last executing test programs:

53.68832886s ago: executing program 1 (id=670):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@newtfilter={0x60, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x34, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x0, 0xc}}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x5, 0x206, 0x7}]}}, @TCA_U32_POLICE={0x4}]}}]}, 0x60}}, 0x24040084)

53.053659518s ago: executing program 1 (id=674):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="12000000030000000800000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r2, &(0x7f00000001c0), 0x0}, 0x20)

52.289596758s ago: executing program 1 (id=679):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000280)={0x4c, r0, 0x801, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}]}]}, 0x4c}}, 0x0)

51.709636181s ago: executing program 1 (id=683):
syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x40c, &(0x7f0000000300)=ANY=[], 0x1, 0x194, &(0x7f0000000640)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)

50.589484748s ago: executing program 1 (id=687):
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x45, 0x2}, @cond=[{0x8, 0xfff, 0x44, 0x2, 0x0, 0x6}, {0xfff, 0x3, 0x7fff, 0x8, 0xf, 0x3}]})
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)

50.078439962s ago: executing program 1 (id=689):
inotify_add_watch(0xffffffffffffffff, 0x0, 0x4000002)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x80c4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x800)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
syz_clone3(&(0x7f0000000400)={0x110000000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000240)=<r2=>0x0, {0x29}, &(0x7f0000000280)=""/61, 0x3d, 0x0, &(0x7f0000000340)}, 0x58)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r2})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0)
truncate(&(0x7f0000000100)='./file1\x00', 0x7)
openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0)
r4 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
mmap$panthor(&(0x7f00001d4000/0x3000)=nil, 0x3000, 0x1000007, 0x10, r3, 0x6)
sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendmsg$key(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
recvmmsg(r4, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20010020, 0x0)

49.262148771s ago: executing program 32 (id=689):
inotify_add_watch(0xffffffffffffffff, 0x0, 0x4000002)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x80c4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x800)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
syz_clone3(&(0x7f0000000400)={0x110000000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000240)=<r2=>0x0, {0x29}, &(0x7f0000000280)=""/61, 0x3d, 0x0, &(0x7f0000000340)}, 0x58)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r2})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0)
truncate(&(0x7f0000000100)='./file1\x00', 0x7)
openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0)
r4 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
mmap$panthor(&(0x7f00001d4000/0x3000)=nil, 0x3000, 0x1000007, 0x10, r3, 0x6)
sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendmsg$key(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
recvmmsg(r4, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20010020, 0x0)

7.565965179s ago: executing program 4 (id=868):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/dynamic_debug/control\x00', 0x2, 0x0)
write(r0, &(0x7f0000000500)='file *e*tp/* +', 0xe)

7.06129954s ago: executing program 4 (id=872):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x305)

6.457393517s ago: executing program 3 (id=875):
inotify_add_watch(0xffffffffffffffff, 0x0, 0x4000002)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x80c4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x800)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
syz_clone3(&(0x7f0000000400)={0x110000000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000240)=<r2=>0x0, {0x29}, &(0x7f0000000280)=""/61, 0x3d, 0x0, 0x0}, 0x58)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r2})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0)
truncate(&(0x7f0000000100)='./file1\x00', 0x7)
openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0)
r4 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
mmap$panthor(&(0x7f00001d4000/0x3000)=nil, 0x3000, 0x1000007, 0x10, r3, 0x6)
sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0)
sendmsg$key(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
recvmmsg(r4, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20010020, 0x0)

6.376478782s ago: executing program 4 (id=876):
r0 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a4, @local, 0x404f1}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000300)={0x3, {{0xa, 0x4e23, 0xc, @mcast1, 0xbffffff8}}, 0x0, 0x1, [{{0xa, 0x4e22, 0x0, @local, 0x3}}]}, 0x110)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000180)={0x0, {{0xa, 0x4e22, 0x6ef, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0x21, @loopback, 0xfffffe01}}}, 0x108)

5.479578213s ago: executing program 6 (id=877):
r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1bbc, 0x801)
write$evdev(r0, &(0x7f00000000c0)=[{{}, 0x0, 0x1, 0x3}], 0x5b)
ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000180)=0x7)
ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000240))

5.331441138s ago: executing program 4 (id=880):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00)
close(r0)

5.291839182s ago: executing program 0 (id=881):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600), 0x4, 0x521, &(0x7f0000000640)="$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")
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240))
timer_settime(0x0, 0x0, 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./bus/file0\x00', 0x5)

5.216953938s ago: executing program 3 (id=882):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/drivers_probe\x00', 0x1, 0x0)
write(r0, &(0x7f00000001c0)='serial8250', 0xa)

5.085323942s ago: executing program 6 (id=883):
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/run\x00', 0x2, 0x0)
unshare(0x22020600)
r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000500), 0x13f, 0x6}}, 0x20)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001900010000000000000000000a"], 0x1c}}, 0x4000054)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000280)={{0x1, 0x1, 0x3000000}})
ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1)
sendfile(r0, r0, 0x0, 0x1400000000000)
r4 = syz_open_dev$dvb_demux(&(0x7f0000000040), 0x3, 0x101040)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x98)
recvmsg$unix(r6, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f00000006c0)=""/4096, 0x1000}], 0x2}, 0x40000000)
r7 = syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0)
ioctl$SCSI_IOCTL_PROBE_HOST(r7, 0x5385, 0xffffffffffffffff)
write$P9_RREADLINK(r6, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)
fadvise64(r6, 0x7, 0xf4, 0x4)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21801, 0x6536d5ef40a93735}}, 0x20}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020)
r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0)
ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f00000000c0)={'aio_aio12_8\x00', [0x140, 0x0, 0x1000c, 0xdddc, 0x0, 0x10000, 0x7fff, 0x6, 0x7, 0x4, 0x2000004, 0xf, 0xc000, 0xb, 0x4d0, 0x8e99, 0x80000000, 0xed, 0x6, 0xc, 0x4, 0x6, 0xa, 0x9, 0xffd, 0x9, 0xaf, 0x2, 0x281, 0x8001, 0x9]})
pwrite64(r8, 0x0, 0x0, 0x9968)
ioctl$DVB_DEMUX_DMX_QBUF(r4, 0xc0186f3f, &(0x7f0000000080)={0x7, 0x0, 0x10000, 0x8, 0x16, 0x3b})

4.881888838s ago: executing program 4 (id=884):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0)
pwrite64(r0, &(0x7f00000000c0)="0200", 0x2, 0x4)

4.804179928s ago: executing program 2 (id=885):
socket$kcm(0xa, 0x1, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e230686f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8040880)
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=[{0x18, 0x84, 0x0, 'r'}], 0x18}, 0x41)

4.76380682s ago: executing program 3 (id=886):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8000000}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}, 0x1}, 0x80)
write$binfmt_misc(r0, &(0x7f0000000040), 0xfe46)

4.592832025s ago: executing program 4 (id=887):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
unlink(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
socket$inet6(0xa, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000180)={r2, r2, 0x7, 0x1, &(0x7f0000000240)='l', 0x7, 0x4, 0x7, 0x7, 0x3, 0x3, 0x2, 'syz1\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, 0x0)
unshare(0x22020600)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
r4 = fsopen(0x0, 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r5, r7, 0xd, 0x0, @void}, 0x10)
r8 = fsmount(r4, 0x0, 0x0)
r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r3, r8, 0xd, 0x0, @void}, 0x10)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r9, r3, 0x4, r3}, 0x10)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r10, &(0x7f0000000080)='4', 0x1)

4.590797776s ago: executing program 5 (id=888):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000002c0)=0x2000041)
pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000340)="80fd020000400b45605606f244c1a5033a47ec8573152258a4c11a6d8a415b22969eed57b80d1538667d5dcddc77f0845085f70557eb09fe6552323abb7bfe3252b7", 0x42}], 0x1, 0x0, 0x0)

4.369784924s ago: executing program 3 (id=889):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./sys/bus/pci/devices/0000:00:03.0/resource0\x00', 0x2, 0x0)
pwrite64(r0, 0x0, 0x0, 0x40)

4.251397623s ago: executing program 0 (id=890):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x2, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x6a, 0x2, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r5, 0x400455c8, 0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0xffffffc0)
shmctl$IPC_RMID(r1, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66)
r6 = socket$inet(0x2, 0x80001, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x61, 0x0, 0x0)
shmctl$SHM_STAT_ANY(r1, 0xf, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
getgid()
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)

4.198702762s ago: executing program 2 (id=891):
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, 0x0)
connect$inet(r0, 0x0, 0x0)
sendmmsg$inet(r0, 0x0, 0x0, 0x24004c41)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, 0x0, 0x1)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r5)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r6, 0x1, 0x0, 0x100, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005, 0x0, 0x480}, 0x0)

3.683996208s ago: executing program 3 (id=892):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="000b060000004aca3a572fcfd76fea684c19df7e8c246f83cd6e309eac736a9e4d3765565b7ff17bca5c463f0de97f69f5"], 0x0, 0x0})

2.966091292s ago: executing program 2 (id=893):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x5, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)

2.95130064s ago: executing program 0 (id=894):
inotify_add_watch(0xffffffffffffffff, 0x0, 0x4000002)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x80c4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x800)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
syz_clone3(&(0x7f0000000400)={0x110000000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000240), {0x29}, &(0x7f0000000280)=""/61, 0x3d, 0x0, &(0x7f0000000340)}, 0x58)
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0)
truncate(&(0x7f0000000100)='./file1\x00', 0x7)
openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0)
r3 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
mmap$panthor(&(0x7f00001d4000/0x3000)=nil, 0x3000, 0x1000007, 0x10, r2, 0x6)
sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0)
sendmsg$key(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
recvmmsg(r3, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20010020, 0x0)

2.790451771s ago: executing program 6 (id=895):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/bus/usb/devices/usb4/interface_authorized_default\x00', 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)

2.687824914s ago: executing program 5 (id=896):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f00000014c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000d00)=r1, 0x4)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4)

2.614278976s ago: executing program 2 (id=897):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000050000090900010073797a310000000054000000030a03000000000000000000050000030900010073797a3100000000090003007379"], 0x9c}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c0c5}, 0x0)

2.488908474s ago: executing program 0 (id=898):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./mysys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mysys/bus/usb-serial/drivers/sierra/new_id\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1', 0x1)

2.442133417s ago: executing program 6 (id=899):
syz_io_uring_setup(0x31c5, &(0x7f0000000140)={0x0, 0xca1f, 0x1, 0x3, 0x4}, &(0x7f00000001c0), &(0x7f0000000100), &(0x7f0000000000))
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
r0 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)=0x10)

2.382323399s ago: executing program 5 (id=900):
openat$tun(0xffffffffffffff9c, &(0x7f0000000e80), 0x10000, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000040000000000000000880000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000500b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15)

2.295963544s ago: executing program 2 (id=901):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
munmap(&(0x7f0000002000/0x3000)=nil, 0x3000)
r0 = open(&(0x7f00000000c0)='./file2\x00', 0x24842, 0x80)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3)

2.187611645s ago: executing program 0 (id=902):
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x880, &(0x7f00000005c0)=ANY=[@ANYBLOB='time_offset=0x0000000000000006,iocharset=iso8859-13,utf8,allow_utime=00000000000000000000003,discard,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c696f636861727365743d69736f383835392d372c6572726f72733d72656d6f756e742d726f2c646d61736b3d30303030303030303030303030303030303030303030302c616c6c6f775f7574696d653d30303030303030303030303030303030303030313337312c005d67be522c4eeab3afbfa43bbda48ee0a6d7e18a4e550bdf9e0bcbde43fae869be71181fad5ff81e5aa8c3f569597539170150666b645fa1a84ee198c78c3f620cb2562a161a2eca8f47"], 0x1, 0x1548, &(0x7f0000003300)="$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")
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x10, &(0x7f0000006d40)=ANY=[@ANYBLOB="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"], 0x1, 0x14fe, &(0x7f0000002ac0)="$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")
r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0)
getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0)

2.174940132s ago: executing program 6 (id=903):
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
r0 = syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x800, &(0x7f0000001cc0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x1532, &(0x7f0000000780)="$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")
ioctl$NILFS_IOCTL_GET_BDESCS(r0, 0xc0186e87, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000580)={[{@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@stripe}, {@minixdf}, {@orlov}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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")
socket$can_j1939(0x1d, 0x2, 0x7)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6(0xa, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x5)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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")
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000)
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28)

2.106404397s ago: executing program 5 (id=904):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000001c0)={r0, 0x1, 0x2})

1.632486115s ago: executing program 2 (id=905):
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, 0x0)
connect$inet(r0, 0x0, 0x0)
sendmmsg$inet(r0, 0x0, 0x0, 0x24004c41)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, 0x0, 0x1)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r5)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r6, 0x1, 0x0, 0x100, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005, 0x0, 0x480}, 0x0)

1.624984505s ago: executing program 0 (id=906):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x2, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x6a, 0x2, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r5, 0x400455c8, 0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0xffffffc0)
shmctl$IPC_RMID(r1, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66)
r6 = socket$inet(0x2, 0x80001, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x61, 0x0, 0x0)
shmctl$SHM_STAT_ANY(r1, 0xf, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
getgid()
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)

1.540062725s ago: executing program 5 (id=907):
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/run\x00', 0x2, 0x0)
unshare(0x22020600)
r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000500), 0x13f, 0x6}}, 0x20)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001900010000000000000000000a"], 0x1c}}, 0x4000054)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000280)={{0x1, 0x1, 0x3000000}})
ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1)
sendfile(r0, r0, 0x0, 0x1400000000000)
r4 = syz_open_dev$dvb_demux(&(0x7f0000000040), 0x3, 0x101040)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x98)
recvmsg$unix(r6, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f00000006c0)=""/4096, 0x1000}], 0x2}, 0x40000000)
r7 = syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0)
ioctl$SCSI_IOCTL_PROBE_HOST(r7, 0x5385, 0xffffffffffffffff)
write$P9_RREADLINK(r6, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)
fadvise64(r6, 0x7, 0xf4, 0x4)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21801, 0x6536d5ef40a93735}}, 0x20}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020)
r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0)
ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f00000000c0)={'aio_aio12_8\x00', [0x140, 0x0, 0x1000c, 0xdddc, 0x0, 0x10000, 0x7fff, 0x6, 0x7, 0x4, 0x2000004, 0xf, 0xc000, 0xb, 0x4d0, 0x8e99, 0x80000000, 0xed, 0x6, 0xc, 0x4, 0x6, 0xa, 0x9, 0xffd, 0x9, 0xaf, 0x2, 0x281, 0x8001, 0x9]})
pwrite64(r8, 0x0, 0x0, 0x9968)
ioctl$DVB_DEMUX_DMX_QBUF(r4, 0xc0186f3f, &(0x7f0000000080)={0x7, 0x0, 0x10000, 0x8, 0x16, 0x3b})

56.811296ms ago: executing program 3 (id=908):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x2, 0x1, 0x100)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000001cc0), 0x800, 0x0)
ioctl$SOUND_MIXER_READ_VOLUME(r3, 0x80044d06, &(0x7f0000002180))
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r5 = gettid()
r6 = socket(0x2, 0x3, 0x6)
sendmmsg$unix(r6, &(0x7f0000000bc0)=[{{&(0x7f0000002140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000000700)=[@cred={{0x18, 0x1, 0x2, {r5}}}], 0x18}}], 0x1, 0x800)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)

24.058566ms ago: executing program 6 (id=909):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4}]}]}, 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000400000000000000fc020000000000000000000000000001fe80000000000000000000000000003a00000000000000020a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100fc0000000000000000000400000000017f000001000000000000000000000000fc020000000000000000000000000001000000000000000000000000000000013c04"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

0s ago: executing program 5 (id=910):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001940)=ANY=[@ANYBLOB="40010000", @ANYRES16=r1, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fcdbdf2501000000140002007767310000000000000000000000000024000300a05ca8"], 0x4c}, 0x1, 0x0, 0x0, 0x40090}, 0x44000)

kernel console output (not intermixed with test programs):

