last executing test programs:

1m17.174860444s ago: executing program 2 (id=161):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10)
syz_emit_ethernet(0x14, &(0x7f0000000240)={@broadcast, @random="65be51131fef", @val={@void, {0x8100, 0x4}}, {@generic={0x8906, "f80e"}}}, 0x0)

1m16.930249921s ago: executing program 2 (id=163):
mkdir(&(0x7f0000000000)='./file0\x00', 0xb4)
syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000180)=@known='trusted.syz\x00')

1m16.61364759s ago: executing program 2 (id=164):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002b80)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0, 0x0, 0x5}, 0x18)
prctl$PR_GET_TSC(0x43, &(0x7f0000000080))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0xd)

1m15.511250694s ago: executing program 2 (id=167):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000001, &(0x7f0000000180)={[{@resuid}, {@init_itable}, {@stripe={'stripe', 0x3d, 0xd40}}, {@noblock_validity}]}, 0x7, 0x453, &(0x7f00000009c0)="$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")
syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000380)='./file0\x00', 0x10e, &(0x7f0000000140)={[{@inlinecrypt}, {@nodelalloc}, {@jqfmt_vfsold}, {@bh}, {@block_validity}, {@quota}]}, 0x3, 0x460, &(0x7f0000001380)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20, &(0x7f0000000140)='usrjquota=')

1m14.980477293s ago: executing program 2 (id=170):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket(0x200000000000011, 0x4000000000080002, 0x0)
setreuid(0xee01, 0xee01)
fcntl$F_SET_RW_HINT(r0, 0x40c, 0x0)

1m14.485171276s ago: executing program 2 (id=172):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x1802, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0))
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

1m14.070927233s ago: executing program 32 (id=172):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x1802, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0))
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

51.652353006s ago: executing program 0 (id=400):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x1, &(0x7f0000000080)=ANY=[@ANYRES16=0x0], 0x0, 0x5f9, &(0x7f0000000740)="$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")
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000700)='./file0\x00', 0x928060, &(0x7f00000007c0)=ANY=[], 0x1, 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

51.14378469s ago: executing program 0 (id=403):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r1=>0x0})
setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000180), 0x4)
sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000480)={&(0x7f0000000140)=@can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x2004c891)

50.970310705s ago: executing program 0 (id=404):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @local}}}, 0x108)
setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000000)={0x2, {{0x2, 0x4e26, @multicast2}}, {{0x2, 0x2, @local}}}, 0x108)

50.75872103s ago: executing program 0 (id=406):
syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x1010006, &(0x7f0000000480)={[{@quota}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {}, {@nodiscard}, {@noquota}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}]}, 0x24, 0x61b6, &(0x7f00000075c0)="$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")
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000240)='./file0\x00')

49.290004665s ago: executing program 0 (id=417):
syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000180)='./bus\x00', 0x14018, &(0x7f00000009c0)={[{@barrier}, {@force}, {@umask={'umask', 0x3d, 0x99}}, {@uid}, {@nodecompose}, {@gid}, {@nls={'nls', 0x3d, 'iso8859-3'}}, {@uid}, {@umask={'umask', 0x3d, 0x200}}]}, 0xb, 0x6c4, &(0x7f00000002c0)="$eJzs3UtsXFcdB+DfHY9fQWqdNmkBVSJtpIKISPxQCmGTgBDyoqoqsWDBykqcxsokrWwX3ArR8N52UfZlkR0rJFZsgsoOCZYsDatKiG5YZWd0H2NPMp5kJok9sfp90Z177j2Pe85/7nOs6Ab43Fo+k/adFFk+8/pWubx9e6mzfXtpusnuJCnTraRdz1LcTIpPkkupp3ypXNmULwZt56Oy+v+2P00yW7fV7pYvG/3z3954uaf0BzujjeJWM+VUkolm3m+yf9XMw9u7PLC92nRPev/xF7s5ZcBOdwMH47bT59Yo1Qce78DRUdTXzT5zybHmMlld55qzQ+twe/fkjXSWAwAAgDFb/u/JxVHKzzbzZ+/mbraO/GM8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHKrm/f9FM7W66VMpuu//n2rWpUkfaXfG3QEAAAAAAAAAGMJ0N3Fx//yv3M3dbOWZ7vJOUf3N/5Vq4UT1+YW8m42sZj1ns5WVbGYz61lIMtfT0NTWyubm+sIQNRf3rbn4ZMcNAAAAAAAAAJ8zv8jy3t//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgaVAkE/Wsmk5003NptZPMJJkqy91K/tFNHxHFfivvHH4/AAAA4LHMPEKdqeRutvJMd3mnqJ75X6iel2fybm5mM2vZTCerudI8Q5dP/a3t20ud7dtLN8qpt8WdxqjdSCv1bw/7b/mLVYnZXM1ateZsLleduZJWVbP07yQ3un26v1/Jzz8r275Y+8mQPbvSzMuNfdj9FWF6pMEdkLmk3crkbkTmq77VO8Hx3ij0R+I7nw1q9FI9a9+/pfRuaSGt3V9+TtRbKJMPjfnFIUd2rJmX4/nNoF9unrSZvY3eGlhoNxKtVJFY7Nn7XnhwzJOv/ukPHxbFzevXrm6cOZQhHaT794mlnki8OEQkfnit85RGoj180R/9Lsl8FYmTuyuX8/38IGdyKm9mPWv5cVaymdUUzUhXmv25/Jx7cKQu3bP05sO6M9V8L/VZdJg+ncr3qtRKXqnqPpO1FHk7V7Ka16p/i1nIN3M+53Oh5xs+ObDf1diqo75VHvH/St9R39q/86e/1iRmk/y2mY9bfVIo43q8J66959y5Kq93zV6UnquiMz3U9aiK0sOH3P5ykyi38cvB0RyD+yOx0HML8PyD9/PfV0U3Ojevr19beWffq+tkM9+7tXi1WVPucb9++O3PXwasf1K7Wc95rNxfnstMcyY5nsm6axPdvOd3zzL3xKvKO7Gb1+rLO1l/3UX3SH1j4JE61dzD9be0WOW9uG/eUpVX3mm12+m730reTmf3fgiAp9ixrx+bmv3P7N9nP5791ey12ddnvjv9remXpjL518lvt+cnXm29VPwxH+dne8//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAo9t47/3rK53O6vr+idbgrAclum/yGb5W0bxJZ6jCrVH7cxCJnQ+Sp6Ab6xsvJzmAlosD6nM6q+vdlwiOVn2+f4+6NM7I/3PUWpkZacg7z9ZRGmkTc3WdIQpP18GcGHCcNl/Ro7xcFDgSzm3eeOfcxnvvf2Ptxspbq2+t3pw8f/7C/IXzry2du7rWWZ2vP8fdS+Ag7F30x90TAAAAAAAAAAAAYFiH8f8lxj1GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4GhbPpP2nRRZmD87Xy5v317qlFM3vVeynaTVSoqfJsUnyaXUU+Z6misGbeejtQsTST7da6vdLd96QL2d6aFGcauZcirJRDN/DPe0d/mx2yt2R1gG7HQ3cDBu/w8AAP//qP76eQ==")
r0 = fsopen(&(0x7f0000000200)='romfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

48.274756032s ago: executing program 0 (id=421):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r2, @ANYBLOB="0400460005003400fe000000080026008a09000030005180280000800800030005ac0f0011000100436d9bb9c5e13fcd62bca7f88d000000050002"], 0x60}}, 0x40080)

47.653642931s ago: executing program 33 (id=421):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r2, @ANYBLOB="0400460005003400fe000000080026008a09000030005180280000800800030005ac0f0011000100436d9bb9c5e13fcd62bca7f88d000000050002"], 0x60}}, 0x40080)

47.277919951s ago: executing program 4 (id=428):
r0 = socket$kcm(0x10, 0x2, 0x4)
close(r0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006b7d373be35c6e17aa31046b876c1d0000007ea60864160af36508001dc0c3000200340031009ee517d34460bc24eab556a705251e618294ff0051f60a84c9f472736f67c5e73bb9e5c446fa30be62cbd4938037e786", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

47.210688336s ago: executing program 4 (id=430):
r0 = fsopen(&(0x7f0000000240)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x1)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

47.026185212s ago: executing program 4 (id=432):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20100, 0x0)
ioctl$FBIOPAN_DISPLAY(r1, 0x4606, &(0x7f0000000100)={0x356, 0xa0, 0x140, 0x360, 0x100, 0xfffffff2, 0x8, 0x1, {0x7, 0x5, 0x1}, {0x2, 0xfffff800}, {0x2, 0x3, 0x1}, {0xa91b, 0x7}, 0x1, 0x2, 0x9, 0xffffffff, 0x0, 0x4, 0x8, 0xc, 0x40, 0xfffffff7, 0x9580, 0x8, 0x0, 0x100, 0x2, 0x4})

46.866747364s ago: executing program 4 (id=435):
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17f, &(0x7f0000000380)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000040)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40000, 0x0)

46.62536832s ago: executing program 4 (id=436):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0xa08000, &(0x7f0000000240), 0xfe, 0x56b, &(0x7f00000003c0)="$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")
chdir(&(0x7f0000000080)='./file0\x00')
lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000280)=ANY=[], 0xe01, 0x0)
rename(&(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='./file1\x00')

46.002646339s ago: executing program 4 (id=439):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe4059d1ed18e2292, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

45.777694708s ago: executing program 34 (id=439):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe4059d1ed18e2292, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.305013688s ago: executing program 1 (id=825):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
listen(r1, 0xffffffff)

2.106501932s ago: executing program 3 (id=828):
r0 = getegid()
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x2000802, &(0x7f0000000200)=ANY=[@ANYBLOB='iocharset=macceltic,time_offset=0x0000000000000003,gid=', @ANYRESHEX=r0, @ANYBLOB="2c666d61736b3d30303030303000303030263030303030303030303030362c696f636861727365743d63703836332c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030322c6e616d65636173653d312c6572726f72733d72656d6f756e742d726f2c757466382c646d61736b3d3030303030303030303030303030303030303030a930312c00"], 0x1, 0x1537, &(0x7f00000034c0)="$eJzs3AuYTlX7MPD7XmvtMSSeJjkMa6178ySHRZLkkCSHJKkkSU4JSZO8kpAYQpKGJCSHIYkhJIeJSeN8Ph8SkqRJkpxyStZ3Tczn7V/v13voy3v95/5d176se/a+1773c8+zn733mPmu69DaTerUaERE8B/Bi/8kAkAsAAwEgLwAEABAhbgKcZnrc0pM/M92wv5cD6Vc6QrYlcT9z964/9kb9z974/5nb9z/7I37n71x/7M37j9j2dmmaYWu4SX7Lvz8Pzvjz///RTLKjP1qTZnrugHE/LMp3P/sjfv/v1bwz2zE/c/euP/ZVeyVLoD9F+D3f3aQ4x+u4f5nb9x/xrKzK/38+UovEPkvew2O5LzYmL/q+BljjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsb/AGX+ZAoCs8ZWuizHGGGOMMcYYY38en+NKV8AYY4wxxhhjjLH//xAESFAQQAzkgFjICblAAMDVkAfyQgSugTi4FvLBdZAfCkBBKATxUBiKgAYDFghCKArFIArXQ3G4AUpASSgFpcFBGSgLN0I5uAnKw81QAW6BinArVILKUAWqwm1QDW6H6nAH1IA7oSbUgtpQB+6CunA31IN7oD7cCw3gPrgfHoCG8CA0goegMTwMTeARaAqPQjNoDi2gJbT6t/JfgJ7wIvSC3pAIfaAvvAT9oD8MgJdhILwCg+BVGAyvQRIMgaHwOgyDN2A4vAkjYCSMgrdgNLwNY2AsjIPxkAwTYCK8A5PgXZgM78EUmAopMA2mw/swA2bCLPgAZsOHMAfmwjyYD6nwESyAhZAGH8Mi+ATSYTEsgaWwDJbDClgJq2A1rIG1sA7WwwbYCJtgM2yBrbANtsMO+BR2wmewC3bDHvgc9sIX/2L+6f+R3w0BAQUKVKgwBmMwFmMxF+bC3Jgb82AejGAE4zAO82E+zI/5sSAWxHiMxyJYBA0aJCQsikUxilEsjsWxBJbAUlgKHTosi2WxHN6E5bE8VsAKWBErYiWsjJWxKlbFalgNq2N1rIE1sCbWxNpYG+/Cu7AP1sN6WB/rYwNskPV4ChthI2yMjbEJNsGm2BSbYTNsgS2wFbbC1tga22AbbIftsD22xw7YARMwATtiR+yEnbAzdsYu2AW7Ylfsht2xe8YLOQBfxBexN9YUfbAv9sV+mJRjAL6ML+MrOAhfxVfxNUzCITgUX8fX8Q0cjqdwBI7EUTgKq4m3cQyORRLjMRmTcSJOxEk4CTMLfQ+nYgpOw+k4HWfgTJyJH+Bs/BA/xLk4F+djKqbiAlyIaZiGi/A0puNiXIJLcRkux2W4ElfhSlyDa3ENrsf1uBE34mbcjFtxK27H7fgpKgD8DHfjbkzCvbgX9+E+3I/78QAewAzMwIN4EA/hITyMh/EIHsGjeAyP4zE8iSfxFJ7GM3gGz+E5PI/PxX/T+NOSq5NAZFJCiRgRI2JFrMglconcIrfII/KIiIiIOBEn8ol8Ir/ILwqKgiJexIsioogwwggSYQwAiKiIiuKiuCghSohSopRwwomyoqwoJ8qJ8qK8qCBuERXFraKSqCzauqqiqqgm2rnq4g5RQ9QQNUUtUVvUEXVEXVFX1BP1RH1RXzQQDcT94gHRUPTBAfiQyOxMEzEEm4qh2Ew0F/LSGay1GI5tRFvRTjwhRuII7CBauwTxtOgoxmAn8TcxFp8VXcR47CqeF91Ed9FDvCB6ijaul+gtJmMf0VdMxX6ivxggXhYzsJb4AGfnrC1eE0liiBgqXhfz8Q0xXLwpRoiRYpR4S4wWb4sxYqwYJ8aLZDFBTBTviEniXSHEe2KKmCpSxDQxXbwvZoiZYpb4QMwWH4o5Yq6YJ+aLVPGRWCAWijTxsVgkPhHpYrFYIpaKZWK5WCFWilVitVgj1op1Yr3YIDaKTWKz2CJiYZvYLnaIT8VO8ZnYJXaLPeJzsVd8IfaJL8V+8ZU4IL4WGeIbcVB8Kw6J78Rh8b04In4QR8UxcVycECfFj+KUOC3OiLPinPhJnBc/iwvCC5AohZRSyUDGyBwyVuaUueRVMrcMLr2618g4ea3MJ6+T+WUBWVAWkvGysCwitTTSSpKhLCqLyai8XhaXN8gSsqQsJUtLJ8vIsvJGWU7eJMvLm2UFeYusKG+VlWRlWUVWlbfJavJ2CZGL+6gpa8naso68SybC3bKevEfWl/fKBvI+eb98QDaUD8pG8iHZWD4sm8hHZFP5qGwmm8sWsqVsJR+TreXjso1sK9vJJ2R7+aTsIJ+SCfJp2VH6S98iz8ou8jnZVT4vu8nusof8WV6QXvaSvSX0AdlXviT7yf5yQCwAyFfkIPmqHCxfk0lyiBwqX5fD5BtyuHxTjpAj5Sj5lhwt35Zj5Fg5To6XyXKCnCjfkZPku3KyfE9OkVNlipwmB8iBv8w0S8o/zH/nd/IH/7L3jXKT3Cy3yK1ym9wud8hP5U65U+6Su+QeuUfulXvlPrlP7pf75QF5QGbIDHlQHpSH5CF5WB6WR+QReVQek2flCXlS/ihPydPytDwrz8lz8vyl1wAUKqGkUipQMSqHilU5VS51lcqtrlZ5VF4VUdeoOHWtyqeuU/lVAVVQFVLxqrAqorQyyipSoSqqiqmouh4vfcOoUqq0cqqMKqtu/CU/60cMf5CviqsbVAlV8lf5WfUl/oP6WqlWqrVqrdqoNqqdaqfaq/aqg+qgElSC6qg6qk6qk+qsOqsuqovqqrqqbqqb6qF6qJ6qp+qleqlElaj6qpdUP9VfDVAvq4HqFTVIDVKD1WCVpJLUUDVUDVPD1HA1XI1QI9QoNUqNVqPVGDVGjVPjVLJKVhPVRDVJTVKT1WQ1RU1RKSpFTVfT1Qw1Q81Ss9RsNVvNUXPUPDVPpapUtUAtUGkqTS1Si1S6WqwWq6VqqVqulquVaqVarVartWqtWq/Wq3S1SW1SW9QWtU1tUzvUDrVT7VS7xC61R+1Re9VetU/tU/vVfnVAHVAZKkMdVAfVIXVIHVaH1RF1RB1VR9VxdVydVCfVKXVKnVFn1Dl1Tp1X59UFdSHzsi8QgQhUoIKYICaIDWKDXEGuIHeQO8gT5AkiQSSIC+KCfMF1Qf6gQFAwKBTEB4WDIoEOTGADcam30eD6oHhwQ1AiKBmUCkoHLigTlA1uDMoFNwXlg5uDCsEtQcXg1qBSUDmoElQNbguqBbcH1YM7ghrBnUHNoFZQO6gT3BXUDe4O6gX3BPWDe4MGwX3B/cEDQcPgwaBR8FDQOHg4aBI8EjQNHg2aBc2DFkHLoNWfOr/3pwo87nrp3jpR99F99Uu6n+6vB+iX9UD9ih6kX9WD9Ws6SQ/RQ/Xreph+Qw/Xb+oReqQepd/So/Xbeoweq8fp8TpZT9AT9Tt6kn5XT9bv6Sl6qk7R0/R0/b6eoWfqWfoDPVt/qOfouXqenq9T9Ud6gV6o0/THepH+RKfrxXqJXqqX6eV6hV6pV+nVeo1eq9fp9XqD3qg36c16i96qt+nteof+VO/Un+lderfeoz/Xe/UXep/+Uu/XX+kD+mudob/RB/W3+pD+Th/W3+sj+gd9VB/Tx/UJfVL/qE/p0/qMPqvP6Z/0ef2zvqB95sV95se7UUaZGBNjYk2syWVymdwmt8lj8piIiZg4E2fymXwmv8lvCpqCJt7EmyKmiMlEhkxRU9RETdQUN8VNCVPClDKljDPOlDVlTTlTzpQ35U0FU8FUNBVNJVPJVDFVzG3mNnO7ud3cYe4wd5o7TS1Ty9QxdUxdU9fUM/VMfVPfNDANzP3mftPQNDSNTCPT2DQ2TUwT09Q0Nc1MM9PCtDCtTCvT2rQ2bUwb0860M+1Ne9PBdDAJJsF0NB1NJ9PJdDadTRfTxXQ1XU030830MD1MT9PT9DK9TKJJNH1NX9PP9DMDzAAz0Aw0g8wgM9gMNkkmyQw1Q80wM8wMN8PNCDPSjMo8yZm3zRgz1owz402ySTYTzUQzyUwyk81kM8VMMSkmxUw3080MM8PMMrPMbDPbzDFzzDwzz6SaVLPALDBpJs0sMotMukk3S8wSs8wsMyvMCrPKrDJrzBqzDtaZDWaD2WQ2mS1mi9lmtpkdZofZaXaaXWaX2WP2mL1mr9ln9pn9Zr85YA6YDJNhDpqD5pA5ZA6bw+aIOWKOmqPmuDluTpqT5pQ5Zc6YM+acKXDp89KbrJN5bnu1zWPz2lib0+ayV9msuKAtZONtYVvEapvfFvhVbKy1JWxJW8qWts6WsWXtjb+JK9nKtoqtam+z1ezttvpv4rr2blvP3mPr23ttHXvXr+IG9j6beXXSEBHANreNbUvbxD5im9pHbTPb3LawLW17+6TtYJ+yCfZp29E+85t4gV1oV9nVdo1da3fZ3faMPWsP2e/sOfuT7WV724H2FTvIvmoH29dskh3ym3iUfcuOtm/bMXasHWfH/yaeYqfaFDvNTrfv2xl25m/iVPuRnW3T7Bw7186z83+JM2tKsx/bRfYTm24DWGKX2mV2uV1hV2bV6vPa9XaD3Wh32s/sFrvVbrPb7Y6sC2G72+6xn9u99gt70H5r99uv7AF72GbYb36JM4/vsP3eHrE/2KP2mD1uT9iT9keVlZ157Cfsz/aC9RYICUiSooBiKAfFUk7KRVdRbrqa8lBeitA1FEfXUj66jvJTASpIhSieClMR0mTIElFIRakYRel6yiqvFJUmR2WoLN1I5egmKk83UwW6hSrSrVSJKlMVqkq3UTW6narTHVSD7qSaVItqUx26i+rS3VSP7qH6dC81oPvofnqAGtKD1Igeosb0MDWhR6gpPUrNqDm1oJbUih6j1vQ4taG21I6eoPb0JHWgpyiBnqaO9Ax1or9RZ3qWutBz1JWep27UnXrQC9STXqRe1JsSqQ/1pZeoH/WnAfQyDaRXaBC9SoPpNUqiITSUXqdh9AYNpzdpBI2kUfQWjaa3aQyNpXE0npJpAk2kd2gSvUuT6T2aQlMphabRdHqfZtBMmkUf0Gz6kObQXJpH8ymVPqIFtJDS6GNaRJ9QOi2mJbSUltFyWkEraRWtpjW0ltbRetpAG2kTbaYttJW20XbaQZ/STvqMdtFu2kOf0176gpC+pP30FR2grymDvqGD9C0dou/oMH3ve9MPdJSO0XE6QSfpRzpFp+kMnaVz9BOdp5/pAnmCEEMRylCFQRgT5ghjw5xhrvCqMHd4dZgnzBtGwmvCuPDaMF94XZg/LBAWDAuF8WHhsEioQxPakMIwLBoWC6Ph9WHx8IawRFgyLBWWDl1YJiwb3hiWC28Ky4c3hxXCW8KK4a1hpbBy+Mi9VcPbwmrh7WH18I6wRnhnWDOsFdYO64R3hXXDu8N64T1h/fDesHx4X3h/+EDYMHwwbBQ+FDYOHw6bhI+ETcNHw2Zh87BF2DJsFT4Wtg4fD9uEbcN24RNh+/DJsEP4VJgQPh12DJ/5Zf19C//x+sSwT9g3fCl8KfT+HjkvOj+aGv0ouiC6MJoW/Ti6KPpJND26OLokujS6LLo8uiK6Mroqujq6Jro2ui66ProhujHqfZ0c4NAJJ51ygYtxOVysy+lyuatcbne1y+Pyuoi7xsW5a10+d53L7wq4gq6Qi3eFXRGnnXHWkQtdUVfMRd31rri7wZVwJV0pV9o5V8aVdS1dK9fKtXaPuzaurWvnnnBPuCfdk+4p95R72nV0z7hO7m+us3vWdXHPuefc866b6+56uBdcTzchz8X3ZKLr63yOfq6fG+AGuIFuoBvkBrnBbrBLckluqBvqhrlhbrgb7ka4EW6UG+VGu9FujBvjxrlxLtklu4luopvkJrnJbrKb4qa4FJfiprvpboab4arNvLiXOW6Om+fmuVSX6ha4zGvGNLfILXLpLt0tcUvcMrfMrXAr3Cq3yq1xa9w6t85tcBvcJrfJbXFb3Da3ze1wO9xOt9Pt8nkvTur2un1un9vv9rsD7muX4b5xB9237pD7zh1237sj7gd31B1zx90Jd9L96E650+6MO+vOuZ/cefezu+C8S45MiEyMvBOZFHk3MjnyXmRKZGokJTItMj3yfmRGZGZkVuSDyOzIh5E5kbmReZH5kdTIR5EFkYWRtMjHkUWRTyLpkcWRJZGlkWWR5RHvC28JfVFfzEf99b64v8GX8CV9KV/aO1/Gl/U3+nL+Jl/e3+wr+Ft8RX+rr+Qr+yr+Ud/MN/ctfEvfyj/mW/vHfRvf1rfzT/j2/knfwT/lE/zTvqN/xnfyf/Od/bO+i3/Od/XP+26+u+/hX/A9/Yu+l+/tE30f39e/5Pv5/n6Af9kP9K/4Qf5VP9i/5pP8ED/Uv+6H+Tf8cP+mH+FH+lExb/nRWbfIMN4n+wl+on/HT/Lv+sn+PT/FT/Upfpqf7t/3M/xMP8t/4Gf7D/0cP9fP8/N9qv/IL/ALfZr/2C/yn/h0vzjrobJf4Vf6VX61X+PX+nV+vd/gN/pNfrPf4rf6bX673+E/9Tv9Z36X3+33+M/9Xv+F3+e/9Pv9V/6A/9pn+G/8Qf+tP+S/84f99/6I/8Ef9cf8cX/Cn/Q/+lP+tD/jz/pz/id/3v/sL/DvrDHGGGOM/VMmXB6KX6+5+ASoz+/kiL/buC8AXL21UMbfr8+8olyX/+K4v4hvHwGAp3t3fShrqVkzMTHx0rbpEoJicwGyfhKUKQYux4uhHTwJCdAWyv1u/f1F93P0B/NHbwHI9Xc5sXA5vjz/lwCY+DvzP/bEqAUVwzNx/4/55wKUKHY5JydcjhdDu1+er7SF8v+g/gKt/6D+nF8lA7T5u5zccDm+XH9ZeByegYRfbckYY4wxxhhjjF3UX1TpnHX/mfU/Pn/v/jxeXc7JAZfjP7o/Z4wxxhhjjDHG2JX3bPceTz2WkNC2878+qP7H26jLX8n9r+6iKfy7hfHg3xp4D/B/GwcA/+GEAJkD+Vcexea/ZF9Jl946/3PVsrM+gP+OVv4Zgyt8YmKMMcYYY4z96S5f9P/66+pKFcQYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjGVD/+nfeIN/4q/0XeljZIwxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxq60/xMAAP//U5H4Pg==")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000000540)=""/239, 0xef)

