last executing test programs:

2m48.264768706s ago: executing program 2 (id=321):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r0)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x34, r1, 0x30f, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x40)

2m47.71383142s ago: executing program 2 (id=330):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
read$alg(r1, &(0x7f00000012c0)=""/4107, 0xbc5)

2m47.406520136s ago: executing program 2 (id=336):
capset(&(0x7f0000000a80)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
setrlimit(0x8, &(0x7f0000000340)={0xf7, 0x4a14})
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x404c0c6, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10)

2m47.181741237s ago: executing program 2 (id=338):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

2m47.036009879s ago: executing program 2 (id=342):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7800000000002100000008000300", @ANYRES32=r3, @ANYBLOB="28002d80040000bb0800"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x22000000)

2m46.361912896s ago: executing program 2 (id=349):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x8, 0x40000cca8, 0x10003})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @desc2}})

2m45.378437033s ago: executing program 32 (id=349):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x8, 0x40000cca8, 0x10003})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @desc2}})

2m16.922941215s ago: executing program 5 (id=548):
socket$nl_xfrm(0x10, 0x3, 0x6)
mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0xfffffff7)
syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={0x0, 0x0, 0x4010}, 0x18)

2m16.726144813s ago: executing program 5 (id=550):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044)
r1 = socket$inet6(0xa, 0x3, 0x87)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in=@local, 0x3, 0x8, 0x4e24, 0x10, 0x2}, {0x0, 0x0, 0x2000000, 0x2, 0xfffffffffffffff6, 0x2000000, 0x1, 0x400}, {0x1ff, 0x7ffffffffffd, 0x4, 0xbfffffffffffff7f}, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xffffffff, 0x2b}, 0x2, @in=@loopback, 0x3504, 0x4, 0x0, 0x0, 0xffffffff, 0x6, 0x9}}, 0xe8)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c)

2m15.422812938s ago: executing program 5 (id=559):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="01000000400800d0a0dfa6ce0cc5e18d", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1, 0x1, 0x3, {}, {0x0, 0x2710}, {0x3, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "d467aef0f23fe738"}}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000)

2m15.35421188s ago: executing program 5 (id=560):
socket$kcm(0x10, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file3\x00', 0x1010041, &(0x7f0000000000)={[{@errors_continue}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpjquota}]}, 0x1, 0x546, &(0x7f0000000180)="$eJzs3dFrZFcZAPDv3mR2s7upmaoPtWAttrJbdSdJ47bBh6og+lRQKz4Ja0wmIWSSWZJJuwmLTfFVEES04Is++SL4BwjSF99FKNR3UVGkZvVBoe2VO3Onm0xmkhRncpfk94Oz9557Zu73nQlz5tyZu/cGcGE9GRE3ImIsIp6JiKlie1qU2OuU/HH39+8t5iWJLHvp7SSSYlt3X5eL5bXiaRMR8Y2vRnw3ORp3a2d3baHRqG8W9enWevJOlu3eXF1fWKmv1Dfm5mafm39+/tb8zFD6WY2IF77815/88JdfeeG3n33lT7f/fuN7eVr/zbJXo6cfw9TpeqX9WnSNR8TmKIKVZLzdw45bJecCAMDx8vn+hyPik+35/1SMtWdzAAAAwHmSfWEy3kkiMgAAAODcSiNiMpK0VpzvO1mcsXotIj4aV9NGc6v1meXm9sZS3hZRjUq6vNqoz8RE+9yBalSSvD5bnGPbrT/bU5+LiEcj4sdTV9r12mKzsVT2lx8AAABwQVzrOf7/91Sa1mpF417JyQEAAADDUy07AQAAAGDkHP8DAADA+VfN+tyh66h09JkAAAAAI/C1F1/MS9a9//XSyzvba82Xby7Vt9Zq69uLtcXm5p3aSrO50r5m3/pJ+2s0m3c+Fxvbd6db9a3W9NbO7u315vZG6/bqoVtgAwAAAGfo0U+88cckIvY+f6VdcpeKtkpENnbwweNlZAiMygc6p+cvo8sDOHsHP9+vlJgHcPZM6eHiqpSdAFC6k/4D0MCTd34//FwAAIDRuP6xwb//v71camrAiBW//yenugAIcK6MlZ0AUJrO73/vZR1lZwOcpcpxMwAHBXDupcP5/f+EUwkTAwoAAJRssl2StFYcB0xGmtZqEY+0bwtYSZZXG/WZiPhQRLw1Vbmc12fbz0zM5gEAAAAAAAAAAAAAAAAAAAAAAADglLIsiQwAAAA41yLSv3XvzHV96unJ3u8HLiX/mWovI+KVn73007sLrdbmbL79n+9vb71ebH+2jG8wAAAAgF7d4/TucTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADNP9/XuL97Msy/bvLZ5l3H98KSKqRfyidFrGY6K9nIhKRFz9VxLjB56XRMTYEOLvvRYRj/WLn+RpRbXI4lD8SxFpRFwZVvz4gPGjE//aEOLDRfZGPv58sd/7L40n28v+77/xovy/Bo9/6fvj39iA8e+RQTutHK4+/uavpwfGfy3i8fH+4083fpLvr0/8p07Zx+98c3d3UFv2i4jr/ca/5HCs6db6nemtnd2bq+sLK/WV+sbc3Oxz88/P35qfmV5ebdSLf/vG+NHHf/Peg9q7R/p/9Zjxt93/Aa//06fs/7tv3t3/SGe15y8Tlfh5lt14qv/f/7F88emj8buffZ8qPgfyev4apq9/q2/8J371hycG5Zb3f2lA/yd6+n+5p/83Ttn/Z77+/T+f8qEAwBnY2tldW2g06ptWDq5E9aFI4+FdyeedpaeRRBL5yluHmhbKT6yz8mrxHltodN9tQ9rz74qDo1EmX9J4BAAAjM6DSX9vS1JOQgAAAAAAAAAAAAAAAAAAAHABnXgZsEFNaUQ82PLtHxxzNbLemHvldBUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Fj/CwAA//8GI9aV")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1004401, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000040)='./file0\x00')
mount$9p_xen(0x0, &(0x7f0000000100)='./file3\x00', &(0x7f0000000740), 0x32048, 0x0)

2m14.792498011s ago: executing program 5 (id=563):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001240)={0x80, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x8, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @beacon=[@NL80211_ATTR_IE_PROBE_RESP={0x4}, @NL80211_ATTR_FTM_RESPONDER={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x80}}, 0x20000054)

2m12.91255831s ago: executing program 5 (id=581):
r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x34, r0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008011}, 0x4)
sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4008016}, 0x804)

2m12.536631741s ago: executing program 33 (id=581):
r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x34, r0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008011}, 0x4)
sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4008016}, 0x804)

1m13.500933539s ago: executing program 4 (id=962):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r1, 0x400455c8, 0x0)

1m11.23582851s ago: executing program 4 (id=976):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff)
r2 = gettid()
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r3, 0x80045017, &(0x7f0000000040))
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x24, r1, 0x221, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r2}]}, 0x24}}, 0x90)

1m10.916532526s ago: executing program 4 (id=980):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x8000, 0x3}, 0x20)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x0, 0xfc}, 0x20)

1m10.823229007s ago: executing program 4 (id=982):
chdir(0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r0 = fsopen(&(0x7f0000000000)='squashfs\x00', 0x1)
r1 = openat$dir(0xffffff9c, &(0x7f0000000200)='./file0\x00', 0x101, 0x48)
fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000100)='(:\x00', &(0x7f0000000140)='./file0\x00', r1)

1m10.681749787s ago: executing program 4 (id=984):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./sys_mnt\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys_mnt/kernel/mm/transparent_hugepage/khugepaged/alloc_sleep_millisecs\x00', 0x101001, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0)
write$tun(r0, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0x52)

1m10.523886649s ago: executing program 4 (id=986):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0)

55.141386874s ago: executing program 34 (id=986):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0)

50.798614324s ago: executing program 3 (id=1118):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x19, 0x4, 0x8, 0x5}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000bd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14)
syz_emit_ethernet(0xfdef, &(0x7f0000000300)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, @remote}}}}, 0x0)

50.563096061s ago: executing program 3 (id=1120):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = epoll_create1(0x80000)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a})
read$char_usb(r1, &(0x7f0000000140)=""/214, 0xd6)
epoll_pwait(r0, &(0x7f0000000240)=[{}], 0x1, 0x0, 0x0, 0x0)

50.261320057s ago: executing program 3 (id=1123):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231b26e53f07680000002a900683749e820439dc71559df44504000093"], 0x0}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2)
ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000000)=[0x2, 0x7])

48.125274334s ago: executing program 3 (id=1131):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x59}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005b80)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0, @ANYBLOB="07de9ae3004865f36195c93617594bca658e0b966b6d116ecd4910edb0e65f31cb794b50544910eb6456aa609c6861b309b45ef6567d4e820a14ff961ba2f4a3713fdf8adc13aa34115d481dc607cf6ecefc260ef52c3ec19b03986055d54904fe9cd76a923407c252e18073e276f22da9f4d528729fe74609970ff0f1fd20dedc46c4c077d1907c6e56c95506ef8d787b61e0c37b0159a50a5f6be5dfa0afe9eaeed8ffd1a325b8982c80dd9e45d1aea60565aa8c0f427ebeac1f101ad7c598679e1899e7fc2462b3e55ec2b037aeec6af78d058f96bef36411fe2e5db3c4575668515aac63f8ce589f000845efd4e4321cecb196", @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYRESHEX, @ANYRES16, @ANYRES32], 0x5, 0x5505, &(0x7f0000000340)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x400a8, 0x0, 0x5, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]})

46.846897209s ago: executing program 3 (id=1135):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
exit(0x100000000000035)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

43.850067035s ago: executing program 3 (id=1146):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x7, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0)

43.230505662s ago: executing program 35 (id=1146):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x7, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0)

21.287405947s ago: executing program 0 (id=1232):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x8c66)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x2ce, 0x0, 0x1, r2, 0x11})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000001400)={0x27800000000, 0x100000, 0x1, r2, 0x1})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x10, 0x0, 0x4, r2, 0x1})

19.64378016s ago: executing program 0 (id=1242):
setitimer(0x1, &(0x7f0000000000)={{0x100, 0x5}, {0xb, 0x4}}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000001c0)={0x3, 0x200, 0x101, 0x8}, 0x10)
write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xa74)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
setitimer(0x1, &(0x7f0000000000)={{0x0, 0x2710}, {0x77359400}}, 0x0)

19.122499169s ago: executing program 0 (id=1236):
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="00022dbd7000fcdbdf253b00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x29c}, 0x1, 0x0, 0x0, 0x20000081}, 0x80)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

18.317345472s ago: executing program 0 (id=1239):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000080)={[{@init_itable_val}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@grpjquota}]}, 0x3, 0x42f, &(0x7f00000017c0)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000180)='./bus\x00', 0x8000, 0x109)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5b966d61fdcf335263bd9bbba95216817e8d59825910e81ce13dc577edb48b001d0000000000000000f0ffffff12fb00000000000000000200", "f2835973db229a4c6681000000004430eaf04faf0000000000b60000000100", [0x8, 0x8]})
unlink(&(0x7f0000000000)='./file1\x00')

16.644603568s ago: executing program 0 (id=1245):
r0 = epoll_create1(0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
close(r1)
socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x8002a000})

15.511052447s ago: executing program 7 (id=1093):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x3, 0x1}})
ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1)
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x200041a, &(0x7f0000000100)=ANY=[@ANYBLOB="6465636f6d706f73652c6e6f626172726965722c6e6c733d63703837342c00c6a4e3e2b4f3ea896d6159b05fe54b0de1f59e62114a7e81df2028a5fc4d3cc2f2c0cfe54d1c01dff58d5504ba2aee1d302d37d4a4c0a4d2dd071a1b50244c9159f970dabfddfa50e613fb4edae932163f51bdf1783ccc63bff62d7c615c0395de42ab29ea7cd7c317d4f61e0945f9aa9793d36b9d8c682f21aba8f7ad00e61f03198ad398b212343a6d7afcf79ad31b81a855a9f23f3bdf9b9c84b4ce681f0aa4751b51cdbdaada232a4a96f787d002131383c87116fcccaf629b50f9e31f7bfb2f"], 0x1, 0x5c8, &(0x7f00000006c0)="$eJzs3c9rFO8ZAPBndpNNNoW4avxRWzBYKKKo2Y3YFgpNi5QcRIRevIZmNcFNlGQtq4eSFv8Qe0hPHnopQunBg+ce/AcCPRYKPYZe8mVmZzerxphokt18/Xzw3XnffWeeeedx5mVnNrABfLNm78fwWiQxe/VOK21vrE83Ntanlzr1iBiJiEL2L4bS6r8jii8iJqNd4ocRkeThkk/t53Xt1YV3d1uX261CXrL1i7tttzdreYmZfJAzBxjv7VfHS7pHmAa93Qk+CLY+73+HuPviIcZmH5JP/F9UIsYiYjSfBzonbuFoR3fwBuYCBAAAgEN0YjM2oxXj/R4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCf57/8neSl06pORdH7/v5S/F3n9WHvT7wEAAAAAAAAAwAG4uBmb0YrxTnsryb7zv5Q1JrLXH8TTWI16rMT1aMVcNKMZK1GNiEpPoFJrrtlcqe5hy9qOW9aO5ngBAAAAAAAA4HvqzzG7/f0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMgiSi2F5kZaJTr0RhKCJGI6KUrrcW8c9O/Th70+8BAAAAwBE4sRmb0YrxTnsrye75z2b3/aPxNJajGYvRjEbUYz57FtC+6y9srE83Ntanl9Lycdxf/3dfw8giRvvZw857nsrWONPdYjZ+G7+LqzEZ92IlFuMPMRfNqMdk3M5qc5FEJX96UemMc+fxzrzXuve5sZ7PRlKOB7GYje16/D4eRyPmo5AdQ7bO7nv8U5qd5Fe5PeZoPl8mEcmP8iMbDJUsI8PdjEzluU+zcXL3TOzzPPlwT9UodJ9BTRxCzsfyZZrz0YHOea3n7Du7eyYirjX/fnGhsfxo4cHq1cE5pC/0YSamezJx7pvKRCnPRnsW3d9seSnbdjwW4248jvmox8/iVtSyMp0te/N6Zg/XWmF/19pPLueVUxFJub0cEGleT/bktXemq2R9ve9sZ+nUwc9IQxfySjEiGeqOaRB8mIlqTyZO756Jv2ylr6uN5UcrC3NP9ri/n+bLdG4eGai5uZSfvUNZ6/2zI+07vWNfNeub6PYVPuo70+373JVayj/DfRyplvWd27Gvvd35nr6dPuUAMPDGroyVyv8p/6v8svyivFC+M/qbkZ+P/LgUw2+H/lH8W+GvhV8mV+Jl/HH7/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhyq8+eP5prNOorKioqKt1Kv2cmjsKN5tKTG6vPnl9bXJp7WH9YX745Vaveuln9xc0bDxYb9an2a79HyWHZvuj7PRIAAAAAAAAAAAD24yj+nLTfxwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDxMXs/htciierU9am0vbE+3UhLp769ZiEihtLl/yOKLyImo12i0hMu+dR+XtdeXXh3t3V5O1ahs35xt+32Zi0vMZMPcuYA47396nhJ9wjToLc7waHfvgsAAP//FQYeZg==")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1873c1, 0x40)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42544, 0x1)

14.500080304s ago: executing program 7 (id=1249):
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x26}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x800, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x4000, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0)
sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='='], 0x14}, 0x1, 0x0, 0x0, 0x800c006}, 0x4000091)

13.595354482s ago: executing program 0 (id=1254):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfe000/0x400000)=nil)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000180)={[0x0, 0x0, 0x8, 0x9, 0x1000, 0x0, 0x1001002, 0x1, 0x80000000, 0x1, 0x8, 0xffffffffffffff24, 0x8bda, 0xa, 0x7, 0x20000000000020], 0x25000, 0x216142})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12.340137549s ago: executing program 36 (id=1254):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfe000/0x400000)=nil)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000180)={[0x0, 0x0, 0x8, 0x9, 0x1000, 0x0, 0x1001002, 0x1, 0x80000000, 0x1, 0x8, 0xffffffffffffff24, 0x8bda, 0xa, 0x7, 0x20000000000020], 0x25000, 0x216142})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12.279057558s ago: executing program 7 (id=1257):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001240)=@newtfilter={0x30, 0x2c, 0x401, 0x0, 0x25dfdb7f, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0)

10.884526206s ago: executing program 7 (id=1260):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000080)={[{@init_itable_val}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@grpjquota}]}, 0x3, 0x42f, &(0x7f00000017c0)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000180)='./bus\x00', 0x8000, 0x109)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5b966d61fdcf335263bd9bbba95216817e8d59825910e81ce13dc577edb48b001d0000000000000000f0ffffff12fb00000000000000000200", "f2835973db229a4c6681000000004430eaf04faf0000000000b60000000100", [0x8, 0x8]})
unlink(&(0x7f0000000000)='./file1\x00')

8.294181108s ago: executing program 8 (id=1265):
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x26}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x800, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x4000, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0)
sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='='], 0x14}, 0x1, 0x0, 0x0, 0x800c006}, 0x4000091)

8.294045522s ago: executing program 7 (id=1266):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

6.964902158s ago: executing program 8 (id=1273):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x6})
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0xd9, 0x93}, 0xe)
sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
shutdown(r0, 0x1)

6.313658344s ago: executing program 8 (id=1276):
quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, &(0x7f0000000240)={0x1, 0x300000000000000, 0x8, 0x3, 0x1, 0x2, 0x2000000000e, 0x320, 0xfffeffff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
waitid(0x0, r0, 0x0, 0x61000006, 0x0)
ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={0x0})