3:05AC:024B.0017: parse failed
[  186.407806][ T5762] apple 0003:05AC:024B.0017: probe with driver apple failed with error -22
[  186.553384][   T43] usb 2-1: USB disconnect, device number 7
[  186.593750][   T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  186.603481][ T5746] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  186.661696][ T7193] loop3: detected capacity change from 0 to 256
[  186.675334][ T7193] exfat: Deprecated parameter 'utf8'
[  186.689184][ T7193] exfat: Deprecated parameter 'namecase'
[  186.722778][ T7193] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x8d2f696c, utbl_chksum : 0xe619d30d)
[  186.793381][ T5746] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00
[  186.806054][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  186.821547][ T5746] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.838678][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  186.870602][   T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  186.907190][   T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  186.934519][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.099041][   T10] usb 1-1: config 0 descriptor??
[  188.078660][   T10] plantronics 0003:047F:FFFF.0018: unbalanced collection at end of report description
[  188.121276][   T10] plantronics 0003:047F:FFFF.0018: parse failed
[  188.154639][   T10] plantronics 0003:047F:FFFF.0018: probe with driver plantronics failed with error -22
[  188.217133][   T10] usb 1-1: USB disconnect, device number 5
[  188.300229][ T5928] usb 3-1: USB disconnect, device number 7
[  188.445633][ T7208] loop3: detected capacity change from 0 to 512
[  188.469576][ T7208] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  188.530031][ T7208] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  188.550623][ T7213] loop1: detected capacity change from 0 to 512
[  188.587745][ T7208] ext4 filesystem being mounted at /65/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  188.716952][ T7213] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  188.798693][ T7213] EXT4-fs (loop1): 1 truncate cleaned up
[  188.831943][ T7213] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  188.985906][   T30] audit: type=1800 audit(1786091095.285:18): pid=7215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.431" name="file1" dev="loop3" ino=15 res=0 errno=0
[  189.261696][ T5604] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.378782][ T5614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.411281][   T10] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  189.505742][ T7225] loop1: detected capacity change from 0 to 8
[  189.594670][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  189.629523][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  189.878188][   T43] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  189.900473][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  189.925134][   T10] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00
[  189.961269][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.997388][   T10] usb 3-1: config 0 descriptor??
[  190.010829][ T7232] usb usb8: usbfs: process 7232 (syz.5.439) did not claim interface 7 before use
[  190.252862][   T43] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  190.264083][   T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.291489][   T43] usb 1-1: config 0 descriptor??
[  190.299784][   T43] cp210x 1-1:0.0: cp210x converter detected
[  190.517675][ T5769] libceph: connect (1)[c::]:6789 error -101
[  190.530577][ T5769] libceph: mon0 (1)[c::]:6789 connect error
[  190.546981][ T7244] netlink: 20 bytes leftover after parsing attributes in process `syz.1.443'.
[  190.560159][ T5769] libceph: connect (1)[c::]:6789 error -101
[  190.563042][   T10] hid-picolcd 0003:04D8:F002.0019: No report with id 0xf3 found
[  190.580669][ T5769] libceph: mon0 (1)[c::]:6789 connect error
[  190.603245][ T7244] netlink: 20 bytes leftover after parsing attributes in process `syz.1.443'.
[  190.614520][   T10] hid-picolcd 0003:04D8:F002.0019: No report with id 0xf4 found
[  190.675039][ T7244] geneve0: entered promiscuous mode
[  190.695482][   T10] usb 3-1: USB disconnect, device number 8
[  190.738876][   T43] usb 1-1: cp210x converter now attached to ttyUSB0
[  190.863335][   T43] libceph: connect (1)[c::]:6789 error -101
[  190.873164][   T43] libceph: mon0 (1)[c::]:6789 connect error
[  190.880378][ T7238] ceph: No mds server is up or the cluster is laggy
[  190.918992][ T5769] usb 1-1: USB disconnect, device number 6
[  190.957986][ T5769] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  190.999514][ T5769] cp210x 1-1:0.0: device disconnected
[  191.035075][ T7248] siw: device registration error -23
[  191.431844][ T7257] comedi comedi0: 8255: I/O base address not correctly aligned
[  191.715672][ T7264] netlink: 'syz.0.449': attribute type 4 has an invalid length.
[  191.882649][ T7267] loop5: detected capacity change from 0 to 128
[  191.905276][ T7267] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  191.967643][ T7267] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  192.564891][ T7274] loop4: detected capacity change from 0 to 4096
[  192.838295][ T7282] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  192.860019][ T5928] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  193.033508][ T7274] NILFS (loop4): nilfs_sufile_do_free: segment 9 is already clean
[  193.072265][ T7274] NILFS (loop4): nilfs_sufile_do_free: segment 9 is already clean
[  193.094704][ T5928] usb 2-1: Using ep0 maxpacket: 16
[  193.118819][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  193.143289][ T7286] loop3: detected capacity change from 0 to 4096
[  193.152406][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  193.178847][ T7286] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  193.214946][ T5928] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  193.293230][ T5928] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  193.310666][ T7286] ntfs3(loop3): ino=19, mi_enum_attr
[  193.320220][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.336512][ T7286] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  193.373279][ T5928] usb 2-1: config 0 descriptor??
[  193.506760][ T7299] loop2: detected capacity change from 0 to 256
[  193.543105][ T7299] exfat: Deprecated parameter 'utf8'
[  193.553666][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  193.562307][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  193.584030][ T7299] exfat: Deprecated parameter 'namecase'
[  193.606193][ T7299] exfat: Deprecated parameter 'namecase'
[  193.622745][ T7299] exfat: Deprecated parameter 'namecase'
[  194.455143][ T5928] hid_parser_main: 29 callbacks suppressed
[  194.455169][ T5928] hid-multitouch 0003:0457:07DA.001A: unknown main item tag 0x0
[  194.469175][ T5928] hid-multitouch 0003:0457:07DA.001A: unknown main item tag 0x0
[  194.477170][ T5928] hid-multitouch 0003:0457:07DA.001A: unknown main item tag 0x0
[  194.486717][ T5928] hid-multitouch 0003:0457:07DA.001A: unknown main item tag 0x0
[  194.494695][ T5928] hid-multitouch 0003:0457:07DA.001A: unknown main item tag 0x0
[  194.502669][ T5928] hid-multitouch 0003:0457:07DA.001A: unknown main item tag 0x0
[  194.510364][ T5928] hid-multitouch 0003:0457:07DA.001A: unknown main item tag 0x0
[  194.687375][ T7299] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  194.746546][ T5928] hid-multitouch 0003:0457:07DA.001A: unknown main item tag 0x0
[  194.761194][ T5928] hid-multitouch 0003:0457:07DA.001A: unknown main item tag 0x0
[  194.769572][ T5928] hid-multitouch 0003:0457:07DA.001A: unknown main item tag 0x0
[  194.781026][ T5762] libceph: connect (1)[c::]:6789 error -101
[  194.814241][ T5762] libceph: mon0 (1)[c::]:6789 connect error
[  194.861814][ T5928] hid-multitouch 0003:0457:07DA.001A: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.1-1/input0
[  195.015333][ T5928] usb 2-1: USB disconnect, device number 8
[  195.142355][ T5762] libceph: connect (1)[c::]:6789 error -101
[  195.169223][ T5762] libceph: mon0 (1)[c::]:6789 connect error
[  195.187025][ T7317] fido_id[7317]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  195.246536][ T7307] ceph: No mds server is up or the cluster is laggy
[  195.283953][ T7324] netlink: 'syz.1.469': attribute type 4 has an invalid length.
[  195.403709][ T7326] loop2: detected capacity change from 0 to 128
[  195.420592][ T7326] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  195.490557][ T7326] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  195.732801][ T6150] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  195.759172][ T6150] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  195.783114][ T6150] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  195.805387][ T6150] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  196.371177][ T5762] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  196.553384][ T5762] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30
[  196.582900][ T5762] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  196.594985][ T7312] loop3: detected capacity change from 0 to 32768
[  196.616518][ T5762] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  196.645849][ T5762] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196
[  196.663524][ T7312] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz"
[  196.688821][ T7312] dlm: no local IP address has been set
[  196.708300][ T5762] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00
[  196.777701][ T7312] dlm: cannot start dlm midcomms -107
[  196.787004][ T5762] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.828311][ T7312] gfs2: fsid=syz:syz: dlm_new_lockspace error -107
[  196.840284][ T5762] usb 3-1: config 0 descriptor??
[  197.373232][ T5762] holtek_kbd 0003:04D9:A055.001B: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.2-1/input0
[  198.044474][ T5762] usb 3-1: USB disconnect, device number 9
[  198.823624][ T7364] fido_id[7364]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  199.056510][ T5928] libceph: connect (1)[c::]:6789 error -101
[  199.065139][ T5928] libceph: mon0 (1)[c::]:6789 connect error
[  199.395576][ T5762] libceph: connect (1)[c::]:6789 error -101
[  199.406073][ T5762] libceph: mon0 (1)[c::]:6789 connect error
[  200.189620][ T7369] ceph: No mds server is up or the cluster is laggy
[  200.200036][ T5762] libceph: connect (1)[c::]:6789 error -101
[  200.207024][ T5762] libceph: mon0 (1)[c::]:6789 connect error
[  200.629812][ T7389] netlink: 'syz.3.486': attribute type 4 has an invalid length.
[  200.997443][ T7396] block nbd0: not configured, cannot reconfigure
[  201.341610][   T43] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  201.500424][ T5769] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  201.541690][   T43] usb 2-1: Using ep0 maxpacket: 16
[  201.677953][   T43] usb 2-1: config 0 interface 0 has no altsetting 0
[  201.735750][ T5769] usb 5-1: Using ep0 maxpacket: 32
[  201.813944][   T43] usb 2-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00
[  201.925410][ T5769] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  202.069134][   T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.110647][ T5769] usb 5-1: config 0 has no interface number 0
[  202.170658][ T5769] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  202.184886][   T43] usb 2-1: config 0 descriptor??
[  202.233222][ T5769] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.316211][ T5769] usb 5-1: Product: syz
[  202.335518][ T5769] usb 5-1: Manufacturer: syz
[  202.348950][ T5769] usb 5-1: SerialNumber: syz
[  202.389309][ T5769] usb 5-1: config 0 descriptor??
[  202.425830][ T5769] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  202.474021][ T5769] usb 5-1: selecting invalid altsetting 1
[  202.490104][ T5769] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  202.519951][ T5769] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  202.557447][ T5769] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  202.588635][ T5769] usb 5-1: media controller created
[  202.676498][ T7415] loop0: detected capacity change from 0 to 8192
[  202.700149][ T7415] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  202.707692][ T5769] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  202.872349][   T43] hid_parser_main: 24 callbacks suppressed
[  202.872482][   T43] apple 0003:05AC:029F.001C: unknown main item tag 0x2
[  203.218724][   T43] apple 0003:05AC:029F.001C: ignoring exceeding usage max
[  203.330073][   T43] apple 0003:05AC:029F.001C: hidraw0: USB HID v0.81 Device [HID 05ac:029f] on usb-dummy_hcd.1-1/input0
[  203.428644][ T7423] netlink: 32 bytes leftover after parsing attributes in process `syz.2.501'.
[  203.461846][ T5747] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  203.503551][   T43] usb 2-1: USB disconnect, device number 9
[  203.642718][ T5747] usb 4-1: Using ep0 maxpacket: 16
[  203.659466][ T7426] loop5: detected capacity change from 0 to 512
[  203.672093][ T5747] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[  203.708716][ T5747] usb 4-1: config 0 has no interface number 0
[  203.712236][ T7405] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  203.727752][ T7424] fido_id[7424]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  203.749854][ T5747] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  203.781802][ T5769] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  203.788495][ T5747] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  203.820483][ T5769] zl10353_read_register: readreg error (reg=127, ret==-71)
[  203.830761][ T5747] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  203.840291][ T5747] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  203.848510][ T5747] usb 4-1: Product: syz
[  203.853252][ T5747] usb 4-1: SerialNumber: syz
[  203.862433][ T5747] usb 4-1: config 0 descriptor??
[  203.872857][ T5747] cm109 4-1:0.8: invalid payload size 0, expected 4
[  203.882638][ T5747] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input9
[  203.915558][ T5769] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  203.923593][ T7426] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  204.018314][ T7426] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  204.107390][ T7435] loop1: detected capacity change from 0 to 256
[  204.127236][ T7435] exfat: Deprecated parameter 'utf8'
[  204.144567][ T7435] exfat: Deprecated parameter 'utf8'
[  204.176878][ T7435] exfat: Deprecated parameter 'utf8'
[  204.191125][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  204.200330][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  204.202800][ T5769] usb 5-1: USB disconnect, device number 6
[  204.209034][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  204.217811][ T7435] exfat: Deprecated parameter 'namecase'
[  204.222212][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  204.233717][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  204.240887][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  204.248052][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  204.255223][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  204.262379][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  204.269531][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  204.308386][ T5895] usb 4-1: USB disconnect, device number 7
[  204.308516][    C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  204.337639][ T5618] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.407557][ T7435] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  204.437834][ T5895] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  204.841281][ T5746] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  204.899793][ T7450] netlink: 'syz.1.509': attribute type 4 has an invalid length.
[  205.006477][ T7448] loop4: detected capacity change from 0 to 4096
[  205.029889][ T5746] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  205.049934][ T7448] EXT4-fs (loop4): Test dummy encryption mode enabled
[  205.060674][ T5746] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  205.092484][ T7448] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  205.094595][ T5746] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.360872][ T7448] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2"
[  205.632360][ T5746] usb 6-1: config 0 descriptor??
[  205.680835][ T5602] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.054469][ T5747] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  206.703584][ T7473] ceph: No mds server is up or the cluster is laggy
[  206.712462][ T5746] ath6kl: Unsupported hardware version: 0x0
[  206.729347][ T5746] ath6kl: Failed to init ath6kl core: -22
[  206.739416][ T5746] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -22
[  206.752234][ T5746] usb 6-1: USB disconnect, device number 9
[  206.773005][ T5895] libceph: connect (1)[c::]:6789 error -101
[  206.785826][ T5895] libceph: mon0 (1)[c::]:6789 connect error
[  206.904365][ T5747] usb 2-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00
[  206.962123][ T5747] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.028252][ T5747] usb 2-1: Product: syz
[  207.029119][ T5622] Bluetooth: hci1: Unable to find connection for big 0x00
[  207.049595][ T5747] usb 2-1: Manufacturer: syz
[  207.073507][ T5747] usb 2-1: SerialNumber: syz
[  207.174699][ T7486] netlink: 48 bytes leftover after parsing attributes in process `syz.2.521'.
[  207.258155][ T7488] macsec1: entered allmulticast mode
[  207.281597][ T7488] dummy0: entered allmulticast mode
[  207.311551][ T7488] dummy0: entered promiscuous mode
[  207.335003][ T5747] kalmia 2-1:1.0 (unnamed net_device) (uninitialized): Did not send all of init packet. Bytes sent: 0
[  207.355445][ T7488] dummy0: left allmulticast mode
[  207.389470][ T5747] kalmia 2-1:1.0 (unnamed net_device) (uninitialized): Unexpected init result length: 0
[  207.624919][ T5747] kalmia 2-1:1.0 (unnamed net_device) (uninitialized): Error sending init packet. Status -71
[  207.635588][ T5928] dummy0: left promiscuous mode
[  207.691212][   T43] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  207.697201][ T5747] kalmia 2-1:1.0: probe with driver kalmia failed with error -71
[  207.746825][ T5747] usb 2-1: USB disconnect, device number 10
[  207.852015][   T43] usb 5-1: Using ep0 maxpacket: 8
[  207.888150][   T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  207.907897][ T7504] netlink: 64 bytes leftover after parsing attributes in process `syz.2.529'.
[  207.936446][   T43] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  207.969127][   T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[  208.007782][   T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  208.021197][ T5928] hid-generic 0005:0007:0007.001D: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa
[  208.032213][   T43] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  208.052152][   T43] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  208.097255][   T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  208.108129][   T43] usb 5-1: Product: syz
[  208.117776][   T43] usb 5-1: Manufacturer: syz
[  208.139444][   T43] usb 5-1: SerialNumber: syz
[  208.182265][   T43] usb 5-1: config 0 descriptor??
[  208.308922][ T7510] fido_id[7510]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci5/hci5:200/report_descriptor': No such file or directory
[  208.444384][   T43] radio-si470x 5-1:0.0: DeviceID=0xfe69 ChipID=0x9ea5
[  208.776390][   T43] radio-si470x 5-1:0.0: software version 254, hardware version 105
[  208.882983][   T43] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71
[  208.977077][ T5928] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  209.514016][ T7519] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR
[  209.655589][   T43] radio-si470x 5-1:0.0: submitting int urb failed (-90)
[  209.687150][   T43] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71
[  209.696058][   T43] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22
[  209.733919][   T43] usb 5-1: USB disconnect, device number 7
[  209.803623][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  209.849566][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  209.880772][ T5928] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  209.910019][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.966200][ T5928] usb 2-1: config 0 descriptor??
[  210.238835][ T5928] usbhid 2-1:0.0: can't add hid device: -71
[  210.271499][ T5928] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  210.328729][ T5928] usb 2-1: USB disconnect, device number 11
[  210.343114][ T5746] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  210.527474][ T5746] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  210.610311][ T5746] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  210.647640][ T5746] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  210.688153][ T5746] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.780781][ T7526] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  210.857476][ T5746] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  210.951765][ T5928] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  211.114110][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  211.128719][ T7542] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  211.151210][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  211.188464][ T5928] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[  211.204223][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.232682][ T5622] Bluetooth: hci4: command 0x0406 tx timeout
[  211.304720][ T5928] usb 2-1: config 0 descriptor??
[  211.315047][ T5622] Bluetooth: hci1: command 0x0406 tx timeout
[  211.321386][ T5613] Bluetooth: hci2: command 0x0406 tx timeout
