.504868][ T7969] Call Trace:
[  526.504921][ T7969]  <TASK>
[  526.504976][ T7969]  __dump_stack+0x26/0x30
[  526.505149][ T7969]  dump_stack_lvl+0x14c/0x1c0
[  526.505331][ T7969]  dump_stack+0x1e/0x25
[  526.505485][ T7969]  f2fs_handle_critical_error+0xa6f/0xc20
[  526.505743][ T7969]  f2fs_stop_checkpoint+0x65/0x80
[  526.505900][ T7969]  f2fs_write_end_io+0x1013/0x2470
[  526.506120][ T7969]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  526.506302][ T7969]  bio_endio+0xf92/0x10e0
[  526.506465][ T7969]  submit_bio_noacct+0x200d/0x2960
[  526.506687][ T7969]  submit_bio+0x57a/0x620
[  526.506853][ T7969]  f2fs_submit_write_bio+0x92/0x250
[  526.507048][ T7969]  __submit_merged_bio+0x16f/0x6a0
[  526.507263][ T7969]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  526.507492][ T7969]  __submit_merged_write_cond+0x44a/0x990
[  526.507721][ T7969]  f2fs_write_data_pages+0x4d18/0x57a0
[  526.508027][ T7969]  ? kmsan_get_metadata+0xf1/0x160
[  526.508239][ T7969]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  526.508463][ T7969]  ? __pick_eevdf+0x7ff/0x1810
[  526.508630][ T7969]  ? kmsan_get_metadata+0xf1/0x160
[  526.508834][ T7969]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  526.509050][ T7969]  ? kmsan_get_metadata+0xf1/0x160
[  526.509262][ T7969]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  526.509484][ T7969]  ? kmsan_get_metadata+0xf1/0x160
[  526.509690][ T7969]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  526.509899][ T7969]  ? kmsan_get_metadata+0xf1/0x160
[  526.510101][ T7969]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  526.510320][ T7969]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  526.510477][ T7969]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  526.510623][ T7969]  do_writepages+0x3f2/0x860
[  526.510779][ T7969]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  526.510999][ T7969]  ? queue_io+0x711/0x790
[  526.511149][ T7969]  ? kmsan_get_metadata+0xf1/0x160
[  526.511383][ T7969]  __writeback_single_inode+0x101/0x1180
[  526.511570][ T7969]  ? kmsan_get_metadata+0xf1/0x160
[  526.511788][ T7969]  writeback_sb_inodes+0xb2d/0x1f10
[  526.512065][ T7969]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  526.512316][ T7969]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  526.512547][ T7969]  wb_writeback+0x4d0/0xc00
[  526.512735][ T7969]  ? queue_io+0x411/0x790
[  526.512907][ T7969]  wb_workfn+0x397/0x1900
[  526.513052][ T7969]  ? kmsan_get_metadata+0xf1/0x160
[  526.513297][ T7969]  ? __pfx_wb_workfn+0x10/0x10
[  526.513433][ T7969]  process_scheduled_works+0xae7/0x1d60
[  526.513711][ T7969]  worker_thread+0x1741/0x1de0
[  526.513967][ T7969]  kthread+0xd5a/0xf00
[  526.514109][ T7969]  ? __pfx_worker_thread+0x10/0x10
[  526.514343][ T7969]  ? __pfx_kthread+0x10/0x10
[  526.514487][ T7969]  ret_from_fork+0x207/0x6f0
[  526.514686][ T7969]  ? __switch_to+0x521/0x750
[  526.514855][ T7969]  ? __pfx_kthread+0x10/0x10
[  526.515007][ T7969]  ret_from_fork_asm+0x1a/0x30
[  526.515300][ T7969]  </TASK>
[  526.826598][ T7969] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  526.884785][ T8568] 8021q: adding VLAN 0 to HW filter on device batadv0
[  529.591793][ T8866] loop5: detected capacity change from 0 to 128
[  529.749860][ T8866] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  529.860821][ T8866] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  530.212504][ T8873] loop6: detected capacity change from 0 to 512
[  530.287350][ T8568] veth0_vlan: entered promiscuous mode
[  530.437604][ T8568] veth1_vlan: entered promiscuous mode
[  530.479133][ T8873] EXT4-fs error (device loop6): ext4_quota_enable:7177: comm syz.6.838: inode #100663296: comm syz.6.838: iget: illegal inode #
[  530.534863][ T8278] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  530.577792][ T8873] EXT4-fs error (device loop6): ext4_quota_enable:7180: comm syz.6.838: Bad quota inode: 100663296, type: 2
[  530.654847][ T8873] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=100663296). Please run e2fsck to fix.
[  530.735167][ T8873] EXT4-fs (loop6): mount failed
[  531.166682][ T8568] veth0_macvtap: entered promiscuous mode
[  531.223197][ T8884] input: syz0 as /devices/virtual/input/input10
[  531.288661][ T8568] veth1_macvtap: entered promiscuous mode
[  531.820438][ T8568] batman_adv: batadv0: Interface activated: batadv_slave_0
[  532.028447][ T8568] batman_adv: batadv0: Interface activated: batadv_slave_1
[  532.288481][ T7987] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  532.356841][ T7987] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  532.468076][ T7985] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  532.501458][ T7969] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  534.584990][ T8910] loop0: detected capacity change from 0 to 40427
[  534.612628][ T8910] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x1f52010)
[  534.622010][ T8910] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  534.630615][ T8910] F2FS-fs (loop0): Image doesn't support compression
[  534.637602][ T8910] F2FS-fs (loop0): build fault injection type: 0x4
[  534.649466][ T8910] F2FS-fs (loop0): invalid crc value
[  534.793628][    C1] vxcan1: j1939_tp_rxtimer: 0xffff88805187c600: rx timeout, send abort
[  534.804865][    C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805187c600: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[  535.063041][ T8910] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  535.131325][ T8910] F2FS-fs (loop0): Start checkpoint disabled!
