last executing test programs:

2m12.873237035s ago: executing program 3 (id=2081):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x800, 0x63)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x80789440, &(0x7f0000000000))

2m12.700301463s ago: executing program 3 (id=2084):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000400)='./file1\x00', 0x200000, &(0x7f0000000740)={[{@jqfmt_vfsv1}, {@min_batch_time={'min_batch_time', 0x3d, 0xc0}}, {@delalloc}, {@orlov}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nouid32}, {@resgid}, {@nomblk_io_submit}, {@sysvgroups}]}, 0xdc, 0x573, &(0x7f0000001140)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x0)
fallocate(r0, 0x0, 0xeffd, 0x5)

2m12.346321102s ago: executing program 3 (id=2089):
pipe(&(0x7f0000000000))
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000a40)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000005000000fc"], 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00')
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

2m11.528574129s ago: executing program 3 (id=2092):
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000027c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="00391791203a241a03f5cb148a64541c05b29b9369cf438a3d6b002ebd4f8ee269b9cd213c0f406dc9f13c76e7d3a8bd6b4bb15d"], 0x5, 0x2d9, &(0x7f0000000200)="$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")
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r1)
syz_open_dev$sndctrl(0x0, 0x1, 0x402000)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map=r3, r2, 0x7}, 0x10)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x13, 0xffffffff)
write$tun(0xffffffffffffffff, 0x0, 0x22)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15)
writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x100081, 0x0, 0x1, 0x0, &(0x7f0000000080))
sendmsg$inet(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780), 0x0, &(0x7f0000000880)=[@ip_retopts={{0x10}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x28}, 0x40004)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], 0x0, 0x0)

2m10.569140825s ago: executing program 3 (id=2099):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000280), 0x40203, 0x0)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0)
dup(0xffffffffffffffff)
syz_usb_connect(0x0, 0x24, &(0x7f0000001080)={{0x12, 0x1, 0x0, 0xff, 0x0, 0x0, 0x40, 0x572, 0xcb01, 0x2665, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xaa, 0x75, 0xb7}}]}}]}}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f)
socket$key(0xf, 0x3, 0x2)
socket(0x2, 0x805, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r1, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r1, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0)

2m9.083748182s ago: executing program 3 (id=2114):
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10)
bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000a40)=ANY=[@ANYBLOB="1d000000a100000002000000000000", @ANYRES32, @ANYBLOB="00000000000000008fac0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000005000000fcffffff"], 0x50)
vmsplice(r0, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x604}], 0x1, 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x13, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94)
ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00')
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x6a, 0x0, 0x0, 0xf7ffff7e, 0x0, 0x0, 0x0, 0xe}, 0x94)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292", 0xc)
r7 = accept4(r6, 0x0, 0x0, 0x800)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

2m8.841458052s ago: executing program 32 (id=2114):
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10)
bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000a40)=ANY=[@ANYBLOB="1d000000a100000002000000000000", @ANYRES32, @ANYBLOB="00000000000000008fac0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000005000000fcffffff"], 0x50)
vmsplice(r0, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x604}], 0x1, 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x13, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94)
ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00')
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x6a, 0x0, 0x0, 0xf7ffff7e, 0x0, 0x0, 0x0, 0xe}, 0x94)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292", 0xc)
r7 = accept4(r6, 0x0, 0x0, 0x800)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

19.78738414s ago: executing program 1 (id=2970):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = syz_usbip_server_init(0x4)
syz_usb_connect(0x1, 0x2d, 0x0, 0x0)
write$usbip_server(r3, &(0x7f0000000040)=@ret_submit={{0x3, 0x1, 0x0, 0x1, 0x8}, 0xfff, 0x0, 0x34, 0x3, 0x1, 0x0, "", [{0x2, 0x5, 0x2, 0x4005961}, {0x1, 0x7fffffff, 0x7, 0x8}, {0x6, 0x8, 0x1, 0x7fffffff}]}, 0x60)
syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@broadcast, @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @empty, @empty, @local}}}}, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="010000000000000000", @ANYRES32], 0x28}}, 0x80)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$nl_route(0x10, 0x3, 0x0)
get_mempolicy(0xffffffffffffffff, 0x0, 0x2000400000043ff, &(0x7f0000ff9000/0x2000)=nil, 0x2)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3282b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x44}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d)
r8 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x200}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)