[  211.321406][ T4920] Bluetooth: hci0: command 0x0406 tx timeout
[  211.591559][ T5928] aiptek 2-1:0.0: Aiptek using 400 ms programming speed
[  211.612273][ T5746] usb 3-1: USB disconnect, device number 10
[  211.627993][ T5928] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input10
[  211.718667][ T7548] loop5: detected capacity change from 0 to 512
[  211.741421][ T5928] input: failed to attach handler kbd to device input10, error: -5
[  211.771273][ T7548] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  211.842573][ T5928] usb 2-1: USB disconnect, device number 12
[  211.850921][ T7548] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  211.913804][ T7548] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  212.203930][   T30] audit: type=1800 audit(1786091118.495:19): pid=7548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.543" name="file1" dev="loop5" ino=15 res=0 errno=0
[  212.466015][ T5618] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.011448][ T7563] ceph: No mds server is up or the cluster is laggy
[  213.038323][ T5928] libceph: connect (1)[c::]:6789 error -101
[  213.123127][ T5928] libceph: mon0 (1)[c::]:6789 connect error
[  213.844171][ T5746] hid-generic 0005:0007:0007.001E: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa
[  214.265296][ T7585] fido_id[7585]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci5/hci5:200/report_descriptor': No such file or directory
[  215.051276][ T5928] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  215.128993][ T7599] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  215.231306][ T5928] usb 1-1: Using ep0 maxpacket: 16
[  215.255404][ T5928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  215.381211][ T5928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  215.407863][ T5928] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  215.455162][ T5928] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  215.492996][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.623124][ T5928] usb 1-1: config 0 descriptor??
[  215.626852][ T7606] loop2: detected capacity change from 0 to 512
[  215.680806][ T7606] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  215.700332][ T5746] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  215.767837][ T7606] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  215.798908][ T7606] ext4 filesystem being mounted at /100/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  215.878701][ T5746] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  216.137080][ T5928] microsoft 0003:045E:07DA.001F: item 0 4 0 9 parsing failed
[  216.146289][ T5928] microsoft 0003:045E:07DA.001F: parse failed
[  216.156808][ T5746] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  216.189091][ T5928] microsoft 0003:045E:07DA.001F: probe with driver microsoft failed with error -22
[  216.239552][   T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  216.256482][ T5746] usb 5-1: config 1 has no interface number 0
[  216.504585][   T30] audit: type=1800 audit(1786091122.595:20): pid=7606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.560" name="file1" dev="loop2" ino=15 res=0 errno=0
[  216.750115][ T7620] ceph: No mds server is up or the cluster is laggy
[  216.787153][   T43] libceph: connect (1)[c::]:6789 error -101
[  216.806733][ T5928] usb 1-1: USB disconnect, device number 7
[  216.823988][ T5612] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.853581][   T43] libceph: mon0 (1)[c::]:6789 connect error
[  216.855429][ T5746] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  216.882327][ T5746] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  216.896099][ T5746] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.906514][ T5746] usb 5-1: Product: syz
[  216.914413][ T5746] usb 5-1: Manufacturer: syz
[  216.925658][ T5746] usb 5-1: SerialNumber: syz
[  216.947813][ T5746] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  216.958432][ T5746] cdc_ncm 5-1:1.1: bind() failure
[  217.036741][   T10] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  217.075484][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.128735][   T10] usb 4-1: Product: syz
[  217.155444][   T10] usb 4-1: Manufacturer: syz
[  217.179912][   T10] usb 4-1: SerialNumber: syz
[  217.194232][   T10] usb 4-1: config 0 descriptor??
[  217.204897][   T10] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 008
[  217.267340][   T43] usb 5-1: USB disconnect, device number 8
[  217.361557][ T5336] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  217.521455][ T5336] usb 2-1: Using ep0 maxpacket: 32
[  217.541889][ T5336] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  217.554437][ T5336] usb 2-1: config 0 has no interface number 0
[  217.587112][ T5336] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  217.632749][ T5336] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.661708][ T5336] usb 2-1: Product: syz
[  217.679009][ T5336] usb 2-1: Manufacturer: syz
[  217.697580][ T5336] usb 2-1: SerialNumber: syz
[  217.705104][   T43] hid-generic 0005:0007:0007.0020: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa
[  217.765040][ T5336] usb 2-1: config 0 descriptor??
[  217.831078][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  217.951127][   T10] i2c i2c-1: failure reading functionality
[  217.976596][ T5336] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  218.020507][   T10] i2c i2c-1: connected i2c-tiny-usb device
[  218.041465][ T7641] fido_id[7641]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci5/hci5:200/report_descriptor': No such file or directory
[  218.045698][ T5336] usb 2-1: selecting invalid altsetting 1
[  218.099064][   T10] usb 4-1: USB disconnect, device number 8
[  218.166629][ T5336] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  218.238169][ T7643] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  218.285162][ T5336] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  218.321257][ T5336] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  218.339937][ T5336] usb 2-1: media controller created
[  218.394769][ T5336] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  218.570980][ T5336] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  218.590875][ T5336] zl10353_read_register: readreg error (reg=127, ret==-71)
[  218.612591][ T5336] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  218.715325][ T5336] usb 2-1: USB disconnect, device number 13
[  218.721136][   T43] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[  218.753900][ T5928] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  218.896380][   T43] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  218.921306][   T43] usb 1-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[  218.946660][ T5928] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00
[  218.966836][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.986533][   T43] usb 1-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  219.024720][   T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.059095][   T43] usb 1-1: Product: syz
[  219.075256][   T43] usb 1-1: Manufacturer: syz
[  219.087979][   T43] usb 1-1: SerialNumber: syz
[  219.222345][ T7660] netlink: 'syz.3.578': attribute type 4 has an invalid length.
[  220.107222][ T7667] ceph: No mds server is up or the cluster is laggy
[  220.119088][ T5928] libceph: connect (1)[c::]:6789 error -101
[  220.149059][ T5928] libceph: mon0 (1)[c::]:6789 connect error
[  220.350209][    C1] usb 1-1: received EP1 urb->status = -2
[  220.358523][   T43] usb 1-1: unable to init card! (ret=-110)
[  220.365062][   T43] snd-usb-caiaq 1-1:1.0: probe with driver snd-usb-caiaq failed with error -110
[  220.527454][ T7678] netlink: 'syz.2.583': attribute type 1 has an invalid length.
[  220.535338][ T7678] netlink: 'syz.2.583': attribute type 3 has an invalid length.
[  220.544079][ T7678] netlink: 132 bytes leftover after parsing attributes in process `syz.2.583'.
[  220.573323][ T5336] usb 1-1: USB disconnect, device number 8
[  220.679287][   T10] hid-generic 0005:0007:0007.0021: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa
[  221.052780][ T5336] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  221.094171][   T10] usb 5-1: USB disconnect, device number 9
[  221.106294][ T7691] fido_id[7691]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci5/hci5:200/report_descriptor': No such file or directory
[  221.247962][ T5336] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  221.274668][ T5336] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  221.308912][ T7697] program syz.0.590 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  221.327625][ T5336] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00
[  221.359538][ T5336] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.427830][   T10] hid-generic 0005:0007:0007.0022: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa
[  221.588149][ T7701] fido_id[7701]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci5/hci5:200/report_descriptor': No such file or directory
[  222.053545][ T5336] gud 6-1:1.0: Failed to add properties (error=-71)
[  222.217326][ T5336] gud 6-1:1.0: probe with driver gud failed with error -71
[  222.915154][ T7715] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR
[  223.072251][ T5336] usb 6-1: USB disconnect, device number 10
[  223.533093][ T7724] loop5: detected capacity change from 0 to 512
[  223.706221][ T7724] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  223.757199][ T7724] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.600: bad orphan inode 131083
[  223.781194][ T7724] loop5: lost filesystem error report for type 5 error -117
[  223.785800][ T7724] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  224.422996][   T30] audit: type=1800 audit(1786091130.735:21): pid=7724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.600" name="file1" dev="loop5" ino=15 res=0 errno=0
[  224.711186][   T10] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  224.979775][ T5618] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.079406][ T7740] loop3: detected capacity change from 0 to 32768
[  225.137492][ T7740] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  225.166484][   T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  225.192915][ T7740] XFS (loop3): Internal error !uuid_equal(&mp->m_sb.sb_uuid, &head->h_fs_uuid) at line 254 of file fs/xfs/xfs_log_recover.c.  Caller xlog_header_check_mount+0x93/0xe0
[  225.211345][ T7740] CPU: 0 UID: 0 PID: 7740 Comm: syz.3.606 Not tainted syzkaller #0 PREEMPT(full) 
[  225.211379][ T7740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  225.211394][ T7740] Call Trace:
[  225.211404][ T7740]  <TASK>
[  225.211414][ T7740]  dump_stack_lvl+0xe8/0x150
[  225.211456][ T7740]  xfs_corruption_error+0x122/0x170
[  225.211495][ T7740]  ? xlog_header_check_mount+0x93/0xe0
[  225.211530][ T7740]  xlog_header_check_mount+0xc6/0xe0
[  225.211559][ T7740]  ? xlog_header_check_mount+0x93/0xe0
[  225.211589][ T7740]  xlog_find_verify_log_record+0x32e/0x500
[  225.211629][ T7740]  xlog_find_zeroed+0x327/0x410
[  225.211665][ T7740]  xlog_find_head+0x5f/0x700
[  225.211692][ T7740]  ? srso_alias_return_thunk+0x5/0xfbef5
[  225.211733][ T7740]  xlog_find_tail+0x3d/0x880
[  225.211756][ T7740]  ? srso_alias_return_thunk+0x5/0xfbef5
[  225.211786][ T7740]  ? lockdep_hardirqs_on+0x7a/0x110
[  225.211820][ T7740]  ? srso_alias_return_thunk+0x5/0xfbef5
[  225.211849][ T7740]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  225.211879][ T7740]  ? srso_alias_return_thunk+0x5/0xfbef5
[  225.211909][ T7740]  ? try_to_wake_up+0x8c5/0x14d0
[  225.211955][ T7740]  xlog_recover+0x4b/0x3d0
[  225.211997][ T7740]  xfs_log_mount+0x253/0x3e0
[  225.212036][ T7740]  xfs_mountfs+0xedf/0x2380
[  225.212080][ T7740]  ? __pfx_xfs_mountfs+0x10/0x10
[  225.212110][ T7740]  ? srso_alias_return_thunk+0x5/0xfbef5
[  225.212142][ T7740]  ? srso_alias_return_thunk+0x5/0xfbef5
[  225.212172][ T7740]  ? trace_xfs_inode_timestamp_range+0x84/0x200
[  225.212216][ T7740]  xfs_fs_fill_super+0x115a/0x15a0
[  225.212262][ T7740]  get_tree_bdev_flags+0x430/0x4f0
[  225.212305][ T7740]  ? __pfx_xfs_fs_fill_super+0x10/0x10
[  225.212342][ T7740]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  225.212384][ T7740]  ? srso_alias_return_thunk+0x5/0xfbef5
[  225.212418][ T7740]  ? srso_alias_return_thunk+0x5/0xfbef5
[  225.212453][ T7740]  vfs_get_tree+0x92/0x2a0
[  225.212497][ T7740]  do_new_mount+0x319/0xdc0
[  225.212528][ T7740]  ? srso_alias_return_thunk+0x5/0xfbef5
[  225.212565][ T7740]  ? __pfx_do_new_mount+0x10/0x10
[  225.212599][ T7740]  ? srso_alias_return_thunk+0x5/0xfbef5
[  225.212627][ T7740]  ? ns_capable+0x89/0xe0
[  225.212657][ T7740]  ? srso_alias_return_thunk+0x5/0xfbef5
[  225.212687][ T7740]  ? path_mount+0x647/0x1040
[  225.212721][ T7740]  ? srso_alias_return_thunk+0x5/0xfbef5
[  225.212751][ T7740]  ? user_path_at+0xd4/0x160
[  225.212791][ T7740]  __se_sys_mount+0x31d/0x420
[  225.212831][ T7740]  ? __pfx___se_sys_mount+0x10/0x10
[  225.212862][ T7740]  ? srso_alias_return_thunk+0x5/0xfbef5
[  225.212900][ T7740]  ? srso_alias_return_thunk+0x5/0xfbef5
[  225.212929][ T7740]  ? __x64_sys_mount+0x20/0xc0
[  225.212961][ T7740]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.212995][ T7740]  do_syscall_64+0x174/0x580
[  225.213029][ T7740]  ? trace_irq_disable+0x3b/0x140
[  225.213067][ T7740]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.213094][ T7740] RIP: 0033:0x7f68f359f34a
[  225.213116][ T7740] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  225.213138][ T7740] RSP: 002b:00007f68f44d5e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  225.213165][ T7740] RAX: ffffffffffffffda RBX: 00007f68f44d5ee0 RCX: 00007f68f359f34a
[  225.213184][ T7740] RDX: 0000200000009600 RSI: 0000200000009640 RDI: 00007f68f44d5ea0
[  225.213202][ T7740] RBP: 0000200000009600 R08: 00007f68f44d5ee0 R09: 0000000000000000
[  225.213220][ T7740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000009640
[  225.213236][ T7740] R13: 00007f68f44d5ea0 R14: 00000000000096c5 R15: 0000200000000080
[  225.213275][ T7740]  </TASK>
[  225.213285][ T7740] XFS (loop3): Corruption detected. Unmount and run xfs_repair
[  225.586211][ T7740] XFS (loop3): log has mismatched uuid - can't recover
[  225.593380][ T7740] XFS (loop3): empty log check failed
[  225.598753][ T7740] XFS (loop3): log mount/recovery failed: error -117
[  225.650926][   T10] usb 5-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[  225.726277][ T7740] XFS (loop3): log mount failed
[  225.788835][   T10] usb 5-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  225.841008][   T43] libceph: connect (1)[c::]:6789 error -101
[  225.865347][   T43] libceph: mon0 (1)[c::]:6789 connect error
[  225.872505][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.899495][   T10] usb 5-1: Product: syz
[  225.904153][   T10] usb 5-1: Manufacturer: syz
[  225.908815][   T10] usb 5-1: SerialNumber: syz
[  225.956759][ T7750] ceph: No mds server is up or the cluster is laggy
[  226.152392][ T7762] loop0: detected capacity change from 0 to 16
[  226.159780][ T7762] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  226.393109][    C0] usb 5-1: received EP1 urb->status = -2
[  226.415005][   T10] usb 5-1: unable to init card! (ret=-110)
[  226.442140][   T10] snd-usb-caiaq 5-1:1.0: probe with driver snd-usb-caiaq failed with error -110
[  226.519001][   T43] hid-generic 0005:0007:0007.0023: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa
[  226.659725][ T5759] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  226.703809][   T43] usb 5-1: USB disconnect, device number 10
[  226.776475][ T7765] loop3: detected capacity change from 0 to 4096
[  226.883448][ T5759] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  226.951632][ T5759] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  227.007497][ T5759] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00
[  227.046456][ T5759] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.345516][ T7776] loop5: detected capacity change from 0 to 40427
[  227.362503][ T7774] fido_id[7774]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci5/hci5:200/report_descriptor': No such file or directory
[  227.525821][ T7776] F2FS-fs (loop5): build fault injection rate: 174
[  227.534961][ T7776] F2FS-fs (loop5): build fault injection type: 0x3bfe8c
[  227.548050][ T7776] F2FS-fs (loop5): invalid crc value
[  227.770934][ T7776] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  227.852668][ T7776] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  227.942706][ T7776] f2fs_printk: 1 callbacks suppressed
[  227.942726][ T7776] F2FS-fs (loop5): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0
[  227.966570][ T7776] F2FS-fs (loop5): inject inconsistent footer in f2fs_sanity_check_node_footer of __get_node_folio+0x8c1/0xdf0
[  227.978353][ T7776] F2FS-fs (loop5): inconsistent node block, node_type:1, nid:10, node_footer[nid:10,ino:10,ofs:0,cpver:0,blkaddr:0]
[  228.000457][ T7776] F2FS-fs (loop5): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0
[  228.020749][ T7776] F2FS-fs (loop5): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0
[  228.041266][ T7776] F2FS-fs (loop5): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0
[  228.061722][ T7776] F2FS-fs (loop5): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0
[  228.085867][ T7776] F2FS-fs (loop5): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0
[  228.106567][ T7776] F2FS-fs (loop5): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0
[  228.126874][ T7776] F2FS-fs (loop5): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0
[  228.147448][ T7776] CPU: 0 UID: 0 PID: 7776 Comm: syz.5.618 Not tainted syzkaller #0 PREEMPT(full) 
[  228.147483][ T7776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  228.147498][ T7776] Call Trace:
[  228.147507][ T7776]  <TASK>
[  228.147518][ T7776]  dump_stack_lvl+0xe8/0x150
[  228.147558][ T7776]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  228.147592][ T7776]  ? f2fs_map_blocks+0x3b60/0x46d0
[  228.147622][ T7776]  f2fs_balance_fs+0x349/0x870
[  228.147657][ T7776]  ? f2fs_map_blocks+0x3b60/0x46d0
[  228.147685][ T7776]  ? __pfx_f2fs_balance_fs+0x10/0x10
[  228.147714][ T7776]  ? rcu_is_watching+0x15/0xb0
[  228.147751][ T7776]  ? srso_alias_return_thunk+0x5/0xfbef5
[  228.147779][ T7776]  ? __up_read+0x29c/0x930
[  228.147809][ T7776]  ? __pfx___up_read+0x10/0x10
[  228.147835][ T7776]  ? srso_alias_return_thunk+0x5/0xfbef5
[  228.147863][ T7776]  ? trace_lock_elapsed_time_end+0xf1/0xbc0
[  228.147892][ T7776]  ? srso_alias_return_thunk+0x5/0xfbef5
[  228.147920][ T7776]  ? restore_priority+0x1af/0x450
[  228.147958][ T7776]  f2fs_map_blocks+0x3b60/0x46d0
[  228.147992][ T7776]  ? __lock_acquire+0x683/0x2cf0
[  228.148044][ T7776]  ? __kmalloc_noprof+0x1ad/0x720
[  228.148102][ T7776]  ? __pfx_f2fs_map_blocks+0x10/0x10
[  228.148134][ T7776]  ? seqcount_lockdep_reader_access+0xa9/0x100
[  228.148166][ T7776]  ? srso_alias_return_thunk+0x5/0xfbef5
[  228.148195][ T7776]  ? lockdep_hardirqs_on+0x7a/0x110
[  228.148226][ T7776]  ? srso_alias_return_thunk+0x5/0xfbef5
[  228.148253][ T7776]  ? seqcount_lockdep_reader_access+0xea/0x100
[  228.148292][ T7776]  ? srso_alias_return_thunk+0x5/0xfbef5
[  228.148320][ T7776]  ? ktime_get_coarse_real_ts64_mg+0x1c5/0x1e0
[  228.148361][ T7776]  ? srso_alias_return_thunk+0x5/0xfbef5
[  228.148390][ T7776]  ? current_time+0x22f/0x380
[  228.148434][ T7776]  ? srso_alias_return_thunk+0x5/0xfbef5
[  228.148463][ T7776]  ? srso_alias_return_thunk+0x5/0xfbef5
[  228.148502][ T7776]  ? srso_alias_return_thunk+0x5/0xfbef5
[  228.148530][ T7776]  ? fault_in_iov_iter_readable+0x1d5/0x310
[  228.148568][ T7776]  f2fs_file_write_iter+0x17a8/0x28e0
[  228.148627][ T7776]  ? srso_alias_return_thunk+0x5/0xfbef5
[  228.148660][ T7776]  ? __pfx_f2fs_file_write_iter+0x10/0x10
[  228.148701][ T7776]  ? srso_alias_return_thunk+0x5/0xfbef5
[  228.148729][ T7776]  ? __asan_memset+0x22/0x50
[  228.148765][ T7776]  iter_file_splice_write+0xa31/0x1240
[  228.148829][ T7776]  ? __pfx_iter_file_splice_write+0x10/0x10
[  228.148879][ T7776]  ? srso_alias_return_thunk+0x5/0xfbef5
[  228.148914][ T7776]  ? srso_alias_return_thunk+0x5/0xfbef5
[  228.148945][ T7776]  ? __pfx_iter_file_splice_write+0x10/0x10
[  228.148981][ T7776]  direct_splice_actor+0x101/0x160
[  228.149027][ T7776]  splice_direct_to_actor+0x57b/0xcb0
[  228.149087][ T7776]  ? __pfx_direct_splice_actor+0x10/0x10
[  228.149123][ T7776]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  228.149172][ T7776]  do_splice_direct+0x195/0x290
[  228.149211][ T7776]  ? __pfx_do_splice_direct+0x10/0x10
[  228.149248][ T7776]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  228.149292][ T7776]  ? srso_alias_return_thunk+0x5/0xfbef5
[  228.149321][ T7776]  ? rw_verify_area+0x203/0x4c0
[  228.149357][ T7776]  ? srso_alias_return_thunk+0x5/0xfbef5
[  228.149391][ T7776]  do_sendfile+0x52e/0x7c0
[  228.149432][ T7776]  ? __pfx_do_sendfile+0x10/0x10
[  228.149469][ T7776]  ? srso_alias_return_thunk+0x5/0xfbef5
[  228.149498][ T7776]  ? __se_sys_futex+0x3a8/0x450
[  228.149542][ T7776]  __se_sys_sendfile64+0x144/0x1a0
[  228.149574][ T7776]  ? __pfx___se_sys_sendfile64+0x10/0x10
[  228.149600][ T7776]  ? srso_alias_return_thunk+0x5/0xfbef5
[  228.149638][ T7776]  ? srso_alias_return_thunk+0x5/0xfbef5
[  228.149669][ T7776]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  228.149696][ T7776]  do_syscall_64+0x174/0x580
[  228.149729][ T7776]  ? trace_irq_disable+0x3b/0x140
[  228.149767][ T7776]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  228.149792][ T7776] RIP: 0033:0x7f108159e0d9
[  228.149815][ T7776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  228.149837][ T7776] RSP: 002b:00007f1082463028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  228.149862][ T7776] RAX: ffffffffffffffda RBX: 00007f1081825fa0 RCX: 00007f108159e0d9