2.048505681s ago: executing program 5 (id=829):
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0)
fallocate(r0, 0x0, 0x0, 0x1001f0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)

1.878817841s ago: executing program 7 (id=831):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(r0, 0x560b, 0x0)

1.777887577s ago: executing program 5 (id=833):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

1.761477991s ago: executing program 7 (id=834):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x54, r1, 0x101, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random="c4"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x24, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "3b9f558ca8"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xd0}, 0x0)

1.562343635s ago: executing program 7 (id=836):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

1.53544144s ago: executing program 3 (id=837):
r0 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c)
unshare(0x8040480)
pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0xb08, 0x0, 0x1, 0x0, 0x0, 0x70ef}, 0x0, &(0x7f0000000040)={0xb, 0xffffffffffffffff, 0x3}, 0x0, 0x0)

1.501058213s ago: executing program 5 (id=838):
syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x278, &(0x7f0000000200)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
write$FUSE_WRITE(r0, &(0x7f00000000c0)={0x18}, 0xfffffdef)
truncate(&(0x7f0000000000)='./file1\x00', 0x5e00)

1.418484533s ago: executing program 7 (id=839):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='i2c_read\x00', r0}, 0x18)
r1 = syz_open_dev$I2C(&(0x7f0000000800), 0x0, 0x0)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000002c0)={&(0x7f0000000240)=[{0xfffc, 0x11, 0x0, 0x0}, {0x8, 0x2000, 0x0, 0x0}, {0x800, 0x1000, 0x0, 0x0}], 0x3})

1.3627185s ago: executing program 6 (id=840):
syz_mount_image$exfat(&(0x7f0000000700), &(0x7f0000000640)='./file0\x00', 0x810000, &(0x7f0000000280)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d69736f383835392d312c646d61736b3d30303030303030303030303033373737373737373737372c696f636861727365743d6b6f69382d72752c696f636861727365743d63703433372c6e616d65636173653d312c6e616d65636173653d312c009a8d4d9016e3d8128333e260a1b926dd0c5f7619710e03ea1ae6521494f87e5737dc0c5bec3f76668140a15258818b6fbc51f9a13940e63c378688559c351287f0e09ef0b7330db20eef797e5004484649e7f5fb64b746683a75b9ed822f5ae34fac"], 0x1, 0x1501, &(0x7f0000002a80)="$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")
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
mknod$loop(&(0x7f0000000000)='./file1\x00', 0x0, 0x1)

1.334736318s ago: executing program 5 (id=841):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x2000004c, &(0x7f0000002c00)=ANY=[], 0x7e, 0x1540, &(0x7f0000000180)="$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")
chdir(&(0x7f0000000000)='./file0\x00')
r0 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0)
write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e)

1.243063719s ago: executing program 7 (id=842):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000340)='sys_enter\x00', r1}, 0x18)
keyctl$restrict_keyring(0x4, 0xfffffffffffffffc, 0x0, 0x0)

1.090765551s ago: executing program 6 (id=843):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x11, &(0x7f0000000780)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@noinit_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@noblock_validity}, {@noload}, {@data_writeback}]}, 0x1, 0x631, &(0x7f0000001940)="$eJzs3c1vVFUbAPDn3k6/3/edQt6ouJBGYyBRWlrAEGMC3bgiBD92riotBBkooTVaJLFNcGNi3LgwceVC/C+UxK0Lty7cuDIkxBgWYlDG3Jk7ZTrt9Hs6pf39kmnvmTNzzrlNnzlnzpxzJ4A9azD7kUYciIhrSUSxLq8QeeZg9XH3/7h5PrslUS6/9XsSNz9O5urLSvLf/fmT/ylG8lMasb9jab3Tszcuj5dKk9fz9PDMlWvD07M3jly6Mn5x8uLk1dFXRk+eOH7i5MjRTZ1fXvXf2Y8zt977oPjp2Xe++ephMvLtL2eTOB2P8gdk59X43O5N1Zz9zQajXPVgUUYacXKTZe8UfxZr/ycV3dk/RFJoZ4tYjzQiTkVEZ0Q8HcXoiMfBWoxP3mhr44CWKidR6aMGy8Dek0TTrEs9+YvEUj0tbROwHWrjgNp7++XeBy+VtnJIAmyTe2PVubpq7HdGRC3+C9W5weipzA303U/q53kqc32bm5mryur48Yezt7JbNJmHA1pjbr42y93Y/yeV2ByI6nuAvvvpovgfy0cBaf45wZuNBa9x8nywIS3+YfvMzUfEM3n/3xVrjv80j91a/L+7wfrFPwAAAAAAAGydO2MR8fJy6//ShfU/Xcus/+mPiNNbUP/qn/+ld/ODZAuqA+rcG4t4bdn1vwtrfAc68tR/K+sBOpMLl0qTRyPifxFxODq7s/RIQ7n1K4SPfLb/y2b116//y25Z/bW1gHlJdwsNa4kmxmfGN3veQMS9+YhnK+t/D+b3LF7/k/X/yTL9fxbf19ZYx/4Xb59rlrd6/AOtUv464tCy/f/j4Xay8vU5hivjgeHaqGCp5z76/Ltm9Yt/aJ+s/+9bOf67k/rr9Uyvr/yuiDg2Wyg3y9/o+L8rebujVn7mw/GZmesjEV3JmaX3j66vzbBb1eKhFi9Z/B9+YeX5v4Xxf10c9kbE3BrrfOpR/6/N8vT/0D5Z/E+s3P8XF/f/6z8YvT3wfbP6z62p/z9e6dMP5/eY/4N6S6/HsdYAbUtzAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAJl0bEfyJJhxaO03RoKKI/Iv4ffWlpanrmpQtT71+dyPIq3/+f1r7pt1hNJ7Xv/x+oS482pI9FxL6I+KKjt5IeOj9Vmmj3yQMAAAAAAAAAAAAAAAAAAMAO0V/Z81/ubtz/n/mto92tA1qukP8W77D3FDb8zHL3ljYE2HYbj3/gSTa/rvjvbGlbgO3XPP4fPCxXNNz9+vMtbxOwPYz/Ye/aYPz7uAB2Af0/7FVrnNPraXU7gHbQ/wMAAAAAwK6y7+Cdn5OImHu1t3LLdOV5vW1tGdBqabsbALSNNbywdxWm2t0CoF1s6AeShaO/Gjf7VzRf/Z+0pkEAAAAAAAAAAAAAwBKHDjTf/29vAOxuK+//t7YfdrMV9v8vF/wuFwC7SPOv/tD3w27nPT6wWm9v/z8AAAAAAAAAAAAA7AA9Ny6Pl0qT16dnn7yDUzujGes7mBvfXDnl7p1wFosPHrWm5M6I2BknuAUHWbCVSpPlcsTqD65dgqONbW7vyxIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDYvwEAAP//9HcgKQ==")
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020)
rename(0x0, 0x0)

1.063241745s ago: executing program 7 (id=844):
openat$iommufd(0xffffffffffffff9c, 0x0, 0x5c000, 0x0)
syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000003c0), 0xfd, 0x985a, &(0x7f0000009740)="$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")
r0 = open(&(0x7f0000000480)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000100)=ANY=[@ANYBLOB="000000004c900200020000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000084"])

1.048252249s ago: executing program 5 (id=845):
r0 = syz_open_procfs(0x0, &(0x7f0000003380)='net/route\x00')
read$char_usb(r0, &(0x7f0000000040)=""/4122, 0x101a)
preadv(r0, &(0x7f0000002240)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1, 0x29d3, 0x6)
read$char_usb(r0, &(0x7f0000001080)=""/147, 0x93)

1.034675558s ago: executing program 1 (id=846):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003800)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="83cb", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)='_D=', 0x3}, {&(0x7f00000002c0)="917220ca198bac8e6e8d262af4f79fe4af6890137cbee6d7df8d86dc0bc21562f2", 0x21}, {&(0x7f0000000380)="b141bffd3a0537bc82b58cafd6dcaac7ca098c4db6d09f7e1e2371fe24884fb09d", 0x21}], 0x3}}], 0x2, 0x4000c000)
sendto$inet6(r0, &(0x7f00000001c0)="c346", 0x2, 0x0, 0x0, 0x0)

928.965236ms ago: executing program 1 (id=847):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd26, 0x25dfdbfe, {0x60, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x9, 0xa}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x120000, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4002001}, 0x3000c81c)

880.895209ms ago: executing program 5 (id=848):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x10008d0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x4440, &(0x7f00000088c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118)
lseek(r0, 0x81, 0x3)

630.697499ms ago: executing program 1 (id=849):
r0 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x18, r1, 0xe7d02281b1d40d47, 0x0, 0x0, {0x81, 0x0, 0x300}, [@ETHTOOL_A_WOL_HEADER={0x4}]}, 0x18}}, 0x0)

590.701188ms ago: executing program 3 (id=850):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000100)={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xfffe, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "d9487b6f309fd54fd8331e225f5421c23d710eab780bb8916ea853e07d7f64d2", "487fbcc007793601d105c58277df5191d066c4d90598a7606a57df19f7a05acec6fc1ab9a3d19e0464eada8f80ffcaab", "47510ac65297662270e0606a8444e26b8c4c3520ae502a5614aafc44", {"663938a4773cfc3a4b2a56e81d3ef6ab", "a23fc3a2f05e08e7ea8d5c22e5a6aae0"}}}}}}}, 0x0)

566.397874ms ago: executing program 6 (id=851):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)

434.831181ms ago: executing program 1 (id=852):
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='fdinfo\x00')
fchdir(r0)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x50009404, &(0x7f00000004c0)={0x0, 0x0, 0x3a})

407.465892ms ago: executing program 3 (id=853):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)

361.453563ms ago: executing program 6 (id=854):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94)
r0 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x40045702, &(0x7f0000000000))
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000140)={0x1, 0xfd, 0x0, 0x1, 0x4})

234.7529ms ago: executing program 1 (id=855):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000340))

