last executing test programs:

1m6.022597212s ago: executing program 5 (id=18):
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x35e, 0x862b01)
ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000100)=[0xc, 0x36])
ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000000)={0x0, 0x18, &(0x7f0000000180)="08e8fbb8ebc94c839a1a9e2b9879b0c659e61baa8cfcb836"})
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)

1m5.710554237s ago: executing program 5 (id=19):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101041, 0x15)
unlink(&(0x7f0000000000)='./file1\x00')
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000140)='.\x00', 0x2075, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))

1m5.269903805s ago: executing program 5 (id=21):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2, &(0x7f00000003c0)=ANY=[], 0x1, 0x625c, &(0x7f000000bdc0)="$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")
r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffc2}], 0x1, 0x7800, 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)

1m2.292418707s ago: executing program 5 (id=34):
syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000f80)='./mnt\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB='mode=00000000000000000000202,umask=00000000000000000000002,dmode=00000000000000000100002,gid=forget,longad,shortad,novrs,iocharset=cp437,uid=forget,umask=00000000000000000000006,dmode=00000000000000000000010,gid=', @ANYRESDEC=0x0, @ANYRES32=0x0], 0x1, 0xc58, &(0x7f00000000c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

1m1.316357631s ago: executing program 5 (id=40):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000059c0)=ANY=[@ANYBLOB="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"], 0x5, 0x5512, &(0x7f0000005b40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)='a', 0x1, 0x8000c61)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x6c7e, 0x100000002, 0x1000000000000000, 0x4})

1m0.3319754s ago: executing program 5 (id=44):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0xa0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0)

59.709453389s ago: executing program 32 (id=44):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0xa0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0)

5.052015475s ago: executing program 2 (id=511):
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000180)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x4})
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r0, 0x89fc, &(0x7f0000000000))

4.723626443s ago: executing program 2 (id=514):
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0)
r0 = userfaultfd(0x80801)
io_setup(0x8, &(0x7f0000004200)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f0000004280)={0x0, 0x0, 0x20, 0x0, 0x1fff, r0, 0x0, 0x0, 0x6}])

4.662081657s ago: executing program 1 (id=515):
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x2, 0x300)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00')
preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/28, 0x1c}], 0x1, 0x2b, 0x800)

4.352025954s ago: executing program 1 (id=518):
syz_usb_connect$cdc_ncm(0x3, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x80a}}]})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000000)=0x8000, 0x4)

4.314881667s ago: executing program 2 (id=520):
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x2020000, 0x0, 0x0, 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000240), 0x1000000, 0x0)
umount2(&(0x7f0000000180)='./file0\x00', 0x4)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)

4.073024129s ago: executing program 2 (id=521):
syz_mount_image$hfs(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x1200c86, &(0x7f0000000100)=ANY=[@ANYBLOB='codepage=euc-jp,umask=00000000000000000000000,iocharset=cp932,gid=', @ANYRESHEX=0x0, @ANYRESDEC=0x0], 0x1, 0x297, &(0x7f00000007c0)="$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")
mkdir(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x24)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x120)
getdents64(r0, &(0x7f0000000080)=""/203, 0xcb)

3.707730969s ago: executing program 2 (id=525):
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000300)='./file1\x00', 0x1c886, &(0x7f0000005400)=ANY=[], 0x83, 0x60f6, &(0x7f00000152c0)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x8, 0x40000cca8, 0x4010})
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa40020, 0x0, 0x0, 0x0, &(0x7f0000000140))

3.626948245s ago: executing program 6 (id=528):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14)
connect$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14)
write(r0, 0x0, 0x0)

3.521550377s ago: executing program 1 (id=530):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
open(&(0x7f0000000240)='./bus\x00', 0x141b42, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
syz_mount_image$btrfs(&(0x7f0000000240), &(0x7f00000015c0)='./file0\x00', 0xd, &(0x7f0000000380)={[{@device={'device', 0x3d, './bus'}}, {@rescan_uuid_tree}, {@flushoncommit}], [{@dont_appraise}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@appraise_type}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x32, 0x35, 0x35, 0x32, 0x64, 0x37, 0x53], 0x2d, [0x61, 0x39, 0x64, 0x31], 0x2d, [0x33, 0x30, 0x35, 0x34], 0x2d, [0x32, 0x37, 0x32, 0x35], 0x2d, [0x39, 0x38, 0x39, 0x34, 0x64, 0x34, 0x39, 0x65]}}}]}, 0x10, 0x559f, &(0x7f0000005680)="$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")

3.261099363s ago: executing program 6 (id=532):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000400)={0xbe, 0x99, 0xe, 0x5, 0xfe, 0x4, 0x5c, 0xde, 0x5d, 0x1, 0x81, 0x84, 0x0, 0x45}, 0xe)
sendto$inet6(r0, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x3, @loopback, 0x1}, 0x1c)
recvmsg(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x10000)

3.092184145s ago: executing program 6 (id=535):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x8, &(0x7f0000005880)={[{@barrier}, {@autodefrag}, {@noacl}, {@compress_algo={'compress', 0x3d, 'no'}}, {@max_inline={'max_inline', 0x3d, [0x30, 0x30, 0x32, 0x74, 0x74, 0x0]}}, {@noautodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x34, 0x6d]}}, {@barrier}, {@nospace_cache}]}, 0x1, 0x55ae, &(0x7f000000ac40)="$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")
mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x103802, 0x20)
write$FUSE_WRITE(r0, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x8010}}, 0xffffff20)

2.648260809s ago: executing program 3 (id=537):
unshare(0x28040680)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

2.359262176s ago: executing program 3 (id=540):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]})
close_range(r0, 0xffffffffffffffff, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x45, 0x9, 0x0, 0x0, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @pid}]}, 0x1c}}, 0x24000044)

2.219891593s ago: executing program 4 (id=542):
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0)
r0 = fanotify_init(0x20, 0x8000)
fanotify_mark(r0, 0x645, 0x8000020, 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00')
rmdir(&(0x7f0000000040)='./file0\x00')

2.085859121s ago: executing program 3 (id=543):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
ptrace(0x10, r0)
waitid(0x1, r0, &(0x7f0000000280), 0x8, 0x0)

2.014707298s ago: executing program 0 (id=544):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x238, 0x30, 0x101, 0x70bd2b, 0x25dfdbfe, {}, [{0xf0, 0x1, [@m_bpf={0xec, 0xe, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x2c, 0x4, [{0xa6, 0x2, 0x8, 0x3ad}, {0x43f, 0x5, 0x33, 0x200}, {0x800, 0x4, 0xe, 0xd}, {0x8, 0xe2, 0xc0, 0x2}, {0xe, 0xe0, 0xa, 0x1ff}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x4, 0x0, 0x3, 0x4, 0x1}}]}, {0x7d, 0x6, "5ebee8cb5ec798bed9e14471cd7fc80ada4a347f0a471b97541b3746862f593b574dd0b277a884f0ec7a65593a424488dee51eac7e3301dcd335734b379d1f821b27f9ace9c0ec57aa91fb75ea79531b85b941055b331912532963810dd2e455d7e1fce8f33fb311b8891e5737cded0da82817fe816da70d22"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0x134, 0x1, [@m_mirred={0x130, 0x9, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x401, 0x6, 0x101, 0x7}, 0x8}}]}, {0xe1, 0x6, "c77e63c2ffad15aa9246aebf64cecf47dc781451d470dd0e4b0bebc618f05ef08ec0ec4c91ef65f0abb91c0ced382385ee38b58edcf45f876c46a8472a25411bcf621688e6523b8cdeee9a93529456a5272ab89e7901e2588919897bb95e444c87b4a56dbc6120e30279e12db557ce6efc29470f391821181a78cd0d6833064746b17c29f88cbd5e3078dcf587bd8671c62a9ad9ff5c329624c916459a1085744d4956a4bc9e2060dd66f8d985a1551281d77461354c0b36b515a135b33eee84aa8c37b464ff318b14dccb47de2dd35c9e017e29799fb675daa139f153"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

1.931045929s ago: executing program 1 (id=545):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x800)
write(r1, &(0x7f0000000100)='\"l', 0x2)

1.928916518s ago: executing program 4 (id=546):
sched_setscheduler(0x0, 0x1, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x103, 0x1}, 0x6)

1.85295736s ago: executing program 2 (id=547):
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00')
read$FUSE(r0, &(0x7f000000d0c0)={0x2020}, 0x2020)

1.680201807s ago: executing program 3 (id=548):
r0 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\x04\x00\x00\x00\x00\x00\x00\x00\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\xdf$2dUU\x18\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c<L\xaa\x87A\xcdN#\xfb\xb0\xf2\x1e\x0e#J\xd0hB<\xc0\x82A0)p\xe7&J\x82\x83\x83\xd14\x01\xcf\x1b\xa9\x1d\x1ef\x0f\x86(1\xd6l\xd2\x8f\xb0\xad\t\x15\xdb|\x87\xf1\xc4\xb8\xb2\x9a\xd2A\x80\xbf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd6\x80\x00\x00\x00\x00\x00\x00\x00\x88&}\xd1\x00\x00\x00\xe6\xaf\t\x9f\x96\rN\xc9\x90\xbe\xedZd\x14\xe7\x84\t\'\x8b\x00\xdd\xc9\x0f\x14v\xb6\x04\xf2U\xb4\xf6\xbe\xddT\xcb\x00\x00\x00\x00\x00\x00\xe9\x00\x00\x00\x00\x00\x00o:}\xa7jmH\xedn\x11\xfe\xe2\x0fT\x00\x94\xbc\xc6\x7f\x93eE1xp\xa3\xdc\xd7K9J<\xeb\xd2!\xf4\x19\xbd#\xb8\x83\x858\n\xf8\x12Z\x1a\x12\xfa\xcc\x04\r\xf3\xf4;\v\x15b^\xea\xa2\x04 \xe8\x99\xb3\x97\x9e\r\xb0\x05\xbb(f\xd0\x85\xc5\x15\xae#\x12Q\xacF\xfb\xc8\xbd\xcc#\v\x00\x00\x00\x00\x00\x00\x8f\x9b\x00\x03\xc8}\x11\xbc\x01\x8fi\xf5\x7f\xaf\x11\xfb\x16\x95\xdfc\xc9\x8a/&\x81w\xdf]ao\\\x88\xf7\xce\xbd\xb0\xa6J~\x8d\xf1\xe9\x1c\xcfo\xb3\xdc\x04Y\x8e\r\xf5\xa0\xeft\x06G0\xe3D\xd6\xa3L\xedN\x0e\xdc@7\xd8^\xae\xea\x92\xbe\x9c\xf9~c\xc1|\xca\x8d\x93R\xe5\xceU\xa5\x0f\xbf\xd8l\x96`\x0f\x00e\x8aR{\x17Y\x15m>\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\xb2W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\x14\x16\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11\xb2', 0x3)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r0, 0x310f000)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000400), 0x4400, 0x0)
preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fe00}], 0x1, 0x0, 0x0, 0x2b)

1.678800132s ago: executing program 0 (id=549):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={<r1=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000280)={r1, 0x2951, 0x20, 0x2, 0xfd71}, &(0x7f00000002c0)=0x18)

1.640965281s ago: executing program 4 (id=550):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r0 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000540)="bc", 0x1, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)

1.617696553s ago: executing program 1 (id=551):
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x3200c02, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x3, 0xa80, &(0x7f0000000180)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x101142, 0xeaff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000e40)={{0x0, 0x0, 0x40, 0xb, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff8}, {0x0, 0x0, 0x8, 0x6, 0x1}, {0x0, 0x0, 0x28, 0xfc7, 0x7}, {0x0, 0x0, 0x8, 0x98f, 0xffff}})

1.274444186s ago: executing program 4 (id=552):
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

1.27314801s ago: executing program 0 (id=553):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000700850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc)

1.221405336s ago: executing program 3 (id=554):
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00')
lseek(r0, 0x1, 0x1)
getdents64(r0, 0xffffffffffffffff, 0x43)

1.127500029s ago: executing program 6 (id=555):
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}}, 0x0, 0x0, 0x2, 0x0, "e83ae75240c2d658ec87bb53679fd0450078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9400000010000100"/20, @ANYRES32=r1, @ANYBLOB="0006000000000000240012800b00010067656e65766500001400028006000500"], 0x94}, 0x1, 0x2, 0x0, 0x804}, 0x0)

939.93745ms ago: executing program 0 (id=556):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@bridge_getneigh={0x44, 0x1e, 0x1, 0x70bd26, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2000a}, [@IFLA_VFINFO_LIST={0x24, 0x16, 0x0, 0x1, [{0x4}, {0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x1, 0x14e, 0x80000001, 0x88a8}}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008451}, 0x20000800)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x7}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048860}, 0x20000000)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)

936.376428ms ago: executing program 4 (id=557):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r1=>0x0})
r2 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x4, 0x9}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0xfffffffd}]}}]}, 0x38}}, 0x0)

877.541273ms ago: executing program 3 (id=558):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904298602b48cbb0009050402100000fa000905820240"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000280)={0x20, 0xf, 0x6, "eb18708ee32b"}, 0x0, 0x0, 0x0, 0x0, 0x0})

819.043829ms ago: executing program 1 (id=559):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xff, 0x467, &(0x7f0000000d80)="$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")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, 0x0)

558.208689ms ago: executing program 4 (id=560):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x48, r1, 0x1, 0xfffffffe, 0x21, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c1937}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x48}}, 0x20000810)

508.095981ms ago: executing program 6 (id=561):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000008, 0x204031, 0xffffffffffffffff, 0x533e9000)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000200)={0x6, @local, 0x4e23, 0x3, 'rr\x00', 0x20, 0x3, 0x28}, 0x2c)

500.064945ms ago: executing program 0 (id=562):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cgroup.max.depth\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f00000002c0)=ANY=[], 0x1f)

220.910118ms ago: executing program 0 (id=563):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002640)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7200000000003900000008000300", @ANYRES32=r2, @ANYBLOB="18005a801400038005000700010000000500060023"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x880)

0s ago: executing program 6 (id=564):
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x3200c02, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x3, 0xa80, &(0x7f0000000180)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143442, 0x0)
ftruncate(r0, 0x0)
write$bt_hci(r0, &(0x7f0000000100)={0x1, @write_sc_support={{0xc7a, 0x1}, {0xb}}}, 0x5)

kernel console output (not intermixed with test programs):