[  228.149881][ T7776] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006
[  228.149896][ T7776] RBP: 00007f1081635024 R08: 0000000000000000 R09: 0000000000000000
[  228.149913][ T7776] R10: 000000000e3aa6ea R11: 0000000000000246 R12: 0000000000000000
[  228.149928][ T7776] R13: 00007f1081826038 R14: 00007f1081825fa0 R15: 00007ffcc6fc0358
[  228.149968][ T7776]  </TASK>
[  228.149978][ T7776] F2FS-fs (loop5): Stopped filesystem due to reason: 1
[  228.618664][ T7780] loop2: detected capacity change from 0 to 512
[  228.631004][ T7793] loop4: detected capacity change from 0 to 512
[  228.640539][ T5759] gud 2-1:1.0: Failed to add properties (error=-71)
[  228.672868][ T7793] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  228.698335][ T5759] gud 2-1:1.0: probe with driver gud failed with error -71
[  228.798706][ T5759] usb 2-1: USB disconnect, device number 14
[  228.954556][ T7780] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.619: inode has both inline data and extents flags
[  228.970593][ T7798] fuse: Bad value for 'fd'
[  228.984711][ T7793] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.621: bad orphan inode 131083
[  229.106628][ T7793] loop4: lost filesystem error report for type 5 error -117
[  229.111107][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  229.126560][    C1] EXT4-fs (loop4): initial error at time 1786091135: ext4_orphan_get:1425
[  229.135189][    C1] EXT4-fs (loop4): last error at time 1786091135: ext4_orphan_get:1425
[  229.162979][ T7793] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  229.179912][ T7780] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  229.181075][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  229.196749][    C1] EXT4-fs (loop2): initial error at time 1786091135: ext4_orphan_get:1399: inode 15
[  229.206200][    C1] EXT4-fs (loop2): last error at time 1786091135: ext4_orphan_get:1399: inode 15
[  229.226912][ T7780] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.619: couldn't read orphan inode 15 (err -117)
[  229.328877][ T7780] loop2: lost filesystem error report for type 5 error -117
[  229.344902][ T7780] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  229.461883][   T30] audit: type=1800 audit(1786091135.765:22): pid=7793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.621" name="file1" dev="loop4" ino=15 res=0 errno=0
[  229.580298][   T30] audit: type=1804 audit(1786091135.805:23): pid=7780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.619" name="/newroot/115/bus/bus" dev="loop2" ino=18 res=1 errno=0
[  229.690266][ T5612] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.858851][ T7808] netlink: 'syz.3.623': attribute type 4 has an invalid length.
[  229.916830][ T5602] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.330114][ T5895] libceph: connect (1)[c::]:6789 error -101
[  230.367484][ T5895] libceph: mon0 (1)[c::]:6789 connect error
[  230.534563][ T7805] ceph: No mds server is up or the cluster is laggy
[  230.679710][ T5895] libceph: connect (1)[c::]:6789 error -101
[  230.732084][ T5895] libceph: mon0 (1)[c::]:6789 connect error
[  230.960875][ T7826] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  231.226466][ T7828] nbd: socks must be embedded in a SOCK_ITEM attr
[  231.276228][ T7828] block nbd0: shutting down sockets
[  231.906881][ T6150] Bluetooth: Error in BCSP hdr checksum
[  232.026793][ T7840] loop4: detected capacity change from 0 to 40427
[  232.075102][ T7840] F2FS-fs (loop4): build fault injection rate: 174
[  232.081717][ T7840] F2FS-fs (loop4): build fault injection type: 0x3bfe8c
[  232.089719][ T7840] F2FS-fs (loop4): invalid crc value
[  232.169575][ T7840] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  232.184428][ T7840] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  232.323139][ T7840] CPU: 0 UID: 0 PID: 7840 Comm: syz.4.636 Not tainted syzkaller #0 PREEMPT(full) 
[  232.323178][ T7840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  232.323193][ T7840] Call Trace:
[  232.323203][ T7840]  <TASK>
[  232.323213][ T7840]  dump_stack_lvl+0xe8/0x150
[  232.323256][ T7840]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  232.323291][ T7840]  ? f2fs_map_blocks+0x3b60/0x46d0
[  232.323323][ T7840]  f2fs_balance_fs+0x349/0x870
[  232.323360][ T7840]  ? f2fs_map_blocks+0x3b60/0x46d0
[  232.323391][ T7840]  ? __pfx_f2fs_balance_fs+0x10/0x10
[  232.323420][ T7840]  ? rcu_is_watching+0x15/0xb0
[  232.323459][ T7840]  ? srso_alias_return_thunk+0x5/0xfbef5
[  232.323489][ T7840]  ? __up_read+0x29c/0x930
[  232.323520][ T7840]  ? __pfx___up_read+0x10/0x10
[  232.323547][ T7840]  ? srso_alias_return_thunk+0x5/0xfbef5
[  232.323577][ T7840]  ? trace_lock_elapsed_time_end+0xf1/0xbc0
[  232.323608][ T7840]  ? srso_alias_return_thunk+0x5/0xfbef5
[  232.323637][ T7840]  ? restore_priority+0x1af/0x450
[  232.323676][ T7840]  f2fs_map_blocks+0x3b60/0x46d0
[  232.323711][ T7840]  ? __lock_acquire+0x683/0x2cf0
[  232.323758][ T7840]  ? __kmalloc_noprof+0x1ad/0x720
[  232.323818][ T7840]  ? __pfx_f2fs_map_blocks+0x10/0x10
[  232.323853][ T7840]  ? seqcount_lockdep_reader_access+0xa9/0x100
[  232.323887][ T7840]  ? srso_alias_return_thunk+0x5/0xfbef5
[  232.323917][ T7840]  ? lockdep_hardirqs_on+0x7a/0x110
[  232.323967][ T7840]  ? srso_alias_return_thunk+0x5/0xfbef5
[  232.323998][ T7840]  ? seqcount_lockdep_reader_access+0xea/0x100
[  232.324031][ T7840]  ? srso_alias_return_thunk+0x5/0xfbef5
[  232.324061][ T7840]  ? ktime_get_coarse_real_ts64_mg+0x1c5/0x1e0
[  232.324104][ T7840]  ? srso_alias_return_thunk+0x5/0xfbef5
[  232.324134][ T7840]  ? current_time+0x22f/0x380
[  232.324181][ T7840]  ? srso_alias_return_thunk+0x5/0xfbef5
[  232.324211][ T7840]  ? srso_alias_return_thunk+0x5/0xfbef5
[  232.324251][ T7840]  ? srso_alias_return_thunk+0x5/0xfbef5
[  232.324281][ T7840]  ? fault_in_iov_iter_readable+0x1d5/0x310
[  232.324321][ T7840]  f2fs_file_write_iter+0x17a8/0x28e0
[  232.324381][ T7840]  ? srso_alias_return_thunk+0x5/0xfbef5
[  232.324415][ T7840]  ? __pfx_f2fs_file_write_iter+0x10/0x10
[  232.324458][ T7840]  ? srso_alias_return_thunk+0x5/0xfbef5
[  232.324489][ T7840]  ? __asan_memset+0x22/0x50
[  232.324525][ T7840]  iter_file_splice_write+0xa31/0x1240
[  232.324593][ T7840]  ? __pfx_iter_file_splice_write+0x10/0x10
[  232.324644][ T7840]  ? srso_alias_return_thunk+0x5/0xfbef5
[  232.324679][ T7840]  ? srso_alias_return_thunk+0x5/0xfbef5
[  232.324711][ T7840]  ? __pfx_iter_file_splice_write+0x10/0x10
[  232.324750][ T7840]  direct_splice_actor+0x101/0x160
[  232.324792][ T7840]  splice_direct_to_actor+0x57b/0xcb0
[  232.324860][ T7840]  ? __pfx_direct_splice_actor+0x10/0x10
[  232.324897][ T7840]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  232.324948][ T7840]  do_splice_direct+0x195/0x290
[  232.324999][ T7840]  ? __pfx_do_splice_direct+0x10/0x10
[  232.325038][ T7840]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  232.325085][ T7840]  ? srso_alias_return_thunk+0x5/0xfbef5
[  232.325115][ T7840]  ? rw_verify_area+0x203/0x4c0
[  232.325153][ T7840]  ? srso_alias_return_thunk+0x5/0xfbef5
[  232.325188][ T7840]  do_sendfile+0x52e/0x7c0
[  232.325230][ T7840]  ? __pfx_do_sendfile+0x10/0x10
[  232.325268][ T7840]  ? srso_alias_return_thunk+0x5/0xfbef5
[  232.325298][ T7840]  ? __se_sys_futex+0x3a8/0x450
[  232.325343][ T7840]  __se_sys_sendfile64+0x144/0x1a0
[  232.325376][ T7840]  ? __pfx___se_sys_sendfile64+0x10/0x10
[  232.325405][ T7840]  ? srso_alias_return_thunk+0x5/0xfbef5
[  232.325443][ T7840]  ? srso_alias_return_thunk+0x5/0xfbef5
[  232.325475][ T7840]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.325504][ T7840]  do_syscall_64+0x174/0x580
[  232.325539][ T7840]  ? trace_irq_disable+0x3b/0x140
[  232.325578][ T7840]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.325605][ T7840] RIP: 0033:0x7f3ff799e0d9
[  232.325629][ T7840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  232.325650][ T7840] RSP: 002b:00007f3ff879c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  232.325678][ T7840] RAX: ffffffffffffffda RBX: 00007f3ff7c25fa0 RCX: 00007f3ff799e0d9
[  232.325698][ T7840] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006
[  232.325713][ T7840] RBP: 00007f3ff7a35024 R08: 0000000000000000 R09: 0000000000000000
[  232.325730][ T7840] R10: 000000000e3aa6ea R11: 0000000000000246 R12: 0000000000000000
[  232.325746][ T7840] R13: 00007f3ff7c26038 R14: 00007f3ff7c25fa0 R15: 00007ffdb3654e48
[  232.325787][ T7840]  </TASK>
[  232.325797][ T7840] F2FS-fs (loop4): Stopped filesystem due to reason: 1
[  232.423890][ T7855] program syz.3.641 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  233.540883][ T5747] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  233.704267][ T5747] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  233.717076][ T5623] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  233.809266][ T5747] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  233.880396][ T5747] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  233.894075][ T5759] libceph: connect (1)[c::]:6789 error -101
[  233.919977][ T5747] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  233.932642][ T5759] libceph: mon0 (1)[c::]:6789 connect error
[  233.955556][ T5747] usb 1-1: SerialNumber: syz
[  234.213350][ T7869] ceph: No mds server is up or the cluster is laggy
[  234.220731][ T5928] libceph: connect (1)[c::]:6789 error -101
[  234.240414][ T5928] libceph: mon0 (1)[c::]:6789 connect error
[  234.255347][ T5759] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  234.342223][ T5747] usb 1-1: skipping empty audio interface (v1)
[  234.425597][ T7878] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  234.441282][ T5759] usb 2-1: Using ep0 maxpacket: 8
[  234.466285][ T5759] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  234.478624][ T7881] loop3: detected capacity change from 0 to 512
[  234.505245][ T5759] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  234.552624][ T7881] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  234.561295][ T5759] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[  234.586067][ T5747] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[  234.594904][ T5759] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  234.631304][ T5759] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  234.644717][ T5747] usb 1-1: USB disconnect, device number 9
[  234.683045][ T5759] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  234.683594][ T7881] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  234.692545][ T5759] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  234.724958][ T5759] usb 2-1: Product: syz
[  234.729193][ T5759] usb 2-1: Manufacturer: syz
[  234.734111][ T5759] usb 2-1: SerialNumber: syz
[  234.739015][ T7881] ext4 filesystem being mounted at /100/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  234.753001][ T5759] usb 2-1: config 0 descriptor??
[  234.824024][ T5939] udevd[5939]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  235.016627][ T7889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.651'.
[  235.123949][ T5759] radio-si470x 2-1:0.0: DeviceID=0xfe69 ChipID=0x9ea5
[  235.277719][   T30] audit: type=1800 audit(1786091141.595:24): pid=7891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.649" name="file1" dev="loop3" ino=15 res=0 errno=0
[  235.313938][ T5759] radio-si470x 2-1:0.0: software version 254, hardware version 105
[  235.517830][ T5759] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71
[  235.553154][ T5759] radio-si470x 2-1:0.0: submitting int urb failed (-90)
[  235.585639][ T5759] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71
[  235.620719][ T5759] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22
[  235.689357][ T5759] usb 2-1: USB disconnect, device number 15
[  236.222370][ T7903] loop4: detected capacity change from 0 to 512
[  236.268295][ T7903] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  236.334877][ T7903] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082]
[  236.407179][ T7903] System zones: 1-12
[  236.497485][ T7903] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  236.756009][ T7908] loop0: detected capacity change from 0 to 40427
[  236.773327][ T7908] F2FS-fs (loop0): build fault injection rate: 174
[  236.779914][ T7908] F2FS-fs (loop0): build fault injection type: 0x3bfe8c
[  236.787943][ T7908] F2FS-fs (loop0): invalid crc value
[  236.807860][ T7903] EXT4-fs (loop4): 1 truncate cleaned up
[  236.924405][ T7908] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  237.032347][ T7908] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  237.050997][ T7903] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  237.076209][ T7908] f2fs_printk: 12 callbacks suppressed
[  237.076233][ T7908] F2FS-fs (loop0): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0
[  237.102482][ T7908] F2FS-fs (loop0): inject inconsistent footer in f2fs_sanity_check_node_footer of __get_node_folio+0x8c1/0xdf0
[  237.114364][ T7908] F2FS-fs (loop0): inconsistent node block, node_type:1, nid:10, node_footer[nid:10,ino:10,ofs:0,cpver:0,blkaddr:0]
[  237.137039][ T7908] F2FS-fs (loop0): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0
[  237.157751][ T7908] F2FS-fs (loop0): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0
[  237.178522][ T7908] F2FS-fs (loop0): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0
[  237.201862][ T7908] F2FS-fs (loop0): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0
[  237.222623][ T7908] F2FS-fs (loop0): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0
[  237.243357][ T7908] F2FS-fs (loop0): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0
[  237.264119][ T7908] F2FS-fs (loop0): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0
[  237.287524][ T7908] CPU: 0 UID: 0 PID: 7908 Comm: syz.0.658 Not tainted syzkaller #0 PREEMPT(full) 
[  237.287559][ T7908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  237.287574][ T7908] Call Trace:
[  237.287584][ T7908]  <TASK>
[  237.287595][ T7908]  dump_stack_lvl+0xe8/0x150
[  237.287637][ T7908]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  237.287672][ T7908]  ? f2fs_map_blocks+0x3b60/0x46d0
[  237.287704][ T7908]  f2fs_balance_fs+0x349/0x870
[  237.287741][ T7908]  ? f2fs_map_blocks+0x3b60/0x46d0
[  237.287777][ T7908]  ? __pfx_f2fs_balance_fs+0x10/0x10
[  237.287806][ T7908]  ? rcu_is_watching+0x15/0xb0
[  237.287846][ T7908]  ? srso_alias_return_thunk+0x5/0xfbef5
[  237.287877][ T7908]  ? __up_read+0x29c/0x930
[  237.287909][ T7908]  ? __pfx___up_read+0x10/0x10
[  237.287936][ T7908]  ? srso_alias_return_thunk+0x5/0xfbef5
[  237.287966][ T7908]  ? trace_lock_elapsed_time_end+0xf1/0xbc0
[  237.287995][ T7908]  ? srso_alias_return_thunk+0x5/0xfbef5
[  237.288025][ T7908]  ? restore_priority+0x1af/0x450
[  237.288063][ T7908]  f2fs_map_blocks+0x3b60/0x46d0
[  237.288101][ T7908]  ? __lock_acquire+0x683/0x2cf0
[  237.288148][ T7908]  ? __kmalloc_noprof+0x1ad/0x720
[  237.288207][ T7908]  ? __pfx_f2fs_map_blocks+0x10/0x10
[  237.288240][ T7908]  ? seqcount_lockdep_reader_access+0xa9/0x100
[  237.288273][ T7908]  ? srso_alias_return_thunk+0x5/0xfbef5
[  237.288302][ T7908]  ? lockdep_hardirqs_on+0x7a/0x110
[  237.288335][ T7908]  ? srso_alias_return_thunk+0x5/0xfbef5
[  237.288365][ T7908]  ? seqcount_lockdep_reader_access+0xea/0x100
[  237.288398][ T7908]  ? srso_alias_return_thunk+0x5/0xfbef5
[  237.288427][ T7908]  ? ktime_get_coarse_real_ts64_mg+0x1c5/0x1e0
[  237.288475][ T7908]  ? srso_alias_return_thunk+0x5/0xfbef5
[  237.288505][ T7908]  ? current_time+0x22f/0x380
[  237.288552][ T7908]  ? srso_alias_return_thunk+0x5/0xfbef5
[  237.288582][ T7908]  ? srso_alias_return_thunk+0x5/0xfbef5
[  237.288622][ T7908]  ? srso_alias_return_thunk+0x5/0xfbef5
[  237.288653][ T7908]  ? fault_in_iov_iter_readable+0x1d5/0x310
[  237.288693][ T7908]  f2fs_file_write_iter+0x17a8/0x28e0
[  237.288754][ T7908]  ? srso_alias_return_thunk+0x5/0xfbef5
[  237.288788][ T7908]  ? __pfx_f2fs_file_write_iter+0x10/0x10
[  237.288830][ T7908]  ? srso_alias_return_thunk+0x5/0xfbef5
[  237.288860][ T7908]  ? __asan_memset+0x22/0x50
[  237.288896][ T7908]  iter_file_splice_write+0xa31/0x1240
[  237.288964][ T7908]  ? __pfx_iter_file_splice_write+0x10/0x10
[  237.289014][ T7908]  ? srso_alias_return_thunk+0x5/0xfbef5
[  237.289050][ T7908]  ? srso_alias_return_thunk+0x5/0xfbef5
[  237.289081][ T7908]  ? __pfx_iter_file_splice_write+0x10/0x10
[  237.289120][ T7908]  direct_splice_actor+0x101/0x160
[  237.289162][ T7908]  splice_direct_to_actor+0x57b/0xcb0
[  237.289222][ T7908]  ? __pfx_direct_splice_actor+0x10/0x10
[  237.289259][ T7908]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  237.289308][ T7908]  do_splice_direct+0x195/0x290
[  237.289349][ T7908]  ? __pfx_do_splice_direct+0x10/0x10
[  237.289389][ T7908]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  237.289436][ T7908]  ? srso_alias_return_thunk+0x5/0xfbef5
[  237.289466][ T7908]  ? rw_verify_area+0x203/0x4c0
[  237.289507][ T7908]  ? srso_alias_return_thunk+0x5/0xfbef5
[  237.289544][ T7908]  do_sendfile+0x52e/0x7c0
[  237.289586][ T7908]  ? __pfx_do_sendfile+0x10/0x10
[  237.289624][ T7908]  ? srso_alias_return_thunk+0x5/0xfbef5
[  237.289653][ T7908]  ? __se_sys_futex+0x3a8/0x450
[  237.289699][ T7908]  __se_sys_sendfile64+0x144/0x1a0
[  237.289732][ T7908]  ? __pfx___se_sys_sendfile64+0x10/0x10
[  237.289760][ T7908]  ? srso_alias_return_thunk+0x5/0xfbef5
[  237.289798][ T7908]  ? srso_alias_return_thunk+0x5/0xfbef5
[  237.289829][ T7908]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.289857][ T7908]  do_syscall_64+0x174/0x580
[  237.289916][ T7908]  ? trace_irq_disable+0x3b/0x140
[  237.289955][ T7908]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.289981][ T7908] RIP: 0033:0x7faf63f9e0d9
[  237.290003][ T7908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  237.290034][ T7908] RSP: 002b:00007faf64e5b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  237.290061][ T7908] RAX: ffffffffffffffda RBX: 00007faf64225fa0 RCX: 00007faf63f9e0d9
[  237.290080][ T7908] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006
[  237.290096][ T7908] RBP: 00007faf64035024 R08: 0000000000000000 R09: 0000000000000000
[  237.290112][ T7908] R10: 000000000e3aa6ea R11: 0000000000000246 R12: 0000000000000000
[  237.290128][ T7908] R13: 00007faf64226038 R14: 00007faf64225fa0 R15: 00007ffca5ca50b8
[  237.290168][ T7908]  </TASK>
[  237.290177][ T7908] F2FS-fs (loop0): Stopped filesystem due to reason: 1
[  237.659357][ T7927] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  238.024478][ T5602] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  238.680756][ T7941] 
€Â: renamed from vlan0 (while UP)
[  238.689168][ T5614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  238.915829][ T7944] loop3: detected capacity change from 0 to 256
[  239.080765][ T7944] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  240.607462][ T7972] loop4: detected capacity change from 0 to 512
[  240.621422][ T7968] loop3: detected capacity change from 0 to 40427
[  240.634647][ T7968] F2FS-fs (loop3): build fault injection rate: 174
[  240.642362][ T7968] F2FS-fs (loop3): build fault injection type: 0x3bfe8c
[  240.654296][ T7968] F2FS-fs (loop3): invalid crc value
[  240.688341][ T7972] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  240.779966][ T7968] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  240.792258][ T7968] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  240.827543][ T7980] loop1: detected capacity change from 0 to 16
[  240.922077][ T7972] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  240.946219][ T7968] CPU: 0 UID: 0 PID: 7968 Comm: syz.3.680 Not tainted syzkaller #0 PREEMPT(full) 
[  240.946251][ T7968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  240.946267][ T7968] Call Trace:
[  240.946277][ T7968]  <TASK>
[  240.946287][ T7968]  dump_stack_lvl+0xe8/0x150
[  240.946328][ T7968]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  240.946366][ T7968]  ? f2fs_map_blocks+0x3b60/0x46d0
[  240.946399][ T7968]  f2fs_balance_fs+0x349/0x870
[  240.946436][ T7968]  ? f2fs_map_blocks+0x3b60/0x46d0
[  240.946468][ T7968]  ? __pfx_f2fs_balance_fs+0x10/0x10
[  240.946499][ T7968]  ? rcu_is_watching+0x15/0xb0
[  240.946545][ T7968]  ? srso_alias_return_thunk+0x5/0xfbef5
[  240.946580][ T7968]  ? __up_read+0x29c/0x930
[  240.946613][ T7968]  ? __pfx___up_read+0x10/0x10
[  240.946640][ T7968]  ? srso_alias_return_thunk+0x5/0xfbef5
[  240.946672][ T7968]  ? trace_lock_elapsed_time_end+0xf1/0xbc0
[  240.946714][ T7968]  ? srso_alias_return_thunk+0x5/0xfbef5
[  240.946747][ T7968]  ? restore_priority+0x1af/0x450
[  240.946788][ T7968]  f2fs_map_blocks+0x3b60/0x46d0
[  240.946824][ T7968]  ? __lock_acquire+0x683/0x2cf0
[  240.946879][ T7968]  ? __kmalloc_noprof+0x1ad/0x720
[  240.946961][ T7968]  ? __pfx_f2fs_map_blocks+0x10/0x10
[  240.946997][ T7968]  ? seqcount_lockdep_reader_access+0xa9/0x100
[  240.947033][ T7968]  ? srso_alias_return_thunk+0x5/0xfbef5
[  240.947069][ T7968]  ? lockdep_hardirqs_on+0x7a/0x110
[  240.947110][ T7968]  ? srso_alias_return_thunk+0x5/0xfbef5
[  240.947142][ T7968]  ? seqcount_lockdep_reader_access+0xea/0x100
[  240.947176][ T7968]  ? srso_alias_return_thunk+0x5/0xfbef5
[  240.947208][ T7968]  ? ns_to_timespec64+0x21/0xb0
[  240.947244][ T7968]  ? srso_alias_return_thunk+0x5/0xfbef5
[  240.947276][ T7968]  ? ktime_get_coarse_real_ts64_mg+0x17c/0x1e0
[  240.947323][ T7968]  ? srso_alias_return_thunk+0x5/0xfbef5
[  240.947356][ T7968]  ? current_time+0x22f/0x380
[  240.947405][ T7968]  ? srso_alias_return_thunk+0x5/0xfbef5
[  240.947436][ T7968]  ? srso_alias_return_thunk+0x5/0xfbef5
[  240.947478][ T7968]  ? srso_alias_return_thunk+0x5/0xfbef5