214.611724ms ago: executing program 3 (id=856):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}, @NL80211_TXRATE_HT={0x4}]}]}]}, 0x30}}, 0x0)

166.60784ms ago: executing program 6 (id=857):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x2404c000}, 0x0)

58.682283ms ago: executing program 6 (id=858):
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x100, 0xffffffff, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0x3}, {0x0, 0xfff2}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20044804)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e00090000000000000800000300000004"], 0x34}}, 0x84)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil})

0s ago: executing program 3 (id=859):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x28, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x6}]}, 0x10)
syz_emit_ethernet(0xdc, &(0x7f0000000280)=ANY=[], 0x0)

kernel console output (not intermixed with test programs):

3(loop0): ino=1e, "file1" attr_set_size
[  129.513076][ T6697] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  129.556251][ T6699] hfs: request for non-existent node 1317 in B*Tree
[  129.563173][ T6699] hfs: request for non-existent node 1317 in B*Tree
[  129.584238][ T6697] EXT4-fs warning (device loop4): ext4_group_add:1716: Can't resize non-sparse filesystem further
[  129.591909][ T6705] netlink: 12 bytes leftover after parsing attributes in process `syz.3.251'.
[  129.616422][ T6705] netem: invalid attributes len -12
[  129.621693][ T6705] netem: change failed
[  129.702607][ T1337] hfs: request for non-existent node 1317 in B*Tree
[  129.723506][ T5841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.726522][ T1337] hfs: request for non-existent node 1317 in B*Tree
[  129.771731][ T6711] loop0: detected capacity change from 0 to 164
[  129.781099][ T6482] hfs: node 4:3 still has 1 user(s)!
[  129.891570][ T6711] Unsupported NM flag settings (8)
[  130.173917][ T5907] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  130.340214][ T5907] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[  130.358731][ T5907] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  130.386676][ T5907] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  130.410853][ T5907] usb 4-1: config 220 has no interface number 2
[  130.420974][ T6737] netlink: 4 bytes leftover after parsing attributes in process `syz.4.267'.
[  130.432159][ T5907] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  130.479120][ T5907] usb 4-1: config 220 interface 0 has no altsetting 0
[  130.496894][ T5907] usb 4-1: config 220 interface 76 has no altsetting 0
[  130.513330][ T6739] Failed to get privilege flags for destination (handle=0x2:0x0)
[  130.521542][ T5907] usb 4-1: config 220 interface 1 has no altsetting 0
[  130.539325][ T5907] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  130.555410][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.580308][ T5907] usb 4-1: Product: syz
[  130.584857][ T5907] usb 4-1: Manufacturer: syz
[  130.589478][ T5907] usb 4-1: SerialNumber: syz
[  130.638993][ T6743] netlink: 44 bytes leftover after parsing attributes in process `syz.4.270'.
[  130.676594][ T6745] loop1: detected capacity change from 0 to 256
[  130.714122][ T6745] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  130.861865][ T5907] usb 4-1: Found UVC 7.01 device syz (8086:0b07)
[  130.880287][ T5907] usb 4-1: No valid video chain found.
[  130.889317][ T6750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.273'.
[  130.900129][ T5907] usb 4-1: selecting invalid altsetting 0
[  130.923622][ T6750] netlink: 16 bytes leftover after parsing attributes in process `syz.4.273'.
[  130.944735][ T5907] usb 4-1: selecting invalid altsetting 0
[  130.950513][ T5907] usbtest 4-1:220.1: probe with driver usbtest failed with error -22
[  130.969960][ T6754] netlink: 27 bytes leftover after parsing attributes in process `syz.0.275'.
[  130.984393][ T5907] usb 4-1: USB disconnect, device number 3
[  131.236641][   T30] audit: type=1326 audit(1751274934.540:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6761 comm="syz.1.279" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc9798e929 code=0x0
[  131.563892][   T55] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  131.572130][   T95] block nbd0: Possible stuck request ffff888025360000: control (read@0,1024B). Runtime 30 seconds
[  131.572233][   T95] block nbd0: Possible stuck request ffff8880253601c0: control (read@1024,1024B). Runtime 30 seconds
[  131.572259][   T95] block nbd0: Possible stuck request ffff888025360380: control (read@2048,1024B). Runtime 30 seconds
[  131.572283][   T95] block nbd0: Possible stuck request ffff888025360540: control (read@3072,1024B). Runtime 30 seconds
[  131.794083][   T55] usb 5-1: Using ep0 maxpacket: 32
[  131.806173][   T55] usb 5-1: config index 0 descriptor too short (expected 249, got 27)
[  131.824081][   T55] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  131.851763][   T55] usb 5-1: config 0 has no interfaces?
[  131.861318][ T6779] loop3: detected capacity change from 0 to 32768
[  131.868066][   T55] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  131.870994][ T6779] XFS: ikeep mount option is deprecated.
[  131.888937][   T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.905819][   T55] usb 5-1: config 0 descriptor??
[  131.925675][ T6779] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  131.970374][ T6779] XFS (loop3): Ending clean mount
[  131.981828][ T6779] XFS (loop3): Quotacheck needed: Please wait.
[  132.021466][ T6779] XFS (loop3): Quotacheck: Done.
[  132.138762][   T55] usb 5-1: USB disconnect, device number 3
[  132.163229][ T5836] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  132.839387][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  133.239102][ T6839] loop4: detected capacity change from 0 to 256
[  133.300401][ T6839] FAT-fs (loop4): Directory bread(block 64) failed
[  133.311005][ T6847] loop1: detected capacity change from 0 to 512
[  133.330188][ T6839] FAT-fs (loop4): Directory bread(block 65) failed
[  133.340243][ T6839] FAT-fs (loop4): Directory bread(block 66) failed
[  133.353307][ T6839] FAT-fs (loop4): Directory bread(block 67) failed
[  133.361660][ T6839] FAT-fs (loop4): Directory bread(block 68) failed
[  133.375572][ T6839] FAT-fs (loop4): Directory bread(block 69) failed
[  133.382250][ T6839] FAT-fs (loop4): Directory bread(block 70) failed
[  133.393100][ T6847] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.410918][ T6839] FAT-fs (loop4): Directory bread(block 71) failed
[  133.414829][ T6847] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  133.422418][ T6839] FAT-fs (loop4): Directory bread(block 72) failed
[  133.435118][ T6839] FAT-fs (loop4): Directory bread(block 73) failed
[  133.459109][ T6854] netlink: 64 bytes leftover after parsing attributes in process `syz.0.316'.
[  133.469009][ T6839] Bluetooth: MGMT ver 1.23
[  133.497401][ T6847] EXT4-fs error (device loop1): ext4_do_update_inode:5567: inode #2: comm syz.1.314: corrupted inode contents
[  133.531296][ T6847] EXT4-fs error (device loop1): ext4_dirty_inode:6458: inode #2: comm syz.1.314: mark_inode_dirty error
[  133.563296][ T6847] EXT4-fs error (device loop1): ext4_do_update_inode:5567: inode #2: comm syz.1.314: corrupted inode contents
[  133.663079][ T5847] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.761586][ T6861] loop0: detected capacity change from 0 to 4096
[  133.818062][ T6861] ntfs3(loop0): ino=1a, mi_enum_attr
[  133.834307][ T6861] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  133.849691][    T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  133.939036][ T6873] veth1_to_batadv: entered promiscuous mode
[  134.016559][    T9] usb 4-1: Using ep0 maxpacket: 16
[  134.031744][    T9] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[  134.049058][    T9] usb 4-1: config 0 has no interface number 0
[  134.055112][ T6876] netlink: 176 bytes leftover after parsing attributes in process `syz.4.327'.
[  134.055344][ T5907] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  134.072115][    T9] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  134.090837][    T9] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  134.096562][ T6876] ip6gretap0: entered promiscuous mode
[  134.108300][    T9] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  134.118896][ T6876] netlink: 176 bytes leftover after parsing attributes in process `syz.4.327'.
[  134.129558][    T9] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  134.142642][    T9] usb 4-1: Product: syz
[  134.148123][ T6876] Zero length message leads to an empty skb
[  134.154722][    T9] usb 4-1: SerialNumber: syz
[  134.162245][    T9] usb 4-1: config 0 descriptor??
[  134.175812][    T9] cm109 4-1:0.8: invalid payload size 0, expected 4
[  134.188997][    T9] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input6
[  134.254203][ T5907] usb 2-1: Using ep0 maxpacket: 8
[  134.280849][ T5907] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  134.300419][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.317565][ T5907] usb 2-1: Product: syz
[  134.321937][ T5907] usb 2-1: Manufacturer: syz
[  134.336966][ T6882] loop4: detected capacity change from 0 to 1024
[  134.341017][ T5907] usb 2-1: SerialNumber: syz
[  134.361080][ T5907] usb 2-1: config 0 descriptor??
[  134.361122][ T6882] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  134.385313][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[  134.412297][ T6882] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #3: block 1: comm syz.4.330: lblock 1 mapped to illegal pblock 1 (length 1)
[  134.434244][ T6882] Quota error (device loop4): write_blk: dquota write failed
[  134.455437][ T6882] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  134.469584][ T6882] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.330: Failed to acquire dquot type 0
[  134.490036][ T6882] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.330: Freeing blocks not in datazone - block = 0, count = 4096
[  134.513169][ T6882] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.330: Invalid inode bitmap blk 0 in block_group 0
[  134.526828][ T1325] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1)
[  134.563401][ T1325] Quota error (device loop4): remove_tree: Can't read quota data block 1
[  134.573129][ T6879] loop5: detected capacity change from 0 to 32768
[  134.575356][ T6882] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem
[  134.594433][ T1325] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0
[  134.596178][    T9] usb 4-1: USB disconnect, device number 4
[  134.614685][ T5907] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  134.624598][ T6882] EXT4-fs (loop4): 1 orphan inode deleted
[  134.631742][ T6879] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  134.646404][    T9] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  134.646885][ T6882] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  134.693428][ T6882] EXT4-fs error (device loop4): __ext4_get_inode_loc:4791: comm syz.4.330: Invalid inode table block 47244640257 in block_group 0
[  134.709363][ T6879] XFS (loop5): Ending clean mount
[  134.726990][ T6879] XFS (loop5): Quotacheck needed: Please wait.
[  134.762346][ T6879] XFS (loop5): Quotacheck: Done.
[  134.812627][ T5841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.850222][ T6482] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  135.018331][ T5907] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  135.048726][ T5907] usb 2-1: USB disconnect, device number 3
[  135.119086][ T6899] random: crng reseeded on system resumption
[  135.337937][ T6901] xt_CT: No such helper "pptp"
[  135.533160][ T6915] loop0: detected capacity change from 0 to 4096
[  135.664181][ T6915] ntfs3(loop0): ino=1a, mi_enum_attr
[  135.673087][ T6915] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  135.680815][ T6927] loop4: detected capacity change from 0 to 256
[  135.689051][ T6927] exfat: Deprecated parameter 'utf8'
[  135.695335][ T6927] exfat: Deprecated parameter 'namecase'
[  135.701585][ T6927] exfat: Deprecated parameter 'utf8'
[  135.756859][ T6921] loop3: detected capacity change from 0 to 4096
[  135.759300][ T6927] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  135.777340][ T6921] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  136.361745][ T6925] loop1: detected capacity change from 0 to 32768
[  136.417051][ T6925] syz.1.345: attempt to access beyond end of device
[  136.417051][ T6925] loop14: rw=0, sector=8, nr_sectors = 8 limit=0
[  136.457779][ T6925] lbmIODone: I/O error in JFS log
[  136.463426][ T6925] *** Log Format Error ! ***
[  136.469877][ T6925] lmLogInit: exit(-22)
[  136.479088][ T6925] lmLogOpen: exit(-22)
[  136.504908][ T6925] syz.1.345: attempt to access beyond end of device
[  136.504908][ T6925] loop14: rw=0, sector=8, nr_sectors = 8 limit=0
[  136.528230][ T6925] lbmIODone: I/O error in JFS log
[  136.533403][ T6925] *** Log Format Error ! ***
[  136.554331][ T6925] lmLogInit: exit(-22)
[  136.558598][ T6925] lmLogOpen: exit(-22)
[  136.862683][ T6946] loop1: detected capacity change from 0 to 2048
[  136.886405][ T6946] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  137.008620][ T6953] loop5: detected capacity change from 0 to 256
[  137.057520][ T5847] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.148393][ T6956] loop4: detected capacity change from 0 to 256
[  137.164725][ T6956] exfat: Deprecated parameter 'utf8'
[  137.180318][ T6956] exfat: Deprecated parameter 'utf8'
[  137.194595][ T6956] exfat: Deprecated parameter 'namecase'
[  137.221122][ T6956] exfat: Deprecated parameter 'utf8'
[  137.243772][ T6956] exfat: Deprecated parameter 'utf8'
[  137.300214][ T6956] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e8072e, utbl_chksum : 0xe619d30d)
[  137.403142][ T6965] loop3: detected capacity change from 0 to 2048
[  137.466406][ T6969] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  137.554848][ T6969] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  137.580407][ T6969] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4)
[  137.595937][ T6969] Remounting filesystem read-only
[  137.776042][ T5836] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer
[  138.098782][ T6988] syz_tun: entered allmulticast mode
[  138.113178][ T6986] loop1: detected capacity change from 0 to 8192
[  138.142463][ T6988] dvmrp0: entered allmulticast mode
[  138.179848][ T6987] dvmrp0: left allmulticast mode
[  138.198584][ T6987] syz_tun: left allmulticast mode
[  138.537882][ T6980] loop5: detected capacity change from 0 to 40427
[  138.566686][ T6980] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  138.578317][ T6980] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  138.668418][ T6980] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  138.718263][ T6984] loop3: detected capacity change from 0 to 32768
[  138.764564][ T6984] ea_get: invalid extended attribute
[  138.867726][ T6980] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  138.913979][ T6980] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  140.004200][ T7039] loop3: detected capacity change from 0 to 1024
[  140.092595][ T7017] loop4: detected capacity change from 0 to 40427
[  140.119355][ T3502] hfsplus: b-tree write err: -5, ino 4
[  140.127132][ T7017] F2FS-fs (loop4): invalid crc value
[  140.345131][ T7017] F2FS-fs (loop4): Start checkpoint disabled!
[  140.380479][ T7017] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  140.466144][ T7033] loop1: detected capacity change from 0 to 32768
[  140.510568][ T7033] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  140.594238][ T7017] F2FS-fs (loop4): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[  140.731884][ T7033] XFS (loop1): Ending clean mount
[  140.799216][ T3502] kworker/u8:10: attempt to access beyond end of device
[  140.799216][ T3502] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  140.829473][ T7044] loop3: detected capacity change from 0 to 32768
[  140.836995][ T3502] CPU: 1 UID: 0 PID: 3502 Comm: kworker/u8:10 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) 
[  140.837027][ T3502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  140.837040][ T3502] Workqueue: writeback wb_workfn (flush-7:4)
[  140.837076][ T3502] Call Trace:
[  140.837085][ T3502]  <TASK>
[  140.837094][ T3502]  dump_stack_lvl+0x189/0x250
[  140.837133][ T3502]  ? __pfx_dump_stack_lvl+0x10/0x10
[  140.837160][ T3502]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  140.837191][ T3502]  ? __pfx_queue_work_on+0x10/0x10
[  140.837222][ T3502]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  140.837251][ T3502]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  140.837282][ T3502]  ? f2fs_hw_is_readonly+0x39b/0x470
[  140.837315][ T3502]  f2fs_handle_critical_error+0x37c/0x540
[  140.837372][ T3502]  f2fs_write_end_io+0x495/0x810
[  140.837400][ T3502]  ? blkg_put+0x22/0x240
[  140.837446][ T3502]  __submit_merged_bio+0x27a/0x6a0
[  140.837481][ T3502]  __submit_merged_write_cond+0x255/0x530
[  140.837516][ T3502]  f2fs_write_data_pages+0x261d/0x3000
[  140.837590][ T3502]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  140.837727][ T3502]  ? f2fs_write_meta_pages+0x357/0x450
[  140.837769][ T3502]  ? __lock_acquire+0xab9/0xd20
[  140.837800][ T3502]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  140.837831][ T3502]  do_writepages+0x32e/0x550
[  140.837868][ T3502]  ? reacquire_held_locks+0x127/0x1d0
[  140.837896][ T3502]  ? writeback_sb_inodes+0x384/0x1010
[  140.837936][ T3502]  __writeback_single_inode+0x145/0xff0
[  140.837972][ T3502]  ? do_raw_spin_unlock+0x122/0x240
[  140.837999][ T3502]  writeback_sb_inodes+0x6c7/0x1010
[  140.838065][ T3502]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  140.838151][ T3502]  ? rcu_is_watching+0x15/0xb0
[  140.838193][ T3502]  wb_writeback+0x43b/0xaf0
[  140.838233][ T3502]  ? queue_io+0x3d1/0x590
[  140.838266][ T3502]  ? __pfx_wb_writeback+0x10/0x10
[  140.838307][ T3502]  ? _raw_spin_unlock_irq+0x23/0x50
[  140.838343][ T3502]  wb_workfn+0x409/0xef0
[  140.838388][ T3502]  ? __pfx_wb_workfn+0x10/0x10
[  140.838420][ T3502]  ? __lock_acquire+0xab9/0xd20
[  140.838460][ T3502]  ? process_scheduled_works+0x9ef/0x17b0
[  140.838496][ T3502]  ? _raw_spin_unlock_irq+0x23/0x50
[  140.838522][ T3502]  ? process_scheduled_works+0x9ef/0x17b0
[  140.838548][ T3502]  ? process_scheduled_works+0x9ef/0x17b0
[  140.838578][ T3502]  process_scheduled_works+0xae1/0x17b0
[  140.838646][ T3502]  ? __pfx_process_scheduled_works+0x10/0x10
[  140.838698][ T3502]  worker_thread+0x8a0/0xda0
[  140.838764][ T3502]  kthread+0x70e/0x8a0
[  140.838789][ T3502]  ? __pfx_worker_thread+0x10/0x10
[  140.838816][ T3502]  ? __pfx_kthread+0x10/0x10
[  140.838839][ T3502]  ? _raw_spin_unlock_irq+0x23/0x50
[  140.838867][ T3502]  ? lockdep_hardirqs_on+0x9c/0x150
[  140.838895][ T3502]  ? __pfx_kthread+0x10/0x10
[  140.838916][ T3502]  ret_from_fork+0x3fc/0x770
[  140.838954][ T3502]  ? __pfx_ret_from_fork+0x10/0x10
[  140.838990][ T3502]  ? __switch_to_asm+0x39/0x70
[  140.839008][ T3502]  ? __switch_to_asm+0x33/0x70
[  140.839026][ T3502]  ? __pfx_kthread+0x10/0x10
[  140.839048][ T3502]  ret_from_fork_asm+0x1a/0x30
[  140.839091][ T3502]  </TASK>
[  140.839100][ T3502] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  140.970984][ T7058] loop0: detected capacity change from 0 to 1024
[  141.167877][ T5847] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  141.286509][ T7058] hfsplus: bad catalog entry type