18.84815485s ago: executing program 0 (id=2974):
lseek(0xffffffffffffffff, 0x2000, 0x0)
syz_io_uring_setup(0x1dc3, &(0x7f0000000280)={0x0, 0x993a, 0x8000, 0x3, 0x17f}, &(0x7f0000000100), 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
sync()
sync()
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020}, 0x2020)

18.626653196s ago: executing program 0 (id=2975):
r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000680), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000006c0)={0x0, 0x18, 0xfa00, {0x5, &(0x7f0000000380)={<r1=>0xffffffffffffffff}, 0x106}}, 0x20)
r2 = epoll_create1(0x80000)
epoll_pwait(r2, 0x0, 0x0, 0xedb, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100))
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3, @loopback, 0x9}, {0xa, 0x0, 0x9, @mcast1}, r1}}, 0x48)

18.336145328s ago: executing program 0 (id=2979):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
pwritev(r0, &(0x7f0000000ac0)=[{0x0}, {&(0x7f0000000140)="b16666cd", 0x4}], 0x2, 0x8000, 0x92)

18.261244068s ago: executing program 0 (id=2980):
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc15, &(0x7f0000001940)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents(r0, 0xfffffffffffffffd, 0x58)

18.085097853s ago: executing program 0 (id=2985):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x2800000, &(0x7f0000000040)=ANY=[], 0xfd, 0x5a7a, &(0x7f0000006680)="$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")
r0 = open(&(0x7f00000003c0)='.\x00', 0x100, 0x97)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
ftruncate(r1, 0x8979)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
syz_open_dev$video4linux(&(0x7f0000000180), 0xfffffffffffff47a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
getdents(r0, &(0x7f0000000400)=""/196, 0xc4)

17.605718996s ago: executing program 0 (id=2989):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r9, 0x0, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x53, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xfffffffffffffffe, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0xfffc, 0x5, 0x1, 0xc}, 0xb, 0x0, 0x80008, 0x5, 0x5f82, 0x6, 0x20, 0xd, 0x8, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0x4, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

16.573335169s ago: executing program 1 (id=3005):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, 0x0, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x24000080)

16.400011577s ago: executing program 1 (id=3009):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
dup(r1)
ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0xffff030c)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
fsopen(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
r4 = syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="02c5eb1f0100030030108a0181441a36ec954bc80a9a0f74ca5302de0e204711e6206db54bd14412d453aa3fa940e00d6628789e1711af082389ad9d16e018e2f0cd63ecf6c3a4b88d248cedfc290c90c2f0f98eebd3f1f905a1cfdaee0a9ffd570587c239f7db43fc1a66eb7963be17216439b932167a1ee0f8f97fd72cb365ae46e89974c4edaa92e2edfb8eb4f4ba6881dfaa54d2a7dd83434eff3d900b0b06393834"], 0x8)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, 0x0, &(0x7f0000000180))
ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc)
r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2)
write$sysctl(r6, &(0x7f0000000580)='1\x00', 0x2)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socket(0x10, 0x803, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')

14.533802104s ago: executing program 2 (id=3020):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4000000, 0x20000001, 0x4, 0x2}, 0x1, r2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0xf8}}]}, 0x90}}, 0x0)

10.753131948s ago: executing program 5 (id=3021):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3})
ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0xffffffffffffffff)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0xee01)

10.318510943s ago: executing program 6 (id=3023):
r0 = socket$alg(0x26, 0x5, 0x0)
socket$inet(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r4 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

10.310699442s ago: executing program 2 (id=3024):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0xffff0018)
r1 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000100)=<r2=>0x0, 0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0)

10.183885557s ago: executing program 5 (id=3025):
syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000340)="13745fc6329d942ed3e2de2c4c5403c37eca6955d9c01f8b223c77babbbf67fe39f4d4b60a549c38fb79a96d42e97b59ddfbfe678b6d9441c73ebdb674d3c4c93ec3924c9a5c949330fe4c00d109c07bc212", 0x52}], 0x1)

8.654248622s ago: executing program 2 (id=3028):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
r1 = dup2(r0, r0)
readv(r1, &(0x7f0000000380)=[{&(0x7f0000000100)=""/244, 0xf4}, {0x0}], 0x2)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5)

8.072487691s ago: executing program 6 (id=3029):
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2, &(0x7f0000000d40)=ANY=[@ANYBLOB="a19c84c7205602b8c131753e017d83e384386df3f95512a2"]}]})
r0 = socket(0x40000000015, 0x5, 0x0)
recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x38, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2001, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0x4, 0xfffffff3, 0x9, 0x80, 0x2, 0x0, 0x7f, 0x6, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000006, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x7c19, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x8, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x7, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x8, 0x4, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x6b4d7043, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