[  240.947509][ T7968]  ? fault_in_iov_iter_readable+0x1d5/0x310
[  240.947551][ T7968]  f2fs_file_write_iter+0x17a8/0x28e0
[  240.947615][ T7968]  ? srso_alias_return_thunk+0x5/0xfbef5
[  240.947653][ T7968]  ? __pfx_f2fs_file_write_iter+0x10/0x10
[  240.947706][ T7968]  ? srso_alias_return_thunk+0x5/0xfbef5
[  240.947739][ T7968]  ? __asan_memset+0x22/0x50
[  240.947779][ T7968]  iter_file_splice_write+0xa31/0x1240
[  240.947853][ T7968]  ? __pfx_iter_file_splice_write+0x10/0x10
[  240.947909][ T7968]  ? srso_alias_return_thunk+0x5/0xfbef5
[  240.947947][ T7968]  ? srso_alias_return_thunk+0x5/0xfbef5
[  240.947982][ T7968]  ? __pfx_iter_file_splice_write+0x10/0x10
[  240.948023][ T7968]  direct_splice_actor+0x101/0x160
[  240.948069][ T7968]  splice_direct_to_actor+0x57b/0xcb0
[  240.948136][ T7968]  ? __pfx_direct_splice_actor+0x10/0x10
[  240.948175][ T7968]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  240.948227][ T7968]  do_splice_direct+0x195/0x290
[  240.948271][ T7968]  ? __pfx_do_splice_direct+0x10/0x10
[  240.948313][ T7968]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  240.948364][ T7968]  ? srso_alias_return_thunk+0x5/0xfbef5
[  240.948395][ T7968]  ? rw_verify_area+0x203/0x4c0
[  240.948436][ T7968]  ? srso_alias_return_thunk+0x5/0xfbef5
[  240.948474][ T7968]  do_sendfile+0x52e/0x7c0
[  240.948520][ T7968]  ? __pfx_do_sendfile+0x10/0x10
[  240.948561][ T7968]  ? srso_alias_return_thunk+0x5/0xfbef5
[  240.948593][ T7968]  ? __se_sys_futex+0x3a8/0x450
[  240.948643][ T7968]  __se_sys_sendfile64+0x144/0x1a0
[  240.948679][ T7968]  ? __pfx___se_sys_sendfile64+0x10/0x10
[  240.948714][ T7968]  ? srso_alias_return_thunk+0x5/0xfbef5
[  240.948755][ T7968]  ? srso_alias_return_thunk+0x5/0xfbef5
[  240.948790][ T7968]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.948821][ T7968]  do_syscall_64+0x174/0x580
[  240.948858][ T7968]  ? trace_irq_disable+0x3b/0x140
[  240.948900][ T7968]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.948928][ T7968] RIP: 0033:0x7f68f359e0d9
[  240.948952][ T7968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  240.948974][ T7968] RSP: 002b:00007f68f44d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  240.949001][ T7968] RAX: ffffffffffffffda RBX: 00007f68f3825fa0 RCX: 00007f68f359e0d9
[  240.949022][ T7968] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006
[  240.949038][ T7968] RBP: 00007f68f3635024 R08: 0000000000000000 R09: 0000000000000000
[  240.949055][ T7968] R10: 000000000e3aa6ea R11: 0000000000000246 R12: 0000000000000000
[  240.949072][ T7968] R13: 00007f68f3826038 R14: 00007f68f3825fa0 R15: 00007ffdfb1dc278
[  240.949116][ T7968]  </TASK>
[  240.949126][ T7968] F2FS-fs (loop3): Stopped filesystem due to reason: 1
[  240.950653][ T7980] erofs (device loop1): mounted with root inode @ nid 36.
[  240.960946][ T7972] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  241.758069][ T5604] erofs (device loop1): bogus dirent @ nid 36
[  242.001910][   T30] audit: type=1800 audit(1786091148.325:25): pid=7994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.681" name="file1" dev="loop4" ino=15 res=0 errno=0
[  242.066061][ T7990] loop2: detected capacity change from 0 to 4096
[  242.418987][ T7990] ntfs3(loop2): failed to convert "0080" to macromanian
[  242.516079][ T7990] ntfs3(loop2): failed to convert name for inode 1e.
[  242.549501][ T7990] ntfs3(loop2): ino=1f, mi_enum_attr
[  242.563724][ T7990] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  242.626183][ T1133] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.679043][ T8001] netlink: 32 bytes leftover after parsing attributes in process `syz.0.668'.
[  242.942981][ T1133] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.113114][ T1133] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.232880][   T30] audit: type=1800 audit(1786091149.545:26): pid=7984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.680" name="file1" dev="loop3" ino=10 res=0 errno=0
[  243.268555][ T8007] loop0: detected capacity change from 0 to 256
[  243.425421][ T1133] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.618050][ T5623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  243.643996][ T5623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  243.654265][ T5623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  243.670530][ T5623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  243.682922][ T5623] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  244.049606][ T8020] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 0, id = 0
[  244.066232][ T8018] IPVS: stopping master sync thread 8020 ...
[  244.126777][ T8022] loop0: detected capacity change from 0 to 256
[  244.240010][ T5602] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.578125][ T1133] bridge_slave_1: left allmulticast mode
[  244.606880][ T1133] bridge_slave_1: left promiscuous mode
[  244.664581][ T1133] bridge0: port 2(bridge_slave_1) entered disabled state
[  244.700947][ T5747] libceph: connect (1)[c::]:6789 error -101
[  244.734073][ T5747] libceph: mon0 (1)[c::]:6789 connect error
[  244.735847][ T1133] bridge_slave_0: left allmulticast mode
[  244.786075][ T1133] bridge_slave_0: left promiscuous mode
[  244.815801][ T1133] bridge0: port 1(bridge_slave_0) entered disabled state
[  245.031623][ T5336] libceph: connect (1)[c::]:6789 error -101
[  245.047937][ T5336] libceph: mon0 (1)[c::]:6789 connect error
[  245.224405][ T8032] ceph: No mds server is up or the cluster is laggy
[  245.735429][ T1133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  245.788849][ T1133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  245.791458][ T5611] Bluetooth: hci2: command tx timeout
[  245.834305][ T1133] bond0 (unregistering): Released all slaves
[  245.854410][ T5336] i801_smbus 0000:00:00.0: SMBus base address uninitialized, upgrade BIOS
[  245.901863][   T10] i801_smbus 0000:00:01.0: SMBus base address uninitialized, upgrade BIOS
[  246.084546][   T10] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off
[  246.161320][   T10] i801_smbus 0000:00:01.3: PCI INT A: no GSI
[  246.200599][   T10] i801_smbus 0000:00:01.3: SMBus base address uninitialized, upgrade BIOS
[  246.282172][ T5611] Bluetooth: hci0: hcon ffff888034910000 sent 1 < count 2
[  246.290593][ T5611] Bluetooth: hci0: hcon ffff888034910000 sent 0 < count 65520
[  246.413101][ T8070] netlink: 'syz.5.706': attribute type 4 has an invalid length.
[  246.852218][ T5265] 8021q: adding VLAN 0 to HW filter on device eth1
[  246.881207][ T8080] i2c i2c-0: new_device: Instantiated device maxtcpc at 0x02
[  246.932205][ T6311] maxtcpc 0-0002: error -EIO: Failed to read TCPC_POWER_STATUS
[  247.296074][ T6311] maxtcpc 0-0002: probe with driver maxtcpc failed with error -5
[  247.583977][ T8097] loop5: detected capacity change from 0 to 128
[  247.600542][ T8097] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  247.616494][ T8097] hpfs: filesystem error: improperly stopped
[  247.629630][ T8097] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  247.641480][ T8097] hpfs: You really don't want any checks? You are crazy...
[  247.650945][ T8097] hpfs: hpfs_map_sector(): read error
[  247.657005][ T8097] hpfs: code page support is disabled
[  247.665191][ T8097] hpfs: hpfs_map_4sectors(): unaligned read
[  247.671816][ T8097] hpfs: hpfs_map_4sectors(): unaligned read
[  247.677983][ T8097] hpfs: filesystem error: unable to find root dir
[  247.764079][   T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  247.794477][ T8099] loop0: detected capacity change from 0 to 8
[  247.874282][ T5611] Bluetooth: hci2: command tx timeout
[  247.903480][ T8099] SQUASHFS error: Failed to read block 0x636: -5
[  247.952183][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  247.977550][ T8099] SQUASHFS error: Unable to read metadata cache entry [634]
[  248.004624][   T10] usb 3-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00
[  248.089485][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.163227][   T10] usb 3-1: config 0 descriptor??
[  248.164017][ T8101] loop3: detected capacity change from 0 to 4096
[  248.219679][   T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  248.415947][ T8101] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  248.458023][ T8112] netlink: 'syz.4.717': attribute type 4 has an invalid length.
[  249.357572][ T5614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.588578][ T8125] loop4: detected capacity change from 0 to 128
[  249.611238][ T8125] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  249.678221][ T8125] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  249.718724][ T1133] hsr_slave_0: left promiscuous mode
[  249.740615][ T1133] hsr_slave_1: left promiscuous mode
[  249.768845][ T1133] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  249.802675][   T30] audit: type=1800 audit(1786091156.115:27): pid=8125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.722" name="file2" dev="loop4" ino=1048650 res=0 errno=0
[  249.833644][ T1133] batman_adv: batadv0: Removing interface: batadv_slave_0
[  249.863080][ T1133] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  249.898136][   T30] audit: type=1800 audit(1786091156.115:28): pid=8125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.722" name="file2" dev="loop4" ino=1048650 res=0 errno=0
[  249.921103][ T1133] batman_adv: batadv0: Removing interface: batadv_slave_1
[  249.949349][ T1133] veth1_macvtap: left promiscuous mode
[  249.955855][ T5611] Bluetooth: hci2: command tx timeout
[  249.964224][ T1133] veth0_macvtap: left promiscuous mode
[  249.970972][ T1133] veth1_vlan: left promiscuous mode
[  249.978004][ T1133] veth0_vlan: left promiscuous mode
[  250.319446][ T8141] netlink: 'syz.4.725': attribute type 4 has an invalid length.
[  250.550008][ T8120] loop0: detected capacity change from 0 to 32768
[  250.668554][ T8120] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.719 (8120)
[  251.124839][ T8120] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  251.161193][ T8120] BTRFS info (device loop0): using blake2b checksum algorithm
[  251.528204][ T8120] BTRFS info (device loop0): enabling ssd optimizations
[  251.548081][ T8120] BTRFS info (device loop0): turning on async discard
[  251.580460][ T1133] team0 (unregistering): Port device team_slave_1 removed
[  251.595978][ T8120] BTRFS info (device loop0): enabling free space tree
[  251.686033][ T1133] team0 (unregistering): Port device team_slave_0 removed
[  251.949870][ T5603] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  251.981866][ T5336] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  252.035333][ T5611] Bluetooth: hci2: command tx timeout
[  252.154149][ T5336] usb 6-1: Using ep0 maxpacket: 32
[  252.166802][ T5336] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  252.178976][ T5336] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  252.208670][ T5336] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[  252.239297][ T5336] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  252.276347][ T5336] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  252.295027][ T5336] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  252.315468][ T5336] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  252.352853][ T5336] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  252.404705][ T5336] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  252.468578][ T5336] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.485195][ T5336] usb 6-1: config 0 descriptor??
[  252.598619][ T5265] 8021q: adding VLAN 0 to HW filter on device eth2
[  252.895175][ T5336] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  253.197245][ T5336] usb 6-1: USB disconnect, device number 11
[  253.900592][ T5336] usblp0: removed
[  254.077297][ T8205] netlink: 'syz.0.733': attribute type 4 has an invalid length.
[  254.416787][ T8214] loop5: detected capacity change from 0 to 2048
[  254.460450][ T8214] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  254.626899][   T10] usb 3-1: USB disconnect, device number 11
[  254.994674][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  255.003255][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  255.506256][   T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  255.515452][ T8010] bridge0: port 1(bridge_slave_0) entered blocking state
[  255.541666][ T8010] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.560742][ T8010] bridge_slave_0: entered allmulticast mode
[  255.590932][ T8010] bridge_slave_0: entered promiscuous mode
[  255.624776][ T8010] bridge0: port 2(bridge_slave_1) entered blocking state
[  255.644589][ T8010] bridge0: port 2(bridge_slave_1) entered disabled state
[  255.668423][ T8010] bridge_slave_1: entered allmulticast mode
[  255.706592][   T10] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  255.731756][ T8010] bridge_slave_1: entered promiscuous mode
[  255.741853][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.786819][   T10] usb 3-1: config 0 descriptor??
[  255.826568][   T10] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  255.835696][ T8257] netlink: 8 bytes leftover after parsing attributes in process `syz.5.746'.
[  255.870370][ T8217] loop3: detected capacity change from 0 to 32768
[  255.929518][ T8010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  256.012453][ T8010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  256.072970][ T8217] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  256.178821][ T5265] 8021q: adding VLAN 0 to HW filter on device eth3
[  256.229679][ T8010] team0: Port device team_slave_0 added
[  256.272637][ T8010] team0: Port device team_slave_1 added
[  256.447347][ T8267] loop0: detected capacity change from 0 to 64
[  256.503984][ T8010] batman_adv: batadv0: Adding interface: batadv_slave_0
[  256.504070][ T8267] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing
[  256.548038][ T8010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  256.624469][ T8010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  256.659399][   T10] usb 3-1: USB disconnect, device number 12
[  256.667674][ T5614] ocfs2: Unmounting device (7,3) on (node local)
[  256.691689][ T8010] batman_adv: batadv0: Adding interface: batadv_slave_1
[  256.737741][ T8010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  256.858893][ T8010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  256.937923][ T8278] netlink: 'syz.5.752': attribute type 4 has an invalid length.
[  257.083993][ T5895] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  257.219698][ T8010] hsr_slave_0: entered promiscuous mode
[  257.242725][ T8010] hsr_slave_1: entered promiscuous mode
[  257.259545][ T8010] debugfs: 'hsr0' already exists in 'hsr'
[  257.270425][ T8010] Cannot create hsr debugfs directory
[  257.272154][ T5895] usb 1-1: Using ep0 maxpacket: 16
[  257.316901][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  257.320519][ T8287] i2c i2c-0: new_device: Can't parse I2C address
[  257.350872][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  257.377650][ T5895] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  258.350850][ T5895] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  258.360461][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.379600][ T5895] usb 1-1: config 0 descriptor??
[  258.503230][ T8289] loop2: detected capacity change from 0 to 131072
[  258.514554][ T8289] F2FS-fs (loop2): Invalid log sectorsize (67108873)
[  258.521429][ T8289] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  258.542905][ T8289] F2FS-fs (loop2): invalid crc value
[  258.699475][ T8289] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  258.718085][ T8289] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  258.725288][ T8289] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  258.829703][ T8284] loop4: detected capacity change from 0 to 32768
[  258.892598][ T5895] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0
[  258.914407][ T8284] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  258.934116][ T5895] microsoft 0003:045E:07DA.0024: ignoring exceeding usage max
[  259.169759][ T5895] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0024/input/input11
[  259.896369][ T8284] (syz.4.754,8284,0):ocfs2_double_lock:1193 ERROR: status = -2
[  259.946490][ T8284] (syz.4.754,8284,0):ocfs2_rename:1302 ERROR: status = -2
[  260.006206][ T8284] (syz.4.754,8284,0):ocfs2_rename:1700 ERROR: status = -2
[  260.035341][ T5895] microsoft 0003:045E:07DA.0024: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  260.238182][ T5895] usb 1-1: USB disconnect, device number 10
[  260.536895][ T5265] 8021q: adding VLAN 0 to HW filter on device eth4
[  260.570446][ T5602] ocfs2: Unmounting device (7,4) on (node local)
[  260.648962][ T8331] fido_id[8331]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  260.758259][ T8010] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  260.884350][ T8010] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  260.926295][ T8010] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  261.041593][ T8010] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  261.087504][ T8345] netlink: 'syz.5.768': attribute type 4 has an invalid length.
[  261.118606][ T8010] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  261.183301][ T8010] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  261.221984][ T8010] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  261.285108][ T8010] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  261.671280][ T8357] loop4: detected capacity change from 0 to 40427
[  261.683898][ T8357] F2FS-fs (loop4): build fault injection rate: 174
[  261.690458][ T8357] F2FS-fs (loop4): build fault injection type: 0x3bfe8c
[  261.699060][ T8357] F2FS-fs (loop4): invalid crc value
[  261.781546][ T8357] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  261.799923][ T8357] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  261.866208][ T8357] f2fs_printk: 12 callbacks suppressed
[  261.866231][ T8357] F2FS-fs (loop4): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0
[  261.888034][ T8357] F2FS-fs (loop4): inject inconsistent footer in f2fs_sanity_check_node_footer of __get_node_folio+0x8c1/0xdf0
[  261.899881][ T8357] F2FS-fs (loop4): inconsistent node block, node_type:1, nid:10, node_footer[nid:10,ino:10,ofs:0,cpver:0,blkaddr:0]
[  261.922570][ T8357] F2FS-fs (loop4): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0
[  261.943730][ T8357] F2FS-fs (loop4): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0
[  261.966480][ T8357] F2FS-fs (loop4): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0
[  261.971155][ T5759] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  261.990145][ T8357] F2FS-fs (loop4): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0
[  262.011794][ T8357] F2FS-fs (loop4): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0
[  262.033651][ T8357] F2FS-fs (loop4): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0
[  262.055549][ T8357] F2FS-fs (loop4): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0
[  262.079483][ T8357] CPU: 0 UID: 0 PID: 8357 Comm: syz.4.765 Not tainted syzkaller #0 PREEMPT(full) 
[  262.079515][ T8357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  262.079533][ T8357] Call Trace:
[  262.079543][ T8357]  <TASK>
[  262.079553][ T8357]  dump_stack_lvl+0xe8/0x150
[  262.079595][ T8357]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  262.079631][ T8357]  ? f2fs_map_blocks+0x3b60/0x46d0
[  262.079665][ T8357]  f2fs_balance_fs+0x349/0x870
[  262.079704][ T8357]  ? f2fs_map_blocks+0x3b60/0x46d0
[  262.079737][ T8357]  ? __pfx_f2fs_balance_fs+0x10/0x10
[  262.079767][ T8357]  ? rcu_is_watching+0x15/0xb0
[  262.079810][ T8357]  ? srso_alias_return_thunk+0x5/0xfbef5
[  262.079842][ T8357]  ? __up_read+0x29c/0x930
[  262.079877][ T8357]  ? __pfx___up_read+0x10/0x10
[  262.079906][ T8357]  ? srso_alias_return_thunk+0x5/0xfbef5
[  262.079937][ T8357]  ? trace_lock_elapsed_time_end+0xf1/0xbc0
[  262.079970][ T8357]  ? srso_alias_return_thunk+0x5/0xfbef5
[  262.080001][ T8357]  ? restore_priority+0x1af/0x450
[  262.080043][ T8357]  f2fs_map_blocks+0x3b60/0x46d0
[  262.080080][ T8357]  ? __lock_acquire+0x683/0x2cf0
[  262.080134][ T8357]  ? __kmalloc_noprof+0x1ad/0x720
[  262.080198][ T8357]  ? __pfx_f2fs_map_blocks+0x10/0x10
[  262.080234][ T8357]  ? seqcount_lockdep_reader_access+0xa9/0x100
[  262.080268][ T8357]  ? srso_alias_return_thunk+0x5/0xfbef5
[  262.080300][ T8357]  ? lockdep_hardirqs_on+0x7a/0x110
[  262.080337][ T8357]  ? srso_alias_return_thunk+0x5/0xfbef5
[  262.080369][ T8357]  ? seqcount_lockdep_reader_access+0xea/0x100
[  262.080403][ T8357]  ? srso_alias_return_thunk+0x5/0xfbef5
[  262.080434][ T8357]  ? ktime_get_coarse_real_ts64_mg+0x1c5/0x1e0
[  262.080480][ T8357]  ? srso_alias_return_thunk+0x5/0xfbef5
[  262.080512][ T8357]  ? current_time+0x22f/0x380
[  262.080562][ T8357]  ? srso_alias_return_thunk+0x5/0xfbef5
[  262.080594][ T8357]  ? srso_alias_return_thunk+0x5/0xfbef5
[  262.080636][ T8357]  ? srso_alias_return_thunk+0x5/0xfbef5
[  262.080668][ T8357]  ? fault_in_iov_iter_readable+0x1d5/0x310
[  262.080709][ T8357]  f2fs_file_write_iter+0x17a8/0x28e0
[  262.080774][ T8357]  ? srso_alias_return_thunk+0x5/0xfbef5
[  262.080811][ T8357]  ? __pfx_f2fs_file_write_iter+0x10/0x10
[  262.080856][ T8357]  ? srso_alias_return_thunk+0x5/0xfbef5
[  262.080888][ T8357]  ? __asan_memset+0x22/0x50
[  262.080928][ T8357]  iter_file_splice_write+0xa31/0x1240
[  262.081003][ T8357]  ? __pfx_iter_file_splice_write+0x10/0x10
[  262.081062][ T8357]  ? srso_alias_return_thunk+0x5/0xfbef5
[  262.081099][ T8357]  ? srso_alias_return_thunk+0x5/0xfbef5
[  262.081140][ T8357]  ? __pfx_iter_file_splice_write+0x10/0x10
[  262.081181][ T8357]  direct_splice_actor+0x101/0x160