[  535.150536][ T8910] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0
[  535.245151][ T8910] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  535.252854][ T8910] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  535.444056][ T8910] capability: warning: `syz.0.850' uses 32-bit capabilities (legacy support in use)
[  537.316881][ T8942] loop1: detected capacity change from 0 to 16
[  537.419303][ T8942] erofs (device loop1): mounted with root inode @ nid 36.
[  537.551936][ T8942] erofs (device loop1): corrupted dir block 134217800 @ nid 36
[  539.333822][ T8967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.865'.
[  542.003432][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  542.010449][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  542.815440][   T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  542.825924][   T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  543.310364][ T7979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  543.318608][ T7979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  544.570742][ T9039] loop5: detected capacity change from 0 to 512
[  544.627834][ T9039] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  544.890256][ T9039] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.887: inode has both inline data and extents flags
[  545.017880][ T9039] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.887: couldn't read orphan inode 15 (err -117)
[  545.070974][ T9039] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  545.468225][   T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  545.671601][   T10] usb 1-1: Using ep0 maxpacket: 16
[  545.692526][ T8278] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  545.769278][   T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  545.781806][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  545.991331][   T10] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  546.001273][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  546.009845][   T10] usb 1-1: Product: syz
[  546.014456][   T10] usb 1-1: Manufacturer: syz
[  546.019466][   T10] usb 1-1: SerialNumber: syz
[  546.153179][   T10] usb 1-1: config 0 descriptor??
[  546.232534][   T10] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  546.242283][   T10] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[  546.430522][ T9062] bond_slave_0: entered allmulticast mode
[  546.475366][ T9062] bond_slave_0: left allmulticast mode
[  546.876636][   T10] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  546.922497][   T10] em28xx 1-1:0.0: Config register raw data: 0x9e
[  547.324584][ T9074] loop5: detected capacity change from 0 to 512
[  547.339789][   T10] em28xx 1-1:0.0: AC97 chip type couldn't be determined
[  547.347315][   T10] em28xx 1-1:0.0: No AC97 audio processor
[  547.438022][   T10] usb 1-1: USB disconnect, device number 7
[  547.499865][ T9076] input: syz0 as /devices/virtual/input/input11
[  547.511373][   T10] em28xx 1-1:0.0: Disconnecting em28xx
[  547.564538][   T10] em28xx 1-1:0.0: Freeing device
[  547.640120][ T9074] EXT4-fs error (device loop5): ext4_quota_enable:7173: comm syz.5.896: Bad quota inum: 1, type: 2
[  547.729758][ T9074] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix.
[  547.801731][ T9074] EXT4-fs (loop5): mount failed
[  548.728481][ T9083] loop1: detected capacity change from 0 to 4096
[  548.916434][ T9093] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  548.987214][ T9093] batadv_slave_0: entered promiscuous mode
[  549.477857][ T9089] loop6: detected capacity change from 0 to 32768
[  549.619451][ T9089] JBD2: Ignoring recovery information on journal
[  549.714454][ T9089] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  550.017164][   T30] audit: type=1800 audit(1770686111.682:72): pid=9083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.899" name="file1" dev="loop1" ino=33 res=0 errno=0
[  550.180941][ T8284] ocfs2: Unmounting device (7,6) on (node local)
[  551.990150][ T9112] loop1: detected capacity change from 0 to 32768
[  552.003600][ T9112] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.908 (9112)
[  552.033147][ T9112] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  552.044978][ T9112] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  552.099629][ T9120] syz.7.911: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  552.121186][ T9120] CPU: 0 UID: 0 PID: 9120 Comm: syz.7.911 Tainted: G             L      syzkaller #0 PREEMPT(voluntary) 
[  552.121374][ T9120] Tainted: [L]=SOFTLOCKUP
[  552.121429][ T9120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  552.121519][ T9120] Call Trace:
[  552.121572][ T9120]  <TASK>
[  552.121628][ T9120]  __dump_stack+0x26/0x30
[  552.121807][ T9120]  dump_stack_lvl+0x14c/0x1c0
[  552.121995][ T9120]  dump_stack+0x1e/0x25
[  552.122160][ T9120]  warn_alloc+0x46f/0x6a0
[  552.122373][ T9120]  ? kmsan_get_metadata+0xf1/0x160
[  552.122607][ T9120]  __vmalloc_node_range_noprof+0x142/0x2d80
[  552.122814][ T9120]  ? should_fail_ex+0x45/0x8c0
[  552.122981][ T9120]  ? stack_depot_save_flags+0x35/0x790
[  552.123148][ T9120]  ? kmsan_get_metadata+0xf1/0x160
[  552.123363][ T9120]  ? kmsan_get_metadata+0xf1/0x160
[  552.123572][ T9120]  ? kmsan_get_metadata+0xf1/0x160
[  552.123781][ T9120]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  552.124036][ T9120]  ? __kmalloc_cache_noprof+0x977/0x1710
[  552.124199][ T9120]  ? kmsan_get_metadata+0xf1/0x160
[  552.124430][ T9120]  vmalloc_user_noprof+0xce/0x140
[  552.124609][ T9120]  ? xskq_create+0x11d/0x290
[  552.124811][ T9120]  xskq_create+0x11d/0x290
[  552.125021][ T9120]  xsk_init_queue+0xff/0x1d0
[  552.125213][ T9120]  xsk_setsockopt+0x968/0xfe0
[  552.125413][ T9120]  ? __pfx_xsk_setsockopt+0x10/0x10