rom eth2
[   92.724536][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   92.779249][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.840037][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   92.852905][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   92.872445][ T5824] 8021q: adding VLAN 0 to HW filter on device team0
[   92.885164][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   92.906086][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.913293][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.933835][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   92.960909][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.968109][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.005747][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.078247][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   93.092672][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   93.120777][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   93.162691][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   93.233121][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[   93.288980][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.296436][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.309125][ T5823] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   93.354989][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.362190][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.379381][ T5823] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   93.390358][ T5823] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   93.405571][ T5823] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   93.482932][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.582133][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   93.600619][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.627359][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.650674][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.657913][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.708133][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.715309][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.735139][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   93.806622][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.836257][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.843470][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.891583][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.898780][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.973060][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   94.000645][ T5824] veth0_vlan: entered promiscuous mode
[   94.019660][  T125] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.026874][  T125] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.058101][  T125] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.065274][  T125] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.088632][ T5824] veth1_vlan: entered promiscuous mode
[   94.119311][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.141013][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.240480][   T51] Bluetooth: hci0: command tx timeout
[   94.315472][   T51] Bluetooth: hci3: command tx timeout
[   94.320927][   T51] Bluetooth: hci2: command tx timeout
[   94.326617][   T51] Bluetooth: hci1: command tx timeout
[   94.332059][   T51] Bluetooth: hci4: command tx timeout
[   94.394948][   T51] Bluetooth: hci5: command tx timeout
[   94.408807][ T5824] veth0_macvtap: entered promiscuous mode
[   94.446956][ T5823] 8021q: adding VLAN 0 to HW filter on device team0
[   94.472364][ T5824] veth1_macvtap: entered promiscuous mode
[   94.529684][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.536910][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.606997][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.614195][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.711148][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.778034][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.821763][  T140] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.845239][  T140] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.859882][  T140] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.879608][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.889635][  T140] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.902817][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.982134][ T5829] veth0_vlan: entered promiscuous mode
[   94.997463][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.012423][ T5835] veth0_vlan: entered promiscuous mode
[   95.040412][ T5829] veth1_vlan: entered promiscuous mode
[   95.061668][ T5835] veth1_vlan: entered promiscuous mode
[   95.230658][ T5835] veth0_macvtap: entered promiscuous mode
[   95.270833][ T5835] veth1_macvtap: entered promiscuous mode
[   95.290525][ T5837] veth0_vlan: entered promiscuous mode
[   95.299757][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.317681][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.321457][ T5829] veth0_macvtap: entered promiscuous mode
[   95.341137][ T5829] veth1_macvtap: entered promiscuous mode
[   95.369059][ T5834] veth0_vlan: entered promiscuous mode
[   95.396468][ T5837] veth1_vlan: entered promiscuous mode
[   95.409657][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.412475][ T5834] veth1_vlan: entered promiscuous mode
[   95.425365][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.434830][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.452704][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.470585][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.494431][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.532472][ T5824] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   95.563899][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.607320][ T1000] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.627494][ T1000] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.668932][ T5837] veth0_macvtap: entered promiscuous mode
[   95.705835][ T1000] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.724487][ T1000] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.741358][ T5837] veth1_macvtap: entered promiscuous mode
[   95.768244][ T1000] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.781789][ T1000] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.807527][ T1000] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.834477][ T1000] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.888535][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.923706][ T5834] veth0_macvtap: entered promiscuous mode
[   95.961101][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.990288][ T5834] veth1_macvtap: entered promiscuous mode
[   96.056389][ T1159] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.101332][ T1159] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.112470][ T1159] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.152843][ T1159] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.168114][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.179931][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.226096][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.242374][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.252322][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.306131][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.320888][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.328449][   T51] Bluetooth: hci0: command tx timeout
[   96.335595][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.393807][   T51] Bluetooth: hci4: command tx timeout
[   96.394184][ T5832] Bluetooth: hci1: command tx timeout
[   96.399405][   T51] Bluetooth: hci2: command tx timeout
[   96.405168][ T5830] Bluetooth: hci3: command tx timeout
[   96.421890][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.474680][ T5832] Bluetooth: hci5: command tx timeout
[   96.496614][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.497154][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.508184][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.527641][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.579540][ T5823] veth0_vlan: entered promiscuous mode
[   96.601289][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.655757][ T1000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.665874][ T1000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.673768][ T5971] loop2: detected capacity change from 0 to 1024
[   96.718172][ T5823] veth1_vlan: entered promiscuous mode
[   96.790579][ T5971] hfsplus: b-tree write err: -5, ino 2
[   96.864447][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.883495][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.963778][  T140] hfsplus: b-tree write err: -5, ino 25
[   97.008563][  T140] hfsplus: b-tree write err: -5, ino 4
[   97.021213][  T140] hfsplus: b-tree write err: -5, ino 2
[   97.027881][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.046197][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.050759][  T140] hfsplus: b-tree write err: -5, ino 26
[   97.068267][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.086288][ T5823] veth0_macvtap: entered promiscuous mode
[   97.092208][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.167615][ T5978] loop5: detected capacity change from 0 to 256
[   97.190668][ T5823] veth1_macvtap: entered promiscuous mode
[   97.243272][ T5978] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[   97.264849][ T5928] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   97.306181][ T5978] exFAT-fs (loop5): error, invalid access to FAT (entry 0xffffffff)
[   97.311038][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.317794][ T5978] exFAT-fs (loop5): Filesystem has been set read-only
[   97.330456][ T5978] exFAT-fs (loop5): error, invalid access to FAT (entry 0xffffffff)
[   97.339617][ T5978] exFAT-fs (loop5): error, invalid access to FAT (entry 0xffffffff)
[   97.371179][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.463491][ T5928] usb 2-1: Using ep0 maxpacket: 8
[   97.473110][ T1000] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.484705][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   97.507799][  T140] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.516710][ T5928] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[   97.516752][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.557574][ T5928] usb 2-1: config 0 descriptor??
[   97.636167][  T140] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.682580][  T140] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.827878][ T5928] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[   98.209916][ T5928] usb 2-1: USB disconnect, device number 2
[   98.319447][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.364628][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.594976][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.615657][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.981840][ T6004] loop5: detected capacity change from 0 to 64
[   99.066524][ T6004] =======================================================
[   99.066524][ T6004] WARNING: The mand mount option has been deprecated and
[   99.066524][ T6004]          and is ignored by this kernel. Remove the mand
[   99.066524][ T6004]          option from the mount to silence this warning.
[   99.066524][ T6004] =======================================================
[   99.127151][ T5995] loop0: detected capacity change from 0 to 32768
[   99.305907][ T5995] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   99.321851][ T5994] loop3: detected capacity change from 0 to 40427
[   99.333119][ T5994] F2FS-fs (loop3): Invalid SB checksum offset: 0
[   99.340071][ T5994] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[   99.400809][ T5994] F2FS-fs (loop3): invalid crc value
[   99.563649][ T5995] XFS (loop0): Ending clean mount
[   99.632608][ T5995] XFS (loop0): Quotacheck needed: Please wait.
[   99.760469][ T5995] XFS (loop0): Quotacheck: Done.
[   99.837684][ T5994] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   99.852565][ T5994] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[   99.861330][ T5994] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   99.900657][   T30] audit: type=1800 audit(1775757023.211:2): pid=5994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.16" name="file1" dev="loop3" ino=10 res=0 errno=0
[   99.987458][ T5837] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  100.097242][ T5994] syz.3.16: attempt to access beyond end of device
[  100.097242][ T5994] loop3: rw=34817, sector=53248, nr_sectors = 2048 limit=40427
[  100.446725][ T5994] syz.3.16: attempt to access beyond end of device
[  100.446725][ T5994] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  100.490450][ T5994] CPU: 1 UID: 0 PID: 5994 Comm: syz.3.16 Not tainted syzkaller #0 PREEMPT(full) 
[  100.490483][ T5994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  100.490499][ T5994] Call Trace:
[  100.490509][ T5994]  <TASK>
[  100.490519][ T5994]  dump_stack_lvl+0xe8/0x150
[  100.490562][ T5994]  f2fs_handle_critical_error+0x37c/0x540
[  100.490609][ T5994]  f2fs_write_end_io+0xcdb/0xff0
[  100.490657][ T5994]  __submit_merged_bio+0x256/0x700
[  100.490703][ T5994]  __submit_merged_write_cond+0x3c9/0x4e0
[  100.490750][ T5994]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  100.490802][ T5994]  ? srso_alias_return_thunk+0x5/0xfbef5
[  100.490843][ T5994]  f2fs_write_data_pages+0x2975/0x35e0
[  100.490929][ T5994]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  100.490969][ T5994]  ? srso_alias_return_thunk+0x5/0xfbef5
[  100.491017][ T5994]  ? srso_alias_return_thunk+0x5/0xfbef5
[  100.491047][ T5994]  ? css_rstat_updated+0x23a/0x530
[  100.491118][ T5994]  ? srso_alias_return_thunk+0x5/0xfbef5
[  100.491148][ T5994]  ? rcu_is_watching+0x15/0xb0
[  100.491185][ T5994]  ? arch_stack_walk+0xe3/0x150
[  100.491226][ T5994]  ? unwind_next_frame+0xa5/0x23c0
[  100.491266][ T5994]  ? srso_alias_return_thunk+0x5/0xfbef5
[  100.491297][ T5994]  ? __bfs+0x153/0x290
[  100.491331][ T5994]  ? __pfx_hlock_conflict+0x10/0x10
[  100.491390][ T5994]  ? srso_alias_return_thunk+0x5/0xfbef5
[  100.491421][ T5994]  ? srso_alias_return_thunk+0x5/0xfbef5
[  100.491450][ T5994]  ? __lock_acquire+0x146e/0x2cf0
[  100.491492][ T5994]  ? is_bpf_text_address+0x292/0x2b0
[  100.491519][ T5994]  ? srso_alias_return_thunk+0x5/0xfbef5
[  100.491584][ T5994]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  100.491629][ T5994]  do_writepages+0x32e/0x550
[  100.491667][ T5994]  ? srso_alias_return_thunk+0x5/0xfbef5
[  100.491697][ T5994]  ? srso_alias_return_thunk+0x5/0xfbef5
[  100.491734][ T5994]  ? srso_alias_return_thunk+0x5/0xfbef5
[  100.491762][ T5994]  ? do_raw_spin_unlock+0xf5/0x210
[  100.491794][ T5994]  filemap_fdatawrite+0x1e9/0x2f0
[  100.491836][ T5994]  ? srso_alias_return_thunk+0x5/0xfbef5
[  100.491870][ T5994]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  100.491953][ T5994]  ? srso_alias_return_thunk+0x5/0xfbef5
[  100.491986][ T5994]  ? srso_alias_return_thunk+0x5/0xfbef5
[  100.492022][ T5994]  ? do_raw_spin_unlock+0xf5/0x210
[  100.492063][ T5994]  f2fs_sync_dirty_inodes+0x30e/0x860
[  100.492108][ T5994]  f2fs_write_checkpoint+0x9df/0x26a0
[  100.492172][ T5994]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  100.492262][ T5994]  f2fs_gc+0x1e51/0x2570
[  100.492324][ T5994]  ? __pfx_f2fs_gc+0x10/0x10
[  100.492370][ T5994]  ? srso_alias_return_thunk+0x5/0xfbef5
[  100.492427][ T5994]  ? srso_alias_return_thunk+0x5/0xfbef5
[  100.492464][ T5994]  f2fs_balance_fs+0x657/0x840
[  100.492507][ T5994]  ? f2fs_map_blocks+0x2958/0x4340
[  100.492545][ T5994]  ? __pfx_f2fs_balance_fs+0x10/0x10
[  100.492584][ T5994]  ? srso_alias_return_thunk+0x5/0xfbef5
[  100.492614][ T5994]  ? __up_read+0x291/0x6b0
[  100.492651][ T5994]  ? srso_alias_return_thunk+0x5/0xfbef5
[  100.492681][ T5994]  ? trace_lock_elapsed_time_end+0xf3/0xbf0
[  100.492718][ T5994]  ? srso_alias_return_thunk+0x5/0xfbef5
[  100.492748][ T5994]  ? restore_priority+0x1af/0x480
[  100.492794][ T5994]  f2fs_map_blocks+0x2958/0x4340
[  100.492838][ T5994]  ? f2fs_map_blocks+0x1971/0x4340
[  100.492918][ T5994]  ? __pfx_f2fs_map_blocks+0x10/0x10
[  100.492962][ T5994]  ? call_rcu+0x644/0x890
[  100.493000][ T5994]  ? srso_alias_return_thunk+0x5/0xfbef5
[  100.493031][ T5994]  ? lockdep_hardirqs_on+0x7a/0x110
[  100.493077][ T5994]  ? srso_alias_return_thunk+0x5/0xfbef5
[  100.493125][ T5994]  ? mempool_free+0xec/0x130
[  100.493162][ T5994]  ? __pfx_mempool_free+0x10/0x10
[  100.493217][ T5994]  f2fs_iomap_begin+0x3bd/0x8f0
[  100.493257][ T5994]  ? __pfx_f2fs_iomap_begin+0x10/0x10
[  100.493285][ T5994]  ? srso_alias_return_thunk+0x5/0xfbef5
[  100.493315][ T5994]  ? __iomap_dio_bio_end_io+0x1a4/0x720
[  100.493374][ T5994]  ? __pfx_f2fs_iomap_begin+0x10/0x10
[  100.493398][ T5994]  iomap_iter+0x600/0x1020
[  100.493438][ T5994]  __iomap_dio_rw+0x1360/0x1ea0
[  100.493482][ T5994]  ? srso_alias_return_thunk+0x5/0xfbef5
[  100.493529][ T5994]  ? __pfx___iomap_dio_rw+0x10/0x10
[  100.493587][ T5994]  ? srso_alias_return_thunk+0x5/0xfbef5
[  100.493636][ T5994]  ? srso_alias_return_thunk+0x5/0xfbef5
[  100.493667][ T5994]  ? down_read+0x272/0x2e0
[  100.493711][ T5994]  f2fs_file_write_iter+0x1479/0x25a0
[  100.493767][ T5994]  ? __pfx_f2fs_file_write_iter+0x10/0x10
[  100.493800][ T5994]  ? srso_alias_return_thunk+0x5/0xfbef5
[  100.493844][ T5994]  vfs_write+0x61d/0xb90
[  100.493886][ T5994]  ? __pfx_vfs_write+0x10/0x10
[  100.493930][ T5994]  ? __fget_files+0x2a/0x420
[  100.493959][ T5994]  ? srso_alias_return_thunk+0x5/0xfbef5
[  100.493996][ T5994]  ksys_write+0x150/0x270
[  100.494030][ T5994]  ? __pfx_ksys_write+0x10/0x10
[  100.494090][ T5994]  do_syscall_64+0x14d/0xf80
[  100.494126][ T5994]  ? trace_irq_disable+0x3b/0x150
[  100.494149][ T5994]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.494183][ T5994]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.494209][ T5994] RIP: 0033:0x7f962059c819
[  100.494232][ T5994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  100.494253][ T5994] RSP: 002b:00007f96213d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  100.494279][ T5994] RAX: ffffffffffffffda RBX: 00007f9620815fa0 RCX: 00007f962059c819
[  100.494299][ T5994] RDX: 00000000ffffffd7 RSI: 0000200000000000 RDI: 0000000000000004
[  100.494315][ T5994] RBP: 00007f9620632c91 R08: 0000000000000000 R09: 0000000000000000
[  100.494331][ T5994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  100.494347][ T5994] R13: 00007f9620816038 R14: 00007f9620815fa0 R15: 00007fff324d1fe8
[  100.494387][ T5994]  </TASK>
[  101.073408][ T5994] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  101.129109][ T6025] loop5: detected capacity change from 0 to 32768
[  101.175524][ T6025] 
[  101.175524][ T6025]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  101.175524][ T6025] 
[  101.398544][   T30] audit: type=1800 audit(1775757024.701:3): pid=6025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.21" name="file1" dev="loop5" ino=4 res=0 errno=0
