last executing test programs:

4m17.237341119s ago: executing program 2 (id=98):
io_setup(0x3, &(0x7f0000000180)=<r0=>0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
io_submit(r0, 0x1, &(0x7f0000001700)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}])

4m16.943423723s ago: executing program 2 (id=101):
setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff})
r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}})

4m16.744760477s ago: executing program 2 (id=103):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3400000011000500000000000300000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a80100004800c0003800800", @ANYRES16], 0x34}}, 0x0)

4m16.497818774s ago: executing program 2 (id=106):
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x801, &(0x7f0000000040)=ANY=[], 0x4, 0x181, &(0x7f0000001000)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000000)='./file0\x00')
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

4m16.193520006s ago: executing program 2 (id=110):
socket$inet6_tcp(0xa, 0x1, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket$igmp6(0xa, 0x3, 0x3a)
getsockopt$MRT6(r0, 0x3a, 0x1, 0x0, &(0x7f0000000100))

4m15.620355752s ago: executing program 2 (id=115):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x14084, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x483, &(0x7f00000006c0)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x8010, 0x0, 0x0, 0x0, &(0x7f0000000000))
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @adiantum, 0x0, @desc1})

4m15.363128164s ago: executing program 32 (id=115):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x14084, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x483, &(0x7f00000006c0)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x8010, 0x0, 0x0, 0x0, &(0x7f0000000000))
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @adiantum, 0x0, @desc1})

2m47.228568379s ago: executing program 0 (id=811):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0c002d800800030005"], 0x30}, 0x1, 0x0, 0x0, 0x20040005}, 0x40840)

2m47.014797948s ago: executing program 0 (id=814):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0xff, 0x71, 0x20, 0x9c4, 0x11, 0xb01c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x7e, 0x10, 0x2, 0x26, 0xd5, 0x18, 0x8, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0003f4000000f403"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000e00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io$printer(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB='@!\f\x00\x00\x00\f!'], 0x0}, 0x0)

2m44.651326341s ago: executing program 0 (id=831):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9f00f0ffffffffffff559a85603b0080", 0x24}], 0x2)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000000)={'wlan0\x00'})

2m44.545849352s ago: executing program 0 (id=834):
socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0044, &(0x7f0000000100)={[{@noblock_validity}, {@resuid}, {@grpquota}, {@noload}, {@nobarrier}, {@lazytime}]}, 0xfe, 0x472, &(0x7f0000000940)="$eJzs3MtvG8UfAPDvOk6a9PFLfyU8GloIFETEI2nSBz1wAYHEAQQSHIo4BSetQt0GNUGiVQSBQxDigCpxRxyR+As4wQUBJySucEeVEMqlhZPR2rtp4tohDydO8ecjbTuzu+7Md2fHnp2xG0DHGkr/SCL2R8SvEdEfEcX6E4Zqf91cmi/9tTRfSqJSee3PJH1Z3FiaL2X/RHVL7avtqFSy/J4G5S6+GTFRLk9dzvKjcxffGZ29cvWp6YsT56fOT10aP3Pm5ImjPafHT7UkzjSuG4Pvzxw5/OIb114unb321o9fp/Xdnx3P42ilodrVbejRVhfWZgdWpJNiGyvChhzI+nt3tf/3R1f0LR/rjxc+amvlgG1VqVQqjT6fMwsV4D8siXbXAGiP/IM+ff7Ntx0aeuwKfzxbewBK476ZbbUjxShk53TXPd+2Um9EnF34+4t0i22ahwAAWOnbdPzzZKPxXyHuWXHe/7I1lIMR8f+IOBQRd0XEQETcHVE9996IuG+D5devkNw+/ilc31Rg65SO/57J1rZWj//y0V8c7MpyB6rxdyfnpstTx7NrMhzde9L82KqXrPbd8798Vr/v02yafWjF+C/d0vLzsWBWj+vFugm6yYm5iZYEn8b/YcRgsVH8yfI6YBIRhyNicJNlTD/+1ZFmx/49/jW0YJ2p8mXEY7X2X4i6+HNJ0/XJsadPj58a7Y3y1PHR/K643U8/L77arPwtxd8CafvvbXj/1+JPnxGT3ojZK1cvVNdrZzdexuJvH5eSJscGNnn/9ySvV9M92b73JubmLo9F9CQvpdm+VfvHb702z+fnp/EPH2vc/w/VHs+qV+L+iEhv4qMR8UBEPJi13UMR8XBEHFsj/h+ee+TtZseat/8as/ItlMY/uUb7p295aepW+2880XXh+2+alV9ZV/ufrKaGsz3ref9bbwW3cu0AAADgTlGofgc+KYwspwuFkZHad/gHYm+hPDM798S5mXcvTda+K38wugv5TFf/ivnQsWxuOM+P1+VPZPPGn3f1VfMjpZnyZLuDhw63r0n/T/3e1e7aAdvO77Wgc+n/0Ln0f+hc+j90Lv0fOlRP490f7HQ9gLbY+Od/77bUA9h5xv/QufR/6Fz6P3Skpr+NL2zpJ/93aqK4O6rRMNG3O6qRJ6KwK6rRusQrn9S6xG6pT54orvs/s9hkYk/DQ+1+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGiNfwIAAP//RwfmeQ==")
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x16, 0x0)
fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff, 0x100)

2m44.076700437s ago: executing program 0 (id=838):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d03, 0x0, 0x2000000000010a}]})

2m42.009404716s ago: executing program 0 (id=854):
r0 = syz_open_dev$usbmon(&(0x7f0000000140), 0x67fc265c, 0x82002)
io_setup(0x8, &(0x7f0000004200)=<r1=>0x0)
io_submit(r1, 0x2000000000000108, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0xfffc, r0, 0x0}])
syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)

2m41.644467806s ago: executing program 33 (id=854):
r0 = syz_open_dev$usbmon(&(0x7f0000000140), 0x67fc265c, 0x82002)
io_setup(0x8, &(0x7f0000004200)=<r1=>0x0)
io_submit(r1, 0x2000000000000108, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0xfffc, r0, 0x0}])
syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)

2m38.13292869s ago: executing program 5 (id=875):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x2010})
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f041})

2m36.621400218s ago: executing program 5 (id=877):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2})
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x339)

2m33.482513741s ago: executing program 5 (id=890):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2})

2m32.920519404s ago: executing program 5 (id=894):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x9)

2m32.788498168s ago: executing program 5 (id=895):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}}, 0x20000090)

2m32.321141913s ago: executing program 5 (id=898):
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x400, 0x0)
poll(&(0x7f0000000100)=[{r0, 0x1}], 0x1, 0x5)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000000c0)=0x40)
read$dsp(r0, &(0x7f0000000500)=""/101, 0x65)

2m31.993640753s ago: executing program 34 (id=898):
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x400, 0x0)
poll(&(0x7f0000000100)=[{r0, 0x1}], 0x1, 0x5)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000000c0)=0x40)
read$dsp(r0, &(0x7f0000000500)=""/101, 0x65)

1m46.053715735s ago: executing program 6 (id=1274):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = dup(r0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x9}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0)

1m45.786666402s ago: executing program 6 (id=1276):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000})
fallocate(r2, 0x41, 0x100000000, 0x2000010000)

1m45.635960302s ago: executing program 6 (id=1278):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000040)={{@my=0x1}})

1m45.541817139s ago: executing program 6 (id=1281):
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x801, &(0x7f0000000040)=ANY=[], 0x4, 0x181, &(0x7f0000001000)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20400, 0x38)
getdents64(r0, 0x0, 0x0)

1m45.364588924s ago: executing program 6 (id=1284):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)={0x3c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x20, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_VHT={0x14}]}]}]}, 0x3c}}, 0x0)

1m44.774740443s ago: executing program 6 (id=1292):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a499d0000000000000000020000010900010073797a310000000008000240000000030400060014000000110001"], 0x54}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x20, 0x1, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c095}, 0x24000800)

1m44.501448504s ago: executing program 35 (id=1292):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a499d0000000000000000020000010900010073797a310000000008000240000000030400060014000000110001"], 0x54}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x20, 0x1, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c095}, 0x24000800)

6.441663558s ago: executing program 7 (id=1995):
r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000740), 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000080)=0x2)
r1 = socket$igmp(0x2, 0x3, 0x2)
ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000180)={{r1}, 0x1, &(0x7f0000000000)=[0xfffffffffffffff7], 0x0, 0x6, 0x1})

5.700571103s ago: executing program 1 (id=2006):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xef2c, 0x1ff, 0x2, 0xb, 0xff}, @multicast2, @empty, 0xffffff00, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32, @ANYBLOB="0c000280060001"], 0x24}}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

5.447379976s ago: executing program 1 (id=2007):
r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2)
ppoll(&(0x7f0000000080)=[{r0, 0x6af}], 0x1, 0x0, 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r1, 0xffffffffffffffff, 0x200000000000000)

5.270097753s ago: executing program 1 (id=2009):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})

4.780631567s ago: executing program 7 (id=2015):
r0 = io_uring_setup(0x68af, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x1})
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3f, 0x2, 0x3f, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000)
close_range(r0, 0xffffffffffffffff, 0x0)

4.581662226s ago: executing program 8 (id=2017):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0904000000000006000000000000000001"], 0x84}}, 0x0)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="05dff72e1800cd13381600000000000000", @ANYRES32=0x0, @ANYBLOB="0800050004000000050053"], 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0xc0c4)
setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f0000000000)=ANY=[], 0xd0060)

4.375701945s ago: executing program 8 (id=2019):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='-b'], 0x7)

4.222468254s ago: executing program 7 (id=2020):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
write$UHID_INPUT(r0, &(0x7f0000001300)={0x8, {"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", 0x1000}}, 0x1006)

4.071695373s ago: executing program 8 (id=2021):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000500)={0x0, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3.759570043s ago: executing program 1 (id=2023):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80900)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[<r2=>0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r1})
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000380)={0x1, r2, r1})

3.624544013s ago: executing program 7 (id=2025):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00'}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000003a00000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000))

3.588612645s ago: executing program 1 (id=2026):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000085c, &(0x7f0000000380)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESDEC=0x0, @ANYBLOB=',discard,\x00', @ANYRES16=0x0, @ANYRESOCT=0x0, @ANYBLOB="dd812246da16e3f3744109adecbf790b293943c866e410686871297a5f0d7ae82908f6ba144c43d8299b393f0bf8d5ce774794f45e41d2baac5bb21da7bfa7953e1b99f77929f7a4f3069219c59678f7fd86f2371cd5238783f37d25cfb853f3330632288112a663e0547534d398a77ef57503cb1b1b2548726354308bb8723bedc0c1997f043d9ff1745bc4f980882eb24cce51c0f9e6cfac5596d0013f775910ea2f18d46216b9ecd3508b347cf690c1db6bd77bff73e719be2d22b0bc374048d493bb3262859982a98b7f523ea4e8044ab6de9cdbee0cc9540eb8f06aa7b239e62bc6fab71a2ca0ff472263f9fcca9c45", @ANYRES8=0x0, @ANYRESHEX, @ANYRES32, @ANYRESHEX], 0xc1, 0x151a, &(0x7f0000000540)="$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")
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)

3.229187306s ago: executing program 7 (id=2029):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000001ff0), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000f"], 0x20000078}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x5, 0x0, 0x0, {}, {}, {}, 0x7, @can={{}, 0x0, 0x0, 0x0, 0x0, "8bc7e9385559d457"}}, 0x48}}, 0x0)

3.038148565s ago: executing program 7 (id=2032):
r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000400)={0x80000000, 0x0, &(0x7f0000000100)})
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="400006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.374827753s ago: executing program 4 (id=2040):
r0 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000003, {}, 0xfd}, 0x18)
close(r0)

2.251462635s ago: executing program 4 (id=2041):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000140)={0xffffffd1, 0x1002, 0x3, 0x831a, 0x3, "040000000000000000c83cfdffff000800", 0x8, 0x1})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x8)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xfd)

2.188631269s ago: executing program 3 (id=2042):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000001c0)={0x0, 0xfffffffffffffe0f, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x24}}, 0x0)

2.150230965s ago: executing program 4 (id=2043):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeb0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2006300, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.103242828s ago: executing program 3 (id=2044):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0009000000080026000816"], 0x40}}, 0x0)

2.092384222s ago: executing program 8 (id=2045):
r0 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10)
sendmmsg$inet(r0, &(0x7f00000004c0)=[{{&(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10, 0x0}}], 0x1, 0x4000000)

2.006371505s ago: executing program 4 (id=2046):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x2000800)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)

2.004962107s ago: executing program 3 (id=2047):
futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)

1.942066677s ago: executing program 8 (id=2048):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000002c0)={0x0, 0x37, 0xc, "11b1419b0560cb7aee6e260f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000001c0)={0x0, 0x19, 0x28, "42107e4f4b4e6a7f29747f88f45ece2d13de023d028ff0a6a80bbb9f0c3f598802fcdc93fbe5460f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.864715676s ago: executing program 4 (id=2049):
r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000140), 0x0, 0x246, &(0x7f00000002c0)="$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")
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000180)={@desc={0x1, 0x0, @desc2}, 0x40, 0x0, '\x00', @a})
mkdirat(r0, 0x0, 0x80)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}})

1.642676766s ago: executing program 1 (id=2050):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0xf, "9687748e"}]}}, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB='@\nB'], 0x0, 0x0, 0x0, 0x0}, 0x0)

1.548045209s ago: executing program 4 (id=2051):
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x9, 0x5, 0x20000000000081, 0x1ff, 0xcb2, 0x4, 0x0, 0x100000000, 0xd})
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000001080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x201488, 0x0, 0x7, 0x0, &(0x7f0000006380))
rmdir(&(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00')

622.452498ms ago: executing program 3 (id=2052):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', <r2=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05042dbd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="400002803c000100240001006d6f646500000000000000000000000000000000000000000000000000000000050003"], 0x5c}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084)

459.2327ms ago: executing program 3 (id=2053):
syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000140)='./file2\x00', 0x320c8cc, &(0x7f00000003c0)=ANY=[], 0x1, 0x1f3, &(0x7f0000001880)="$eJzslc+q00AUxr+ZxKT3Ij6AGxde8LowbXJB3Fy4d+PKheCfiwvBYtNSTa20XdiCaJ/AvTsXPoaiWxf6BlIF0U3dqOuRyUwmQ0mrMS0Knh90+k3m5MyZM5MzIAjiv+Xjhx8z8X3/cw3AcezA18+/OLkNt+zf174+fH3p4tGTm8/f+LNgq8inEL8/vwvg1aGDd+ZdIWynO/r/KrjR18BxVusjMARa3wLHda1jMNzQ+o6l+9I+CNrdJA5u95OWFA3ZhLKJ2t2EuYvxzacMLSs+Zo0Px5O7zSSJBxsUv8rf/JBj38SHmj1+ASrahpW/EByh1ntguGJs/Sw3KiXW+k+6+fqdlev3UHHZnwDkT9oFNrzqFJnw5FTLbbKFFgwBbF17H52o7ifb87KvO0iFU/p1rtIiT8XmP4AKAu7aHAq/4CT4q85PdfH2pRZ8pfGLA7V/JtRHql9u0oMlQ15JPzrzpj6JZwxnrPqpSsnT9Kqpj3r368Px5Fy31+zEnfheFO2db2wDiOppIVLtsvLnA1tpfdrO/RfeSRKPeXjQHI0GoWpNP1JtUcXlcDGfcuyexjHZl9XUW/D7zdIs/cmvgz1WvV27XConBEEQ/wCnwNKanNblTOjbxAwIEV3+y3ESBEEQBEEQBEEQBPHn/AwAAP//W8NQxQ==")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x1c1)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x80086601, 0x0)