[  552.125598][ T9120]  __sys_setsockopt+0x43e/0x580
[  552.125832][ T9120]  __x64_sys_setsockopt+0xf4/0x1a0
[  552.126140][ T9120]  x64_sys_call+0x28e3/0x3e70
[  552.126335][ T9120]  do_syscall_64+0xc9/0xf80
[  552.126516][ T9120]  ? clear_bhb_loop+0x40/0x90
[  552.126682][ T9120]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  552.126843][ T9120] RIP: 0033:0x7f0f61f9af79
[  552.126962][ T9120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  552.127101][ T9120] RSP: 002b:00007f0f62dda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  552.127237][ T9120] RAX: ffffffffffffffda RBX: 00007f0f62215fa0 RCX: 00007f0f61f9af79
[  552.127364][ T9120] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004
[  552.127459][ T9120] RBP: 00007f0f620316e0 R08: 0000000000000004 R09: 0000000000000000
[  552.127553][ T9120] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  552.127653][ T9120] R13: 00007f0f62216038 R14: 00007f0f62215fa0 R15: 00007ffc06c55eb8
[  552.127793][ T9120]  </TASK>
[  552.379850][ T9120] Mem-Info:
[  552.383323][ T9120] active_anon:15766 inactive_anon:0 isolated_anon:0
[  552.383323][ T9120]  active_file:3603 inactive_file:40098 isolated_file:0
[  552.383323][ T9120]  unevictable:768 dirty:203 writeback:0
[  552.383323][ T9120]  slab_reclaimable:5391 slab_unreclaimable:22578
[  552.383323][ T9120]  mapped:30142 shmem:9716 pagetables:1900
[  552.383323][ T9120]  sec_pagetables:0 bounce:0
[  552.383323][ T9120]  kernel_misc_reclaimable:0
[  552.383323][ T9120]  free:361694 free_pcp:7898 free_cma:0
[  552.437298][ T9120] Node 0 active_anon:62860kB inactive_anon:0kB active_file:14412kB inactive_file:160192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120568kB dirty:808kB writeback:0kB shmem:37124kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5776kB pagetables:7268kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  552.471381][ T9120] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16kB pagetables:332kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  552.501932][ T9120] Node 0 DMA free:4096kB boost:0kB min:164kB low:204kB high:244kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  552.538594][ T9120] lowmem_reserve[]: 0 928 1241 1241 1241
[  552.544819][ T9120] Node 0 DMA32 free:522576kB boost:0kB min:36872kB low:46088kB high:55304kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29872kB inactive_anon:0kB active_file:10512kB inactive_file:81408kB unevictable:0kB writepending:424kB zspages:0kB present:3129332kB managed:951132kB mlocked:0kB bounce:0kB free_pcp:27168kB local_pcp:6148kB free_cma:0kB
[  552.580069][ T9120] lowmem_reserve[]: 0 0 312 312 312
[  552.585838][ T9120] Node 0 Normal free:15928kB boost:0kB min:13004kB low:16252kB high:19500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32988kB inactive_anon:0kB active_file:3900kB inactive_file:78784kB unevictable:1536kB writepending:384kB zspages:0kB present:1048580kB managed:320476kB mlocked:0kB bounce:0kB free_pcp:4608kB local_pcp:2772kB free_cma:0kB
[  552.619513][ T9120] lowmem_reserve[]: 0 0 0 0 0
[  552.630824][ T9120] Node 1 Normal free:904176kB boost:0kB min:40064kB low:50080kB high:60096kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:987120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  552.665698][ T9120] lowmem_reserve[]: 0 0 0 0 0
[  552.671167][ T9120] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB
[  552.684384][ T9120] Node 0 DMA32: 278*4kB (UME) 215*8kB (UE) 86*16kB (UM) 85*32kB (UME) 59*64kB (UME) 149*128kB (UME) 99*256kB (UME) 45*512kB (UME) 38*1024kB (UM) 22*2048kB (UME) 88*4096kB (UM) = 522576kB
[  552.705931][ T9120] Node 0 Normal: 34*4kB (U) 6*8kB (UM) 76*16kB (M) 28*32kB (M) 27*64kB (UM) 21*128kB (UME) 8*256kB (UME) 6*512kB (U) 4*1024kB (U) 0*2048kB 0*4096kB = 15928kB
[  552.730493][ T9120] Node 1 Normal: 2*4kB (UM) 13*8kB (UME) 20*16kB (UE) 14*32kB (UME) 14*64kB (UME) 10*128kB (UME) 6*256kB (UME) 5*512kB (UE) 4*1024kB (UME) 4*2048kB (UME) 216*4096kB (UME) = 904176kB
[  552.752792][ T9120] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  552.762759][ T9120] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  552.772483][ T9120] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  552.782641][ T9120] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  552.792337][ T9120] 53314 total pagecache pages
[  552.797211][ T9120] 0 pages in swap cache
[  552.801697][ T9120] Free swap  = 124996kB
[  552.806024][ T9120] Total swap = 124996kB
[  552.810567][ T9120] 2097051 pages RAM
[  552.814530][ T9120] 0 pages HighMem/MovableOnly
[  552.819476][ T9120] 1531345 pages reserved
[  552.823895][ T9120] 0 pages cma reserved
[  553.155109][ T9112] BTRFS info (device loop1): rebuilding free space tree
[  553.203861][ T9112] BTRFS info (device loop1): turning off barriers
[  553.211187][ T9112] BTRFS info (device loop1): turning on async discard
[  553.218437][ T9112] BTRFS info (device loop1): enabling free space tree
[  553.225485][ T9112] BTRFS info (device loop1): force clearing of disk cache
[  553.233063][ T9112] BTRFS info (device loop1): max_inline set to 17
[  553.897237][ T5783] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  554.217015][ T9146] loop6: detected capacity change from 0 to 128
[  554.400113][ T9146] EXT4-fs: Ignoring removed nobh option
[  554.614186][ T9146] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  554.748598][ T9146] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  555.127854][ T5915] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  555.401158][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  555.412755][ T5915] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  555.422566][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  555.604866][ T5915] usb 2-1: config 0 descriptor??