5.875865124s ago: executing program 7 (id=1277):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
writev(r0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000240)="79696e926c4299b1004cd7e1da566282cf60", 0x12}], 0x2)

4.766147856s ago: executing program 37 (id=1277):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
writev(r0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000240)="79696e926c4299b1004cd7e1da566282cf60", 0x12}], 0x2)

4.737079449s ago: executing program 1 (id=1280):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
close(r0)
socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1, 0x0, {0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x6}}}, 0x3a)

4.664596433s ago: executing program 8 (id=1282):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x80401c, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573685f6d657267652c6e6f666c7573685f6d657267652c6d6f64653d667261676d656e743a7365676d656e742c636f6d70726573735f63616368652c696e6c696e655f78617474722c636f6d70726573735f63616368652c6e6f696e6c696e655f78617474722c6e6f646973636172642c6261636b67726f756e645f67633d6f6e2c6261636b67726f756e645f67633d6f66662c636865636b706f696e743d64697361626c652c617467632c67635f6d657267652c6e6f626172726965722c004b1c091f21dfc606226168fd668d440f"], 0xfd, 0x5532, &(0x7f0000000540)="$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")
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00)
open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)

4.105907731s ago: executing program 1 (id=1283):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000200)={0x0, 0x200000})

3.108386554s ago: executing program 1 (id=1284):
r0 = socket$inet(0x2, 0x1, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4)
bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x2e)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4)
bind$inet(r0, &(0x7f00000006c0)={0x2, 0x4e20, @empty}, 0x10)

2.737301044s ago: executing program 6 (id=1285):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2082)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0x7}, 'port0\x00', 0x44, 0xa04f2, 0x10000000, 0x8000088, 0x6, 0x4, 0x80000001, 0xbf000000})
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"})
ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522)
ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000040)={0x0, 0x200000})

2.593555621s ago: executing program 1 (id=1286):
r0 = semget$private(0x0, 0x6, 0x1b5)
semop(r0, &(0x7f0000000040)=[{0x0, 0xff43}], 0x1)
semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0)
semop(r0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2)
semop(r0, &(0x7f0000000200)=[{0x0, 0xffff, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000980))

2.07274916s ago: executing program 6 (id=1287):
pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r2 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595e, 0x10000, 0x2, 0x51}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000000)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x200}, 0x1})
io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x1f)

1.649000691s ago: executing program 6 (id=1288):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x2, 0x2bc, &(0x7f0000000980)="$eJzs3U9rY1UUAPDz0uQ1QxftwpUIvsUs3Fims3VhBqkgdqVk4R/QwZmBoQkDDQRGxTArP4ELF34Pd+4FN34DwYVLdw5SuPLeS5NMkkmmHdMO5ffb9HLuOe/em3fbFMK7+fKN/vG9R4MHT779I9rtLBqd6MTTLPaiEWfSWAAA18LTlOLvC72/NxubmhMAsFkz7/+t56RsL4be3fS0AIAN+viTTz+8c3R0+FFRtCP63w+7WdQ/6/47D+Jh9OJ+3IrdOJ1+FpBS3X7/g6PDaBalvbjZHw27ZWX/i98mqXlU9QexG3vL6w+K2kz9aNis/vPIsoiHnXIit2M3XluoL/sPby+pj24eb7XHiyzH34/d+P2reBS9uFd9pjEd/7s8ivfSD/9881mZXNZno2F3u8qbSluXfW8AAAAAAAAAAAAAAAAAAAAAALi+9ouJvbjZL0P1+TvdrdOqf/+Z/up8nUbVX9dnEXnVmDsfaJTip7PzdW4VRZGyOn9yvs+NZrzejOaVLRwAAAAAAAAAAAAAAAAAAABeIYPHXx/f7fXun/wvjfFD/pPH+i96nc5M5M1Ynbx9rrFia5xeznU+5+DXz/uTSLmIi0x+2CoiVs25tRC5Uc5n/ZX/TSmlLIt4udvUepGx1jR2VueUL/AvP+68fXw3W/cats9u3M+zXXmcDB7P3dPIVg96+kwknWv75Sty8vGOeaHr7LzkL9E7f9aDjSPZmlW0ZiKtcSOet/3a59rPl/c3CAAAAAAAAAAAAAAAAAAAqE0f+l3S+WRlaWNjkwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACASzb9/v9pIxYic41R/FUVL89JKY0mkTxOBle9RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK6//wIAAP//qWdtxQ==")
writev(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x40040, 0x6ab858183a7ef6ba)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42)
fsync(r0)

1.525508847s ago: executing program 1 (id=1289):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r3=>0x0})
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x51, &(0x7f0000000180)={[{@init_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x40}}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xb760}}]}, 0x8, 0x5fe, &(0x7f0000000ac0)="$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")
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000)

1.401017417s ago: executing program 8 (id=1290):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_pidfd_open(r1, 0x0)
r2 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000002780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})

1.305119047s ago: executing program 6 (id=1291):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x120, 0xd, 0x3}, 0x30, 0x0)
close(0x3)
socket$inet6(0xa, 0x2, 0x0)
landlock_restrict_self(r1, 0xe)
bind$inet(r0, &(0x7f0000000240)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10)

748.620178ms ago: executing program 6 (id=1292):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="db", 0x1}], 0x1}}], 0x1, 0x40040)
sendmmsg(r0, &(0x7f0000005680)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000780)='5', 0x1}], 0xa6, &(0x7f0000000b40)=ANY=[@ANYBLOB="10"], 0x10}}], 0x1, 0x404c044)

696.514424ms ago: executing program 6 (id=1293):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103050000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0xfffffffffffffee0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x80, 0x1c, {0xff, 0x2070, 0x1000, 0x9, 0x4, 0x8000, 0xfffd, 0xec, 0x3906, 0xfffc, 0x3, 0xfb}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000900)={0x14, 0x0, &(0x7f00000008c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

224.469443ms ago: executing program 8 (id=1294):
syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='shortad,partition=00000000000000000005,noadinicb,uid=', @ANYRESDEC=0x0, @ANYBLOB=',gid=', @ANYRESDEC=0x0, @ANYBLOB=',volume=0000000000000006,\x00\x00\x00\x00\x00'], 0x1, 0x489, &(0x7f0000000580)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
sendfile(r0, r0, 0x0, 0xe3aa6ea)

0s ago: executing program 1 (id=1295):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000b40)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r1, 0x0, &(0x7f0000349000/0x800000)=nil, 0x800000, 0x6})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x5, r1, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x800005e8})
ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r1, r1, 0x3, 0xfffffffffffffffa, 0x3fff})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x4, r1, 0x0, &(0x7f0000346000/0x4000)=nil, 0x4000, 0x2})

kernel console output (not intermixed with test programs):