[  262.081225][ T8357]  splice_direct_to_actor+0x57b/0xcb0
[  262.081290][ T8357]  ? __pfx_direct_splice_actor+0x10/0x10
[  262.081330][ T8357]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  262.081384][ T8357]  do_splice_direct+0x195/0x290
[  262.081428][ T8357]  ? __pfx_do_splice_direct+0x10/0x10
[  262.081470][ T8357]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  262.081520][ T8357]  ? srso_alias_return_thunk+0x5/0xfbef5
[  262.081552][ T8357]  ? rw_verify_area+0x203/0x4c0
[  262.081591][ T8357]  ? srso_alias_return_thunk+0x5/0xfbef5
[  262.081629][ T8357]  do_sendfile+0x52e/0x7c0
[  262.081674][ T8357]  ? __pfx_do_sendfile+0x10/0x10
[  262.081712][ T8357]  ? srso_alias_return_thunk+0x5/0xfbef5
[  262.081744][ T8357]  ? __se_sys_futex+0x3a8/0x450
[  262.081792][ T8357]  __se_sys_sendfile64+0x144/0x1a0
[  262.081827][ T8357]  ? __pfx___se_sys_sendfile64+0x10/0x10
[  262.081857][ T8357]  ? srso_alias_return_thunk+0x5/0xfbef5
[  262.081897][ T8357]  ? srso_alias_return_thunk+0x5/0xfbef5
[  262.081931][ T8357]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.081961][ T8357]  do_syscall_64+0x174/0x580
[  262.081998][ T8357]  ? trace_irq_disable+0x3b/0x140
[  262.082039][ T8357]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.082066][ T8357] RIP: 0033:0x7f3ff799e0d9
[  262.082090][ T8357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  262.082113][ T8357] RSP: 002b:00007f3ff879c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  262.082151][ T8357] RAX: ffffffffffffffda RBX: 00007f3ff7c25fa0 RCX: 00007f3ff799e0d9
[  262.082172][ T8357] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006
[  262.082188][ T8357] RBP: 00007f3ff7a35024 R08: 0000000000000000 R09: 0000000000000000
[  262.082205][ T8357] R10: 000000000e3aa6ea R11: 0000000000000246 R12: 0000000000000000
[  262.082223][ T8357] R13: 00007f3ff7c26038 R14: 00007f3ff7c25fa0 R15: 00007ffdb3654e48
[  262.082266][ T8357]  </TASK>
[  262.521321][ T8357] F2FS-fs (loop4): Stopped filesystem due to reason: 1
[  262.771421][ T5759] usb 4-1: Using ep0 maxpacket: 8
[  262.788315][ T5759] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  262.854782][ T5759] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  263.145854][ T5759] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  263.155876][ T5759] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  263.166044][ T5759] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  263.711857][ T5759] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  263.866185][ T5759] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.878901][ T8010] 8021q: adding VLAN 0 to HW filter on device bond0
[  263.964116][ T8010] 8021q: adding VLAN 0 to HW filter on device team0
[  264.046768][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state
[  264.054032][ T5793] bridge0: port 1(bridge_slave_0) entered forwarding state
[  264.138231][ T5759] usb 4-1: GET_CAPABILITIES returned 0
[  264.168931][ T5759] usbtmc 4-1:16.0: can't read capabilities
[  264.184471][ T1027] bridge0: port 2(bridge_slave_1) entered blocking state
[  264.191703][ T1027] bridge0: port 2(bridge_slave_1) entered forwarding state
[  264.332117][ T8396] loop2: detected capacity change from 0 to 64
[  264.379058][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  264.400457][ T5928] usb 4-1: USB disconnect, device number 9
[  264.531252][ T5895] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  264.713786][ T5895] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  264.747457][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  264.777278][ T5895] usb 1-1: Product: syz
[  264.786005][ T5895] usb 1-1: Manufacturer: syz
[  264.803017][ T5895] usb 1-1: SerialNumber: syz
[  265.102464][ T8379] loop5: detected capacity change from 0 to 32768
[  265.769746][ T5895] usb 1-1: config 0 descriptor??
[  265.912311][ T8402] loop2: detected capacity change from 0 to 131072
[  265.947682][ T8402] F2FS-fs (loop2): invalid crc value
[  265.990524][ T8411] random: crng reseeded on system resumption
[  266.119651][ T8402] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  266.148790][ T8402] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  266.226326][ T5895] usb 1-1: Firmware: major: 0, minor: 96, hardware type: UNKNOWN (34)
[  266.430589][ T5895] usb 1-1: failed to fetch extended address, random address set
[  266.495968][ T5895] usb 1-1: atusb_probe: initialization failed, error = -524
[  266.522652][ T5895] atusb 1-1:0.0: probe with driver atusb failed with error -524
[  266.576404][ T8420] loop5: detected capacity change from 0 to 128
[  266.589795][ T5895] usb 1-1: USB disconnect, device number 11
[  266.680568][ T8420] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  266.756337][ T8420] hpfs: filesystem error: improperly stopped
[  266.817071][ T8420] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  266.842796][ T8010] 8021q: adding VLAN 0 to HW filter on device batadv0
[  266.872061][ T8420] hpfs: You really don't want any checks? You are crazy...
[  266.909580][ T8420] hpfs: hpfs_map_sector(): read error
[  266.927323][ T8405] loop3: detected capacity change from 0 to 32768
[  266.934787][ T8420] hpfs: code page support is disabled
[  266.960142][ T8420] hpfs: hpfs_map_4sectors(): unaligned read
[  266.990758][ T8420] hpfs: hpfs_map_4sectors(): unaligned read
[  267.021356][ T8405] JBD2: Ignoring recovery information on journal
[  267.044216][ T8420] hpfs: filesystem error: unable to find root dir
[  267.220512][ T8405] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  267.392562][ T8430] netlink: 'syz.5.786': attribute type 1 has an invalid length.
[  267.450807][ T8430] netlink: 48 bytes leftover after parsing attributes in process `syz.5.786'.
[  267.463217][ T8432] netlink: 'syz.0.785': attribute type 4 has an invalid length.
[  267.535754][ T5614] ocfs2: Unmounting device (7,3) on (node local)
[  267.725399][ T8440] loop5: detected capacity change from 0 to 512
[  267.962542][ T8440] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  268.353195][ T8440] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  268.828139][ T8449] loop3: detected capacity change from 0 to 256
[  268.837653][ T5618] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.904975][ T8010] veth0_vlan: entered promiscuous mode
[  268.909565][ T8449] FAT-fs (loop3): error, allocated dir entry found after end-of-directory marker (i_pos 1)
[  268.979943][ T8010] veth1_vlan: entered promiscuous mode
[  269.171630][ T8010] veth0_macvtap: entered promiscuous mode
[  269.213501][ T8010] veth1_macvtap: entered promiscuous mode
[  269.517132][ T8010] batman_adv: batadv0: Interface activated: batadv_slave_0
[  269.531619][ T5762] libceph: connect (1)[c::]:6789 error -101
[  269.540080][ T5762] libceph: mon0 (1)[c::]:6789 connect error
[  269.560190][ T8010] batman_adv: batadv0: Interface activated: batadv_slave_1
[  269.568320][ T8455] ceph: No mds server is up or the cluster is laggy
[  269.575446][ T5611] Bluetooth: hci4: SCO packet for unknown connection handle 200
[  269.777587][ T8435] loop4: detected capacity change from 0 to 32768
[  269.971486][ T5887] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  270.054713][ T5887] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  270.104707][ T6316] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  270.373413][   T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  270.615798][ T5887] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  270.770011][ T5887] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  270.812275][ T5887] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  270.820854][ T5887] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  270.959751][ T8476] ip_tables: iptables: counters copy to user failed while replacing table
[  271.271680][ T5724] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  271.440636][ T8466] loop5: detected capacity change from 0 to 32768
[  271.487466][ T5724] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  271.530708][ T5724] usb 1-1: config 0 has no interfaces?
[  271.573023][ T5724] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  271.603972][ T5724] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  271.611310][ T8466] JBD2: Ignoring recovery information on journal
[  271.639495][ T5724] usb 1-1: Product: syz
[  271.649619][ T5724] usb 1-1: Manufacturer: syz
[  271.659753][ T5724] usb 1-1: SerialNumber: syz
[  271.672513][ T8493] netlink: 'syz.6.801': attribute type 4 has an invalid length.
[  271.684453][ T5724] usb 1-1: config 0 descriptor??
[  271.909074][ T8466] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  271.969893][ T5336] usb 1-1: USB disconnect, device number 12
[  272.077432][ T8471] loop3: detected capacity change from 0 to 40427
[  272.097344][ T8466] (syz.5.796,8466,1):ocfs2_check_dir_entry:339 ERROR: bad entry in directory #4097: rec_len % 4 != 0 - offset=0, inode=18446673704965378049, rec_len=255, name_len=1
[  272.124662][ T8471] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504)
[  272.161160][ T8471] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  272.172526][ T8466] (syz.5.796,8466,1):ocfs2_prepare_dir_for_insert:4343 ERROR: status = -2
[  272.216373][ T8471] F2FS-fs (loop3): invalid crc value
[  272.230723][ T8466] (syz.5.796,8466,1):ocfs2_mknod:302 ERROR: status = -2
[  272.286352][ T8466] (syz.5.796,8466,1):ocfs2_mknod:506 ERROR: status = -2
[  272.486174][ T8511] loop2: detected capacity change from 0 to 512
[  272.555226][ T5618] ocfs2: Unmounting device (7,5) on (node local)
[  272.640489][ T8511] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  272.722272][ T8471] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  272.780262][ T8511] ext4 filesystem being mounted at /143/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  272.826899][ T8520] kAFS: bad VL server IP address
[  272.838767][ T8471] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  272.879005][ T8471] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  273.081875][ T5612] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.155926][ T8529] loop5: detected capacity change from 0 to 512
[  273.255186][ T8529] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  273.288332][ T8529] ext4 filesystem being mounted at /157/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  273.322112][ T5614] syz-executor: attempt to access beyond end of device
[  273.322112][ T5614] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  273.372933][ T5614] CPU: 1 UID: 0 PID: 5614 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  273.372966][ T5614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  273.373000][ T5614] Call Trace:
[  273.373010][ T5614]  <TASK>
[  273.373020][ T5614]  dump_stack_lvl+0xe8/0x150
[  273.373063][ T5614]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  273.373099][ T5614]  f2fs_write_end_io+0x124b/0x1710
[  273.373158][ T5614]  __submit_merged_bio+0x258/0x6a0
[  273.373185][ T5614]  ? srso_alias_return_thunk+0x5/0xfbef5
[  273.373216][ T5614]  ? rcu_is_watching+0x15/0xb0
[  273.373259][ T5614]  __submit_merged_write_cond+0x3c9/0x4e0
[  273.373297][ T5614]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  273.373341][ T5614]  ? srso_alias_return_thunk+0x5/0xfbef5
[  273.373380][ T5614]  f2fs_write_data_pages+0x2a27/0x36f0
[  273.373412][ T5614]  ? srso_alias_return_thunk+0x5/0xfbef5
[  273.373440][ T5614]  ? __lock_acquire+0x683/0x2cf0
[  273.373513][ T5614]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  273.373594][ T5614]  ? srso_alias_return_thunk+0x5/0xfbef5
[  273.373624][ T5614]  ? srso_alias_return_thunk+0x5/0xfbef5
[  273.373652][ T5614]  ? __bfs+0x153/0x290
[  273.373690][ T5614]  ? __pfx_hlock_conflict+0x10/0x10
[  273.373735][ T5614]  ? srso_alias_return_thunk+0x5/0xfbef5
[  273.373776][ T5614]  ? srso_alias_return_thunk+0x5/0xfbef5
[  273.373805][ T5614]  ? srso_alias_return_thunk+0x5/0xfbef5
[  273.373833][ T5614]  ? __lock_acquire+0x13e8/0x2cf0
[  273.373897][ T5614]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  273.373933][ T5614]  do_writepages+0x338/0x560
[  273.373987][ T5614]  ? srso_alias_return_thunk+0x5/0xfbef5
[  273.374019][ T5614]  ? srso_alias_return_thunk+0x5/0xfbef5
[  273.374053][ T5614]  ? srso_alias_return_thunk+0x5/0xfbef5
[  273.374082][ T5614]  ? do_raw_spin_unlock+0xf5/0x210
[  273.374115][ T5614]  filemap_fdatawrite+0x1e9/0x2f0
[  273.374154][ T5614]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  273.374231][ T5614]  ? srso_alias_return_thunk+0x5/0xfbef5
[  273.374265][ T5614]  ? srso_alias_return_thunk+0x5/0xfbef5
[  273.374299][ T5614]  ? do_raw_spin_unlock+0xf5/0x210
[  273.374332][ T5614]  f2fs_sync_dirty_inodes+0x30e/0x830
[  273.374386][ T5614]  f2fs_write_checkpoint+0xa3d/0x2710
[  273.374420][ T5614]  ? __lock_acquire+0x683/0x2cf0
[  273.374496][ T5614]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  273.374531][ T5614]  ? srso_alias_return_thunk+0x5/0xfbef5
[  273.374623][ T5614]  kill_f2fs_super+0x2f6/0x700
[  273.374665][ T5614]  ? __pfx_kill_f2fs_super+0x10/0x10
[  273.374714][ T5614]  ? call_rcu+0x64b/0x8b0
[  273.374751][ T5614]  ? srso_alias_return_thunk+0x5/0xfbef5
[  273.374780][ T5614]  ? lockdep_hardirqs_on+0x7a/0x110
[  273.374814][ T5614]  ? srso_alias_return_thunk+0x5/0xfbef5
[  273.374859][ T5614]  deactivate_locked_super+0xbc/0x130
[  273.374899][ T5614]  cleanup_mnt+0x3d3/0x460
[  273.374944][ T5614]  task_work_run+0x1d9/0x270
[  273.375055][ T5614]  ? __pfx_task_work_run+0x10/0x10
[  273.375105][ T5614]  exit_to_user_mode_loop+0x1fa/0x730
[  273.375137][ T5614]  ? rcu_is_watching+0x15/0xb0
[  273.375174][ T5614]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.375202][ T5614]  do_syscall_64+0x353/0x580
[  273.375235][ T5614]  ? trace_irq_disable+0x3b/0x140
[  273.375273][ T5614]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.375299][ T5614] RIP: 0033:0x7f68f359f317
[  273.375321][ T5614] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  273.375342][ T5614] RSP: 002b:00007ffdfb1db4e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  273.375367][ T5614] RAX: 0000000000000000 RBX: 00007f68f3634474 RCX: 00007f68f359f317
[  273.375384][ T5614] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdfb1db5a0
[  273.375400][ T5614] RBP: 00007ffdfb1db5a0 R08: 00007ffdfb1dc5a0 R09: 00000000ffffffff
[  273.375417][ T5614] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdfb1dc630
[  273.375434][ T5614] R13: 00007f68f3634474 R14: 0000000000042b0b R15: 00007ffdfb1dc670
[  273.375472][ T5614]  </TASK>
[  273.375821][ T5614] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  273.694757][ T8542] netlink: 'syz.4.814': attribute type 4 has an invalid length.
[  273.751169][ T5759] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  273.914042][ T8529] EXT4-fs error (device loop5): ext4_get_first_dir_block:3560: inode #12: comm syz.5.808: directory missing '..'
[  273.944558][ T5759] usb 1-1: Using ep0 maxpacket: 16
[  273.965416][ T5759] usb 1-1: config 1 has an invalid descriptor of length 169, skipping remainder of the config
[  273.984947][ T5759] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  274.024572][ T5759] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  274.040858][ T5759] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.083928][ T5759] usb 1-1: Product: syz
[  274.107779][ T5759] usb 1-1: Manufacturer: syz
[  274.123994][ T5618] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  274.135551][ T5759] usb 1-1: SerialNumber: syz
[  274.209393][ T8549] loop2: detected capacity change from 0 to 4096
[  274.234662][ T5759] usb 1-1: 0:2 : does not exist
[  274.387142][ T5759] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  274.633791][ T5759] usb 1-1: USB disconnect, device number 13
[  275.005676][ T5939] udevd[5939]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  276.265988][ T5724] libceph: connect (1)[c::]:6789 error -101
[  276.295243][ T5724] libceph: mon0 (1)[c::]:6789 connect error
[  276.358529][ T8574] loop0: detected capacity change from 0 to 8192
[  276.412617][   T30] audit: type=1800 audit(1786091182.735:29): pid=8574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.825" name="file1" dev="loop0" ino=1048656 res=0 errno=0
[  276.439070][ T5336] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  276.459720][ T8555] loop6: detected capacity change from 0 to 32768
[  276.583724][ T5724] libceph: connect (1)[c::]:6789 error -101
[  276.627130][ T5724] libceph: mon0 (1)[c::]:6789 connect error
[  276.633798][ T5336] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  276.701278][ T8555] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  276.725451][ T5336] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  276.747097][ T8583] ceph: No mds server is up or the cluster is laggy
[  276.919761][ T5336] usb 4-1: config 0 descriptor??
[  276.932694][ T5336] cp210x 4-1:0.0: cp210x converter detected
[  276.942876][ T8606] loop0: detected capacity change from 0 to 2048
[  277.040271][ T8606] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  277.062645][ T8606] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  277.107894][ T8555] XFS (loop6): Ending clean mount
[  277.150767][ T8618] loop4: detected capacity change from 0 to 4096
[  277.219761][ T8619] netlink: 'syz.2.834': attribute type 4 has an invalid length.
[  277.238709][ T8618] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  277.415909][ T5603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.436718][ T8618] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  277.590602][ T5336] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71
[  277.608262][ T5336] cp210x 4-1:0.0: GPIO initialisation failed: -71
[  277.624432][ T5724] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  277.654852][ T5336] usb 4-1: cp210x converter now attached to ttyUSB0
[  277.688363][ T5336] usb 4-1: USB disconnect, device number 10
[  277.757730][ T8010] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  277.758441][ T5336] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  277.808883][ T5336] cp210x 4-1:0.0: device disconnected
[  277.827035][ T5724] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  277.873526][ T5724] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  277.924077][ T5724] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  277.961263][ T5724] usb 6-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00
[  277.980762][ T5724] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.084639][ T5724] usb 6-1: config 0 descriptor??
[  279.185744][ T5724] playstation 0003:054C:09CC.0025: unknown main item tag 0x0
[  279.217172][ T5724] playstation 0003:054C:09CC.0025: unknown main item tag 0x0
[  279.287188][ T5724] playstation 0003:054C:09CC.0025: unknown main item tag 0x0
[  279.331460][ T5724] playstation 0003:054C:09CC.0025: unknown main item tag 0x0
[  279.339164][ T5724] playstation 0003:054C:09CC.0025: unknown main item tag 0x0
[  279.356499][ T5724] playstation 0003:054C:09CC.0025: unknown main item tag 0x0
[  279.383910][ T5724] playstation 0003:054C:09CC.0025: hidraw0: USB HID vff.fd Device [HID 054c:09cc] on usb-dummy_hcd.5-1/input0
[  279.504835][ T5724] playstation 0003:054C:09CC.0025: Invalid reportID received, expected 18 got 56
[  279.553823][ T5724] playstation 0003:054C:09CC.0025: Failed to retrieve DualShock4 pairing info: -22
[  279.588210][ T5724] playstation 0003:054C:09CC.0025: Failed to get MAC address from DualShock4
[  279.610024][ T5724] playstation 0003:054C:09CC.0025: Failed to create dualshock4.
[  279.703011][ T5724] playstation 0003:054C:09CC.0025: probe with driver playstation failed with error -22
[  280.559479][ T5724] usb 6-1: USB disconnect, device number 12
[  280.748264][ T8650] fido_id[8650]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  280.888178][ T5747] libceph: connect (1)[c::]:6789 error -101
[  280.915430][ T5747] libceph: mon0 (1)[c::]:6789 connect error
[  281.311575][ T5762] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  281.346956][ T8664] ceph: No mds server is up or the cluster is laggy
[  281.593880][ T5762] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  281.824733][ T5762] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  281.843828][ T5762] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  281.853293][ T5762] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  281.873140][ T5762] usb 4-1: SerialNumber: syz
[  282.340401][ T5762] usb 4-1: 0:2 : does not exist
[  283.276414][ T5762] usb 4-1: USB disconnect, device number 11
[  283.441151][ T5747] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  283.651207][ T5747] usb 6-1: config 0 has an invalid interface number: 255 but max is 0
[  283.688159][ T5939] udevd[5939]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  283.739891][ T5747] usb 6-1: config 0 has no interface number 0
[  284.314437][ T5747] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  284.337856][ T5759] libceph: connect (1)[c::]:6789 error -101
[  284.342353][ T5747] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  284.370565][ T5759] libceph: mon0 (1)[c::]:6789 connect error
[  284.487035][ T5747] usb 6-1: config 0 interface 255 has no altsetting 0
[  284.495616][ T5747] usb 6-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  284.509055][ T5747] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.529326][ T5747] usb 6-1: config 0 descriptor??
[  284.575557][ T5747] ums-realtek 6-1:0.255: USB Mass Storage device detected
[  284.606862][ T8721] ceph: No mds server is up or the cluster is laggy
[  284.645746][ T5759] libceph: connect (1)[c::]:6789 error -101
[  284.661312][ T5759] libceph: mon0 (1)[c::]:6789 connect error
[  284.866709][ T5747] usb 6-1: USB disconnect, device number 13
[  285.092736][ T5759] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  285.265625][ T5759] usb 1-1: Using ep0 maxpacket: 16