[  555.656759][ T9165] 9p: Bad value for 'wfdno'
[  555.696363][ T8284] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  555.891239][ T5915] usbhid 2-1:0.0: can't add hid device: -71
[  555.906548][ T5915] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  556.070744][ T5915] usb 2-1: USB disconnect, device number 12
[  556.520967][ T5915] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  556.724072][ T5915] usb 2-1: Using ep0 maxpacket: 32
[  556.745639][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  556.757206][ T5915] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  556.766891][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  556.921009][ T5915] usb 2-1: config 0 descriptor??
[  557.021128][ T5915] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  557.102002][ T5915] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  557.497240][ T5915] usb 2-1: USB disconnect, device number 13
[  557.582577][ T5915] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[  559.646577][ T9193] loop5: detected capacity change from 0 to 32768
[  559.908266][ T9193] JBD2: Ignoring recovery information on journal
[  560.049192][ T9193] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  560.173279][ T9193] OCFS2: ERROR (device loop5): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bit count of 1024
[  560.191416][ T9193] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  560.204832][ T9193] OCFS2: File system is now read-only.
[  560.210744][ T9193] (syz.5.928,9193,1):ocfs2_search_chain:1818 ERROR: status = -30
[  560.221632][ T9193] (syz.5.928,9193,1):ocfs2_search_chain:1941 ERROR: status = -30
[  560.229875][ T9193] (syz.5.928,9193,1):ocfs2_claim_suballoc_bits:2021 ERROR: status = -30
[  560.238560][ T9193] (syz.5.928,9193,1):ocfs2_claim_suballoc_bits:2074 ERROR: status = -30
[  560.247156][ T9193] (syz.5.928,9193,1):__ocfs2_claim_clusters:2449 ERROR: status = -30
[  560.255706][ T9193] (syz.5.928,9193,1):__ocfs2_claim_clusters:2457 ERROR: status = -30
[  560.264145][ T9193] (syz.5.928,9193,1):ocfs2_block_group_alloc_contig:438 ERROR: status = -30
[  560.273186][ T9193] (syz.5.928,9193,1):ocfs2_block_group_alloc:712 ERROR: status = -30
[  560.281770][ T9193] (syz.5.928,9193,1):ocfs2_block_group_alloc:765 ERROR: status = -30
[  560.290214][ T9193] (syz.5.928,9193,1):ocfs2_reserve_suballoc_bits:840 ERROR: status = -30
[  560.298972][ T9193] (syz.5.928,9193,1):ocfs2_reserve_suballoc_bits:857 ERROR: status = -30
[  560.310214][ T9193] (syz.5.928,9193,1):ocfs2_reserve_new_metadata_blocks:997 ERROR: status = -30
[  560.319691][ T9193] (syz.5.928,9193,1):ocfs2_reserve_new_metadata_blocks:1020 ERROR: status = -30
[  560.329540][ T9193] (syz.5.928,9193,1):ocfs2_expand_inline_dir:2868 ERROR: status = -30
[  560.338027][ T9193] (syz.5.928,9193,1):ocfs2_extend_dir:3232 ERROR: status = -30
[  560.345846][ T9193] (syz.5.928,9193,1):ocfs2_prepare_dir_for_insert:4350 ERROR: status = -30
[  560.354814][ T9193] (syz.5.928,9193,1):ocfs2_mknod:302 ERROR: status = -30
[  560.362190][ T9193] (syz.5.928,9193,1):ocfs2_mknod:506 ERROR: status = -30
[  560.369647][ T9193] (syz.5.928,9193,1):ocfs2_create:679 ERROR: status = -30
[  561.085850][ T8278] ocfs2: Unmounting device (7,5) on (node local)
[  561.185360][ T9191] loop7: detected capacity change from 0 to 8192
[  561.313333][ T9191] UDF-fs: warning (device loop7): udf_load_vrs: No VRS found
[  561.324378][ T9191] UDF-fs: Scanning with blocksize 512 failed
[  561.439844][ T9191] UDF-fs: warning (device loop7): udf_load_vrs: No VRS found
[  561.448292][ T9191] UDF-fs: Scanning with blocksize 1024 failed
[  561.539887][ T9191] UDF-fs: warning (device loop7): udf_load_vrs: No VRS found
[  561.547779][ T9191] UDF-fs: Scanning with blocksize 2048 failed
[  561.831231][ T9191] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  562.866418][ T9218] netlink: 'syz.0.933': attribute type 4 has an invalid length.
[  562.874456][ T9218] netlink: 'syz.0.933': attribute type 1 has an invalid length.