[  141.654283][   T30] audit: type=1326 audit(1751274944.950:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7063 comm="syz.3.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686058e929 code=0x7ffc0000
[  141.725649][   T30] audit: type=1326 audit(1751274944.950:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7063 comm="syz.3.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686058e929 code=0x7ffc0000
[  141.757049][ T7041] loop5: detected capacity change from 0 to 65536
[  141.836380][   T30] audit: type=1326 audit(1751274944.980:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7063 comm="syz.3.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f686058e929 code=0x7ffc0000
[  141.870397][ T7041] XFS (loop5): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  141.884163][   T30] audit: type=1326 audit(1751274944.980:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7063 comm="syz.3.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686058e929 code=0x7ffc0000
[  141.910688][   T30] audit: type=1326 audit(1751274944.980:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7063 comm="syz.3.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686058e929 code=0x7ffc0000
[  141.934959][   T30] audit: type=1326 audit(1751274945.020:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7063 comm="syz.3.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f686058e929 code=0x7ffc0000
[  141.957532][   T30] audit: type=1326 audit(1751274945.020:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7063 comm="syz.3.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686058e929 code=0x7ffc0000
[  141.980484][   T30] audit: type=1326 audit(1751274945.020:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7063 comm="syz.3.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f68605858e7 code=0x7ffc0000
[  142.002804][   T30] audit: type=1326 audit(1751274945.020:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7063 comm="syz.3.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f686052ab19 code=0x7ffc0000
[  142.026509][   T30] audit: type=1326 audit(1751274945.020:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7063 comm="syz.3.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686058e929 code=0x7ffc0000
[  142.135908][ T7041] XFS (loop5): Ending clean mount
[  142.214258][ T6482] XFS (loop5): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  142.953677][ T7076] loop0: detected capacity change from 0 to 32768
[  143.085711][   T51] block nbd1: Receive control failed (result -32)
[  143.262492][ T5832] read_mapping_page failed!
[  143.272821][ T7104] loop5: detected capacity change from 0 to 512
[  143.280022][ T5832] ERROR: (device loop0): txCommit: 
[  143.280022][ T5832] 
[  143.280489][ T7085] loop1: detected capacity change from 0 to 40427
[  143.300913][ T5832] ERROR: (device loop0): remounting filesystem as read-only
[  143.309231][ T7085] F2FS-fs (loop1): build fault injection rate: 771
[  143.323938][ T7104] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  143.339130][ T7085] F2FS-fs (loop1): invalid crc value
[  143.373428][ T7104] EXT4-fs (loop5): 1 truncate cleaned up
[  143.405465][ T7104] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  143.440851][ T7110] loop3: detected capacity change from 0 to 2048
[  143.484827][ T7110] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  143.527368][ T7085] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  143.546428][ T7112] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  143.616970][ T7110] NILFS error (device loop3): nilfs_readdir: zero-length directory entry
[  143.670944][ T7110] Remounting filesystem read-only
[  143.700835][ T3502] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.725404][ T5847] syz-executor: attempt to access beyond end of device
[  143.725404][ T5847] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  143.745395][ T5847] CPU: 0 UID: 0 PID: 5847 Comm: syz-executor Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) 
[  143.745427][ T5847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  143.745440][ T5847] Call Trace:
[  143.745449][ T5847]  <TASK>
[  143.745458][ T5847]  dump_stack_lvl+0x189/0x250
[  143.745512][ T5847]  ? __pfx_dump_stack_lvl+0x10/0x10
[  143.745542][ T5847]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  143.745573][ T5847]  ? __pfx_queue_work_on+0x10/0x10
[  143.745605][ T5847]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  143.745634][ T5847]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  143.745666][ T5847]  ? f2fs_hw_is_readonly+0x39b/0x470
[  143.745700][ T5847]  f2fs_handle_critical_error+0x37c/0x540
[  143.745736][ T5847]  f2fs_write_end_io+0x495/0x810
[  143.745765][ T5847]  ? blkg_put+0x22/0x240
[  143.745812][ T5847]  __submit_merged_bio+0x27a/0x6a0
[  143.745848][ T5847]  __submit_merged_write_cond+0x255/0x530
[  143.745885][ T5847]  f2fs_write_data_pages+0x261d/0x3000
[  143.745961][ T5847]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  143.745989][ T5847]  ? is_bpf_text_address+0x26/0x2b0
[  143.746032][ T5847]  ? arch_stack_walk+0xfc/0x150
[  143.746138][ T5847]  ? __lock_acquire+0xab9/0xd20
[  143.746177][ T5847]  ? do_raw_spin_lock+0x121/0x290
[  143.746214][ T5847]  ? do_raw_spin_unlock+0x122/0x240
[  143.746235][ T5847]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  143.746267][ T5847]  do_writepages+0x32e/0x550
[  143.746312][ T5847]  ? do_raw_spin_unlock+0x122/0x240
[  143.746340][ T5847]  filemap_fdatawrite+0x199/0x240
[  143.746384][ T5847]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  143.746482][ T5847]  ? do_raw_spin_unlock+0x122/0x240
[  143.746509][ T5847]  f2fs_sync_dirty_inodes+0x31f/0x830
[  143.746560][ T5847]  f2fs_write_checkpoint+0x95a/0x1df0
[  143.746623][ T5847]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  143.746707][ T5847]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  143.746738][ T5847]  ? kfree+0x18e/0x440
[  143.746766][ T5847]  ? kill_f2fs_super+0x298/0x6c0
[  143.746801][ T5847]  kill_f2fs_super+0x2c3/0x6c0
[  143.746837][ T5847]  ? __pfx_kill_f2fs_super+0x10/0x10
[  143.746863][ T5847]  ? radix_tree_delete_item+0x2b6/0x400
[  143.746900][ T5847]  ? shrinker_free+0x2ce/0x3e0
[  143.746927][ T5847]  deactivate_locked_super+0xbc/0x130
[  143.746955][ T5847]  cleanup_mnt+0x425/0x4c0
[  143.746979][ T5847]  ? lockdep_hardirqs_on+0x9c/0x150
[  143.747011][ T5847]  task_work_run+0x1d1/0x260
[  143.747054][ T5847]  ? __pfx_task_work_run+0x10/0x10
[  143.747086][ T5847]  ? __x64_sys_umount+0x122/0x160
[  143.747120][ T5847]  ? exit_to_user_mode_loop+0x40/0x110
[  143.747149][ T5847]  exit_to_user_mode_loop+0xec/0x110
[  143.747174][ T5847]  do_syscall_64+0x2bd/0x3b0
[  143.747190][ T5847]  ? lockdep_hardirqs_on+0x9c/0x150
[  143.747217][ T5847]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.747236][ T5847]  ? clear_bhb_loop+0x60/0xb0
[  143.747260][ T5847]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.747278][ T5847] RIP: 0033:0x7efc9798fc57
[  143.747297][ T5847] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  143.747312][ T5847] RSP: 002b:00007ffdbada06b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  143.747333][ T5847] RAX: 0000000000000000 RBX: 00007efc97a10925 RCX: 00007efc9798fc57
[  143.747345][ T5847] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdbada0770
[  143.747356][ T5847] RBP: 00007ffdbada0770 R08: 0000000000000000 R09: 0000000000000000
[  143.747368][ T5847] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdbada1800
[  143.747380][ T5847] R13: 00007efc97a10925 R14: 00000000000230de R15: 00007ffdbada1840
[  143.747414][ T5847]  </TASK>
[  143.747423][ T5847] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  143.854857][ T7100] loop4: detected capacity change from 0 to 32768
[  143.862387][ T5847] CPU: 0 UID: 0 PID: 5847 Comm: syz-executor Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) 
[  143.862422][ T5847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  143.862438][ T5847] Call Trace:
[  143.862449][ T5847]  <TASK>
[  143.862457][ T5847]  dump_stack_lvl+0x189/0x250
[  143.862522][ T5847]  ? __pfx_dump_stack_lvl+0x10/0x10
[  143.862554][ T5847]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  143.862588][ T5847]  ? __pfx_queue_work_on+0x10/0x10
[  143.862623][ T5847]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  143.862655][ T5847]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  143.862691][ T5847]  ? f2fs_hw_is_readonly+0x39b/0x470
[  143.862727][ T5847]  f2fs_handle_critical_error+0x37c/0x540
[  143.862768][ T5847]  f2fs_write_end_io+0x495/0x810
[  143.862799][ T5847]  ? blkg_put+0x22/0x240
[  143.862852][ T5847]  __submit_merged_bio+0x27a/0x6a0
[  143.862891][ T5847]  __submit_merged_write_cond+0x255/0x530
[  143.862930][ T5847]  f2fs_write_data_pages+0x261d/0x3000
[  143.863014][ T5847]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  143.863044][ T5847]  ? is_bpf_text_address+0x26/0x2b0
[  143.863093][ T5847]  ? arch_stack_walk+0xfc/0x150
[  143.863210][ T5847]  ? __lock_acquire+0xab9/0xd20
[  143.863253][ T5847]  ? do_raw_spin_lock+0x121/0x290
[  143.863292][ T5847]  ? do_raw_spin_unlock+0x122/0x240
[  143.863317][ T5847]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  143.863350][ T5847]  do_writepages+0x32e/0x550
[  143.863402][ T5847]  ? do_raw_spin_unlock+0x122/0x240
[  143.863432][ T5847]  filemap_fdatawrite+0x199/0x240
[  143.863482][ T5847]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  143.863586][ T5847]  ? do_raw_spin_unlock+0x122/0x240
[  143.863617][ T5847]  f2fs_sync_dirty_inodes+0x31f/0x830
[  143.863680][ T5847]  f2fs_write_checkpoint+0x95a/0x1df0
[  143.863749][ T5847]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  143.863849][ T5847]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  143.863871][ T5847]  ? kfree+0x18e/0x440
[  143.863906][ T5847]  ? kill_f2fs_super+0x298/0x6c0
[  143.863948][ T5847]  kill_f2fs_super+0x2c3/0x6c0
[  143.863992][ T5847]  ? __pfx_kill_f2fs_super+0x10/0x10
[  143.864024][ T5847]  ? radix_tree_delete_item+0x2b6/0x400
[  143.864069][ T5847]  ? shrinker_free+0x2ce/0x3e0
[  143.864100][ T5847]  deactivate_locked_super+0xbc/0x130
[  143.864135][ T5847]  cleanup_mnt+0x425/0x4c0
[  143.864165][ T5847]  ? lockdep_hardirqs_on+0x9c/0x150
[  143.864205][ T5847]  task_work_run+0x1d1/0x260
[  143.864235][ T5847]  ? __pfx_task_work_run+0x10/0x10
[  143.864256][ T5847]  ? __x64_sys_umount+0x122/0x160
[  143.864299][ T5847]  ? exit_to_user_mode_loop+0x40/0x110
[  143.864334][ T5847]  exit_to_user_mode_loop+0xec/0x110
[  143.864364][ T5847]  do_syscall_64+0x2bd/0x3b0
[  143.864384][ T5847]  ? lockdep_hardirqs_on+0x9c/0x150
[  143.864418][ T5847]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.864442][ T5847]  ? clear_bhb_loop+0x60/0xb0
[  143.864479][ T5847]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.864501][ T5847] RIP: 0033:0x7efc9798fc57
[  143.864524][ T5847] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  143.864543][ T5847] RSP: 002b:00007ffdbada06b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  143.864566][ T5847] RAX: 0000000000000000 RBX: 00007efc97a10925 RCX: 00007efc9798fc57
[  143.864582][ T5847] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdbada0770
[  143.864596][ T5847] RBP: 00007ffdbada0770 R08: 0000000000000000 R09: 0000000000000000
[  143.864610][ T5847] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdbada1800
[  143.864626][ T5847] R13: 00007efc97a10925 R14: 00000000000230de R15: 00007ffdbada1840
[  143.864667][ T5847]  </TASK>
[  143.865952][ T5847] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  143.928288][ T7100] jfs_lookup: iget failed on inum 32
[  144.525723][ T7100] jfs_lookup: iget failed on inum 32
[  144.672129][ T3502] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.738487][ T6482] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.880965][ T3502] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.095920][ T3502] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.151527][ T7128] loop5: detected capacity change from 0 to 256
[  145.275041][ T7132] netlink: 'syz.4.428': attribute type 49 has an invalid length.
[  145.416342][ T7136] loop3: detected capacity change from 0 to 8
[  145.434724][ T7136] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  145.447796][ T3502] bridge_slave_1: left allmulticast mode
[  145.453472][ T3502] bridge_slave_1: left promiscuous mode
[  145.470374][ T3502] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.490618][ T7136] cramfs: bad data blocksize 503316507
[  145.510346][ T7136] cramfs: bad data blocksize 503316507
[  145.535114][ T3502] bridge_slave_0: left allmulticast mode
[  145.540832][ T3502] bridge_slave_0: left promiscuous mode
[  145.569708][ T3502] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.674722][ T5155] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  145.675846][ T7146] loop4: detected capacity change from 0 to 8
[  145.698091][ T5155] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  145.707555][ T5155] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  145.722769][ T5155] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  145.732458][ T5155] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  145.918451][ T5841] SQUASHFS error: Unknown inode type 0 in squashfs_iget!
[  145.938518][ T5841] SQUASHFS error: Unknown inode type 0 in squashfs_iget!
[  146.179997][ T3502] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  146.190790][ T3502] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  146.201093][ T3502] bond0 (unregistering): Released all slaves
[  146.235252][ T7152] syzkaller0: tun_chr_ioctl cmd 2147767520
[  146.841614][ T3502] hsr_slave_0: left promiscuous mode
[  146.857199][ T3502] hsr_slave_1: left promiscuous mode
[  146.863404][ T3502] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  146.883992][ T3502] batman_adv: batadv0: Removing interface: batadv_slave_0
[  146.904681][ T3502] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  146.912137][ T3502] batman_adv: batadv0: Removing interface: batadv_slave_1
[  146.974233][ T3502] veth1_macvtap: left promiscuous mode
[  146.979837][ T3502] veth0_macvtap: left promiscuous mode
[  146.994085][ T3502] veth1_vlan: left promiscuous mode
[  146.999466][ T3502] veth0_vlan: left promiscuous mode
[  147.237063][   T51] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  147.248996][ T5837] Bluetooth: hci0: command 0x1003 tx timeout
[  147.322339][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  147.337107][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  147.348733][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  147.356942][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  147.364874][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  147.530592][ T7166] loop3: detected capacity change from 0 to 40427
[  147.556690][ T7166] F2FS-fs (loop3): build fault injection rate: 690
[  147.563305][ T7166] F2FS-fs (loop3): Image doesn't support compression
[  147.584321][ T7166] F2FS-fs (loop3): Image doesn't support compression
[  147.611313][ T7166] F2FS-fs (loop3): invalid crc value
[  147.794224][   T51] Bluetooth: hci5: command tx timeout
[  147.837968][ T7166] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  147.872349][   T30] kauditd_printk_skb: 82 callbacks suppressed
[  147.872369][   T30] audit: type=1800 audit(1751274951.180:101): pid=7166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.443" name="file1" dev="loop3" ino=10 res=0 errno=0
[  147.933303][ T5836] syz-executor: attempt to access beyond end of device
[  147.933303][ T5836] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  147.969824][ T5836] CPU: 1 UID: 0 PID: 5836 Comm: syz-executor Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) 
[  147.969855][ T5836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  147.969869][ T5836] Call Trace:
[  147.969877][ T5836]  <TASK>
[  147.969887][ T5836]  dump_stack_lvl+0x189/0x250
[  147.969928][ T5836]  ? __pfx_dump_stack_lvl+0x10/0x10
[  147.969957][ T5836]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  147.969987][ T5836]  ? __pfx_queue_work_on+0x10/0x10
[  147.970019][ T5836]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  147.970048][ T5836]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  147.970080][ T5836]  ? f2fs_hw_is_readonly+0x39b/0x470
[  147.970113][ T5836]  f2fs_handle_critical_error+0x37c/0x540
[  147.970149][ T5836]  f2fs_write_end_io+0x495/0x810
[  147.970177][ T5836]  ? blkg_put+0x22/0x240
[  147.970230][ T5836]  __submit_merged_bio+0x27a/0x6a0
[  147.970265][ T5836]  __submit_merged_write_cond+0x255/0x530
[  147.970302][ T5836]  f2fs_write_data_pages+0x261d/0x3000
[  147.970377][ T5836]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  147.970464][ T5836]  ? __mod_zone_page_state+0xd7/0x140
[  147.970508][ T5836]  ? folios_put_refs+0x560/0x640
[  147.970550][ T5836]  ? __lock_acquire+0xab9/0xd20
[  147.970588][ T5836]  ? do_raw_spin_lock+0x121/0x290
[  147.970625][ T5836]  ? do_raw_spin_unlock+0x122/0x240
[  147.970646][ T5836]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  147.970677][ T5836]  do_writepages+0x32e/0x550
[  147.970722][ T5836]  ? do_raw_spin_unlock+0x122/0x240
[  147.970749][ T5836]  filemap_fdatawrite+0x199/0x240
[  147.970780][ T5836]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  147.970884][ T5836]  ? do_raw_spin_unlock+0x122/0x240
[  147.970909][ T5836]  f2fs_sync_dirty_inodes+0x31f/0x830
[  147.970959][ T5836]  f2fs_write_checkpoint+0x95a/0x1df0
[  147.971039][ T5836]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  147.971121][ T5836]  ? try_to_wake_up+0x7e5/0x1290
[  147.971151][ T5836]  ? kill_f2fs_super+0x298/0x6c0
[  147.971189][ T5836]  kill_f2fs_super+0x2c3/0x6c0
[  147.971235][ T5836]  ? __pfx_kill_f2fs_super+0x10/0x10
[  147.971263][ T5836]  ? radix_tree_delete_item+0x2b6/0x400
[  147.971303][ T5836]  ? shrinker_free+0x2ce/0x3e0
[  147.971332][ T5836]  deactivate_locked_super+0xbc/0x130
[  147.971363][ T5836]  cleanup_mnt+0x425/0x4c0
[  147.971388][ T5836]  ? lockdep_hardirqs_on+0x9c/0x150
[  147.971424][ T5836]  task_work_run+0x1d1/0x260
[  147.971450][ T5836]  ? __pfx_task_work_run+0x10/0x10
[  147.971470][ T5836]  ? __x64_sys_umount+0x122/0x160
[  147.971508][ T5836]  ? exit_to_user_mode_loop+0x40/0x110
[  147.971540][ T5836]  exit_to_user_mode_loop+0xec/0x110
[  147.971568][ T5836]  do_syscall_64+0x2bd/0x3b0
[  147.971586][ T5836]  ? lockdep_hardirqs_on+0x9c/0x150
[  147.971616][ T5836]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.971637][ T5836]  ? clear_bhb_loop+0x60/0xb0
[  147.971663][ T5836]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.971683][ T5836] RIP: 0033:0x7f686058fc57
[  147.971702][ T5836] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  147.971719][ T5836] RSP: 002b:00007ffd66fcfe38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  147.971742][ T5836] RAX: 0000000000000000 RBX: 00007f6860610925 RCX: 00007f686058fc57
[  147.971757][ T5836] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd66fcfef0
[  147.971770][ T5836] RBP: 00007ffd66fcfef0 R08: 0000000000000000 R09: 0000000000000000
[  147.971782][ T5836] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd66fd0f80
[  147.971796][ T5836] R13: 00007f6860610925 R14: 0000000000024191 R15: 00007ffd66fd0fc0
[  147.971834][ T5836]  </TASK>
[  147.971842][ T5836] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  148.659722][ T3502] team0 (unregistering): Port device team_slave_1 removed
[  148.726867][ T3502] team0 (unregistering): Port device team_slave_0 removed
[  149.211889][ T7191] netlink: 48 bytes leftover after parsing attributes in process `syz.5.454'.