[  285.285875][ T5759] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  285.309306][ T5759] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  285.348062][ T5759] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  285.377591][ T5759] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.417878][ T5759] usb 1-1: Product: syz
[  285.432396][ T5759] usb 1-1: Manufacturer: syz
[  285.458243][ T5759] usb 1-1: SerialNumber: syz
[  285.495630][ T5759] usb 1-1: 0:2 : does not exist
[  285.604585][ T8748] syzkaller0: tun_chr_ioctl cmd 1074025677
[  285.650353][ T8748] syzkaller0: linktype set to 773
[  285.709185][ T5759] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  285.935259][ T5759] usb 1-1: USB disconnect, device number 14
[  286.851258][ T5939] udevd[5939]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  287.162532][ T8776] loop2: detected capacity change from 0 to 64
[  287.236581][ T8780] loop0: detected capacity change from 0 to 512
[  287.337967][ T8778] loop5: detected capacity change from 0 to 2048
[  287.441681][ T8780] EXT4-fs (loop0): 1 orphan inode deleted
[  287.468784][ T6316] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  287.470358][ T8778] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  287.530902][ T8780] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  287.549307][ T6316] EXT4-fs error (device loop0): ext4_release_dquot:7077: comm kworker/u8:13: Failed to release dquot type 1
[  287.570798][ T6316] loop0: lost filesystem error report for type 5 error -117
[  287.650147][ T8780] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  287.879507][ T5618] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  288.086645][ T5336] hid-generic 0005:0007:0007.0026: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa
[  288.259440][ T5603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.821126][ T5746] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  289.843412][ T8829] netlink: 40 bytes leftover after parsing attributes in process `syz.2.897'.
[  289.908101][ T8832] netlink: 40 bytes leftover after parsing attributes in process `syz.2.897'.
[  290.014014][ T5746] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  290.046287][ T5746] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  290.082709][ T5746] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  290.100205][ T5746] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  290.137558][ T5746] usb 4-1: Product: syz
[  290.162538][ T5746] usb 4-1: Manufacturer: syz
[  290.178641][ T5746] usb 4-1: SerialNumber: syz
[  290.214980][ T5746] usb 4-1: config 0 descriptor??
[  290.230983][ T8820] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  290.246396][ T8820] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  290.295774][ T8841] loop2: detected capacity change from 0 to 1024
[  290.334896][ T8841] EXT4-fs: Ignoring removed bh option
[  290.355444][ T8844] loop6: detected capacity change from 0 to 256
[  290.364111][ T8844] exfat: Deprecated parameter 'utf8'
[  290.369694][ T8844] exfat: Deprecated parameter 'namecase'
[  290.378154][ T8846] loop0: detected capacity change from 0 to 256
[  290.387750][ T8844] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x8d2f696c, utbl_chksum : 0xe619d30d)
[  290.408007][ T8841] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  290.437065][ T8846] exfat: Deprecated parameter 'utf8'
[  290.476626][ T8846] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d)
[  290.485849][ T8820] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  290.519434][ T8820] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  290.552268][   T30] audit: type=1800 audit(1786091196.875:30): pid=8841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.901" name="file2" dev="loop2" ino=16 res=0 errno=0
[  290.856422][ T5612] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  291.270512][ T5746] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID
[  291.969209][ T5746] usb 4-1: USB disconnect, device number 12
[  294.028334][ T5611] Bluetooth: hci2: link tx timeout
[  294.036684][ T5611] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  294.134034][ T5623] Bluetooth: hci2: link tx timeout
[  294.141412][ T5623] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  294.166851][ T5623] Bluetooth: hci2: link tx timeout
[  294.172996][ T5623] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  294.546896][ T5623] Bluetooth: hci2: link tx timeout
[  294.552157][ T5623] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  294.884576][ T5623] Bluetooth: hci2: link tx timeout
[  294.889732][ T5623] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  294.912745][ T5623] Bluetooth: hci2: link tx timeout
[  294.918001][ T5623] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  295.557734][ T5623] Bluetooth: hci2: link tx timeout
[  295.564131][ T5623] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  295.574257][ T5623] Bluetooth: hci2: link tx timeout
[  295.579475][ T5623] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  295.754922][ T5623] Bluetooth: hci2: link tx timeout
[  295.760139][ T5623] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  296.114490][ T5623] Bluetooth: hci2: command 0x0406 tx timeout
[  316.432886][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  316.440603][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  349.231208][ T5611] Bluetooth: hci5: command 0x0406 tx timeout
[  356.327191][ T5623] Bluetooth: hci2: link tx timeout
[  356.332424][ T5623] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  358.351440][ T5623] Bluetooth: hci2: command 0x0406 tx timeout
[  377.876169][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  377.884410][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  439.313081][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  439.320802][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  449.551271][   T31] INFO: task kworker/u8:5:77 blocked in I/O wait for more than 143 seconds.
[  449.562492][   T31]       Not tainted syzkaller #0
[  449.569798][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  449.578590][   T31] task:kworker/u8:5    state:D stack:21576 pid:77    tgid:77    ppid:2      task_flags:0x4248060 flags:0x00080000
[  449.592329][   T31] Workqueue: writeback wb_workfn (flush-8:0)
[  449.598404][   T31] Call Trace:
[  449.603541][   T31]  <TASK>
[  449.606819][   T31]  __schedule+0x17d9/0x56c0
[  449.611417][   T31]  ? __pfx_blk_mq_flush_plug_list+0x10/0x10
[  449.617363][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  449.623101][   T31]  ? __blk_flush_plug+0x416/0x4d0
[  449.628164][   T31]  ? __pfx___schedule+0x10/0x10
[  449.633778][   T31]  ? schedule+0x90/0x2b0
[  449.638080][   T31]  schedule+0x164/0x2b0
[  449.642320][   T31]  io_schedule+0x7f/0xd0
[  449.646585][   T31]  rq_qos_wait+0x266/0x360
[  449.651080][   T31]  ? __pfx_wbt_inflight_cb+0x10/0x10
[  449.656403][   T31]  ? __pfx_wbt_cleanup_cb+0x10/0x10
[  449.663315][   T31]  ? __pfx_rq_qos_wait+0x10/0x10
[  449.668351][   T31]  ? __pfx_rq_qos_wake_function+0x10/0x10
[  449.674161][   T31]  ? __pfx_wbt_inflight_cb+0x10/0x10
[  449.679475][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  449.685187][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  449.690853][   T31]  wbt_wait+0x326/0x550
[  449.695119][   T31]  ? __pfx_wbt_wait+0x10/0x10
[  449.699819][   T31]  ? __pfx_dd_bio_merge+0x10/0x10
[  449.705303][   T31]  ? __pfx_wbt_wait+0x10/0x10
[  449.710045][   T31]  __rq_qos_throttle+0x6b/0xb0
[  449.714996][   T31]  blk_mq_submit_bio+0x1522/0x2a40
[  449.720164][   T31]  ? blk_mq_submit_bio+0x306/0x2a40
[  449.725493][   T31]  ? __pfx_blk_mq_submit_bio+0x10/0x10
[  449.731117][   T31]  ? blk_cgroup_bio_start+0x5d4/0x670
[  449.736565][   T31]  ? __pfx_blk_cgroup_bio_start+0x10/0x10
[  449.742383][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  449.748035][   T31]  ? __submit_bio+0x7e/0x340
[  449.752723][   T31]  submit_bio_noacct_nocheck+0x2f4/0xa40
[  449.758390][   T31]  ? __pfx_submit_bio_noacct_nocheck+0x10/0x10
[  449.766072][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  449.771799][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  449.777455][   T31]  ? submit_bio_noacct+0xf7b/0x1b20
[  449.782722][   T31]  ? blkcg_set_ioprio+0x16b/0x2a0
[  449.787808][   T31]  ext4_bio_write_folio+0xfb1/0x20b0
[  449.793200][   T31]  mpage_process_page_bufs+0x6b2/0x8c0
[  449.798699][   T31]  mpage_prepare_extent_to_map+0xe0e/0x1690
[  449.804694][   T31]  ? wb_writeback+0x42f/0xad0
[  449.809392][   T31]  ? wb_workfn+0x980/0x10f0
[  449.814433][   T31]  ? __pfx_mpage_prepare_extent_to_map+0x10/0x10
[  449.820848][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  449.826545][   T31]  ? kmem_cache_alloc_noprof+0x308/0x5f0
[  449.832249][   T31]  ? kmem_cache_alloc_noprof+0x150/0x5f0
[  449.837885][   T31]  ? ext4_init_io_end+0x29/0x130
[  449.842900][   T31]  ? ext4_init_io_end+0x29/0x130
[  449.847886][   T31]  ext4_do_writepages+0xc36/0x47a0
[  449.853078][   T31]  ? blk_queue_exit+0x26/0x240
[  449.857888][   T31]  ? __lock_acquire+0x683/0x2cf0
[  449.863015][   T31]  ? __pfx_ext4_do_writepages+0x10/0x10
[  449.869992][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  449.875734][   T31]  ? __lock_acquire+0x683/0x2cf0
[  449.880707][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  449.886431][   T31]  ? filemap_get_folios_tag+0x639/0x720
[  449.892075][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  449.897764][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  449.903502][   T31]  ? __lock_acquire+0x683/0x2cf0
[  449.908481][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  449.914204][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  449.919872][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  449.925914][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  449.931642][   T31]  ext4_writepages+0x241/0x3b0
[  449.936453][   T31]  ? __pfx_ext4_writepages+0x10/0x10
[  449.941818][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  449.947489][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  449.953230][   T31]  ? do_raw_spin_unlock+0xf5/0x210
[  449.958402][   T31]  ? __pfx_ext4_writepages+0x10/0x10
[  449.963754][   T31]  do_writepages+0x338/0x560
[  449.969934][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  449.975673][   T31]  ? reacquire_held_locks+0x104/0x190
[  449.981177][   T31]  ? writeback_sb_inodes+0x450/0x1b00
[  449.986606][   T31]  __writeback_single_inode+0x12e/0xf90
[  449.992304][   T31]  writeback_sb_inodes+0x9de/0x1b00
[  449.997552][   T31]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  450.003293][   T31]  ? __pfx_down_read_trylock+0x10/0x10
[  450.008782][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  450.014475][   T31]  __writeback_inodes_wb+0x114/0x240
[  450.019799][   T31]  wb_writeback+0x42f/0xad0
[  450.024392][   T31]  ? queue_io+0x251/0x470
[  450.028755][   T31]  ? __pfx_wb_writeback+0x10/0x10
[  450.034590][   T31]  ? do_raw_spin_lock+0x12b/0x2f0
[  450.039688][   T31]  ? process_scheduled_works+0xa20/0x14e0
[  450.045526][   T31]  wb_workfn+0x980/0x10f0
[  450.049895][   T31]  ? __pfx_wb_workfn+0x10/0x10
[  450.054760][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  450.060417][   T31]  ? do_raw_spin_lock+0x12b/0x2f0
[  450.065506][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  450.072712][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  450.078384][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  450.084091][   T31]  ? do_raw_spin_unlock+0xf5/0x210
[  450.089234][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  450.094960][   T31]  ? rcu_is_watching+0x15/0xb0
[  450.099759][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  450.105499][   T31]  ? process_scheduled_works+0xa20/0x14e0
[  450.111605][   T31]  process_scheduled_works+0xa8e/0x14e0
[  450.117230][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  450.123297][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  450.128970][   T31]  ? assign_work+0x3cf/0x5d0
[  450.133647][   T31]  worker_thread+0xa47/0xfb0
[  450.138290][   T31]  kthread+0x388/0x470
[  450.142774][   T31]  ? __pfx_worker_thread+0x10/0x10
[  450.147936][   T31]  ? __pfx_kthread+0x10/0x10
[  450.152641][   T31]  ret_from_fork+0x514/0xb70
[  450.157267][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  450.162470][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  450.168131][   T31]  ? __switch_to+0xc89/0x1420
[  450.174433][   T31]  ? __pfx_kthread+0x10/0x10
[  450.179108][   T31]  ret_from_fork_asm+0x1a/0x30
[  450.183989][   T31]  </TASK>
[  450.187141][   T31] INFO: task jbd2/sda1-8:4932 blocked in I/O wait for more than 143 seconds.
[  450.196769][   T31]       Not tainted syzkaller #0
[  450.201787][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  450.210462][   T31] task:jbd2/sda1-8     state:D stack:25080 pid:4932  tgid:4932  ppid:2      task_flags:0x240040 flags:0x00080000
[  450.222504][   T31] Call Trace:
[  450.225791][   T31]  <TASK>
[  450.228715][   T31]  __schedule+0x17d9/0x56c0
[  450.233320][   T31]  ? __pfx___schedule+0x10/0x10
[  450.238224][   T31]  ? schedule+0x90/0x2b0
[  450.242653][   T31]  schedule+0x164/0x2b0
[  450.246873][   T31]  io_schedule+0x7f/0xd0
[  450.251672][   T31]  bit_wait_io+0x11/0xd0
[  450.255978][   T31]  __wait_on_bit+0xac/0x300
[  450.260488][   T31]  ? __pfx_bit_wait_io+0x10/0x10
[  450.265526][   T31]  out_of_line_wait_on_bit+0x13b/0x190
[  450.271080][   T31]  ? __pfx_bit_wait_io+0x10/0x10
[  450.277465][   T31]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  450.283582][   T31]  ? __pfx_wake_bit_function+0x10/0x10
[  450.289076][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  450.294776][   T31]  ? __wait_on_buffer+0xe/0x80
[  450.299585][   T31]  jbd2_journal_commit_transaction+0x2f1d/0x5b70
[  450.306046][   T31]  ? __pfx_jbd2_journal_commit_transaction+0x10/0x10
[  450.312806][   T31]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  450.318190][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  450.323877][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  450.329579][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  450.335290][   T31]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  450.341205][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  450.346961][   T31]  ? lockdep_hardirqs_on+0x7a/0x110
[  450.352442][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  450.358296][   T31]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  450.364620][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  450.370329][   T31]  ? __timer_delete_sync+0x4a3/0x520
[  450.375713][   T31]  kjournald2+0x3bc/0x750
[  450.381575][   T31]  ? __pfx_kjournald2+0x10/0x10
[  450.386523][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  450.392249][   T31]  ? __pfx_autoremove_wake_function+0x10/0x10
[  450.398396][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  450.404105][   T31]  ? __kthread_parkme+0x71/0x1f0
[  450.409099][   T31]  ? __kthread_parkme+0x196/0x1f0
[  450.414245][   T31]  kthread+0x388/0x470
[  450.418387][   T31]  ? __pfx_kjournald2+0x10/0x10
[  450.423313][   T31]  ? __pfx_kthread+0x10/0x10
[  450.427934][   T31]  ret_from_fork+0x514/0xb70
[  450.432579][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  450.437718][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  450.443449][   T31]  ? __switch_to+0xc89/0x1420
[  450.448145][   T31]  ? __pfx_kthread+0x10/0x10
[  450.452808][   T31]  ret_from_fork_asm+0x1a/0x30
[  450.457610][   T31]  </TASK>
[  450.460650][   T31] INFO: task syz-executor:5590 blocked in I/O wait for more than 144 seconds.
[  450.469592][   T31]       Not tainted syzkaller #0
[  450.474944][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  450.485174][   T31] task:syz-executor    state:D stack:21280 pid:5590  tgid:5590  ppid:5589   task_flags:0x440100 flags:0x00080800
[  450.497221][   T31] Call Trace:
[  450.500519][   T31]  <TASK>
[  450.503521][   T31]  __schedule+0x17d9/0x56c0
[  450.508134][   T31]  ? __pfx___schedule+0x10/0x10
[  450.513412][   T31]  ? schedule+0x90/0x2b0
[  450.517709][   T31]  schedule+0x164/0x2b0
[  450.521958][   T31]  io_schedule+0x7f/0xd0
[  450.526223][   T31]  bit_wait_io+0x11/0xd0
[  450.530469][   T31]  __wait_on_bit+0xac/0x300
[  450.535066][   T31]  ? __pfx_bit_wait_io+0x10/0x10
[  450.540026][   T31]  out_of_line_wait_on_bit+0x13b/0x190
[  450.545700][   T31]  ? __pfx_bit_wait_io+0x10/0x10
[  450.550662][   T31]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  450.556747][   T31]  ? __pfx_wake_bit_function+0x10/0x10
[  450.562279][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  450.567934][   T31]  do_get_write_access+0x661/0x1080
[  450.573218][   T31]  jbd2_journal_get_write_access+0x1d6/0x230
[  450.579231][   T31]  __ext4_journal_get_write_access+0x1c3/0x590
[  450.587086][   T31]  ? __pfx___ext4_journal_get_write_access+0x10/0x10
[  450.593963][   T31]  ext4_reserve_inode_write+0x294/0x360
[  450.599575][   T31]  __ext4_mark_inode_dirty+0x13e/0x700
[  450.605109][   T31]  ext4_dirty_inode+0xd0/0x110
[  450.609896][   T31]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  450.615388][   T31]  __mark_inode_dirty+0x3a8/0x13b0
[  450.620555][   T31]  file_update_time_flags+0x3ee/0x4a0
[  450.626073][   T31]  ext4_page_mkwrite+0x224/0x1140
[  450.631173][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  450.636818][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  450.642575][   T31]  ? __pfx_ext4_page_mkwrite+0x10/0x10
[  450.648093][   T31]  ? __lock_acquire+0x683/0x2cf0
[  450.653106][   T31]  do_page_mkwrite+0x147/0x310
[  450.657900][   T31]  do_wp_page+0x1973/0x4c70
[  450.662479][   T31]  ? __pfx_do_wp_page+0x10/0x10
[  450.667343][   T31]  ? do_raw_spin_lock+0x12b/0x2f0
[  450.672711][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  450.678398][   T31]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  450.685533][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  450.691597][   T31]  handle_mm_fault+0x1490/0x3080
[  450.696592][   T31]  ? handle_mm_fault+0xec/0x3080
[  450.701632][   T31]  ? __pfx_handle_mm_fault+0x10/0x10
[  450.706938][   T31]  ? lock_vma_under_rcu+0x45a/0x500
[  450.712215][   T31]  ? __pfx_set_user_sigmask+0x10/0x10
[  450.717626][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  450.723329][   T31]  do_user_addr_fault+0xa4d/0x1340
[  450.728484][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  450.734179][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  450.739853][   T31]  ? trace_page_fault_user+0x84/0x1e0
[  450.745348][   T31]  exc_page_fault+0x6a/0xc0
[  450.749891][   T31]  asm_exc_page_fault+0x26/0x30
[  450.754876][   T31] RIP: 0033:0x7f5c5107c662
[  450.759313][   T31] RSP: 002b:00007ffe6426c8a0 EFLAGS: 00010212
[  450.765435][   T31] RAX: 00007f5c4f03c000 RBX: 0000555556d51c60 RCX: 0000000000000002
[  450.773451][   T31] RDX: 0000000000000320 RSI: 0000555556d49b08 RDI: 0000000000000004
[  450.781467][   T31] RBP: 00007ffe6426cda0 R08: 0000555556d49bb8 R09: 00000000000000a1
[  450.790836][   T31] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffe6426cbe0
[  450.798883][   T31] R13: 00007ffe6426c9d0 R14: 585858582e7a7973 R15: 00007ffe6426c920
[  450.807164][   T31]  </TASK>
[  450.810273][   T31] INFO: task syz.4.887:8801 blocked in I/O wait for more than 144 seconds.
[  450.819832][   T31]       Not tainted syzkaller #0
[  450.824808][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  450.834053][   T31] task:syz.4.887       state:D stack:22920 pid:8801  tgid:8800  ppid:5602   task_flags:0x400940 flags:0x00080002
[  450.846051][   T31] Call Trace:
[  450.849333][   T31]  <TASK>
[  450.852407][   T31]  __schedule+0x17d9/0x56c0
[  450.856980][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  450.862682][   T31]  ? __blk_flush_plug+0x416/0x4d0
[  450.867747][   T31]  ? __pfx___schedule+0x10/0x10
[  450.872689][   T31]  ? schedule+0x90/0x2b0
[  450.876965][   T31]  schedule+0x164/0x2b0
[  450.881188][   T31]  io_schedule+0x7f/0xd0
[  450.885495][   T31]  folio_wait_bit_common+0x836/0xbc0
[  450.892351][   T31]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  450.898261][   T31]  ? __pfx_wake_page_function+0x10/0x10
[  450.903893][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  450.909566][   T31]  ? rcu_is_watching+0x15/0xb0
[  450.914686][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  450.920355][   T31]  ? trace_folio_wait_writeback+0x81/0x1f0
[  450.926274][   T31]  folio_wait_writeback+0xb0/0x100
[  450.931459][   T31]  shrink_folio_list+0x4463/0x5330
[  450.936603][   T31]  ? __lock_acquire+0x683/0x2cf0
[  450.941649][   T31]  ? __pfx_shrink_folio_list+0x10/0x10
[  450.947164][   T31]  ? __pfx___css_rstat_updated+0x10/0x10
[  450.952845][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  450.958505][   T31]  ? __lock_acquire+0x683/0x2cf0
[  450.963547][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  450.969244][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  450.974947][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  450.980603][   T31]  ? try_to_inc_min_seq+0x56a/0x750
[  450.985881][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  450.993680][   T31]  ? evict_folios+0x257/0x49e0
[  450.998477][   T31]  evict_folios+0x3821/0x49e0
[  451.003273][   T31]  ? evict_folios+0x257/0x49e0
[  451.008058][   T31]  ? __pfx_evict_folios+0x10/0x10
[  451.013422][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  451.019133][   T31]  try_to_shrink_lruvec+0xb4f/0xed0
[  451.024700][   T31]  ? __pfx_try_to_shrink_lruvec+0x10/0x10
[  451.030454][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  451.036122][   T31]  ? blk_start_plug+0x6e/0x1b0