7.607440678s ago: executing program 4 (id=3030):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000a40)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00'], 0x50)
vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{0x0}], 0x1, 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x0, 0x1, 0x0, 0x0, {0x1b}}, 0x14}}, 0x0)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x6a, 0x0, 0x0, 0xf7ffff7e, 0x0, 0x0, 0x0, 0xe}, 0x94)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYRES32=r4], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x20004054)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d00)={r2, 0x0, 0xcf, 0x4b, &(0x7f0000000a80)="0020d3786419374b046cdbc5cdfacf46627dc4896365bda7c54f01fa994b455c6ffbce021c4b9580eba818e4b76ada59ba66f0c210a6d10a2d72cd581dc64353d3326ba03e39b86c45aeef9dba0e2cb8e78fb899e93e48320bf493a13781d13ba8fcf6ee09692cb0833a165df9d06559f95c3d950322ab273dc01ff0833819b0d827eec06d781d9f4f820d57d78e2c7952917fd46f4ef8d4f71af7e5d3c69ba0a97ebecb954175eaeee2b651c829a0a38035169924edb3c4a2404d4ca0a8126ddd08aa629ebc093ea2154d662a809b", &(0x7f0000000900)=""/75, 0x60, 0x0, 0x33, 0xc7, &(0x7f0000000b80)="c12980d8e970f583026800031262aa25be23c4f4be52ffe9dcf85073cf5ab23f730ea1d3daed69b06dcdb74a8bca48c61f933c", &(0x7f0000000c00)="69d35d5a198962ea92117becdccecf1fc6e33ad27741ef991e0b30ae44f5c860ed1d3aa3ba6e6bd5f2d40ba0df250600640dbfdabdabcf0f53ca8dab6cb6fe3606331a4bb097a2109b965b8cc319d35ef994da278361466d6b8fde4ac545aa7ca512c4b284868f786ab95f3562d8ee45fb9af9d0088bf1cd35c0178df639f33a6b75f4cc9eb48e8cb611aaa5fa4fc7c19cdfb8bbad8804ba35e812c057fd9cab31f0ecc45ef59d1bd11011f88f9a1fb8653e90017dc0a61380013ad16818d0618101668f676279", 0x2, 0x0, 0x4}, 0x50)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

7.289432227s ago: executing program 1 (id=3031):
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000400), 0x0, 0x4004801)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0xfffffffa, 0x3}, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={0x0, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[<r4=>0x0], &(0x7f0000000280), 0x1, r3})
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000380)={0x601, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000200), &(0x7f0000000300)=[r4], &(0x7f0000000580)})

5.510371374s ago: executing program 2 (id=3032):
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[])
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000080)=0x80000001, 0x4)
read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, <r1=>0x0, <r2=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x3fffffffffffe, {0x0, 0x200000000, 0x1, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x200000000000, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x80000000, 0x0, 0xd, r2, 0x0, 0x7, 0xa0}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000000200)={0x50, 0x0, r1, {0x7, 0x26, 0x8, 0xfffffffff323ca46, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x2, 0x10001}}, 0x50)
creat(&(0x7f0000000180)='./file0/file0\x00', 0x0)
read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xffffffffffffffda, r3}, 0x10)
umount2(&(0x7f0000000000)='./file0\x00', 0x3)

5.483446731s ago: executing program 5 (id=3033):
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})
setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', &(0x7f00000003c0)=ANY=[], 0x0, 0x1400)

2.251433096s ago: executing program 33 (id=2989):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r9, 0x0, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x53, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xfffffffffffffffe, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0xfffc, 0x5, 0x1, 0xc}, 0xb, 0x0, 0x80008, 0x5, 0x5f82, 0x6, 0x20, 0xd, 0x8, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0x4, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

2.238943576s ago: executing program 6 (id=3035):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f000001f480), 0x2, 0x0)
r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000021c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000004000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000002240)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50)
read$FUSE(r0, &(0x7f0000004940)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r3}, 0x10)
syz_fuse_handle_req(r0, &(0x7f00000070c0)="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", 0x2000, &(0x7f0000006d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006d00)={0x20, 0x0, 0x4, {0x0, 0x4, 0x0, 0x3340}}, 0x0})
ioctl$FS_IOC_RESVSP(r1, 0x80086601, 0x0)