[  101.484747][ T6037] ERROR: (device loop5): diWrite: ixpxd invalid
[  101.484747][ T6037] 
[  101.708963][ T6029] loop2: detected capacity change from 0 to 32768
[  101.754565][ T6025] JFS: metapage_get_blocks failed
[  101.772853][ T6025] 
[  101.772853][ T6025]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  101.772853][ T6025] 
[  101.798321][ T6029] JBD2: Ignoring recovery information on journal
[  101.816791][ T6025] 
[  101.816791][ T6025]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  101.816791][ T6025] 
[  101.823384][ T6037] ERROR: (device loop5): remounting filesystem as read-only
[  101.834858][ T6025] 
[  101.834858][ T6025]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  101.834858][ T6025] 
[  101.845970][ T6025] 
[  101.845970][ T6025]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  101.845970][ T6025] 
[  101.859266][ T6025] 
[  101.859266][ T6025]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  101.859266][ T6025] 
[  101.936641][ T6029] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  101.983544][ T6037] ERROR: (device loop5): txCommit: 
[  101.983544][ T6037] 
[  102.002675][ T6037] 
[  102.002675][ T6037]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  102.002675][ T6037] 
[  102.043769][ T6037] ERROR: (device loop5): diFree: invalid inoext
[  102.043769][ T6037] 
[  102.306666][ T5824] ocfs2: Unmounting device (7,2) on (node local)
[  102.806025][ T6054] loop5: detected capacity change from 0 to 2048
[  102.882875][ T6054] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  102.961572][ T6054] overlayfs: upper fs needs to support d_type.
[  103.006574][ T6054] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  103.023429][ T6054] overlayfs: failed to set xattr on upper
[  103.035282][ T6054] overlayfs: ...falling back to redirect_dir=nofollow.
[  103.046676][ T6054] overlayfs: ...falling back to index=off.
[  103.052599][ T6054] overlayfs: ...falling back to uuid=null.
[  103.194482][ T5829] UDF-fs: error (device loop5): udf_read_inode: (ino 1317) failed !bh
[  103.206713][ T6040] loop1: detected capacity change from 0 to 40427
[  103.235449][ T6040] F2FS-fs (loop1): Image doesn't support compression
[  103.242175][ T6040] F2FS-fs (loop1): build fault injection rate: 690
[  103.250615][ T5829] UDF-fs: error (device loop5): udf_read_inode: (ino 1317) failed !bh
[  103.289412][ T6040] F2FS-fs (loop1): build fault injection type: 0x4
[  103.321930][ T6040] F2FS-fs (loop1): invalid crc value
[  103.437933][ T6068] netlink: 20 bytes leftover after parsing attributes in process `syz.2.41'.
[  103.561044][ T6040] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  103.573923][ T5940] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  103.599190][ T6040] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  103.731408][   T30] audit: type=1800 audit(1775757027.041:4): pid=6040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.30" name="file0" dev="loop1" ino=10 res=0 errno=0
[  103.780264][   T30] audit: type=1800 audit(1775757027.041:5): pid=6040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.30" name="bus" dev="loop1" ino=14 res=0 errno=0
[  103.802918][ T5940] usb 5-1: Using ep0 maxpacket: 32
[  103.811832][ T5940] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  103.822367][ T5940] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  103.844931][ T5940] usb 5-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23
[  103.854610][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.862613][ T5940] usb 5-1: Product: syz
[  103.871961][ T5940] usb 5-1: Manufacturer: syz
[  103.877972][ T5940] usb 5-1: SerialNumber: syz
[  103.887535][ T5940] usb 5-1: config 0 descriptor??
[  103.915175][ T6073] loop2: detected capacity change from 0 to 64
[  103.936235][ T5835] syz-executor: attempt to access beyond end of device
[  103.936235][ T5835] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  103.966597][ T5835] CPU: 1 UID: 0 PID: 5835 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  103.966631][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  103.966646][ T5835] Call Trace:
[  103.966655][ T5835]  <TASK>
[  103.966665][ T5835]  dump_stack_lvl+0xe8/0x150
[  103.966711][ T5835]  f2fs_handle_critical_error+0x37c/0x540
[  103.966755][ T5835]  f2fs_write_end_io+0xcdb/0xff0
[  103.966801][ T5835]  __submit_merged_bio+0x256/0x700
[  103.966845][ T5835]  __submit_merged_write_cond+0x3c9/0x4e0
[  103.966891][ T5835]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  103.966942][ T5835]  ? srso_alias_return_thunk+0x5/0xfbef5
[  103.966982][ T5835]  f2fs_write_data_pages+0x2975/0x35e0
[  103.967071][ T5835]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  103.967125][ T5835]  ? unwind_get_return_address+0x4d/0x90
[  103.967165][ T5835]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  103.967193][ T5835]  ? srso_alias_return_thunk+0x5/0xfbef5
[  103.967251][ T5835]  ? srso_alias_return_thunk+0x5/0xfbef5
[  103.967281][ T5835]  ? check_noncircular+0xda/0x150
[  103.967324][ T5835]  ? srso_alias_return_thunk+0x5/0xfbef5
[  103.967358][ T5835]  ? srso_alias_return_thunk+0x5/0xfbef5
[  103.967387][ T5835]  ? srso_alias_return_thunk+0x5/0xfbef5
[  103.967417][ T5835]  ? __lock_acquire+0x146e/0x2cf0
[  103.967480][ T5835]  ? srso_alias_return_thunk+0x5/0xfbef5
[  103.967510][ T5835]  ? do_raw_spin_lock+0x12b/0x2f0
[  103.967543][ T5835]  ? srso_alias_return_thunk+0x5/0xfbef5
[  103.967577][ T5835]  ? srso_alias_return_thunk+0x5/0xfbef5
[  103.967606][ T5835]  ? do_raw_spin_unlock+0xf5/0x210
[  103.967634][ T5835]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  103.967676][ T5835]  do_writepages+0x32e/0x550
[  103.967718][ T5835]  ? srso_alias_return_thunk+0x5/0xfbef5
[  103.967750][ T5835]  ? srso_alias_return_thunk+0x5/0xfbef5
[  103.967784][ T5835]  ? srso_alias_return_thunk+0x5/0xfbef5
[  103.967814][ T5835]  ? do_raw_spin_unlock+0xf5/0x210
[  103.967846][ T5835]  filemap_fdatawrite+0x1e9/0x2f0
[  103.967891][ T5835]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  103.967972][ T5835]  ? srso_alias_return_thunk+0x5/0xfbef5
[  103.968004][ T5835]  ? srso_alias_return_thunk+0x5/0xfbef5
[  103.968039][ T5835]  ? do_raw_spin_unlock+0xf5/0x210
[  103.968077][ T5835]  f2fs_sync_dirty_inodes+0x30e/0x860
[  103.968121][ T5835]  f2fs_write_checkpoint+0x9df/0x26a0
[  103.968185][ T5835]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  103.968255][ T5835]  ? srso_alias_return_thunk+0x5/0xfbef5
[  103.968285][ T5835]  ? kfree+0x1c1/0x630
[  103.968308][ T5835]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  103.968347][ T5835]  kill_f2fs_super+0x314/0x720
[  103.968380][ T5835]  ? __pfx_kill_f2fs_super+0x10/0x10
[  103.968419][ T5835]  ? srso_alias_return_thunk+0x5/0xfbef5
[  103.968449][ T5835]  ? lockdep_hardirqs_on+0x7a/0x110
[  103.968483][ T5835]  ? srso_alias_return_thunk+0x5/0xfbef5
[  103.968528][ T5835]  deactivate_locked_super+0xbc/0x130
[  103.968557][ T5835]  cleanup_mnt+0x437/0x4d0
[  103.968586][ T5835]  ? _raw_spin_unlock_irq+0x23/0x50
[  103.968622][ T5835]  task_work_run+0x1d9/0x270
[  103.968654][ T5835]  ? __pfx_task_work_run+0x10/0x10
[  103.968694][ T5835]  exit_to_user_mode_loop+0xed/0x480
[  103.968724][ T5835]  ? rcu_is_watching+0x15/0xb0
[  103.968767][ T5835]  do_syscall_64+0x32d/0xf80
[  103.968801][ T5835]  ? trace_irq_disable+0x3b/0x150
[  103.968823][ T5835]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.968855][ T5835]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.968881][ T5835] RIP: 0033:0x7f1ec819da57
[  103.968903][ T5835] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  103.968923][ T5835] RSP: 002b:00007ffc53afbab8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  103.968949][ T5835] RAX: 0000000000000000 RBX: 00007f1ec8232048 RCX: 00007f1ec819da57
[  103.968966][ T5835] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc53afbb70
[  103.968982][ T5835] RBP: 00007ffc53afbb70 R08: 00007ffc53afcb70 R09: 00000000ffffffff
[  103.968999][ T5835] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc53afcc00
[  103.969015][ T5835] R13: 00007f1ec8232048 R14: 00000000000195bd R15: 00007ffc53afcc40
[  103.969053][ T5835]  </TASK>
[  103.969093][ T5835] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  104.153015][ T6073] hfs: walked past end of dir
[  104.193531][ T5835] CPU: 1 UID: 0 PID: 5835 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  104.193566][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  104.193580][ T5835] Call Trace:
[  104.193590][ T5835]  <TASK>
[  104.193600][ T5835]  dump_stack_lvl+0xe8/0x150
[  104.193643][ T5835]  f2fs_handle_critical_error+0x37c/0x540
[  104.193690][ T5835]  f2fs_write_end_io+0xcdb/0xff0
[  104.193742][ T5835]  __submit_merged_bio+0x256/0x700
[  104.193789][ T5835]  __submit_merged_write_cond+0x3c9/0x4e0
[  104.193837][ T5835]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  104.193893][ T5835]  ? srso_alias_return_thunk+0x5/0xfbef5
[  104.193935][ T5835]  f2fs_write_data_pages+0x2975/0x35e0
[  104.194026][ T5835]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  104.194091][ T5835]  ? unwind_get_return_address+0x4d/0x90
[  104.194131][ T5835]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  104.194159][ T5835]  ? srso_alias_return_thunk+0x5/0xfbef5
[  104.194224][ T5835]  ? srso_alias_return_thunk+0x5/0xfbef5
[  104.194254][ T5835]  ? check_noncircular+0xda/0x150
[  104.194297][ T5835]  ? srso_alias_return_thunk+0x5/0xfbef5
[  104.194332][ T5835]  ? srso_alias_return_thunk+0x5/0xfbef5
[  104.194361][ T5835]  ? srso_alias_return_thunk+0x5/0xfbef5
[  104.194391][ T5835]  ? __lock_acquire+0x146e/0x2cf0
[  104.194456][ T5835]  ? srso_alias_return_thunk+0x5/0xfbef5
[  104.194486][ T5835]  ? do_raw_spin_lock+0x12b/0x2f0
[  104.194521][ T5835]  ? srso_alias_return_thunk+0x5/0xfbef5
[  104.194556][ T5835]  ? srso_alias_return_thunk+0x5/0xfbef5
[  104.194586][ T5835]  ? do_raw_spin_unlock+0xf5/0x210
[  104.194615][ T5835]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  104.194658][ T5835]  do_writepages+0x32e/0x550
[  104.194700][ T5835]  ? srso_alias_return_thunk+0x5/0xfbef5
[  104.194733][ T5835]  ? srso_alias_return_thunk+0x5/0xfbef5
[  104.194769][ T5835]  ? srso_alias_return_thunk+0x5/0xfbef5
[  104.194798][ T5835]  ? do_raw_spin_unlock+0xf5/0x210
[  104.194832][ T5835]  filemap_fdatawrite+0x1e9/0x2f0
[  104.194878][ T5835]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  104.194969][ T5835]  ? srso_alias_return_thunk+0x5/0xfbef5
[  104.195003][ T5835]  ? srso_alias_return_thunk+0x5/0xfbef5
[  104.195039][ T5835]  ? do_raw_spin_unlock+0xf5/0x210
[  104.195079][ T5835]  f2fs_sync_dirty_inodes+0x30e/0x860
[  104.195127][ T5835]  f2fs_write_checkpoint+0x9df/0x26a0
[  104.195200][ T5835]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  104.195282][ T5835]  ? srso_alias_return_thunk+0x5/0xfbef5
[  104.195311][ T5835]  ? kfree+0x1c1/0x630
[  104.195336][ T5835]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  104.195378][ T5835]  kill_f2fs_super+0x314/0x720
[  104.195413][ T5835]  ? __pfx_kill_f2fs_super+0x10/0x10
[  104.195456][ T5835]  ? srso_alias_return_thunk+0x5/0xfbef5
[  104.195486][ T5835]  ? lockdep_hardirqs_on+0x7a/0x110
[  104.195521][ T5835]  ? srso_alias_return_thunk+0x5/0xfbef5
[  104.195570][ T5835]  deactivate_locked_super+0xbc/0x130
[  104.195600][ T5835]  cleanup_mnt+0x437/0x4d0
[  104.195630][ T5835]  ? _raw_spin_unlock_irq+0x23/0x50
[  104.195667][ T5835]  task_work_run+0x1d9/0x270
[  104.195701][ T5835]  ? __pfx_task_work_run+0x10/0x10
[  104.195744][ T5835]  exit_to_user_mode_loop+0xed/0x480
[  104.195776][ T5835]  ? rcu_is_watching+0x15/0xb0
[  104.195820][ T5835]  do_syscall_64+0x32d/0xf80
[  104.195854][ T5835]  ? trace_irq_disable+0x3b/0x150
[  104.195877][ T5835]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.195911][ T5835]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.195937][ T5835] RIP: 0033:0x7f1ec819da57
[  104.195961][ T5835] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  104.195981][ T5835] RSP: 002b:00007ffc53afbab8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  104.196006][ T5835] RAX: 0000000000000000 RBX: 00007f1ec8232048 RCX: 00007f1ec819da57
[  104.196023][ T5835] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc53afbb70
[  104.196039][ T5835] RBP: 00007ffc53afbb70 R08: 00007ffc53afcb70 R09: 00000000ffffffff
[  104.196062][ T5835] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc53afcc00
[  104.196077][ T5835] R13: 00007f1ec8232048 R14: 00000000000195bd R15: 00007ffc53afcc40
[  104.196120][ T5835]  </TASK>
[  104.196411][ T5835] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  104.943697][ T5940] usb 5-1: USB disconnect, device number 2
[  105.142680][   T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.257863][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  105.302959][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  105.312862][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  105.337727][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  105.348854][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  105.366788][   T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.618429][   T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.633487][ T5928] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  105.763995][   T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.793554][ T5928] usb 1-1: Using ep0 maxpacket: 16
[  105.818672][ T5928] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  105.863499][ T5928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  105.931497][ T5928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  105.955975][ T5928] usb 1-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82
[  105.973495][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.991696][ T5928] usb 1-1: Product: syz
[  106.003218][ T5928] usb 1-1: Manufacturer: syz
[  106.018964][ T5928] usb 1-1: SerialNumber: syz
[  106.044103][ T5928] usb 1-1: config 0 descriptor??
[  106.056373][ T5928] kobil_sct 1-1:0.0: required endpoints missing
[  106.203691][    T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  106.386586][ T6090] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  106.445497][    T9] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  106.485434][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.510337][ T6087] chnl_net:caif_netlink_parms(): no params data found
[  106.525801][ T5895] usb 1-1: USB disconnect, device number 2
[  106.572162][    T9] usb 5-1: Product: syz
[  106.589557][    T9] usb 5-1: Manufacturer: syz
[  106.619362][    T9] usb 5-1: SerialNumber: syz
[  106.629611][   T12] bridge_slave_1: left allmulticast mode
[  106.654694][   T12] bridge_slave_1: left promiscuous mode
[  106.686418][    T9] usb 5-1: config 0 descriptor??
[  106.706482][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.738738][    T9] hub 5-1:0.0: bad descriptor, ignoring hub
[  106.754838][    T9] hub 5-1:0.0: probe with driver hub failed with error -5
[  106.773533][ T6098] loop1: detected capacity change from 0 to 32768
[  106.786450][   T12] bridge_slave_0: left allmulticast mode
[  106.790597][ T6098] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.53 (6098)
[  106.792213][   T12] bridge_slave_0: left promiscuous mode
[  106.819007][ T6098] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  106.834642][ T6098] BTRFS info (device loop1): using sha256 checksum algorithm
[  106.848988][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.956012][    T9] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state.
[  106.982047][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  107.002281][    T9] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo)
[  107.010885][    T9] usb 5-1: media controller created
[  107.031810][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  107.050234][ T6098] BTRFS info (device loop1): rebuilding free space tree
[  107.165193][ T6105] dib0700: tx buffer length is larger than 4. Not supported.
[  107.215824][ T6098] BTRFS info (device loop1): enabling ssd optimizations
[  107.222813][ T6098] BTRFS info (device loop1): using spread ssd allocation scheme
[  107.234874][    T9] DVB: Unable to find symbol dib7000p_attach()
[  107.263716][    T9] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo'
[  107.272340][ T6098] BTRFS info (device loop1): turning on async discard
[  107.272382][ T6098] BTRFS info (device loop1): enabling free space tree
[  107.272403][ T6098] BTRFS info (device loop1): force clearing of disk cache
[  107.437970][ T5830] Bluetooth: hci2: command tx timeout
[  107.511491][ T5835] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  107.543232][ T6141] Bluetooth: MGMT ver 1.23
[  107.572358][    T9] rc_core: IR keymap rc-dib0700-rc5 not found
[  107.595287][    T9] Registered IR keymap rc-empty
[  107.600527][    T9] dvb-usb: could not initialize remote control.
[  107.647027][    T9] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected.
[  107.721090][    T9] usb 5-1: USB disconnect, device number 3
[  107.909707][    T9] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected.
[  107.953456][ T5940] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  108.124213][ T5940] usb 1-1: Using ep0 maxpacket: 16
[  108.129946][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  108.159231][ T5940] usb 1-1: config index 0 descriptor too short (expected 51443, got 18)
[  108.187540][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  108.212261][ T5940] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  108.260707][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.275416][   T12] bond0 (unregistering): Released all slaves
[  108.286160][ T5940] usb 1-1: Product: syz
[  108.290545][ T5940] usb 1-1: Manufacturer: syz
[  108.312647][ T5940] usb 1-1: SerialNumber: syz
[  108.342655][ T5940] r8152-cfgselector 1-1: Unknown version 0x0000
[  108.353119][ T6158] loop4: detected capacity change from 0 to 8
[  108.359387][ T5940] r8152-cfgselector 1-1: config 0 descriptor??
[  108.636326][ T5940] r8152-cfgselector 1-1: Needed 2 retries to read version
[  108.863015][    T9] r8152-cfgselector 1-1: USB disconnect, device number 3
[  108.972687][ T6172] faux_driver vgem: [drm] Unknown color mode 127; guessing buffer size.
[  109.041442][ T6163] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  109.054393][ T6163] batman_adv: batadv0: Removing interface: batadv_slave_0
[  109.084331][ T6163] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  109.108970][ T6163] batman_adv: batadv0: Removing interface: batadv_slave_1
[  109.467223][ T6186] loop1: detected capacity change from 0 to 128
[  109.513941][ T5830] Bluetooth: hci2: command tx timeout
[  109.552142][ T6186] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  109.585152][ T6186] hpfs: filesystem error: improperly stopped
[  109.615228][ T6186] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  109.653524][ T6186] hpfs: You really don't want any checks? You are crazy...
[  109.668662][ T6186] hpfs: hpfs_map_sector(): read error