[  149.233285][ T7144] chnl_net:caif_netlink_parms(): no params data found
[  149.400199][   T51] Bluetooth: hci2: command tx timeout
[  149.423903][ T5881] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  149.602488][ T5881] usb 4-1: Using ep0 maxpacket: 16
[  149.633105][ T5881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  149.667188][ T5881] usb 4-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.00
[  149.689517][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.720968][ T7144] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.751293][ T7144] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.760314][ T5881] usb 4-1: config 0 descriptor??
[  149.794140][ T7144] bridge_slave_0: entered allmulticast mode
[  149.815859][ T7144] bridge_slave_0: entered promiscuous mode
[  149.816078][ T5881] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input7
[  149.851298][ T7144] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.866874][ T7144] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.875082][   T51] Bluetooth: hci5: command tx timeout
[  149.881818][ T7144] bridge_slave_1: entered allmulticast mode
[  149.890808][ T7144] bridge_slave_1: entered promiscuous mode
[  150.016863][ T7221] loop5: detected capacity change from 0 to 512
[  150.029627][ T7144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  150.044042][ T5907] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  150.049179][ T7144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  150.065932][ T7221] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.084447][ T7221] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  150.096985][ T5190] bcm5974 4-1:0.0: could not read from device
[  150.119956][ T5881] usb 4-1: USB disconnect, device number 5
[  150.132309][ T5190] bcm5974 4-1:0.0: could not read from device
[  150.147956][   T30] audit: type=1800 audit(1751274953.450:102): pid=7221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.465" name="file2" dev="loop5" ino=16 res=0 errno=0
[  150.193131][ T6482] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.247953][ T5907] usb 2-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=43.6f
[  150.264043][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.292661][ T5907] usb 2-1: Product: syz
[  150.297082][ T5907] usb 2-1: Manufacturer: syz
[  150.301708][ T5907] usb 2-1: SerialNumber: syz
[  150.311304][ T5907] usb 2-1: config 0 descriptor??
[  150.324195][ T7144] team0: Port device team_slave_0 added
[  150.335529][ T5907] gspca_main: touptek-2.14.0 probing 0547:6801
[  150.349780][ T7144] team0: Port device team_slave_1 added
[  150.452928][ T7167] chnl_net:caif_netlink_parms(): no params data found
[  150.468378][ T7144] batman_adv: batadv0: Adding interface: batadv_slave_0
[  150.475500][ T7144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  150.504527][ T7144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  150.531188][ T7144] batman_adv: batadv0: Adding interface: batadv_slave_1
[  150.538666][ T7144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  150.576290][ T5907] usb 2-1: USB disconnect, device number 4
[  150.587820][ T7144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  150.801140][ T7144] hsr_slave_0: entered promiscuous mode
[  150.808125][ T7144] hsr_slave_1: entered promiscuous mode
[  150.814721][ T7144] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  150.824688][ T7144] Cannot create hsr debugfs directory
[  150.982775][ T7167] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.005950][ T7167] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.013430][ T7167] bridge_slave_0: entered allmulticast mode
[  151.028500][ T7167] bridge_slave_0: entered promiscuous mode
[  151.074074][ T7167] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.081541][ T7167] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.089234][ T7167] bridge_slave_1: entered allmulticast mode
[  151.097449][ T7167] bridge_slave_1: entered promiscuous mode
[  151.192801][ T7167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  151.216000][ T7167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  151.296073][ T7167] team0: Port device team_slave_0 added
[  151.326674][ T7167] team0: Port device team_slave_1 added
[  151.474105][   T51] Bluetooth: hci2: command tx timeout
[  151.476766][ T7167] batman_adv: batadv0: Adding interface: batadv_slave_0
[  151.501259][ T7167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  151.527925][ T7167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  151.584979][ T7167] batman_adv: batadv0: Adding interface: batadv_slave_1
[  151.591969][ T7167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  151.623056][ T7167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  151.750727][ T7253] loop1: detected capacity change from 0 to 4096
[  151.753216][ T7255] serio: Serial port ttyS3
[  151.862078][ T7167] hsr_slave_0: entered promiscuous mode
[  151.875032][ T7167] hsr_slave_1: entered promiscuous mode
[  151.881501][ T7167] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  151.895117][ T7167] Cannot create hsr debugfs directory
[  151.960449][   T51] Bluetooth: hci5: command tx timeout
[  152.077484][ T7144] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  152.111350][ T7144] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  152.150865][ T7144] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  152.246040][ T7144] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  152.284087][ T7269] loop3: detected capacity change from 0 to 128
[  152.317744][ T7269] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  152.338004][ T7269] ext4 filesystem being mounted at /95/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  152.510487][ T7262] loop5: detected capacity change from 0 to 32768
[  152.552534][ T7262] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  152.739300][ T5836] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  152.755987][ T7262] XFS (loop5): Ending clean mount
[  152.772610][ T7167] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  152.779494][ T7262] XFS (loop5): Quotacheck needed: Please wait.
[  152.816761][ T7262] XFS (loop5): Quotacheck: Done.
[  152.861470][ T7144] 8021q: adding VLAN 0 to HW filter on device bond0
[  152.871331][ T7167] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  152.914614][ T6482] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  152.915705][ T7167] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  152.969776][ T7167] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  153.032736][ T7144] 8021q: adding VLAN 0 to HW filter on device team0
[  153.147857][ T1325] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.155058][ T1325] bridge0: port 1(bridge_slave_0) entered forwarding state
[  153.194969][ T1325] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.202131][ T1325] bridge0: port 2(bridge_slave_1) entered forwarding state
[  153.399695][ T7297] loop1: detected capacity change from 0 to 32768
[  153.407658][ T7297] btrfs: Deprecated parameter 'usebackuproot'
[  153.414185][ T7297] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  153.426545][ T7297] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.490 (7297)
[  153.457083][ T7297] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  153.477806][ T7297] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  153.503826][ T7297] BTRFS info (device loop1): using free-space-tree
[  153.554303][   T51] Bluetooth: hci2: command tx timeout
[  153.575245][ T7312] loop5: detected capacity change from 0 to 512
[  153.581862][ T7167] 8021q: adding VLAN 0 to HW filter on device bond0
[  153.603547][ T7312] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  153.650105][ T1337] BTRFS warning (device loop1): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x26333c6f level 0
[  153.676986][ T7312] EXT4-fs (loop5): 1 truncate cleaned up
[  153.681532][ T7167] 8021q: adding VLAN 0 to HW filter on device team0
[  153.684844][ T7297] BTRFS warning (device loop1): couldn't read tree root
[  153.706297][ T7312] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  153.723805][ T7297] BTRFS warning (device loop1): try to load backup roots slot 1
[  153.738100][ T3469] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x78ca8373 level 0
[  153.769997][ T2998] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.770125][ T2998] bridge0: port 1(bridge_slave_0) entered forwarding state
[  153.772014][ T2998] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.772116][ T2998] bridge0: port 2(bridge_slave_1) entered forwarding state
[  153.781481][ T7297] BTRFS warning (device loop1): couldn't read tree root
[  153.781507][ T7297] BTRFS warning (device loop1): try to load backup roots slot 2
[  153.783070][ T3469] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  153.786154][ T7297] BTRFS warning (device loop1): couldn't read tree root
[  153.786179][ T7297] BTRFS warning (device loop1): try to load backup roots slot 3
[  153.787011][   T30] audit: type=1800 audit(1751274957.070:103): pid=7312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.491" name="bus" dev="loop5" ino=15 res=0 errno=0
[  153.861275][ T7167] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  153.874269][ T7297] BTRFS info (device loop1): rebuilding free space tree
[  153.970184][ T7297] BTRFS info (device loop1): checking UUID tree
[  154.035351][   T51] Bluetooth: hci5: command tx timeout
[  154.155763][ T7144] 8021q: adding VLAN 0 to HW filter on device batadv0
[  154.171502][ T6482] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.269647][ T5847] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  154.490021][ T7167] 8021q: adding VLAN 0 to HW filter on device batadv0
[  154.806212][ T7347] loop3: detected capacity change from 0 to 4096
[  155.098421][ T7144] veth0_vlan: entered promiscuous mode
[  155.140806][ T7144] veth1_vlan: entered promiscuous mode
[  155.256143][ T7144] veth0_macvtap: entered promiscuous mode
[  155.301542][ T7144] veth1_macvtap: entered promiscuous mode
[  155.308960][ T7362] IPVS: set_ctl: invalid protocol: 255 172.30.1.4:20000
[  155.372400][ T7144] batman_adv: batadv0: Interface activated: batadv_slave_0
[  155.397186][ T7167] veth0_vlan: entered promiscuous mode
[  155.406809][ T7144] batman_adv: batadv0: Interface activated: batadv_slave_1
[  155.441463][ T7167] veth1_vlan: entered promiscuous mode
[  155.460711][   T49] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  155.492626][   T49] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  155.549490][   T49] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  155.570392][   T49] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  155.622689][ T7167] veth0_macvtap: entered promiscuous mode
[  155.634397][   T51] Bluetooth: hci2: command tx timeout
[  155.729334][ T7167] veth1_macvtap: entered promiscuous mode
[  155.813357][ T7167] batman_adv: batadv0: Interface activated: batadv_slave_0
[  155.836111][ T1325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  155.872348][ T1325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  155.911832][ T7167] batman_adv: batadv0: Interface activated: batadv_slave_1
[  155.999695][ T3539] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  156.029592][ T3539] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  156.062981][ T1337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  156.085545][ T1325] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  156.094791][ T1337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.118040][ T1325] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  156.140790][ T7358] loop1: detected capacity change from 0 to 32768
[  156.150595][ T7358] XFS: noikeep mount option is deprecated.
[  156.169659][ T7358] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  156.376767][ T1337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  156.390186][ T1337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.420056][ T7358] XFS (loop1): Ending clean mount
[  156.452402][ T7358] XFS (loop1): Quotacheck needed: Please wait.
[  156.519101][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  156.547030][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.578849][ T7358] XFS (loop1): Quotacheck: Done.
[  156.602690][ T7390] loop3: detected capacity change from 0 to 256
[  156.634296][ T7390] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d)
[  156.652767][ T7390] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  156.732579][ T5847] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  157.259164][ T7406] loop1: detected capacity change from 0 to 512
[  157.498077][ T7406] EXT4-fs error (device loop1): ext4_orphan_get:1419: comm syz.1.510: bad orphan inode 11862016
[  157.517340][ T7406] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  157.544916][ T7406] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  157.574046][   T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  157.671070][ T7389] loop6: detected capacity change from 0 to 32768
[  157.692131][ T5847] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  157.744107][   T10] usb 8-1: Using ep0 maxpacket: 8
[  157.755162][   T10] usb 8-1: config 150 has an invalid interface number: 204 but max is 1
[  157.761153][ T7389] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  157.763548][   T10] usb 8-1: config 150 has no interface number 0
[  157.763596][   T10] usb 8-1: config 150 interface 204 has no altsetting 0
[  157.792582][ T5907] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  157.818540][   T10] usb 8-1: config 150 interface 1 has no altsetting 0
[  157.832401][   T10] usb 8-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  157.832479][ T7389] XFS (loop6): Ending clean mount
[  157.846678][   T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.855564][   T10] usb 8-1: Product: syz
[  157.859826][   T10] usb 8-1: Manufacturer: syz
[  157.864470][   T10] usb 8-1: SerialNumber: syz
[  157.879052][ T7424] loop5: detected capacity change from 0 to 256
[  157.889447][ T7423] loop1: detected capacity change from 0 to 512
[  157.892816][ T7389] XFS (loop6): Quotacheck needed: Please wait.
[  157.928248][ T7423] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  157.945158][ T7423] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  157.956698][ T7389] XFS (loop6): Quotacheck: Done.
[  157.969365][ T7424] FAT-fs (loop5): Directory bread(block 64) failed
[  157.985110][ T5907] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  158.010014][ T7424] FAT-fs (loop5): Directory bread(block 65) failed
[  158.017978][ T5907] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3
[  158.029403][ T7144] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  158.030144][ T7423] EXT4-fs error (device loop1): ext4_do_update_inode:5567: inode #2: comm syz.1.517: corrupted inode contents
[  158.038319][ T5907] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  158.038345][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.040821][ T7424] FAT-fs (loop5): Directory bread(block 66) failed
[  158.063023][ T7423] EXT4-fs error (device loop1): ext4_dirty_inode:6458: inode #2: comm syz.1.517: mark_inode_dirty error
[  158.071902][ T5907] usb 4-1: config 0 descriptor??
[  158.081096][ T7423] EXT4-fs error (device loop1): ext4_do_update_inode:5567: inode #2: comm syz.1.517: corrupted inode contents
[  158.110726][ T7423] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.517: mark_inode_dirty error
[  158.117123][   T10] xr_serial 8-1:150.204: xr_serial converter detected
[  158.132359][ T7424] FAT-fs (loop5): Directory bread(block 67) failed
[  158.139925][ T7423] EXT4-fs error (device loop1): ext4_lookup:1784: inode #18: comm syz.1.517: 'file0' linked to parent dir
[  158.146040][ T7424] FAT-fs (loop5): Directory bread(block 68) failed
[  158.159931][ T7424] FAT-fs (loop5): Directory bread(block 69) failed
[  158.193794][ T7424] FAT-fs (loop5): Directory bread(block 70) failed
[  158.212568][ T7424] FAT-fs (loop5): Directory bread(block 71) failed
[  158.232814][ T7424] FAT-fs (loop5): Directory bread(block 72) failed
[  158.256565][ T7424] FAT-fs (loop5): Directory bread(block 73) failed
[  158.285200][ T5847] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.455694][ T7431] netlink: 8 bytes leftover after parsing attributes in process `syz.6.519'.
[  158.479001][ T7431] netlink: 16 bytes leftover after parsing attributes in process `syz.6.519'.
[  158.516255][ T7429] loop1: detected capacity change from 0 to 2048
[  158.526553][ T5907] Bluetooth: Can't get state to change to load configuration err
[  158.543801][ T5907] Bluetooth: Loading sysconfig file failed
[  158.549730][ T5907] ath3k 4-1:0.0: probe with driver ath3k failed with error -16
[  158.558076][ T7429] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  158.713150][ T7437] loop6: detected capacity change from 0 to 1024
[  158.721251][ T7437] EXT4-fs: Ignoring removed i_version option
[  158.731206][   T10] xr_serial ttyUSB0: Failed to set reg 0x0d: -71
[  158.738939][   T10] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  158.749814][ T7437] EXT4-fs (loop6): Test dummy encryption mode enabled
[  158.752413][ T3469] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  158.762233][   T10] usb 8-1: USB disconnect, device number 2
[  158.781629][   T10] xr_serial 8-1:150.204: device disconnected
[  158.783128][   T55] usb 4-1: USB disconnect, device number 6
[  158.800280][ T5975] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  158.812827][ T7437] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  158.848396][ T3469] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  158.855799][ T7439] loop5: detected capacity change from 0 to 2048
[  158.879590][ T7439] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  158.932159][ T7144] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.984952][ T6482] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.184186][   T55] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  159.466986][ T1209] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  159.596883][ T7466] loop3: detected capacity change from 0 to 64
[  159.670018][ T1209] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  159.698881][ T1209] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  159.733633][ T1209] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.774472][ T1209] usb 7-1: config 0 descriptor??
[  159.794621][ T5975] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  159.840308][ T7471] loop7: detected capacity change from 0 to 1024
[  159.893978][ T7471] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  159.914700][ T7471] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  159.983088][ T7471] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  160.024071][ T7471] EXT4-fs (loop7): Remounting filesystem read-only
[  160.030991][ T1209] usbhid 7-1:0.0: can't add hid device: -71
[  160.045748][ T7456] loop1: detected capacity change from 0 to 32768
[  160.053868][ T1209] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  160.079990][ T1209] usb 7-1: USB disconnect, device number 2
[  160.087760][ T7456] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  160.105879][ T3539] EXT4-fs warning (device loop7): ext4_convert_unwritten_extents:4940: inode #15: block 1: len 3: ext4_ext_map_blocks returned -30
[  160.188790][ T7167] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.254932][ T7456] XFS (loop1): Ending clean mount
[  160.271740][ T7456] XFS (loop1): Quotacheck needed: Please wait.
[  160.392800][ T7456] XFS (loop1): Quotacheck: Done.
[  160.417252][ T7495] loop5: detected capacity change from 0 to 512