2.237949719s ago: executing program 4 (id=3036):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340))
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988a8fbe8", 0x10}, {&(0x7f0000000440)="9c74dfbf77", 0x5}], 0x2)

2.167265228s ago: executing program 1 (id=3037):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0})
r1 = syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1})
io_uring_enter(r1, 0x37b9, 0xb832, 0x4b, 0x0, 0x0)
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1})

2.09368899s ago: executing program 2 (id=3038):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980"], 0xb0}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x4804)

2.008735867s ago: executing program 5 (id=3039):
r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x18, &(0x7f0000000180)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0})

1.737178746s ago: executing program 6 (id=3040):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="2600000003"], 0x26)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}})

1.736768992s ago: executing program 4 (id=3041):
mount$cgroup(0x0, &(0x7f0000000380)='.\x00', &(0x7f00000001c0), 0x8000, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
close_range(r0, r1, 0x2)

1.723302112s ago: executing program 2 (id=3042):
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x5ec, &(0x7f0000001980)={[{0x61, 0x4e00, "5f7c13391374e96dd5d129d4ae1bbacc8058b88ea3a123b377fb7b0982b2fd964a1699397d3735312181a5d045cf56ce0dad927a9274edf083f0c2989fff1e17adacf3ce97a8af0597400e46e405f05d912a6e5356f3de46b8bbcd4991bdef3641"}, {0xad, 0x4e00, "4c23f2a9eb4cc618985455966a8ab536954d90c97d2fd5b1d97f2326e0edbe04734678424b529d422ab456c046495c6e41d993a064b3793c6cf2de949ca346f358491002c44217b324370b479958bd223be495846dc8e8eb3b6d6fdc596b527db4ca53ac55b8b33f32b1699d8b3f98fc6ebffb766ecd5f9db4c76ec0a2bde67bd61fc5129a900faa2ea729e81f43f449cab72bbe427932f43690da32bf7be4ede976c5e4c274d0ed2152f46942"}, {0x2b, 0x4e00, "939810db73e954e6b99fcea7c557d7818c4b1f69603bb7b8abc99b562c88f3b516a90d189d1030ba3ca315"}, {0x1a9, 0x4e00, "44ad3b2e74bac2f03b2a997ea8924d4b7794a0cd0ddeacd30533dda25f43b4209fe866ecb9344f4ce46e320902ef67a2b850130a088d3c58301b6d04186ddb9e0c6343de4ce1e8691cef0a6c021d29f1f1a3d0dca4c467523c4f0eeafb0587d4806edff4e35755ee89b8c3966c996635bb0b005197d5d74b24f0e3f0542b1aafdaeac602fc0e4cb6831c1715eed2c64748af62cd3d0970d3ded9380a98edda0223b82de5b3d60d51b1fa595a2976715ebcf1f44084d951d2a299e6657be3c41a85117c280ed80a7dc0f6c4250426ad51883fda14b7a1eda5f2f09133a9ea8874173d4dc536b80a7b95ca19821367c1debdef3fe056d202cee665973fd7666fb55ee0612bf35154330a038809aa699d994fc7e3e63ade6e84cb6703418351f912d30a8e18ec41d63570f9711f8895eeaf8485e6ec32f4af80c7cbc84162c4a2a2aec8315c140021f0276d8081e4585a258ba673a2afad02f5a3b426970715a1626905b72c309dda163f78c8184b1e46c441feda78991da5acd93b9bf2e65c8aa71a2affd030bf03061cf6ab58e1fafa6b79ea5be5105ad420ad52546184a8ebbe1e5f7c5bf76a3240e0"}, {0xc8, 0x4e00, "ab3871c082f76e5704412441fd557610d7d2ee23ffc480f9b8f71bd9142b59aeabf4a8d9e082c71aa8d75cb2517bfd80a1f7a0f58f5b5702c3dfe93b8cb4edfdedcfe94c8840c36d79b1c03d4ae7c3a9acbaf6bd71c0cfd9ec0cb2a20b013c419e9d969f744d746de97d5d55ce01f5e565abdc334ad7369ca644860d2729899c770cb94d748a7fc398eb097b44a9c284398f215b4f8dd8c9e659cdf19511f9a63407b4d514b54bbb267b1c63beeead214b80276fbf467771052a37c64d070a0d0202e54d8995dc16"}, {0xc3, 0x4e00, "4c0b9d872a5e734333b80da45c7745a9e10092740206bcdbbd8edf0a4e435ea62fc4e5138714b4af3abb84312e7849f567ce498128639ba46b15ff1be49d5ff50fc5e6004fa70ca0823b78aeb5b0d036365bd1d890358bbbbfd79ac4a9436e88e43d00f02b08949cf7d78840eabbf6b16f8f90fc80f94054582284ec14f9bc93b97b8bb3d7e3e075f0a2e5925aa0ded39e34ee7094699695be9f23413964523ee60856e8e86b7733b10a04868a34594db4d53f6ba47d202079a1c720bd9845c594cdcb"}, {0x99, 0x4e00, "231a0ad84e88fc8ecc42ed8b17c1dbb0e2afde05f021e92048cfe87c6e6d3d38f6f4b9f0c5cf0ebf02ea4905e3589a7b08880b3465176846c22e8f2b740ac61435012ac8c0a360b33dc61803537c2360e00106f8aaa137b83604483a4530c6595be0935dbed0d259bb4bb61fa9fa9850de2c1d96b0c7b1bf15abcce295ed929183df73a3509144bae0e45590e4efef51ee8736455b8aa8ab1b"}, {0xb8, 0x4e00, "88c99013822b75a6955b3a817e29117465cf7679876a9b3300bc8e27b47cacda449cbef8f4378b7c8911a46342d8fe449703dabe16c7a2f850ba621a5eab8cae6162688ac8f7e215c275ecb9c84fbdda450be730f82c6a021f5f9e868e08f9a87e184b26453bc950fe7971389603c28c6ec027f1bf9be6f9f413da3dea8cb911d7d89f029e1e5c619f433a09adc9f489de3adf2e0d12e3006b93d1d14b00a188e0a457a60ee9f105698a34185e2b28d96c5fbee1fcb0db45"}]})