? __pfx_kill_f2fs_super+0x10/0x10
[  179.832067][ T5612]  ? call_rcu+0x64d/0x8b0
[  179.832088][ T5612]  ? lockdep_hardirqs_on+0x7b/0x110
[  179.832122][ T5612]  deactivate_locked_super+0xbc/0x110
[  179.832153][ T5612]  cleanup_mnt+0x3d3/0x460
[  179.832180][ T5612]  task_work_run+0x1d9/0x270
[  179.832204][ T5612]  ? __pfx_task_work_run+0x10/0x10
[  179.832234][ T5612]  exit_to_user_mode_loop+0x204/0x770
[  179.832253][ T5612]  ? rcu_is_watching+0x16/0xb0
[  179.832278][ T5612]  do_syscall_64+0x328/0x520
[  179.832298][ T5612]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  179.832318][ T5612]  ? clear_bhb_loop+0x70/0xc0
[  179.832339][ T5612]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  179.832354][ T5612] RIP: 0033:0x7fb14559f317
[  179.832372][ T5612] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  179.832387][ T5612] RSP: 002b:00007ffd97e59c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  179.832407][ T5612] RAX: 0000000000000000 RBX: 00007fb145634474 RCX: 00007fb14559f317
[  179.832418][ T5612] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd97e59d20
[  179.832429][ T5612] RBP: 00007ffd97e59d20 R08: 00007ffd97e5ad20 R09: 00000000ffffffff
[  179.832442][ T5612] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd97e5adb0
[  179.832453][ T5612] R13: 00007fb145634474 R14: 000000000002bd53 R15: 00007ffd97e5adf0
[  179.832482][ T5612]  </TASK>
[  179.840398][ T5612] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  179.900495][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807ea09400: rx timeout, send abort
[  179.903823][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807ea09400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session.
[  180.649826][ T7963] loop4: detected capacity change from 0 to 2048
[  180.706501][ T7963] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  180.762782][ T7963] EXT4-fs (loop4): shut down requested (1)
[  180.855768][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.014079][ T7953] loop6: detected capacity change from 0 to 32768
[  181.041563][ T7974] netlink: 104 bytes leftover after parsing attributes in process `syz.4.665'.
[  181.057261][ T7975] kvm: user requested TSC rate below hardware speed
[  181.120159][ T4932] Bluetooth: hci4: command 0x0419 tx timeout
[  181.138360][ T7953] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  181.299792][ T7953] XFS (loop6): Ending clean mount
[  181.581221][ T8000] veth0: entered promiscuous mode
[  181.589346][ T7999] veth0: left promiscuous mode
[  181.626160][ T8002] loop0: detected capacity change from 0 to 256
[  181.664982][ T7653] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  181.752932][ T8004] loop4: detected capacity change from 0 to 128
[  181.768357][ T8004] EXT4-fs (loop4): Test dummy encryption mode enabled
[  181.800333][ T8004] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  181.821159][ T8004] ext4 filesystem being mounted at /155/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  181.895864][   T31] audit: type=1800 audit(1786545223.164:19): pid=8004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.676" name="file1" dev="loop4" ino=12 res=0 errno=0
[  182.087748][ T5613] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  182.228623][ T8010] loop0: detected capacity change from 0 to 128
[  182.312620][ T8012] netlink: 9 bytes leftover after parsing attributes in process `syz.4.679'.
[  182.350014][ T8012] netlink: 9 bytes leftover after parsing attributes in process `syz.4.679'.
[  182.944407][ T8008] loop1: detected capacity change from 0 to 40427
[  182.951406][ T8008] F2FS-fs (loop1): Fix alignment : internally, start(4096) end(16896) block(12288)
[  182.953940][ T8008] F2FS-fs (loop1): invalid crc value
[  183.195310][ T8008] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  183.224422][ T8025] loop0: detected capacity change from 0 to 32768
[  183.236822][ T8025] BTRFS warning: v1 space cache is deprecated, falling back to no space cache
[  183.247882][ T8025] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.683 (8025)
[  183.281707][ T8025] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  183.281789][ T8025] BTRFS info (device loop0): using crc32c checksum algorithm
[  183.301933][ T8008] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  183.418826][ T8025] BTRFS info (device loop0): rebuilding free space tree
[  183.467535][ T8008] F2FS-fs (loop1): Try to recover all the superblocks, ret: 0
[  183.580472][ T8044] f2fs_ckpt-7:1: attempt to access beyond end of device
[  183.580472][ T8044] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  183.615670][ T8044] CPU: 1 UID: 0 PID: 8044 Comm: f2fs_ckpt-7:1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  183.615705][ T8044] Tainted: [L]=SOFTLOCKUP
[  183.615714][ T8044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  183.615725][ T8044] Call Trace:
[  183.615733][ T8044]  <TASK>
[  183.615742][ T8044]  dump_stack_lvl+0xe8/0x150
[  183.615775][ T8044]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  183.615807][ T8044]  f2fs_write_end_bio+0x1211/0x16e0
[  183.615829][ T8044]  ? blkg_put+0x22/0x240
[  183.615867][ T8044]  __submit_merged_bio+0x258/0x6a0
[  183.615892][ T8044]  ? rcu_is_watching+0x16/0xb0
[  183.615920][ T8044]  __submit_merged_write_cond+0x3c9/0x4e0
[  183.615959][ T8044]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  183.616009][ T8044]  f2fs_write_data_pages+0x2a27/0x36f0
[  183.616036][ T8044]  ? __lock_acquire+0x6df/0x2e50
[  183.616087][ T8044]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  183.616126][ T8044]  ? arch_stack_walk+0x11b/0x150
[  183.616173][ T8044]  ? add_lock_to_list+0xc7/0x100
[  183.616199][ T8044]  ? lockdep_unlock+0x5c/0xd0
[  183.616244][ T8044]  ? __lock_acquire+0x14b9/0x2e50
[  183.616289][ T8044]  ? do_raw_spin_lock+0x12b/0x2f0
[  183.616326][ T8044]  ? do_raw_spin_unlock+0xf5/0x200
[  183.616360][ T8044]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  183.616390][ T8044]  do_writepages+0x338/0x560
[  183.616426][ T8044]  ? do_raw_spin_unlock+0xf5/0x200
[  183.616455][ T8044]  filemap_fdatawrite+0x1e9/0x2f0
[  183.616484][ T8044]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  183.616554][ T8044]  ? do_raw_spin_unlock+0xf5/0x200
[  183.616584][ T8044]  f2fs_sync_dirty_inodes+0x30e/0x830
[  183.616621][ T8044]  f2fs_write_checkpoint+0xa3d/0x2710
[  183.616674][ T8044]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  183.616732][ T8044]  ? __pfx_down_write+0x10/0x10
[  183.616763][ T8044]  ? rcu_is_watching+0x16/0xb0
[  183.616792][ T8044]  __checkpoint_and_complete_reqs+0x135/0x480
[  183.616815][ T8044]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  183.616848][ T8044]  ? __pfx___checkpoint_and_complete_reqs+0x10/0x10
[  183.616868][ T8044]  ? do_raw_spin_lock+0x12b/0x2f0
[  183.616910][ T8044]  ? schedule+0x90/0x2b0
[  183.616949][ T8044]  issue_checkpoint_thread+0xd5/0x270
[  183.616974][ T8044]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  183.616994][ T8044]  ? __pfx_autoremove_wake_function+0x10/0x10
[  183.617021][ T8044]  ? __kthread_parkme+0x71/0x1f0
[  183.617051][ T8044]  ? __kthread_parkme+0x199/0x1f0
[  183.617084][ T8044]  kthread+0x38b/0x480
[  183.617104][ T8044]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  183.617123][ T8044]  ? __pfx_kthread+0x10/0x10
[  183.617144][ T8044]  ret_from_fork+0x514/0xb70
[  183.617177][ T8044]  ? __pfx_ret_from_fork+0x10/0x10
[  183.617206][ T8044]  ? __switch_to+0xc89/0x1420
[  183.617235][ T8044]  ? __pfx_kthread+0x10/0x10
[  183.617256][ T8044]  ret_from_fork_asm+0x1a/0x30
[  183.617302][ T8044]  </TASK>
[  183.636170][ T8044] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  183.713338][ T8049] loop4: detected capacity change from 0 to 512
[  183.726052][ T8049] EXT4-fs: Ignoring removed orlov option
[  183.733584][ T8049] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  183.878837][ T8049] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #16: comm syz.4.686: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0)
[  183.878885][ T8049] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  183.879566][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  183.879585][    C1] EXT4-fs (loop4): initial error at time 1786545225: ext4_ext_check_inode:521: inode 16
[  183.879614][    C1] EXT4-fs (loop4): last error at time 1786545225: ext4_ext_check_inode:521: inode 16
[  183.889757][ T8049] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.686: couldn't read orphan inode 16 (err -117)
[  183.889790][ T8049] loop4: lost filesystem error report for type 5 error -117
[  183.898074][ T8049] EXT4-fs (loop4): 1 orphan inode deleted
[  183.953488][ T8049] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  184.198566][ T8025] BTRFS info (device loop0): disabling free space tree
[  184.198678][ T8025] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  184.198700][ T8025] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  184.505542][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.657970][ T8025] BTRFS info (device loop0): enabling ssd optimizations
[  184.658029][ T8025] BTRFS info (device loop0): turning on async discard
[  184.658063][ T8025] BTRFS info (device loop0): force clearing of disk cache
[  184.658084][ T8025] BTRFS info (device loop0): use zstd compression, level 3
[  184.702601][ T8069] loop3: detected capacity change from 0 to 1764
[  185.199887][   T31] audit: type=1326 audit(1786545226.474:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8078 comm="syz.3.691" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f457e99e0d9 code=0x0
[  185.275107][ T5612] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  185.814194][   T30] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  185.959763][   T30] usb 1-1: Using ep0 maxpacket: 32
[  185.966492][   T30] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  185.978575][   T30] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  185.978618][   T30] usb 1-1: config 0 has no interface number 0
[  185.978674][   T30] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  185.978704][   T30] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  185.978747][   T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.044512][   T30] usb 1-1: config 0 descriptor??
[  186.649976][ T8094] loop1: detected capacity change from 0 to 131072
[  186.663902][ T8094] F2FS-fs (loop1): invalid crc value
[  186.744944][ T8094] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  186.756333][   T30] uclogic 0003:28BD:0094.0009: failed retrieving string descriptor #100: -71
[  186.756418][   T30] uclogic 0003:28BD:0094.0009: failed retrieving pen parameters: -71
[  186.756454][   T30] uclogic 0003:28BD:0094.0009: pen probing failed: -71
[  186.756476][   T30] uclogic 0003:28BD:0094.0009: failed probing parameters: -71
[  186.756585][   T30] uclogic 0003:28BD:0094.0009: probe with driver uclogic failed with error -71
[  186.815718][   T30] usb 1-1: USB disconnect, device number 11
[  187.578908][ T8110] loop3: detected capacity change from 0 to 1024
[  187.631391][ T8094] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  187.637932][ T8101] loop4: detected capacity change from 0 to 131072
[  187.682417][   T31] audit: type=1800 audit(1786545228.954:21): pid=8094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.696" name="file1" dev="loop1" ino=7 res=0 errno=0
[  187.692588][ T8101] F2FS-fs (loop4): invalid crc value
[  187.768155][ T8101] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  187.779145][ T8101] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  187.803728][ T8101] F2FS-fs (loop4): lookup inode (7) has corrupted xattr
[  188.815120][ T8126] loop0: detected capacity change from 0 to 32768
[  188.842094][ T8126] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  188.894465][ T8126] XFS (loop0): Ending clean mount
[  188.912487][ T8126] XFS (loop0): Quotacheck needed: Please wait.
[  189.237522][ T8140] loop1: detected capacity change from 0 to 2048
[  189.260793][ T8126] XFS (loop0): Quotacheck: Done.
[  189.405386][ T8140] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  189.933730][ T5612] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  190.386894][ T8154] RDS: rds_bind could not find a transport for 0:0:fc00::, load rds_tcp or rds_rdma?
[  190.597272][ T8158] netlink: 20 bytes leftover after parsing attributes in process `syz.1.716'.
[  190.812494][ T8167] loop1: detected capacity change from 0 to 1024
[  190.813629][ T8167] EXT4-fs: Ignoring removed bh option
[  190.817233][ T8167] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  190.855065][ T8167] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  190.959745][ T5709] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  190.968485][ T5622] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.120575][ T5709] usb 5-1: Using ep0 maxpacket: 16
[  191.129250][ T5709] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  191.145348][ T5709] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  191.145425][ T5709] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.174110][ T5709] usb 5-1: config 0 descriptor??
[  191.505005][ T8188] netlink: 32 bytes leftover after parsing attributes in process `syz.1.722'.
[  191.522067][ T8183] loop0: detected capacity change from 0 to 2048
[  191.533389][ T8183] udf: Unknown parameter '0x0000000000000004'
[  191.556208][ T8190] ip_tables: iptables: counters copy to user failed while replacing table
[  191.570320][ T8190] tipc: Started in network mode
[  191.570378][ T8190] tipc: Node identity ac141441, cluster identity 4711
[  191.608248][ T8190] tipc: Enabled bearer <udp:syz2>, priority 10
[  191.622000][ T5709] mcp2221 0003:04D8:00DD.000A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0
[  192.020097][ T5709] usb 5-1: USB disconnect, device number 9
[  192.506079][ T8212] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  192.685665][ T8197] loop6: detected capacity change from 0 to 32768
[  192.722183][ T5709] tipc: Node number set to 2886997057
[  192.835587][ T8197] non-latin1 character 0xffff found in JFS file name
[  192.835634][ T8197] mount with iocharset=utf8 to access
[  194.321405][ T8238] loop6: detected capacity change from 0 to 32768
[  194.358777][ T8236] loop3: detected capacity change from 0 to 32768
[  194.444423][ T8236] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  194.588135][ T8236] XFS (loop3): Ending clean mount
[  194.920345][ T8273] loop6: detected capacity change from 0 to 164
[  194.961872][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  194.961953][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  194.983434][ T8273] rock: corrupted directory entry. extent=41 out of volume (nzones=41)
[  195.185591][ T8273] rock: corrupted directory entry. extent=41 out of volume (nzones=41)
[  195.199104][ T5626] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  195.664577][   T31] audit: type=1326 audit(1786545236.934:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8285 comm="syz.0.749" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb14559e0d9 code=0x0
[  195.822469][ T8289] loop6: detected capacity change from 0 to 4096
[  195.888823][ T8289] EXT4-fs (loop6): Test dummy encryption mode enabled
[  195.947057][ T8289] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  196.016721][ T8289] EXT4-fs (loop6): shut down requested (2)
[  196.074755][ T8299] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  196.075206][ T8299] overlayfs: NFS export requires an index dir, falling back to nfs_export=off.
[  196.137420][ T8301] loop3: detected capacity change from 0 to 1764
[  196.204629][ T7653] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.268354][ T8301] iso9660: Corrupted directory entry in block 2 of inode 1920
[  196.839799][   T30] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  196.989629][   T30] usb 7-1: Using ep0 maxpacket: 8
[  196.995897][   T30] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  197.007116][   T30] usb 7-1: config index 0 descriptor too short (expected 74, got 45)
[  197.007185][   T30] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  197.007231][   T30] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  197.007262][   T30] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  197.007292][   T30] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  197.007321][   T30] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  197.007367][   T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.291522][ T8320] loop1: detected capacity change from 0 to 32768
[  197.305957][ T8320] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.762 (8320)
[  197.319734][   T30] usb 7-1: GET_CAPABILITIES returned 0
[  197.319795][   T30] usbtmc 7-1:16.0: can't read capabilities
[  197.338687][ T8320] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  197.338749][ T8320] BTRFS info (device loop1): using sha256 checksum algorithm
[  197.465964][ T8326] loop0: detected capacity change from 0 to 32768
[  197.467340][ T8320] BTRFS info (device loop1): enabling ssd optimizations
[  197.467365][ T8320] BTRFS info (device loop1): turning on sync discard
[  197.467382][ T8320] BTRFS info (device loop1): enabling free space tree
[  197.467399][ T8320] BTRFS info (device loop1): use zlib compression, level 3
[  197.504794][ T8326] xfs: Deprecated parameter 'noikeep'
[  197.512335][ T8326] XFS: noikeep mount option is deprecated.
[  197.566651][    C0] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  197.578387][ T8322] loop4: detected capacity change from 0 to 32768
[  197.581956][ T8322] BTRFS warning: v1 space cache is deprecated, falling back to no space cache
[  197.608332][ T8322] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.763 (8322)
[  197.626698][ T8326] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  197.638128][ T8322] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  197.638173][ T8322] BTRFS info (device loop4): using crc32c checksum algorithm
[  197.670520][ T8313] usbtmc 7-1:16.0: Unable to send data, error -71
[  197.713410][ T1220] usb 7-1: USB disconnect, device number 2
[  197.714437][ T8325] loop3: detected capacity change from 0 to 32768
[  197.798890][ T8325] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  197.929372][ T8322] BTRFS info (device loop4): rebuilding free space tree
[  197.991354][ T5622] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  198.028063][ T8322] BTRFS info (device loop4): disabling free space tree
[  198.037509][ T8322] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  198.047971][ T8322] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  198.057405][ T8326] XFS (loop0): Ending clean mount
[  198.093237][ T8326] XFS (loop0): Quotacheck needed: Please wait.
[  198.113586][ T8322] BTRFS info (device loop4): enabling ssd optimizations
[  198.116165][ T8325] XFS (loop3): Ending clean mount
[  198.127243][ T8322] BTRFS info (device loop4): turning on async discard
[  198.134397][ T8322] BTRFS info (device loop4): force clearing of disk cache
[  198.141788][ T8322] BTRFS info (device loop4): use zstd compression, level 3
[  198.253442][ T8325] XFS (loop3): Metadata CRC error detected at xfs_agfl_read_verify+0x139/0x200, xfs_agfl block 0x3 
[  198.275343][ T8325] XFS (loop3): Unmount and run xfs_repair
[  198.275411][ T8325] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  198.275429][ T8325] 00000000: 58 41 46 4c 00 00 00 00 d7 dc 42 4e 07 00 00 00  XAFL......BN....
[  198.275444][ T8325] 00000010: 9f 91 9c b7 20 0a 10 1d 00 00 00 00 00 00 00 00  .... ...........
[  198.275455][ T8325] 00000020: e6 0a 0e bb ff ff ff ff 00 00 0b f0 00 00 0b f1  ................
[  198.275467][ T8325] 00000030: 00 00 0b f2 00 00 0b f3 00 00 0b f4 00 00 0b f5  ................
[  198.275479][ T8325] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  198.275496][ T8325] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  198.275510][ T8325] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  198.275524][ T8325] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  198.275824][ T8325] XFS (loop3): metadata I/O error in "xfs_alloc_read_agfl+0x22c/0x440" at daddr 0x3 len 1 error 74
[  198.345790][ T8325] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x47f/0x820 (fs/xfs/xfs_trans_buf.c:280).  Shutting down filesystem.
[  198.345852][ T8325] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  198.518878][ T5626] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  198.609242][ T8326] XFS (loop0): Quotacheck: Done.
[  198.747024][ T5613] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  198.777690][ T8377] netlink: 116 bytes leftover after parsing attributes in process `syz.1.776'.
[  199.675087][ T8392] loop4: detected capacity change from 0 to 24