185.379294ms ago: executing program 3 (id=2054):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f00000002c0)=@arm64_fp={0x20400000001000c0, 0x0})

0s ago: executing program 8 (id=2055):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0x5, 0x8006, 0x807, 0x1, r1}, &(0x7f0000000080)=0x10)

kernel console output (not intermixed with test programs):

uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.3.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb59199aeb9 code=0x7ffc0000
[  259.289645][ T5913] usb 5-1: USB disconnect, device number 12
[  259.391359][   T30] audit: type=1326 audit(1769711085.102:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.3.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7fb59199aeb9 code=0x7ffc0000
[  259.412430][ T9994] batman_adv: batadv0: Adding interface: batadv_slave_0
[  259.437448][ T9994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  259.472550][T10159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1344'.
[  259.512532][   T30] audit: type=1326 audit(1769711085.172:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.3.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb59193c2d9 code=0x7ffc0000
[  259.537927][T10159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1344'.
[  259.572215][ T9994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  259.643034][ T9994] batman_adv: batadv0: Adding interface: batadv_slave_1
[  259.660397][T10157] fido_id[10157]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  259.675882][   T30] audit: type=1326 audit(1769711085.172:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.3.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb59193c2d9 code=0x7ffc0000
[  259.698148][ T9994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  259.698184][ T9994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  259.770695][   T30] audit: type=1326 audit(1769711085.172:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.3.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb59193c2d9 code=0x7ffc0000
[  259.851142][T10162] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1345'.
[  260.053616][ T5829] Bluetooth: hci0: command tx timeout
[  260.085383][ T9994] hsr_slave_0: entered promiscuous mode
[  260.100988][ T9994] hsr_slave_1: entered promiscuous mode
[  260.110190][ T9994] debugfs: 'hsr0' already exists in 'hsr'
[  260.119888][ T9994] Cannot create hsr debugfs directory
[  260.138494][   T30] kauditd_printk_skb: 177 callbacks suppressed
[  260.138508][   T30] audit: type=1326 audit(1769711086.212:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.3.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb59193c2d9 code=0x7ffc0000
[  260.231645][   T30] audit: type=1326 audit(1769711086.212:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.3.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb59193c2d9 code=0x7ffc0000
[  260.318068][   T30] audit: type=1326 audit(1769711086.212:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.3.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb59193c2d9 code=0x7ffc0000
[  260.366562][   T30] audit: type=1326 audit(1769711086.212:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.3.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb59193c2d9 code=0x7ffc0000
[  260.422217][   T30] audit: type=1326 audit(1769711086.212:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.3.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb59193c2d9 code=0x7ffc0000
[  260.482246][   T30] audit: type=1326 audit(1769711086.212:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.3.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb59193c2d9 code=0x7ffc0000
[  260.562446][   T30] audit: type=1326 audit(1769711086.212:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.3.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb59193c2d9 code=0x7ffc0000
[  260.668708][   T30] audit: type=1326 audit(1769711086.212:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.3.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb59193c2d9 code=0x7ffc0000
[  260.742973][   T30] audit: type=1326 audit(1769711086.212:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.3.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb59193c2d9 code=0x7ffc0000
[  260.837639][   T30] audit: type=1326 audit(1769711086.212:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.3.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb59193c2d9 code=0x7ffc0000
[  261.050765][T10191] input: syz0 as /devices/virtual/input/input12
[  261.128298][ T9994] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  261.205987][ T9994] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  261.223184][ T9994] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  261.238971][ T9994] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  261.500960][T10210] loop4: detected capacity change from 0 to 64
[  261.579195][ T9994] 8021q: adding VLAN 0 to HW filter on device bond0
[  261.678642][ T9994] 8021q: adding VLAN 0 to HW filter on device team0
[  261.728093][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  261.735389][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  261.796759][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  261.804032][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  262.321074][ T9994] 8021q: adding VLAN 0 to HW filter on device batadv0
[  262.342309][   T29] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  262.370927][T10215] loop3: detected capacity change from 0 to 32768
[  262.395706][T10215] (syz.3.1361,10215,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  262.432128][T10215] (syz.3.1361,10215,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  262.522774][T10215] (syz.3.1361,10215,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[  262.551020][   T29] usb 5-1: unable to get BOS descriptor or descriptor too short
[  262.576369][   T29] usb 5-1: config 6 has an invalid interface number: 200 but max is 0
[  262.589566][T10215] JBD2: Ignoring recovery information on journal
[  262.612283][   T29] usb 5-1: config 6 has no interface number 0
[  262.634799][   T29] usb 5-1: config 6 interface 200 altsetting 8 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  262.675249][T10215] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  262.693448][   T29] usb 5-1: config 6 interface 200 has no altsetting 0
[  262.715437][   T29] usb 5-1: language id specifier not provided by device, defaulting to English
[  262.777380][   T29] usb 5-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f
[  262.798113][   T29] usb 5-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3
[  262.858748][T10215] (syz.3.1361,10215,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[  263.057394][T10215] (syz.3.1361,10215,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC.
[  263.091184][T10254] loop1: detected capacity change from 0 to 2048
[  263.095256][T10215] (syz.3.1361,10215,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae
[  263.156192][T10254] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  263.166826][T10215] (syz.3.1361,10215,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  263.242259][T10215] (syz.3.1361,10215,0):ocfs2_quota_read:201 ERROR: status = -5
[  263.250085][T10215] (syz.3.1361,10215,0):ocfs2_acquire_dquot:892 ERROR: status = -5
[  263.297247][T10260] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  263.325347][T10215] (syz.3.1361,10215,0):ocfs2_mknod:318 ERROR: status = -5
[  263.363647][T10215] (syz.3.1361,10215,0):ocfs2_mknod:506 ERROR: status = -5
[  263.380807][T10215] (syz.3.1361,10215,0):ocfs2_create:679 ERROR: status = -5
[  263.417727][ T9994] veth0_vlan: entered promiscuous mode
[  263.441235][T10215] syz.3.1361 (10215) used greatest stack depth: 18040 bytes left
[  263.461858][ T9994] veth1_vlan: entered promiscuous mode
[  263.589555][ T5824] ocfs2: Unmounting device (7,3) on (node local)
[  263.603801][ T9994] veth0_macvtap: entered promiscuous mode
[  263.643976][ T9994] veth1_macvtap: entered promiscuous mode
[  263.711937][ T9994] batman_adv: batadv0: Interface activated: batadv_slave_0
[  263.757665][ T9994] batman_adv: batadv0: Interface activated: batadv_slave_1
[  263.838428][   T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  263.867655][   T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  263.898847][   T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  263.931825][   T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  264.168963][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  264.199308][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  264.281270][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  264.310786][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  264.647557][T10294] loop3: detected capacity change from 0 to 1024
[  264.686532][T10294] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  264.781197][T10294] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  264.955283][ T5824] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.186605][   T29] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state.
[  265.229445][   T29] dvb-usb: bulk message failed: -71 (3/0)
[  265.271049][   T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  265.305072][   T29] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T)
[  265.330052][   T29] usb 5-1: media controller created
[  265.346519][T10320] loop1: detected capacity change from 0 to 16
[  265.374337][T10320] erofs (device loop1): rootino(nid 36) is not a directory(i_mode 66700)
[  265.415933][   T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  265.461094][T10320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1391'.
[  265.503760][T10319] loop4: detected capacity change from 0 to 2048
[  265.536943][   T29] dvb-usb: bulk message failed: -71 (6/0)
[  265.558075][T10319] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  265.580572][T10320] ip6gre1: entered promiscuous mode
[  265.588569][   T29] dvb-usb: bulk message failed: -71 (6/0)
[  265.612425][   T29] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T'
[  265.634561][   T29] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input13
[  265.654723][T10320] ip6gre1: entered allmulticast mode
[  265.681931][   T29] dvb-usb: schedule remote query interval to 150 msecs.
[  265.713856][   T29] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected.
[  265.789209][T10327] loop8: detected capacity change from 0 to 4096
[  265.800466][T10327] EXT4-fs: Ignoring removed mblk_io_submit option
[  265.803267][   T29] usb 5-1: USB disconnect, device number 13
[  265.871031][T10327] EXT4-fs (loop8): Test dummy encryption mode enabled
[  265.879074][   T24] dvb-usb: bulk message failed: -19 (1/0)
[  265.885792][   T24] dvb-usb: error while querying for an remote control event.
[  265.921130][T10327] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  265.984965][T10327] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni"
[  266.065541][ T9994] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  266.187081][   T29] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected.
[  266.281851][T10340] loop8: detected capacity change from 0 to 128
[  266.500250][T10346] loop7: detected capacity change from 0 to 512
[  266.564712][T10346] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  266.592560][T10353] loop8: detected capacity change from 0 to 24
[  266.616166][T10353] MTD: Attempt to mount non-MTD device "/dev/loop8"
[  266.657599][T10346] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  266.708294][T10346] ext4 filesystem being mounted at /87/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  266.748123][T10353] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  266.846047][ T8718] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  267.108378][T10338] loop4: detected capacity change from 0 to 32768
[  267.170389][T10338] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  267.239941][T10338] XFS (loop4): Ending clean mount
[  267.247868][T10338] XFS (loop4): Quotacheck needed: Please wait.
[  267.462922][T10338] XFS (loop4): Quotacheck: Done.
[  267.825181][T10384] cgroup: fork rejected by pids controller in /syz7
[  267.842585][ T5830] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  268.819334][T10386] loop1: detected capacity change from 0 to 32768
[  268.832869][   T49] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.872735][T10386] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  268.928395][T10386] XFS (loop1): Ending clean mount
[  269.144237][T10392] loop4: detected capacity change from 0 to 32768
[  269.183090][ T5835] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  269.205034][T10392] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  269.324010][   T49] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.406808][T10392] XFS (loop4): Ending clean mount
[  269.433523][T10392] XFS (loop4): Quotacheck needed: Please wait.
[  269.511661][T10397] loop3: detected capacity change from 0 to 32768
[  269.558375][T10421] loop8: detected capacity change from 0 to 64
[  269.570268][T10392] XFS (loop4): Quotacheck: Done.
[  269.581354][   T49] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.600293][   T30] kauditd_printk_skb: 135 callbacks suppressed
[  269.600310][   T30] audit: type=1800 audit(1769711095.672:388): pid=10392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1416" name="file1" dev="loop4" ino=6150 res=0 errno=0
[  269.628088][   T30] audit: type=1800 audit(1769711095.712:389): pid=10392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1416" name="file1" dev="loop4" ino=6150 res=0 errno=0
[  269.700002][T10397] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  269.836281][   T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  269.846781][   T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  269.855511][   T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  269.863764][   T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  269.871385][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  269.902392][T10397] XFS (loop3): Ending clean mount
[  269.926315][ T5830] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  269.973807][T10397] XFS (loop3): Quotacheck needed: Please wait.
[  270.068739][T10434] loop8: detected capacity change from 0 to 64
[  270.109156][T10397] XFS (loop3): Quotacheck: Done.
[  270.206478][   T49] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.415155][ T5824] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  270.583581][T10441] program syz.8.1427 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  270.763613][   T49] bridge_slave_1: left allmulticast mode
[  270.769367][   T49] bridge_slave_1: left promiscuous mode
[  270.853806][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  270.925868][   T49] bridge_slave_0: left allmulticast mode
[  270.931577][   T49] bridge_slave_0: left promiscuous mode
[  270.978147][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  270.990045][T10445] sctp: [Deprecated]: syz.4.1425 (pid 10445) Use of int in maxseg socket option.
[  270.990045][T10445] Use struct sctp_assoc_value instead
[  271.204725][T10455] loop3: detected capacity change from 0 to 512
[  271.226688][T10455] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  271.252506][T10457] loop4: detected capacity change from 0 to 128
[  271.285291][T10455] EXT4-fs (loop3): 1 truncate cleaned up
[  271.297437][T10455] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  271.484191][ T5824] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  271.844492][T10468] loop4: detected capacity change from 0 to 1024
[  271.893008][   T51] Bluetooth: hci2: command tx timeout
[  272.276131][T10476] program syz.8.1442 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.294005][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  272.318561][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  272.329378][   T49] bond0 (unregistering): Released all slaves
[  272.353878][T10430] chnl_net:caif_netlink_parms(): no params data found
[  272.659178][T10491] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  272.659178][T10491] The task syz.1.1445 (10491) triggered the difference, watch for misbehavior.
[  272.862268][   T29] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  273.022244][   T29] usb 4-1: Using ep0 maxpacket: 32
[  273.055564][   T29] usb 4-1: config 0 has an invalid interface number: 196 but max is 0
[  273.067667][   T29] usb 4-1: config 0 has no interface number 0
[  273.093629][   T29] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  273.124270][   T29] usb 4-1: config 0 interface 196 has no altsetting 0
[  273.134727][   T29] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[  273.144061][   T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.152566][   T29] usb 4-1: Product: syz
[  273.156971][   T29] usb 4-1: Manufacturer: syz
[  273.161659][   T29] usb 4-1: SerialNumber: syz
[  273.174543][   T29] usb 4-1: config 0 descriptor??
[  273.183830][T10486] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  273.311980][   T49] hsr_slave_0: left promiscuous mode
[  273.327825][   T49] hsr_slave_1: left promiscuous mode