[  160.440846][ T7495] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  160.494911][ T7495] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002]
[  160.506862][ T7495] System zones: 1-12
[  160.518786][ T5847] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  160.531082][ T7495] EXT4-fs (loop5): 1 orphan inode deleted
[  160.537732][ T7495] EXT4-fs (loop5): 1 truncate cleaned up
[  160.546290][ T7495] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  160.604962][ T1209] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  160.689953][ T6482] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.773776][ T1209] usb 8-1: Using ep0 maxpacket: 32
[  160.783338][ T1209] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[  160.783459][ T7506] loop6: detected capacity change from 0 to 128
[  160.801853][ T1209] usb 8-1: config 0 has no interface number 0
[  160.824885][ T1209] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  160.845193][ T1209] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.853344][ T1209] usb 8-1: Product: syz
[  160.865611][ T7506] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  160.873731][ T1209] usb 8-1: Manufacturer: syz
[  160.896935][ T7506] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  160.902583][ T1209] usb 8-1: SerialNumber: syz
[  160.926358][ T1209] usb 8-1: config 0 descriptor??
[  160.954232][ T1209] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  160.974141][ T1209] usb 8-1: selecting invalid altsetting 1
[  160.990166][ T1209] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  161.013369][ T1209] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  161.034099][ T1209] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  161.059261][ T1209] usb 8-1: media controller created
[  161.123264][ T1209] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  161.507002][ T7526] loop1: detected capacity change from 0 to 8192
[  161.635282][   T95] block nbd0: Possible stuck request ffff888025360000: control (read@0,1024B). Runtime 60 seconds
[  161.650454][   T95] block nbd0: Possible stuck request ffff8880253601c0: control (read@1024,1024B). Runtime 60 seconds
[  161.661873][   T95] block nbd0: Possible stuck request ffff888025360380: control (read@2048,1024B). Runtime 60 seconds
[  161.672968][   T95] block nbd0: Possible stuck request ffff888025360540: control (read@3072,1024B). Runtime 60 seconds
[  162.277352][ T7493] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  162.425003][ T7551] loop5: detected capacity change from 0 to 32768
[  162.456714][ T7551] JBD2: Ignoring recovery information on journal
[  162.485392][ T1209] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  162.492879][ T1209] zl10353_read_register: readreg error (reg=127, ret==-71)
[  162.505729][ T1209] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  162.513312][ T7551] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  162.556178][ T1209] usb 8-1: USB disconnect, device number 3
[  162.573810][   T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  162.596038][ T7551] OCFS2: ERROR (device loop5): int ocfs2_reserve_suballoc_bits(struct ocfs2_super *, struct ocfs2_alloc_context *, int, u32, u64 *, int): Invalid chain allocator 71
[  162.613967][ T7551] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  162.626828][ T7551] OCFS2: File system is now read-only.
[  162.632664][ T7551] (syz.5.570,7551,0):ocfs2_reserve_suballoc_bits:856 ERROR: status = -30
[  162.641248][ T7551] (syz.5.570,7551,0):ocfs2_reserve_cluster_bitmap_bits:1139 ERROR: status = -30
[  162.650577][ T7551] (syz.5.570,7551,0):ocfs2_local_alloc_reserve_for_window:1119 ERROR: status = -30
[  162.660029][ T7551] (syz.5.570,7551,0):ocfs2_local_alloc_reserve_for_window:1135 ERROR: status = -30
[  162.669834][ T7551] (syz.5.570,7551,0):ocfs2_local_alloc_slide_window:1250 ERROR: status = -30
[  162.678681][ T7551] (syz.5.570,7551,0):ocfs2_local_alloc_slide_window:1317 ERROR: status = -30
[  162.687533][ T7551] (syz.5.570,7551,0):ocfs2_reserve_local_alloc_bits:672 ERROR: status = -30
[  162.696278][ T7551] (syz.5.570,7551,0):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -30
[  162.707378][ T7551] (syz.5.570,7551,0):ocfs2_reserve_clusters_with_limit:1172 ERROR: status = -30
[  162.716586][ T7551] (syz.5.570,7551,0):ocfs2_reserve_clusters_with_limit:1221 ERROR: status = -30
[  162.725716][ T7551] (syz.5.570,7551,0):ocfs2_symlink:1924 ERROR: status = -30
[  162.733297][ T7551] (syz.5.570,7551,0):ocfs2_symlink:2078 ERROR: status = -30
[  162.796422][ T6482] ocfs2: Unmounting device (7,5) on (node local)
[  162.826300][   T10] usb 2-1: Using ep0 maxpacket: 32
[  162.852875][   T10] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  162.883744][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.904880][   T10] usb 2-1: config 0 descriptor??
[  163.133846][   T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  163.154000][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  163.166506][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  163.209118][   T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  163.230455][   T10] usb 2-1: media controller created
[  163.289390][ T7553] loop6: detected capacity change from 0 to 32768
[  163.307573][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  163.353811][   T10] az6027: usb out operation failed. (-71)
[  163.361071][   T10] az6027: usb out operation failed. (-71)
[  163.367372][   T10] stb0899_attach: Driver disabled by Kconfig
[  163.373449][   T10] az6027: no front-end attached
[  163.373449][   T10] 
[  163.377268][ T7553] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  163.385238][   T10] az6027: usb out operation failed. (-71)
[  163.406992][   T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  163.411461][ T5975] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  163.442793][   T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8
[  163.461330][ T7553] XFS (loop6): Ending clean mount
[  163.466859][   T10] dvb-usb: schedule remote query interval to 400 msecs.
[  163.478688][   T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  163.490666][ T7553] XFS (loop6): Quotacheck needed: Please wait.
[  163.499669][   T10] usb 2-1: USB disconnect, device number 5
[  163.563163][ T7553] XFS (loop6): Quotacheck: Done.
[  163.571596][   T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  163.594641][ T5975] usb 8-1: Using ep0 maxpacket: 32
[  163.623587][ T5975] usb 8-1: config 0 has an invalid interface number: 51 but max is 0
[  163.633530][ T5975] usb 8-1: config 0 has no interface number 0
[  163.660362][ T5975] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  163.677816][ T5975] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.713899][ T5975] usb 8-1: Product: syz
[  163.718108][ T5975] usb 8-1: Manufacturer: syz
[  163.722713][ T5975] usb 8-1: SerialNumber: syz
[  163.737117][ T7144] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  163.767794][ T5975] usb 8-1: config 0 descriptor??
[  163.778183][ T5975] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  164.005729][ T5975] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  164.058566][ T5975] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  164.218477][    C1] quatech-serial ttyUSB0: qt2_process_read_urb - port change to invalid port: 14
[  164.316108][   T30] audit: type=1326 audit(1751274967.620:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7583 comm="syz.5.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63ceb8e929 code=0x7ffc0000
[  164.328246][ T7584] dvmrp1: entered allmulticast mode
[  164.372677][ T7586] dvmrp1: left allmulticast mode
[  164.403814][   T30] audit: type=1326 audit(1751274967.650:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7583 comm="syz.5.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63ceb8e929 code=0x7ffc0000
[  164.428783][    C1] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71
[  164.471007][ T7581] loop6: detected capacity change from 0 to 4096
[  164.474787][   T10] usb 8-1: USB disconnect, device number 4
[  164.477734][   T30] audit: type=1326 audit(1751274967.650:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7583 comm="syz.5.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f63ceb8e929 code=0x7ffc0000
[  164.505141][   T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  164.535526][   T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  164.551331][   T10] quatech2 8-1:0.51: device disconnected
[  164.561456][   T30] audit: type=1326 audit(1751274967.650:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7583 comm="syz.5.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63ceb8e929 code=0x7ffc0000
[  164.608060][   T30] audit: type=1326 audit(1751274967.650:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7583 comm="syz.5.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f63ceb8e929 code=0x7ffc0000
[  164.683782][   T30] audit: type=1326 audit(1751274967.650:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7583 comm="syz.5.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63ceb8e929 code=0x7ffc0000
[  164.756861][   T30] audit: type=1326 audit(1751274967.650:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7583 comm="syz.5.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f63ceb858e7 code=0x7ffc0000
[  164.813897][   T30] audit: type=1326 audit(1751274967.650:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7583 comm="syz.5.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f63ceb2ab19 code=0x7ffc0000
[  164.863736][   T30] audit: type=1326 audit(1751274967.650:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7583 comm="syz.5.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f63ceb8e929 code=0x7ffc0000
[  164.923836][   T30] audit: type=1326 audit(1751274967.650:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7583 comm="syz.5.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f63ceb858e7 code=0x7ffc0000
[  165.109464][ T7603] loop7: detected capacity change from 0 to 512
[  165.129855][ T7603] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  165.192861][ T7603] EXT4-fs (loop7): 1 truncate cleaned up
[  165.205728][ T7603] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.278567][ T7588] loop5: detected capacity change from 0 to 32768
[  165.342010][ T7588] JBD2: Ignoring recovery information on journal
[  165.464554][ T7615] capability: warning: `syz.3.594' uses 32-bit capabilities (legacy support in use)
[  165.495032][ T7588] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  165.666038][ T6482] ocfs2: Unmounting device (7,5) on (node local)
[  165.818771][ T7167] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.091297][ T7631] loop5: detected capacity change from 0 to 256
[  166.122691][ T7631] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  166.153654][ T7631] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512
[  166.190920][ T7631] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  166.230637][ T7631] UDF-fs: Scanning with blocksize 512 failed
[  166.250150][ T7631] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  166.270925][ T7631] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  166.360258][ T7619] loop1: detected capacity change from 0 to 32768
[  166.374998][ T7619] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.595 (7619)
[  166.423247][ T7619] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  166.449462][ T7619] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  166.468546][ T7619] BTRFS info (device loop1): using free-space-tree
[  166.870600][ T5847] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  167.295786][ T7640] loop3: detected capacity change from 0 to 32768
[  167.363258][ T7638] loop6: detected capacity change from 0 to 32768
[  167.390526][ T7640] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  167.413437][ T7678] netlink: 104 bytes leftover after parsing attributes in process `syz.7.616'.
[  167.444249][ T7638] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  167.453030][ T7638] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  167.468049][ T7683] loop1: detected capacity change from 0 to 512
[  167.477853][ T7683] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  167.518936][ T7638] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[  167.521142][ T7683] EXT4-fs (loop1): 1 truncate cleaned up
[  167.535702][ T7640] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  167.550939][ T7683] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.573435][ T5907] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  167.581062][ T5907] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  167.734783][ T5836] ocfs2: Unmounting device (7,3) on (node local)
[  167.972230][ T5907] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 391ms
[  168.024208][ T5907] gfs2: fsid=syz:syz.0: jid=0: Done
[  168.031161][ T7638] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  168.167264][ T7692] loop5: detected capacity change from 0 to 512
[  168.184780][ T5847] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.195120][ T7692] EXT4-fs: Ignoring removed nomblk_io_submit option
[  168.210666][ T7692] EXT4-fs: Ignoring removed nomblk_io_submit option
[  168.246512][ T7692] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  168.271740][ T7638] gfs2: fsid=syz:syz.0: found 1 quota changes
[  168.301261][ T7694] loop3: detected capacity change from 0 to 256
[  168.327503][ T7692] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  168.354236][ T7692] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2
[  168.373264][ T7692] EXT4-fs (loop5): 1 truncate cleaned up
[  168.381427][ T7692] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  168.439625][ T7694] FAT-fs (loop3): Directory bread(block 64) failed
[  168.451226][ T7694] FAT-fs (loop3): Directory bread(block 65) failed
[  168.468424][ T7694] FAT-fs (loop3): Directory bread(block 66) failed
[  168.486360][ T7694] FAT-fs (loop3): Directory bread(block 67) failed
[  168.493381][ T7694] FAT-fs (loop3): Directory bread(block 68) failed
[  168.520282][ T7694] FAT-fs (loop3): Directory bread(block 69) failed
[  168.528288][ T7694] FAT-fs (loop3): Directory bread(block 70) failed
[  168.535910][ T7694] FAT-fs (loop3): Directory bread(block 71) failed
[  168.551807][ T7694] FAT-fs (loop3): Directory bread(block 72) failed
[  168.572455][ T7692] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  168.609711][ T7694] FAT-fs (loop3): Directory bread(block 73) failed
[  168.634717][ T7692] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  168.672373][ T7688] loop7: detected capacity change from 0 to 32768
[  168.716405][ T7688] (syz.7.617,7688,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  168.795489][ T7688] (syz.7.617,7688,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  168.815676][ T7701] syz.3.619: attempt to access beyond end of device
[  168.815676][ T7701] loop3: rw=2051, sector=1224, nr_sectors = 608 limit=256
[  168.852438][ T6482] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.864935][ T7701] syz.3.619: attempt to access beyond end of device
[  168.864935][ T7701] loop3: rw=2051, sector=1864, nr_sectors = 31936 limit=256
[  168.899266][ T7688] JBD2: Ignoring recovery information on journal
[  169.048303][ T7688] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  169.165235][ T7688] ocfs2: Unmounting device (7,7) on (node local)
[  169.176403][ T7711] loop3: detected capacity change from 0 to 16
[  169.215819][ T7711] erofs (device loop3): mounted with root inode @ nid 36.
[  169.251688][ T7711] erofs (device loop3): big pcluster head1/2 of compact indexes should be consistent for nid 36
[  169.303916][ T7711] erofs (device loop3): big pcluster head1/2 of compact indexes should be consistent for nid 36
[  169.379166][ T7711] erofs (device loop3): read error -117 @ 0 of nid 36
[  169.398911][ T7714] erofs (device loop3): big pcluster head1/2 of compact indexes should be consistent for nid 36
[  169.411113][ T7703] loop1: detected capacity change from 0 to 32768
[  169.431088][ T7711] erofs (device loop3): failed to readdir of logical block 0 of nid 36
[  169.442981][ T7703] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.624 (7703)
[  169.483916][ T7714] erofs (device loop3): big pcluster head1/2 of compact indexes should be consistent for nid 36
[  169.507572][ T7714] erofs (device loop3): read error -117 @ 72 of nid 36
[  169.533941][ T7703] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  169.566197][ T7716] loop6: detected capacity change from 0 to 4096
[  169.570438][ T7703] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  169.593816][ T7703] BTRFS info (device loop1): disk space caching is enabled
[  169.644331][ T7703] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  169.699986][   T30] kauditd_printk_skb: 4 callbacks suppressed
[  169.700005][   T30] audit: type=1800 audit(1751274973.000:118): pid=7716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.628" name="file2" dev="loop6" ino=31 res=0 errno=0
[  169.730663][ T7720] loop7: detected capacity change from 0 to 4096
[  169.741374][ T7720] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024)
[  169.754158][ T7720] NILFS (loop7): mounting unchecked fs
[  169.855799][ T7720] NILFS (loop7): recovery complete
[  169.891407][ T7740] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  169.892038][ T7703] BTRFS info (device loop1): rebuilding free space tree
[  169.992481][ T7703] BTRFS info (device loop1): disabling free space tree
[  170.014100][ T7703] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  170.043931][ T7703] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  170.239497][ T7748] loop3: detected capacity change from 0 to 512
[  170.277481][ T7748] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  170.329596][ T7728] loop5: detected capacity change from 0 to 32768
[  170.329920][ T7748] EXT4-fs (loop3): 1 truncate cleaned up
[  170.337369][ T7728] XFS: ikeep mount option is deprecated.
[  170.352111][ T7748] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  170.389821][ T7728] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  170.390300][ T5847] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  170.508520][ T5836] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.561243][ T7728] XFS (loop5): Ending clean mount
[  170.569129][ T7728] XFS (loop5): Quotacheck needed: Please wait.
[  170.646875][ T7728] XFS (loop5): Quotacheck: Done.
[  170.833666][ T7746] loop6: detected capacity change from 0 to 32768
[  170.908478][ T6482] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  171.025775][ T7777] loop8: detected capacity change from 0 to 1999
[  171.065242][ T7746] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  171.065270][ T7746]   allowing incompatible features above 0.0: (unknown version)
[  171.065284][ T7746]   features: atomic_nlink
[  171.088779][ T7777]  loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9
[  171.088925][ T7777] loop8: p1 start 3356892688 is beyond EOD, truncated
[  171.088951][ T7777] loop8: p2 start 665478715 is beyond EOD, truncated
[  171.088971][ T7777] loop8: p3 start 146145280 is beyond EOD, truncated
[  171.088992][ T7777] loop8: p4 start 725935215 is beyond EOD, truncated
[  171.089011][ T7777] loop8: p5 start 3034093479 is beyond EOD, truncated
[  171.089053][ T7777] loop8: p6 start 1956355948 is beyond EOD, truncated
[  171.089073][ T7777] loop8: p7 start 3633825439 is beyond EOD, truncated
[  171.089107][ T7777] loop8: p8 start 70004131 is beyond EOD, truncated
[  171.089127][ T7777] loop8: p9 start 650333989 is beyond EOD, truncated