[  199.692923][ T8392] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  199.979807][ T8392] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  200.003367][ T5612] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  200.501788][    T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  200.636859][ T8400] loop1: detected capacity change from 0 to 128
[  200.648908][ T8400] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  200.670564][    T9] usb 7-1: Using ep0 maxpacket: 32
[  200.671592][    T9] usb 7-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00
[  200.673465][    T9] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  200.673501][    T9] usb 7-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  200.673529][    T9] usb 7-1: config 0 interface 0 has no altsetting 0
[  200.673564][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.694302][    T9] usb 7-1: config 0 descriptor??
[  200.784253][ T8400] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  200.955832][ T8405] loop0: detected capacity change from 0 to 512
[  201.059283][ T8405] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz.0.770: corrupted in-inode xattr: e_value out of bounds
[  201.059353][ T8405] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  201.069548][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  201.069579][    C0] EXT4-fs (loop0): initial error at time 1786545242: ext4_iget_extra_inode:5210: inode 15
[  201.069610][    C0] EXT4-fs (loop0): last error at time 1786545242: ext4_iget_extra_inode:5210: inode 15
[  201.182500][ T8405] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.770: couldn't read orphan inode 15 (err -117)
[  201.182576][ T8405] loop0: lost filesystem error report for type 5 error -117
[  201.221929][    T9] hid_parser_main: 282 callbacks suppressed
[  201.235570][    T9] kye 0003:0458:0087.000B: unknown main item tag 0x1
[  201.235627][    T9] kye 0003:0458:0087.000B: unknown main item tag 0x3
[  201.245400][ T8405] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  201.361016][ T8412] openvswitch: netlink: Duplicate or invalid key (type 0).
[  201.361090][ T8412] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  201.510840][ T5612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.554461][    T9] kye 0003:0458:0087.000B: hidraw0: USB HID v10.01 Device [HID 0458:0087] on usb-dummy_hcd.6-1/input0
[  201.611924][    T9] usb 7-1: USB disconnect, device number 3
[  201.623863][ T8411] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  201.639426][ T8411] batman_adv: batadv0: Adding interface: gretap1
[  201.639478][ T8411] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  201.639640][ T8411] batman_adv: batadv0: Interface activated: gretap1
[  201.817647][ T8419] fido_id[8419]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  202.176558][ T8430] netlink: 12 bytes leftover after parsing attributes in process `syz.3.786'.
[  203.044287][ T8428] loop6: detected capacity change from 0 to 131072
[  203.045314][ T8428] xfs: Deprecated parameter 'ikeep'
[  203.045350][ T8428] XFS: ikeep mount option is deprecated.
[  203.118837][ T8428] XFS (loop6): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  203.216691][ T8428] XFS (loop6): Starting recovery (logdev: internal)
[  203.288752][ T8428] XFS (loop6): Ending recovery (logdev: internal)
[  203.445771][ T7653] XFS (loop6): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  204.013333][ T8470] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  204.089166][ T8472] loop1: detected capacity change from 0 to 128
[  204.416808][ T8464] loop4: detected capacity change from 0 to 131072
[  204.426565][ T8464] F2FS-fs (loop4): Invalid log sectorsize (67108873)
[  204.426604][ T8464] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  204.435410][ T8464] F2FS-fs (loop4): invalid crc value
[  204.496738][   T30] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  204.562406][ T8464] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  204.576641][ T8464] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  204.576668][ T8464] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  204.650974][   T30] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  204.665497][   T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.674346][   T30] usb 1-1: Product: syz
[  204.678770][   T30] usb 1-1: Manufacturer: syz
[  204.683940][   T30] usb 1-1: SerialNumber: syz
[  205.179109][   T30] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202
[  205.960741][ T8488] loop3: detected capacity change from 0 to 32768
[  205.987075][ T8488] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  206.062733][ T8488] XFS (loop3): Ending clean mount
[  206.176492][ T5626] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  206.847626][ T8518] loop6: detected capacity change from 0 to 4096
[  206.996520][ T8518] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  207.038217][ T8518] ntfs3(loop6): Failed to load $Extend (-22).
[  207.038268][ T8518] ntfs3(loop6): Failed to initialize $Extend.
[  207.297919][ T5724] usb 1-1: USB disconnect, device number 12
[  207.306377][ T5724] usblp0: removed
[  207.653663][ T8533] netlink: 84 bytes leftover after parsing attributes in process `syz.3.820'.
[  207.812503][ T8515] loop1: detected capacity change from 0 to 32768
[  207.870721][ T8515] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  207.996402][ T8515] XFS (loop1): Ending clean mount
[  208.117709][   T31] audit: type=1800 audit(1786545249.384:23): pid=8515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.814" name="file1" dev="loop1" ino=4422 res=0 errno=0
[  208.186214][ T8547] netlink: 16 bytes leftover after parsing attributes in process `syz.6.821'.
[  208.285293][ T5622] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  209.040249][ T8563] ip_tables: iptables: counters copy to user failed while replacing table
[  209.056269][ T8563] tipc: Started in network mode
[  209.056308][ T8563] tipc: Node identity ac141441, cluster identity 4711
[  209.086203][ T8563] tipc: Enabled bearer <udp:syz2>, priority 10
[  209.202298][ T8565] ALSA: mixer_oss: invalid OSS volume ''
[  209.425557][ T8549] loop6: detected capacity change from 0 to 40427
[  209.449197][ T8549] F2FS-fs (loop6): invalid crc value
[  209.802791][ T8549] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  209.834092][ T8549] F2FS-fs (loop6): f2fs_disable_checkpoint starts, unusable: 0
[  209.834144][ T8549] F2FS-fs (loop6): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  209.834170][ T8549] F2FS-fs (loop6): Start checkpoint disabled!
[  209.909866][ T8549] F2FS-fs (loop6): f2fs_disable_checkpoint finishes, err:0
[  209.920619][ T8549] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  209.988731][ T1053] kworker/u8:8: attempt to access beyond end of device
[  209.988731][ T1053] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  210.004003][ T1053] CPU: 1 UID: 0 PID: 1053 Comm: kworker/u8:8 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  210.004036][ T1053] Tainted: [L]=SOFTLOCKUP
[  210.004043][ T1053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  210.004056][ T1053] Workqueue: writeback wb_workfn (flush-7:6)
[  210.004093][ T1053] Call Trace:
[  210.004102][ T1053]  <TASK>
[  210.004110][ T1053]  dump_stack_lvl+0xe8/0x150
[  210.004142][ T1053]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  210.004175][ T1053]  f2fs_write_end_bio+0x1211/0x16e0
[  210.004198][ T1053]  ? blkg_put+0x22/0x240
[  210.004247][ T1053]  __submit_merged_bio+0x258/0x6a0
[  210.004273][ T1053]  ? rcu_is_watching+0x16/0xb0
[  210.004303][ T1053]  __submit_merged_write_cond+0x3c9/0x4e0
[  210.004340][ T1053]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  210.004393][ T1053]  f2fs_write_data_pages+0x2a27/0x36f0
[  210.004460][ T1053]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  210.004503][ T1053]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  210.004561][ T1053]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  210.004609][ T1053]  ? __lock_acquire+0x6df/0x2e50
[  210.004650][ T1053]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  210.004680][ T1053]  do_writepages+0x338/0x560
[  210.004713][ T1053]  ? reacquire_held_locks+0x117/0x1a0
[  210.004735][ T1053]  ? writeback_sb_inodes+0x450/0x1b00
[  210.004769][ T1053]  __writeback_single_inode+0x136/0x1220
[  210.004801][ T1053]  ? do_raw_spin_unlock+0xf5/0x200
[  210.004833][ T1053]  writeback_sb_inodes+0x9de/0x1b00
[  210.004860][ T1053]  ? __lock_acquire+0x6df/0x2e50
[  210.004906][ T1053]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  210.004982][ T1053]  ? rcu_is_watching+0x16/0xb0
[  210.005005][ T1053]  ? queue_io+0x2d3/0x470
[  210.005038][ T1053]  wb_writeback+0x41c/0xad0
[  210.005070][ T1053]  ? queue_io+0x251/0x470
[  210.005105][ T1053]  ? __pfx_wb_writeback+0x10/0x10
[  210.005132][ T1053]  ? do_raw_spin_lock+0x12b/0x2f0
[  210.005176][ T1053]  wb_workfn+0x431/0x10f0
[  210.005230][ T1053]  ? __pfx_wb_workfn+0x10/0x10
[  210.005270][ T1053]  ? do_raw_spin_lock+0x12b/0x2f0
[  210.005306][ T1053]  ? lock_acquire+0x115/0x350
[  210.005335][ T1053]  ? rcu_is_watching+0x16/0xb0
[  210.005363][ T1053]  ? process_scheduled_works+0x97a/0x1630
[  210.005390][ T1053]  process_scheduled_works+0xc3d/0x1630
[  210.005450][ T1053]  ? __pfx_process_scheduled_works+0x10/0x10
[  210.005484][ T1053]  ? assign_work+0x3cf/0x5d0
[  210.005514][ T1053]  worker_thread+0xa47/0xfb0
[  210.005556][ T1053]  ? __kthread_parkme+0x71/0x1f0
[  210.005595][ T1053]  kthread+0x38b/0x480
[  210.005615][ T1053]  ? __pfx_worker_thread+0x10/0x10
[  210.005638][ T1053]  ? __pfx_kthread+0x10/0x10
[  210.005659][ T1053]  ret_from_fork+0x514/0xb70
[  210.005692][ T1053]  ? __pfx_ret_from_fork+0x10/0x10
[  210.005721][ T1053]  ? __switch_to+0xc89/0x1420
[  210.005750][ T1053]  ? __pfx_kthread+0x10/0x10
[  210.005770][ T1053]  ret_from_fork_asm+0x1a/0x30
[  210.005817][ T1053]  </TASK>
[  210.110573][ T1053] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  210.203156][ T1220] tipc: Node number set to 2886997057
[  210.600757][ T8605] syz_tun: entered allmulticast mode
[  210.665598][ T8604] syz_tun: left allmulticast mode
[  210.690982][ T8610] netlink: 16 bytes leftover after parsing attributes in process `syz.0.843'.
[  210.700310][ T8610] netlink: 16 bytes leftover after parsing attributes in process `syz.0.843'.
[  211.157162][ T8631] loop3: detected capacity change from 0 to 1024
[  211.169990][ T8631] EXT4-fs: Ignoring removed oldalloc option
[  211.177951][ T8631] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (16), stripe is disabled
[  211.209687][ T8631] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c01c, mo2=0002]
[  211.209864][ T8631] System zones: 0-1, 3-12
[  211.231511][ T8631] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  211.415320][ T5626] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  211.683977][ T8648] loop6: detected capacity change from 0 to 128
[  211.906798][ T8648] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  211.908306][ T8648] ext4 filesystem being mounted at /33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  212.167582][ T8648] Invalid argument reading file caps for ./file0
[  212.295052][ T7653] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  212.423850][ T8656] loop4: detected capacity change from 0 to 1024
[  212.485554][ T8627] syz.1.852 (8627): drop_caches: 2
[  212.598537][ T8656] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  212.603845][ T8640] netlink: 44 bytes leftover after parsing attributes in process `syz.0.856'.
[  212.603872][ T8640] netlink: 35 bytes leftover after parsing attributes in process `syz.0.856'.
[  212.603887][ T8640] netlink: 'syz.0.856': attribute type 5 has an invalid length.
[  212.603899][ T8640] netlink: 'syz.0.856': attribute type 6 has an invalid length.
[  212.603912][ T8640] netlink: 35 bytes leftover after parsing attributes in process `syz.0.856'.
[  212.825796][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.073831][ T8675] loop4: detected capacity change from 0 to 512
[  213.162886][ T8675] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  213.163027][ T8675] ext4 filesystem being mounted at /191/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  213.538141][ T8662] loop1: detected capacity change from 0 to 32768
[  213.549227][ T8662] jfs: Unknown parameter 'ÿÿÿÿ'
[  213.600213][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.144121][ T8703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.877'.
[  214.552539][ T8710] loop6: detected capacity change from 0 to 32768
[  214.553496][ T8710] BTRFS warning: v1 space cache is deprecated, falling back to no space cache
[  214.560689][ T8710] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.882 (8710)
[  214.594518][ T8710] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  214.594606][ T8710] BTRFS info (device loop6): using crc32c checksum algorithm
[  214.596444][ T8717] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  214.596891][ T8717] CIFS: Attempting to mount //127.0.0.1/share
[  214.806346][ T8710] BTRFS info (device loop6): rebuilding free space tree
[  214.936982][ T8710] BTRFS info (device loop6): disabling free space tree
[  214.937068][ T8710] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  214.937105][ T8710] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  214.978376][ T8710] BTRFS info (device loop6): enabling ssd optimizations
[  214.978420][ T8710] BTRFS info (device loop6): disabling tree log
[  214.978456][ T8710] BTRFS info (device loop6): turning on sync discard
[  214.978476][ T8710] BTRFS info (device loop6): force clearing of disk cache
[  215.218547][ T8746] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  215.229279][ T8746] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  215.241566][ T7653] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  215.381640][ T8717] CIFS: VFS: cifs_mount failed w/return code = -112
[  215.410918][ T1220] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  215.569609][ T1220] usb 1-1: Using ep0 maxpacket: 32
[  215.573961][ T1220] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  215.574948][ T1220] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  215.574971][ T1220] usb 1-1: config 0 has no interface number 0
[  215.581825][ T1220] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.581850][ T1220] usb 1-1: Product: syz
[  215.581864][ T1220] usb 1-1: Manufacturer: syz
[  215.581877][ T1220] usb 1-1: SerialNumber: syz
[  215.593663][ T1220] usb 1-1: config 0 descriptor??
[  215.614890][ T1220] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  215.835678][ T1220] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  215.960616][ T1220] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  216.145879][ T8769] loop3: detected capacity change from 0 to 128
[  216.187696][ T8769] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  216.189960][ T8769] ext4 filesystem being mounted at /191/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  216.286300][    C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[  216.287091][ T1220] usb 1-1: USB disconnect, device number 13
[  216.299670][ T1220] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  216.352768][ T1220] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  216.353490][ T1220] quatech2 1-1:0.51: device disconnected
[  216.436489][ T5626] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  216.819305][ T8784] loop3: detected capacity change from 0 to 2048
[  216.861112][ T8784] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  216.861235][ T8784] ext4 filesystem being mounted at /194/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  216.996236][ T8789] loop0: detected capacity change from 0 to 512
[  217.019717][   T30] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[  217.034549][ T8789] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  217.034606][ T8789] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it
[  217.034623][ T8789] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.908: Corrupt directory, running e2fsck is recommended
[  217.086261][ T8787] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.907: bg 0: block 345: padding at end of block bitmap is not set
[  217.119617][ T8787] EXT4-fs (loop3): Remounting filesystem read-only
[  217.154898][ T8789] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[  217.156024][ T8789] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz.0.908: corrupted in-inode xattr: e_name out of bounds
[  217.156055][ T8789] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  217.156508][ T8789] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.908: couldn't read orphan inode 15 (err -117)
[  217.156536][ T8789] loop0: lost filesystem error report for type 5 error -117
[  217.164581][ T8789] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  217.174544][ T8789] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  217.174578][ T8789] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it
[  217.174595][ T8789] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.908: Corrupt directory, running e2fsck is recommended
[  217.181904][ T8789] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  217.181997][ T8789] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it
[  217.182014][ T8789] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.908: Corrupt directory, running e2fsck is recommended
[  217.186038][ T8789] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  217.186069][ T8789] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it
[  217.186085][ T8789] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.908: Corrupt directory, running e2fsck is recommended
[  217.192025][ T8789] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  217.208791][   T30] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  217.210224][ T8778] loop1: detected capacity change from 0 to 32768
[  217.229272][ T8778] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.904 (8778)
[  217.244702][   T30] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  217.244733][   T30] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84
[  217.244760][   T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 30065, setting to 64
[  217.244784][   T30] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  217.298722][   T30] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=3
[  217.298750][   T30] usb 7-1: Manufacturer: syz
[  217.298775][   T30] usb 7-1: SerialNumber: syz
[  217.319978][ T8778] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  217.320014][ T8778] BTRFS info (device loop1): using sha256 checksum algorithm
[  217.476332][ T5612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.499111][   T30] usb 7-1: config 0 descriptor??
[  217.516126][ T8780] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  217.549852][   T30] input: KB Gear Tablet as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input12
[  217.550799][ T8778] BTRFS info (device loop1): enabling ssd optimizations
[  217.550822][ T8778] BTRFS info (device loop1): turning on sync discard
[  217.550838][ T8778] BTRFS info (device loop1): enabling free space tree
[  217.550856][ T8778] BTRFS info (device loop1): use zlib compression, level 3
[  217.741514][   T30] usb 7-1: USB disconnect, device number 4
[  217.741617][    C1] kbtab 7-1:0.0: kbtab_irq - usb_submit_urb failed with result -19
[  217.774442][ T5626] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.889033][ T8808] Process accounting resumed
[  218.619613][ T5724] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  218.726376][ T5622] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  218.790688][ T5724] usb 7-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  218.803281][ T5724] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  218.803351][ T5724] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  218.803376][ T5724] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  218.803404][ T5724] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  218.803448][ T5724] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.972327][ T8833] loop4: detected capacity change from 0 to 32768
[  218.982248][ T8833] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.919 (8833)
[  219.004377][ T8833] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  219.017653][ T8833] BTRFS info (device loop4): using blake2b checksum algorithm
[  219.079312][ T8845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.924'.
[  219.254047][ T8856] loop0: detected capacity change from 0 to 128