[  273.350501][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  273.362283][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  273.385921][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  273.411166][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  273.509272][   T49] veth1_macvtap: left promiscuous mode
[  273.534091][   T49] veth0_macvtap: left promiscuous mode
[  273.539836][   T49] veth1_vlan: left promiscuous mode
[  273.552367][   T49] veth0_vlan: left promiscuous mode
[  273.633024][   T29] ipheth 4-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes
[  273.672469][   T29] ipheth 4-1:0.196: probe with driver ipheth failed with error -22
[  273.886722][   T29] usb 4-1: USB disconnect, device number 11
[  273.982344][   T51] Bluetooth: hci2: command tx timeout
[  274.334665][T10518] loop1: detected capacity change from 0 to 32768
[  274.381832][T10518] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  274.650164][T10538] loop3: detected capacity change from 0 to 8192
[  274.771442][T10518] XFS (loop1): Ending clean mount
[  274.817232][T10518] XFS (loop1): User initiated shutdown received.
[  274.833344][T10518] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:478).  Shutting down filesystem.
[  274.873048][T10518] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[  274.997139][T10546] loop4: detected capacity change from 0 to 256
[  275.022129][ T5835] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  275.036346][T10546] exfat: Deprecated parameter 'utf8'
[  275.078296][T10546] exfat: Deprecated parameter 'utf8'
[  275.084493][T10546] exfat: Deprecated parameter 'utf8'
[  275.191421][T10546] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[  275.592761][T10543] loop3: detected capacity change from 0 to 32768
[  275.612808][T10543] (syz.3.1460,10543,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  275.683223][T10543] (syz.3.1460,10543,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  275.793021][T10543] JBD2: Ignoring recovery information on journal
[  276.016228][T10543] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  276.054020][   T51] Bluetooth: hci2: command tx timeout
[  276.067081][   T49] team0 (unregistering): Port device team_slave_1 removed
[  276.277586][T10562] loop1: detected capacity change from 0 to 128
[  276.282046][   T49] team0 (unregistering): Port device team_slave_0 removed
[  276.355132][T10562] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  276.383605][T10562] ext4 filesystem being mounted at /314/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  276.504221][T10562] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  276.516461][ T5824] ocfs2: Unmounting device (7,3) on (node local)
[  276.744777][T10568] loop1: detected capacity change from 0 to 64
[  276.824409][T10568] hfs: request for non-existent node 1280 in B*Tree
[  276.831547][T10568] hfs: request for non-existent node 1280 in B*Tree
[  276.970971][   T36] hfs: request for non-existent node 1280 in B*Tree
[  276.990584][   T36] hfs: request for non-existent node 1280 in B*Tree
[  277.155891][T10577] loop1: detected capacity change from 0 to 512
[  277.248376][T10577] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  277.261429][T10577] ext4 filesystem being mounted at /316/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  277.321318][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.614331][T10570] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  277.632555][T10573] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  277.658007][T10430] bridge0: port 1(bridge_slave_0) entered blocking state
[  277.675847][T10430] bridge0: port 1(bridge_slave_0) entered disabled state
[  277.714210][T10430] bridge_slave_0: entered allmulticast mode
[  277.751527][T10430] bridge_slave_0: entered promiscuous mode
[  277.764081][T10588] loop4: detected capacity change from 0 to 512
[  277.787246][T10430] bridge0: port 2(bridge_slave_1) entered blocking state
[  277.829174][T10430] bridge0: port 2(bridge_slave_1) entered disabled state
[  277.831856][T10588] EXT4-fs (loop4): 1 truncate cleaned up
[  277.842418][T10430] bridge_slave_1: entered allmulticast mode
[  277.872400][T10591] loop1: detected capacity change from 0 to 512
[  277.877590][T10430] bridge_slave_1: entered promiscuous mode
[  277.914239][T10588] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  278.003449][T10591] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  278.051388][T10597] loop3: detected capacity change from 0 to 512
[  278.073282][T10430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  278.097604][T10591] ext4 filesystem being mounted at /318/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  278.124437][   T30] audit: type=1800 audit(1769711104.192:390): pid=10588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1475" name="file0" dev="loop4" ino=13 res=0 errno=0
[  278.164025][   T51] Bluetooth: hci2: command tx timeout
[  278.196808][T10588] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1475: bg 0: block 465: padding at end of block bitmap is not set
[  278.213977][T10597] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1478: invalid indirect mapped block 4294967295 (level 1)
[  278.254820][T10430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  278.263942][T10591] EXT4-fs error (device loop1): ext4_do_update_inode:5596: inode #2: comm syz.1.1485: corrupted inode contents
[  278.290299][T10597] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  278.293409][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  278.309057][    C1] EXT4-fs (loop3): initial error at time 1769711104: ext4_free_branches:1023: inode 11
[  278.318825][    C1] EXT4-fs (loop3): last error at time 1769711104: ext4_free_branches:1023: inode 11
[  278.355789][T10597] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1478: invalid indirect mapped block 4294967295 (level 1)
[  278.370547][T10591] EXT4-fs error (device loop1): ext4_dirty_inode:6477: inode #2: comm syz.1.1485: mark_inode_dirty error
[  278.417039][T10597] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  278.428621][T10597] EXT4-fs (loop3): 2 truncates cleaned up
[  278.457951][T10588] EXT4-fs (loop4): Remounting filesystem read-only
[  278.473119][T10591] EXT4-fs error (device loop1): ext4_do_update_inode:5596: inode #2: comm syz.1.1485: corrupted inode contents
[  278.485733][T10597] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  278.511411][T10430] team0: Port device team_slave_0 added
[  278.551884][T10430] team0: Port device team_slave_1 added
[  278.567989][T10591] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.1485: mark_inode_dirty error
[  278.618567][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  278.650696][ T5824] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  278.701035][T10603] EXT4-fs warning (device loop1): ext4_es_cache_extent:1082: inode #2: comm syz.1.1485: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18]
[  278.701035][T10603] 
[  278.815495][T10430] batman_adv: batadv0: Adding interface: batadv_slave_0
[  278.842227][T10430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  278.927079][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  278.964247][T10430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  279.021880][T10430] batman_adv: batadv0: Adding interface: batadv_slave_1
[  279.056373][T10430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  279.101017][T10430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  279.239377][T10621] loop1: detected capacity change from 0 to 1024
[  279.324141][T10621] hfsplus: request for non-existent node 3 in B*Tree
[  279.331373][T10621] hfsplus: request for non-existent node 3 in B*Tree
[  279.387760][T10430] hsr_slave_0: entered promiscuous mode
[  279.417062][T10430] hsr_slave_1: entered promiscuous mode
[  279.423856][T10621] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  leaving read-only.
[  279.525514][T10430] debugfs: 'hsr0' already exists in 'hsr'
[  279.537805][T10430] Cannot create hsr debugfs directory
[  280.248862][T10642] loop3: detected capacity change from 0 to 8192
[  280.503458][   T29] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  280.560684][T10658] loop4: detected capacity change from 0 to 256
[  280.603714][T10658] exfat: Deprecated parameter 'namecase'
[  280.682695][   T29] usb 9-1: Using ep0 maxpacket: 16
[  280.708859][T10658] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d)
[  280.738170][   T29] usb 9-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  280.757732][   T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.795469][   T29] usb 9-1: config 0 descriptor??
[  280.821056][   T29] gspca_main: sonixj-2.14.0 probing 0471:0327
[  280.993663][T10639] loop1: detected capacity change from 0 to 32768
[  281.017472][T10639] xfs: Deprecated parameter 'attr2'
[  281.050613][T10639] XFS: attr2 mount option is deprecated.
[  281.059152][T10663] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  281.080718][T10639] XFS (loop1): Invalid device [./file0], error=-13
[  281.367494][T10430] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  281.386063][T10672] loop1: detected capacity change from 0 to 512
[  281.401119][T10670] loop3: detected capacity change from 0 to 128
[  281.423049][T10672] ext4: Unknown parameter 'obj_user'
[  281.439920][T10430] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  281.449846][T10670] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  281.499459][T10430] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  281.502939][T10670] hpfs: filesystem error: improperly stopped
[  281.545298][T10430] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  281.547033][T10670] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  281.628151][T10670] hpfs: You really don't want any checks? You are crazy...
[  281.647103][   T29] gspca_sonixj: reg_r err -71
[  281.651950][   T29] sonixj 9-1:0.0: probe with driver sonixj failed with error -71
[  281.680099][T10670] hpfs: hpfs_map_sector(): read error
[  281.712667][T10670] hpfs: code page support is disabled
[  281.718223][T10670] hpfs: hpfs_map_4sectors(): unaligned read
[  281.730967][   T29] usb 9-1: USB disconnect, device number 2
[  281.766066][T10670] hpfs: hpfs_map_4sectors(): unaligned read
[  281.772022][T10670] hpfs: filesystem error: unable to find root dir
[  282.011926][T10430] 8021q: adding VLAN 0 to HW filter on device bond0
[  282.096442][T10430] 8021q: adding VLAN 0 to HW filter on device team0
[  282.176428][ T8846] bridge0: port 1(bridge_slave_0) entered blocking state
[  282.183780][ T8846] bridge0: port 1(bridge_slave_0) entered forwarding state
[  282.214713][ T8846] bridge0: port 2(bridge_slave_1) entered blocking state
[  282.222032][ T8846] bridge0: port 2(bridge_slave_1) entered forwarding state
[  282.922299][   T29] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  282.947197][T10430] 8021q: adding VLAN 0 to HW filter on device batadv0
[  283.060573][T10684] loop1: detected capacity change from 0 to 40427
[  283.115836][   T29] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  283.155406][   T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.213334][   T29] usb 5-1: config 0 descriptor??
[  283.241688][   T29] cp210x 5-1:0.0: cp210x converter detected
[  283.335136][   T49] wlan1: Trigger new scan to find an IBSS to join
[  283.467906][T10695] loop3: detected capacity change from 0 to 32768
[  283.491632][T10684] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  283.540836][T10684] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  283.578268][T10695] JBD2: Ignoring recovery information on journal
[  283.649418][   T29] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32
[  283.680738][   T30] audit: type=1800 audit(1769711109.752:391): pid=10684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1500" name="file1" dev="loop1" ino=10 res=0 errno=0
[  283.743412][T10695] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  283.763657][   T29] usb 5-1: cp210x converter now attached to ttyUSB0
[  283.895126][T10684] syz.1.1500: attempt to access beyond end of device
[  283.895126][T10684] loop1: rw=2049, sector=53248, nr_sectors = 2568 limit=40427
[  283.949868][   T29] usb 5-1: USB disconnect, device number 14
[  283.966551][T10430] veth0_vlan: entered promiscuous mode
[  284.009220][   T29] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  284.026128][T10430] veth1_vlan: entered promiscuous mode
[  284.056926][   T29] cp210x 5-1:0.0: device disconnected
[  284.166750][ T5835] syz-executor: attempt to access beyond end of device
[  284.166750][ T5835] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  284.203056][T10430] veth0_macvtap: entered promiscuous mode
[  284.212808][ T5835] CPU: 1 UID: 0 PID: 5835 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  284.212842][ T5835] Tainted: [L]=SOFTLOCKUP
[  284.212850][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  284.212863][ T5835] Call Trace:
[  284.212872][ T5835]  <TASK>
[  284.212880][ T5835]  dump_stack_lvl+0xe8/0x150
[  284.212915][ T5835]  f2fs_handle_critical_error+0x37c/0x540
[  284.212948][ T5835]  f2fs_write_end_io+0xcdb/0xff0
[  284.213000][ T5835]  __submit_merged_bio+0x256/0x650
[  284.213034][ T5835]  __submit_merged_write_cond+0x3c3/0x4e0
[  284.213068][ T5835]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  284.213121][ T5835]  f2fs_write_data_pages+0x2970/0x35e0
[  284.213151][ T5835]  ? __lock_acquire+0x6b5/0x2cf0
[  284.213213][ T5835]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  284.213259][ T5835]  ? css_rstat_updated+0x23a/0x530
[  284.213315][ T5835]  ? rcu_is_watching+0x15/0xb0
[  284.213343][ T5835]  ? mod_memcg_lruvec_state+0x1b8/0x320
[  284.213376][ T5835]  ? lru_gen_update_size+0x7c9/0xd10
[  284.213424][ T5835]  ? __lock_acquire+0x6b5/0x2cf0
[  284.213484][ T5835]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  284.213516][ T5835]  do_writepages+0x32e/0x550
[  284.213555][ T5835]  ? do_raw_spin_unlock+0xf5/0x210
[  284.213581][ T5835]  filemap_fdatawrite+0x1e9/0x2f0
[  284.213618][ T5835]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  284.213697][ T5835]  ? do_raw_spin_unlock+0xf5/0x210
[  284.213723][ T5835]  f2fs_sync_dirty_inodes+0x30e/0x810
[  284.213771][ T5835]  f2fs_write_checkpoint+0x9cf/0x2680
[  284.213802][ T5835]  ? __lock_acquire+0x6b5/0x2cf0
[  284.213863][ T5835]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  284.213955][ T5835]  kill_f2fs_super+0x314/0x720
[  284.213993][ T5835]  ? __pfx_kill_f2fs_super+0x10/0x10
[  284.214040][ T5835]  ? lockdep_hardirqs_on+0x7a/0x110
[  284.214078][ T5835]  deactivate_locked_super+0xbc/0x130
[  284.214111][ T5835]  cleanup_mnt+0x437/0x4d0
[  284.214143][ T5835]  ? _raw_spin_unlock_irq+0x23/0x50
[  284.214181][ T5835]  task_work_run+0x1d9/0x270
[  284.214206][ T5835]  ? __pfx_task_work_run+0x10/0x10
[  284.214239][ T5835]  exit_to_user_mode_loop+0xed/0x480
[  284.214263][ T5835]  ? rcu_is_watching+0x15/0xb0
[  284.214295][ T5835]  do_syscall_64+0x2b7/0xf80
[  284.214317][ T5835]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.214338][ T5835]  ? trace_irq_disable+0x37/0x100
[  284.214367][ T5835]  ? clear_bhb_loop+0x40/0x90
[  284.214393][ T5835]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.214423][ T5835] RIP: 0033:0x7f245ad9c117
[  284.214444][ T5835] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  284.214462][ T5835] RSP: 002b:00007ffd6edecfc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  284.214485][ T5835] RAX: 0000000000000000 RBX: 00007f245ae0471f RCX: 00007f245ad9c117
[  284.214499][ T5835] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd6eded080
[  284.214512][ T5835] RBP: 00007ffd6eded080 R08: 00007ffd6edee080 R09: 00000000ffffffff
[  284.214526][ T5835] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd6edee110
[  284.214540][ T5835] R13: 00007f245ae0471f R14: 00000000000456af R15: 00007ffd6edee150
[  284.214576][ T5835]  </TASK>
[  284.214585][ T5835] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  284.249437][T10430] veth1_macvtap: entered promiscuous mode
[  284.661864][T10746] loop4: detected capacity change from 0 to 64
[  284.759301][ T5824] ocfs2: Unmounting device (7,3) on (node local)
[  284.887774][T10430] batman_adv: batadv0: Interface activated: batadv_slave_0
[  284.930800][T10430] batman_adv: batadv0: Interface activated: batadv_slave_1
[  285.042887][ T8846] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  285.103469][ T8846] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  285.153116][ T8846] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  285.201130][ T8846] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  285.450120][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  285.484285][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  285.610564][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  285.641631][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  286.136012][T10776] loop7: detected capacity change from 0 to 4096
[  286.261080][T10784] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  286.273529][T10752] loop4: detected capacity change from 0 to 32768
[  286.449789][T10752] JBD2: Ignoring recovery information on journal
[  286.566052][T10752] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  286.880513][T10752] (syz.4.1516,10752,1):ocfs2_read_blocks_sync:112 ERROR: status = -12