[  171.173458][ T7779] loop3: detected capacity change from 0 to 256
[  171.211860][ T7779] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  171.673910][ T7746] bcachefs (loop6): Using encoding defined by superblock: utf8-12.1.0
[  171.682239][ T7746] bcachefs (loop6): initializing new filesystem
[  171.731637][ T7746] bcachefs (loop6): going read-write
[  171.789593][ T7746] bcachefs (loop6): marking superblocks
[  171.834071][ T7793] loop7: detected capacity change from 0 to 256
[  171.836780][ T7746] bcachefs (loop6): initializing freespace
[  171.873169][ T7746] bcachefs (loop6): done initializing freespace
[  171.908411][ T7746] bcachefs (loop6): reading snapshots table
[  171.914711][ T7746] bcachefs (loop6): reading snapshots done
[  171.945787][ T7793] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d)
[  171.989971][ T7746] bcachefs (loop6): done starting filesystem
[  172.001289][ T7793] exFAT-fs (loop7): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  172.011250][ T7797] loop3: detected capacity change from 0 to 2048
[  172.062434][ T7793] exFAT-fs (loop7): valid_size(150994954) is greater than size(10)
[  172.078132][   T30] audit: type=1800 audit(1751274975.380:119): pid=7793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.648" name="file1" dev="loop7" ino=1048627 res=0 errno=0
[  172.104467][ T7797] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  172.112161][ T7797] UDF-fs: Scanning with blocksize 512 failed
[  172.145753][ T5975] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  172.149338][   T30] audit: type=1800 audit(1751274975.450:120): pid=7746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.634" name="file1" dev="loop6" ino=4098 res=0 errno=0
[  172.208647][ T7797] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  172.325137][ T5975] usb 2-1: Using ep0 maxpacket: 16
[  172.342286][ T5975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  172.370575][ T5975] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  172.413429][ T5975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.452344][ T7784] loop5: detected capacity change from 0 to 32768
[  172.471902][ T5975] usb 2-1: config 0 descriptor??
[  172.513857][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  172.724330][ T7144] bcachefs (loop6): shutting down
[  172.732803][ T7144] bcachefs (loop6): going read-only
[  172.753162][ T7144] bcachefs (loop6): finished waiting for writes to stop
[  172.762265][ T7144] bcachefs (loop6): flushing journal and stopping allocators, journal seq 3
[  172.788334][ T7809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.655'.
[  172.842801][ T7144] bcachefs (loop6): flushing journal and stopping allocators complete, journal seq 4
[  172.882721][ T7813] loop3: detected capacity change from 0 to 128
[  172.889456][ T7144] bcachefs (loop6): clean shutdown complete, journal seq 5
[  172.890334][ T7813] EXT4-fs: Ignoring removed nobh option
[  172.903013][ T7144] bcachefs (loop6): marking filesystem clean
[  172.909175][ T5907] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  172.909888][ T5975] mcp2221 0003:04D8:00DD.0004: item fetching failed at offset 3/5
[  172.926106][ T5975] mcp2221 0003:04D8:00DD.0004: can't parse reports
[  172.932742][ T5975] mcp2221 0003:04D8:00DD.0004: probe with driver mcp2221 failed with error -22
[  172.954559][ T7813] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  173.001212][ T7813] ext4 filesystem being mounted at /145/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  173.019882][ T7144] bcachefs (loop6): shutdown complete
[  173.031603][ T7817] loop5: detected capacity change from 0 to 2048
[  173.067830][ T7817] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  173.101720][   T30] audit: type=1800 audit(1751274976.400:121): pid=7817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.658" name="file1" dev="loop5" ino=1415 res=0 errno=0
[  173.126536][ T5907] usb 8-1: Using ep0 maxpacket: 32
[  173.128620][ T5975] usb 2-1: USB disconnect, device number 6
[  173.134151][ T5907] usb 8-1: config 0 has an invalid interface number: 35 but max is 0
[  173.152176][ T5836] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  173.167150][ T5907] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  173.177371][ T5907] usb 8-1: config 0 has no interface number 0
[  173.183486][ T5907] usb 8-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  173.198701][ T5907] usb 8-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=a2.8f
[  173.208213][ T5907] usb 8-1: New USB device strings: Mfr=28, Product=3, SerialNumber=0
[  173.216379][ T5907] usb 8-1: Product: syz
[  173.220577][ T5907] usb 8-1: Manufacturer: syz
[  173.229253][ T5907] usb 8-1: config 0 descriptor??
[  173.257218][ T5907] radio-si470x 8-1:0.35: could not find interrupt in endpoint
[  173.286816][ T5907] radio-si470x 8-1:0.35: probe with driver radio-si470x failed with error -5
[  173.391256][ T7821] mkiss: ax0: crc mode is auto.
[  173.482483][ T5907] radio-raremono 8-1:0.35: Thanko's Raremono connected: (10C4:818A)
[  173.709289][ T5907] radio-raremono 8-1:0.35: V4L2 device registered as radio48
[  173.932038][ T5881] usb 8-1: USB disconnect, device number 5
[  173.956240][ T5881] radio-raremono 8-1:0.35: Thanko's Raremono disconnected
[  174.475662][ T7830] loop1: detected capacity change from 0 to 32768
[  174.953108][ T7835] loop3: detected capacity change from 0 to 32768
[  175.029953][ T7830] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  175.029984][ T7830]   allowing incompatible features above 0.0: (unknown version)
[  175.029997][ T7830]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  175.152698][ T7833] loop5: detected capacity change from 0 to 32768
[  175.162970][ T7830] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  175.171883][ T7830] bcachefs (loop1): initializing new filesystem
[  175.189355][ T7830] bcachefs (loop1): going read-write
[  175.209533][ T7833] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  175.228227][ T7830] bcachefs (loop1): marking superblocks
[  175.244700][ T7833] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  175.273199][ T7833] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[  175.318067][ T5881] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  175.325857][ T7835] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  175.325887][ T7835]   allowing incompatible features above 0.0: (unknown version)
[  175.325901][ T7835]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  175.326649][ T5881] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  175.393792][ T7835] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  175.408118][ T7830] bcachefs (loop1): initializing freespace
[  175.426687][ T7830] bcachefs (loop1): done initializing freespace
[  175.433852][ T7835] bcachefs (loop3): initializing new filesystem
[  175.452376][ T7830] bcachefs (loop1): reading snapshots table
[  175.468716][ T7830] bcachefs (loop1): reading snapshots done
[  175.472079][ T7835] bcachefs (loop3): going read-write
[  175.509362][ T7835] bcachefs (loop3): marking superblocks
[  175.541084][ T7835] bcachefs (loop3): initializing freespace
[  175.592066][ T7835] bcachefs (loop3): done initializing freespace
[  175.607487][ T7840] loop7: detected capacity change from 0 to 40427
[  175.625816][ T7830] bcachefs (loop1): done starting filesystem
[  175.636399][ T7840] F2FS-fs (loop7): build fault injection type: 0x7
[  175.643628][ T7835] bcachefs (loop3): reading snapshots table
[  175.656346][ T7840] F2FS-fs (loop7): invalid crc value
[  175.660792][ T7835] bcachefs (loop3): reading snapshots done
[  175.662530][ T5881] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 335ms
[  175.684493][ T5881] gfs2: fsid=syz:syz.0: jid=0: Done
[  175.698273][ T7833] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  175.736063][ T7835] bcachefs (loop3): done starting filesystem
[  175.832700][ T5836] bcachefs (loop3): shutting down
[  175.838420][ T5836] bcachefs (loop3): going read-only
[  175.843751][ T5836] bcachefs (loop3): finished waiting for writes to stop
[  175.896481][ T5836] bcachefs (loop3): flushing journal and stopping allocators, journal seq 3
[  175.923334][ T7840] F2FS-fs (loop7): Start checkpoint disabled!
[  175.932825][ T5847] bcachefs (loop1): shutting down
[  175.952465][ T5847] bcachefs (loop1): going read-only
[  175.982166][ T7840] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[  175.991663][ T7833] gfs2: fsid=syz:syz.0: found 1 quota changes
[  176.006394][ T5847] bcachefs (loop1): finished waiting for writes to stop
[  176.036826][ T5847] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3
[  176.066191][ T5836] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3
[  176.088990][ T5836] bcachefs (loop3): clean shutdown complete, journal seq 4
[  176.097362][ T5836] bcachefs (loop3): marking filesystem clean
[  176.124086][ T5847] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3
[  176.140458][ T5836] bcachefs (loop3): shutdown complete
[  176.172953][ T5847] bcachefs (loop1): clean shutdown complete, journal seq 4
[  176.182045][ T5847] bcachefs (loop1): marking filesystem clean
[  176.289283][ T5847] bcachefs (loop1): shutdown complete
[  176.366156][ T1337] kworker/u8:7: attempt to access beyond end of device
[  176.366156][ T1337] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  176.423501][ T1337] CPU: 0 UID: 0 PID: 1337 Comm: kworker/u8:7 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) 
[  176.423547][ T1337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  176.423584][ T1337] Workqueue: writeback wb_workfn (flush-7:7)
[  176.423618][ T1337] Call Trace:
[  176.423627][ T1337]  <TASK>
[  176.423636][ T1337]  dump_stack_lvl+0x189/0x250
[  176.423679][ T1337]  ? __pfx_dump_stack_lvl+0x10/0x10
[  176.423707][ T1337]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  176.423737][ T1337]  ? __pfx_queue_work_on+0x10/0x10
[  176.423767][ T1337]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  176.423797][ T1337]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  176.423826][ T1337]  ? f2fs_hw_is_readonly+0x39b/0x470
[  176.423859][ T1337]  f2fs_handle_critical_error+0x37c/0x540
[  176.423892][ T1337]  f2fs_write_end_io+0x495/0x810
[  176.423919][ T1337]  ? blkg_put+0x22/0x240
[  176.423960][ T1337]  __submit_merged_bio+0x27a/0x6a0
[  176.423993][ T1337]  __submit_merged_write_cond+0x255/0x530
[  176.424028][ T1337]  f2fs_write_data_pages+0x261d/0x3000
[  176.424055][ T1337]  ? wg_socket_send_skb_to_peer+0xd1/0x1d0
[  176.424079][ T1337]  ? wg_packet_handshake_send_worker+0x1db/0x320
[  176.424100][ T1337]  ? process_scheduled_works+0xae1/0x17b0
[  176.424162][ T1337]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  176.424243][ T1337]  ? __pfx_kfree_skb_list_reason+0x10/0x10
[  176.424266][ T1337]  ? __lock_acquire+0xab9/0xd20
[  176.424310][ T1337]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  176.424345][ T1337]  ? __dev_queue_xmit+0x27e/0x3a70
[  176.424380][ T1337]  ? __dev_queue_xmit+0x27e/0x3a70
[  176.424408][ T1337]  ? __dev_queue_xmit+0x1cd7/0x3a70
[  176.424451][ T1337]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  176.424492][ T1337]  do_writepages+0x32e/0x550
[  176.424528][ T1337]  ? reacquire_held_locks+0x127/0x1d0
[  176.424555][ T1337]  ? writeback_sb_inodes+0x384/0x1010
[  176.424592][ T1337]  __writeback_single_inode+0x145/0xff0
[  176.424622][ T1337]  ? do_raw_spin_unlock+0x122/0x240
[  176.424647][ T1337]  writeback_sb_inodes+0x6c7/0x1010
[  176.424704][ T1337]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  176.424778][ T1337]  ? rcu_is_watching+0x15/0xb0
[  176.424815][ T1337]  wb_writeback+0x43b/0xaf0
[  176.424852][ T1337]  ? queue_io+0x3d1/0x590
[  176.424894][ T1337]  ? __pfx_wb_writeback+0x10/0x10
[  176.424929][ T1337]  ? _raw_spin_unlock_irq+0x23/0x50
[  176.424960][ T1337]  wb_workfn+0x409/0xef0
[  176.424998][ T1337]  ? __pfx_wb_workfn+0x10/0x10
[  176.425025][ T1337]  ? __lock_acquire+0xab9/0xd20
[  176.425058][ T1337]  ? process_scheduled_works+0x9ef/0x17b0
[  176.425089][ T1337]  ? _raw_spin_unlock_irq+0x23/0x50
[  176.425114][ T1337]  ? process_scheduled_works+0x9ef/0x17b0
[  176.425137][ T1337]  ? process_scheduled_works+0x9ef/0x17b0
[  176.425163][ T1337]  process_scheduled_works+0xae1/0x17b0
[  176.425218][ T1337]  ? __pfx_process_scheduled_works+0x10/0x10
[  176.425283][ T1337]  worker_thread+0x8a0/0xda0
[  176.425315][ T1337]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  176.425359][ T1337]  ? __kthread_parkme+0x7b/0x200
[  176.425401][ T1337]  kthread+0x70e/0x8a0
[  176.425424][ T1337]  ? __pfx_worker_thread+0x10/0x10
[  176.425452][ T1337]  ? __pfx_kthread+0x10/0x10
[  176.425474][ T1337]  ? _raw_spin_unlock_irq+0x23/0x50
[  176.425502][ T1337]  ? lockdep_hardirqs_on+0x9c/0x150
[  176.425530][ T1337]  ? __pfx_kthread+0x10/0x10
[  176.425552][ T1337]  ret_from_fork+0x3fc/0x770
[  176.425582][ T1337]  ? __pfx_ret_from_fork+0x10/0x10
[  176.425616][ T1337]  ? __switch_to_asm+0x39/0x70
[  176.425635][ T1337]  ? __switch_to_asm+0x33/0x70
[  176.425654][ T1337]  ? __pfx_kthread+0x10/0x10
[  176.425675][ T1337]  ret_from_fork_asm+0x1a/0x30
[  176.425715][ T1337]  </TASK>
[  176.828174][ T1337] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  176.879005][ T7878] loop6: detected capacity change from 0 to 32768
[  176.904470][ T7878] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.674 (7878)
[  176.964712][ T7878] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  176.984643][ T7878] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm
[  176.993201][ T7878] BTRFS info (device loop6): disk space caching is enabled
[  177.041108][ T7878] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  177.108836][ T7878] BTRFS info (device loop6): rebuilding free space tree
[  177.132040][ T7878] BTRFS info (device loop6): disabling free space tree
[  177.158620][ T7878] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  177.172970][ T7878] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  177.347524][ T7898] netlink: 8 bytes leftover after parsing attributes in process `syz.5.677'.
[  177.494754][ T7144] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  177.519539][ T7900] netlink: 104 bytes leftover after parsing attributes in process `syz.5.678'.
[  178.072219][ T7918] loop6: detected capacity change from 0 to 64
[  178.102441][ T7918] hfs: request for non-existent node 327680 in B*Tree
[  178.140459][ T7918] hfs: request for non-existent node 327680 in B*Tree
[  178.156079][ T7918] hfs: request for non-existent node 327680 in B*Tree
[  178.193766][ T7918] hfs: request for non-existent node 327680 in B*Tree
[  178.212591][ T7922] hfs: request for non-existent node 327680 in B*Tree
[  178.237747][ T7922] hfs: request for non-existent node 327680 in B*Tree
[  178.345726][ T7926] netlink: 'syz.7.686': attribute type 1 has an invalid length.
[  178.347588][ T1325] hfs: request for non-existent node 327680 in B*Tree
[  178.385937][ T1325] hfs: request for non-existent node 327680 in B*Tree
[  178.461584][ T7930] loop3: detected capacity change from 0 to 2048
[  178.514088][ T7933] loop5: detected capacity change from 0 to 512
[  178.523041][ T7933] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  178.562346][ T7934] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3)
[  178.569085][ T7934] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  178.586680][ T7930] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  178.591609][ T7933] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.691: bg 0: block 384: padding at end of block bitmap is not set
[  178.606250][ T7934] vhci_hcd vhci_hcd.0: Device attached
[  178.621920][ T7930] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  178.653899][ T7933] EXT4-fs (loop5): Remounting filesystem read-only
[  178.673245][ T7933] EXT4-fs (loop5): 1 truncate cleaned up
[  178.696342][ T7933] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  178.823520][ T6482] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.827509][ T5836] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.844007][   T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  178.851612][ T5907] usb 45-1: new low-speed USB device number 2 using vhci_hcd
[  179.015398][   T10] usb 7-1: config 0 has no interfaces?
[  179.020956][   T10] usb 7-1: New USB device found, idVendor=0de5, idProduct=0056, bcdDevice= 5.b5
[  179.033988][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.054880][   T10] usb 7-1: config 0 descriptor??
[  179.099921][ T7956] loop1: detected capacity change from 0 to 4096
[  179.134453][ T7953] loop3: detected capacity change from 0 to 4096
[  179.173137][ T7953] ntfs3(loop3): ino=1a, mi_enum_attr
[  179.184591][ T7953] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  179.218528][   T30] audit: type=1800 audit(1751274982.520:122): pid=7956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.697" name="file1" dev="loop1" ino=33 res=0 errno=0
[  179.267042][ T7937] usb 45-1: recv xbuf, 0
[  179.267893][   T10] usb 7-1: USB disconnect, device number 3
[  179.285808][ T5881] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  179.295373][ T3469] vhci_hcd: stop threads
[  179.300882][ T3469] vhci_hcd: release socket
[  179.320499][ T3469] vhci_hcd: disconnect device
[  179.358755][ T5907] vhci_hcd: vhci_device speed not set
[  179.457593][ T5881] usb 8-1: Using ep0 maxpacket: 32
[  179.488501][ T5881] usb 8-1: config 0 has an invalid interface number: 126 but max is 0
[  179.513861][ T5881] usb 8-1: config 0 has no interface number 0
[  179.532077][ T5881] usb 8-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023
[  179.540018][ T7955] loop5: detected capacity change from 0 to 32768
[  179.547521][ T5881] usb 8-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8
[  179.560619][ T5881] usb 8-1: config 0 interface 126 has no altsetting 0
[  179.585854][ T7955] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  179.590936][ T5881] usb 8-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c
[  179.617984][ T5881] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.638644][ T5881] usb 8-1: Product: syz
[  179.642855][ T5881] usb 8-1: Manufacturer: syz
[  179.653871][ T5881] usb 8-1: SerialNumber: syz
[  179.659568][ T7955] XFS (loop5): Ending clean mount
[  179.674556][ T5881] usb 8-1: config 0 descriptor??
[  179.682028][ T7950] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  179.689959][ T7950] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  179.799009][ T6482] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  180.135942][ T5881] ir_usb 8-1:0.126: IR Dongle converter detected
[  180.209768][   T30] audit: type=1326 audit(1751274983.510:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7985 comm="syz.3.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686058e929 code=0x7ffc0000
[  180.265153][   T30] audit: type=1326 audit(1751274983.510:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7985 comm="syz.3.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686058e929 code=0x7ffc0000
[  180.356021][   T30] audit: type=1326 audit(1751274983.550:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7985 comm="syz.3.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f686058e929 code=0x7ffc0000
[  180.378670][ T5881] usb 8-1: IR Dongle converter now attached to ttyUSB0
[  180.410013][   T30] audit: type=1326 audit(1751274983.550:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7985 comm="syz.3.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686058e929 code=0x7ffc0000