[  562.882689][ T9218] netlink: 16 bytes leftover after parsing attributes in process `syz.0.933'.
[  562.892292][ T9218] bridge0: port 2(bridge_slave_1) entered blocking state
[  562.899770][ T9218] bridge0: port 2(bridge_slave_1) entered forwarding state
[  562.966261][   T30] audit: type=1326 audit(1770686124.622:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9228 comm="syz.7.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f61f9af79 code=0x50000
[  563.064287][   T30] audit: type=1326 audit(1770686124.712:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9228 comm="syz.7.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0f61f9af79 code=0x50000
[  563.088918][   T30] audit: type=1326 audit(1770686124.712:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9228 comm="syz.7.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f61f9af79 code=0x50000
[  563.114047][   T30] audit: type=1326 audit(1770686124.712:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9228 comm="syz.7.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f61f9af79 code=0x50000
[  563.139035][   T30] audit: type=1326 audit(1770686124.722:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9228 comm="syz.7.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f61f9af79 code=0x50000
[  563.161541][   T30] audit: type=1326 audit(1770686124.722:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9228 comm="syz.7.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f61f9af79 code=0x50000
[  563.185327][   T30] audit: type=1326 audit(1770686124.722:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9228 comm="syz.7.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f61f9af79 code=0x50000
[  563.209321][   T30] audit: type=1326 audit(1770686124.722:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9228 comm="syz.7.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f61f9af79 code=0x50000
[  563.231779][   T30] audit: type=1326 audit(1770686124.722:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9228 comm="syz.7.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f61f9af79 code=0x50000
[  563.254615][   T30] audit: type=1326 audit(1770686124.722:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9228 comm="syz.7.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f61f9af79 code=0x50000
[  563.538481][ T9231] mmap: syz.7.937 (9231): VmData 37728256 exceed data ulimit 3970. Update limits or use boot option ignore_rlimit_data.
[  564.152620][ T9240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.940'.
[  564.162090][ T9240] netlink: 'syz.1.940': attribute type 5 has an invalid length.
[  564.170127][ T9240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.940'.
[  564.366319][ T9240] geneve2: entered promiscuous mode
[  564.372427][ T9240] geneve2: entered allmulticast mode
[  564.459053][ T1332] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 8192 - 0
[  564.520411][ T7994] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 8192 - 0
[  564.616342][ T7994] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 8192 - 0
[  564.654599][ T7994] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 8192 - 0
[  566.745916][ T9262] loop0: detected capacity change from 0 to 32768
[  566.758256][ T9262] btrfs: Deprecated parameter 'usebackuproot'
[  566.764576][ T9262] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  566.775334][ T9267] netlink: 68 bytes leftover after parsing attributes in process `syz.6.949'.
[  566.796388][ T9262] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.947 (9262)
[  566.816412][ T9262] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  566.827198][ T9262] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[  567.191250][ T7994] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  567.206406][ T9262] BTRFS error (device loop0): failed to load root extent
[  567.214202][ T9262] BTRFS warning (device loop0): try to load backup roots slot 1
[  567.274531][ T9286] netlink: 8 bytes leftover after parsing attributes in process `syz.7.951'.
[  567.284550][ T9286] netlink: 4 bytes leftover after parsing attributes in process `syz.7.951'.
[  567.338820][ T7994] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  567.352867][ T9262] BTRFS warning (device loop0): couldn't read tree root
[  567.360283][ T9262] BTRFS warning (device loop0): try to load backup roots slot 2
[  567.451325][ T7994] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  567.462383][ T9262] BTRFS warning (device loop0): couldn't read tree root
[  567.472221][ T9262] BTRFS warning (device loop0): try to load backup roots slot 3
[  567.631652][ T9262] BTRFS info (device loop0): rebuilding free space tree
[  567.698807][ T9262] BTRFS info (device loop0): checking UUID tree
[  567.709417][ T9262] BTRFS info (device loop0): enabling ssd optimizations
[  567.716599][ T9262] BTRFS info (device loop0): turning on sync discard
[  567.723592][ T9262] BTRFS info (device loop0): enabling free space tree
[  567.739627][ T9262] BTRFS info (device loop0): force clearing of disk cache
[  567.746997][ T9262] BTRFS info (device loop0): enabling auto defrag
[  567.753994][ T9262] BTRFS info (device loop0): trying to use backup root at mount time
[  567.762740][ T9262] BTRFS info (device loop0): use zstd compression, level 3
[  567.831420][ T1332] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  567.884631][ T9286] netlink: 8 bytes leftover after parsing attributes in process `syz.7.951'.
[  567.895039][ T9286] netlink: 4 bytes leftover after parsing attributes in process `syz.7.951'.
[  567.942109][ T7994] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  568.052516][ T7994] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  568.137816][   T35] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  569.129539][ T9300] loop6: detected capacity change from 0 to 32768
[  569.153486][ T9300] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.953 (9300)
[  569.187725][ T9300] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  569.198328][ T9300] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm
[  569.281751][ T5785] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  570.156820][ T9306] loop7: detected capacity change from 0 to 32768
[  570.623507][ T9306] JBD2: Ignoring recovery information on journal
[  570.762573][ T9300] BTRFS info (device loop6): enabling ssd optimizations
[  570.771787][ T9300] BTRFS info (device loop6): turning on async discard
[  570.776885][ T9306] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  570.779126][ T9300] BTRFS info (device loop6): enabling free space tree
[  570.916789][ T8284] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  571.461489][ T8568] ocfs2: Unmounting device (7,7) on (node local)
[  573.509736][ T9340] loop5: detected capacity change from 0 to 4096
[  574.435072][ T9348] loop1: detected capacity change from 0 to 32768
[  574.450415][ T9348] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.962 (9348)
[  574.489186][ T9348] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  574.499942][ T9348] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  574.721383][ T9340] ntfs3(loop5): Failed to initialize $Extend/$ObjId.