1.608269395s ago: executing program 1 (id=3043):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r2 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xaee2, 0x0, 0x5, 0xbfdffffc}, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, &(0x7f0000000040)='./file0\x00', 0x50, 0x183000, 0x12345})
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x40800)
openat$audio1(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000540)='system.posix_acl_default\x00', 0x0, 0x0, 0x0)
io_uring_enter(r2, 0x47f6, 0x40, 0x2, 0x0, 0x0)

1.549335241s ago: executing program 4 (id=3044):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = fsopen(&(0x7f0000000280)='cifs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='source', &(0x7f00000002c0)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x02\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\xda\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xa1\xc3j$v\xefw\x96/\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0)

1.39144396s ago: executing program 6 (id=3045):
syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0)

1.179387545s ago: executing program 4 (id=3046):
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2, &(0x7f0000000d40)=ANY=[@ANYBLOB="a19c84c7205602b8c131753e017d83e384386df3f95512a2"]}]})
r0 = socket(0x40000000015, 0x5, 0x0)
recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x38, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2001, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0x4, 0xfffffff3, 0x9, 0x80, 0x2, 0x0, 0x7f, 0x6, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000006, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x7c19, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x8, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x7, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x8, 0x4, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x6b4d7043, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

778.02495ms ago: executing program 5 (id=3047):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000a40)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00'], 0x50)
vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{0x0}], 0x1, 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x0, 0x1, 0x0, 0x0, {0x1b}}, 0x14}}, 0x0)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x6a, 0x0, 0x0, 0xf7ffff7e, 0x0, 0x0, 0x0, 0xe}, 0x94)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYRES32=r4], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x20004054)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d00)={r2, 0x0, 0xcf, 0x4b, &(0x7f0000000a80)="0020d3786419374b046cdbc5cdfacf46627dc4896365bda7c54f01fa994b455c6ffbce021c4b9580eba818e4b76ada59ba66f0c210a6d10a2d72cd581dc64353d3326ba03e39b86c45aeef9dba0e2cb8e78fb899e93e48320bf493a13781d13ba8fcf6ee09692cb0833a165df9d06559f95c3d950322ab273dc01ff0833819b0d827eec06d781d9f4f820d57d78e2c7952917fd46f4ef8d4f71af7e5d3c69ba0a97ebecb954175eaeee2b651c829a0a38035169924edb3c4a2404d4ca0a8126ddd08aa629ebc093ea2154d662a809b", &(0x7f0000000900)=""/75, 0x60, 0x0, 0x33, 0xc7, &(0x7f0000000b80)="c12980d8e970f583026800031262aa25be23c4f4be52ffe9dcf85073cf5ab23f730ea1d3daed69b06dcdb74a8bca48c61f933c", &(0x7f0000000c00)="69d35d5a198962ea92117becdccecf1fc6e33ad27741ef991e0b30ae44f5c860ed1d3aa3ba6e6bd5f2d40ba0df250600640dbfdabdabcf0f53ca8dab6cb6fe3606331a4bb097a2109b965b8cc319d35ef994da278361466d6b8fde4ac545aa7ca512c4b284868f786ab95f3562d8ee45fb9af9d0088bf1cd35c0178df639f33a6b75f4cc9eb48e8cb611aaa5fa4fc7c19cdfb8bbad8804ba35e812c057fd9cab31f0ecc45ef59d1bd11011f88f9a1fb8653e90017dc0a61380013ad16818d0618101668f676279", 0x2, 0x0, 0x4}, 0x50)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