[  109.696756][ T6186] hpfs: code page support is disabled
[  109.711464][ T6186] hpfs: hpfs_map_4sectors(): unaligned read
[  109.740288][ T6087] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.742063][ T6186] hpfs: hpfs_map_4sectors(): unaligned read
[  109.775476][ T6186] hpfs: filesystem error: unable to find root dir
[  109.791442][ T6087] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.826297][ T6087] bridge_slave_0: entered allmulticast mode
[  109.842678][ T6087] bridge_slave_0: entered promiscuous mode
[  109.876574][ T6087] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.883961][ T6200] loop7: detected capacity change from 0 to 7
[  109.914042][ T6087] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.963610][ T6087] bridge_slave_1: entered allmulticast mode
[  109.999535][ T6087] bridge_slave_1: entered promiscuous mode
[  110.018872][ T6200] Dev loop7: unable to read RDB block 7
[  110.053877][ T6200]  loop7: unable to read partition table
[  110.079181][ T6200] loop7: partition table beyond EOD, truncated
[  110.132438][ T6200] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[  110.201296][ T6211] loop1: detected capacity change from 0 to 2048
[  110.229739][   T12] hsr_slave_0: left promiscuous mode
[  110.253890][ T6211] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  110.303131][ T6211] NILFS (loop1): mounting unchecked fs
[  110.326196][   T12] hsr_slave_1: left promiscuous mode
[  110.332046][ T5828] udevd[5828]: incorrect nilfs2 checksum on /dev/loop1
[  110.392439][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  110.433290][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  110.452253][ T6211] NILFS (loop1): recovery complete
[  110.475186][ T6214] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  110.489738][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  110.511128][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  110.711829][   T12] veth1_macvtap: left promiscuous mode
[  110.728502][   T12] veth0_macvtap: left promiscuous mode
[  110.743601][   T12] veth1_vlan: left promiscuous mode
[  110.763689][   T12] veth0_vlan: left promiscuous mode
[  111.049341][ T6227] netlink: 'syz.3.91': attribute type 39 has an invalid length.
[  111.569764][ T6238] loop0: detected capacity change from 0 to 1024
[  111.593698][ T5830] Bluetooth: hci2: command tx timeout
[  111.607460][ T6238] EXT4-fs: Ignoring removed nomblk_io_submit option
[  111.614851][   T12] team0 (unregistering): Port device team_slave_1 removed
[  111.640702][ T6238] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  111.714731][   T12] team0 (unregistering): Port device team_slave_0 removed
[  111.775790][ T6238] EXT4-fs error (device loop0): ext4_map_blocks:786: inode #3: block 2: comm syz.0.95: lblock 2 mapped to illegal pblock 2 (length 1)
[  111.813635][ T6238] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  111.815003][ T6238] Quota error (device loop0): qtree_write_dquot: dquota write failed
[  111.824364][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  111.824470][    C1] EXT4-fs (loop0): initial error at time 1775757036: ext4_map_blocks:786: inode 3: block 2
[  111.824521][    C1] EXT4-fs (loop0): last error at time 1775757036: ext4_map_blocks:786: inode 3: block 2
[  111.877157][ T6238] EXT4-fs error (device loop0): ext4_map_blocks:786: inode #3: block 48: comm syz.0.95: lblock 0 mapped to illegal pblock 48 (length 1)
[  111.932280][ T6238] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  111.932589][ T6238] Quota error (device loop0): v2_write_file_info: Can't write info structure
[  111.952302][ T6238] EXT4-fs error (device loop0): ext4_acquire_dquot:7026: comm syz.0.95: Failed to acquire dquot type 0
[  111.975214][ T6238] loop0: lost filesystem error report for type 5 error -117
[  111.975598][ T6238] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6291: Corrupt filesystem
[  112.010630][ T6087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  112.021922][ T6238] loop0: lost filesystem error report for type 5 error -117
[  112.028406][ T6238] EXT4-fs error (device loop0): ext4_evict_inode:265: inode #11: comm syz.0.95: mark_inode_dirty error
[  112.047791][ T6238] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  112.048089][ T6238] EXT4-fs warning (device loop0): ext4_evict_inode:268: couldn't mark inode dirty (err -117)
[  112.078137][ T6238] EXT4-fs (loop0): 1 orphan inode deleted
[  112.094460][   T49] EXT4-fs error (device loop0): ext4_map_blocks:786: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1)
[  112.111365][   T49] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  112.120077][   T49] Quota error (device loop0): remove_tree: Can't read quota data block 1
[  112.142113][ T6238] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  112.154163][ T5830] Bluetooth: hci0: command tx timeout
[  112.170991][   T49] EXT4-fs error (device loop0): ext4_release_dquot:7062: comm kworker/u8:3: Failed to release dquot type 0
[  112.186923][ T6087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  112.202829][   T49] loop0: lost filesystem error report for type 5 error -117
[  112.312843][ T6087] team0: Port device team_slave_0 added
[  112.375124][ T6087] team0: Port device team_slave_1 added
[  112.505368][ T6255] capability: warning: `syz.2.100' uses 32-bit capabilities (legacy support in use)
[  112.534852][ T6257] netlink: 'syz.3.102': attribute type 1 has an invalid length.
[  112.550105][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.573195][ T6259] program syz.2.100 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  112.589694][ T6257] netlink: 96 bytes leftover after parsing attributes in process `syz.3.102'.
[  112.601092][ T6087] batman_adv: batadv0: Adding interface: batadv_slave_0
[  112.627413][ T6087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  112.655451][ T5837] EXT4-fs error (device loop0): __ext4_get_inode_loc:4797: comm syz-executor: Invalid inode table block 1 in block_group 0
[  112.668534][ T6257] netlink: 'syz.3.102': attribute type 1 has an invalid length.
[  112.668576][ T6257] netlink: 'syz.3.102': attribute type 8 has an invalid length.
[  112.668593][ T6257] netlink: 582 bytes leftover after parsing attributes in process `syz.3.102'.
[  112.733409][ T5837] loop0: lost filesystem error report for type 5 error -117
[  112.734413][ T6087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  112.752368][ T5837] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6291: Corrupt filesystem
[  112.816840][ T5837] loop0: lost filesystem error report for type 5 error -117
[  112.817149][ T5837] EXT4-fs error (device loop0): ext4_quota_off:7310: inode #3: comm syz-executor: mark_inode_dirty error
[  112.850716][ T6087] batman_adv: batadv0: Adding interface: batadv_slave_1
[  112.870930][ T5837] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  112.873671][ T6087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  112.897165][ T6266] input: syz0 as /devices/virtual/input/input6
[  112.925728][ T6087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  113.187720][ T6275] block nbd0: shutting down sockets
[  113.442102][ T6087] hsr_slave_0: entered promiscuous mode
[  113.464654][ T6087] hsr_slave_1: entered promiscuous mode
[  113.471036][ T6087] debugfs: 'hsr0' already exists in 'hsr'
[  113.490125][ T6087] Cannot create hsr debugfs directory
[  113.674115][ T5830] Bluetooth: hci2: command tx timeout
[  113.961039][ T6302] loop3: detected capacity change from 0 to 1024
[  114.067379][ T6302] hfsplus: b-tree write err: -5, ino 2
[  114.232680][   T49] hfsplus: b-tree write err: -5, ino 25
[  114.272434][   T49] hfsplus: b-tree write err: -5, ino 4
[  114.288789][   T49] hfsplus: b-tree write err: -5, ino 2
[  114.301498][   T49] hfsplus: b-tree write err: -5, ino 26
[  114.502356][ T6316] process 'syz.3.120' launched './file0' with NULL argv: empty string added
[  114.658894][ T6320] input: syz0 as /devices/virtual/input/input7
[  114.916552][ T6087] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  114.970159][ T6323] loop4: detected capacity change from 0 to 4096
[  114.987131][ T6087] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  115.036412][ T6087] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  115.099471][ T6087] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  115.573002][ T6087] 8021q: adding VLAN 0 to HW filter on device bond0
[  115.658534][ T6087] 8021q: adding VLAN 0 to HW filter on device team0
[  115.718937][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.726207][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[  115.777015][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.784240][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[  116.275072][ T6325] loop3: detected capacity change from 0 to 40427
[  116.275386][ T6367] loop2: detected capacity change from 0 to 4096
[  116.290428][ T6371] loop0: detected capacity change from 0 to 2048
[  116.299082][ T6000] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  116.311914][ T6325] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504)
[  116.329686][ T6367] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[  116.343065][ T6325] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  116.379805][ T6325] F2FS-fs (loop3): Image doesn't support compression
[  116.385908][ T6371] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  116.417876][ T6325] F2FS-fs (loop3): invalid crc value
[  116.448706][ T6371] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  116.483445][ T6000] usb 2-1: Using ep0 maxpacket: 16
[  116.534045][ T6000] usb 2-1: config 0 has an invalid interface number: 13 but max is 0
[  116.579194][ T6000] usb 2-1: config 0 has no interface number 0
[  116.625071][ T6087] 8021q: adding VLAN 0 to HW filter on device batadv0
[  116.643663][ T6000] usb 2-1: config 0 interface 13 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  116.683371][ T6000] usb 2-1: config 0 interface 13 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  116.743395][ T6000] usb 2-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00
[  116.772884][ T6000] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.836302][ T6000] usb 2-1: config 0 descriptor??
[  116.904255][ T6325] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  116.967537][ T6325] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  116.978384][ T6325] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  117.009982][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.082142][   T30] audit: type=1800 audit(1775757041.390:6): pid=6325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.124" name="bus" dev="loop3" ino=10 res=0 errno=0
[  117.117149][ T6325] syz.3.124: attempt to access beyond end of device
[  117.117149][ T6325] loop3: rw=34817, sector=53248, nr_sectors = 8 limit=40427
[  117.260578][ T6000] uclogic 0003:5543:0781.0001: unknown main item tag 0x0
[  117.317267][ T6000] uclogic 0003:5543:0781.0001: unknown main item tag 0x0
[  117.346999][ T6000] uclogic 0003:5543:0781.0001: item fetching failed at offset 2/5
[  117.372349][ T6000] uclogic 0003:5543:0781.0001: parse failed
[  117.397971][ T5834] syz-executor: attempt to access beyond end of device
[  117.397971][ T5834] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  117.426588][ T6000] uclogic 0003:5543:0781.0001: probe with driver uclogic failed with error -22
[  117.466147][ T5834] CPU: 1 UID: 0 PID: 5834 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  117.466182][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  117.466197][ T5834] Call Trace:
[  117.466206][ T5834]  <TASK>
[  117.466216][ T5834]  dump_stack_lvl+0xe8/0x150
[  117.466258][ T5834]  f2fs_handle_critical_error+0x37c/0x540
[  117.466303][ T5834]  f2fs_write_end_io+0xcdb/0xff0
[  117.466359][ T5834]  __submit_merged_bio+0x256/0x700
[  117.466403][ T5834]  __submit_merged_write_cond+0x3c9/0x4e0
[  117.466447][ T5834]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  117.466498][ T5834]  ? srso_alias_return_thunk+0x5/0xfbef5
[  117.466539][ T5834]  f2fs_write_data_pages+0x2975/0x35e0
[  117.466620][ T5834]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  117.466675][ T5834]  ? srso_alias_return_thunk+0x5/0xfbef5
[  117.466704][ T5834]  ? css_rstat_updated+0x23a/0x530
[  117.466756][ T5834]  ? srso_alias_return_thunk+0x5/0xfbef5
[  117.466784][ T5834]  ? rcu_is_watching+0x15/0xb0
[  117.466819][ T5834]  ? srso_alias_return_thunk+0x5/0xfbef5
[  117.466847][ T5834]  ? mod_memcg_lruvec_state+0x1a7/0x360
[  117.466887][ T5834]  ? srso_alias_return_thunk+0x5/0xfbef5
[  117.466915][ T5834]  ? lru_gen_update_size+0x7c9/0xd10
[  117.466960][ T5834]  ? srso_alias_return_thunk+0x5/0xfbef5
[  117.467001][ T5834]  ? srso_alias_return_thunk+0x5/0xfbef5
[  117.467029][ T5834]  ? __lock_acquire+0x6b5/0x2cf0
[  117.467069][ T5834]  ? srso_alias_return_thunk+0x5/0xfbef5
[  117.467111][ T5834]  ? srso_alias_return_thunk+0x5/0xfbef5
[  117.467144][ T5834]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  117.467184][ T5834]  do_writepages+0x32e/0x550
[  117.467223][ T5834]  ? srso_alias_return_thunk+0x5/0xfbef5
[  117.467254][ T5834]  ? srso_alias_return_thunk+0x5/0xfbef5
[  117.467286][ T5834]  ? srso_alias_return_thunk+0x5/0xfbef5
[  117.467313][ T5834]  ? do_raw_spin_unlock+0xf5/0x210
[  117.467344][ T5834]  filemap_fdatawrite+0x1e9/0x2f0
[  117.467389][ T5834]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  117.467473][ T5834]  ? srso_alias_return_thunk+0x5/0xfbef5
[  117.467505][ T5834]  ? srso_alias_return_thunk+0x5/0xfbef5
[  117.467539][ T5834]  ? do_raw_spin_unlock+0xf5/0x210
[  117.467570][ T5834]  f2fs_sync_dirty_inodes+0x30e/0x860
[  117.467612][ T5834]  f2fs_write_checkpoint+0x9df/0x26a0
[  117.467677][ T5834]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  117.467702][ T5834]  ? srso_alias_return_thunk+0x5/0xfbef5
[  117.467792][ T5834]  kill_f2fs_super+0x314/0x720
[  117.467824][ T5834]  ? __pfx_kill_f2fs_super+0x10/0x10
[  117.467863][ T5834]  ? srso_alias_return_thunk+0x5/0xfbef5
[  117.467893][ T5834]  ? lockdep_hardirqs_on+0x7a/0x110
[  117.467928][ T5834]  ? srso_alias_return_thunk+0x5/0xfbef5
[  117.467980][ T5834]  deactivate_locked_super+0xbc/0x130
[  117.468009][ T5834]  cleanup_mnt+0x437/0x4d0
[  117.468037][ T5834]  ? _raw_spin_unlock_irq+0x23/0x50
[  117.468073][ T5834]  task_work_run+0x1d9/0x270
[  117.468105][ T5834]  ? __pfx_task_work_run+0x10/0x10
[  117.468144][ T5834]  exit_to_user_mode_loop+0xed/0x480
[  117.468174][ T5834]  ? rcu_is_watching+0x15/0xb0
[  117.468216][ T5834]  do_syscall_64+0x32d/0xf80
[  117.468250][ T5834]  ? trace_irq_disable+0x3b/0x150
[  117.468272][ T5834]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.468304][ T5834]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.468329][ T5834] RIP: 0033:0x7f962059da57
[  117.468352][ T5834] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  117.468371][ T5834] RSP: 002b:00007fff324d1258 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  117.468397][ T5834] RAX: 0000000000000000 RBX: 00007f9620632048 RCX: 00007f962059da57
[  117.468414][ T5834] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff324d1310
[  117.468430][ T5834] RBP: 00007fff324d1310 R08: 00007fff324d2310 R09: 00000000ffffffff
[  117.468448][ T5834] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff324d23a0
[  117.468464][ T5834] R13: 00007f9620632048 R14: 000000000001c9b8 R15: 00007fff324d23e0
[  117.468502][ T5834]  </TASK>
[  117.468512][ T5834] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  117.482889][ T6402] loop2: detected capacity change from 0 to 256
[  117.649547][   T30] audit: type=1800 audit(1775757041.960:7): pid=6407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.142" name="bus" dev="tmpfs" ino=161 res=0 errno=0
[  117.693752][ T6000] usb 2-1: USB disconnect, device number 3
[  118.004194][ T6402] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d)
[  118.228440][ T6087] veth0_vlan: entered promiscuous mode
[  118.284936][ T6087] veth1_vlan: entered promiscuous mode
[  118.432131][ T6087] veth0_macvtap: entered promiscuous mode
[  118.485218][ T6087] veth1_macvtap: entered promiscuous mode
[  118.584534][ T6087] batman_adv: batadv0: Interface activated: batadv_slave_0
[  118.644600][ T6087] batman_adv: batadv0: Interface activated: batadv_slave_1
[  118.707884][   T64] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  118.740939][ T1000] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  118.794242][ T1000] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  118.825699][ T1000] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  119.040533][ T6441] dummy0: entered allmulticast mode
[  119.040879][ T6440] program syz.3.151 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  119.087229][ T6441] dummy0: left allmulticast mode
[  119.133478][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.187865][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.303299][ T1000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.357782][ T1000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.939899][ T6474] loop6: detected capacity change from 0 to 1024
[  120.122578][ T6474] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  120.364850][   T10] IPVS: starting estimator thread 0...
[  120.375709][ T6487] IPVS: ovf: FWM 3 0x00000003 - no destination available
[  120.495451][ T6489] IPVS: using max 24 ests per chain, 57600 per kthread
[  120.511192][ T6484] loop2: detected capacity change from 0 to 4096
[  120.723599][ T5830] Bluetooth: hci2: command tx timeout
[  121.244000][ T6087] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.295234][ T6483] loop1: detected capacity change from 0 to 131072
[  121.370551][ T6483] XFS (loop1): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  121.396660][ T6503] loop3: detected capacity change from 0 to 128
[  121.706940][ T6483] XFS (loop1): Starting recovery (logdev: internal)
[  121.737897][ T6483] XFS (loop1): Ending recovery (logdev: internal)
[  121.767810][ T6515] netlink: 'syz.0.172': attribute type 8 has an invalid length.
[  121.896056][ T5835] XFS (loop1): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  122.817969][ T6511] loop6: detected capacity change from 0 to 32768
[  122.869013][ T6511] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.170 (6511)
[  122.940775][ T6511] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  122.989333][ T6511] BTRFS info (device loop6): using sha256 checksum algorithm
[  123.263644][ T6564] loop4: detected capacity change from 0 to 256
[  123.285460][ T6564] exfat: Deprecated parameter 'utf8'
[  123.299285][ T6511] BTRFS info (device loop6): enabling ssd optimizations
[  123.348969][ T6511] BTRFS info (device loop6): turning on async discard
[  123.385023][ T6564] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d)
[  123.393853][ T6511] BTRFS info (device loop6): enabling free space tree
[  123.668570][ T6570] netlink: 28 bytes leftover after parsing attributes in process `syz.2.193'.