[  219.289452][ T8856] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  219.307438][ T8856] ext4 filesystem being mounted at /183/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  219.389900][ T8856] syz.0.925 (pid 8856) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  219.423854][ T8833] BTRFS info (device loop4): enabling ssd optimizations
[  219.423912][ T8833] BTRFS info (device loop4): turning on async discard
[  219.423944][ T8833] BTRFS info (device loop4): enabling free space tree
[  219.423961][ T8833] BTRFS info (device loop4): use zstd compression, level 3
[  219.535067][   T31] audit: type=1800 audit(1786545260.784:24): pid=8833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.919" name="file1" dev="loop4" ino=260 res=0 errno=0
[  219.578242][ T5612] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  219.987234][ T5724] gud 7-1:1.0: USB-1: Failed to add properties (ret=-71)
[  219.996690][ T5724] gud 7-1:1.0: Failed to get connectors (error=-71)
[  219.996806][ T5724] gud 7-1:1.0: probe with driver gud failed with error -71
[  220.188753][ T5724] usb 7-1: USB disconnect, device number 5
[  220.398498][ T5613] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  220.501503][ T8880] loop1: detected capacity change from 0 to 512
[  221.037365][ T8892] loop6: detected capacity change from 0 to 256
[  221.107581][   T31] audit: type=1800 audit(1786545262.374:25): pid=8881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.933" name="file0" dev="overlay" ino=1127 res=0 errno=0
[  221.149680][ T8892] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  221.161349][ T8892] FAT-fs (loop6): Filesystem has been set read-only
[  221.168421][ T8892] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  221.179099][ T8892] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  221.217302][   T31] audit: type=1800 audit(1786545262.484:26): pid=8892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.937" name="file1" dev="loop6" ino=1048632 res=0 errno=0
[  221.455556][ T8899] loop4: detected capacity change from 0 to 128
[  221.508630][ T8899] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  221.524398][ T8899] ext4 filesystem being mounted at /200/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  221.627702][ T8905] loop6: detected capacity change from 0 to 128
[  221.923148][ T8906] loop3: detected capacity change from 0 to 40427
[  221.932317][ T8906] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  221.933381][ T8906] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  221.988187][ T8906] F2FS-fs (loop3): invalid crc value
[  222.033850][ T8898] loop1: detected capacity change from 0 to 40427
[  222.052388][ T8898] F2FS-fs (loop1): Invalid SB checksum offset: 0
[  222.057933][ T8906] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  222.073823][ T8906] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  222.076366][ T8906] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  222.111855][ T5613] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  222.124911][ T8898] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  222.150532][ T8898] F2FS-fs (loop1): invalid crc value
[  222.482753][ T8898] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  222.494128][ T8919] loop6: detected capacity change from 0 to 512
[  222.531262][ T8898] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  222.531318][ T8898] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  222.562642][ T8919] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  222.576374][ T8919] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  222.648912][ T8919] EXT4-fs (loop6): shut down requested (2)
[  222.665849][   T31] audit: type=1800 audit(1786545263.934:27): pid=8898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.939" name="file1" dev="loop1" ino=10 res=0 errno=0
[  222.910738][ T7653] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.512285][ T8898] syz.1.939: attempt to access beyond end of device
[  223.512285][ T8898] loop1: rw=34817, sector=53248, nr_sectors = 56 limit=40427
[  223.590462][ T8929] loop0: detected capacity change from 0 to 131072
[  223.603669][ T8929] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0)
[  223.603722][ T8929] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  223.623710][ T8929] F2FS-fs (loop0): invalid crc value
[  223.752953][ T8929] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  223.766757][ T8929] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  223.767504][ T8929] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  223.865589][ T8898] syz.1.939: attempt to access beyond end of device
[  223.865589][ T8898] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  223.887463][ T8898] CPU: 0 UID: 0 PID: 8898 Comm: syz.1.939 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  223.887501][ T8898] Tainted: [L]=SOFTLOCKUP
[  223.887509][ T8898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  223.887521][ T8898] Call Trace:
[  223.887529][ T8898]  <TASK>
[  223.887539][ T8898]  dump_stack_lvl+0xe8/0x150
[  223.887584][ T8898]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  223.887619][ T8898]  f2fs_write_end_bio+0x1211/0x16e0
[  223.887642][ T8898]  ? blkg_put+0x22/0x240
[  223.887684][ T8898]  __submit_merged_bio+0x258/0x6a0
[  223.887707][ T8898]  ? rcu_is_watching+0x16/0xb0
[  223.887736][ T8898]  __submit_merged_write_cond+0x3c9/0x4e0
[  223.887771][ T8898]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  223.887822][ T8898]  f2fs_write_data_pages+0x2a27/0x36f0
[  223.887850][ T8898]  ? __bfs+0x153/0x290
[  223.887868][ T8898]  ? __pfx_usage_match+0x10/0x10
[  223.887922][ T8898]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  223.887946][ T8898]  ? is_bpf_text_address+0x26/0x2b0
[  223.887982][ T8898]  ? arch_stack_walk+0xfb/0x150
[  223.888038][ T8898]  ? add_lock_to_list+0xc7/0x100
[  223.888062][ T8898]  ? lockdep_unlock+0x5c/0xd0
[  223.888087][ T8898]  ? __lock_acquire+0x14b9/0x2e50
[  223.888134][ T8898]  ? do_raw_spin_lock+0x12b/0x2f0
[  223.888173][ T8898]  ? do_raw_spin_unlock+0xf5/0x200
[  223.888200][ T8898]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  223.888230][ T8898]  do_writepages+0x338/0x560
[  223.888266][ T8898]  ? do_raw_spin_unlock+0xf5/0x200
[  223.888296][ T8898]  filemap_fdatawrite+0x1e9/0x2f0
[  223.888323][ T8898]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  223.888397][ T8898]  ? do_raw_spin_unlock+0xf5/0x200
[  223.888428][ T8898]  f2fs_sync_dirty_inodes+0x30e/0x830
[  223.888466][ T8898]  f2fs_write_checkpoint+0xa3d/0x2710
[  223.888524][ T8898]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  223.888609][ T8898]  f2fs_gc+0x1ee9/0x25b0
[  223.888668][ T8898]  ? __pfx_f2fs_gc+0x10/0x10
[  223.888721][ T8898]  ? __pfx_f2fs_submit_all_merged_ipu_writes+0x10/0x10
[  223.888755][ T8898]  ? rcu_is_watching+0x16/0xb0
[  223.888784][ T8898]  f2fs_balance_fs+0x61c/0x810
[  223.888822][ T8898]  ? __pfx_f2fs_balance_fs+0x10/0x10
[  223.888848][ T8898]  ? rcu_is_watching+0x16/0xb0
[  223.888872][ T8898]  ? __up_read+0x29c/0x930
[  223.888911][ T8898]  ? trace_lock_elapsed_time_end+0xf1/0xbc0
[  223.888938][ T8898]  ? restore_priority+0x1af/0x450
[  223.888975][ T8898]  f2fs_map_blocks+0x2a1a/0x4c20
[  223.889000][ T8898]  ? kasan_save_stack+0x3e/0x60
[  223.889021][ T8898]  ? kasan_record_aux_stack+0xbd/0xd0
[  223.889079][ T8898]  ? __pfx_f2fs_map_blocks+0x10/0x10
[  223.889112][ T8898]  ? call_rcu+0x64d/0x8b0
[  223.889133][ T8898]  ? lockdep_hardirqs_on+0x7b/0x110
[  223.889167][ T8898]  ? mempool_free+0xec/0x130
[  223.889195][ T8898]  ? __asan_memset+0x22/0x50
[  223.889228][ T8898]  f2fs_iomap_next+0x4d6/0xac0
[  223.889268][ T8898]  ? __iomap_dio_bio_end_io+0x21b/0x7b0
[  223.889295][ T8898]  ? __pfx_f2fs_iomap_next+0x10/0x10
[  223.889325][ T8898]  ? iomap_dio_bio_iter+0x1602/0x1a20
[  223.889375][ T8898]  iomap_iter+0xe2/0xec0
[  223.889402][ T8898]  __iomap_dio_rw+0x12e3/0x1c40
[  223.889460][ T8898]  ? __pfx___iomap_dio_rw+0x10/0x10
[  223.889505][ T8898]  ? lock_acquire+0x115/0x350
[  223.889540][ T8898]  ? down_read+0x2be/0x330
[  223.889578][ T8898]  f2fs_file_write_iter+0x18d6/0x28e0
[  223.889609][ T8898]  ? __pfx_aa_file_perm+0x10/0x10
[  223.889658][ T8898]  ? __pfx_f2fs_file_write_iter+0x10/0x10
[  223.889707][ T8898]  vfs_write+0x612/0xba0
[  223.889740][ T8898]  ? __pfx_vfs_write+0x10/0x10
[  223.889774][ T8898]  ? __fget_files+0x2a/0x420
[  223.889805][ T8898]  ksys_write+0x150/0x270
[  223.889830][ T8898]  ? __pfx_ksys_write+0x10/0x10
[  223.889866][ T8898]  do_syscall_64+0x166/0x520
[  223.889887][ T8898]  ? trace_irq_disable+0x3b/0x140
[  223.889907][ T8898]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.889928][ T8898]  ? clear_bhb_loop+0x70/0xc0
[  223.889955][ T8898]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.889976][ T8898] RIP: 0033:0x7fe21839e0d9
[  223.889997][ T8898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  223.890016][ T8898] RSP: 002b:00007fe219227028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  223.890039][ T8898] RAX: ffffffffffffffda RBX: 00007fe218625fa0 RCX: 00007fe21839e0d9
[  223.890055][ T8898] RDX: 00000000ffffffd7 RSI: 0000200000000000 RDI: 0000000000000004
[  223.890068][ T8898] RBP: 00007fe218435024 R08: 0000000000000000 R09: 0000000000000000
[  223.890081][ T8898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  223.890093][ T8898] R13: 00007fe218626038 R14: 00007fe218625fa0 R15: 00007ffde9f648b8
[  223.890131][ T8898]  </TASK>
[  224.019170][ T8898] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  224.145072][ T8898] syz.1.939 (8898) used greatest stack depth: 18624 bytes left
[  225.048149][ T8959] loop3: detected capacity change from 0 to 4096
[  225.055306][   T30] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  225.058883][ T8959] EXT4-fs: Ignoring removed mblk_io_submit option
[  225.075334][ T8959] EXT4-fs (loop3): Test dummy encryption mode enabled
[  225.089704][   T43] Bluetooth: hci5: Frame reassembly failed (-84)
[  225.111263][ T8959] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  225.259695][   T30] usb 7-1: Using ep0 maxpacket: 16
[  225.265686][   T30] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  225.276902][   T30] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  225.276969][   T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  225.277015][   T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  225.277044][   T30] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  225.277070][   T30] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  225.289451][   T30] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  225.289479][   T30] usb 7-1: Manufacturer: syz
[  225.350339][   T30] usb 7-1: config 0 descriptor??
[  225.681794][   T30] rc_core: IR keymap rc-hauppauge not found
[  225.681829][   T30] Registered IR keymap rc-empty
[  225.682439][   T30] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  225.707308][   T30] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  225.746590][   T30] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0
[  225.766075][   T30] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input13
[  225.791954][   T30] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  225.819978][   T30] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  225.849712][   T30] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  225.883210][   T30] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  225.910238][   T30] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  225.929967][   T30] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  225.950224][   T30] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  225.959454][ T5626] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.985807][   T30] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  226.000445][   T30] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  226.019720][   T30] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  226.046532][   T30] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  226.075504][   T30] mceusb 7-1:0.0: Registered  with mce emulator interface version 1
[  226.083905][   T30] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  226.119072][   T30] usb 7-1: USB disconnect, device number 6
[  226.208836][ T5625] udevd[5625]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory
[  226.210779][ T8978] Bluetooth: MGMT ver 1.23
[  226.489704][ T5740] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  226.640455][ T5740] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  226.641674][ T5740] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  226.641699][ T5740] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  226.641719][ T5740] usb 1-1: config 1 has no interface number 0
[  226.641756][ T5740] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  226.658457][ T5740] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.658485][ T5740] usb 1-1: Product: syz
[  226.658498][ T5740] usb 1-1: Manufacturer: syz
[  226.658511][ T5740] usb 1-1: SerialNumber: syz
[  226.678528][ T5740] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  226.678575][ T5740] cdc_ncm 1-1:1.1: bind() failure
[  226.865968][ T8992] binder: 8991:8992 ioctl 4018620d 0 returned -22
[  227.000490][ T8997] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  227.029651][ T4932] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  227.359278][ T9008] loop1: detected capacity change from 0 to 256
[  227.979827][ T5723] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  228.134260][ T5723] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  228.137252][ T5723] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.137283][ T5723] usb 2-1: Product: syz
[  228.137298][ T5723] usb 2-1: Manufacturer: syz
[  228.137313][ T5723] usb 2-1: SerialNumber: syz
[  228.199110][ T5723] usb 2-1: config 0 descriptor??
[  228.441349][ T5740] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  228.590324][ T5740] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  228.591710][ T5740] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  228.597832][ T5740] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.597858][ T5740] usb 4-1: Product: syz
[  228.597892][ T5740] usb 4-1: Manufacturer: syz
[  228.597906][ T5740] usb 4-1: SerialNumber: syz
[  229.153776][   T31] audit: type=1800 audit(1786545270.424:28): pid=9054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.998" name="bus" dev="tmpfs" ino=362 res=0 errno=0
[  229.251727][ T5723] usb 2-1: non-Atmel transceiver xxxx511f
[  229.267454][ T1220] usb 1-1: USB disconnect, device number 14
[  229.371919][ T9056] netlink: 27 bytes leftover after parsing attributes in process `syz.6.1000'.
[  229.453129][ T5723] usb 2-1: Firmware version (0.0) predates our first public release.
[  229.453192][ T5723] usb 2-1: Please update to version 0.2 or newer
[  229.454023][ T5723] usb 2-1: atusb_probe: initialization failed, error = -19
[  229.500597][ T5723] usb 2-1: USB disconnect, device number 10
[  229.648232][ T5740] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42
[  229.648315][ T5740] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048
[  229.648354][ T5740] cdc_ncm 4-1:1.0: setting rx_max = 2048
[  229.860521][ T5740] cdc_ncm 4-1:1.0: setting tx_max = 88
[  229.924172][ T5740] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  229.968079][ T5740] usb 4-1: USB disconnect, device number 8
[  229.996668][ T5740] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP)
[  230.648185][ T9076] loop6: detected capacity change from 0 to 1024
[  230.659374][ T9076] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  230.670220][ T9076] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002]
[  230.670521][ T9076] System zones: 0-1, 2-3, 5-36, 22-22, 98-101, 102-102
[  230.789061][ T9076] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  231.208657][ T7552] IPVS: starting estimator thread 0...
[  231.293898][ T9095] IPVS: using max 33 ests per chain, 79200 per kthread
[  231.862107][ T7653] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.941162][ T5740] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  233.090223][ T5740] usb 7-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  233.092634][ T5740] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  233.092661][ T5740] usb 7-1: Product: syz
[  233.092674][ T5740] usb 7-1: SerialNumber: syz
[  233.149474][ T5740] usb 7-1: config 0 descriptor??
[  233.350389][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  233.356466][ T5740] hso 7-1:0.0: Failed to find INT IN ep
[  233.584359][ T5740] usb 7-1: USB disconnect, device number 7
[  233.923928][ T9175] loop1: detected capacity change from 0 to 128
[  233.975902][ T9175] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  233.981861][ T9175] ext4 filesystem being mounted at /227/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  234.081764][   T31] audit: type=1800 audit(1786545275.354:29): pid=9179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1031" name="file1" dev="loop1" ino=13 res=0 errno=0
[  234.294180][ T5622] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  234.310036][ T4932] Bluetooth: hci4: command 0x0419 tx timeout
[  234.849835][ T5740] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  235.001786][ T5740] usb 4-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00
[  235.003361][ T5740] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  235.003414][ T5740] usb 4-1: config 1 interface 0 has no altsetting 1
[  235.008644][ T5740] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.008674][ T5740] usb 4-1: Product: syz
[  235.008689][ T5740] usb 4-1: Manufacturer: syz
[  235.008704][ T5740] usb 4-1: SerialNumber: syz
[  235.303973][ T9199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1042'.
[  235.536303][ T9205] netlink: 'syz.1.1043': attribute type 10 has an invalid length.
[  235.620130][ T5740] dvbdev: DVB: registering new adapter (DEC3000-s)
[  235.663380][ T9205] team0: Port device dummy0 added
[  235.722026][ T9210] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1046'.
[  235.766750][ T5740] usb 4-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC3000-s Frontend)...
[  236.130088][ T5709] usb 4-1: USB disconnect, device number 9
[  238.101602][ T9258] netlink: 'syz.0.1065': attribute type 5 has an invalid length.
[  238.114495][   T30] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  238.272567][   T30] usb 2-1: Using ep0 maxpacket: 8
[  238.280625][   T30] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  238.295421][   T30] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  238.295491][   T30] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  238.295550][   T30] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  238.295578][   T30] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  238.295606][   T30] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  238.295653][   T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.656077][   T30] usb 2-1: usb_control_msg returned -32
[  238.656152][   T30] usbtmc 2-1:16.0: can't read capabilities
[  238.895500][   T30] usb 2-1: USB disconnect, device number 11
[  239.739631][ T9285] loop6: detected capacity change from 0 to 512
[  239.749028][ T9285] msdos: Unknown parameter ''
[  239.935648][ T9289] faux_driver vgem: [drm] Unknown color mode 11173; guessing buffer size.
[  240.120702][ T9292] loop0: detected capacity change from 0 to 128
[  240.130539][   T30] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  240.304346][   T30] usb 2-1: unable to get BOS descriptor or descriptor too short
[  240.304476][   T30] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  240.321643][ T9292] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  240.321681][ T9292] hpfs: filesystem error: improperly stopped
[  240.321694][ T9292] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  240.321708][ T9292] hpfs: You really don't want any checks? You are crazy...
[  240.321720][ T9292] hpfs: Code page index out of array
[  240.321726][ T9292] hpfs: code page support is disabled
[  240.327843][ T9292] hpfs: hpfs_map_4sectors(): unaligned read
[  240.328330][ T9292] hpfs: hpfs_map_4sectors(): unaligned read
[  240.328347][ T9292] hpfs: filesystem error: unable to find root dir
[  240.412766][   T30] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  240.428597][   T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.439113][   T30] usb 2-1: Product: syz
[  240.447538][   T30] usb 2-1: Manufacturer: syz
[  240.452877][   T30] usb 2-1: SerialNumber: syz
[  240.743115][   T30] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  240.917277][   T30] usb 2-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  240.917376][   T30] usb 2-1: found format II with max.bitrate = 4, frame size=7372