[  286.920546][T10762] loop3: detected capacity change from 0 to 40427
[  286.925127][T10752] (syz.4.1516,10752,1):update_backups:196 ERROR: status = -12
[  286.964560][T10762] F2FS-fs (loop3): invalid crc value
[  286.970117][T10752] ocfs2: Failed to update super blocks on 7,4 during fs resize. This condition is not fatal, but fsck.ocfs2 should be run to fix it
[  287.175375][T10762] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  287.211351][T10762] F2FS-fs (loop3): Start checkpoint disabled!
[  287.283839][ T5830] ocfs2: Unmounting device (7,4) on (node local)
[  287.316373][T10762] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0
[  287.334789][   T12] wlan1: Trigger new scan to find an IBSS to join
[  287.382448][T10762] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  288.273372][   T60] wlan1: Creating new IBSS network, BSSID 5e:73:cf:fa:77:2a
[  288.393709][T10821] loop1: detected capacity change from 0 to 32768
[  288.424132][T10821] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1531 (10821)
[  288.496637][T10821] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  288.541052][T10821] BTRFS info (device loop1): using sha256 checksum algorithm
[  288.555478][T10820] loop7: detected capacity change from 0 to 32768
[  288.642179][T10820] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  288.725029][T10821] BTRFS info (device loop1): rebuilding free space tree
[  288.843833][T10821] BTRFS info (device loop1): disabling free space tree
[  288.851140][T10821] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  288.992357][T10821] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  289.021757][T10820] XFS (loop7): Ending clean mount
[  289.038876][T10820] XFS (loop7): Quotacheck needed: Please wait.
[  289.111910][T10821] BTRFS info (device loop1): enabling ssd optimizations
[  289.157991][T10821] BTRFS info (device loop1): turning on sync discard
[  289.172896][   T51] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  289.204212][T10820] XFS (loop7): Quotacheck: Done.
[  289.229641][T10821] BTRFS info (device loop1): force clearing of disk cache
[  289.417241][   T30] audit: type=1800 audit(1769711115.462:392): pid=10821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1531" name="file1" dev="loop1" ino=260 res=0 errno=0
[  289.572978][ T5835] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  289.652824][T10430] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  289.843512][T10883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1542'.
[  289.905669][T10883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1542'.
[  290.048828][T10886] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  290.629025][T10880] loop8: detected capacity change from 0 to 32768
[  290.673583][T10880] (syz.8.1539,10880,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  290.715447][ T5880] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  290.747082][T10880] (syz.8.1539,10880,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  290.848131][T10880] JBD2: Ignoring recovery information on journal
[  290.893982][ T5880] usb 4-1: Using ep0 maxpacket: 8
[  290.918092][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  290.940082][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  291.019400][ T5880] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  291.069205][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  291.083909][T10880] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  291.113399][ T5880] usb 4-1: config 0 descriptor??
[  291.419943][T10880] syz.8.1539 (10880) used greatest stack depth: 17944 bytes left
[  291.552636][T10926] loop1: detected capacity change from 0 to 16
[  291.565897][ T9994] ocfs2: Unmounting device (7,8) on (node local)
[  291.592251][T10926] erofs (device loop1): invalid ishare xattr prefix id 0
[  291.620246][ T5880] isku 0003:1E7D:319C.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0
[  291.771867][   T24] usb 4-1: USB disconnect, device number 12
[  291.974978][T10929] fido_id[10929]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  292.145386][T10916] loop4: detected capacity change from 0 to 32768
[  292.185170][T10916] 
[  292.185170][T10916]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  292.185170][T10916] 
[  292.239185][T10916] ERROR: (device loop4): diWrite: ixpxd invalid
[  292.239185][T10916] 
[  292.281711][T10916] ERROR: (device loop4): txCommit: 
[  292.281711][T10916] 
[  292.402747][T10916] ERROR: (device loop4): diWrite: ixpxd invalid
[  292.402747][T10916] 
[  292.411899][T10916] ERROR: (device loop4): txCommit: 
[  292.411899][T10916] 
[  292.634960][ T5830] 
[  292.634960][ T5830]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  292.634960][ T5830] 
[  292.669696][ T5830] 
[  292.669696][ T5830]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  292.669696][ T5830] 
[  293.036684][ T5880] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  293.232325][   T24] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  293.249223][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  293.270921][ T5880] usb 4-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00
[  293.281811][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.294892][T10969] loop8: detected capacity change from 0 to 2048
[  293.304988][T10969] UDF-fs: error (device loop8): udf_process_sequence: Primary Volume Descriptor not found!
[  293.333256][ T5880] usb 4-1: config 0 descriptor??
[  293.342829][T10969] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  293.354119][T10955] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  293.412874][  T795] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  293.420669][   T24] usb 2-1: Using ep0 maxpacket: 16
[  293.435915][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  293.457538][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  293.484554][   T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  293.521609][   T24] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  293.542886][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.576542][   T24] usb 2-1: config 0 descriptor??
[  293.605740][  T795] usb 5-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  293.632351][  T795] usb 5-1: config 0 interface 0 has no altsetting 0
[  293.649080][  T795] usb 5-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00
[  293.668714][  T795] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.738136][  T795] usb 5-1: config 0 descriptor??
[  293.808964][ T5880] thrustmaster 0003:044F:B304.000E: hidraw0: USB HID vff.fb Device [HID 044f:b304] on usb-dummy_hcd.3-1/input0
[  293.842242][ T5880] thrustmaster 0003:044F:B304.000E: no inputs found
[  293.857005][T10975] loop8: detected capacity change from 0 to 1024
[  293.915707][T10975] EXT4-fs: Ignoring removed orlov option
[  293.982558][T10975] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  294.009959][ T5880] usb 4-1: USB disconnect, device number 13
[  294.041780][   T24] microsoft 0003:045E:07DA.000F: ignoring exceeding usage max
[  294.066795][   T24] microsoft 0003:045E:07DA.000F: unsupported Resolution Multiplier 0
[  294.096381][   T24] microsoft 0003:045E:07DA.000F: implement() called with n (152) > 32! (kworker/1:0)
[  294.172122][ T9994] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  294.206722][  T795] playstation 0003:054C:05C4.0010: unknown main item tag 0x0
[  294.216575][  T795] playstation 0003:054C:05C4.0010: unknown main item tag 0x0
[  294.224666][  T795] playstation 0003:054C:05C4.0010: unknown main item tag 0x0
[  294.233497][  T795] playstation 0003:054C:05C4.0010: unknown main item tag 0x0
[  294.241261][   T24] microsoft 0003:045E:07DA.000F: unsupported Resolution Multiplier 0
[  294.250036][  T795] playstation 0003:054C:05C4.0010: unknown main item tag 0x0
[  294.269713][   T24] microsoft 0003:045E:07DA.000F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  294.292419][  T795] playstation 0003:054C:05C4.0010: unknown main item tag 0x0
[  294.302823][  T795] playstation 0003:054C:05C4.0010: unknown main item tag 0x0
[  294.319695][   T24] microsoft 0003:045E:07DA.000F: no inputs found
[  294.332450][   T24] microsoft 0003:045E:07DA.000F: could not initialize ff, continuing anyway
[  294.348224][  T795] playstation 0003:054C:05C4.0010: hidraw1: USB HID v40.00 Device [HID 054c:05c4] on usb-dummy_hcd.4-1/input0
[  294.432195][  T795] playstation 0003:054C:05C4.0010: Invalid reportID received, expected 18 got 34
[  294.448361][ T5901] usb 2-1: USB disconnect, device number 12
[  294.455429][  T795] playstation 0003:054C:05C4.0010: Failed to retrieve DualShock4 pairing info: -22
[  294.478171][  T795] playstation 0003:054C:05C4.0010: Failed to get MAC address from DualShock4
[  294.507684][  T795] playstation 0003:054C:05C4.0010: Failed to create dualshock4.
[  294.545314][T10984] fido_id[10984]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  294.561149][  T795] playstation 0003:054C:05C4.0010: probe with driver playstation failed with error -22
[  294.680853][  T795] usb 5-1: USB disconnect, device number 15
[  295.112310][  T795] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[  295.299070][  T795] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4
[  295.336733][  T795] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[  295.412448][  T795] usb 4-1: config 0 interface 0 has no altsetting 0
[  295.509640][  T795] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  295.562573][  T795] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  295.572112][  T795] usb 4-1: Product: syz
[  295.630398][  T795] usb 4-1: Manufacturer: syz
[  295.672357][  T795] usb 4-1: SerialNumber: syz
[  295.765276][  T795] usb 4-1: config 0 descriptor??
[  295.789548][  T795] usb 4-1: selecting invalid altsetting 0
[  296.105173][ T5901] usb 4-1: USB disconnect, device number 14
[  296.566234][T11003] loop7: detected capacity change from 0 to 32768
[  296.596226][T11003] btrfs: Deprecated parameter 'usebackuproot'
[  296.625488][T11003] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  296.683246][T11003] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1577 (11003)
[  296.822913][T11003] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  296.869611][T11011] sctp: [Deprecated]: syz.8.1581 (pid 11011) Use of int in max_burst socket option.
[  296.869611][T11011] Use struct sctp_assoc_value instead
[  296.905893][T11003] BTRFS info (device loop7): using crc32c checksum algorithm
[  296.959995][T11014] loop3: detected capacity change from 0 to 1024
[  297.110225][   T49] BTRFS warning (device loop7): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  297.302588][T11003] BTRFS error (device loop7): failed to load root extent
[  297.330534][T11003] BTRFS warning (device loop7): try to load backup roots slot 1
[  297.341000][   T49] hfsplus: b-tree write err: -5, ino 4
[  297.377396][   T13] BTRFS warning (device loop7): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  297.462701][T11003] BTRFS warning (device loop7): couldn't read tree root
[  297.470376][T11003] BTRFS warning (device loop7): try to load backup roots slot 2
[  297.511744][   T49] BTRFS error (device loop7): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  297.586129][T11003] BTRFS warning (device loop7): couldn't read tree root
[  297.605925][T11003] BTRFS warning (device loop7): try to load backup roots slot 3
[  297.744190][T11003] BTRFS info (device loop7): rebuilding free space tree
[  297.791702][T11003] BTRFS info (device loop7): checking UUID tree
[  297.829788][T11003] BTRFS info (device loop7): enabling ssd optimizations
[  297.849320][T11003] BTRFS info (device loop7): turning off barriers
[  297.880665][T11003] BTRFS info (device loop7): turning on sync discard
[  297.907934][T11003] BTRFS info (device loop7): enabling free space tree
[  297.939038][T11003] BTRFS info (device loop7): force clearing of disk cache
[  297.976323][T11003] BTRFS info (device loop7): enabling auto defrag
[  298.005762][T11003] BTRFS info (device loop7): trying to use backup root at mount time
[  298.030738][T11003] BTRFS info (device loop7): use zlib compression, level 3
[  298.048398][T11003] BTRFS info (device loop7): max_inline set to 0
[  298.204167][T10430] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  299.213840][T11058] tap0: tun_chr_ioctl cmd 1074812118
[  299.583503][T11052] loop7: detected capacity change from 0 to 32768
[  299.672025][T11052] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  299.787218][T11077] loop3: detected capacity change from 0 to 1024
[  299.831081][T11077] EXT4-fs: Ignoring removed bh option
[  299.849299][T11052] XFS (loop7): Ending clean mount
[  299.874890][T11052] XFS (loop7): Quotacheck needed: Please wait.
[  299.921613][T11077] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  300.008066][T11077] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  300.107847][T11052] XFS (loop7): Quotacheck: Done.
[  300.312962][ T5824] EXT4-fs error (device loop3): ext4_read_inline_dir:1486: inode #12: block 7: comm syz-executor: path /333/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  300.403540][ T5824] EXT4-fs (loop3): Remounting filesystem read-only
[  300.453004][ T5824] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  300.529216][T10430] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  300.770085][T11101] loop3: detected capacity change from 0 to 512
[  300.827489][T11101] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  300.886901][T11099] loop4: detected capacity change from 0 to 4096
[  300.895977][T11101] EXT4-fs (loop3): 1 truncate cleaned up
[  300.936305][T11101] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  300.977999][T11105] loop1: detected capacity change from 0 to 512
[  300.986183][T11099] ntfs3(loop4): ino=3, Correct links count -> 2.
[  301.029832][T11105] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  301.142294][T11101] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 13: comm syz.3.1605: path /334/file2: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2, rec_len=8, size=1024 fake=1
[  301.169654][T11108] program syz.8.1609 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  301.221967][T11099] ntfs3(loop4): ino=1a, mi_enum_attr
[  301.222333][T11105] EXT4-fs (loop1): 1 truncate cleaned up
[  301.236672][T11099] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  301.262098][T11101] EXT4-fs (loop3): Remounting filesystem read-only
[  301.297140][T11105] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  301.498474][T11112] loop8: detected capacity change from 0 to 2048
[  301.509232][ T5824] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  301.525207][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  301.605525][T11112] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  301.749733][T11112] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  301.836188][T11112] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.1611: bg 0: block 345: padding at end of block bitmap is not set
[  301.874107][T11119] loop3: detected capacity change from 0 to 4096
[  301.889381][T11119] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  301.907117][T11112] EXT4-fs (loop8): Remounting filesystem read-only
[  301.914527][T11112] fs-verity (loop8, inode 13): Error -117 writing Merkle tree block 0
[  301.946152][T11119] ntfs3(loop3): ino=1a, mi_enum_attr
[  301.951669][T11112] fs-verity (loop8, inode 13): Error -117 building Merkle tree
[  301.959849][T11119] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  302.036425][ T9994] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  302.073488][T11119] ntfs3(loop3): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr
[  302.349362][T11132] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  302.769012][T11143] loop8: detected capacity change from 0 to 64
[  302.850548][T11126] loop1: detected capacity change from 0 to 32768
[  302.892749][T11126] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1616 (11126)
[  302.950482][T11126] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  302.982435][T11126] BTRFS info (device loop1): using blake2b checksum algorithm
[  303.068216][T11128] loop4: detected capacity change from 0 to 40427
[  303.129263][T11126] BTRFS info (device loop1): enabling ssd optimizations
[  303.138092][T11128] F2FS-fs (loop4): Image doesn't support compression
[  303.175640][T11128] F2FS-fs (loop4): build fault injection rate: 690
[  303.182964][T11126] BTRFS info (device loop1): turning on async discard
[  303.213663][T11128] F2FS-fs (loop4): build fault injection type: 0x35f7
[  303.222994][T11126] BTRFS info (device loop1): enabling free space tree
[  303.254042][T11128] F2FS-fs (loop4): invalid crc value
[  303.448767][ T5835] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  303.489886][T11128] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  303.545666][T11128] F2FS-fs (loop4): Start checkpoint disabled!
[  303.578608][T11128] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0
[  303.596758][T11128] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  303.713956][T11164] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1627'.
[  303.746109][T11128] syz.4.1618: attempt to access beyond end of device
[  303.746109][T11128] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  303.878464][   T49] kworker/u8:3: attempt to access beyond end of device