[  123.704366][ T6087] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  123.876479][   T30] audit: type=1326 audit(1775757048.180:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6573 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46479c819 code=0x7ffc0000
[  123.980898][   T30] audit: type=1326 audit(1775757048.220:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6573 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46479c819 code=0x7ffc0000
[  124.098063][   T30] audit: type=1326 audit(1775757048.220:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6573 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46479c819 code=0x7ffc0000
[  124.138911][ T6541] loop3: detected capacity change from 0 to 32768
[  124.185118][   T30] audit: type=1326 audit(1775757048.220:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6573 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fd46479c819 code=0x7ffc0000
[  124.252644][ T6545] loop0: detected capacity change from 0 to 32768
[  124.295984][ T6545] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.188 (6545)
[  124.320179][   T30] audit: type=1326 audit(1775757048.220:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6573 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46479c819 code=0x7ffc0000
[  124.368030][   T24] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  124.413848][   T30] audit: type=1326 audit(1775757048.220:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6573 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46479c819 code=0x7ffc0000
[  124.436486][ T6545] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  124.495269][ T6545] BTRFS info (device loop0): using blake2b checksum algorithm
[  124.526689][   T30] audit: type=1326 audit(1775757048.220:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6573 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46479c819 code=0x7ffc0000
[  124.529733][ T6586] loop2: detected capacity change from 0 to 256
[  124.558596][   T24] usb 7-1: Using ep0 maxpacket: 8
[  124.584216][   T30] audit: type=1326 audit(1775757048.220:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6573 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46479c819 code=0x7ffc0000
[  124.584819][ T6586] exfat: Deprecated parameter 'utf8'
[  124.607115][   T30] audit: type=1326 audit(1775757048.220:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6573 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd46479c819 code=0x7ffc0000
[  124.607173][   T30] audit: type=1326 audit(1775757048.220:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6573 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46479c819 code=0x7ffc0000
[  124.663575][   T24] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  124.757648][   T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  124.848162][   T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  124.931733][   T24] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  124.963473][   T24] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  124.976438][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.004745][ T6586] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  125.033894][ T6545] BTRFS info (device loop0): enabling ssd optimizations
[  125.040902][ T6545] BTRFS info (device loop0): turning on async discard
[  125.130750][ T6545] BTRFS info (device loop0): enabling free space tree
[  125.206069][ T6610] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  125.239087][   T24] usb 7-1: GET_CAPABILITIES returned 0
[  125.275448][   T24] usbtmc 7-1:16.0: can't read capabilities
[  125.411357][ T6613] netlink: 'syz.1.205': attribute type 1 has an invalid length.
[  125.488619][ T5837] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  125.506171][   T24] usb 7-1: USB disconnect, device number 2
[  126.115672][ T6628] loop1: detected capacity change from 0 to 64
[  126.730814][ T6616] loop4: detected capacity change from 0 to 131072
[  126.747081][ T6616] F2FS-fs (loop4): invalid crc value
[  126.794472][ T5835] syz-executor: attempt to access beyond end of device
[  126.794472][ T5835] loop1: rw=8388608, sector=268435468, nr_sectors = 2 limit=64
[  126.883595][ T5835] Buffer I/O error on dev loop1, logical block 134217734, async page read
[  126.884531][ T6616] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  126.933636][ T6616] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  126.983008][ T5835] syz-executor: attempt to access beyond end of device
[  126.983008][ T5835] loop1: rw=8388608, sector=268435468, nr_sectors = 2 limit=64
[  127.081142][ T5835] Buffer I/O error on dev loop1, logical block 134217734, async page read
[  127.155477][ T5835] Trying to free block not in datazone
[  128.406271][ T6642] loop0: detected capacity change from 0 to 32768
[  128.469336][ T6642] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.206 (6642)
[  128.472958][ T6642] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  128.472993][ T6642] BTRFS info (device loop0): using crc32c checksum algorithm
[  128.673236][ T6642] BTRFS info (device loop0): enabling ssd optimizations
[  128.693778][ T6642] BTRFS info (device loop0): turning on async discard
[  128.710806][ T6673] loop3: detected capacity change from 0 to 4096
[  128.776489][ T6642] BTRFS info (device loop0): enabling free space tree
[  128.801124][ T6673] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[  129.059609][ T6703] Zero length message leads to an empty skb
[  129.241618][ T5837] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  129.463535][ T6713] syz.4.241 uses obsolete (PF_INET,SOCK_PACKET)
[  129.511618][ T6710] loop1: detected capacity change from 0 to 2048
[  129.717899][ T6710] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  130.170797][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.471293][ T6742] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  130.499550][ T6745] loop1: detected capacity change from 0 to 16
[  130.533263][ T6745] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  130.581543][ T5828] udevd[5828]: incorrect cramfs checksum on /dev/loop1
[  130.699180][ T5828] udevd[5828]: incorrect cramfs checksum on /dev/loop1
[  130.725965][    C1] Illegal XDP return value 16128 on prog  (id 15) dev lo, expect packet loss!
[  130.951838][ T6757] program syz.6.256 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  131.202768][ T6764] loop2: detected capacity change from 0 to 2048
[  131.356241][ T6764] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  131.521261][ T5824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.539751][ T6779] loop6: detected capacity change from 0 to 2048
[  131.632457][ T6779] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  131.680447][ T6779] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found
[  131.723488][ T6779] UDF-fs: Scanning with blocksize 512 failed
[  131.806765][ T6779] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  131.839158][ T6789] loop4: detected capacity change from 0 to 512
[  131.952641][ T6789] FAT-fs (loop4): error, clusters badly computed (1 != 0)
[  132.003603][ T6789] FAT-fs (loop4): Filesystem has been set read-only
[  132.160235][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  132.169672][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  132.356758][ T5940] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[  132.518932][ T6766] loop3: detected capacity change from 0 to 32768
[  132.535741][ T5940] usb 1-1: config 0 has no interfaces?
[  132.545763][ T5940] usb 1-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47
[  132.602460][ T6766] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  132.612962][ T5940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.682807][ T5940] usb 1-1: config 0 descriptor??
[  132.819461][ T6822] netlink: 12 bytes leftover after parsing attributes in process `syz.2.276'.
[  132.877504][ T6827] netlink: 'syz.4.275': attribute type 1 has an invalid length.
[  132.929478][ T6827] netlink: 'syz.4.275': attribute type 7 has an invalid length.
[  132.975059][ T6827] netlink: 'syz.4.275': attribute type 8 has an invalid length.
[  132.997405][ T6827] netlink: 208 bytes leftover after parsing attributes in process `syz.4.275'.
[  133.015711][ T5940] usb 1-1: USB disconnect, device number 4
[  133.032656][ T5834] ocfs2: Unmounting device (7,3) on (node local)
[  133.838023][ T6850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.285'.
[  133.873056][ T6850] netlink: 'syz.0.285': attribute type 30 has an invalid length.
[  133.909816][ T6850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.285'.
[  134.011385][ T6854] loop4: detected capacity change from 0 to 256
[  134.431202][ T6863] loop4: detected capacity change from 0 to 512
[  134.526904][ T6869] loop7: detected capacity change from 0 to 7
[  134.539489][ T6869] Buffer I/O error on dev loop7, logical block 0, async page read
[  134.568355][ T6863] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  134.685418][ T6863] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  134.727698][ T6873] support for the xor transformation has been removed.
[  134.752075][ T6869] Buffer I/O error on dev loop7, logical block 0, async page read
[  134.783301][ T6869] Buffer I/O error on dev loop7, logical block 0, async page read
[  134.812808][ T6869] Buffer I/O error on dev loop7, logical block 0, async page read
[  134.864032][ T6869] Buffer I/O error on dev loop7, logical block 0, async page read
[  134.885036][ T6869] Buffer I/O error on dev loop7, logical block 0, async page read
[  134.899583][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.909621][ T6869] Buffer I/O error on dev loop7, logical block 0, async page read
[  134.953482][ T6869] ldm_validate_partition_table(): Disk read failed.
[  134.985873][ T6869] Buffer I/O error on dev loop7, logical block 0, async page read
[  135.053441][ T6869] Buffer I/O error on dev loop7, logical block 0, async page read
[  135.061323][ T6869] Buffer I/O error on dev loop7, logical block 0, async page read
[  135.097925][ T6852] loop1: detected capacity change from 0 to 32768
[  135.138141][ T6869] Dev loop7: unable to read RDB block 0
[  135.171283][ T6869]  loop7: unable to read partition table
[  135.186040][ T6852] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  135.202456][ T6869] loop7: partition table beyond EOD, truncated
[  135.238533][ T6869] loop_reread_partitions: partition scan of loop7 (úùƒå¡7x~�¾SêjÌ–ã¢P@½?ã•X) failed (rc=-5)
[  135.282491][ T6852] XFS (loop1): Ending clean mount
[  135.291013][ T6852] XFS (loop1): Quotacheck needed: Please wait.
[  135.321909][ T6852] XFS (loop1): Quotacheck: Done.
[  135.450835][ T5835] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  135.953150][ T6914] sch_tbf: burst 20736 is lower than device lo mtu (65550) !
[  136.081298][ T6922] loop2: detected capacity change from 0 to 64
[  136.292873][   T64] Bluetooth: hci6: Frame reassembly failed (-84)
[  136.333930][ T6925] Bluetooth: received HCILL_WAKE_UP_IND in state 2
[  136.432925][ T6932] loop1: detected capacity change from 0 to 512
[  136.547595][ T6932] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.634388][ T6932] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  136.684952][ T6932] EXT4-fs error (device loop1): ext4_get_first_dir_block:3535: inode #12: block 32: comm syz.1.297: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0
[  136.775229][ T6932] EXT4-fs error (device loop1): ext4_get_first_dir_block:3538: inode #12: comm syz.1.297: directory missing '.'
[  136.789985][ T6942] loop0: detected capacity change from 0 to 4096
[  136.887177][ T6942] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  137.035529][ T6942] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000.
[  137.066826][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.239447][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.244887][ T5940] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  137.427289][ T6966] loop0: detected capacity change from 0 to 256
[  137.452151][ T5940] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  137.487056][ T5940] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  137.517035][ T5940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.593648][ T5940] usb 5-1: config 0 descriptor??
[  137.647953][ T6940] loop2: detected capacity change from 0 to 32768
[  137.716181][ T6940] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.310 (6940)
[  137.772380][ T6940] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  137.793289][ T6940] BTRFS info (device loop2): using crc32c checksum algorithm
[  137.801719][ T6940] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  138.047710][ T6991] loop0: detected capacity change from 0 to 4096
[  138.048284][ T6940] BTRFS info (device loop2): rebuilding free space tree
[  138.078345][ T6991] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  138.214806][ T6940] BTRFS info (device loop2): disabling free space tree
[  138.232742][ T5940] ath6kl: mismatched byte count 0 vs. expected 12
[  138.246284][ T7001] warning: `syz.6.328' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  138.257651][ T6940] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  138.257716][ T6940] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  138.262113][ T6991] ntfs3(loop0): Inode r=19 is not in use!
[  138.289279][ T5940] ath6kl: Failed to init ath6kl core: -22
[  138.295302][ T6991] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  138.312674][ T6940] BTRFS info (device loop2): enabling ssd optimizations
[  138.313599][ T5832] Bluetooth: hci6: command 0x1003 tx timeout
[  138.322006][ T5830] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  138.328765][ T5940] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -22
[  138.345956][ T6991] ntfs3(loop0): Failed to initialize $Extend/$Reparse.
[  138.376193][ T6940] BTRFS info (device loop2): turning on async discard
[  138.383048][ T6940] BTRFS info (device loop2): enabling disk space caching
[  138.413859][ T6940] BTRFS info (device loop2): force clearing of disk cache
[  138.463876][ T6000] usb 5-1: USB disconnect, device number 4
[  138.468068][ T6991] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  138.479960][ T6940] BTRFS info (device loop2): use zstd compression, level 3
[  138.522911][ T6991] ntfs3(loop0): ino=1b, mi_enum_attr
[  138.529361][ T6991] ntfs3(loop0): ino=1b, mi_enum_attr
[  138.538717][ T6991] ntfs3(loop0): ino=1e, mi_enum_attr
[  138.556146][ T6991] overlayfs: failed to get redirect (-22)
[  138.563008][ T6991] overlayfs: failed to look up (file0) for ino (-22)
[  138.728323][ T5824] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  138.753750][    T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  138.860288][   T30] kauditd_printk_skb: 9 callbacks suppressed
[  138.860310][   T30] audit: type=1326 audit(1775757063.170:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7009 comm="syz.0.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ef79c819 code=0x7ffc0000
[  138.951540][   T30] audit: type=1326 audit(1775757063.210:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7009 comm="syz.0.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f24ef79c819 code=0x7ffc0000
[  138.977051][    T9] usb 7-1: Using ep0 maxpacket: 32
[  139.076900][    T9] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  139.093372][    T9] usb 7-1: config 0 has no interface number 0
[  139.108919][    T9] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  139.128673][   T30] audit: type=1326 audit(1775757063.210:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7009 comm="syz.0.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ef79c819 code=0x7ffc0000
[  139.161638][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.180931][ T7016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.333'.
[  139.203509][    T9] usb 7-1: Product: syz
[  139.207872][    T9] usb 7-1: Manufacturer: syz
[  139.237441][    T9] usb 7-1: SerialNumber: syz
[  139.263544][   T30] audit: type=1326 audit(1775757063.210:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7009 comm="syz.0.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ef79c819 code=0x7ffc0000
[  139.301259][ T7018] loop4: detected capacity change from 0 to 128
[  139.314580][    T9] usb 7-1: config 0 descriptor??
[  139.330805][    T9] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  139.356711][    T9] usb 7-1: selecting invalid altsetting 1
[  139.370415][   T30] audit: type=1326 audit(1775757063.210:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7009 comm="syz.0.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f24ef79c819 code=0x7ffc0000
[  139.403805][    T9] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  139.418930][ T7020] loop1: detected capacity change from 0 to 1024
[  139.428144][ T7018] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  139.442995][    T9] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  139.458829][   T30] audit: type=1326 audit(1775757063.220:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7009 comm="syz.0.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ef79c819 code=0x7ffc0000
[  139.481625][    T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  139.490666][    T9] usb 7-1: media controller created
[  139.503387][   T30] audit: type=1326 audit(1775757063.220:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7009 comm="syz.0.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ef79c819 code=0x7ffc0000
[  139.551431][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  139.566667][   T30] audit: type=1326 audit(1775757063.220:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7009 comm="syz.0.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f24ef79c819 code=0x7ffc0000
[  139.593637][ T7018] ext4 filesystem being mounted at /69/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  139.623405][   T30] audit: type=1326 audit(1775757063.220:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7009 comm="syz.0.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ef79c819 code=0x7ffc0000
[  139.657703][ T7020] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  139.663386][   T30] audit: type=1326 audit(1775757063.220:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7009 comm="syz.0.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ef79c819 code=0x7ffc0000
[  139.785530][ T7020] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  139.797971][ T7018] EXT4-fs (loop4): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  139.863842][    T9] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  139.872442][    T9] zl10353_read_register: readreg error (reg=127, ret==-71)
[  139.903167][    T9] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  140.035398][ T5823] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  140.108479][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  140.137033][    T9] usb 7-1: USB disconnect, device number 3
[  140.388433][ T7038] loop1: detected capacity change from 0 to 2048
[  140.536172][ T7041] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  140.791443][ T7024] loop0: detected capacity change from 0 to 32768