[  241.327020][   T30] usb 2-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  241.341180][   T30] usb 2-1: found format II with max.bitrate = 4, frame size=7372
[  241.537072][   T30] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0)
[  241.823243][   T30] usb 2-1: USB disconnect, device number 12
[  242.008718][ T5625] udevd[5625]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  242.091894][   T25] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  242.253574][   T25] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  242.266385][   T25] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  242.266475][   T25] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  242.266556][   T25] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  242.311301][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  242.311379][   T25] usb 4-1: Product: syz
[  242.311440][   T25] usb 4-1: Manufacturer: syz
[  242.311475][   T25] usb 4-1: SerialNumber: syz
[  242.597703][   T25] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  242.831805][ T5733] usb 4-1: USB disconnect, device number 10
[  242.858353][ T5733] usblp0: removed
[  243.987667][ T4932] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  244.006635][ T4932] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  244.019850][ T1220] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  244.026607][ T4932] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  244.052820][ T4932] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  244.055031][ T4932] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  244.213285][ T1220] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[  244.217223][ T1220] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.477756][ T1220] cdc_acm 7-1:1.0: ttyACM0: USB ACM device
[  244.762282][ T1220] usb 7-1: USB disconnect, device number 8
[  245.930249][   T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.110260][ T9376] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1103'.
[  246.164841][ T5618] Bluetooth: hci5: command tx timeout
[  246.555839][   T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.967242][   T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.995985][ T9407] loop8: detected capacity change from 0 to 7
[  247.008711][ T9407] Dev loop8: unable to read RDB block 7
[  247.016940][ T9407]  loop8: AHDI p1 p3
[  247.017066][ T9407] loop8: partition table partially beyond EOD, truncated
[  247.017556][ T9407] loop8: p1 start 1700754297 is beyond EOD, truncated
[  247.431902][   T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.229709][ T5618] Bluetooth: hci5: command tx timeout
[  248.339655][   T30] usb 7-1: new full-speed USB device number 9 using dummy_hcd
[  248.523547][   T30] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  248.535484][   T30] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  248.540993][ T9443] loop0: detected capacity change from 0 to 128
[  248.558751][   T30] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  248.558875][   T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  248.558938][   T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  248.558980][   T30] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  248.590630][ T5733] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  248.631916][   T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  248.641586][   T30] usb 7-1: Product: syz
[  248.641624][   T30] usb 7-1: Manufacturer: syz
[  248.641654][   T30] usb 7-1: SerialNumber: syz
[  248.674781][   T30] usb 7-1: config 0 descriptor??
[  248.781384][ T5733] usb 4-1: Using ep0 maxpacket: 16
[  248.782527][ T5733] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  248.784706][ T5733] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  248.784739][ T5733] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  248.784761][ T5733] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  248.784803][ T5733] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.800686][ T5733] usb 4-1: config 0 descriptor??
[  248.897692][   T13] vlan2: left promiscuous mode
[  248.897771][   T13] dummy0: left promiscuous mode
[  248.924676][   T30] radio-si470x 7-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  248.933331][   T30] radio-si470x 7-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  248.939390][   T13] bridge0: port 3(vlan2) entered disabled state
[  248.959321][   T13] bridge_slave_1: left allmulticast mode
[  248.966780][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  248.978640][   T13] bridge_slave_0: left allmulticast mode
[  248.988185][   T13] bridge_slave_0: left promiscuous mode
[  248.988780][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  249.025334][   T31] audit: type=1326 audit(1786545290.284:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9432 comm="syz.1.1122" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21839e0d9 code=0x7fc00000
[  249.130465][   T30] radio-si470x 7-1:0.0: software version 0, hardware version 0
[  249.130558][   T30] radio-si470x 7-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0.
[  249.130763][   T30] radio-si470x 7-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[  249.268576][ T5733] microsoft 0003:045E:07DA.000C: unknown main item tag 0x7
[  249.268637][ T5733] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0
[  249.268925][ T5733] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0
[  249.339294][ T5733] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000C/input/input14
[  249.358649][   T30] radio-si470x 7-1:0.0: submitting int urb failed (-90)
[  249.624804][ T5733] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  249.655417][ T5733] usb 4-1: USB disconnect, device number 11
[  249.973352][   T30] radio-si470x 7-1:0.0: si470x_set_report: usb_control_msg returned -71
[  249.974039][   T30] radio-si470x 7-1:0.0: probe with driver radio-si470x failed with error -22
[  250.043098][ T9462] fido_id[9462]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[  250.070579][   T30] usb 7-1: USB disconnect, device number 9
[  250.320014][ T5618] Bluetooth: hci5: command tx timeout
[  250.594546][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  250.628755][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  250.653020][   T13] bond0 (unregistering): Released all slaves
[  251.063584][ T9472] loop3: detected capacity change from 0 to 40427
[  251.087702][ T9472] F2FS-fs (loop3): build fault injection rate: 174
[  251.087790][ T9472] F2FS-fs (loop3): build fault injection type: 0x3bfe8c
[  251.117515][ T9472] F2FS-fs (loop3): invalid crc value
[  251.269206][ T9472] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  251.277587][ T9472] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  251.393723][ T9472] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_new_inode_folio+0xed/0x140
[  251.395813][ T9472] overlayfs: failed to create directory ./bus/index (errno: 12); mounting read-only
[  251.395850][ T9472] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index.
[  251.632637][ T5626] syz-executor: attempt to access beyond end of device
[  251.632637][ T5626] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  251.633096][ T5626] syz-executor: attempt to access beyond end of device
[  251.633096][ T5626] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  251.793942][ T9483] netlink: 160 bytes leftover after parsing attributes in process `syz.6.1133'.
[  252.089904][ T9491] loop1: detected capacity change from 0 to 32768
[  252.090813][ T9491] BTRFS warning: v1 space cache is deprecated, falling back to no space cache
[  252.130228][ T9491] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1136 (9491)
[  252.155394][ T9491] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  252.155453][ T9491] BTRFS info (device loop1): using sha256 checksum algorithm
[  252.408143][ T5618] Bluetooth: hci5: command tx timeout
[  252.421688][ T9491] BTRFS info (device loop1): rebuilding free space tree
[  252.448256][ T9491] BTRFS info (device loop1): disabling free space tree
[  252.448345][ T9491] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  252.449332][ T9491] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  252.472588][ T9491] BTRFS info (device loop1): enabling ssd optimizations
[  252.472617][ T9491] BTRFS info (device loop1): turning on async discard
[  252.472642][ T9491] BTRFS info (device loop1): force clearing of disk cache
[  252.548990][   T31] audit: type=1800 audit(1786545293.814:31): pid=9491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1136" name="file1" dev="loop1" ino=260 res=0 errno=0
[  252.595736][ T9491] BTRFS info (device loop1): balance: start 
[  252.595998][ T9491] BTRFS info (device loop1): balance: ended with status: 0
[  252.726365][   T30] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  252.759233][ T5622] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  252.914206][   T30] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  252.922272][   T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.938657][   T30] usb 7-1: config 0 descriptor??
[  253.010089][ T8081] syz.3.691: attempt to access beyond end of device
[  253.010089][ T8081] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  253.046403][ T8081] CPU: 0 UID: 0 PID: 8081 Comm: syz.3.691 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  253.046440][ T8081] Tainted: [L]=SOFTLOCKUP
[  253.046447][ T8081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  253.046459][ T8081] Call Trace:
[  253.046467][ T8081]  <TASK>
[  253.046476][ T8081]  dump_stack_lvl+0xe8/0x150
[  253.046511][ T8081]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  253.046544][ T8081]  f2fs_write_end_bio+0x1211/0x16e0
[  253.046576][ T8081]  ? blkg_put+0x22/0x240
[  253.046618][ T8081]  __submit_merged_bio+0x258/0x6a0
[  253.046639][ T8081]  ? rcu_is_watching+0x16/0xb0
[  253.046668][ T8081]  __submit_merged_write_cond+0x3c9/0x4e0
[  253.046703][ T8081]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  253.046749][ T8081]  f2fs_write_data_pages+0x2a27/0x36f0
[  253.046815][ T8081]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  253.046841][ T8081]  ? is_bpf_text_address+0x26/0x2b0
[  253.046876][ T8081]  ? arch_stack_walk+0xfb/0x150
[  253.046923][ T8081]  ? add_lock_to_list+0xc7/0x100
[  253.046949][ T8081]  ? lockdep_unlock+0x5c/0xd0
[  253.046973][ T8081]  ? __lock_acquire+0x14b9/0x2e50
[  253.047019][ T8081]  ? do_raw_spin_lock+0x12b/0x2f0
[  253.047054][ T8081]  ? do_raw_spin_unlock+0xf5/0x200
[  253.047078][ T8081]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  253.047108][ T8081]  do_writepages+0x338/0x560
[  253.047141][ T8081]  ? do_raw_spin_unlock+0xf5/0x200
[  253.047169][ T8081]  filemap_fdatawrite+0x1e9/0x2f0
[  253.047194][ T8081]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  253.047261][ T8081]  ? do_raw_spin_unlock+0xf5/0x200
[  253.047291][ T8081]  f2fs_sync_dirty_inodes+0x30e/0x830
[  253.047325][ T8081]  f2fs_write_checkpoint+0xa3d/0x2710
[  253.047344][ T8081]  ? __lock_acquire+0x6df/0x2e50
[  253.047392][ T8081]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  253.047445][ T8081]  ? try_to_wake_up+0x8f2/0x14d0
[  253.047482][ T8081]  kill_f2fs_super+0x2dd/0x700
[  253.047521][ T8081]  ? __pfx_kill_f2fs_super+0x10/0x10
[  253.047560][ T8081]  ? call_rcu+0x64d/0x8b0
[  253.047589][ T8081]  ? lockdep_hardirqs_on+0x7b/0x110
[  253.047622][ T8081]  deactivate_locked_super+0xbc/0x110
[  253.047656][ T8081]  cleanup_mnt+0x3d3/0x460
[  253.047684][ T8081]  task_work_run+0x1d9/0x270
[  253.047708][ T8081]  ? __pfx_task_work_run+0x10/0x10
[  253.047729][ T8081]  ? do_exit+0x735/0x2360
[  253.047746][ T8081]  ? kmem_cache_free+0x182/0x650
[  253.047770][ T8081]  ? put_net+0x191/0x260
[  253.047800][ T8081]  do_exit+0x73a/0x2360
[  253.047827][ T8081]  ? __pfx_do_exit+0x10/0x10
[  253.047844][ T8081]  ? do_raw_spin_lock+0x12b/0x2f0
[  253.047886][ T8081]  do_group_exit+0x22d/0x2f0
[  253.047905][ T8081]  ? _raw_spin_unlock_irq+0x23/0x50
[  253.047938][ T8081]  get_signal+0x121b/0x12c0
[  253.047985][ T8081]  arch_do_signal_or_restart+0xbb/0x860
[  253.048013][ T8081]  ? __pfx_hrtimer_wakeup+0x10/0x10
[  253.048043][ T8081]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  253.048069][ T8081]  ? irqentry_exit+0x218/0x910
[  253.048095][ T8081]  ? __se_sys_clock_nanosleep+0x35b/0x3b0
[  253.048133][ T8081]  exit_to_user_mode_loop+0x10e/0x770
[  253.048152][ T8081]  ? rcu_is_watching+0x16/0xb0
[  253.048179][ T8081]  do_syscall_64+0x328/0x520
[  253.048198][ T8081]  ? trace_irq_disable+0x3b/0x140
[  253.048216][ T8081]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.048236][ T8081]  ? clear_bhb_loop+0x70/0xc0
[  253.048258][ T8081]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.048278][ T8081] RIP: 0033:0x7f457e95e90e
[  253.048296][ T8081] Code: Unable to access opcode bytes at 0x7f457e95e8e4.
[  253.048306][ T8081] RSP: 002b:00007f457f884f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6
[  253.048327][ T8081] RAX: fffffffffffffdfc RBX: 00007f457f8856c0 RCX: 00007f457e95e90e
[  253.048340][ T8081] RDX: 00007f457f884fb0 RSI: 0000000000000000 RDI: 0000000000000000
[  253.048353][ T8081] RBP: 00007f457ea35024 R08: 0000000000000000 R09: 0000000000000000
[  253.048363][ T8081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  253.048373][ T8081] R13: 00007f457ec26038 R14: 00007f457ec25fa0 R15: 00007ffee7935678
[  253.048404][ T8081]  </TASK>
[  253.269880][ T8081] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  253.270683][ T8081] CPU: 1 UID: 0 PID: 8081 Comm: syz.3.691 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  253.270714][ T8081] Tainted: [L]=SOFTLOCKUP
[  253.270722][ T8081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  253.270819][ T8081] Call Trace:
[  253.270832][ T8081]  <TASK>
[  253.270852][ T8081]  dump_stack_lvl+0xe8/0x150
[  253.270891][ T8081]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  253.270931][ T8081]  f2fs_write_end_bio+0x1211/0x16e0
[  253.270972][ T8081]  __submit_merged_bio+0x258/0x6a0
[  253.270999][ T8081]  ? rcu_is_watching+0x16/0xb0
[  253.271027][ T8081]  __submit_merged_write_cond+0x3c9/0x4e0
[  253.271150][ T8081]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  253.271200][ T8081]  f2fs_write_data_pages+0x2a27/0x36f0
[  253.271264][ T8081]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  253.271292][ T8081]  ? is_bpf_text_address+0x26/0x2b0
[  253.271325][ T8081]  ? arch_stack_walk+0xfb/0x150
[  253.271377][ T8081]  ? add_lock_to_list+0xc7/0x100
[  253.271402][ T8081]  ? lockdep_unlock+0x5c/0xd0
[  253.271427][ T8081]  ? __lock_acquire+0x14b9/0x2e50
[  253.271472][ T8081]  ? do_raw_spin_lock+0x12b/0x2f0
[  253.271510][ T8081]  ? do_raw_spin_unlock+0xf5/0x200
[  253.271538][ T8081]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  253.271565][ T8081]  do_writepages+0x338/0x560
[  253.271607][ T8081]  ? do_raw_spin_unlock+0xf5/0x200
[  253.271637][ T8081]  filemap_fdatawrite+0x1e9/0x2f0
[  253.271667][ T8081]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  253.271730][ T8081]  ? do_raw_spin_unlock+0xf5/0x200
[  253.271761][ T8081]  f2fs_sync_dirty_inodes+0x30e/0x830
[  253.271792][ T8081]  f2fs_write_checkpoint+0xa3d/0x2710
[  253.271812][ T8081]  ? __lock_acquire+0x6df/0x2e50
[  253.271861][ T8081]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  253.271913][ T8081]  ? try_to_wake_up+0x8f2/0x14d0
[  253.271948][ T8081]  kill_f2fs_super+0x2dd/0x700
[  253.271987][ T8081]  ? __pfx_kill_f2fs_super+0x10/0x10
[  253.272029][ T8081]  ? call_rcu+0x64d/0x8b0
[  253.272060][ T8081]  ? lockdep_hardirqs_on+0x7b/0x110
[  253.272092][ T8081]  deactivate_locked_super+0xbc/0x110
[  253.272125][ T8081]  cleanup_mnt+0x3d3/0x460
[  253.272153][ T8081]  task_work_run+0x1d9/0x270
[  253.272177][ T8081]  ? __pfx_task_work_run+0x10/0x10
[  253.272196][ T8081]  ? do_exit+0x735/0x2360
[  253.272212][ T8081]  ? kmem_cache_free+0x182/0x650
[  253.272236][ T8081]  ? put_net+0x191/0x260
[  253.272265][ T8081]  do_exit+0x73a/0x2360
[  253.272291][ T8081]  ? __pfx_do_exit+0x10/0x10
[  253.272307][ T8081]  ? do_raw_spin_lock+0x12b/0x2f0
[  253.272347][ T8081]  do_group_exit+0x22d/0x2f0
[  253.272366][ T8081]  ? _raw_spin_unlock_irq+0x23/0x50
[  253.272397][ T8081]  get_signal+0x121b/0x12c0
[  253.272442][ T8081]  arch_do_signal_or_restart+0xbb/0x860
[  253.272469][ T8081]  ? __pfx_hrtimer_wakeup+0x10/0x10
[  253.272499][ T8081]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  253.272523][ T8081]  ? irqentry_exit+0x218/0x910
[  253.272548][ T8081]  ? __se_sys_clock_nanosleep+0x35b/0x3b0
[  253.272593][ T8081]  exit_to_user_mode_loop+0x10e/0x770
[  253.272613][ T8081]  ? rcu_is_watching+0x16/0xb0
[  253.272638][ T8081]  do_syscall_64+0x328/0x520
[  253.272657][ T8081]  ? trace_irq_disable+0x3b/0x140
[  253.272686][ T8081]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.272706][ T8081]  ? clear_bhb_loop+0x70/0xc0
[  253.272728][ T8081]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.272747][ T8081] RIP: 0033:0x7f457e95e90e
[  253.272766][ T8081] Code: Unable to access opcode bytes at 0x7f457e95e8e4.
[  253.272776][ T8081] RSP: 002b:00007f457f884f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6
[  253.272798][ T8081] RAX: fffffffffffffdfc RBX: 00007f457f8856c0 RCX: 00007f457e95e90e
[  253.272812][ T8081] RDX: 00007f457f884fb0 RSI: 0000000000000000 RDI: 0000000000000000
[  253.272824][ T8081] RBP: 00007f457ea35024 R08: 0000000000000000 R09: 0000000000000000
[  253.272835][ T8081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  253.272847][ T8081] R13: 00007f457ec26038 R14: 00007f457ec25fa0 R15: 00007ffee7935678
[  253.272877][ T8081]  </TASK>
[  253.360651][ T8081] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  254.105446][ T9532] loop1: detected capacity change from 32768 to 64
[  254.385007][   T30] usb 7-1: Cannot set autoneg
[  254.385436][   T30] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  254.491971][   T30] usb 7-1: USB disconnect, device number 10
[  254.601659][   T13] hsr_slave_0: left promiscuous mode
[  254.642601][   T13] hsr_slave_1: left promiscuous mode
[  254.649211][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  254.658478][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  254.750007][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  254.750050][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  254.799228][   T13] veth1_macvtap: left promiscuous mode
[  254.799304][   T13] veth0_macvtap: left promiscuous mode
[  254.799431][   T13] veth1_vlan: left promiscuous mode
[  254.822664][   T13] veth0_vlan: left promiscuous mode
[  255.805131][ T4932] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  255.813987][ T4932] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  255.815116][ T4932] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  255.817291][ T4932] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  255.823562][ T4932] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  255.941245][ T9565] loop6: detected capacity change from 0 to 512
[  256.532824][   T13] team0 (unregistering): Port device team_slave_1 removed
[  256.593480][   T13] team0 (unregistering): Port device team_slave_0 removed
[  256.913912][ T9542] bridge0: port 2(bridge_slave_1) entered disabled state
[  256.915145][ T9542] bridge0: port 1(bridge_slave_0) entered disabled state
[  256.992198][ T9543] bridge0: port 2(bridge_slave_1) entered blocking state
[  256.995022][ T9543] bridge0: port 2(bridge_slave_1) entered forwarding state
[  256.995764][ T9543] bridge0: port 1(bridge_slave_0) entered blocking state
[  256.995953][ T9543] bridge0: port 1(bridge_slave_0) entered forwarding state
[  257.046158][ T9543] bridge0: entered promiscuous mode
[  257.051699][ T9543] bridge0: entered allmulticast mode
[  257.516283][ T9351] bridge0: port 1(bridge_slave_0) entered blocking state
[  257.535899][ T9351] bridge0: port 1(bridge_slave_0) entered disabled state
[  257.536307][ T9351] bridge_slave_0: entered allmulticast mode
[  257.572248][ T9351] bridge_slave_0: entered promiscuous mode
[  257.630081][ T9351] bridge0: port 2(bridge_slave_1) entered blocking state
[  257.630279][ T9351] bridge0: port 2(bridge_slave_1) entered disabled state
[  257.630552][ T9351] bridge_slave_1: entered allmulticast mode
[  257.633621][ T9351] bridge_slave_1: entered promiscuous mode
[  257.907248][ T9603] overlayfs: statfs failed on './file0'
[  257.954803][ T9351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  257.996485][ T4932] Bluetooth: hci1: command tx timeout
[  258.002846][ T9590] loop0: detected capacity change from 0 to 32768
[  258.016262][ T9590] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1156 (9590)
[  258.061459][ T9590] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  258.061555][ T9590] BTRFS info (device loop0): using crc32c checksum algorithm