616.415996ms ago: executing program 6 (id=3048):
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
io_setup(0x6, &(0x7f0000000540))
r0 = gettid()
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0)
write$rfkill(r1, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8)
write$rfkill(r1, &(0x7f0000000080)={0x53, 0x2, 0x2, 0x1, 0xcc}, 0x8)
openat$iommufd(0xffffff9c, &(0x7f0000000240), 0x400000, 0x0)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffffff, 0x100000000)
unshare(0xc000680)

20.478263ms ago: executing program 5 (id=3049):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x0)
socket(0x15, 0x2, 0xd)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20048880}, 0xc000)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
sendmmsg$sock(r2, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0)

0s ago: executing program 4 (id=3050):
creat(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002280), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, <r1=>0x0}, 0x2020)
open(&(0x7f00000000c0)='./file0\x00', 0x2437, 0x0)
write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9}}, 0x50)
read$FUSE(r0, &(0x7f000000fdc0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
utimes(&(0x7f0000000080)='./file0\x00', 0x0)
write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10)
syz_fuse_handle_req(r0, &(0x7f0000009080)="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", 0x2000, &(0x7f0000004b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

000
[  324.214368][T11874] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffc37201d0
[  324.214382][T11874] R13: 00007f26bec11c05 R14: 000000000004f1ab R15: 00007fffc3720210
[  324.214404][T11874]  </TASK>
[  324.215166][T11874] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  324.399570][T13114] loop0: detected capacity change from 0 to 32768
[  324.571438][ T1206] usb usb6-port1: unable to enumerate USB device
[  324.811641][T13114] XFS: noikeep mount option is deprecated.
[  324.841661][T13114] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  324.879249][T13137] validate_nla: 41 callbacks suppressed
[  324.879266][T13137] netlink: 'syz.1.2496': attribute type 3 has an invalid length.
[  324.980718][T13137] netlink: 'syz.1.2496': attribute type 3 has an invalid length.
[  325.018622][T13137] netlink: 'syz.1.2496': attribute type 3 has an invalid length.
[  325.136812][T13137] netlink: 'syz.1.2496': attribute type 3 has an invalid length.
[  325.186038][T13114] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  325.200809][T13137] netlink: 'syz.1.2496': attribute type 3 has an invalid length.
[  325.208808][T13137] netlink: 'syz.1.2496': attribute type 3 has an invalid length.
[  325.216818][T13137] netlink: 'syz.1.2496': attribute type 3 has an invalid length.
[  325.233458][T13147] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2499'.
[  325.235886][T13114] XFS (loop0): Starting recovery (logdev: internal)
[  325.243239][T13137] netlink: 'syz.1.2496': attribute type 3 has an invalid length.
[  325.257487][T13137] netlink: 'syz.1.2496': attribute type 3 has an invalid length.
[  325.267618][T13137] netlink: 'syz.1.2496': attribute type 3 has an invalid length.
[  325.330068][T13114] XFS (loop0): Ending recovery (logdev: internal)
[  325.353089][T13114] XFS (loop0): Metadata corruption detected at xfs_inobt_verify+0x9e/0x1f0, xfs_finobt block 0x8 
[  325.376108][T13114] XFS (loop0): Unmount and run xfs_repair
[  325.399993][T13114] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  325.412604][T13114] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  325.423816][T13114] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  325.433635][T13114] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  325.442674][T13114] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02  ......1....N....
[  325.451671][T13114] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  325.460539][T13114] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  325.469533][T13114] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  325.478761][T13114] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  325.487715][T13114] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x8 len 8 error 117
[  325.640799][ T5868] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  325.656888][ T5849] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  325.666180][ T5849] XFS (loop0): Uncorrected metadata errors detected; please run xfs_repair.
[  325.847306][ T5868] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  325.858811][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  325.880615][ T5868] usb 3-1: Product: syz
[  325.884837][ T5868] usb 3-1: Manufacturer: syz
[  325.889505][ T5868] usb 3-1: SerialNumber: syz
[  325.896983][ T5868] usb 3-1: config 0 descriptor??
[  326.104496][T13151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2501'.
[  326.268879][ T5868] cx82310_eth 3-1:0.0: probe with driver cx82310_eth failed with error -22