[  140.843483][ T7024] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.337 (7024)
[  140.942016][ T7024] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  141.010137][ T7024] BTRFS info (device loop0): using crc32c checksum algorithm
[  141.312792][ T7024] BTRFS info (device loop0): enabling ssd optimizations
[  141.340213][ T7071] loop6: detected capacity change from 0 to 16
[  141.375395][ T7024] BTRFS info (device loop0): turning on flush-on-commit
[  141.391324][ T7071] erofs (device loop6): mounted with root inode @ nid 36.
[  141.403526][ T7024] BTRFS info (device loop0): enabling free space tree
[  141.420571][ T7024] BTRFS info (device loop0): enabling auto defrag
[  141.472092][ T7024] BTRFS info (device loop0): use lzo compression, level 1
[  141.533045][ T7024] BTRFS info (device loop0): max_inline set to 4096
[  141.610463][ T7055] loop3: detected capacity change from 0 to 32768
[  141.647708][ T7055] BTRFS info: device /dev/loop3 (7:3) using temp-fsid 9929fda4-f980-437f-b828-5cdefd2ff942
[  141.703417][ T6000] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  141.715054][ T7055] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.348 (7055)
[  141.733587][ T7041] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  141.774358][ T7041] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4)
[  141.814865][ T7055] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  141.841331][ T7041] Remounting filesystem read-only
[  141.853559][ T7055] BTRFS info (device loop3): using crc32c checksum algorithm
[  141.891903][ T6000] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  141.913818][ T5835] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer
[  141.976608][ T6000] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  142.036766][ T5837] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  142.068133][ T6000] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  142.097142][ T7055] BTRFS info (device loop3): setting nodatasum
[  142.122419][ T7055] BTRFS info (device loop3): setting nodatacow
[  142.135005][ T6000] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.152766][ T7055] BTRFS info (device loop3): turning on async discard
[  142.170062][ T7055] BTRFS info (device loop3): enabling free space tree
[  142.197495][ T6000] usb 5-1: config 0 descriptor??
[  142.226400][ T6000] hub 5-1:0.0: USB hub found
[  142.232278][ T7055] BTRFS info (device loop3): enabling auto defrag
[  142.253545][ T7055] BTRFS info (device loop3): max_inline set to 0
[  142.442237][ T6000] hub 5-1:0.0: 1 port detected
[  142.643700][ T7101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.357'.
[  142.727803][ T5834] BTRFS info (device loop3): last unmount of filesystem 9929fda4-f980-437f-b828-5cdefd2ff942
[  142.836118][ T7077] loop2: detected capacity change from 0 to 32768
[  142.854694][ T6000] usb 5-1: USB disconnect, device number 5
[  142.887622][ T7083] loop6: detected capacity change from 0 to 32768
[  142.901542][ T7077] (syz.2.353,7077,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  142.963156][ T7077] (syz.2.353,7077,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  143.046053][ T7083] XFS (loop6): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  143.096750][ T7077] JBD2: Ignoring recovery information on journal
[  143.178053][ T7109] team0 (unregistering): Port device team_slave_0 removed
[  143.238079][ T7119] loop0: detected capacity change from 0 to 64
[  143.312287][ T7077] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  143.316527][ T7083] XFS (loop6): Ending clean mount
[  143.328381][ T7109] team0 (unregistering): Port device team_slave_1 removed
[  143.397778][ T7119] hfs: bad catalog entry type 65409
[  143.668892][ T6087] XFS (loop6): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  143.740352][ T5824] ocfs2: Unmounting device (7,2) on (node local)
[  143.789846][ T7130] loop1: detected capacity change from 0 to 512
[  143.808986][ T7130] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  143.844175][ T7130] EXT4-fs (loop1): 1 truncate cleaned up
[  143.890406][ T7130] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  143.946922][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  143.946943][   T30] audit: type=1800 audit(1775757068.260:38): pid=7130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.366" name="file1" dev="loop1" ino=13 res=0 errno=0
[  143.985017][ T5940] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  144.128536][ T7130] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.366: invalid indirect mapped block 4294967295 (level 1)
[  144.147558][   T24] kernel read not supported for file /dsp1 (pid: 24 comm: kworker/1:0)
[  144.186595][ T5940] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  144.214115][ T7130] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.366: invalid indirect mapped block 65535 (level 2)
[  144.227755][ T5940] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  144.263849][ T5940] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  144.273199][ T5940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  144.288989][ T5940] usb 1-1: SerialNumber: syz
[  144.449381][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.532778][ T5940] usb 1-1: 0:2 : does not exist
[  144.643496][ T6000] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  144.736803][ T5940] usb 1-1: USB disconnect, device number 5
[  144.826232][ T6000] usb 7-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  144.861401][ T6000] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.893629][ T6000] usb 7-1: Product: syz
[  144.897837][ T6000] usb 7-1: Manufacturer: syz
[  144.917581][ T6000] usb 7-1: SerialNumber: syz
[  144.948563][ T6000] usb 7-1: config 0 descriptor??
[  144.986642][ T6000] i2c-tiny-usb 7-1:0.0: version 6d.cc found at bus 007 address 004
[  145.267385][ T7156] loop0: detected capacity change from 0 to 1024
[  145.305285][ T7156] EXT4-fs: Ignoring removed bh option
[  145.310833][ T7156] EXT4-fs: Ignoring removed oldalloc option
[  145.335478][ T7156] EXT4-fs: Ignoring removed nobh option
[  145.364877][ T7156] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block
[  145.364877][ T7156] 
[  145.396321][ T6000]  (null): failure reading functionality
[  145.404428][ T7138] loop3: detected capacity change from 0 to 40427
[  145.453431][ T7138] F2FS-fs (loop3): build fault injection rate: 771
[  145.479833][ T7138] F2FS-fs (loop3): invalid crc value
[  145.505413][ T6000] i2c i2c-1: connected i2c-tiny-usb device
[  145.719740][ T5940] usb 7-1: USB disconnect, device number 4
[  145.857236][ T7160] loop0: detected capacity change from 0 to 4096
[  145.884027][ T7138] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  145.931884][ T7138] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  146.170774][ T5834] syz-executor: attempt to access beyond end of device
[  146.170774][ T5834] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  146.233166][ T5834] CPU: 0 UID: 0 PID: 5834 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  146.233199][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  146.233214][ T5834] Call Trace:
[  146.233224][ T5834]  <TASK>
[  146.233234][ T5834]  dump_stack_lvl+0xe8/0x150
[  146.233276][ T5834]  f2fs_handle_critical_error+0x37c/0x540
[  146.233326][ T5834]  f2fs_write_end_io+0xcdb/0xff0
[  146.233373][ T5834]  __submit_merged_bio+0x256/0x700
[  146.233419][ T5834]  f2fs_submit_merged_write+0x284/0x390
[  146.233461][ T5834]  ? __pfx_f2fs_submit_merged_write+0x10/0x10
[  146.233504][ T5834]  ? srso_alias_return_thunk+0x5/0xfbef5
[  146.233545][ T5834]  f2fs_sync_node_pages+0x14bf/0x1680
[  146.233602][ T5834]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  146.233676][ T5834]  ? srso_alias_return_thunk+0x5/0xfbef5
[  146.233716][ T5834]  f2fs_write_checkpoint+0xeb8/0x26a0
[  146.233781][ T5834]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  146.233855][ T5834]  ? srso_alias_return_thunk+0x5/0xfbef5
[  146.233885][ T5834]  ? kfree+0x1c1/0x630
[  146.233909][ T5834]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  146.233950][ T5834]  kill_f2fs_super+0x314/0x720
[  146.233983][ T5834]  ? __pfx_kill_f2fs_super+0x10/0x10
[  146.234023][ T5834]  ? srso_alias_return_thunk+0x5/0xfbef5
[  146.234053][ T5834]  ? lockdep_hardirqs_on+0x7a/0x110
[  146.234097][ T5834]  ? srso_alias_return_thunk+0x5/0xfbef5
[  146.234143][ T5834]  deactivate_locked_super+0xbc/0x130
[  146.234172][ T5834]  cleanup_mnt+0x437/0x4d0
[  146.234201][ T5834]  ? _raw_spin_unlock_irq+0x23/0x50
[  146.234237][ T5834]  task_work_run+0x1d9/0x270
[  146.234270][ T5834]  ? __pfx_task_work_run+0x10/0x10
[  146.234311][ T5834]  exit_to_user_mode_loop+0xed/0x480
[  146.234342][ T5834]  ? rcu_is_watching+0x15/0xb0
[  146.234385][ T5834]  do_syscall_64+0x32d/0xf80
[  146.234420][ T5834]  ? trace_irq_disable+0x3b/0x150
[  146.234443][ T5834]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.234476][ T5834]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.234502][ T5834] RIP: 0033:0x7f962059da57
[  146.234524][ T5834] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  146.234544][ T5834] RSP: 002b:00007fff324d1258 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  146.234569][ T5834] RAX: 0000000000000000 RBX: 00007f9620632048 RCX: 00007f962059da57
[  146.234586][ T5834] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff324d1310
[  146.234602][ T5834] RBP: 00007fff324d1310 R08: 00007fff324d2310 R09: 00000000ffffffff
[  146.234620][ T5834] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff324d23a0
[  146.234636][ T5834] R13: 00007f9620632048 R14: 0000000000023a81 R15: 00007fff324d23e0
[  146.234675][ T5834]  </TASK>
[  146.545040][ T5834] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  146.563582][ T5834] CPU: 1 UID: 0 PID: 5834 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  146.563616][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  146.563631][ T5834] Call Trace:
[  146.563641][ T5834]  <TASK>
[  146.563651][ T5834]  dump_stack_lvl+0xe8/0x150
[  146.563693][ T5834]  f2fs_handle_critical_error+0x37c/0x540
[  146.563737][ T5834]  f2fs_write_end_io+0xcdb/0xff0
[  146.563786][ T5834]  __submit_merged_bio+0x256/0x700
[  146.563831][ T5834]  f2fs_submit_merged_write+0x284/0x390
[  146.563874][ T5834]  ? __pfx_f2fs_submit_merged_write+0x10/0x10
[  146.563918][ T5834]  ? srso_alias_return_thunk+0x5/0xfbef5
[  146.563959][ T5834]  f2fs_sync_node_pages+0x14bf/0x1680
[  146.564018][ T5834]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  146.564102][ T5834]  ? srso_alias_return_thunk+0x5/0xfbef5
[  146.564143][ T5834]  f2fs_write_checkpoint+0xeb8/0x26a0
[  146.564209][ T5834]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  146.564282][ T5834]  ? srso_alias_return_thunk+0x5/0xfbef5
[  146.564312][ T5834]  ? kfree+0x1c1/0x630
[  146.564336][ T5834]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  146.564376][ T5834]  kill_f2fs_super+0x314/0x720
[  146.564409][ T5834]  ? __pfx_kill_f2fs_super+0x10/0x10
[  146.564449][ T5834]  ? srso_alias_return_thunk+0x5/0xfbef5
[  146.564479][ T5834]  ? lockdep_hardirqs_on+0x7a/0x110
[  146.564513][ T5834]  ? srso_alias_return_thunk+0x5/0xfbef5
[  146.564559][ T5834]  deactivate_locked_super+0xbc/0x130
[  146.564587][ T5834]  cleanup_mnt+0x437/0x4d0
[  146.564616][ T5834]  ? _raw_spin_unlock_irq+0x23/0x50
[  146.564653][ T5834]  task_work_run+0x1d9/0x270
[  146.564685][ T5834]  ? __pfx_task_work_run+0x10/0x10
[  146.564726][ T5834]  exit_to_user_mode_loop+0xed/0x480
[  146.564757][ T5834]  ? rcu_is_watching+0x15/0xb0
[  146.564800][ T5834]  do_syscall_64+0x32d/0xf80
[  146.564834][ T5834]  ? trace_irq_disable+0x3b/0x150
[  146.564857][ T5834]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.564889][ T5834]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.564915][ T5834] RIP: 0033:0x7f962059da57
[  146.564937][ T5834] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  146.564958][ T5834] RSP: 002b:00007fff324d1258 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  146.564983][ T5834] RAX: 0000000000000000 RBX: 00007f9620632048 RCX: 00007f962059da57
[  146.565001][ T5834] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff324d1310
[  146.565016][ T5834] RBP: 00007fff324d1310 R08: 00007fff324d2310 R09: 00000000ffffffff
[  146.565039][ T5834] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff324d23a0
[  146.565055][ T5834] R13: 00007f9620632048 R14: 0000000000023a81 R15: 00007fff324d23e0
[  146.565102][ T5834]  </TASK>
[  146.565112][ T5834] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  146.697241][ T7150] loop2: detected capacity change from 0 to 40427
[  146.967361][ T7150] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  146.975315][ T7150] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  147.020926][ T7162] loop1: detected capacity change from 0 to 32768
[  147.044883][ T7162] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.376 (7162)
[  147.185503][ T7162] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  147.238564][ T7162] BTRFS info (device loop1): using sha256 checksum algorithm
[  147.399364][ T7150] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  147.501830][ T7162] BTRFS info (device loop1): enabling ssd optimizations
[  147.518311][ T7150] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  147.565705][ T7162] BTRFS info (device loop1): turning on async discard
[  147.572599][ T7150] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  147.603447][ T7162] BTRFS info (device loop1): enabling free space tree
[  147.855328][ T5835] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  147.921869][ T7205] loop6: detected capacity change from 0 to 2048
[  147.996000][   T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  148.016831][ T7205] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  148.107711][   T30] audit: type=1800 audit(1775757072.420:39): pid=7205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.386" name="bus" dev="loop6" ino=1367 res=0 errno=0
[  148.242932][   T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  148.274273][   T10] usb 1-1: config 0 has no interface number 0
[  148.280461][   T10] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  148.364546][   T10] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  148.418748][   T10] usb 1-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  148.480008][   T10] usb 1-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[  148.508659][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.568357][   T10] usb 1-1: config 0 descriptor??
[  149.004535][ T7227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.397'.
[  149.262900][   T10] input: HID 28bd:0042 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:28BD:0042.0002/input/input8
[  149.412474][   T10] uclogic 0003:28BD:0042.0002: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.0-1/input1
[  149.508043][ T7237] loop2: detected capacity change from 0 to 2048
[  149.531913][   T10] usb 1-1: USB disconnect, device number 6
[  149.549960][ T7237] EXT4-fs: Ignoring removed bh option
[  149.590207][ T7237] EXT4-fs: Ignoring removed mblk_io_submit option
[  149.723632][ T7237] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  149.747456][ T7240] fido_id[7240]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  149.852943][   T24] IPVS: starting estimator thread 0...
[  149.875818][ T7237] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  149.966415][ T7237] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 16: comm syz.2.390: bad entry in directory: directory entry overrun - offset=108, inode=646161, rec_len=4096, size=4096 fake=0
[  149.987752][ T7254] IPVS: using max 30 ests per chain, 72000 per kthread
[  150.035955][ T7237] EXT4-fs (loop2): Remounting filesystem read-only
[  150.059201][   T30] audit: type=1326 audit(1775757074.370:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962059c819 code=0x7ffc0000
[  150.087700][ T5830] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  150.096537][ T5830] Bluetooth: hci5: Injecting HCI hardware error event
[  150.119273][ T5832] Bluetooth: hci5: hardware error 0x00
[  150.143525][   T30] audit: type=1326 audit(1775757074.400:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962059c819 code=0x7ffc0000
[  150.175578][   T30] audit: type=1326 audit(1775757074.440:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f962059c819 code=0x7ffc0000
[  150.200068][   T30] audit: type=1326 audit(1775757074.440:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962059c819 code=0x7ffc0000
[  150.222911][   T30] audit: type=1326 audit(1775757074.440:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962059c819 code=0x7ffc0000
[  150.259007][ T7263] xt_hashlimit: size too large, truncated to 1048576
[  150.278100][   T30] audit: type=1326 audit(1775757074.440:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f962059c819 code=0x7ffc0000
[  150.333890][   T30] audit: type=1326 audit(1775757074.440:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962059c819 code=0x7ffc0000
[  150.372246][   T30] audit: type=1326 audit(1775757074.440:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f962059b687 code=0x7ffc0000
[  150.438726][ T5824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.448340][   T30] audit: type=1326 audit(1775757074.440:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f962059da8a code=0x7ffc0000
[  150.541989][   T30] audit: type=1326 audit(1775757074.440:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962059c819 code=0x7ffc0000
[  150.630287][ T7272] loop6: detected capacity change from 0 to 2048
[  150.749573][ T7275] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  150.960848][ T7279] loop3: detected capacity change from 0 to 1024
[  151.478625][ T7297] loop4: detected capacity change from 0 to 256
[  151.744089][   T10] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[  151.890852][ T6000] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  151.922246][   T10] usb 1-1: config 0 has an invalid interface number: 41 but max is 0
[  151.942486][   T10] usb 1-1: config 0 has no interface number 0
[  151.951940][ T6000] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  151.962105][   T10] usb 1-1: config 0 interface 41 has no altsetting 0
[  151.975667][   T10] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  151.985007][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.996256][   T10] usb 1-1: Product: syz
[  152.006546][   T10] usb 1-1: Manufacturer: syz
[  152.014982][   T10] usb 1-1: SerialNumber: syz
[  152.027135][   T10] usb 1-1: config 0 descriptor??
[  152.053777][   T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  152.069881][ T7320] netlink: 'syz.6.435': attribute type 32 has an invalid length.
[  152.079402][ T7320] netlink: 8 bytes leftover after parsing attributes in process `syz.6.435'.
[  152.122454][ T7320] bond1: option coupled_control: invalid value (255)
[  152.140075][ T7320] bond1 (unregistering): Released all slaves
[  152.243600][   T24] usb 4-1: Using ep0 maxpacket: 8