[  258.081809][ T9351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  258.225044][ T9351] team0: Port device team_slave_0 added
[  258.310355][ T9351] team0: Port device team_slave_1 added
[  258.457760][ T9590] BTRFS info (device loop0): enabling ssd optimizations
[  258.457814][ T9590] BTRFS info (device loop0): turning on async discard
[  258.457866][ T9590] BTRFS info (device loop0): enabling free space tree
[  258.500955][   T25] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  258.671097][ T9351] batman_adv: batadv0: Adding interface: batadv_slave_0
[  258.671151][ T9351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  258.671199][ T9351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  258.680393][   T25] usb 2-1: Using ep0 maxpacket: 32
[  258.715196][   T25] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  258.741068][ T9351] batman_adv: batadv0: Adding interface: batadv_slave_1
[  258.741090][ T9351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  258.741116][ T9351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  258.806759][   T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  258.806820][   T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  258.806892][   T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.858790][   T25] usb 2-1: config 0 descriptor??
[  258.875437][   T25] hub 2-1:0.0: USB hub found
[  259.086869][   T25] hub 2-1:0.0: 1 port detected
[  259.092523][ T5612] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  259.255600][ T9351] hsr_slave_0: entered promiscuous mode
[  259.256660][ T9351] hsr_slave_1: entered promiscuous mode
[  259.259266][ T9351] debugfs: 'hsr0' already exists in 'hsr'
[  259.259291][ T9351] Cannot create hsr debugfs directory
[  259.602345][   T25] usb 2-1: USB disconnect, device number 13
[  259.840687][   T30] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  259.854264][   T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.030026][   T30] usb 7-1: Using ep0 maxpacket: 32
[  260.070064][   T30] usb 7-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  260.075684][ T4932] Bluetooth: hci1: command tx timeout
[  260.099453][   T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  260.099620][   T30] usb 7-1: Product: syz
[  260.099685][   T30] usb 7-1: Manufacturer: syz
[  260.099720][   T30] usb 7-1: SerialNumber: syz
[  260.132455][   T30] usb 7-1: config 0 descriptor??
[  260.154972][   T30] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  260.293548][ T5278] 8021q: adding VLAN 0 to HW filter on device eth9
[  260.303797][ T9649] loop1: detected capacity change from 0 to 1024
[  260.317108][ T9649] EXT4-fs: Ignoring removed i_version option
[  260.327104][ T9649] EXT4-fs: Ignoring removed bh option
[  260.336128][ T9649] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  260.373123][ T9649] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  260.527221][   T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.905051][   T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.194789][   T30] gspca_ov534_9: reg_w failed -71
[  261.401157][   T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.499708][   T30] gspca_ov534_9: Unknown sensor 0000
[  261.499966][   T30] ov534_9 7-1:0.0: probe with driver ov534_9 failed with error -22
[  261.561324][   T30] usb 7-1: USB disconnect, device number 11
[  261.726940][ T5622] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  261.840171][ T1220] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  262.012340][ T1220] usb 1-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.40
[  262.014291][ T1220] usb 1-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30
[  262.014346][ T1220] usb 1-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65
[  262.014372][ T1220] usb 1-1: config 1 interface 0 has no altsetting 0
[  262.038819][ T9682] jffs2: notice: (9682) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  262.040011][ T1220] usb 1-1: string descriptor 0 read error: -22
[  262.040149][ T1220] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.156294][ T4932] Bluetooth: hci1: command tx timeout
[  262.356604][ T9562] bridge0: port 1(bridge_slave_0) entered blocking state
[  262.356753][ T9562] bridge0: port 1(bridge_slave_0) entered disabled state
[  262.356975][ T9562] bridge_slave_0: entered allmulticast mode
[  262.367652][ T9562] bridge_slave_0: entered promiscuous mode
[  262.548483][ T9562] bridge0: port 2(bridge_slave_1) entered blocking state
[  262.548605][ T9562] bridge0: port 2(bridge_slave_1) entered disabled state
[  262.548784][ T9562] bridge_slave_1: entered allmulticast mode
[  262.604318][ T9562] bridge_slave_1: entered promiscuous mode
[  262.648701][ T1220] logitech 0003:046D:C626.000D: unknown main item tag 0x2
[  262.660138][ T1220] logitech 0003:046D:C626.000D: unexpected long global item
[  262.665376][ T1220] logitech 0003:046D:C626.000D: parse failed
[  262.665487][ T1220] logitech 0003:046D:C626.000D: probe with driver logitech failed with error -22
[  262.755576][ T1220] usb 1-1: USB disconnect, device number 15
[  262.904486][ T5278] 8021q: adding VLAN 0 to HW filter on device eth10
[  263.005953][ T9562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  263.044069][ T9562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  264.230068][ T4932] Bluetooth: hci1: command tx timeout
[  264.232344][   T13] macvlan2: left allmulticast mode
[  264.232367][   T13] batadv0: left allmulticast mode
[  264.257075][   T13] macvlan2: left promiscuous mode
[  264.257529][   T13] bridge0: port 3(macvlan2) entered disabled state
[  264.292495][   T13] bridge_slave_1: left allmulticast mode
[  264.292566][   T13] bridge_slave_1: left promiscuous mode
[  264.292827][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  264.317395][   T13] bridge_slave_0: left allmulticast mode
[  264.317461][   T13] bridge_slave_0: left promiscuous mode
[  264.317696][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  265.279361][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  265.318554][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  265.377745][   T13] bond0 (unregistering): Released all slaves
[  265.405059][ T9562] team0: Port device team_slave_0 added
[  265.500165][ T9562] team0: Port device team_slave_1 added
[  265.751061][   T13] tipc: Disabling bearer <udp:syz2>
[  265.751672][   T13] tipc: Left network mode
[  265.767255][ T9751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1185'.
[  265.767304][ T9751] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1185'.
[  265.977440][ T9562] batman_adv: batadv0: Adding interface: batadv_slave_0
[  265.977505][ T9562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  265.977552][ T9562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  265.993737][ T9562] batman_adv: batadv0: Adding interface: batadv_slave_1
[  265.993763][ T9562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  265.993808][ T9562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  266.185008][ T5278] 8021q: adding VLAN 0 to HW filter on device eth11
[  266.935923][ T9562] hsr_slave_0: entered promiscuous mode
[  266.950797][ T9562] hsr_slave_1: entered promiscuous mode
[  266.962689][ T9562] debugfs: 'hsr0' already exists in 'hsr'
[  266.986980][ T9562] Cannot create hsr debugfs directory
[  267.273324][ T9351] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  267.426801][ T9351] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  267.689299][ T9351] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  267.796430][ T9351] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  267.797352][ T9351] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  267.855214][ T9351] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  268.126380][ T9778] loop6: detected capacity change from 0 to 2048
[  268.253863][ T9351] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  268.283117][ T9351] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  268.401079][ T9790] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  268.569235][   T13] hsr_slave_0: left promiscuous mode
[  268.575611][   T13] hsr_slave_1: left promiscuous mode
[  268.576703][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  268.576727][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  268.599836][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  268.599891][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  268.697301][   T13] batadv0: left promiscuous mode
[  268.697420][   T13] veth1_macvtap: left promiscuous mode
[  268.697447][   T13] veth0_macvtap: left promiscuous mode
[  268.697630][   T13] veth1_vlan: left promiscuous mode
[  268.697702][   T13] veth0_vlan: left promiscuous mode
[  269.752310][   T13] team0 (unregistering): Port device team_slave_1 removed
[  269.782568][   T13] team0 (unregistering): Port device team_slave_0 removed
[  270.089034][ T5278] 8021q: adding VLAN 0 to HW filter on device eth12
[  270.817473][ T9351] 8021q: adding VLAN 0 to HW filter on device bond0
[  270.918434][ T9351] 8021q: adding VLAN 0 to HW filter on device team0
[  270.938364][ T9840] loop6: detected capacity change from 0 to 512
[  270.993665][ T9840] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  271.013244][ T7554] bridge0: port 1(bridge_slave_0) entered blocking state
[  271.013383][ T7554] bridge0: port 1(bridge_slave_0) entered forwarding state
[  271.039089][ T7554] bridge0: port 2(bridge_slave_1) entered blocking state
[  271.039222][ T7554] bridge0: port 2(bridge_slave_1) entered forwarding state
[  271.114789][ T9840] EXT4-fs (loop6): 1 truncate cleaned up
[  271.122766][ T9840] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  271.298724][   T13] IPVS: stop unused estimator thread 0...
[  271.361173][ T7653] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  271.636189][ T9855] loop6: detected capacity change from 0 to 128
[  271.662453][ T9855] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  271.683000][ T9855] hpfs: filesystem error: improperly stopped
[  271.690578][ T9855] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  271.712236][ T9855] hpfs: You really don't want any checks? You are crazy...
[  271.721530][ T9855] hpfs: Code page index out of array
[  271.721598][ T9855] hpfs: code page support is disabled
[  271.722880][ T9855] hpfs: hpfs_map_4sectors(): unaligned read
[  271.723040][ T9855] hpfs: hpfs_map_4sectors(): unaligned read
[  271.723072][ T9855] hpfs: filesystem error: unable to find root dir
[  272.444284][ T9562] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  272.514209][ T9562] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  272.523824][ T9562] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  272.576114][ T9562] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  272.584706][ T9562] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  272.636742][ T9562] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  272.665057][ T9562] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  272.716663][ T9562] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  272.871396][ T5724] usb 1-1: new full-speed USB device number 16 using dummy_hcd
[  273.047002][ T5724] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  273.066709][ T5724] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.066828][ T5724] usb 1-1: Product: syz
[  273.066897][ T5724] usb 1-1: Manufacturer: syz
[  273.066932][ T5724] usb 1-1: SerialNumber: syz
[  273.107182][ T5724] usb 1-1: config 0 descriptor??
[  273.169198][ T9889] loop1: detected capacity change from 0 to 1024
[  273.188777][ T5278] 8021q: adding VLAN 0 to HW filter on device eth13
[  273.214762][ T9889] hfsplus: failed to load extents file
[  273.303925][ T9562] 8021q: adding VLAN 0 to HW filter on device bond0
[  273.348394][ T5724] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  273.486330][ T9562] 8021q: adding VLAN 0 to HW filter on device team0
[  273.513872][ T1120] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.514000][ T1120] bridge0: port 1(bridge_slave_0) entered forwarding state
[  273.543414][ T1120] bridge0: port 2(bridge_slave_1) entered blocking state
[  273.543538][ T1120] bridge0: port 2(bridge_slave_1) entered forwarding state
[  274.433897][ T5724] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  274.528599][ T5724] usb 1-1: USB disconnect, device number 16
[  275.226060][ T9914] loop6: detected capacity change from 0 to 32768
[  275.236607][ T9914] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1225 (9914)
[  275.266723][ T9914] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  275.266810][ T9914] BTRFS info (device loop6): using sha256 checksum algorithm
[  275.543226][ T9914] BTRFS info (device loop6): enabling ssd optimizations
[  275.543316][ T9914] BTRFS info (device loop6): turning on sync discard
[  275.543411][ T9914] BTRFS info (device loop6): enabling free space tree
[  275.543449][ T9914] BTRFS info (device loop6): use zlib compression, level 3
[  275.609817][ T9351] 8021q: adding VLAN 0 to HW filter on device batadv0
[  275.786784][   T31] audit: type=1800 audit(1786545317.044:32): pid=9914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1225" name="file1" dev="loop6" ino=260 res=0 errno=0
[  276.448491][ T9948] gadgetfs: bound to dummy_udc driver
[  277.091594][ T7653] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  278.108744][ T5278] 8021q: adding VLAN 0 to HW filter on device eth14
[  278.178635][ T9562] 8021q: adding VLAN 0 to HW filter on device batadv0
[  278.556007][ T9351] veth0_vlan: entered promiscuous mode
[  278.628740][ T9351] veth1_vlan: entered promiscuous mode
[  279.079641][ T9351] veth0_macvtap: entered promiscuous mode
[  279.173065][ T9351] veth1_macvtap: entered promiscuous mode
[  279.516240][ T9351] batman_adv: batadv0: Interface activated: batadv_slave_0
[  279.567375][ T9351] batman_adv: batadv0: Interface activated: batadv_slave_1
[  279.776582][ T7554] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  279.835241][   T59] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  279.837932][ T3025] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  279.837993][ T3025] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  280.413768][T10003] loop1: detected capacity change from 0 to 1024
[  280.580275][T10005] loop0: detected capacity change from 0 to 512
[  280.597612][T10003] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  280.651490][T10005] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  280.735559][T10005] EXT4-fs (loop0): 1 truncate cleaned up
[  280.755578][T10005] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  280.841119][ T9562] veth0_vlan: entered promiscuous mode
[  281.026683][   T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  281.026778][   T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  281.095795][ T9562] veth1_vlan: entered promiscuous mode
[  281.327117][T10005] loop0: detected capacity change from 512 to 64
[  281.423449][T10016] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  281.523824][T10005]  loop0: unable to read partition table
[  281.529843][T10005] loop_reread_partitions: partition scan of loop0 (ï5ŸA;¹8o÷Ö¤®mÝûÑÎ])Âî^\©) failed (rc=-5)
[  281.616268][ T7554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  281.616366][ T7554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  281.721198][ T5622] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  281.844597][ T5612] EXT4-fs warning (device loop0): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor: error -ENOMEM reading directory block
[  281.846270][ T5612] EXT4-fs warning (device loop0): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor: error -ENOMEM reading directory block
[  281.861611][ T5612] EXT4-fs warning (device loop0): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor: error -ENOMEM reading directory block
[  281.865176][ T5612] EXT4-fs warning (device loop0): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor: error -ENOMEM reading directory block
[  281.868974][ T5612] EXT4-fs warning (device loop0): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor: error -ENOMEM reading directory block
[  281.947201][ T5612] EXT4-fs warning (device loop0): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor: error -ENOMEM reading directory block
[  281.948870][ T5612] EXT4-fs warning (device loop0): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor: error -ENOMEM reading directory block
[  281.975026][ T5612] EXT4-fs warning (device loop0): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor: error -ENOMEM reading directory block
[  281.987896][ T5612] EXT4-fs warning (device loop0): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor: error -ENOMEM reading directory block
[  282.233893][ T9562] veth0_macvtap: entered promiscuous mode
[  282.293327][ T9562] veth1_macvtap: entered promiscuous mode
[  282.356053][ T9562] batman_adv: batadv0: Interface activated: batadv_slave_0
[  282.373852][ T9562] batman_adv: batadv0: Interface activated: batadv_slave_1
[  282.466093][ T1120] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  282.467215][ T1120] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  282.467255][ T1120] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  282.480610][   T97] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  282.626000][T10034] loop1: detected capacity change from 0 to 128
[  282.661698][T10034] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  282.817319][T10034] hpfs: filesystem error: improperly stopped
[  282.817471][T10034] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  282.817504][T10034] hpfs: You really don't want any checks? You are crazy...
[  282.817517][T10034] hpfs: Code page index out of array
[  282.817537][T10034] hpfs: code page support is disabled
[  282.817871][T10034] hpfs: hpfs_map_4sectors(): unaligned read
[  282.818134][T10034] hpfs: hpfs_map_4sectors(): unaligned read
[  282.818163][T10034] hpfs: filesystem error: unable to find root dir
[  283.127243][T10038] loop7: detected capacity change from 0 to 1024
[  283.497828][ T5278] 8021q: adding VLAN 0 to HW filter on device eth15
[  283.972584][ T7558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  283.972676][ T7558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  284.681735][ T6785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  286.045673][ T7554] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.207176][ T7552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  286.207217][ T7552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  286.834928][ T7554] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.958794][T10092] jffs2: notice: (10092) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  287.388285][ T5618] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  287.408910][ T5618] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  287.418929][ T5618] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  287.435184][ T5618] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  287.438160][ T5618] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  287.768414][ T7554] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  287.892009][T10105] loop7: detected capacity change from 0 to 512
[  287.914428][ T5278] 8021q: adding VLAN 0 to HW filter on device eth16
[  287.934262][T10105] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  288.034245][T10105] EXT4-fs (loop7): 1 truncate cleaned up
[  288.037151][T10105] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  288.284186][T10114] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1262'.
[  288.284286][T10114] netlink: 'syz.8.1262': attribute type 32 has an invalid length.
[  288.285709][T10114] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1262'.
[  288.285795][T10114] netlink: 'syz.8.1262': attribute type 32 has an invalid length.
[  288.394698][T10105] loop7: detected capacity change from 512 to 64
[  288.491267][ T7554] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.628890][ T9351] EXT4-fs warning (device loop7): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor: error -ENOMEM reading directory block
[  288.647117][ T9351] EXT4-fs warning (device loop7): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor: error -ENOMEM reading directory block
[  288.679283][ T9351] EXT4-fs warning (device loop7): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor: error -ENOMEM reading directory block
[  288.697175][ T9351] EXT4-fs warning (device loop7): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor: error -ENOMEM reading directory block
[  288.713862][ T9351] EXT4-fs warning (device loop7): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor: error -ENOMEM reading directory block