[  326.289509][ T5868] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19!
[  326.304304][ T5868] usb 3-1: USB disconnect, device number 25
[  326.631990][T13189] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2512'.
[  326.712107][  T973] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  326.846308][ T5929] vhci_hcd: vhci_device speed not set
[  326.894490][  T973] dvb_usb_az6027 1-1:0.0: probe with driver dvb_usb_az6027 failed with error -110
[  327.005479][  T973] usb 1-1: USB disconnect, device number 8
[  327.110639][ T1206] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  327.162053][T13197] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2516'.
[  327.188710][T13197] openvswitch: netlink: Flow actions attr not present in new flow.
[  327.287250][ T1206] usb 6-1: device descriptor read/64, error -71
[  327.525417][T13209] fuse: Unknown parameter '0x0000000000000009'
[  327.815071][ T1206] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  327.950630][ T1206] usb 6-1: device descriptor read/64, error -71
[  328.065306][ T1206] usb usb6-port1: attempt power cycle
[  328.201179][   T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  328.260690][ T5929] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  328.351192][   T10] usb 3-1: Using ep0 maxpacket: 8
[  328.367171][   T10] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  328.399144][   T10] usb 3-1: config 179 has no interface number 0
[  328.410891][ T1206] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  328.421204][ T5929] usb 5-1: config 1 has an invalid interface number: 7 but max is 0
[  328.443441][ T5929] usb 5-1: config 1 has no interface number 0
[  328.461893][ T1206] usb 6-1: device descriptor read/8, error -71
[  328.469928][   T10] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  328.482148][ T5929] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  328.503427][   T10] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  328.522186][ T5929] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  328.534907][T13226] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2528'.
[  328.545464][   T10] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  328.563103][ T5929] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  328.576820][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  328.592985][   T10] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  328.611042][ T5929] usb 5-1: Product: syz
[  328.615448][ T5929] usb 5-1: Manufacturer: syz
[  328.625921][ T5929] usb 5-1: SerialNumber: syz
[  328.630815][   T10] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  328.650695][   T10] usb 3-1: config 179 interface 65 has no altsetting 0
[  328.657772][   T10] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  328.680344][T13215] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  328.730673][ T1206] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  328.738542][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  328.762289][ T1206] usb 6-1: device descriptor read/8, error -71
[  328.774729][   T10] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input41
[  328.820945][ T5209] input input41: unable to receive magic message: -110
[  328.855915][ T5209] input input41: unable to receive magic message: -32
[  328.869112][ T5209] input input41: unable to receive magic message: -32
[  328.876879][ T1206] usb usb6-port1: unable to enumerate USB device
[  328.897874][ T5209] input input41: unable to receive magic message: -32
[  328.924759][ T5929] usb 5-1: Error in usbnet_get_endpoints (-71)
[  328.932918][T13233] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2531'.
[  328.938615][ T5929] usb 5-1: USB disconnect, device number 12
[  328.945489][T13233] openvswitch: netlink: Flow actions attr not present in new flow.
[  328.993908][   T10] usb 3-1: USB disconnect, device number 26
[  328.999903][    C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  329.364082][T13244] loop0: detected capacity change from 0 to 32768
[  329.382907][T13244] find_entry called with index = 0
[  329.389050][T13244] read_mapping_page failed!
[  329.393626][T13244] ERROR: (device loop0): txCommit: 
[  329.393626][T13244] 
[  329.403006][T13244] ERROR: (device loop0): remounting filesystem as read-only
[  329.670531][T13255] syzkaller0: entered promiscuous mode
[  329.676620][T13255] syzkaller0: entered allmulticast mode
[  330.060720][  T973] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  330.215335][  T973] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  330.240636][  T973] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  330.296318][  T973] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  330.338861][  T973] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  330.367526][T13259] loop5: detected capacity change from 0 to 32768
[  330.432910][  T973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  330.442189][T13259] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2541 (13259)