[  574.987774][ T9348] BTRFS info (device loop1): enabling ssd optimizations
[  574.994977][ T9348] BTRFS info (device loop1): turning on async discard
[  575.002112][ T9348] BTRFS info (device loop1): enabling free space tree
[  575.158053][ T9348] BTRFS info (device loop1): setting compat-ro feature flag for VERITY (0x4)
[  575.616955][ T5783] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  576.544605][ T9385] netlink: 104 bytes leftover after parsing attributes in process `syz.7.970'.
[  577.435683][ T9393] loop5: detected capacity change from 0 to 16
[  577.529048][ T9393] erofs (device loop5): mounted with root inode @ nid 36.
[  577.920620][ T9053] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  578.155901][ T9053] usb 8-1: Using ep0 maxpacket: 32
[  578.212450][ T9053] usb 8-1: config 2 has an invalid interface number: 88 but max is 0
[  578.226986][ T9053] usb 8-1: config 2 has no interface number 0
[  578.278082][ T9053] usb 8-1: config 2 interface 88 has no altsetting 0
[  578.369937][ T9053] usb 8-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e
[  578.380288][ T9053] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  578.389165][ T9053] usb 8-1: Product: syz
[  578.393737][ T9053] usb 8-1: Manufacturer: syz
[  578.398744][ T9053] usb 8-1: SerialNumber: syz
[  579.912231][ T9053] asix 8-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  579.922976][ T9053] asix 8-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9
[  580.018623][ T9053] asix 8-1:2.88: probe with driver asix failed with error -71
[  580.150638][ T9053] usb 8-1: USB disconnect, device number 2
[  582.456011][ T9441] loop5: detected capacity change from 0 to 512
[  582.531190][ T9441] EXT4-fs: Ignoring removed oldalloc option
[  583.389173][ T9447] loop0: detected capacity change from 0 to 32768
[  583.513166][ T9447] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  583.620521][ T9441] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  583.825858][ T9447] XFS (loop0): Ending clean mount
[  583.860951][ T9447] XFS (loop0): Metadata CRC error detected at xfs_inobt_read_verify+0xaf/0x2c0, xfs_finobt block 0x10 
[  583.873303][ T9447] XFS (loop0): Unmount and run xfs_repair
[  583.879456][ T9447] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  583.887064][ T9447] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff  FIB3............
[  583.896855][ T9447] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  583.906239][ T9447] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d  ..BNy.B..... ...
[  583.915506][ T9447] 00000030: 00 00 00 00 0f 8d d2 a2 00 00 18 00 00 00 40 37  ..............@7
[  583.924872][ T9447] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00  ................
[  583.934066][ T9447] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  583.943380][ T9447] 00000060: 00 00 00 00 00 f0 00 00 00 00 00 00 00 00 00 00  ................
[  583.952569][ T9447] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  583.970319][ T9447] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x33d/0x5f0" at daddr 0x10 len 4 error 74
[  583.984824][ T9447] XFS (loop0): Failed to initialize disk quotas, err -117.
[  584.232435][ T5785] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  584.345557][ T5785] XFS (loop0): Uncorrected metadata errors detected; please run xfs_repair.
[  584.816594][ T9472] netlink: 104 bytes leftover after parsing attributes in process `syz.7.997'.
[  584.862253][ T9477] loop6: detected capacity change from 0 to 64
[  584.974497][ T8278] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  585.030614][ T5954] =====================================================
[  585.038345][ T5954] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0xef3/0x3400
[  585.045838][ T5954]  _copy_to_iter+0xef3/0x3400
[  585.050946][ T5954]  copy_page_to_iter+0x482/0x900
[  585.056106][ T5954]  filemap_read+0x1cd6/0x2300
[  585.061335][ T5954]  blkdev_read_iter+0x89f/0xb00
[  585.066414][ T5954]  vfs_read+0x8ec/0xf90
[  585.070950][ T5954]  ksys_read+0x1d9/0x470
[  585.075495][ T5954]  __x64_sys_read+0x97/0xf0
[  585.080375][ T5954]  x64_sys_call+0x3123/0x3e70
[  585.091928][ T5954]  do_syscall_64+0xc9/0xf80
[  585.096672][ T5954]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  585.104754][ T5954] 
[  585.107207][ T5954] Uninit was stored to memory at:
[  585.112731][ T5954]  _copy_to_iter+0x130f/0x3400
[  585.117924][ T5954]  copy_page_to_iter+0x482/0x900
[  585.123061][ T5954]  shmem_file_read_iter+0x904/0x1140
[  585.128737][ T5954]  lo_rw_aio+0x1164/0x14a0
[  585.133376][ T5954]  loop_process_work+0xf05/0x1ff0
[  585.138823][ T5954]  loop_rootcg_workfn+0x2b/0x40
[  585.143917][ T5954]  process_scheduled_works+0xae7/0x1d60
[  585.149972][ T5954]  worker_thread+0x1741/0x1de0