[  303.878464][   T49] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  303.926239][   T49] CPU: 0 UID: 0 PID: 49 Comm: kworker/u8:3 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  303.926273][   T49] Tainted: [L]=SOFTLOCKUP
[  303.926282][   T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  303.926296][   T49] Workqueue: writeback wb_workfn (flush-7:4)
[  303.926341][   T49] Call Trace:
[  303.926350][   T49]  <TASK>
[  303.926359][   T49]  dump_stack_lvl+0xe8/0x150
[  303.926393][   T49]  f2fs_handle_critical_error+0x37c/0x540
[  303.926430][   T49]  f2fs_write_end_io+0xcdb/0xff0
[  303.926494][   T49]  __submit_merged_bio+0x256/0x650
[  303.926532][   T49]  __submit_merged_write_cond+0x3c3/0x4e0
[  303.926571][   T49]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  303.926627][   T49]  f2fs_write_data_pages+0x2970/0x35e0
[  303.926705][   T49]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  303.926753][   T49]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  303.926830][   T49]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  303.926879][   T49]  ? __lock_acquire+0x6b5/0x2cf0
[  303.926927][   T49]  ? f2fs_update_inode+0x13d9/0x2620
[  303.926961][   T49]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  303.926993][   T49]  do_writepages+0x32e/0x550
[  303.927032][   T49]  ? reacquire_held_locks+0x104/0x190
[  303.927061][   T49]  ? writeback_sb_inodes+0x42a/0x1940
[  303.927096][   T49]  __writeback_single_inode+0x133/0x1060
[  303.927125][   T49]  ? do_raw_spin_unlock+0xf5/0x210
[  303.927152][   T49]  writeback_sb_inodes+0x92e/0x1940
[  303.927186][   T49]  ? ret_from_fork_asm+0x1a/0x30
[  303.927242][   T49]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  303.927266][   T49]  ? do_raw_spin_lock+0x12b/0x2f0
[  303.927339][   T49]  ? rcu_is_watching+0x15/0xb0
[  303.927379][   T49]  wb_writeback+0x445/0xad0
[  303.927411][   T49]  ? queue_io+0x291/0x450
[  303.927445][   T49]  ? __pfx_wb_writeback+0x10/0x10
[  303.927473][   T49]  ? do_raw_spin_lock+0x12b/0x2f0
[  303.927515][   T49]  wb_workfn+0x3f8/0xef0
[  303.927545][   T49]  ? __lock_acquire+0x6b5/0x2cf0
[  303.927568][   T49]  ? look_up_lock_class+0x57/0x110
[  303.927615][   T49]  ? __pfx_wb_workfn+0x10/0x10
[  303.927654][   T49]  ? do_raw_spin_lock+0x12b/0x2f0
[  303.927672][   T49]  ? lock_acquire+0x106/0x330
[  303.927700][   T49]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  303.927726][   T49]  ? process_one_work+0x87c/0x15a0
[  303.927755][   T49]  ? process_one_work+0x87c/0x15a0
[  303.927797][   T49]  ? process_one_work+0x87c/0x15a0
[  303.927823][   T49]  process_one_work+0x949/0x15a0
[  303.927879][   T49]  ? __pfx_process_one_work+0x10/0x10
[  303.927904][   T49]  ? do_raw_spin_lock+0x12b/0x2f0
[  303.927947][   T49]  worker_thread+0xb46/0x1140
[  303.927989][   T49]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  303.928042][   T49]  kthread+0x388/0x470
[  303.928076][   T49]  ? __pfx_worker_thread+0x10/0x10
[  303.928101][   T49]  ? __pfx_kthread+0x10/0x10
[  303.928136][   T49]  ret_from_fork+0x51b/0xa40
[  303.928168][   T49]  ? __pfx_ret_from_fork+0x10/0x10
[  303.928193][   T49]  ? __switch_to+0xc7d/0x1400
[  303.928223][   T49]  ? __pfx_kthread+0x10/0x10
[  303.928259][   T49]  ret_from_fork_asm+0x1a/0x30
[  303.928312][   T49]  </TASK>
[  303.928322][   T49] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  304.332578][T11169] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities
[  304.734540][ T5873] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  304.906820][ T5873] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  304.928038][T11177] set_capacity_and_notify: 2 callbacks suppressed
[  304.928058][T11177] loop7: detected capacity change from 0 to 128
[  304.952703][ T5873] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  304.965894][T11177] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  304.999951][ T5873] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  305.019805][T11177] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  305.032308][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  305.041369][ T5873] usb 2-1: SerialNumber: syz
[  305.308320][ T5873] usb 2-1: 0:2 : does not exist
[  305.408345][ T5873] usb 2-1: USB disconnect, device number 13
[  305.461129][ T9016] udevd[9016]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  305.605197][T11169] loop3: detected capacity change from 0 to 32768
[  305.653394][T11169] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  305.672646][T11169] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  305.728549][T11169] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[  305.746560][ T5873] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  305.756856][ T5873] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  305.999052][ T5873] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 242ms
[  306.024464][T11199] loop8: detected capacity change from 0 to 1024
[  306.028088][ T5873] gfs2: fsid=syz:syz.0: jid=0: Done
[  306.061622][T11169] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  306.133800][T11199] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  306.208186][T11199] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  306.356002][ T9994] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  306.561931][T11210] tipc: Started in network mode
[  306.582926][T11210] tipc: Node identity ac14140f, cluster identity 4711
[  306.624019][T11210] tipc: New replicast peer: 255.255.255.255
[  306.631056][T11210] tipc: Enabled bearer <udp:syz2>, priority 10
[  306.907003][T11205] loop7: detected capacity change from 0 to 32768
[  306.946569][T11218] Bluetooth: MGMT ver 1.23
[  306.958976][T11205] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1643 (11205)
[  307.030677][T11205] BTRFS info (device loop7): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  307.058540][T11205] BTRFS info (device loop7): using blake2b checksum algorithm
[  307.111511][T11208] loop1: detected capacity change from 0 to 32768
[  307.242678][T11208] ERROR: (device loop1): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 3
[  307.242678][T11208] 
[  307.321254][T11205] BTRFS info (device loop7): enabling ssd optimizations
[  307.359520][T11208] ERROR: (device loop1): remounting filesystem as read-only
[  307.369169][T11205] BTRFS info (device loop7): turning on async discard
[  307.388579][T11205] BTRFS info (device loop7): enabling free space tree
[  307.625994][ T5873] tipc: Node number set to 2886997007
[  307.805958][T11253] sctp: [Deprecated]: syz.4.1658 (pid 11253) Use of struct sctp_assoc_value in delayed_ack socket option.
[  307.805958][T11253] Use struct sctp_sack_info instead
[  307.831091][T10430] BTRFS info (device loop7): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  308.477752][T11270] loop1: detected capacity change from 0 to 1024
[  308.780448][   T29] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  308.810283][T11280] mac80211_hwsim hwsim18 wlan0: entered promiscuous mode
[  308.828207][T11280] macsec1: entered promiscuous mode
[  308.834804][T11280] macsec1: entered allmulticast mode
[  308.843359][T11280] mac80211_hwsim hwsim18 wlan0: entered allmulticast mode
[  308.944120][   T29] usb 5-1: Using ep0 maxpacket: 16
[  308.965724][   T29] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  309.016855][   T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  309.056795][   T29] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  309.069955][   T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  309.127216][   T29] usb 5-1: Product: syz
[  309.148368][   T29] usb 5-1: Manufacturer: syz
[  309.162743][   T29] usb 5-1: SerialNumber: syz
[  309.187306][   T29] usb 5-1: config 0 descriptor??
[  309.228614][   T29] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  309.281152][   T29] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class)
[  309.301928][T11293] loop7: detected capacity change from 0 to 2048
[  309.339334][T11293] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  309.725469][T11303] loop1: detected capacity change from 0 to 2048
[  309.767256][T11309] loop8: detected capacity change from 0 to 512
[  309.814393][T11303] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  309.827655][   T29] em28xx 5-1:0.0: chip ID is em2860
[  309.848150][T11303] ext4 filesystem being mounted at /359/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  309.891770][T11309] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  309.905517][T11309] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  309.925643][T11314] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1684'.
[  309.955689][T11317] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1680: bg 0: block 345: padding at end of block bitmap is not set
[  309.987493][T11317] EXT4-fs (loop1): Remounting filesystem read-only
[  310.015505][T11309] EXT4-fs error (device loop8): ext4_get_first_dir_block:3527: inode #12: comm syz.8.1683: Attempting to read directory block (0) that is past i_size (3)
[  310.038553][   T29] em28xx 5-1:0.0: Config register raw data: 0xfffffffb
[  310.047346][   T29] em28xx 5-1:0.0: AC97 chip type couldn't be determined
[  310.060293][   T29] em28xx 5-1:0.0: No AC97 audio processor
[  310.079726][   T29] usb 5-1: USB disconnect, device number 16
[  310.095009][T11309] EXT4-fs (loop8): Remounting filesystem read-only
[  310.124556][   T29] em28xx 5-1:0.0: Disconnecting em28xx
[  310.144514][   T29] em28xx 5-1:0.0: Freeing device
[  310.197819][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  310.220028][ T9994] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  310.232552][   T49] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  310.272225][   T49] Quota error (device loop8): write_blk: dquota write failed
[  310.304487][   T49] Quota error (device loop8): free_dqentry: Can't write quota data block 5
[  311.800782][T11356] loop1: detected capacity change from 0 to 1024
[  311.839343][T11356] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended
[  311.924112][T11356] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  311.941028][T11346] loop8: detected capacity change from 0 to 32768
[  311.981715][T11361] loop3: detected capacity change from 0 to 64
[  312.024697][T11354] loop4: detected capacity change from 0 to 4096
[  312.034573][T11346] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.1697 (11346)
[  312.062003][T11356] EXT4-fs (loop1): shut down requested (0)
[  312.089358][T11361] MINIX-fs: bad superblock
[  312.094701][T11354] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  312.170482][T11346] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  312.218302][T11346] BTRFS info (device loop8): using sha256 checksum algorithm
[  312.358915][T11354] ntfs3(loop4): ino=19, mi_enum_attr
[  312.376743][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  312.416814][T11346] BTRFS info (device loop8): rebuilding free space tree
[  312.465936][T11354] ntfs3(loop4): failed to convert "c46c" to iso8859-15
[  312.502765][T11354] ntfs3(loop4): ino=20, mi_enum_attr
[  312.518392][T11346] BTRFS info (device loop8): disabling free space tree
[  312.532806][T11346] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  312.593207][T11346] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  312.716565][T11346] BTRFS info (device loop8): setting nodatasum
[  312.762235][T11346] BTRFS info (device loop8): setting nodatacow
[  312.789865][T11346] BTRFS info (device loop8): turning off barriers
[  312.838616][T11346] BTRFS info (device loop8): force clearing of disk cache
[  313.085104][ T9994] BTRFS info (device loop8): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  313.536630][T11400] loop4: detected capacity change from 0 to 4096
[  313.612292][T11400] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  313.829969][T11400] ntfs3(loop4): Failed to load $Extend (-22).
[  313.877695][T11406] loop1: detected capacity change from 0 to 512
[  313.882416][T11400] ntfs3(loop4): Failed to initialize $Extend.
[  313.965832][T11406] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  314.138629][T11406] EXT4-fs (loop1): 1 truncate cleaned up
[  314.196834][T11406] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  314.385408][T11413] EXT4-fs error (device loop1): __ext4_iget:5405: inode #12: block 2: comm syz.1.1714: invalid block
[  314.421716][T11389] loop3: detected capacity change from 0 to 32768
[  314.434332][T11413] EXT4-fs (loop1): Remounting filesystem read-only
[  314.447266][T11389] xfs: Deprecated parameter 'noikeep'
[  314.492882][T11389] XFS: noikeep mount option is deprecated.
[  314.495991][T11394] loop7: detected capacity change from 0 to 32768
[  314.580765][T11389] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  314.593930][T11394] 
[  314.593930][T11394]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  314.593930][T11394] 
[  314.619054][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  314.659985][T11394] ERROR: (device loop7): diWrite: ixpxd invalid
[  314.659985][T11394] 
[  314.766733][T11394] ERROR: (device loop7): txCommit: 
[  314.766733][T11394] 
[  314.801758][T11389] XFS (loop3): Ending clean mount
[  314.825340][T11422] ERROR: (device loop7): diWrite: ixpxd invalid
[  314.825340][T11422] 
[  314.838277][T11422] ERROR: (device loop7): txCommit: 
[  314.838277][T11422] 
[  314.851139][T11389] XFS (loop3): Quotacheck needed: Please wait.
[  314.962292][T11389] XFS (loop3): Quotacheck: Done.
[  315.007789][T10430] 
[  315.007789][T10430]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  315.007789][T10430] 
[  315.024886][T11410] loop8: detected capacity change from 0 to 32768
[  315.069796][T11410] btrfs: Deprecated parameter 'usebackuproot'
[  315.076251][T10430] 
[  315.076251][T10430]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  315.076251][T10430] 
[  315.102515][T11410] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  315.175149][T11410] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.1715 (11410)
[  315.211291][ T5824] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  315.276745][T11410] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  315.300249][T11410] BTRFS info (device loop8): using crc32c checksum algorithm
[  315.443621][  T144] BTRFS warning (device loop8): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  315.545302][T11410] BTRFS error (device loop8): failed to load root extent
[  315.555437][T11410] BTRFS warning (device loop8): try to load backup roots slot 1
[  315.564092][  T144] BTRFS warning (device loop8): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  315.578451][T11410] BTRFS warning (device loop8): couldn't read tree root
[  315.586028][T11444] loop7: detected capacity change from 0 to 4096
[  315.595596][T11410] BTRFS warning (device loop8): try to load backup roots slot 2
[  315.636254][  T144] BTRFS error (device loop8): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  315.658933][T11445] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  315.687541][T11410] BTRFS warning (device loop8): couldn't read tree root
[  315.706836][T11444] NILFS error (device loop7): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0
[  315.735319][T11410] BTRFS warning (device loop8): try to load backup roots slot 3
[  315.790435][T11444] Remounting filesystem read-only
[  315.802299][T11444] NILFS error (device loop7): nilfs_readdir: bad page in #2
[  315.860473][T11410] BTRFS info (device loop8): rebuilding free space tree
[  315.944654][T11410] BTRFS info (device loop8): checking UUID tree
[  315.984285][T11410] BTRFS info (device loop8): enabling ssd optimizations
[  316.022262][T11410] BTRFS info (device loop8): turning on sync discard
[  316.029021][T11410] BTRFS info (device loop8): enabling free space tree
[  316.082443][T11410] BTRFS info (device loop8): force clearing of disk cache
[  316.089644][T11410] BTRFS info (device loop8): enabling auto defrag
[  316.137124][T11410] BTRFS info (device loop8): trying to use backup root at mount time
[  316.167179][T11452] input: syz0 as /devices/virtual/input/input16
[  316.177663][T11410] BTRFS info (device loop8): use zstd compression, level 3
[  316.621792][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  316.628629][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  316.697350][ T9994] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  316.895769][T11472] loop3: detected capacity change from 0 to 128
[  316.968142][T11474] loop1: detected capacity change from 0 to 64
[  317.404863][T11483] program syz.3.1736 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  317.535770][T11468] loop4: detected capacity change from 0 to 32768
[  317.557511][T11487] loop1: detected capacity change from 0 to 1024
[  317.587930][T11468] JBD2: Ignoring recovery information on journal
[  317.643441][T11487] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  317.694122][T11487] ext4 filesystem being mounted at /380/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  317.775350][T11468] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  317.854554][   T12] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: comm kworker/u8:0: lblock 0 mapped to illegal pblock 0 (length 1)