[  152.255208][   T24] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  152.273434][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.291011][   T24] pvrusb2: Hardware description: Terratec Grabster AV400
[  152.313515][   T24] pvrusb2: **********
[  152.313564][ T5832] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  152.317507][   T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  152.317523][   T24] pvrusb2: Important functionality might not be entirely working.
[  152.317536][   T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  152.317551][   T24] pvrusb2: **********
[  152.506858][ T2339] pvrusb2: Invalid write control endpoint
[  152.627595][ T2339] pvrusb2: Invalid write control endpoint
[  152.645264][ T2339] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  152.662859][   T10] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71
[  152.663530][ T2339] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  152.719012][   T10] usb 1-1: USB disconnect, device number 7
[  152.733498][ T2339] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  152.763385][ T2339] pvrusb2: Device being rendered inoperable
[  152.796218][ T7312] pvrusb2: Killing an I2C write to 9 that is too large (desired=62 limit=61)
[  152.834714][ T2339] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  152.843834][ T2339] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  152.846036][ T6000] usb 4-1: USB disconnect, device number 2
[  152.901853][ T2339] pvrusb2: Attached sub-driver cx25840
[  152.926830][ T2339] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  152.966676][ T2339] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  153.055827][ T7333] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow
[  153.402724][ T7326] loop2: detected capacity change from 0 to 32768
[  153.504641][ T7347] loop1: detected capacity change from 0 to 256
[  153.536876][ T7347] exfat: Deprecated parameter 'utf8'
[  153.562721][ T7347] exfat: Deprecated parameter 'namecase'
[  153.615407][ T7347] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  153.664225][ T7345] loop0: detected capacity change from 0 to 4096
[  153.705543][ T7353] netlink: 'syz.4.448': attribute type 11 has an invalid length.
[  153.742412][ T7353] netlink: 52 bytes leftover after parsing attributes in process `syz.4.448'.
[  153.861893][ T7345] ntfs3(loop0): ino=3, ntfs_set_state failed, -22.
[  153.920813][ T7345] ntfs3(loop0): Failed to initialize $Extend/$ObjId.
[  154.059133][ T7345] ntfs3(loop0): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" attr_set_size_ex
[  154.187309][ T7343] ntfs3(loop0): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" attr_set_size_ex
[  154.404999][   T12] ntfs3(loop0): ino=3, ntfs3_write_inode failed, -22.
[  154.437364][ T5837] ntfs3(loop0): ino=3, ntfs_set_state failed, -22.
[  154.467172][ T5837] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  154.496969][ T5837] ntfs3(loop0): ino=3, ntfs_set_state failed, -22.
[  154.512813][ T7367] loop6: detected capacity change from 0 to 4096
[  154.523861][ T1159] ntfs3(loop0): ino=3, ntfs3_write_inode failed, -22.
[  154.819714][ T7381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.462'.
[  154.829274][   T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  154.870716][ T7382] tap0: tun_chr_ioctl cmd 1074025677
[  154.882225][ T7382] tap0: linktype set to 0
[  155.003429][   T24] usb 4-1: Using ep0 maxpacket: 16
[  155.040582][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  155.081845][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  155.133007][   T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  155.160492][ T7386] batman_adv: batadv0: Adding interface: gretap1
[  155.174155][   T24] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  155.183277][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.184857][ T7386] batman_adv: batadv0: Interface activated: gretap1
[  155.208960][   T24] usb 4-1: config 0 descriptor??
[  155.226669][ T7388] loop3: detected capacity change from 0 to 524287999
[  155.244120][ T7384] loop2: detected capacity change from 0 to 4096
[  155.449106][ T7390] loop4: detected capacity change from 0 to 4096
[  155.525200][ T7390] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  155.671132][   T24] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  155.739485][   T24] microsoft 0003:045E:07DA.0004: no inputs found
[  155.773641][   T24] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway
[  155.875787][   T24] usb 4-1: USB disconnect, device number 3
[  156.084010][ T7402] fido_id[7402]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  156.188598][ T6000] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  156.220943][ T7411] netlink: 32 bytes leftover after parsing attributes in process `syz.0.475'.
[  156.251238][ T7411] netlink: 72 bytes leftover after parsing attributes in process `syz.0.475'.
[  156.363425][ T6000] usb 3-1: Using ep0 maxpacket: 16
[  156.378817][ T6000] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  156.430240][ T6000] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  156.449174][ T6000] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  156.479451][ T6000] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  156.499854][ T6000] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  156.531962][ T6000] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  156.570693][ T6000] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  156.600143][ T6000] usb 3-1: Manufacturer: syz
[  156.611852][ T6000] usb 3-1: config 0 descriptor??
[  156.703442][   T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  156.887206][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  156.908399][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  156.949154][   T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  156.994125][   T10] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  157.013705][ T6000] rc_core: IR keymap rc-hauppauge not found
[  157.021026][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.032033][ T6000] Registered IR keymap rc-empty
[  157.043730][ T6000] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  157.070973][   T10] usb 7-1: config 0 descriptor??
[  157.094451][ T6000] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  157.130545][ T6000] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  157.180356][ T6000] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input9
[  157.220911][ T7439] loop3: detected capacity change from 0 to 4096
[  157.278292][ T6000] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  157.315943][ T6000] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  157.331334][ T7441] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  157.354170][ T6000] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  157.378567][ T6000] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  157.435856][ T6000] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  157.468711][ T7439] NILFS error (device loop3): nilfs_dotdot: directory #12 missing '.'
[  157.483504][ T6000] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  157.502801][   T10] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  157.511629][ T7439] Remounting filesystem read-only
[  157.535775][ T6000] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  157.546474][   T10] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  157.573402][   T10] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  157.580859][   T10] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  157.590840][ T6000] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  157.613642][   T10] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  157.621636][   T10] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  157.635264][ T6000] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  157.653458][   T10] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  157.661795][   T10] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  157.683598][ T6000] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  157.691783][   T10] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  157.718122][   T10] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  157.727232][ T6000] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  157.761892][ T6000] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  157.816874][ T5895] hid-generic 0005:0C45:1010.0006: item fetching failed at offset 0/1
[  157.834464][ T6000] usb 3-1: USB disconnect, device number 2
[  157.840467][   T10] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  157.864658][ T5895] hid-generic 0005:0C45:1010.0006: probe with driver hid-generic failed with error -22
[  157.891933][   T10] usb 7-1: USB disconnect, device number 5
[  157.939129][ T7455] loop3: detected capacity change from 0 to 64
[  158.055724][ T7455] capability: warning: `syz.3.493' uses deprecated v2 capabilities in a way that may be insecure
[  158.097071][ T7455] syz.3.493: attempt to access beyond end of device
[  158.097071][ T7455] loop3: rw=8388608, sector=268435468, nr_sectors = 2 limit=64
[  158.121322][ T7459] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  158.137609][ T7454] fido_id[7454]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  158.199525][ T7455] buffer_io_error: 14 callbacks suppressed
[  158.199548][ T7455] Buffer I/O error on dev loop3, logical block 134217734, async page read
[  158.410678][ T7461] loop2: detected capacity change from 0 to 64
[  158.659912][ T7445] loop4: detected capacity change from 0 to 32768
[  158.782042][ T7469] Set syz1 is full, maxelem 1029 reached
[  158.813534][ T7445] JBD2: Ignoring recovery information on journal
[  158.883564][ T7445] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  159.173163][ T7482] netlink: 'syz.2.506': attribute type 4 has an invalid length.
[  159.204619][ T5823] ocfs2: Unmounting device (7,4) on (node local)
[  159.211563][ T7482] netlink: 'syz.2.506': attribute type 8 has an invalid length.
[  159.227912][ T7482] netlink: 212 bytes leftover after parsing attributes in process `syz.2.506'.
[  159.263414][   T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  159.310592][ T7457] loop1: detected capacity change from 0 to 32768
[  159.443507][   T24] usb 4-1: Using ep0 maxpacket: 16
[  159.490644][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  159.537792][   T24] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  159.561595][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.597500][   T24] usb 4-1: Product: syz
[  159.602141][   T24] usb 4-1: Manufacturer: syz
[  159.613702][ T5902] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  159.642440][   T24] usb 4-1: SerialNumber: syz
[  159.684505][   T24] usb 4-1: config 0 descriptor??
[  159.696535][ T7496] ªªªªªª: renamed from vlan0 (while UP)
[  159.793373][ T5902] usb 5-1: Using ep0 maxpacket: 16
[  159.808737][ T7495] loop6: detected capacity change from 0 to 4096
[  159.813854][ T5902] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  159.842422][ T7495] ntfs3(loop6): Different NTFS sector size (2048) and media sector size (512).
[  159.852940][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.883863][ T5902] usb 5-1: Product: syz
[  159.888559][ T5902] usb 5-1: Manufacturer: syz
[  159.928294][ T5902] usb 5-1: SerialNumber: syz
[  159.955344][ T6000] usb 4-1: USB disconnect, device number 4
[  160.258650][ T5902] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  160.289312][ T5902] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  160.338319][ T5902] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  160.369056][ T5902] usb 5-1: media controller created
[  160.420557][ T5902] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  160.499510][ T5902] zl10353_read_register: readreg error (reg=127, ret==-71)
[  160.595970][ T7520] loop2: detected capacity change from 0 to 64
[  160.604827][ T7519] loop6: detected capacity change from 0 to 128
[  160.612326][ T7519] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  160.640713][ T5902] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[  160.678764][ T7519] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  160.701619][ T5902] usb 5-1: USB disconnect, device number 6
[  160.918938][   T12] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  161.392408][ T7542] usb usb2: usbfs: process 7542 (syz.3.533) did not claim interface 0 before use
[  161.408341][ T7543] loop4: detected capacity change from 0 to 256
[  161.467123][ T7542] usb usb2: usbfs: process 7542 (syz.3.533) did not claim interface 0 before use
[  161.477371][ T7543] FAT-fs (loop4): Directory bread(block 64) failed
[  161.501464][ T7543] FAT-fs (loop4): Directory bread(block 65) failed
[  161.543516][ T7543] FAT-fs (loop4): Directory bread(block 66) failed
[  161.574161][ T7543] FAT-fs (loop4): Directory bread(block 67) failed
[  161.595780][ T7543] FAT-fs (loop4): Directory bread(block 68) failed
[  161.602373][ T7543] FAT-fs (loop4): Directory bread(block 69) failed
[  161.633491][ T7543] FAT-fs (loop4): Directory bread(block 70) failed
[  161.661026][ T7543] FAT-fs (loop4): Directory bread(block 71) failed
[  161.678898][ T7543] FAT-fs (loop4): Directory bread(block 72) failed
[  161.693882][ T7543] FAT-fs (loop4): Directory bread(block 73) failed
[  161.924749][ T7526] loop2: detected capacity change from 0 to 32768
[  162.116231][ T7554] ea_get: invalid extended attribute
[  162.122053][ T7554] ffff888052008330: 04 00 00 00                                      ....
[  162.345215][ T7535] loop1: detected capacity change from 0 to 32768
[  162.382130][ T7535] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 ./bus (7:1) scanned by syz.1.530 (7535)
[  162.443446][ T7535] btrfs: Unknown parameter 'dont_appraise'
[  162.600124][ T7545] loop6: detected capacity change from 0 to 32768
[  162.642294][ T5828] udevd[5828]: incorrect btrfs checksum on /dev/loop1
[  162.675782][ T7545] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.535 (7545)
[  162.803902][ T7545] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  162.897545][ T7545] BTRFS info (device loop6): using sha256 checksum algorithm
[  163.089347][ T7545] BTRFS info (device loop6): enabling ssd optimizations
[  163.173490][ T7545] BTRFS info (device loop6): turning on async discard
[  163.180322][ T7545] BTRFS info (device loop6): enabling free space tree
[  163.197545][ T7545] BTRFS info (device loop6): enabling auto defrag
[  163.223431][ T7545] BTRFS info (device loop6): max_inline set to 4096
[  163.409466][ T7602] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  163.496648][ T6087] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  163.764118][ T7605] netlink: 'syz.0.556': attribute type 12 has an invalid length.
[  163.771908][ T7605] netlink: 24 bytes leftover after parsing attributes in process `syz.0.556'.
[  163.782759][ T7609] netlink: 80 bytes leftover after parsing attributes in process `syz.6.555'.
[  163.823578][ T7609] netlink: 8 bytes leftover after parsing attributes in process `syz.6.555'.
[  163.919353][ T7613] set_capacity_and_notify: 1 callbacks suppressed
[  163.919374][ T7613] loop1: detected capacity change from 0 to 512
[  164.029850][ T7580] loop2: detected capacity change from 0 to 32768
[  164.054897][ T7613] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.559: bad orphan inode 15
[  164.075562][ T7580] (syz.2.547,7580,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  164.116630][ T6000] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  164.143473][ T7613] loop1: lost filesystem error report for type 5 error -117
[  164.154789][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  164.164026][ T7613] ext4_test_bit(bit=14, block=4) = 1
[  164.169465][    C1] EXT4-fs (loop1): initial error at time 1775757088: ext4_orphan_get:1423
[  164.183281][    C1] EXT4-fs (loop1): last error at time 1775757088: ext4_orphan_get:1423
[  164.215612][ T7613] is_bad_inode(inode)=0
[  164.219861][ T7613] NEXT_ORPHAN(inode)=3221225472
[  164.225693][ T7613] max_ino=32
[  164.228228][ T7580] (syz.2.547,7580,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  164.229342][ T7613] i_nlink=1
[  164.231398][ T7613] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  164.340118][ T7580] JBD2: Ignoring recovery information on journal
[  164.353661][ T6000] usb 4-1: Using ep0 maxpacket: 16
[  164.380881][ T6000] usb 4-1: config 0 has an invalid interface number: 41 but max is 0
[  164.393500][ T6000] usb 4-1: config 0 has no interface number 0
[  164.399655][ T6000] usb 4-1: config 0 interface 41 altsetting 134 bulk endpoint 0x4 has invalid maxpacket 16
[  164.423241][ T6000] usb 4-1: config 0 interface 41 altsetting 134 bulk endpoint 0x82 has invalid maxpacket 64
[  164.445131][ T6000] usb 4-1: config 0 interface 41 has no altsetting 0
[  164.461690][ T6000] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  164.495482][ T6000] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.505890][ T6000] usb 4-1: Product: syz
[  164.510079][ T6000] usb 4-1: Manufacturer: syz
[  164.515979][ T6000] usb 4-1: SerialNumber: syz
[  164.551824][ T7613] EXT4-fs warning (device loop1): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed
[  164.568971][ T7618] nbd0: detected capacity change from 0 to 127
[  164.590107][ T6000] usb 4-1: config 0 descriptor??
[  164.598761][ T7580] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  164.618395][ T5832] block nbd0: Receive control failed (result -32)
[  164.620764][ T5830] block nbd0: Receive control failed (result -32)
[  164.640994][ T5828] 
[  164.643464][ T5828] ======================================================
[  164.643697][ T7612] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  164.650560][ T5828] WARNING: possible circular locking dependency detected
[  164.650579][ T5828] syzkaller #0 Not tainted
[  164.669067][ T5828] ------------------------------------------------------
[  164.676099][ T5828] udevd/5828 is trying to acquire lock:
[  164.681650][ T5828] ffff88807c443470 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x37b/0x1100
[  164.690808][ T5828] 
[  164.690808][ T5828] but task is already holding lock:
[  164.698204][ T5828] ffff888031768180 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100
[  164.706780][ T5828] 
[  164.706780][ T5828] which lock already depends on the new lock.
[  164.706780][ T5828] 
[  164.717208][ T5828] 
[  164.717208][ T5828] the existing dependency chain (in reverse order) is:
[  164.726215][ T5828] 
[  164.726215][ T5828] -> #6 (&cmd->lock){+.+.}-{4:4}:
[  164.733451][ T5828]        __mutex_lock+0x19f/0x1300
[  164.738593][ T5828]        nbd_queue_rq+0xc6/0x1100
[  164.743624][ T5828]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  164.749696][ T5828]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  164.756554][ T5828]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  164.763070][ T5828]        blk_mq_run_hw_queue+0x348/0x4f0
[  164.768711][ T5828]        blk_mq_dispatch_list+0xd16/0xe10
[  164.774440][ T5828]        blk_mq_flush_plug_list+0x48d/0x570
[  164.780381][ T5828]        __blk_flush_plug+0x3ed/0x4d0
[  164.785761][ T5828]        __submit_bio+0x28d/0x580