[  180.488010][   T30] audit: type=1326 audit(1751274983.550:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7985 comm="syz.3.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686058e929 code=0x7ffc0000
[  180.543225][   T30] audit: type=1326 audit(1751274983.550:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7985 comm="syz.3.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f686058e929 code=0x7ffc0000
[  180.601714][ T5881] usb 8-1: USB disconnect, device number 6
[  180.629446][ T5881] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0
[  180.648242][ T8002] loop5: detected capacity change from 0 to 128
[  180.653838][   T30] audit: type=1326 audit(1751274983.550:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7985 comm="syz.3.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686058e929 code=0x7ffc0000
[  180.674119][ T8002] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  180.677456][ T5881] ir_usb 8-1:0.126: device disconnected
[  180.726051][   T30] audit: type=1326 audit(1751274983.550:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7985 comm="syz.3.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686058e929 code=0x7ffc0000
[  180.727312][ T8002] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  180.787409][   T30] audit: type=1326 audit(1751274983.560:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7985 comm="syz.3.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f686058e929 code=0x7ffc0000
[  181.018417][ T8009] loop6: detected capacity change from 0 to 512
[  181.028393][ T8009] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  181.049011][ T8009] EXT4-fs (loop6): 1 truncate cleaned up
[  181.061588][ T8009] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  181.068995][ T7984] loop1: detected capacity change from 0 to 32768
[  181.100373][ T8009] EXT4-fs error (device loop6): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.6.719: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  181.128199][ T8009] EXT4-fs (loop6): Remounting filesystem read-only
[  181.137190][ T8009] EXT4-fs warning (device loop6): ext4_rename_delete:3726: inode #2: comm syz.6.719: Deleting old file: nlink 4, error=-117
[  181.162228][ T7984] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  181.188924][ T8009] EXT4-fs (loop6): shut down requested (2)
[  181.291610][ T7144] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.308267][ T7984] XFS (loop1): Ending clean mount
[  181.334291][ T7984] XFS (loop1): Quotacheck needed: Please wait.
[  181.390849][ T7984] XFS (loop1): Quotacheck: Done.
[  181.421046][ T8029] netlink: 24 bytes leftover after parsing attributes in process `syz.6.723'.
[  181.458656][ T8029] netlink: 24 bytes leftover after parsing attributes in process `syz.6.723'.
[  181.476091][ T5881] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  181.515742][ T5847] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  181.634393][ T5881] usb 4-1: Using ep0 maxpacket: 16
[  181.647664][ T5881] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  181.678266][ T5881] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  181.706876][ T5881] usb 4-1: config 0 interface 0 has no altsetting 0
[  181.721489][ T5881] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[  181.741149][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.749299][ T8037] bridge0: port 3(ipvlan0) entered blocking state
[  181.749430][ T8037] bridge0: port 3(ipvlan0) entered disabled state
[  181.749714][ T8037] ipvlan0: entered allmulticast mode
[  181.749730][ T8037] veth0_vlan: entered allmulticast mode
[  181.752298][ T8037] ipvlan0: left allmulticast mode
[  181.790268][ T5881] usb 4-1: config 0 descriptor??
[  181.796006][ T8037] veth0_vlan: left allmulticast mode
[  181.995468][ T8043] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.996716][ T8045] loop1: detected capacity change from 0 to 256
[  182.025659][ T8045] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x09066d1f, utbl_chksum : 0xe619d30d)
[  182.084469][ T8045] exFAT-fs (loop1): error, data size is invalid(150994954)
[  182.092160][ T8045] exFAT-fs (loop1): Filesystem has been set read-only
[  182.253451][ T5881] cougar 0003:060B:500A.0005: unexpected long global item
[  182.288113][ T8049] loop1: detected capacity change from 0 to 256
[  182.292862][ T5881] cougar 0003:060B:500A.0005: parse failed
[  182.301668][ T5881] cougar 0003:060B:500A.0005: probe with driver cougar failed with error -22
[  182.308028][ T8049] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  182.348911][ T8039] loop6: detected capacity change from 0 to 32768
[  182.350305][ T8049] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  182.390690][ T8049] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  182.437784][ T5881] usb 4-1: USB disconnect, device number 7
[  182.448645][ T8039] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  182.591631][ T7144] (syz-executor,7144,0):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 72
[  182.625326][ T7144] ocfs2: Unmounting device (7,6) on (node local)
[  183.003391][ T8051] loop7: detected capacity change from 0 to 32768
[  183.038664][ T8051] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.735 (8051)
[  183.115739][ T8051] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  183.135321][ T8051] BTRFS info (device loop7): using crc32c (crc32c-lib) checksum algorithm
[  183.164326][ T8051] BTRFS info (device loop7): using free-space-tree
[  183.323937][ T8051] BTRFS info (device loop7): rebuilding free space tree
[  183.498718][ T8058] loop1: detected capacity change from 0 to 32768
[  183.546845][ T8058] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  183.573269][ T8098] netlink: 24 bytes leftover after parsing attributes in process `syz.6.744'.
[  183.653913][   T10] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  183.706536][ T8058] XFS (loop1): Ending clean mount
[  183.744220][ T8058] XFS (loop1): Quotacheck needed: Please wait.
[  183.757916][ T8086] loop5: detected capacity change from 0 to 32768
[  183.803546][ T7167] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  183.855614][   T10] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  183.857165][ T8086] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  183.865404][   T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64
[  183.878883][ T8058] XFS (loop1): Quotacheck: Done.
[  183.883621][   T10] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  183.900647][   T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  183.920786][   T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  183.998321][   T10] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  184.030042][ T8058] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  184.030279][   T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64
[  184.093537][   T10] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  184.112527][   T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  184.131948][   T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  184.154335][   T10] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  184.162461][   T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64
[  184.174269][   T10] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  184.239407][   T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  184.245625][ T8086] XFS (loop5): Ending clean mount
[  184.274080][   T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  184.325278][   T10] usb 4-1: string descriptor 0 read error: -22
[  184.331620][   T10] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  184.364945][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.376301][ T8117] loop6: detected capacity change from 0 to 512
[  184.395334][ T8117] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  184.434638][   T10] adutux 4-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  184.489030][ T6482] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  184.502535][ T8117] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.750: invalid block
[  184.553363][ T8117] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.750: invalid indirect mapped block 4294967295 (level 1)
[  184.577197][ T8117] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.750: invalid indirect mapped block 4294967295 (level 1)
[  184.607432][ T8117] EXT4-fs (loop6): 2 truncates cleaned up
[  184.617367][ T8117] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  184.648608][   T10] usb 4-1: USB disconnect, device number 8
[  184.798807][ T7144] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.877544][ T8127] loop1: detected capacity change from 0 to 64
[  185.078493][ T8134] pimreg0: tun_chr_ioctl cmd 1074025677
[  185.085605][ T8134] pimreg0: linktype set to 778
[  185.431134][ T8125] loop7: detected capacity change from 0 to 32768
[  185.445750][ T8125] btrfs: Deprecated parameter 'usebackuproot'
[  185.453814][ T8125] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  185.476187][ T8125] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.752 (8125)
[  185.544012][ T8125] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  185.561473][ T8125] BTRFS info (device loop7): using crc32c (crc32c-lib) checksum algorithm
[  185.593995][ T8125] BTRFS info (device loop7): disk space caching is enabled
[  185.601253][ T8125] BTRFS warning (device loop7): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  185.808050][ T8125] BTRFS info (device loop7): rebuilding free space tree
[  185.826129][ T8168] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  185.894566][ T8125] BTRFS info (device loop7): disabling free space tree
[  185.913832][ T8125] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  185.919548][ T8138] loop6: detected capacity change from 0 to 32768
[  185.931934][ T8125] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  185.988981][ T8138] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  186.184068][ T8138] XFS (loop6): Ending clean mount
[  186.210331][ T8138] XFS (loop6): Quotacheck needed: Please wait.
[  186.291765][ T8138] XFS (loop6): Quotacheck: Done.
[  186.298802][ T8144] loop3: detected capacity change from 0 to 32768
[  186.309294][ T7167] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  186.380549][ T8144] JBD2: Ignoring recovery information on journal
[  186.530469][ T8144] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  186.597655][ T7144] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  186.642473][ T8144] (syz.3.759,8144,1):ocfs2_file_write_iter:2446 ERROR: status = -27
[  186.686548][ T8178] loop5: detected capacity change from 0 to 32768
[  186.698787][ T8192] loop7: detected capacity change from 0 to 512
[  186.714553][ T8192] EXT4-fs: Ignoring removed nomblk_io_submit option
[  186.732637][ T8192] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  186.751624][ T8194] loop1: detected capacity change from 0 to 1024
[  186.788661][ T5836] ocfs2: Unmounting device (7,3) on (node local)
[  186.817114][ T8192] EXT4-fs (loop7): 1 truncate cleaned up
[  186.835767][ T8192] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  186.864471][ T8178] JBD2: Ignoring recovery information on journal
[  186.904185][ T8192] EXT4-fs error (device loop7): ext4_find_extent:903: inode #15: comm syz.7.770: inode has invalid extent depth: 25964
[  186.932069][ T8192] fs-verity (loop7, inode 15): Error -117 getting verity descriptor size
[  186.961992][ T8178] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode.
[  186.989303][ T8194] hfsplus: xattr searching failed
[  187.001838][ T8194] hfsplus: found bad thread record in catalog
[  187.047544][ T7167] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  187.143494][ T1337] hfsplus: found bad thread record in catalog
[  187.151524][ T1337] hfsplus: found bad thread record in catalog
[  187.336447][ T6482] ocfs2: Unmounting device (7,5) on (node local)
[  187.457917][ T8202] loop7: detected capacity change from 0 to 4096
[  187.546901][ T8216] loop6: detected capacity change from 0 to 256
[  187.564255][ T8202] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  187.610021][ T8202] ntfs3(loop7): Failed to load $Extend (-22).
[  187.626508][ T8202] ntfs3(loop7): Failed to initialize $Extend.
[  187.642120][ T8216] FAT-fs (loop6): Directory bread(block 64) failed
[  187.657389][ T8216] FAT-fs (loop6): Directory bread(block 65) failed
[  187.676762][ T8216] FAT-fs (loop6): Directory bread(block 66) failed
[  187.696059][ T8216] FAT-fs (loop6): Directory bread(block 67) failed
[  187.710795][ T8216] FAT-fs (loop6): Directory bread(block 68) failed
[  187.738819][ T8216] FAT-fs (loop6): Directory bread(block 69) failed
[  187.759239][ T8216] FAT-fs (loop6): Directory bread(block 70) failed
[  187.779436][ T8216] FAT-fs (loop6): Directory bread(block 71) failed
[  187.815486][ T8216] FAT-fs (loop6): Directory bread(block 72) failed
[  187.822074][ T8216] FAT-fs (loop6): Directory bread(block 73) failed
[  188.340482][ T8237] loop6: detected capacity change from 0 to 512
[  188.382045][ T8237] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities
[  188.630340][ T8248] netlink: 10 bytes leftover after parsing attributes in process `syz.6.794'.
[  189.228555][ T8271] loop1: detected capacity change from 0 to 4096
[  189.264852][ T8271] ntfs3(loop1): Failed to initialize $Extend/$ObjId.
[  189.481697][ T8284] loop1: detected capacity change from 0 to 512
[  189.521342][ T8284] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  189.578476][ T8284] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  189.636374][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  189.636392][   T30] audit: type=1800 audit(1751274992.940:134): pid=8284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.810" name="file1" dev="loop1" ino=15 res=0 errno=0
[  189.687718][   T30] audit: type=1800 audit(1751274992.940:135): pid=8284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.810" name="file2" dev="loop1" ino=16 res=0 errno=0
[  189.727263][ T5847] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.899327][ T8295] io-wq is not configured for unbound workers
[  190.195207][ T8309] loop3: detected capacity change from 0 to 512
[  190.230237][ T8309] EXT4-fs: Ignoring removed oldalloc option
[  190.280418][ T8309] EXT4-fs (loop3): 1 truncate cleaned up
[  190.298671][ T8309] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  190.433999][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  190.679219][ T5836] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.835172][ T8335] loop3: detected capacity change from 0 to 256
[  190.895854][ T8335] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d)
[  191.005628][ T8340] use of bytesused == 0 is deprecated and will be removed in the future,
[  191.029914][ T8340] use the actual size instead.
[  191.084934][ T8346] loop5: detected capacity change from 0 to 64
[  191.190311][ T8349] loop6: detected capacity change from 0 to 256
[  191.210793][ T8349] exfat: Deprecated parameter 'namecase'
[  191.218579][ T8349] exfat: Deprecated parameter 'namecase'
[  191.259110][ T8349] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  191.308921][ T8352] loop5: detected capacity change from 0 to 256
[  191.352397][ T8352] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d)
[  191.520178][ T8356] loop6: detected capacity change from 0 to 1024
[  191.565858][ T8356] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  191.597424][ T8356] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869)
[  191.627629][ T8356] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  191.660320][ T8356] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #3: comm syz.6.843: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  191.690225][ T8356] EXT4-fs (loop6): no journal found
[  191.696443][ T8356] EXT4-fs (loop6): can't get journal size
[  191.708642][ T8356] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  191.723115][   T11] block nbd0: Possible stuck request ffff888025360000: control (read@0,1024B). Runtime 90 seconds
[  191.735500][   T11] block nbd0: Possible stuck request ffff8880253601c0: control (read@1024,1024B). Runtime 90 seconds
[  191.747090][   T11] block nbd0: Possible stuck request ffff888025360380: control (read@2048,1024B). Runtime 90 seconds
[  191.758174][   T11] block nbd0: Possible stuck request ffff888025360540: control (read@3072,1024B). Runtime 90 seconds
[  191.973366][ T7144] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.329309][ T8366] loop5: detected capacity change from 0 to 32768
[  192.418987][ T8366] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  192.485641][ T8360] loop7: detected capacity change from 0 to 32768
[  192.526338][ T8360] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  192.543370][ T8394] BUG: sleeping function called from invalid context at ./include/linux/sched/mm.h:321
[  192.559468][ T8394] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 8394, name: syz.6.858
[  192.571241][ T8394] preempt_count: 0, expected: 0
[  192.593753][ T8394] RCU nest depth: 1, expected: 0
[  192.618808][ T8360] XFS (loop7): Ending clean mount
[  192.623938][ T8394] 2 locks held by syz.6.858/8394:
[  192.629119][ T8394]  #0: ffffffff8e13bee0 (rcu_read_lock){....}-{1:3}, at: query_vma_setup+0x18/0x110
[  192.643444][ T8394]  #1: ffff888030713e48 (vm_lock){++++}-{0:0}, at: lock_next_vma+0x146/0xdc0
[  192.652481][ T8394] CPU: 1 UID: 0 PID: 8394 Comm: syz.6.858 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) 
[  192.652509][ T8394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  192.652521][ T8394] Call Trace:
[  192.652530][ T8394]  <TASK>
[  192.652537][ T8394]  dump_stack_lvl+0x189/0x250
[  192.652573][ T8394]  ? __pfx_dump_stack_lvl+0x10/0x10
[  192.652607][ T8394]  ? print_lock_name+0xde/0x100
[  192.652632][ T8394]  __might_resched+0x495/0x610
[  192.652667][ T8394]  ? __pfx___might_resched+0x10/0x10
[  192.652704][ T8394]  ? __kmalloc_noprof+0xa3/0x4f0
[  192.652739][ T8394]  __kmalloc_noprof+0xbc/0x4f0
[  192.652768][ T8394]  ? procfs_procmap_ioctl+0x877/0xd10
[  192.652803][ T8394]  procfs_procmap_ioctl+0x877/0xd10
[  192.652842][ T8394]  ? __pfx_procfs_procmap_ioctl+0x10/0x10
[  192.652887][ T8394]  ? __fget_files+0x2a/0x420
[  192.652909][ T8394]  ? __fget_files+0x2a/0x420
[  192.652945][ T8394]  ? __fget_files+0x3a0/0x420
[  192.652964][ T8394]  ? __fget_files+0x2a/0x420
[  192.652999][ T8394]  ? bpf_lsm_file_ioctl+0x9/0x20
[  192.653026][ T8394]  ? __pfx_procfs_procmap_ioctl+0x10/0x10
[  192.653058][ T8394]  __se_sys_ioctl+0xfc/0x170
[  192.653089][ T8394]  do_syscall_64+0xfa/0x3b0
[  192.653108][ T8394]  ? lockdep_hardirqs_on+0x9c/0x150
[  192.653138][ T8394]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.653159][ T8394]  ? clear_bhb_loop+0x60/0xb0
[  192.653184][ T8394]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.653204][ T8394] RIP: 0033:0x7f0f8c98e929
[  192.653223][ T8394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  192.653242][ T8394] RSP: 002b:00007f0f8d826038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  192.653263][ T8394] RAX: ffffffffffffffda RBX: 00007f0f8cbb5fa0 RCX: 00007f0f8c98e929
[  192.653278][ T8394] RDX: 0000200000000180 RSI: 00000000c0686611 RDI: 0000000000000003
[  192.653292][ T8394] RBP: 00007f0f8ca10b39 R08: 0000000000000000 R09: 0000000000000000
[  192.653305][ T8394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  192.653317][ T8394] R13: 0000000000000000 R14: 00007f0f8cbb5fa0 R15: 00007ffce4b2fdc8
[  192.653350][ T8394]  </TASK>
[  192.915476][ T7167] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  192.953042][ T6482] ocfs2: Unmounting device (7,5) on (node local)
[  194.278266][ T1299] ieee802154 phy1 wpan1: encryption failed: -22