[  317.906737][T11502] random: crng reseeded on system resumption
[  317.908219][   T12] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  317.948258][   T12] EXT4-fs (loop1): This should not happen!! Data will be lost
[  317.948258][   T12] 
[  317.975884][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  318.136925][ T5830] ocfs2: Unmounting device (7,4) on (node local)
[  318.272539][  T144] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  318.590854][T11517] bond1: invalid ARP target 0.0.0.0 specified for addition
[  318.598501][T11517] bond1: option arp_ip_target: invalid value (0)
[  318.609309][T11517] bond1 (unregistering): Released all slaves
[  318.811339][T11526] loop4: detected capacity change from 0 to 1024
[  318.844323][T11512] loop3: detected capacity change from 0 to 32768
[  318.870408][T11526] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  318.911048][T11526] ext4 filesystem being mounted at /389/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  318.958784][T11512] JBD2: Ignoring recovery information on journal
[  319.101059][T11512] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  319.126137][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  319.602291][ T5880] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  319.784556][ T5880] usb 5-1: config 0 has no interfaces?
[  319.795180][ T5880] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  319.823562][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  319.842456][ T5880] usb 5-1: Product: syz
[  319.857482][ T5880] usb 5-1: Manufacturer: syz
[  319.873233][ T5880] usb 5-1: SerialNumber: syz
[  319.893987][ T5880] usb 5-1: config 0 descriptor??
[  320.117485][ T5880] usb 5-1: USB disconnect, device number 17
[  320.385793][ T5824] ocfs2: Unmounting device (7,3) on (node local)
[  320.534938][T11540] loop7: detected capacity change from 0 to 131072
[  320.543854][T11540] F2FS-fs (loop7): QUOTA feature is enabled, so ignore qf_name
[  320.551486][T11540] F2FS-fs (loop7): QUOTA feature is enabled, so ignore qf_name
[  320.560489][T11540] F2FS-fs (loop7): QUOTA feature is enabled, so ignore qf_name
[  320.579391][T11540] F2FS-fs (loop7): invalid crc value
[  320.681197][T11540] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  320.691061][T11540] F2FS-fs (loop7): Mounted with checkpoint version = 1b41e955
[  321.935339][T11580] loop3: detected capacity change from 0 to 512
[  321.956971][T11580] EXT4-fs: Ignoring removed oldalloc option
[  322.014191][T11580] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  322.045557][T11580] ext4 filesystem being mounted at /370/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  322.265590][T11580] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1777: bg 0: block 217: padding at end of block bitmap is not set
[  322.342224][T11580] EXT4-fs (loop3): Remounting filesystem read-only
[  322.445241][ T5824] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  322.445254][T11576] loop1: detected capacity change from 0 to 32768
[  322.489252][T11576] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1775 (11576)
[  322.562252][T11576] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  322.622253][T11576] BTRFS info (device loop1): using sha256 checksum algorithm
[  322.893722][T11576] BTRFS info (device loop1): enabling ssd optimizations
[  322.900749][T11576] BTRFS info (device loop1): turning on async discard
[  322.952288][T11576] BTRFS info (device loop1): enabling free space tree
[  323.096189][ T5835] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  323.182318][ T5924] usb 5-1: new full-speed USB device number 18 using dummy_hcd
[  323.350441][T11625] syzkaller0: tun_chr_ioctl cmd 1074025680
[  323.373756][ T5924] usb 5-1: config 0 interface 0 altsetting 127 endpoint 0x81 has invalid wMaxPacketSize 0
[  323.390930][ T5924] usb 5-1: config 0 interface 0 has no altsetting 0
[  323.411102][ T5924] usb 5-1: New USB device found, idVendor=0b05, idProduct=1a30, bcdDevice= 0.00
[  323.426612][T11627] loop7: detected capacity change from 0 to 2048
[  323.433537][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  323.483824][ T5924] usb 5-1: config 0 descriptor??
[  323.509847][T11627] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  323.649730][T11626] UDF-fs: warning (device loop7): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 0 lbcount: 4096 extent 56+4096
[  323.988920][ T5924] asus 0003:0B05:1A30.0011: unknown main item tag 0x0
[  324.032778][ T5924] asus 0003:0B05:1A30.0011: unknown main item tag 0x0
[  324.039649][ T5924] asus 0003:0B05:1A30.0011: unknown main item tag 0x0
[  324.080731][ T5924] asus 0003:0B05:1A30.0011: unknown main item tag 0x0
[  324.100167][ T5924] asus 0003:0B05:1A30.0011: unknown main item tag 0x0
[  324.124777][T11634] loop1: detected capacity change from 0 to 4096
[  324.134958][ T5924] asus 0003:0B05:1A30.0011: unknown main item tag 0x0
[  324.162650][ T5924] asus 0003:0B05:1A30.0011: unknown main item tag 0x0
[  324.169532][ T5924] asus 0003:0B05:1A30.0011: unknown main item tag 0x0
[  324.216586][ T5924] asus 0003:0B05:1A30.0011: unknown main item tag 0x0
[  324.223641][T11637] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  324.247188][ T5924] asus 0003:0B05:1A30.0011: unknown main item tag 0x0
[  324.282100][ T5924] asus 0003:0B05:1A30.0011: unexpected long global item
[  324.318939][ T5924] asus 0003:0B05:1A30.0011: Asus hid parse failed: -22
[  324.335109][ T5924] asus 0003:0B05:1A30.0011: probe with driver asus failed with error -22
[  324.353463][T11639] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1793'.
[  324.407951][ T5924] usb 5-1: USB disconnect, device number 18
[  324.796708][T11644] UHID_CREATE from different security context by process 85 (syz.7.1790), this is not allowed.
[  324.838176][T11646] loop3: detected capacity change from 0 to 1024
[  324.934174][   T36] hfsplus: b-tree write err: -5, ino 4
[  325.371019][T11641] loop1: detected capacity change from 0 to 40427
[  325.442556][T11641] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  325.450362][T11641] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  325.492709][T11641] F2FS-fs (loop1): invalid crc value
[  325.661402][T11641] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  325.710000][T11641] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  325.732600][T11641] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  325.819125][   T30] audit: type=1800 audit(1769711151.892:393): pid=11641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1794" name="file1" dev="loop1" ino=10 res=0 errno=0
[  325.965061][T11666] loop4: detected capacity change from 0 to 1024
[  325.999694][T11666] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  326.034175][T11666] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  326.071685][T11666] EXT4-fs (loop4): orphan cleanup on readonly fs
[  326.116169][T11666] EXT4-fs error (device loop4): __ext4_get_inode_loc:4809: comm syz.4.1804: Invalid inode table block 0 in block_group 0
[  326.166462][T11666] loop4: lost filesystem error report for type 5 error -117
[  326.172794][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  326.186706][    C1] EXT4-fs (loop4): initial error at time 1769711152: __ext4_get_inode_loc:4809
[  326.195838][    C1] EXT4-fs (loop4): last error at time 1769711152: __ext4_get_inode_loc:4809
[  326.222258][T11666] EXT4-fs (loop4): Remounting filesystem read-only
[  326.228943][T11666] Quota error (device loop4): write_blk: dquota write failed
[  326.289040][T11666] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  326.371344][T11666] EXT4-fs (loop4): 1 truncate cleaned up
[  326.392808][T11666] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  326.431826][T11652] loop3: detected capacity change from 0 to 65536
[  326.504811][T11666] EXT4-fs (loop4): shut down requested (1)
[  326.551423][T11652] XFS (loop3): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  326.670973][T11652] XFS (loop3): Ending clean mount
[  326.688287][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  326.795147][ T5824] XFS (loop3): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  326.919690][T11687] loop8: detected capacity change from 0 to 256
[  327.004094][ T5880] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  327.020339][   T30] audit: type=1800 audit(1769711153.092:394): pid=11687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1811" name="bus" dev="loop8" ino=1048704 res=0 errno=0
[  327.089176][T11687] Invalid ELF header magic: != ELF
[  327.116722][T11690] loop3: detected capacity change from 0 to 128
[  327.162958][T11690] EXT4-fs (loop3): Test dummy encryption mode enabled
[  327.203685][ T5880] usb 2-1: Using ep0 maxpacket: 16
[  327.215732][T11690] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  327.273498][ T5880] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  327.312337][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.320582][ T5880] usb 2-1: Product: syz
[  327.330709][T11690] ext4 filesystem being mounted at /378/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  327.375053][ T5880] usb 2-1: Manufacturer: syz
[  327.379723][ T5880] usb 2-1: SerialNumber: syz
[  327.509719][ T5824] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  327.659354][ T5880] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  327.707314][T11702] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1
[  327.715871][ T5880] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  327.717298][T11702] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1
[  327.737010][T11702] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1
[  327.746291][T11702] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1
[  327.755481][T11702] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1
[  327.764572][T11702] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1
[  327.773921][T11702] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1
[  327.783426][T11702] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1
[  327.785682][ T5880] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  327.792946][T11702] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1
[  327.792986][T11702] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1
[  327.882907][ T5880] usb 2-1: media controller created
[  327.925578][ T5880] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  328.068507][ T5880] zl10353_read_register: readreg error (reg=127, ret==-71)
[  328.181718][ T5880] dvb_usb_gl861 2-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[  328.242858][ T5880] usb 2-1: USB disconnect, device number 14
[  328.934972][T11714] netlink: 128 bytes leftover after parsing attributes in process `syz.7.1822'.
[  328.961054][T11714] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1822'.
[  328.985318][T11710] loop8: detected capacity change from 0 to 32768
[  329.016502][T11710] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.1820 (11710)
[  329.851704][T11710] BTRFS info (device loop8): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  329.960461][T11710] BTRFS info (device loop8): using blake2b checksum algorithm
[  330.068217][T11704] loop4: detected capacity change from 0 to 262144
[  330.081251][T11704] F2FS-fs (loop4): invalid crc value
[  330.309239][T11710] BTRFS info (device loop8): enabling ssd optimizations
[  330.312410][T11704] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  330.328185][T11704] F2FS-fs (loop4): Start checkpoint disabled!
[  330.342383][T11743] loop1: detected capacity change from 0 to 512
[  330.363381][T11710] BTRFS info (device loop8): turning on async discard
[  330.384814][T11710] BTRFS info (device loop8): enabling free space tree
[  330.412283][T11704] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0
[  330.430031][T11704] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  330.902437][T11756] netlink: 'syz.1.1833': attribute type 4 has an invalid length.
[  330.904360][ T9994] BTRFS info (device loop8): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  331.247935][T11765] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1835'.
[  331.928038][ T5924] kernel read not supported for file /dsp (pid: 5924 comm: kworker/1:5)
[  332.135818][T11783] loop8: detected capacity change from 0 to 1024
[  332.193346][T11783] EXT4-fs: Ignoring removed orlov option
[  332.270023][T11783] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  332.679177][ T9994] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  332.768523][T11795] loop4: detected capacity change from 0 to 2048
[  332.821005][T11795] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  332.869023][T11795] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  333.537952][T11812] sctp: [Deprecated]: syz.4.1854 (pid 11812) Use of int in maxseg socket option.
[  333.537952][T11812] Use struct sctp_assoc_value instead
[  334.083722][T11824] team_slave_1: entered promiscuous mode
[  334.093823][T11826] input: syz0 as /devices/virtual/input/input17
[  334.107961][T11824] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  334.578100][ T5873] hid-generic 0005:15C2:0009.0012: item fetching failed at offset 0/1
[  334.630565][ T5873] hid-generic 0005:15C2:0009.0012: probe with driver hid-generic failed with error -22
[  334.859045][   T30] audit: type=1326 audit(1769711160.932:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11844 comm="syz.8.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa57a99aeb9 code=0x7ffc0000
[  334.938861][   T30] audit: type=1326 audit(1769711160.932:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11844 comm="syz.8.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa57a99aeb9 code=0x7ffc0000
[  335.007770][   T30] audit: type=1326 audit(1769711160.962:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11844 comm="syz.8.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fa57a99aeb9 code=0x7ffc0000
[  335.130110][   T30] audit: type=1326 audit(1769711160.962:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11844 comm="syz.8.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa57a99aeb9 code=0x7ffc0000
[  335.184773][   T30] audit: type=1326 audit(1769711160.962:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11844 comm="syz.8.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa57a99aeb9 code=0x7ffc0000
[  335.269141][   T30] audit: type=1326 audit(1769711160.972:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11844 comm="syz.8.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fa57a99aeb9 code=0x7ffc0000
[  335.359313][ T5894] kernel read not supported for file /radio4 (pid: 5894 comm: kworker/0:7)
[  335.390608][   T30] audit: type=1326 audit(1769711160.972:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11844 comm="syz.8.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa57a99aeb9 code=0x7ffc0000
[  335.546123][   T30] audit: type=1326 audit(1769711160.972:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11844 comm="syz.8.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7fa57a99aeb9 code=0x7ffc0000
[  335.631231][   T30] audit: type=1326 audit(1769711160.972:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11844 comm="syz.8.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa57a99aeb9 code=0x7ffc0000
[  335.679148][   T30] audit: type=1326 audit(1769711160.972:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11844 comm="syz.8.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa57a99aeb9 code=0x7ffc0000
[  335.853984][T11861] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1876'.
[  335.921858][T11863] loop1: detected capacity change from 0 to 512
[  335.991962][T11863] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  336.029404][T11863] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.1877: bad orphan inode 131083
[  336.040567][T11863] loop1: lost filesystem error report for type 5 error -117
[  336.044249][T11863] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  336.077516][T11865] netlink: 'syz.4.1879': attribute type 14 has an invalid length.
[  336.391834][T11841] loop7: detected capacity change from 0 to 32768
[  336.508046][T11870] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1880'.
[  336.744023][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  336.931595][T11868] loop8: detected capacity change from 0 to 32768
[  337.008639][T11868] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.1878 (11868)
[  337.091279][T11868] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  337.186983][T11868] BTRFS info (device loop8): using sha256 checksum algorithm
[  337.407588][T11868] BTRFS info (device loop8): rebuilding free space tree
[  337.471896][T11868] BTRFS info (device loop8): disabling free space tree
[  337.481371][T11868] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  337.544138][T11868] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  337.633567][T11868] BTRFS info (device loop8): enabling ssd optimizations
[  337.640776][T11868] BTRFS info (device loop8): turning on async discard
[  337.692256][T11868] BTRFS info (device loop8): force clearing of disk cache
[  337.743874][T11868] BTRFS info (device loop8): enabling auto defrag
[  337.750551][T11868] BTRFS info (device loop8): max_inline set to 4096