[  164.790790][ T5828]        submit_bio_noacct_nocheck+0x2f4/0xa70
[  164.796960][ T5828]        block_read_full_folio+0x599/0x830
[  164.802779][ T5828]        filemap_read_folio+0x137/0x3b0
[  164.808420][ T5828]        do_read_cache_folio+0x358/0x590
[  164.814062][ T5828]        read_part_sector+0xb6/0x2b0
[  164.819359][ T5828]        adfspart_check_ICS+0xa5/0xa40
[  164.824828][ T5828]        bdev_disk_changed+0x7ba/0x1550
[  164.830472][ T5828]        blkdev_get_whole+0x380/0x510
[  164.835855][ T5828]        bdev_open+0x31e/0xd30
[  164.840625][ T5828]        blkdev_open+0x470/0x610
[  164.845567][ T5828]        do_dentry_open+0x785/0x14e0
[  164.850856][ T5828]        vfs_open+0x3b/0x340
[  164.855448][ T5828]        path_openat+0x2e08/0x3860
[  164.860580][ T5828]        do_file_open+0x23e/0x4a0
[  164.865607][ T5828]        do_sys_openat2+0x113/0x200
[  164.870906][ T5828]        __x64_sys_openat+0x138/0x170
[  164.876290][ T5828]        do_syscall_64+0x14d/0xf80
[  164.881602][ T5828]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.888024][ T5828] 
[  164.888024][ T5828] -> #5 (set->srcu){.+.+}-{0:0}:
[  164.895158][ T5828]        __synchronize_srcu+0xca/0x300
[  164.901078][ T5828]        elevator_switch+0x1e8/0x7a0
[  164.906364][ T5828]        elevator_change+0x2cc/0x450
[  164.911648][ T5828]        elevator_set_default+0x36c/0x430
[  164.917454][ T5828]        blk_register_queue+0x366/0x430
[  164.923032][ T5828]        __add_disk+0x677/0xd50
[  164.927903][ T5828]        add_disk_fwnode+0xfb/0x480
[  164.933110][ T5828]        nbd_dev_add+0x72c/0xb50
[  164.938048][ T5828]        nbd_init+0x168/0x1f0
[  164.942730][ T5828]        do_one_initcall+0x250/0x8d0
[  164.948018][ T5828]        do_initcall_level+0x104/0x190
[  164.953472][ T5828]        do_initcalls+0x59/0xa0
[  164.958316][ T5828]        kernel_init_freeable+0x2a6/0x3e0
[  164.964032][ T5828]        kernel_init+0x1d/0x1d0
[  164.968874][ T5828]        ret_from_fork+0x51e/0xb90
[  164.974018][ T5828]        ret_from_fork_asm+0x1a/0x30
[  164.979315][ T5828] 
[  164.979315][ T5828] -> #4 (&q->elevator_lock){+.+.}-{4:4}:
[  164.987145][ T5828]        __mutex_lock+0x19f/0x1300
[  164.992263][ T5828]        elevator_change+0x1b3/0x450
[  164.997547][ T5828]        elevator_set_none+0xb5/0x140
[  165.002917][ T5828]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  165.009250][ T5828]        nbd_start_device+0x17f/0xb10
[  165.014621][ T5828]        nbd_genl_connect+0x165b/0x1cf0
[  165.020161][ T5828]        genl_family_rcv_msg_doit+0x22a/0x330
[  165.026232][ T5828]        genl_rcv_msg+0x61c/0x7a0
[  165.031255][ T5828]        netlink_rcv_skb+0x232/0x4b0
[  165.036532][ T5828]        genl_rcv+0x28/0x40
[  165.041038][ T5828]        netlink_unicast+0x80f/0x9b0
[  165.046386][ T5828]        netlink_sendmsg+0x813/0xb40
[  165.051688][ T5828]        ____sys_sendmsg+0x972/0x9f0
[  165.057056][ T5828]        ___sys_sendmsg+0x2a5/0x360
[  165.062250][ T5828]        __x64_sys_sendmsg+0x1bd/0x2a0
[  165.067706][ T5828]        do_syscall_64+0x14d/0xf80
[  165.072815][ T5828]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.079218][ T5828] 
[  165.079218][ T5828] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  165.087832][ T5828]        blk_alloc_queue+0x546/0x680
[  165.093124][ T5828]        __blk_mq_alloc_disk+0x197/0x390
[  165.098833][ T5828]        nbd_dev_add+0x499/0xb50
[  165.103777][ T5828]        nbd_init+0x168/0x1f0
[  165.108481][ T5828]        do_one_initcall+0x250/0x8d0
[  165.113767][ T5828]        do_initcall_level+0x104/0x190
[  165.119218][ T5828]        do_initcalls+0x59/0xa0
[  165.124074][ T5828]        kernel_init_freeable+0x2a6/0x3e0
[  165.129855][ T5828]        kernel_init+0x1d/0x1d0
[  165.134705][ T5828]        ret_from_fork+0x51e/0xb90
[  165.139830][ T5828]        ret_from_fork_asm+0x1a/0x30
[  165.145123][ T5828] 
[  165.145123][ T5828] -> #2 (fs_reclaim){+.+.}-{0:0}:
[  165.152337][ T5828]        fs_reclaim_acquire+0x71/0x100
[  165.157799][ T5828]        kmem_cache_alloc_node_noprof+0x4a/0x690
[  165.164164][ T5828]        __alloc_skb+0x1d0/0x7d0
[  165.169094][ T5828]        tcp_stream_alloc_skb+0x3f/0x580
[  165.174751][ T5828]        tcp_sendmsg_locked+0x1375/0x5490
[  165.180483][ T5828]        tcp_sendmsg+0x2f/0x50
[  165.185258][ T5828]        sock_write_iter+0x406/0x4f0
[  165.190569][ T5828]        vfs_write+0x61d/0xb90
[  165.195348][ T5828]        ksys_write+0x150/0x270
[  165.200205][ T5828]        do_syscall_64+0x14d/0xf80
[  165.205331][ T5828]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.211851][ T5828] 
[  165.211851][ T5828] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}:
[  165.219699][ T5828]        lock_sock_nested+0x48/0x100
[  165.225072][ T5828]        inet_shutdown+0x6a/0x390
[  165.230364][ T5828]        nbd_mark_nsock_dead+0x2e9/0x560
[  165.235996][ T5828]        sock_shutdown+0x15e/0x260
[  165.241240][ T5828]        nbd_clear_sock+0x24/0x170
[  165.246375][ T5828]        nbd_ioctl+0x337/0xe40
[  165.251152][ T5828]        blkdev_ioctl+0x5e3/0x740
[  165.256191][ T5828]        __se_sys_ioctl+0xfc/0x170
[  165.261299][ T5828]        do_syscall_64+0x14d/0xf80
[  165.266425][ T5828]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.272855][ T5828] 
[  165.272855][ T5828] -> #0 (&nsock->tx_lock){+.+.}-{4:4}:
[  165.280511][ T5828]        __lock_acquire+0x15a5/0x2cf0
[  165.285886][ T5828]        lock_acquire+0xf0/0x2e0
[  165.290818][ T5828]        __mutex_lock+0x19f/0x1300
[  165.295933][ T5828]        nbd_queue_rq+0x37b/0x1100
[  165.301068][ T5828]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  165.307134][ T5828]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  165.313989][ T5828]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  165.320490][ T5828]        blk_mq_run_hw_queue+0x348/0x4f0
[  165.326117][ T5828]        blk_mq_dispatch_list+0xd16/0xe10
[  165.331836][ T5828]        blk_mq_flush_plug_list+0x48d/0x570
[  165.337729][ T5828]        __blk_flush_plug+0x3ed/0x4d0
[  165.343100][ T5828]        __submit_bio+0x28d/0x580
[  165.348215][ T5828]        submit_bio_noacct_nocheck+0x2f4/0xa70
[  165.354367][ T5828]        block_read_full_folio+0x599/0x830
[  165.360175][ T5828]        filemap_read_folio+0x137/0x3b0
[  165.365714][ T5828]        do_read_cache_folio+0x358/0x590
[  165.371342][ T5828]        read_part_sector+0xb6/0x2b0
[  165.376646][ T5828]        adfspart_check_ICS+0xa5/0xa40
[  165.382189][ T5828]        bdev_disk_changed+0x7ba/0x1550
[  165.387814][ T5828]        blkdev_get_whole+0x380/0x510
[  165.393183][ T5828]        bdev_open+0x31e/0xd30
[  165.397941][ T5828]        blkdev_open+0x470/0x610
[  165.402883][ T5828]        do_dentry_open+0x785/0x14e0
[  165.408262][ T5828]        vfs_open+0x3b/0x340
[  165.412852][ T5828]        path_openat+0x2e08/0x3860
[  165.417982][ T5828]        do_file_open+0x23e/0x4a0
[  165.423290][ T5828]        do_sys_openat2+0x113/0x200
[  165.428586][ T5828]        __x64_sys_openat+0x138/0x170
[  165.434396][ T5828]        do_syscall_64+0x14d/0xf80
[  165.439610][ T5828]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.446020][ T5828] 
[  165.446020][ T5828] other info that might help us debug this:
[  165.446020][ T5828] 
[  165.456418][ T5828] Chain exists of:
[  165.456418][ T5828]   &nsock->tx_lock --> set->srcu --> &cmd->lock
[  165.456418][ T5828] 
[  165.468507][ T5828]  Possible unsafe locking scenario:
[  165.468507][ T5828] 
[  165.475967][ T5828]        CPU0                    CPU1
[  165.481423][ T5828]        ----                    ----
[  165.486770][ T5828]   lock(&cmd->lock);
[  165.490746][ T5828]                                lock(set->srcu);
[  165.497257][ T5828]                                lock(&cmd->lock);
[  165.503778][ T5828]   lock(&nsock->tx_lock);
[  165.508198][ T5828] 
[  165.508198][ T5828]  *** DEADLOCK ***
[  165.508198][ T5828] 
[  165.516325][ T5828] 3 locks held by udevd/5828:
[  165.520990][ T5828]  #0: ffff888026592358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  165.530263][ T5828]  #1: ffff8880264fd518 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0
[  165.539763][ T5828]  #2: ffff888031768180 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100
[  165.548765][ T5828] 
[  165.548765][ T5828] stack backtrace:
[  165.554642][ T5828] CPU: 0 UID: 0 PID: 5828 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) 
[  165.554667][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  165.554681][ T5828] Call Trace:
[  165.554690][ T5828]  <TASK>
[  165.554699][ T5828]  dump_stack_lvl+0xe8/0x150
[  165.554732][ T5828]  print_circular_bug+0x2e1/0x300
[  165.554772][ T5828]  check_noncircular+0x12e/0x150
[  165.554811][ T5828]  __lock_acquire+0x15a5/0x2cf0
[  165.554844][ T5828]  ? irqentry_exit+0x59e/0x620
[  165.554875][ T5828]  ? lockdep_hardirqs_on+0x7a/0x110
[  165.554905][ T5828]  ? __pfx___schedule+0x10/0x10
[  165.554931][ T5828]  ? srso_alias_return_thunk+0x5/0xfbef5
[  165.554966][ T5828]  lock_acquire+0xf0/0x2e0
[  165.554994][ T5828]  ? nbd_queue_rq+0x37b/0x1100
[  165.555023][ T5828]  ? srso_alias_return_thunk+0x5/0xfbef5
[  165.555060][ T5828]  __mutex_lock+0x19f/0x1300
[  165.555091][ T5828]  ? nbd_queue_rq+0x37b/0x1100
[  165.555120][ T5828]  ? srso_alias_return_thunk+0x5/0xfbef5
[  165.555146][ T5828]  ? is_bpf_text_address+0x292/0x2b0
[  165.555171][ T5828]  ? is_bpf_text_address+0x26/0x2b0
[  165.555196][ T5828]  ? kernel_text_address+0xa5/0xe0
[  165.555222][ T5828]  ? nbd_queue_rq+0x37b/0x1100
[  165.555249][ T5828]  ? __kernel_text_address+0xd/0x30
[  165.555272][ T5828]  ? srso_alias_return_thunk+0x5/0xfbef5
[  165.555298][ T5828]  ? unwind_get_return_address+0x4d/0x90
[  165.555336][ T5828]  ? __pfx___mutex_lock+0x10/0x10
[  165.555373][ T5828]  ? srso_alias_return_thunk+0x5/0xfbef5
[  165.555400][ T5828]  ? srso_alias_return_thunk+0x5/0xfbef5
[  165.555430][ T5828]  nbd_queue_rq+0x37b/0x1100
[  165.555457][ T5828]  ? srso_alias_return_thunk+0x5/0xfbef5
[  165.555486][ T5828]  ? add_lock_to_list+0xc7/0x100
[  165.555521][ T5828]  ? srso_alias_return_thunk+0x5/0xfbef5
[  165.555549][ T5828]  ? __pfx_nbd_queue_rq+0x10/0x10
[  165.555578][ T5828]  ? irqentry_exit+0x59e/0x620
[  165.555607][ T5828]  ? srso_alias_return_thunk+0x5/0xfbef5
[  165.555633][ T5828]  ? lockdep_hardirqs_on+0x7a/0x110
[  165.555663][ T5828]  ? srso_alias_return_thunk+0x5/0xfbef5
[  165.555689][ T5828]  ? irqentry_exit+0x59e/0x620
[  165.555718][ T5828]  ? srso_alias_return_thunk+0x5/0xfbef5
[  165.555749][ T5828]  blk_mq_dispatch_rq_list+0xa70/0x1910
[  165.555779][ T5828]  ? srso_alias_return_thunk+0x5/0xfbef5
[  165.555814][ T5828]  ? sbitmap_get+0x229/0x390
[  165.555842][ T5828]  ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10
[  165.555872][ T5828]  ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0
[  165.555904][ T5828]  __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  165.555947][ T5828]  ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10
[  165.555985][ T5828]  ? srso_alias_return_thunk+0x5/0xfbef5
[  165.556013][ T5828]  ? srso_alias_return_thunk+0x5/0xfbef5
[  165.556043][ T5828]  blk_mq_sched_dispatch_requests+0xd7/0x190
[  165.556080][ T5828]  ? blk_mq_run_hw_queue+0x31f/0x4f0
[  165.556106][ T5828]  blk_mq_run_hw_queue+0x348/0x4f0
[  165.556133][ T5828]  blk_mq_dispatch_list+0xd16/0xe10
[  165.556163][ T5828]  ? srso_alias_return_thunk+0x5/0xfbef5
[  165.556189][ T5828]  ? bdev_count_inflight+0x1cf/0x210
[  165.556224][ T5828]  ? blk_mq_dispatch_list+0x200/0xe10
[  165.556258][ T5828]  ? __pfx_blk_mq_dispatch_list+0x10/0x10
[  165.556288][ T5828]  ? srso_alias_return_thunk+0x5/0xfbef5
[  165.556316][ T5828]  ? srso_alias_return_thunk+0x5/0xfbef5
[  165.556342][ T5828]  ? rcu_is_watching+0x15/0xb0
[  165.556377][ T5828]  blk_mq_flush_plug_list+0x48d/0x570
[  165.556407][ T5828]  ? srso_alias_return_thunk+0x5/0xfbef5
[  165.556433][ T5828]  ? blk_add_rq_to_plug+0x300/0x450
[  165.556462][ T5828]  ? blk_mq_submit_bio+0xef8/0x2810
[  165.556492][ T5828]  ? __pfx_blk_mq_flush_plug_list+0x10/0x10
[  165.556528][ T5828]  __blk_flush_plug+0x3ed/0x4d0
[  165.556561][ T5828]  ? __pfx___blk_flush_plug+0x10/0x10
[  165.556597][ T5828]  __submit_bio+0x28d/0x580
[  165.556630][ T5828]  ? __pfx___submit_bio+0x10/0x10
[  165.556663][ T5828]  ? srso_alias_return_thunk+0x5/0xfbef5
[  165.556690][ T5828]  ? bio_associate_blkg+0x6d/0x230
[  165.556726][ T5828]  submit_bio_noacct_nocheck+0x2f4/0xa70
[  165.556755][ T5828]  ? srso_alias_return_thunk+0x5/0xfbef5
[  165.556784][ T5828]  ? __pfx_submit_bio_noacct_nocheck+0x10/0x10
[  165.556813][ T5828]  ? bio_alloc_bioset+0xbe2/0x11b0
[  165.556850][ T5828]  ? srso_alias_return_thunk+0x5/0xfbef5
[  165.556885][ T5828]  block_read_full_folio+0x599/0x830
[  165.556918][ T5828]  ? __pfx_blkdev_get_block+0x10/0x10
[  165.556953][ T5828]  filemap_read_folio+0x137/0x3b0
[  165.556981][ T5828]  ? srso_alias_return_thunk+0x5/0xfbef5
[  165.557008][ T5828]  ? __pfx_blkdev_read_folio+0x10/0x10
[  165.557040][ T5828]  ? __pfx_filemap_read_folio+0x10/0x10
[  165.557071][ T5828]  ? srso_alias_return_thunk+0x5/0xfbef5
[  165.557098][ T5828]  ? filemap_add_folio+0x356/0x530
[  165.557123][ T5828]  do_read_cache_folio+0x358/0x590
[  165.557153][ T5828]  ? __pfx_blkdev_read_folio+0x10/0x10
[  165.557187][ T5828]  read_part_sector+0xb6/0x2b0
[  165.557217][ T5828]  adfspart_check_ICS+0xa5/0xa40
[  165.557247][ T5828]  ? srso_alias_return_thunk+0x5/0xfbef5
[  165.557274][ T5828]  ? snprintf+0xe8/0x140
[  165.557295][ T5828]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  165.557324][ T5828]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  165.557355][ T5828]  ? srso_alias_return_thunk+0x5/0xfbef5
[  165.557387][ T5828]  bdev_disk_changed+0x7ba/0x1550
[  165.557420][ T5828]  ? bdev_open+0xe0/0xd30
[  165.557452][ T5828]  ? __pfx_bdev_disk_changed+0x10/0x10
[  165.557488][ T5828]  blkdev_get_whole+0x380/0x510
[  165.557522][ T5828]  bdev_open+0x31e/0xd30
[  165.557555][ T5828]  blkdev_open+0x470/0x610
[  165.557590][ T5828]  ? __pfx_blkdev_open+0x10/0x10
[  165.557620][ T5828]  do_dentry_open+0x785/0x14e0
[  165.557662][ T5828]  vfs_open+0x3b/0x340
[  165.557692][ T5828]  ? path_openat+0x2df0/0x3860
[  165.557719][ T5828]  path_openat+0x2e08/0x3860
[  165.557751][ T5828]  ? srso_alias_return_thunk+0x5/0xfbef5
[  165.557779][ T5828]  ? __pfx_stack_trace_save+0x10/0x10
[  165.557805][ T5828]  ? stack_depot_save_flags+0x33/0x810
[  165.557847][ T5828]  ? __pfx_path_openat+0x10/0x10
[  165.557884][ T5828]  ? __x64_sys_openat+0x138/0x170
[  165.557918][ T5828]  ? do_syscall_64+0x14d/0xf80
[  165.557948][ T5828]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.557975][ T5828]  ? srso_alias_return_thunk+0x5/0xfbef5
[  165.558001][ T5828]  ? __lock_acquire+0x6b5/0x2cf0
[  165.558034][ T5828]  do_file_open+0x23e/0x4a0
[  165.558068][ T5828]  ? __pfx_do_file_open+0x10/0x10
[  165.558105][ T5828]  ? _raw_spin_unlock+0x28/0x50
[  165.558130][ T5828]  ? srso_alias_return_thunk+0x5/0xfbef5
[  165.558156][ T5828]  ? alloc_fd+0x64b/0x6c0
[  165.558196][ T5828]  do_sys_openat2+0x113/0x200
[  165.558230][ T5828]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  165.558263][ T5828]  ? __pfx_do_sys_openat2+0x10/0x10
[  165.558301][ T5828]  ? rcu_is_watching+0x15/0xb0
[  165.558336][ T5828]  __x64_sys_openat+0x138/0x170
[  165.558373][ T5828]  do_syscall_64+0x14d/0xf80
[  165.558404][ T5828]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.558429][ T5828]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.558451][ T5828] RIP: 0033:0x7f92420a7407
[  165.558471][ T5828] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  165.558490][ T5828] RSP: 002b:00007ffdeb4ca690 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  165.558513][ T5828] RAX: ffffffffffffffda RBX: 00007f9242888880 RCX: 00007f92420a7407
[  165.558529][ T5828] RDX: 00000000000a0800 RSI: 000055e2457d9570 RDI: ffffffffffffff9c
[  165.558545][ T5828] RBP: 000055e2457d8910 R08: 0000000000000000 R09: 0000000000000000
[  165.558560][ T5828] R10: 0000000000000000 R11: 0000000000000202 R12: 000055e245a0b1b0
[  165.558574][ T5828] R13: 000055e2457e6190 R14: 0000000000000000 R15: 000055e245a0b1b0
[  165.558599][ T5828]  </TASK>
[  166.295681][ T5828] block nbd0: Dead connection, failed to find a fallback
[  166.302736][ T5828] block nbd0: shutting down sockets
[  166.308047][ T5828] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  166.318490][ T5828] Buffer I/O error on dev nbd0, logical block 0, async page read
[  166.330401][ T7627] loop6: detected capacity change from 0 to 2048
[  166.370245][ T7612] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  166.386699][ T5828] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  166.399186][ T5828] Buffer I/O error on dev nbd0, logical block 1, async page read
[  166.407395][ T5828] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  166.421365][ T5828] Buffer I/O error on dev nbd0, logical block 2, async page read
[  166.429555][ T5828] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  166.439109][ T7629] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  166.451346][ T5828] Buffer I/O error on dev nbd0, logical block 3, async page read
[  166.459004][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.459522][ T5828] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  166.478435][ T5828] Buffer I/O error on dev nbd0, logical block 0, async page read
[  166.486570][ T5828] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  166.496965][ T5828] Buffer I/O error on dev nbd0, logical block 1, async page read
[  166.505139][ T5828] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  166.514892][ T5828] Buffer I/O error on dev nbd0, logical block 2, async page read
[  166.522707][ T5828] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  166.532658][ T5828] Buffer I/O error on dev nbd0, logical block 3, async page read
[  166.540571][ T5828] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  166.548265][ T7627] NILFS (loop6): error -2 truncating bmap (ino=16)
[  166.550453][ T5828] Buffer I/O error on dev nbd0, logical block 0, async page read
[  166.564853][ T5828] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  166.574988][ T5828] Buffer I/O error on dev nbd0, logical block 1, async page read
[  166.583701][ T5828] ldm_validate_partition_table(): Disk read failed.
[  166.590868][ T5828] Dev nbd0: unable to read RDB block 0
[  166.595587][ T5824] ocfs2: Unmounting device (7,2) on (node local)
[  166.597576][ T5828]  nbd0: unable to read partition table
[  166.612050][ T5828] ldm_validate_partition_table(): Disk read failed.
[  166.619216][ T5828] Dev nbd0: unable to read RDB block 0
[  166.625450][ T5828]  nbd0: unable to read partition table
[  166.656066][ T7612] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  166.675648][ T7612] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  167.322729][ T6000] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9
[  167.335389][ T6000] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71
[  167.346886][ T6000] usb 4-1: USB disconnect, device number 5