[  585.154997][ T5954]  kthread+0xd5a/0xf00
[  585.159397][ T5954]  ret_from_fork+0x207/0x6f0
[  585.164225][ T5954]  ret_from_fork_asm+0x1a/0x30
[  585.169383][ T5954] 
[  585.171810][ T5954] Uninit was stored to memory at:
[  585.177161][ T5954]  copy_folio_from_iter_atomic+0xea0/0x38b0
[  585.184247][ T5954]  generic_perform_write+0x8b7/0x1050
[  585.196481][ T5954]  shmem_file_write_iter+0x2b7/0x2f0
[  585.204007][ T5954]  lo_rw_aio+0x1164/0x14a0
[  585.208895][ T5954]  loop_process_work+0xf05/0x1ff0
[  585.214161][ T5954]  loop_workfn+0x3e/0x60
[  585.218838][ T5954]  process_scheduled_works+0xae7/0x1d60
[  585.224631][ T5954]  worker_thread+0x1741/0x1de0
[  585.229803][ T5954]  kthread+0xd5a/0xf00
[  585.234069][ T5954]  ret_from_fork+0x207/0x6f0
[  585.239066][ T5954]  ret_from_fork_asm+0x1a/0x30
[  585.244066][ T5954] 
[  585.246487][ T5954] Uninit was stored to memory at:
[  585.251979][ T5954]  xlog_write+0x1d5b/0x2380
[  585.256712][ T5954]  xlog_cil_push_work+0x34ec/0x51f0
[  585.262271][ T5954]  process_scheduled_works+0xae7/0x1d60
[  585.268720][ T5954]  worker_thread+0x1741/0x1de0
[  585.273725][ T5954]  kthread+0xd5a/0xf00
[  585.278161][ T5954]  ret_from_fork+0x207/0x6f0
[  585.283086][ T5954]  ret_from_fork_asm+0x1a/0x30
[  585.294900][ T5954] 
[  585.297366][ T5954] Uninit was stored to memory at:
[  585.304883][ T5954]  xfs_inode_item_format_attr_fork+0xa46/0x10c0
[  585.311533][ T5954]  xfs_inode_item_format+0x2285/0x24f0
[  585.317223][ T5954]  xlog_cil_commit+0x17f4/0x4720
[  585.322542][ T5954]  __xfs_trans_commit+0x556/0xf20
[  585.327949][ T5954]  xfs_trans_roll+0xfc/0x500
[  585.332795][ T5954]  xfs_defer_trans_roll+0x106/0x520
[  585.340522][ T5954]  xfs_defer_finish_noroll+0xce3/0x1d80
[  585.346490][ T5954]  xfs_trans_commit+0x165/0x270
[  585.352088][ T5954]  xfs_attr_set+0x1be9/0x1d30
[  585.357019][ T5954]  xfs_attr_change+0x408/0x5b0
[  585.363271][ T5954]  xfs_xattr_set+0x1d4/0x2f0
[  585.368203][ T5954]  __vfs_setxattr+0x742/0x840
[  585.373097][ T5954]  __vfs_setxattr_noperm+0x224/0xad0
[  585.378755][ T5954]  __vfs_setxattr_locked+0x43c/0x480
[  585.384273][ T5954]  vfs_setxattr+0x28d/0x650
[  585.395761][ T5954]  filename_setxattr+0x3a4/0xcc0
[  585.403137][ T5954]  path_setxattrat+0x6c8/0x7c0
[  585.408265][ T5954]  __x64_sys_lsetxattr+0x103/0x1c0
[  585.413628][ T5954]  x64_sys_call+0x3c8b/0x3e70
[  585.418851][ T5954]  do_syscall_64+0xc9/0xf80
[  585.423568][ T5954]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  585.429780][ T5954] 
[  585.432212][ T5954] Uninit was created at:
[  585.436729][ T5954]  __kmalloc_node_track_caller_noprof+0xb6e/0x1c70
[  585.443805][ T5954]  krealloc_node_align_noprof+0x478/0xf40
[  585.449908][ T5954]  xfs_broot_realloc+0x361/0x480
[  585.455136][ T5954]  xfs_bmap_broot_realloc+0x243/0x650
[  585.460945][ T5954]  xfs_bmap_extents_to_btree+0x1f8/0x1430
[  585.466889][ T5954]  xfs_bmap_add_extent_hole_real+0x2267/0x3040
[  585.473419][ T5954]  xfs_bmapi_allocate+0x48d2/0x4f50
[  585.479379][ T5954]  xfs_bmapi_write+0x10a9/0x26f0
[  585.484553][ T5954]  xfs_attr_rmtval_set_blk+0x171/0x390
[  585.490465][ T5954]  xfs_attr_set_iter+0x35f/0x79b0
[  585.502253][ T5954]  xfs_attr_finish_item+0x16c/0x540
[  585.511797][ T5954]  xfs_defer_finish_one+0x528/0x13c0
[  585.517899][ T5954]  xfs_defer_finish_noroll+0x1064/0x1d80
[  585.523776][ T5954]  xfs_trans_commit+0x165/0x270
[  585.529026][ T5954]  xfs_attr_set+0x1be9/0x1d30
[  585.533926][ T5954]  xfs_attr_change+0x408/0x5b0
[  585.539075][ T5954]  xfs_xattr_set+0x1d4/0x2f0
[  585.543889][ T5954]  __vfs_setxattr+0x742/0x840
[  585.548991][ T5954]  __vfs_setxattr_noperm+0x224/0xad0
[  585.554508][ T5954]  __vfs_setxattr_locked+0x43c/0x480
[  585.560141][ T5954]  vfs_setxattr+0x28d/0x650
[  585.564858][ T5954]  filename_setxattr+0x3a4/0xcc0
[  585.570645][ T5954]  path_setxattrat+0x6c8/0x7c0
[  585.575610][ T5954]  __x64_sys_lsetxattr+0x103/0x1c0
[  585.583223][ T5954]  x64_sys_call+0x3c8b/0x3e70
[  585.588658][ T5954]  do_syscall_64+0xc9/0xf80
[  585.600144][ T5954]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  585.606276][ T5954] 
[  585.610768][ T5954] Bytes 884-887 of 4096 are uninitialized
[  585.616650][ T5954] Memory access of size 4096 starts at ffff888049485000
[  585.623942][ T5954] Data copied to user address 00007f9b7017c000
[  585.630411][ T5954] 
[  585.632979][ T5954] CPU: 0 UID: 0 PID: 5954 Comm: udevd Tainted: G             L      syzkaller #0 PREEMPT(voluntary) 
[  585.644256][ T5954] Tainted: [L]=SOFTLOCKUP
[  585.648834][ T5954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  585.659818][ T5954] =====================================================
[  585.666887][ T5954] Disabling lock debugging due to kernel taint
[  585.673486][ T5954] Kernel panic - not syncing: kmsan.panic set ...