[  338.065254][T11923] program syz.4.1897 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  338.145011][ T9994] BTRFS info (device loop8): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  338.514124][T11940] netem: incorrect ge model size
[  338.519751][T11940] netem: change failed
[  338.783263][T11949] netlink: 'syz.7.1908': attribute type 1 has an invalid length.
[  339.718503][T11957] loop8: detected capacity change from 0 to 40427
[  339.741022][T11957] F2FS-fs (loop8): Wrong SSA boundary, start(3584) end(4096) blocks(0)
[  339.782230][T11957] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  339.812257][T11957] F2FS-fs (loop8): build fault injection type: 0x6
[  339.831973][T11957] F2FS-fs (loop8): invalid crc value
[  340.061447][T11957] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  340.082405][T11957] F2FS-fs (loop8): Start checkpoint disabled!
[  340.101607][T11957] F2FS-fs (loop8): f2fs_disable_checkpoint() finish, err:0
[  340.122266][T11957] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  340.136854][T11957] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6
[  340.288823][ T3901] kworker/u8:6: attempt to access beyond end of device
[  340.288823][ T3901] loop8: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  340.316751][ T3901] CPU: 1 UID: 0 PID: 3901 Comm: kworker/u8:6 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  340.316787][ T3901] Tainted: [L]=SOFTLOCKUP
[  340.316795][ T3901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  340.316809][ T3901] Workqueue: writeback wb_workfn (flush-7:8)
[  340.316854][ T3901] Call Trace:
[  340.316862][ T3901]  <TASK>
[  340.316871][ T3901]  dump_stack_lvl+0xe8/0x150
[  340.316906][ T3901]  f2fs_handle_critical_error+0x37c/0x540
[  340.316943][ T3901]  f2fs_write_end_io+0xcdb/0xff0
[  340.316997][ T3901]  __submit_merged_bio+0x256/0x650
[  340.317034][ T3901]  f2fs_submit_merged_write+0x282/0x390
[  340.317068][ T3901]  ? __pfx_f2fs_submit_merged_write+0x10/0x10
[  340.317116][ T3901]  f2fs_sync_node_pages+0x14bf/0x1680
[  340.317170][ T3901]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  340.317197][ T3901]  ? __percpu_counter_sum+0x1c2/0x1e0
[  340.317270][ T3901]  ? unwind_next_frame+0xa5/0x23c0
[  340.317304][ T3901]  ? rcu_is_watching+0x15/0xb0
[  340.317333][ T3901]  ? blk_start_plug+0x51/0x1b0
[  340.317361][ T3901]  f2fs_write_node_pages+0x312/0x700
[  340.317395][ T3901]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  340.317434][ T3901]  ? __lock_acquire+0x6b5/0x2cf0
[  340.317463][ T3901]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  340.317491][ T3901]  do_writepages+0x32e/0x550
[  340.317529][ T3901]  ? reacquire_held_locks+0x104/0x190
[  340.317557][ T3901]  ? writeback_sb_inodes+0x42a/0x1940
[  340.317592][ T3901]  __writeback_single_inode+0x133/0x1060
[  340.317620][ T3901]  ? do_raw_spin_unlock+0xf5/0x210
[  340.317648][ T3901]  writeback_sb_inodes+0x92e/0x1940
[  340.317708][ T3901]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  340.317731][ T3901]  ? do_raw_spin_lock+0x12b/0x2f0
[  340.317804][ T3901]  ? rcu_is_watching+0x15/0xb0
[  340.317844][ T3901]  wb_writeback+0x445/0xad0
[  340.317892][ T3901]  ? queue_io+0x291/0x450
[  340.317929][ T3901]  ? __pfx_wb_writeback+0x10/0x10
[  340.317951][ T3901]  ? do_raw_spin_lock+0x12b/0x2f0
[  340.317994][ T3901]  wb_workfn+0x3f8/0xef0
[  340.318025][ T3901]  ? __lock_acquire+0x6b5/0x2cf0
[  340.318049][ T3901]  ? look_up_lock_class+0x57/0x110
[  340.318097][ T3901]  ? __pfx_wb_workfn+0x10/0x10
[  340.318135][ T3901]  ? do_raw_spin_lock+0x12b/0x2f0
[  340.318154][ T3901]  ? lock_acquire+0x106/0x330
[  340.318182][ T3901]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  340.318207][ T3901]  ? process_one_work+0x87c/0x15a0
[  340.318235][ T3901]  ? process_one_work+0x87c/0x15a0
[  340.318284][ T3901]  ? process_one_work+0x87c/0x15a0
[  340.318309][ T3901]  process_one_work+0x949/0x15a0
[  340.318365][ T3901]  ? __pfx_process_one_work+0x10/0x10
[  340.318389][ T3901]  ? do_raw_spin_lock+0x12b/0x2f0
[  340.318433][ T3901]  worker_thread+0xb46/0x1140
[  340.318496][ T3901]  kthread+0x388/0x470
[  340.318530][ T3901]  ? __pfx_worker_thread+0x10/0x10
[  340.318555][ T3901]  ? __pfx_kthread+0x10/0x10
[  340.318590][ T3901]  ret_from_fork+0x51b/0xa40
[  340.318622][ T3901]  ? __pfx_ret_from_fork+0x10/0x10
[  340.318647][ T3901]  ? __switch_to+0xc7d/0x1400
[  340.318676][ T3901]  ? __pfx_kthread+0x10/0x10
[  340.318712][ T3901]  ret_from_fork_asm+0x1a/0x30
[  340.318767][ T3901]  </TASK>
[  340.318776][ T3901] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[  340.645997][ T3901] CPU: 1 UID: 0 PID: 3901 Comm: kworker/u8:6 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  340.646039][ T3901] Tainted: [L]=SOFTLOCKUP
[  340.646047][ T3901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  340.646061][ T3901] Workqueue: writeback wb_workfn (flush-7:8)
[  340.646104][ T3901] Call Trace:
[  340.646112][ T3901]  <TASK>
[  340.646121][ T3901]  dump_stack_lvl+0xe8/0x150
[  340.646154][ T3901]  f2fs_handle_critical_error+0x37c/0x540
[  340.646191][ T3901]  f2fs_write_end_io+0xcdb/0xff0
[  340.646247][ T3901]  __submit_merged_bio+0x256/0x650
[  340.646293][ T3901]  f2fs_submit_merged_write+0x282/0x390
[  340.646328][ T3901]  ? __pfx_f2fs_submit_merged_write+0x10/0x10
[  340.646378][ T3901]  f2fs_sync_node_pages+0x14bf/0x1680
[  340.646431][ T3901]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  340.646458][ T3901]  ? __percpu_counter_sum+0x1c2/0x1e0
[  340.646523][ T3901]  ? unwind_next_frame+0xa5/0x23c0
[  340.646556][ T3901]  ? rcu_is_watching+0x15/0xb0
[  340.646584][ T3901]  ? blk_start_plug+0x51/0x1b0
[  340.646611][ T3901]  f2fs_write_node_pages+0x312/0x700
[  340.646646][ T3901]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  340.646684][ T3901]  ? __lock_acquire+0x6b5/0x2cf0
[  340.646713][ T3901]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  340.646741][ T3901]  do_writepages+0x32e/0x550
[  340.646779][ T3901]  ? reacquire_held_locks+0x104/0x190
[  340.646808][ T3901]  ? writeback_sb_inodes+0x42a/0x1940
[  340.646842][ T3901]  __writeback_single_inode+0x133/0x1060
[  340.646871][ T3901]  ? do_raw_spin_unlock+0xf5/0x210
[  340.646899][ T3901]  writeback_sb_inodes+0x92e/0x1940
[  340.646958][ T3901]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  340.646982][ T3901]  ? do_raw_spin_lock+0x12b/0x2f0
[  340.647054][ T3901]  ? rcu_is_watching+0x15/0xb0
[  340.647095][ T3901]  wb_writeback+0x445/0xad0
[  340.647125][ T3901]  ? queue_io+0x291/0x450
[  340.647161][ T3901]  ? __pfx_wb_writeback+0x10/0x10
[  340.647182][ T3901]  ? do_raw_spin_lock+0x12b/0x2f0
[  340.647225][ T3901]  wb_workfn+0x3f8/0xef0
[  340.647255][ T3901]  ? __lock_acquire+0x6b5/0x2cf0
[  340.647286][ T3901]  ? look_up_lock_class+0x57/0x110
[  340.647334][ T3901]  ? __pfx_wb_workfn+0x10/0x10
[  340.647372][ T3901]  ? do_raw_spin_lock+0x12b/0x2f0
[  340.647391][ T3901]  ? lock_acquire+0x106/0x330
[  340.647419][ T3901]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  340.647444][ T3901]  ? process_one_work+0x87c/0x15a0
[  340.647472][ T3901]  ? process_one_work+0x87c/0x15a0
[  340.647514][ T3901]  ? process_one_work+0x87c/0x15a0
[  340.647539][ T3901]  process_one_work+0x949/0x15a0
[  340.647595][ T3901]  ? __pfx_process_one_work+0x10/0x10
[  340.647620][ T3901]  ? do_raw_spin_lock+0x12b/0x2f0
[  340.647664][ T3901]  worker_thread+0xb46/0x1140
[  340.647726][ T3901]  kthread+0x388/0x470
[  340.647760][ T3901]  ? __pfx_worker_thread+0x10/0x10
[  340.647785][ T3901]  ? __pfx_kthread+0x10/0x10
[  340.647820][ T3901]  ret_from_fork+0x51b/0xa40
[  340.647852][ T3901]  ? __pfx_ret_from_fork+0x10/0x10
[  340.647878][ T3901]  ? __switch_to+0xc7d/0x1400
[  340.647907][ T3901]  ? __pfx_kthread+0x10/0x10
[  340.647943][ T3901]  ret_from_fork_asm+0x1a/0x30
[  340.647994][ T3901]  </TASK>
[  340.648004][ T3901] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[  341.013381][ T5829] Bluetooth: hci5: command 0x1003 tx timeout
[  341.028991][   T51] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  341.472522][T11996] loop3: detected capacity change from 0 to 64
[  341.490362][T11988] loop1: detected capacity change from 0 to 32768
[  341.560571][T11988] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1926 (11988)
[  341.642495][T11988] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  341.695532][T11988] BTRFS info (device loop1): using blake2b checksum algorithm
[  341.960041][T11988] BTRFS info (device loop1): enabling ssd optimizations
[  342.022214][T11988] BTRFS info (device loop1): turning on async discard
[  342.036321][T12000] loop7: detected capacity change from 0 to 32768
[  342.068070][T11988] BTRFS info (device loop1): enabling free space tree
[  342.076153][T11988] BTRFS info (device loop1): use zstd compression, level 3
[  342.100034][T12000] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  342.197427][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  342.197447][   T30] audit: type=1800 audit(1769711168.272:406): pid=11988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1926" name="file2" dev="loop1" ino=261 res=0 errno=0
[  342.292634][ T5894] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  342.424539][T12000] XFS (loop7): Ending clean mount
[  342.473286][ T5894] usb 9-1: Using ep0 maxpacket: 32
[  342.481316][T12000] XFS (loop7): Quotacheck needed: Please wait.
[  342.507023][ T5894] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10
[  342.540109][ T5894] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024
[  342.601405][T12000] XFS (loop7): Quotacheck: Done.
[  342.606039][ T5894] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  342.633180][ T5894] usb 9-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  342.642952][ T5894] usb 9-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  342.651590][ T5894] usb 9-1: Product: syz
[  342.656630][ T5894] usb 9-1: Manufacturer: syz
[  342.661455][ T5894] usb 9-1: SerialNumber: syz
[  342.699595][ T5894] input: appletouch as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/input/input18
[  342.710567][ T5835] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  342.799875][T10430] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  342.938078][T12040] loop4: detected capacity change from 0 to 512
[  343.002476][T12040] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  343.104701][ T5894] usb 9-1: USB disconnect, device number 3
[  343.122568][T12040] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1940: bad orphan inode 131083
[  343.202272][T12040] loop4: lost filesystem error report for type 5 error -117
[  343.212180][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  343.226139][    C0] EXT4-fs (loop4): initial error at time 1769711169: ext4_orphan_get:1417
[  343.234762][    C0] EXT4-fs (loop4): last error at time 1769711169: ext4_orphan_get:1417
[  343.264266][T12040] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  343.340791][ T5894] appletouch 9-1:1.0: input: appletouch disconnected
[  343.409218][   T30] audit: type=1800 audit(1769711169.472:407): pid=12040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1940" name="file1" dev="loop4" ino=15 res=0 errno=0
[  344.047484][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  344.101071][T12049] loop3: detected capacity change from 0 to 65536
[  344.110191][ T5873] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  344.236928][T12049] XFS (loop3): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  344.272898][ T5873] usb 2-1: Using ep0 maxpacket: 32
[  344.286150][ T5873] usb 2-1: config 0 has an invalid interface number: 85 but max is 0
[  344.309571][ T5873] usb 2-1: config 0 has no interface number 0
[  344.316540][ T5873] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  344.341425][ T5873] usb 2-1: config 0 interface 85 has no altsetting 0
[  344.364540][ T5873] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  344.375041][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  344.384033][ T5873] usb 2-1: Product: syz
[  344.388415][ T5873] usb 2-1: Manufacturer: syz
[  344.393459][ T5873] usb 2-1: SerialNumber: syz
[  344.416082][ T5873] usb 2-1: config 0 descriptor??
[  344.457753][T12049] XFS (loop3): Ending clean mount
[  344.477104][T12049] XFS (loop3): Metadata CRC error detected at xfs_agfl_read_verify+0x139/0x200, xfs_agfl block 0x3 
[  344.489241][T12049] XFS (loop3): Unmount and run xfs_repair
[  344.495093][T12049] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  344.502550][T12049] 00000000: 58 41 46 4c 00 00 00 00 d6 f6 9d bd 8c 5d 46 be  XAFL.........]F.
[  344.511514][T12049] 00000010: b8 8e 92 c0 ae 88 ce b2 00 00 00 00 00 00 00 00  ................
[  344.520494][T12049] 00000020: 35 fc 5c 25 ff 00 ff ff 00 00 00 05 00 00 00 06  5.\%............
[  344.529451][T12049] 00000030: 00 00 00 07 00 00 00 08 ff ff ff ff ff ff ff ff  ................
[  344.538725][T12049] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  344.547777][T12049] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  344.556731][T12049] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  344.565820][T12049] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  344.575237][T12049] XFS (loop3): metadata I/O error in "xfs_alloc_read_agfl+0x233/0x430" at daddr 0x3 len 1 error 74
[  344.587360][T12049] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x518/0x8a0 (fs/xfs/xfs_trans_buf.c:311).  Shutting down filesystem.
[  344.602103][T12049] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  344.680890][ T5824] XFS (loop3): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  345.052830][ T5873] appletouch 2-1:0.85: Geyser mode initialized.
[  345.076440][ T5873] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input19
[  345.277992][ T5880] usb 2-1: USB disconnect, device number 15
[  345.354155][ T5880] appletouch 2-1:0.85: input: appletouch disconnected
[  345.536322][T12084] loop8: detected capacity change from 0 to 512
[  345.567594][T12084] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  345.606912][T12084] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.1956: bad orphan inode 131083
[  345.635976][T12084] loop8: lost filesystem error report for type 5 error -117
[  345.638369][T12084] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  345.741175][   T30] audit: type=1800 audit(1769711171.812:408): pid=12084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1956" name="file1" dev="loop8" ino=15 res=0 errno=0
[  345.764184][T12078] loop4: detected capacity change from 0 to 40427
[  345.797233][T12078] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  345.812331][T12078] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  345.854554][T12078] F2FS-fs (loop4): invalid crc value
[  346.077786][ T9994] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  346.167296][T12078] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  346.228599][T12078] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  346.253882][   T24] kernel read not supported for file /media2 (pid: 24 comm: kworker/1:0)
[  346.262301][T12078] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  346.373418][T12078] F2FS-fs (loop4): Stopped filesystem due to reason: 0
[  346.747222][T12113] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1968'.
[  346.772458][T12113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1968'.
[  346.909256][T12103] loop8: detected capacity change from 0 to 32768
[  346.941494][T12103] 
[  346.941494][T12103]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  346.941494][T12103] 
[  347.016487][T12120] netlink: 'syz.1.1971': attribute type 8 has an invalid length.
[  347.039588][T12120] sch_fq: defrate 0 ignored.
[  347.067900][ T9994] 
[  347.067900][ T9994]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  347.067900][ T9994] 
[  347.103066][ T9994] 
[  347.103066][ T9994]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  347.103066][ T9994] 
[  347.626356][T12126] loop4: detected capacity change from 0 to 32768
[  347.642862][T12126] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1973 (12126)
[  347.686437][T12126] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  347.726645][T12126] BTRFS info (device loop4): using sha256 checksum algorithm
[  347.847689][T12126] BTRFS info (device loop4): rebuilding free space tree
[  347.894866][T12126] BTRFS info (device loop4): disabling free space tree
[  347.929219][T12126] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  347.960773][T12126] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  347.984522][T12159] syzkaller1: tun_chr_ioctl cmd 1074025677
[  347.990518][T12159] syzkaller1: linktype set to 823
[  348.108290][T12126] BTRFS info (device loop4): setting nodatasum
[  348.142324][T12126] BTRFS info (device loop4): setting nodatacow
[  348.167943][T12126] BTRFS info (device loop4): turning off barriers
[  348.187878][T12126] BTRFS info (device loop4): force clearing of disk cache
[  348.214263][T12165] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1985'.
[  348.312261][   T24] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  348.421645][T12169] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1986'.
[  348.472428][ T5830] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  348.517284][   T24] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  348.535186][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  348.611581][   T24] usb 2-1: config 0 descriptor??