[  451.040904][   T31]  shrink_lruvec+0x554/0x2a60
[  451.045703][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  451.051478][   T31]  ? lock_acquire+0x106/0x350
[  451.056179][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  451.061866][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  451.067520][   T31]  ? is_bpf_text_address+0x26/0x2b0
[  451.073145][   T31]  ? __pfx_shrink_lruvec+0x10/0x10
[  451.078316][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  451.084005][   T31]  ? __lock_acquire+0x683/0x2cf0
[  451.088981][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  451.096333][   T31]  ? __lock_acquire+0x683/0x2cf0
[  451.101361][   T31]  ? rcu_is_watching+0x15/0xb0
[  451.106161][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  451.111851][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  451.117517][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  451.123270][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  451.128931][   T31]  ? page_counter_calculate_protection+0x188/0x470
[  451.135768][   T31]  ? mem_cgroup_iter+0x3b/0x440
[  451.140637][   T31]  shrink_node+0xa9b/0x3b60
[  451.145234][   T31]  ? __pfx_shrink_node+0x10/0x10
[  451.150198][   T31]  ? queue_work_on+0x117/0x1d0
[  451.155130][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  451.160796][   T31]  ? lockdep_hardirqs_on+0x7a/0x110
[  451.166029][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  451.171713][   T31]  ? _raw_spin_unlock+0x28/0x50
[  451.176583][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  451.182273][   T31]  do_try_to_free_pages+0x6a3/0x1990
[  451.187611][   T31]  ? __pfx_do_try_to_free_pages+0x10/0x10
[  451.193406][   T31]  ? trace_contention_end+0x3d/0x140
[  451.200121][   T31]  try_to_free_mem_cgroup_pages+0x30d/0x830
[  451.206106][   T31]  ? mem_cgroup_resize_max+0x2d6/0x3a0
[  451.211648][   T31]  ? __pfx_try_to_free_mem_cgroup_pages+0x10/0x10
[  451.218119][   T31]  ? __mutex_unlock_slowpath+0x731/0x900
[  451.223840][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  451.229525][   T31]  ? page_counter_set_max+0x65/0x170
[  451.234899][   T31]  mem_cgroup_resize_max+0x2f5/0x3a0
[  451.240245][   T31]  mem_cgroup_write+0x223/0x290
[  451.245564][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  451.251330][   T31]  ? __pfx_mem_cgroup_write+0x10/0x10
[  451.256737][   T31]  ? kernfs_root+0x1c/0x230
[  451.261380][   T31]  ? kernfs_root+0x1c/0x230
[  451.265945][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  451.271670][   T31]  ? kernfs_root+0x1ea/0x230
[  451.276291][   T31]  ? __pfx_mem_cgroup_write+0x10/0x10
[  451.281715][   T31]  cgroup_file_write+0x331/0x8f0
[  451.286680][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  451.292386][   T31]  ? __pfx_cgroup_file_write+0x10/0x10
[  451.299752][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  451.305517][   T31]  ? __kmalloc_noprof+0x396/0x720
[  451.310571][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  451.316289][   T31]  ? __kmalloc_noprof+0x1ad/0x720
[  451.321411][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  451.327075][   T31]  ? __pfx_cgroup_file_write+0x10/0x10
[  451.332588][   T31]  kernfs_fop_write_iter+0x3a4/0x540
[  451.337911][   T31]  vfs_write+0x612/0xba0
[  451.342282][   T31]  ? __pfx_vfs_write+0x10/0x10
[  451.347085][   T31]  ? __pfx_do_futex+0x10/0x10
[  451.352228][   T31]  ? kmem_cache_free+0x182/0x650
[  451.357273][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  451.362997][   T31]  ksys_write+0x150/0x270
[  451.367412][   T31]  ? __pfx_ksys_write+0x10/0x10
[  451.372409][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.378528][   T31]  do_syscall_64+0x174/0x580
[  451.383216][   T31]  ? trace_irq_disable+0x3b/0x140
[  451.388281][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.394345][   T31] RIP: 0033:0x7f3ff799e0d9
[  451.398852][   T31] RSP: 002b:00007f3ff879c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  451.409159][   T31] RAX: ffffffffffffffda RBX: 00007f3ff7c25fa0 RCX: 00007f3ff799e0d9
[  451.417239][   T31] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 000000000000000a
[  451.425286][   T31] RBP: 00007f3ff7a35024 R08: 0000000000000000 R09: 0000000000000000
[  451.433350][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  451.441408][   T31] R13: 00007f3ff7c26038 R14: 00007f3ff7c25fa0 R15: 00007ffdb3654e48
[  451.449427][   T31]  </TASK>
[  451.452537][   T31] INFO: task syz.6.909:8871 blocked in I/O wait for more than 145 seconds.
[  451.461554][   T31]       Not tainted syzkaller #0
[  451.466562][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  451.475552][   T31] task:syz.6.909       state:D stack:25640 pid:8871  tgid:8871  ppid:8010   task_flags:0x440040 flags:0x00080002
[  451.487993][   T31] Call Trace:
[  451.491380][   T31]  <TASK>
[  451.494351][   T31]  __schedule+0x17d9/0x56c0
[  451.498906][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  451.506267][   T31]  ? __pfx___schedule+0x10/0x10
[  451.511256][   T31]  ? schedule+0x90/0x2b0
[  451.515532][   T31]  schedule+0x164/0x2b0
[  451.519719][   T31]  io_schedule+0x7f/0xd0
[  451.524046][   T31]  bit_wait_io+0x11/0xd0
[  451.528326][   T31]  __wait_on_bit+0xac/0x300
[  451.532948][   T31]  ? __pfx_bit_wait_io+0x10/0x10
[  451.537965][   T31]  out_of_line_wait_on_bit+0x13b/0x190
[  451.543507][   T31]  ? __pfx_bit_wait_io+0x10/0x10
[  451.548477][   T31]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  451.554840][   T31]  ? __pfx_wake_bit_function+0x10/0x10
[  451.560364][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  451.566087][   T31]  do_get_write_access+0x661/0x1080
[  451.571750][   T31]  jbd2_journal_get_write_access+0x1d6/0x230
[  451.577899][   T31]  __ext4_journal_get_write_access+0x1c3/0x590
[  451.584152][   T31]  ? __pfx___ext4_journal_get_write_access+0x10/0x10
[  451.590873][   T31]  ext4_reserve_inode_write+0x294/0x360
[  451.596518][   T31]  __ext4_mark_inode_dirty+0x13e/0x700
[  451.602075][   T31]  ext4_dirty_inode+0xd0/0x110
[  451.608418][   T31]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  451.613896][   T31]  __mark_inode_dirty+0x3a8/0x13b0
[  451.619058][   T31]  file_update_time_flags+0x3ee/0x4a0
[  451.624515][   T31]  ext4_page_mkwrite+0x224/0x1140
[  451.629588][   T31]  ? __pfx_filemap_fault+0x10/0x10
[  451.634798][   T31]  ? __pfx_ext4_page_mkwrite+0x10/0x10
[  451.640290][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  451.645999][   T31]  ? lruvec_stat_mod_folio+0x28b/0x3e0
[  451.651560][   T31]  do_page_mkwrite+0x147/0x310
[  451.656371][   T31]  do_pte_missing+0x757/0x34b0
[  451.661272][   T31]  ? __pfx___thp_vma_allowable_orders+0x10/0x10
[  451.667556][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  451.673282][   T31]  handle_mm_fault+0x1b36/0x3080
[  451.678248][   T31]  ? handle_mm_fault+0xec/0x3080
[  451.683551][   T31]  ? __pfx_handle_mm_fault+0x10/0x10
[  451.688878][   T31]  ? lock_vma_under_rcu+0x45a/0x500
[  451.694124][   T31]  ? __pfx_do_futex+0x10/0x10
[  451.698859][   T31]  do_user_addr_fault+0xa4d/0x1340
[  451.704042][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  451.711535][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  451.717263][   T31]  ? trace_page_fault_user+0x84/0x1e0
[  451.722757][   T31]  exc_page_fault+0x6a/0xc0
[  451.727286][   T31]  asm_exc_page_fault+0x26/0x30
[  451.732213][   T31] RIP: 0033:0x7f828de72789
[  451.736661][   T31] RSP: 002b:00007fffed6c78f0 EFLAGS: 00010202
[  451.742792][   T31] RAX: 0000001b31224000 RBX: 0000000000000000 RCX: 00000000003ffde8
[  451.750786][   T31] RDX: 0000001b31223ffc RSI: 00000000003ffde8 RDI: 00007f828ed55700
[  451.758841][   T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f828e212000
[  451.766884][   T31] R10: 00007f828ed55700 R11: 0000000000000000 R12: 0000000000000000
[  451.774976][   T31] R13: 000000000000014a R14: ffffffff816cf70e R15: 00007f828ed55720
[  451.783014][   T31]  ? fpregs_assert_state_consistent+0xee/0x150
[  451.789217][   T31]  </TASK>
[  451.792681][   T31] INFO: task syz.5.910:8880 blocked in I/O wait for more than 145 seconds.
[  451.801375][   T31]       Not tainted syzkaller #0
[  451.806318][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  451.816550][   T31] task:syz.5.910       state:D stack:27280 pid:8880  tgid:8880  ppid:5618   task_flags:0x440040 flags:0x00080002
[  451.828577][   T31] Call Trace:
[  451.831919][   T31]  <TASK>
[  451.834861][   T31]  __schedule+0x17d9/0x56c0
[  451.839395][   T31]  ? __pfx___schedule+0x10/0x10
[  451.844337][   T31]  ? schedule+0x90/0x2b0
[  451.848607][   T31]  schedule+0x164/0x2b0
[  451.852861][   T31]  io_schedule+0x7f/0xd0
[  451.857147][   T31]  bit_wait_io+0x11/0xd0
[  451.861531][   T31]  __wait_on_bit+0xac/0x300
[  451.866068][   T31]  ? __pfx_bit_wait_io+0x10/0x10
[  451.871099][   T31]  out_of_line_wait_on_bit+0x13b/0x190
[  451.876631][   T31]  ? __pfx_bit_wait_io+0x10/0x10
[  451.881648][   T31]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  451.887664][   T31]  ? __pfx_wake_bit_function+0x10/0x10
[  451.893213][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  451.898870][   T31]  do_get_write_access+0x661/0x1080
[  451.904464][   T31]  jbd2_journal_get_write_access+0x1d6/0x230
[  451.910498][   T31]  __ext4_journal_get_write_access+0x1c3/0x590
[  451.918340][   T31]  ? __pfx___ext4_journal_get_write_access+0x10/0x10
[  451.925099][   T31]  ext4_reserve_inode_write+0x294/0x360
[  451.930665][   T31]  __ext4_mark_inode_dirty+0x13e/0x700
[  451.937126][   T31]  ext4_dirty_inode+0xd0/0x110
[  451.941975][   T31]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  451.947421][   T31]  __mark_inode_dirty+0x3a8/0x13b0
[  451.952610][   T31]  ? mnt_get_write_access+0x213/0x280
[  451.958014][   T31]  ? ext4_file_mmap_prepare+0x277/0x450
[  451.963633][   T31]  touch_atime+0x565/0x670
[  451.968079][   T31]  ? ext4_file_mmap_prepare+0x277/0x450
[  451.973726][   T31]  ext4_file_mmap_prepare+0x277/0x450
[  451.979122][   T31]  mmap_region+0xe5a/0x2310
[  451.983730][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  451.989399][   T31]  ? __lock_acquire+0x683/0x2cf0
[  451.994443][   T31]  ? __pfx_mmap_region+0x10/0x10
[  451.999441][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  452.005164][   T31]  ? __lock_acquire+0x683/0x2cf0
[  452.010152][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  452.017708][   T31]  ? __lock_acquire+0x683/0x2cf0
[  452.022850][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  452.028507][   T31]  ? mtree_range_walk+0x707/0x8b0
[  452.033997][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  452.039681][   T31]  ? mt_find+0x5ff/0x630
[  452.044002][   T31]  ? mt_find+0x186/0x630
[  452.048271][   T31]  ? __pfx_mt_find+0x10/0x10
[  452.052926][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  452.058574][   T31]  ? security_mmap_addr+0x71/0x240
[  452.063746][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  452.069399][   T31]  ? shmem_mapping+0xd/0x50
[  452.073974][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  452.079623][   T31]  ? memfd_check_seals_mmap+0xc5/0x200
[  452.085175][   T31]  do_mmap+0xc3b/0x10c0
[  452.089365][   T31]  ? __pfx_do_mmap+0x10/0x10
[  452.093999][   T31]  ? down_write_killable+0x180/0x240
[  452.099316][   T31]  ? __pfx_down_write_killable+0x10/0x10
[  452.105048][   T31]  ? apparmor_mmap_file+0x2da/0x3e0
[  452.110300][   T31]  vm_mmap_pgoff+0x272/0x4e0
[  452.115291][   T31]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  452.121941][   T31]  ? __fget_files+0x2a/0x420
[  452.126635][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  452.132685][   T31]  ? __fget_files+0x3a2/0x420
[  452.137418][   T31]  ? __fget_files+0x2a/0x420
[  452.142126][   T31]  ksys_mmap_pgoff+0x4dc/0x760
[  452.146935][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  452.153053][   T31]  do_syscall_64+0x174/0x580
[  452.157671][   T31]  ? trace_irq_disable+0x3b/0x140
[  452.162779][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  452.168691][   T31] RIP: 0033:0x7f108159de42
[  452.173226][   T31] RSP: 002b:00007ffcc6fc0478 EFLAGS: 00000206 ORIG_RAX: 0000000000000009
[  452.181709][   T31] RAX: ffffffffffffffda RBX: 0000001b32d64000 RCX: 00007f108159de42
[  452.189702][   T31] RDX: 0000000000000003 RSI: 00000000005c0000 RDI: 0000001b32d64000
[  452.198207][   T31] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000
[  452.206304][   T31] R10: 0000000000100001 R11: 0000000000000206 R12: 00000000000000ad
[  452.214342][   T31] R13: 00000000000927c0 R14: 0000000000047577 R15: 00007ffcc6fc0750
[  452.224163][   T31]  </TASK>
[  452.227223][   T31] 
[  452.227223][   T31] Showing all locks held in the system:
[  452.235938][   T31] 1 lock held by khungtaskd/31:
[  452.240835][   T31]  #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  452.250812][   T31] 4 locks held by kworker/u8:5/77:
[  452.256306][   T31]  #0: ffff88801fef9140 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  452.267649][   T31]  #1: ffffc9000203fc40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  452.280705][   T31]  #2: ffff8880338880d8 (&type->s_umount_key#32){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0
[  452.291521][   T31]  #3: ffff88803389ec18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0
[  452.302129][   T31] 2 locks held by getty/5359:
[  452.306794][   T31]  #0: ffff8880351ff0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  452.316660][   T31]  #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  452.328469][   T31] 3 locks held by syz-executor/5590:
[  452.333874][   T31]  #0: ffff888031fa9588 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500
[  452.343220][   T31]  #1: ffff888033888548 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x202/0x1140
[  452.353126][   T31]  #2: ffff888033c02938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fc3/0x2210
[  452.363284][   T31] 5 locks held by kworker/u8:11/6150:
[  452.368693][   T31] 3 locks held by syz.4.887/8801:
[  452.373762][   T31]  #0: ffff888033e8e450 (sb_writers#10){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  452.382871][   T31]  #1: ffff888079a25480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540
[  452.392698][   T31]  #2: ffff88807b0ec1e8 (kn->active#57){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540
[  452.402840][   T31] 3 locks held by syz.6.909/8871:
[  452.407845][   T31]  #0: ffff88802979f948 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500
[  452.417128][   T31]  #1: ffff888033888548 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x202/0x1140
[  452.428453][   T31]  #2: ffff888033c02938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fc3/0x2210
[  452.438335][   T31] 3 locks held by syz.5.910/8880:
[  452.443469][   T31]  #0: ffff88807b4f4378 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0
[  452.452960][   T31]  #1: ffff888033888450 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450
[  452.463116][   T31]  #2: ffff888033c02938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fc3/0x2210
[  452.473271][   T31] 
[  452.475641][   T31] =============================================
[  452.475641][   T31] 
[  452.484130][   T31] NMI backtrace for cpu 0
[  452.484153][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  452.484178][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  452.484190][   T31] Call Trace:
[  452.484198][   T31]  <TASK>
[  452.484207][   T31]  dump_stack_lvl+0xe8/0x150
[  452.484240][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[  452.484264][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  452.484294][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x380
[  452.484320][   T31]  sys_info+0x135/0x170
[  452.484338][   T31]  watchdog+0xfd7/0x1030
[  452.484369][   T31]  ? watchdog+0x1c7/0x1030
[  452.484398][   T31]  kthread+0x388/0x470
[  452.484426][   T31]  ? __pfx_watchdog+0x10/0x10
[  452.484447][   T31]  ? __pfx_kthread+0x10/0x10
[  452.484476][   T31]  ret_from_fork+0x514/0xb70
[  452.484506][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  452.484533][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  452.484556][   T31]  ? __switch_to+0xc89/0x1420
[  452.484589][   T31]  ? __pfx_kthread+0x10/0x10
[  452.484617][   T31]  ret_from_fork_asm+0x1a/0x30
[  452.484661][   T31]  </TASK>
[  452.484669][   T31] Sending NMI from CPU 0 to CPUs 1:
[  452.601527][    C1] NMI backtrace for cpu 1
[  452.601548][    C1] CPU: 1 UID: 0 PID: 6311 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full) 
[  452.601581][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  452.601597][    C1] Workqueue: events_unbound toggle_allocation_gate
[  452.601636][    C1] RIP: 0010:__sanitizer_cov_trace_const_cmp1+0x8/0x90
[  452.601667][    C1] Code: e9 98 3b 49 ff cc 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 15 68 aa a5 11 65 8b 0d 89 aa a5 11 81 e1 00 01 ff 00 74
[  452.601686][    C1] RSP: 0018:ffffc900101c7750 EFLAGS: 00000246
[  452.601704][    C1] RAX: ffffffff8bcfd495 RBX: 1ffff92002038f12 RCX: ffff88802c665d00
[  452.601723][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  452.601737][    C1] RBP: 0000000000000000 R08: ffff88802c665d00 R09: 0000000000000004
[  452.601752][    C1] R10: 0000000000000011 R11: 0000000000000000 R12: ffffc900101c7885
[  452.601768][    C1] R13: ffffc900101c7894 R14: ffffc900101c7860 R15: dffffc0000000000
[  452.601788][    C1] FS:  0000000000000000(0000) GS:ffff888125055000(0000) knlGS:0000000000000000
[  452.601807][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  452.601822][    C1] CR2: 000055d0f0af6168 CR3: 000000000e946000 CR4: 0000000000350ef0
[  452.601841][    C1] Call Trace:
[  452.601850][    C1]  <TASK>
[  452.601858][    C1]  insn_get_displacement+0xc5/0x990
[  452.601889][    C1]  ? insn_get_immediate+0x4d/0x11a0
[  452.601923][    C1]  insn_get_immediate+0x64/0x11a0
[  452.601956][    C1]  ? __kvmalloc_node_noprof+0x198/0x860
[  452.601988][    C1]  insn_decode+0x30e/0x4f0
[  452.602019][    C1]  ? __kvmalloc_node_noprof+0x189/0x860
[  452.602049][    C1]  __jump_label_patch+0x114/0x4a0
[  452.602083][    C1]  ? __pfx___jump_label_patch+0x10/0x10
[  452.602117][    C1]  ? __kvmalloc_node_noprof+0x189/0x860
[  452.602148][    C1]  ? __kvmalloc_node_noprof+0x198/0x860
[  452.602177][    C1]  ? __kvmalloc_node_noprof+0x18a/0x860
[  452.602213][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  452.602245][    C1]  arch_jump_label_transform_queue+0x69/0x110
[  452.602278][    C1]  __jump_label_update+0x189/0x370
[  452.602318][    C1]  static_key_disable_cpuslocked+0xc5/0x1a0
[  452.602352][    C1]  ? process_scheduled_works+0xa20/0x14e0
[  452.602377][    C1]  static_key_disable+0x1a/0x20
[  452.602408][    C1]  toggle_allocation_gate+0x1fe/0x290
[  452.602441][    C1]  ? __pfx_toggle_allocation_gate+0x10/0x10
[  452.602474][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  452.602506][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  452.602535][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  452.602568][    C1]  ? trace_workqueue_execute_start+0x7c/0x1d0
[  452.602593][    C1]  ? process_scheduled_works+0xa20/0x14e0
[  452.602618][    C1]  process_scheduled_works+0xa8e/0x14e0
[  452.602665][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  452.602695][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  452.602722][    C1]  ? assign_work+0x3cf/0x5d0
[  452.602750][    C1]  worker_thread+0xa47/0xfb0
[  452.602778][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  452.602813][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  452.602840][    C1]  ? __kthread_parkme+0x71/0x1f0
[  452.602875][    C1]  kthread+0x388/0x470
[  452.602907][    C1]  ? __pfx_worker_thread+0x10/0x10
[  452.602932][    C1]  ? __pfx_kthread+0x10/0x10
[  452.602964][    C1]  ret_from_fork+0x514/0xb70
[  452.602999][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  452.603030][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  452.603081][    C1]  ? __switch_to+0xc89/0x1420
[  452.603111][    C1]  ? __pfx_kthread+0x10/0x10
[  452.603143][    C1]  ret_from_fork_asm+0x1a/0x30
[  452.603191][    C1]  </TASK>
[  452.963863][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  452.970810][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  452.979914][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  452.989969][   T31] Call Trace:
[  452.993245][   T31]  <TASK>
[  452.996170][   T31]  vpanic+0x56c/0xa60
[  453.000160][   T31]  ? __pfx___schedule+0x10/0x10
[  453.005099][   T31]  ? __pfx_vpanic+0x10/0x10
[  453.009608][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  453.015247][   T31]  ? nmi_trigger_cpumask_backtrace+0x207/0x380
[  453.021416][   T31]  panic+0xc5/0xd0
[  453.025147][   T31]  ? __pfx_panic+0x10/0x10
[  453.029569][   T31]  ? preempt_schedule_common+0x82/0xd0
[  453.035032][   T31]  ? preempt_schedule_thunk+0x16/0x40
[  453.040415][   T31]  ? nmi_trigger_cpumask_backtrace+0x314/0x380
[  453.046592][   T31]  ? nmi_trigger_cpumask_backtrace+0x319/0x380
[  453.052760][   T31]  watchdog+0x1030/0x1030
[  453.057102][   T31]  ? watchdog+0x1c7/0x1030
[  453.061526][   T31]  kthread+0x388/0x470
[  453.065605][   T31]  ? __pfx_watchdog+0x10/0x10
[  453.070282][   T31]  ? __pfx_kthread+0x10/0x10
[  453.074881][   T31]  ret_from_fork+0x514/0xb70
[  453.079484][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  453.084601][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  453.090235][   T31]  ? __switch_to+0xc89/0x1420
[  453.094921][   T31]  ? __pfx_kthread+0x10/0x10
[  453.099520][   T31]  ret_from_fork_asm+0x1a/0x30
[  453.104310][   T31]  </TASK>
[  453.107574][   T31] Kernel Offset: disabled
[  453.111885][   T31] Rebooting in 86400 seconds..