[  585.680075][ T5954] CPU: 0 UID: 0 PID: 5954 Comm: udevd Tainted: G    B        L      syzkaller #0 PREEMPT(voluntary) 
[  585.691162][ T5954] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP
[  585.696866][ T5954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  585.707251][ T5954] Call Trace:
[  585.710670][ T5954]  <TASK>
[  585.713810][ T5954]  __dump_stack+0x26/0x30
[  585.718370][ T5954]  dump_stack_lvl+0x50/0x1c0
[  585.723251][ T5954]  ? dump_stack+0x12/0x25
[  585.727798][ T5954]  dump_stack+0x1e/0x25
[  585.732206][ T5954]  vpanic+0x435/0xd40
[  585.736425][ T5954]  panic+0x15d/0x160
[  585.740675][ T5954]  kmsan_report+0x31a/0x320
[  585.745450][ T5954]  ? kmsan_internal_check_memory+0x166/0x240
[  585.751668][ T5954]  ? kmsan_copy_to_user+0xef/0x190
[  585.757105][ T5954]  ? _copy_to_iter+0xef3/0x3400
[  585.762143][ T5954]  ? copy_page_to_iter+0x482/0x900
[  585.767458][ T5954]  ? filemap_read+0x1cd6/0x2300
[  585.772554][ T5954]  ? blkdev_read_iter+0x89f/0xb00
[  585.777798][ T5954]  ? vfs_read+0x8ec/0xf90
[  585.782334][ T5954]  ? ksys_read+0x1d9/0x470
[  585.786973][ T5954]  ? __x64_sys_read+0x97/0xf0
[  585.792179][ T5954]  ? x64_sys_call+0x3123/0x3e70
[  585.797270][ T5954]  ? do_syscall_64+0xc9/0xf80
[  585.802285][ T5954]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  585.808585][ T5954]  ? kmsan_internal_unpoison_memory+0x14/0x20
[  585.815017][ T5954]  ? up_read+0x6a/0xf0
[  585.819407][ T5954]  ? do_user_addr_fault+0x19fd/0x2520
[  585.825034][ T5954]  ? kmsan_get_metadata+0xf1/0x160
[  585.830428][ T5954]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  585.836520][ T5954]  kmsan_internal_check_memory+0x166/0x240
[  585.842611][ T5954]  kmsan_copy_to_user+0xef/0x190
[  585.847822][ T5954]  _copy_to_iter+0xef3/0x3400
[  585.852701][ T5954]  ? kmsan_get_shadow_origin_ptr+0x35/0xb0
[  585.858797][ T5954]  ? filemap_get_pages+0x398d/0x3cd0
[  585.864449][ T5954]  copy_page_to_iter+0x482/0x900
[  585.869597][ T5954]  ? kmsan_get_metadata+0xf1/0x160
[  585.875018][ T5954]  filemap_read+0x1cd6/0x2300
[  585.880108][ T5954]  blkdev_read_iter+0x89f/0xb00
[  585.885259][ T5954]  vfs_read+0x8ec/0xf90
[  585.889672][ T5954]  ? __pfx_blkdev_read_iter+0x10/0x10
[  585.895320][ T5954]  ksys_read+0x1d9/0x470
[  585.899800][ T5954]  __x64_sys_read+0x97/0xf0
[  585.904542][ T5954]  x64_sys_call+0x3123/0x3e70
[  585.909450][ T5954]  do_syscall_64+0xc9/0xf80
[  585.914188][ T5954]  ? clear_bhb_loop+0x40/0x90
[  585.919072][ T5954]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  585.925177][ T5954] RIP: 0033:0x7f9b6faa7407
[  585.929750][ T5954] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  585.949561][ T5954] RSP: 002b:00007ffed4537010 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
[  585.958195][ T5954] RAX: ffffffffffffffda RBX: 00007f9b701d6880 RCX: 00007f9b6faa7407
[  585.966354][ T5954] RDX: 0000000000040000 RSI: 00007f9b7016e000 RDI: 0000000000000009
[  585.974514][ T5954] RBP: 0000555dafccd090 R08: 0000000000000000 R09: 0000000000000000
[  585.982650][ T5954] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  585.991032][ T5954] R13: 0000000000000000 R14: 0000555dafcd65b8 R15: 00007f9b702fd39c
[  585.999218][ T5954]  </TASK>
[  586.003049][ T5954] Kernel Offset: disabled
[  586.007470][ T5954] Rebooting in 86400 seconds..