[  288.762122][ T9351] EXT4-fs warning (device loop7): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor: error -ENOMEM reading directory block
[  288.776416][ T9351] EXT4-fs warning (device loop7): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor: error -ENOMEM reading directory block
[  288.875351][ T9351] EXT4-fs warning (device loop7): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor: error -ENOMEM reading directory block
[  288.888756][ T9351] EXT4-fs warning (device loop7): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor: error -ENOMEM reading directory block
[  288.900704][ T9351] EXT4-fs warning (device loop7): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor: error -ENOMEM reading directory block
[  289.049126][T10121] input: syz0 as /devices/virtual/input/input15
[  289.509984][ T4932] Bluetooth: hci0: command tx timeout
[  290.069004][ T7554] bridge_slave_1: left allmulticast mode
[  290.069056][ T7554] bridge_slave_1: left promiscuous mode
[  290.069261][ T7554] bridge0: port 2(bridge_slave_1) entered disabled state
[  290.114961][ T7554] bridge_slave_0: left allmulticast mode
[  290.125258][ T7554] bridge_slave_0: left promiscuous mode
[  290.125754][ T7554] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.593692][ T4932] Bluetooth: hci0: command tx timeout
[  291.681522][ T7554] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  291.710810][ T7554] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  291.725204][ T7554] bond0 (unregistering): Released all slaves
[  292.314517][ T9351] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.672722][ T4932] Bluetooth: hci0: command tx timeout
[  293.898403][ T7554] hsr_slave_0: left promiscuous mode
[  293.912865][ T7554] hsr_slave_1: left promiscuous mode
[  293.914688][ T7554] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  293.914726][ T7554] batman_adv: batadv0: Removing interface: batadv_slave_0
[  293.970734][ T7554] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  293.970824][ T7554] batman_adv: batadv0: Removing interface: batadv_slave_1
[  294.594328][ T7554] veth1_macvtap: left promiscuous mode
[  294.594452][ T7554] veth0_macvtap: left promiscuous mode
[  294.602361][ T7554] veth1_vlan: left promiscuous mode
[  294.613746][ T7554] veth0_vlan: left promiscuous mode
[  294.972969][ T5618] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  294.991808][ T5618] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  294.999771][ T5618] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  295.016682][ T5618] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  295.023468][ T5618] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  295.752928][ T4932] Bluetooth: hci0: command tx timeout
[  296.262059][T10180] loop8: detected capacity change from 0 to 40427
[  296.286402][T10180] F2FS-fs (loop8): Corrupted extension count (64 + 1 > 64)
[  296.295011][T10180] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  296.306891][T10180] F2FS-fs (loop8): Image doesn't support compression
[  296.320818][T10180] F2FS-fs (loop8): invalid crc value
[  296.477120][T10180] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  296.496125][T10180] F2FS-fs (loop8): f2fs_disable_checkpoint starts, unusable: 0
[  296.505596][T10180] F2FS-fs (loop8): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  296.517503][T10180] F2FS-fs (loop8): Start checkpoint disabled!
[  296.583134][T10180] F2FS-fs (loop8): f2fs_disable_checkpoint finishes, err:0
[  296.595010][T10180] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  296.604145][T10180] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6
[  296.685577][T10180] syz.8.1282: attempt to access beyond end of device
[  296.685577][T10180] loop8: rw=2049, sector=77824, nr_sectors = 136 limit=40427
[  296.835892][T10224] loop6: detected capacity change from 0 to 256
[  296.878733][T10224] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  296.913834][T10224] FAT-fs (loop6): error, allocated dir entry found after end-of-directory marker (i_pos 1)
[  296.913938][T10224] FAT-fs (loop6): Filesystem has been set read-only
[  296.991693][T10226] loop1: detected capacity change from 0 to 1024
[  297.001565][T10226] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[  297.012457][T10226] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  297.031197][T10226] EXT4-fs (loop1): invalid journal inode
[  297.037412][T10226] EXT4-fs (loop1): can't get journal size
[  297.045171][T10226] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 17104912: comm syz.1.1289: lblock 2 mapped to illegal pblock 17104912 (length 1)
[  297.061721][T10226] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  297.062603][T10226] EXT4-fs (loop1): failed to initialize system zone (-117)
[  297.077020][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  297.077051][    C1] EXT4-fs (loop1): initial error at time 1786545338: ext4_map_blocks:790: inode 3: block 17104912
[  297.077088][    C1] EXT4-fs (loop1): last error at time 1786545338: ext4_map_blocks:790: inode 3: block 17104912
[  297.123237][ T1120] kworker/u8:9: attempt to access beyond end of device
[  297.123237][ T1120] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  297.138528][T10226] EXT4-fs (loop1): mount failed
[  297.193059][ T1120] CPU: 1 UID: 0 PID: 1120 Comm: kworker/u8:9 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  297.193098][ T1120] Tainted: [L]=SOFTLOCKUP
[  297.193106][ T1120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  297.193120][ T1120] Workqueue: writeback wb_workfn (flush-7:8)
[  297.193172][ T1120] Call Trace:
[  297.193184][ T1120]  <TASK>
[  297.193194][ T1120]  dump_stack_lvl+0xe8/0x150
[  297.193227][ T1120]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  297.193262][ T1120]  f2fs_write_end_bio+0x1211/0x16e0
[  297.193285][ T1120]  ? blkg_put+0x22/0x240
[  297.193336][ T1120]  __submit_merged_bio+0x258/0x6a0
[  297.193364][ T1120]  ? rcu_is_watching+0x16/0xb0
[  297.193393][ T1120]  __submit_merged_write_cond+0x3c9/0x4e0
[  297.193429][ T1120]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  297.193481][ T1120]  f2fs_write_data_pages+0x2a27/0x36f0
[  297.193551][ T1120]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  297.193595][ T1120]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  297.193653][ T1120]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  297.193702][ T1120]  ? __lock_acquire+0x6df/0x2e50
[  297.193739][ T1120]  ? set_shrinker_bit+0x7c/0x350
[  297.193769][ T1120]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  297.193797][ T1120]  do_writepages+0x338/0x560
[  297.193832][ T1120]  ? reacquire_held_locks+0x117/0x1a0
[  297.193855][ T1120]  ? writeback_sb_inodes+0x450/0x1b00
[  297.193897][ T1120]  __writeback_single_inode+0x136/0x1220
[  297.193930][ T1120]  ? do_raw_spin_unlock+0xf5/0x200
[  297.193962][ T1120]  writeback_sb_inodes+0x9de/0x1b00
[  297.193990][ T1120]  ? __lock_acquire+0x6df/0x2e50
[  297.194022][ T1120]  ? lock_acquire+0x115/0x350
[  297.194044][ T1120]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  297.194118][ T1120]  ? rcu_is_watching+0x16/0xb0
[  297.194141][ T1120]  ? queue_io+0x2d3/0x470
[  297.194174][ T1120]  wb_writeback+0x41c/0xad0
[  297.194207][ T1120]  ? queue_io+0x251/0x470
[  297.194264][ T1120]  ? __pfx_wb_writeback+0x10/0x10
[  297.194290][ T1120]  ? do_raw_spin_lock+0x12b/0x2f0
[  297.194334][ T1120]  wb_workfn+0x431/0x10f0
[  297.194380][ T1120]  ? __pfx_wb_workfn+0x10/0x10
[  297.194407][ T1120]  ? rcu_is_watching+0x16/0xb0
[  297.194439][ T1120]  ? do_raw_spin_lock+0x12b/0x2f0
[  297.194474][ T1120]  ? lock_acquire+0x115/0x350
[  297.194504][ T1120]  ? rcu_is_watching+0x16/0xb0
[  297.194528][ T1120]  ? process_scheduled_works+0x97a/0x1630
[  297.194556][ T1120]  process_scheduled_works+0xc3d/0x1630
[  297.194614][ T1120]  ? __pfx_process_scheduled_works+0x10/0x10
[  297.194647][ T1120]  ? assign_work+0x3cf/0x5d0
[  297.194678][ T1120]  worker_thread+0xa47/0xfb0
[  297.194718][ T1120]  ? __kthread_parkme+0x71/0x1f0
[  297.194756][ T1120]  kthread+0x38b/0x480
[  297.194775][ T1120]  ? __pfx_worker_thread+0x10/0x10
[  297.194798][ T1120]  ? __pfx_kthread+0x10/0x10
[  297.194819][ T1120]  ret_from_fork+0x514/0xb70
[  297.194853][ T1120]  ? __pfx_ret_from_fork+0x10/0x10
[  297.194888][ T1120]  ? __switch_to+0xc89/0x1420
[  297.194919][ T1120]  ? __pfx_kthread+0x10/0x10
[  297.194940][ T1120]  ret_from_fork_asm+0x1a/0x30
[  297.194983][ T1120]  </TASK>
[  297.222138][ T4932] Bluetooth: hci3: command tx timeout
[  297.348794][ T7554] team0 (unregistering): Port device team_slave_1 removed
[  297.354837][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  297.373437][ T1120] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[  297.551144][ T5709] loop8: lost filesystem error report for type 5 error -108
[  297.633666][ T7554] team0 (unregistering): Port device team_slave_0 removed
[  298.081484][  T987] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  298.250404][  T987] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  298.263734][  T987] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  298.263781][  T987] usb 7-1: Product: syz
[  298.263822][  T987] usb 7-1: Manufacturer: syz
[  298.263841][  T987] usb 7-1: SerialNumber: syz
[  298.326878][T10238] loop8: detected capacity change from 0 to 128
[  298.347859][T10238] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256
[  298.363576][ T5278] 8021q: adding VLAN 0 to HW filter on device eth17
[  298.372272][T10238] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  298.397690][   T31] audit: type=1800 audit(1786545339.664:33): pid=10238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1294" name="file1" dev="loop8" ino=104 res=0 errno=0
[  298.624938][T10244] ------------[ cut here ]------------
[  298.625007][T10244] iinfo->i_alloc_type == ICBTAG_FLAG_AD_IN_ICB
[  298.625048][T10244] WARNING: fs/udf/inode.c:355 at udf_map_block+0x38d3/0x4270, CPU#1: syz.8.1294/10244
[  298.651068][T10244] Modules linked in:
[  298.655553][T10244] CPU: 1 UID: 0 PID: 10244 Comm: syz.8.1294 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  298.666708][T10244] Tainted: [L]=SOFTLOCKUP
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  298.672146][T10244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  298.682890][T10244] RIP: 0010:udf_map_block+0x38d3/0x4270
[  298.690108][T10244] Code: d3 0e 10 48 3b 84 24 60 03 00 00 75 4e 44 89 f0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d4 6c 7c 08 cc e8 fe 1c 65 fe 90 <0f> 0b 90 41 be 8b ff ff ff 48 8b 9c 24 88 00 00 00 eb a5 44 89 e1
[  298.710919][T10244] RSP: 0018:ffffc90003a26fe0 EFLAGS: 00010283
[  298.717697][T10244] RAX: ffffffff83628cd2 RBX: 0000000000000003 RCX: 0000000000080000
[  298.725976][T10244] RDX: ffffc9000ebc3000 RSI: 00000000000002a6 RDI: 00000000000002a7
[  298.734140][T10244] RBP: ffffc90003a27390 R08: ffff888069dbddc0 R09: 0000000000000007
[  298.742660][T10244] R10: 0000000000000006 R11: ffffffff83629680 R12: ffff8880551e66c0
[  298.751338][T10244] R13: ffff8880551e6828 R14: dffffc0000000000 R15: ffffc90003a273a8
[  298.760246][T10244] FS:  00007fe9764026c0(0000) GS:ffff88812500a000(0000) knlGS:0000000000000000
[  298.769391][T10244] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  298.776532][T10244] CR2: 00007f45d2a89e9c CR3: 0000000055fa0000 CR4: 00000000003526f0
[  298.787085][T10244] Call Trace:
[  298.790588][T10244]  <TASK>
[  298.793551][T10244]  ? __pfx___filemap_fdatawait_range+0x10/0x10
[  298.799882][T10244]  ? rcu_is_watching+0x16/0xb0
[  298.804693][T10244]  ? __pfx_udf_map_block+0x10/0x10
[  298.810067][T10244]  ? filemap_check_errors+0xd2/0x120
[  298.815852][T10244]  ? filemap_write_and_wait_range+0x28a/0x3f0
[  298.822151][T10244]  ? __pfx_filemap_write_and_wait_range+0x10/0x10
[  298.829161][T10244]  ? iov_iter_bvec_advance+0x23f/0x260
[  298.835138][T10244]  ? iov_iter_extract_bvec_pages+0x700/0x7d0
[  298.841415][T10244]  __udf_get_block+0x52/0x250
[  298.846147][T10244]  ? __pfx_udf_get_block+0x10/0x10
[  298.851454][T10244]  __blockdev_direct_IO+0x1590/0x3380
[  298.857641][T10244]  ? __pfx___blockdev_direct_IO+0x10/0x10
[  298.863950][T10244]  ? __pfx_udf_get_block+0x10/0x10
[  298.869131][T10244]  ? __pfx_filemap_write_and_wait_range+0x10/0x10
[  298.875763][T10244]  ? trace_irq_disable+0x3b/0x140
[  298.880887][T10244]  ? __pfx_udf_direct_IO+0x10/0x10
[  298.886229][T10244]  udf_direct_IO+0x139/0x200
[  298.891215][T10244]  generic_file_read_iter+0x33a/0x560
[  298.896641][T10244]  copy_splice_read+0x5ff/0xaa0
[  298.901596][T10244]  ? rcu_is_watching+0x16/0xb0
[  298.906417][T10244]  ? __pfx_copy_splice_read+0x10/0x10
[  298.911886][T10244]  ? trace_kmalloc+0x2a/0xf0
[  298.916543][T10244]  ? look_up_lock_class+0x57/0x110
[  298.921853][T10244]  ? register_lock_class+0x31/0x2e0
[  298.927093][T10244]  ? alloc_pipe_info+0x35d/0x4c0
[  298.932135][T10244]  ? __pfx_filemap_splice_read+0x10/0x10
[  298.938060][T10244]  splice_direct_to_actor+0x4b6/0xcb0
[  298.943563][T10244]  ? __pfx_direct_splice_actor+0x10/0x10
[  298.949235][T10244]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  298.956393][T10244]  do_splice_direct+0x195/0x290
[  298.961853][T10244]  ? __pfx_do_splice_direct+0x10/0x10
[  298.967603][T10244]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  298.973821][T10244]  ? rw_verify_area+0x203/0x4c0
[  298.979069][T10244]  do_sendfile+0x52e/0x7c0
[  298.983586][T10244]  ? irqentry_exit+0x218/0x910
[  298.988403][T10244]  ? __pfx_do_sendfile+0x10/0x10
[  298.993474][T10244]  ? rcu_is_watching+0x16/0xb0
[  298.998367][T10244]  __se_sys_sendfile64+0x144/0x1a0
[  299.003615][T10244]  ? __pfx___se_sys_sendfile64+0x10/0x10
[  299.009299][T10244]  ? __pfx_kcov_ioctl+0x10/0x10
[  299.014517][T10244]  do_syscall_64+0x166/0x520
[  299.019660][T10244]  ? trace_irq_disable+0x3b/0x140
[  299.024820][T10244]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  299.031439][T10244]  ? clear_bhb_loop+0x70/0xc0
[  299.036438][T10244]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  299.042550][T10244] RIP: 0033:0x7fe97559e0d9
[  299.047075][T10244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  299.068212][T10244] RSP: 002b:00007fe976402028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  299.077388][T10244] RAX: ffffffffffffffda RBX: 00007fe975826090 RCX: 00007fe97559e0d9
[  299.085623][T10244] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004
[  299.093960][T10244] RBP: 00007fe975635024 R08: 0000000000000000 R09: 0000000000000000
[  299.102386][T10244] R10: 000000000e3aa6ea R11: 0000000000000246 R12: 0000000000000000
[  299.110925][T10244] R13: 00007fe975826128 R14: 00007fe975826090 R15: 00007ffffd521e98
[  299.119424][T10244]  </TASK>
[  299.122555][T10244] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  299.129950][T10244] CPU: 1 UID: 0 PID: 10244 Comm: syz.8.1294 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  299.141001][T10244] Tainted: [L]=SOFTLOCKUP
[  299.145654][T10244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  299.156093][T10244] Call Trace:
[  299.159582][T10244]  <TASK>
[  299.163325][T10244]  vpanic+0x56d/0xa60
[  299.167527][T10244]  ? __pfx__printk+0x10/0x10
[  299.172317][T10244]  ? __pfx_vpanic+0x10/0x10
[  299.176867][T10244]  ? is_bpf_text_address+0x292/0x2b0
[  299.182260][T10244]  ? is_bpf_text_address+0x26/0x2b0
[  299.187936][T10244]  panic+0xc5/0xd0
[  299.191943][T10244]  ? __pfx_panic+0x10/0x10
[  299.196567][T10244]  __warn+0x315/0x4c0
[  299.201177][T10244]  ? udf_map_block+0x38d3/0x4270
[  299.207129][T10244]  ? udf_map_block+0x38d3/0x4270
[  299.212634][T10244]  __report_bug+0x276/0x570
[  299.217677][T10244]  ? udf_map_block+0x38d3/0x4270
[  299.223097][T10244]  ? __pfx___report_bug+0x10/0x10
[  299.228320][T10244]  ? filemap_get_folios_tag+0x118/0x720
[  299.234068][T10244]  ? filemap_get_folios_tag+0x118/0x720
[  299.239636][T10244]  ? filemap_get_folios_tag+0x118/0x720
[  299.245226][T10244]  ? filemap_get_folios_tag+0x639/0x720
[  299.250901][T10244]  ? finish_task_switch+0x40e/0xc60
[  299.256289][T10244]  ? udf_map_block+0x38d3/0x4270
[  299.261316][T10244]  report_bug+0x16b/0x220
[  299.265745][T10244]  ? udf_map_block+0x38d3/0x4270
[  299.270713][T10244]  ? udf_map_block+0x38d5/0x4270
[  299.275670][T10244]  handle_bug+0x9c/0x200
[  299.279932][T10244]  exc_invalid_op+0x1a/0x50
[  299.284446][T10244]  asm_exc_invalid_op+0x1a/0x20
[  299.289332][T10244] RIP: 0010:udf_map_block+0x38d3/0x4270
[  299.294886][T10244] Code: d3 0e 10 48 3b 84 24 60 03 00 00 75 4e 44 89 f0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d4 6c 7c 08 cc e8 fe 1c 65 fe 90 <0f> 0b 90 41 be 8b ff ff ff 48 8b 9c 24 88 00 00 00 eb a5 44 89 e1
[  299.314680][T10244] RSP: 0018:ffffc90003a26fe0 EFLAGS: 00010283
[  299.320789][T10244] RAX: ffffffff83628cd2 RBX: 0000000000000003 RCX: 0000000000080000
[  299.328785][T10244] RDX: ffffc9000ebc3000 RSI: 00000000000002a6 RDI: 00000000000002a7
[  299.337021][T10244] RBP: ffffc90003a27390 R08: ffff888069dbddc0 R09: 0000000000000007
[  299.345011][T10244] R10: 0000000000000006 R11: ffffffff83629680 R12: ffff8880551e66c0
[  299.353125][T10244] R13: ffff8880551e6828 R14: dffffc0000000000 R15: ffffc90003a273a8
[  299.361308][T10244]  ? __pfx_udf_get_block+0x10/0x10
[  299.366534][T10244]  ? udf_map_block+0x38d2/0x4270
[  299.371670][T10244]  ? __pfx___filemap_fdatawait_range+0x10/0x10
[  299.378034][T10244]  ? rcu_is_watching+0x16/0xb0
[  299.382816][T10244]  ? __pfx_udf_map_block+0x10/0x10
[  299.388391][T10244]  ? filemap_check_errors+0xd2/0x120
[  299.393759][T10244]  ? filemap_write_and_wait_range+0x28a/0x3f0
[  299.399937][T10244]  ? __pfx_filemap_write_and_wait_range+0x10/0x10
[  299.406562][T10244]  ? iov_iter_bvec_advance+0x23f/0x260
[  299.412127][T10244]  ? iov_iter_extract_bvec_pages+0x700/0x7d0
[  299.418235][T10244]  __udf_get_block+0x52/0x250
[  299.422929][T10244]  ? __pfx_udf_get_block+0x10/0x10
[  299.428044][T10244]  __blockdev_direct_IO+0x1590/0x3380
[  299.433718][T10244]  ? __pfx___blockdev_direct_IO+0x10/0x10
[  299.439570][T10244]  ? __pfx_udf_get_block+0x10/0x10
[  299.444809][T10244]  ? __pfx_filemap_write_and_wait_range+0x10/0x10
[  299.451541][T10244]  ? trace_irq_disable+0x3b/0x140
[  299.456687][T10244]  ? __pfx_udf_direct_IO+0x10/0x10
[  299.462004][T10244]  udf_direct_IO+0x139/0x200
[  299.466609][T10244]  generic_file_read_iter+0x33a/0x560
[  299.472013][T10244]  copy_splice_read+0x5ff/0xaa0
[  299.476902][T10244]  ? rcu_is_watching+0x16/0xb0
[  299.481768][T10244]  ? __pfx_copy_splice_read+0x10/0x10
[  299.487351][T10244]  ? trace_kmalloc+0x2a/0xf0
[  299.492136][T10244]  ? look_up_lock_class+0x57/0x110
[  299.497341][T10244]  ? register_lock_class+0x31/0x2e0
[  299.502901][T10244]  ? alloc_pipe_info+0x35d/0x4c0
[  299.507858][T10244]  ? __pfx_filemap_splice_read+0x10/0x10
[  299.513504][T10244]  splice_direct_to_actor+0x4b6/0xcb0
[  299.519007][T10244]  ? __pfx_direct_splice_actor+0x10/0x10
[  299.525024][T10244]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  299.531026][T10244]  do_splice_direct+0x195/0x290
[  299.535889][T10244]  ? __pfx_do_splice_direct+0x10/0x10
[  299.541270][T10244]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  299.547174][T10244]  ? rw_verify_area+0x203/0x4c0
[  299.552034][T10244]  do_sendfile+0x52e/0x7c0
[  299.556478][T10244]  ? irqentry_exit+0x218/0x910
[  299.561257][T10244]  ? __pfx_do_sendfile+0x10/0x10
[  299.566616][T10244]  ? rcu_is_watching+0x16/0xb0
[  299.571523][T10244]  __se_sys_sendfile64+0x144/0x1a0
[  299.576743][T10244]  ? __pfx___se_sys_sendfile64+0x10/0x10
[  299.582389][T10244]  ? __pfx_kcov_ioctl+0x10/0x10
[  299.587277][T10244]  do_syscall_64+0x166/0x520
[  299.591863][T10244]  ? trace_irq_disable+0x3b/0x140
[  299.596897][T10244]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  299.603315][T10244]  ? clear_bhb_loop+0x70/0xc0
[  299.608999][T10244]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  299.615194][T10244] RIP: 0033:0x7fe97559e0d9
[  299.619889][T10244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  299.640584][T10244] RSP: 002b:00007fe976402028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  299.650343][T10244] RAX: ffffffffffffffda RBX: 00007fe975826090 RCX: 00007fe97559e0d9
[  299.658746][T10244] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004
[  299.667099][T10244] RBP: 00007fe975635024 R08: 0000000000000000 R09: 0000000000000000
[  299.675406][T10244] R10: 000000000e3aa6ea R11: 0000000000000246 R12: 0000000000000000
[  299.683853][T10244] R13: 00007fe975826128 R14: 00007fe975826090 R15: 00007ffffd521e98
[  299.692132][T10244]  </TASK>
[  299.695672][T10244] Kernel Offset: disabled
[  299.700516][T10244] Rebooting in 86400 seconds..