[  348.864065][   T24] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  349.070090][   T24] [drm:udl_init] *ERROR* Selecting channel failed
[  349.124704][T12184] loop4: detected capacity change from 0 to 4096
[  349.146619][   T24] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2
[  349.171777][T12185] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  349.180400][   T24] [drm] Initialized udl on minor 2
[  349.207256][   T24] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  349.229204][   T30] audit: type=1800 audit(1769711175.302:409): pid=12184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1992" name="file1" dev="loop4" ino=15 res=0 errno=0
[  349.256372][   T24] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  349.270382][ T5924] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  349.281798][   T24] usb 2-1: USB disconnect, device number 16
[  349.290537][ T5924] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  349.300484][ T3901] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  349.346953][T12171] loop3: detected capacity change from 0 to 32768
[  350.285834][T12213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2006'.
[  350.305989][T12211] input: syz1 as /devices/virtual/input/input20
[  350.314714][T12214] loop8: detected capacity change from 0 to 512
[  350.356190][T12213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2006'.
[  350.380091][T12214] EXT4-fs error (device loop8): ext4_iget_extra_inode:5052: inode #15: comm syz.8.2003: corrupted in-inode xattr: invalid ea_ino
[  350.394228][T12214] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  350.394755][T12214] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.2003: couldn't read orphan inode 15 (err -117)
[  350.403963][    C0] EXT4-fs (loop8): error count since last fsck: 1
[  350.404001][    C0] EXT4-fs (loop8): initial error at time 1769711176: ext4_iget_extra_inode:5052: inode 15
[  350.404077][    C0] EXT4-fs (loop8): last error at time 1769711176: ext4_iget_extra_inode:5052: inode 15
[  350.442876][T12190] loop7: detected capacity change from 0 to 32768
[  350.450211][T12214] loop8: lost filesystem error report for type 5 error -117
[  350.470280][T12214] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  350.490334][T12190] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1995 (12190)
[  350.572277][T12190] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  350.633434][T12190] BTRFS info (device loop7): using sha256 checksum algorithm
[  350.764474][ T9994] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  350.830746][T12190] BTRFS info (device loop7): enabling ssd optimizations
[  350.888953][T12190] BTRFS info (device loop7): turning on async discard
[  350.901684][T12190] BTRFS info (device loop7): enabling free space tree
[  351.174470][T10430] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  351.862390][T12270] loop7: detected capacity change from 0 to 128
[  351.924964][T12270] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  351.984100][T12270] ext4 filesystem being mounted at /78/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  352.192268][ T5873] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  352.336963][T10430] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  352.365906][ T5873] usb 9-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  352.394369][ T5873] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  352.414599][ T5873] usb 9-1: config 0 descriptor??
[  352.429395][ T5873] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  352.504568][T12284] loop1: detected capacity change from 0 to 256
[  352.505718][   T30] audit: type=1326 audit(1769711178.572:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12282 comm="syz.3.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb59199aeb9 code=0x7ffc0000
[  352.568480][T12284] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  352.611289][   T30] audit: type=1326 audit(1769711178.572:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12282 comm="syz.3.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb59199aeb9 code=0x7ffc0000
[  352.644123][   T30] audit: type=1326 audit(1769711178.572:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12282 comm="syz.3.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb59199aeb9 code=0x7ffc0000
[  352.674279][   T30] audit: type=1326 audit(1769711178.572:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12282 comm="syz.3.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb59199aeb9 code=0x7ffc0000
[  352.697942][   T30] audit: type=1326 audit(1769711178.572:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12282 comm="syz.3.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7fb59199aeb9 code=0x7ffc0000
[  352.733536][   T30] audit: type=1326 audit(1769711178.572:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12282 comm="syz.3.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb59199aeb9 code=0x7ffc0000
[  352.767968][   T30] audit: type=1326 audit(1769711178.572:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12282 comm="syz.3.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb59199aeb9 code=0x7ffc0000
[  352.794529][   T30] audit: type=1326 audit(1769711178.572:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12282 comm="syz.3.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb59199aeb9 code=0x7ffc0000
[  352.817642][   T30] audit: type=1326 audit(1769711178.572:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12282 comm="syz.3.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb59199aeb9 code=0x7ffc0000
[  352.873141][   T29] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  353.032617][   T29] usb 2-1: Using ep0 maxpacket: 16
[  353.039685][   T29] usb 2-1: config 0 interface 0 has no altsetting 0
[  353.049384][   T29] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  353.070941][   T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  353.099015][   T29] usb 2-1: config 0 descriptor??
[  353.191136][T12300] loop3: detected capacity change from 0 to 4096
[  353.226207][T12300] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  353.287533][ T5873] usb 9-1: USB disconnect, device number 4
[  353.374470][T12306] loop4: detected capacity change from 0 to 1024
[  353.486271][   T36] hfsplus: b-tree write err: -5, ino 4
[  353.564266][   T29] hid (null): unknown global tag 0x14
[  353.756431][ T5873] usb 2-1: USB disconnect, device number 17
[  354.169001][T12333] loop4: detected capacity change from 0 to 128
[  354.210907][T12333] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  354.226373][T12333] ext4 filesystem being mounted at /451/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  354.272260][   T29] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  354.434595][ T5830] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  354.462196][   T29] usb 9-1: Using ep0 maxpacket: 32
[  354.481148][   T29] usb 9-1: config 0 interface 0 has no altsetting 0
[  354.490332][   T29] usb 9-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  354.499967][   T29] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  354.511229][   T29] usb 9-1: Product: syz
[  354.517443][   T29] usb 9-1: Manufacturer: syz
[  354.526238][   T29] usb 9-1: SerialNumber: syz
[  354.540015][   T29] usb 9-1: config 0 descriptor??
[  354.635529][   T24] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  354.802263][   T24] usb 2-1: Using ep0 maxpacket: 16
[  354.810155][   T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  354.830811][   T24] usb 2-1: config 0 has no interface number 0
[  354.847350][   T24] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  354.885733][   T24] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  354.906964][   T24] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  354.927664][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  354.958013][   T24] usb 2-1: config 0 descriptor??
[  354.980099][   T29] gs_usb 9-1:0.0: Configuring for 156 interfaces
[  355.382792][   T29] gs_usb 9-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO)
[  355.397860][T12340] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2052'.
[  355.439550][T12340] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2052'.
[  355.513337][   T29] gs_usb 9-1:0.0: probe with driver gs_usb failed with error -71
[  355.547439][   T29] usb 9-1: USB disconnect, device number 5
[  355.565263][T12342] loop3: detected capacity change from 0 to 16
[  355.599696][T12338] loop4: detected capacity change from 0 to 32768
[  355.627215][   T24] input: HID 28bd:0071 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.0014/input/input21
[  355.650984][T12338] (syz.4.2051,12338,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  355.681526][T12342] erofs (device loop3): mounted with root inode @ nid 36.
[  355.690582][T12338] (syz.4.2051,12338,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  355.732283][   T24] input: HID 28bd:0071 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.0014/input/input22
[  355.780834][   T24] uclogic 0003:28BD:0071.0014: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.1-1/input1
[  355.822943][T12338] JBD2: Ignoring recovery information on journal
[  355.849189][ T5824] VFS_WARN_ON_INODE(strlen(link) != linklen): inode:ffff8880510bf4c8 fs:erofs mode:120777 opflags:0x8 flags:0x0 state:0x1 count:1
[  355.932579][   T24] usb 2-1: USB disconnect, device number 18
[  355.955665][ T5824] ------------[ cut here ]------------
[  355.961198][ T5824] 1
[  355.961220][ T5824] WARNING: ./include/linux/fs.h:953 at erofs_iget+0x1f4d/0x2b10, CPU#0: syz-executor/5824
[  355.974071][ T5824] Modules linked in:
[  355.978312][ T5824] CPU: 0 UID: 0 PID: 5824 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  355.989865][ T5824] Tainted: [L]=SOFTLOCKUP
[  355.994327][ T5824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  356.004469][ T5824] RIP: 0010:erofs_iget+0x1f4d/0x2b10
[  356.009779][ T5824] Code: 0f 8c 65 e2 ff ff 48 89 df e8 ff 10 e3 fd e9 58 e2 ff ff e8 d5 af 79 fd 48 8b 7c 24 10 48 c7 c6 e0 7f 1e 8c e8 c4 a7 fd fd 90 <0f> 0b 90 e9 3c fe ff ff e8 b6 af 79 fd 48 8b 7c 24 10 48 c7 c6 60
[  356.029504][ T5824] RSP: 0018:ffffc9000456f780 EFLAGS: 00010246
[  356.035624][ T5824] RAX: dcd42342d6314700 RBX: 0000000000000017 RCX: dcd42342d6314700
[  356.043669][ T5824] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  356.051669][ T5824] RBP: ffffc9000456f9a0 R08: ffffc9000456f367 R09: 1ffff920008ade6c
[  356.059929][ T5824] R10: dffffc0000000000 R11: fffff520008ade6d R12: 0000000000000027
[  356.068190][ T5824] R13: 1ffff1100a217ea3 R14: 0000000000000027 R15: ffff888057233280
[  356.076222][ T5824] FS:  000055558559c500(0000) GS:ffff8881252a4000(0000) knlGS:0000000000000000
[  356.085198][ T5824] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  356.091811][ T5824] CR2: 00007f06f5764000 CR3: 0000000075126000 CR4: 00000000003526f0
[  356.099860][ T5824] Call Trace:
[  356.103220][ T5824]  <TASK>
[  356.106189][ T5824]  ? erofs_put_metabuf+0x17a/0x290
[  356.111354][ T5824]  ? __pfx_erofs_iget+0x10/0x10
[  356.116297][ T5824]  ? __pfx_erofs_namei+0x10/0x10
[  356.121301][ T5824]  ? __pfx_d_alloc_parallel+0x10/0x10
[  356.126762][ T5824]  ? do_raw_spin_lock+0x12b/0x2f0
[  356.131827][ T5824]  erofs_lookup+0x186/0x320
[  356.136526][ T5824]  __lookup_slow+0x2b7/0x410
[  356.141174][ T5824]  ? __pfx___lookup_slow+0x10/0x10
[  356.146378][ T5824]  ? down_read+0x272/0x2e0
[  356.150835][ T5824]  lookup_slow+0x53/0x70
[  356.155175][ T5824]  path_lookupat+0x3f5/0x8c0
[  356.160006][ T5824]  filename_lookup+0x256/0x5d0
[  356.165041][ T5824]  ? __pfx_filename_lookup+0x10/0x10
[  356.170401][ T5824]  ? strncpy_from_user+0x150/0x2b0
[  356.175669][ T5824]  ? do_getname+0x151/0x250
[  356.180218][ T5824]  user_path_at+0x40/0x160
[  356.184705][ T5824]  __x64_sys_umount+0xf6/0x170
[  356.189499][ T5824]  ? __pfx___x64_sys_umount+0x10/0x10
[  356.194937][ T5824]  do_syscall_64+0xe2/0xf80
[  356.199479][ T5824]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  356.205680][ T5824]  ? trace_irq_disable+0x37/0x100
[  356.210750][ T5824]  ? clear_bhb_loop+0x40/0x90
[  356.215521][ T5824]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  356.221448][ T5824] RIP: 0033:0x7fb59199c117
[  356.225928][ T5824] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  356.245597][ T5824] RSP: 002b:00007ffde3c730d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  356.254102][ T5824] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb59199c117
[  356.262349][ T5824] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffde3c73190
[  356.270363][ T5824] RBP: 00007ffde3c73190 R08: 00007ffde3c74190 R09: 00000000ffffffff
[  356.279227][ T5824] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffde3c74280
[  356.287746][ T5824] R13: 00007fb591a0471f R14: 000055558559c4e8 R15: 00007ffde3c76440
[  356.296888][ T5824]  </TASK>
[  356.299944][ T5824] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  356.307250][ T5824] CPU: 0 UID: 0 PID: 5824 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  356.318312][ T5824] Tainted: [L]=SOFTLOCKUP
[  356.322664][ T5824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  356.332767][ T5824] Call Trace:
[  356.336088][ T5824]  <TASK>
[  356.339043][ T5824]  vpanic+0x56c/0xa60
[  356.343066][ T5824]  ? __pfx__printk+0x10/0x10
[  356.347680][ T5824]  ? __pfx_vpanic+0x10/0x10
[  356.352194][ T5824]  ? is_bpf_text_address+0x292/0x2b0
[  356.357510][ T5824]  ? is_bpf_text_address+0x26/0x2b0
[  356.362765][ T5824]  panic+0xc5/0xd0
[  356.366538][ T5824]  ? __pfx_panic+0x10/0x10
[  356.370987][ T5824]  __warn+0x315/0x4a0
[  356.374987][ T5824]  ? erofs_iget+0x1f4d/0x2b10
[  356.379680][ T5824]  ? erofs_iget+0x1f4d/0x2b10
[  356.384369][ T5824]  __report_bug+0x29a/0x540
[  356.388892][ T5824]  ? erofs_iget+0x1f4d/0x2b10
[  356.393582][ T5824]  ? __pfx___report_bug+0x10/0x10
[  356.398620][ T5824]  ? strncpy_from_kernel_nofault+0x103/0x1c0
[  356.404616][ T5824]  ? dump_inode+0x379/0x450
[  356.409138][ T5824]  ? erofs_iget+0x1f4d/0x2b10
[  356.413830][ T5824]  report_bug+0x16a/0x220
[  356.418176][ T5824]  ? erofs_iget+0x1f4d/0x2b10
[  356.422880][ T5824]  ? erofs_iget+0x1f4f/0x2b10
[  356.427575][ T5824]  handle_bug+0x98/0x200
[  356.431842][ T5824]  exc_invalid_op+0x1a/0x50
[  356.436369][ T5824]  asm_exc_invalid_op+0x1a/0x20
[  356.441231][ T5824] RIP: 0010:erofs_iget+0x1f4d/0x2b10
[  356.446531][ T5824] Code: 0f 8c 65 e2 ff ff 48 89 df e8 ff 10 e3 fd e9 58 e2 ff ff e8 d5 af 79 fd 48 8b 7c 24 10 48 c7 c6 e0 7f 1e 8c e8 c4 a7 fd fd 90 <0f> 0b 90 e9 3c fe ff ff e8 b6 af 79 fd 48 8b 7c 24 10 48 c7 c6 60
[  356.466152][ T5824] RSP: 0018:ffffc9000456f780 EFLAGS: 00010246
[  356.472240][ T5824] RAX: dcd42342d6314700 RBX: 0000000000000017 RCX: dcd42342d6314700
[  356.480240][ T5824] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  356.488223][ T5824] RBP: ffffc9000456f9a0 R08: ffffc9000456f367 R09: 1ffff920008ade6c
[  356.496204][ T5824] R10: dffffc0000000000 R11: fffff520008ade6d R12: 0000000000000027
[  356.504186][ T5824] R13: 1ffff1100a217ea3 R14: 0000000000000027 R15: ffff888057233280
[  356.512199][ T5824]  ? erofs_put_metabuf+0x17a/0x290
[  356.517352][ T5824]  ? __pfx_erofs_iget+0x10/0x10
[  356.522231][ T5824]  ? __pfx_erofs_namei+0x10/0x10
[  356.527210][ T5824]  ? __pfx_d_alloc_parallel+0x10/0x10
[  356.532612][ T5824]  ? do_raw_spin_lock+0x12b/0x2f0
[  356.537656][ T5824]  erofs_lookup+0x186/0x320
[  356.542188][ T5824]  __lookup_slow+0x2b7/0x410
[  356.546805][ T5824]  ? __pfx___lookup_slow+0x10/0x10
[  356.551948][ T5824]  ? down_read+0x272/0x2e0
[  356.556385][ T5824]  lookup_slow+0x53/0x70
[  356.560649][ T5824]  path_lookupat+0x3f5/0x8c0
[  356.565292][ T5824]  filename_lookup+0x256/0x5d0
[  356.570094][ T5824]  ? __pfx_filename_lookup+0x10/0x10
[  356.575423][ T5824]  ? strncpy_from_user+0x150/0x2b0
[  356.580570][ T5824]  ? do_getname+0x151/0x250
[  356.585100][ T5824]  user_path_at+0x40/0x160
[  356.589547][ T5824]  __x64_sys_umount+0xf6/0x170
[  356.594330][ T5824]  ? __pfx___x64_sys_umount+0x10/0x10
[  356.599729][ T5824]  do_syscall_64+0xe2/0xf80
[  356.604257][ T5824]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  356.610345][ T5824]  ? trace_irq_disable+0x37/0x100
[  356.615422][ T5824]  ? clear_bhb_loop+0x40/0x90
[  356.620121][ T5824]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  356.626024][ T5824] RIP: 0033:0x7fb59199c117
[  356.630449][ T5824] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  356.650080][ T5824] RSP: 002b:00007ffde3c730d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  356.658511][ T5824] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb59199c117
[  356.666499][ T5824] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffde3c73190
[  356.674490][ T5824] RBP: 00007ffde3c73190 R08: 00007ffde3c74190 R09: 00000000ffffffff
[  356.682487][ T5824] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffde3c74280
[  356.690481][ T5824] R13: 00007fb591a0471f R14: 000055558559c4e8 R15: 00007ffde3c76440
[  356.698494][ T5824]  </TASK>
[  356.702162][ T5824] Kernel Offset: disabled
[  356.706489][ T5824] Rebooting in 86400 seconds..