[  330.461984][T13259] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  330.479480][  T973] usb 3-1: config 0 descriptor??
[  330.510940][T13259] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm
[  330.712012][T13289] fuse: Unknown parameter '0x0000000000000009'
[  330.735631][T13259] BTRFS info (device loop5): setting nodatasum
[  330.750741][T13259] BTRFS info (device loop5): setting nodatacow
[  330.860633][T13259] BTRFS info (device loop5): enabling free space tree
[  330.867696][T13259] BTRFS info (device loop5): max_inline set to 0
[  330.949412][  T973] plantronics 0003:047F:FFFF.0008: reserved main item tag 0xe
[  331.046458][  T973] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  331.102731][  T973] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  331.284127][  T973] usb 3-1: USB disconnect, device number 27
[  331.308192][ T5852] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  331.820796][ T5929] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  331.847450][T13306] loop5: detected capacity change from 0 to 256
[  331.954868][T13306] FAT-fs (loop5): Directory bread(block 64) failed
[  331.998436][ T5929] usb 5-1: Using ep0 maxpacket: 8
[  332.000816][T13306] FAT-fs (loop5): Directory bread(block 65) failed
[  332.015433][ T5929] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  332.022222][T13306] FAT-fs (loop5): Directory bread(block 66) failed
[  332.043489][ T5929] usb 5-1: config 179 has no interface number 0
[  332.066488][ T5929] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  332.079097][T13306] FAT-fs (loop5): Directory bread(block 67) failed
[  332.150847][T13306] FAT-fs (loop5): Directory bread(block 68) failed
[  332.158403][T13306] FAT-fs (loop5): Directory bread(block 69) failed
[  332.285966][T13306] FAT-fs (loop5): Directory bread(block 70) failed
[  332.295691][T13306] FAT-fs (loop5): Directory bread(block 71) failed
[  332.302558][T13306] FAT-fs (loop5): Directory bread(block 72) failed
[  332.309073][T13306] FAT-fs (loop5): Directory bread(block 73) failed
[  332.339432][ T5929] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  332.375672][ T5929] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  332.398833][ T5929] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  332.413467][ T5929] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  332.427428][ T5929] usb 5-1: config 179 interface 65 has no altsetting 0
[  332.434455][ T5929] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  332.443876][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  332.468822][T13321] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  332.494463][ T5929] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input43
[  332.506626][T13321] syzkaller0: entered promiscuous mode
[  332.512569][T13321] syzkaller0: entered allmulticast mode
[  332.562918][ T5209] input input43: unable to receive magic message: -110
[  332.588340][ T5209] input input43: unable to receive magic message: -32
[  332.602667][ T5209] input input43: unable to receive magic message: -32
[  332.652450][ T5209] input input43: unable to receive magic message: -32
[  332.687495][T13331] loop5: detected capacity change from 0 to 1024
[  332.695554][ T5929] usb 5-1: USB disconnect, device number 13
[  332.701543][    C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  332.769054][   T12] hfsplus: b-tree write err: -5, ino 4
[  333.459857][T13358] loop5: detected capacity change from 0 to 40427
[  333.480052][T13358] F2FS-fs (loop5): build fault injection rate: 14
[  333.486951][T13358] F2FS-fs (loop5): build fault injection type: 0x3bfe8c
[  333.495924][T13358] F2FS-fs (loop5): invalid crc value
[  333.503372][T13361] fuse: Unknown parameter 'grou00000000000000000000'
[  333.524464][    C1] F2FS-fs (loop5): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  333.568309][    C1] F2FS-fs (loop5): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  333.610970][T13358] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  333.619947][T13358] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  333.642328][T13358] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  333.656281][T13358] F2FS-fs (loop5): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  333.671308][T13358] F2FS-fs (loop5): inject dquot initialize in f2fs_dquot_initialize of f2fs_mkdir+0xfa/0x570
[  333.683315][T13358] F2FS-fs (loop5): inject no more block in inc_valid_node_count of f2fs_new_node_folio+0x18b/0xa40
[  333.711091][ T5852] syz-executor: attempt to access beyond end of device
[  333.711091][ T5852] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  333.741761][ T5852] CPU: 1 UID: 0 PID: 5852 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  333.741785][ T5852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  333.741797][ T5852] Call Trace:
[  333.741803][ T5852]  <TASK>
[  333.741810][ T5852]  dump_stack_lvl+0x189/0x250
[  333.741836][ T5852]  ? srso_alias_return_thunk+0x5/0xfbef5
[  333.741863][ T5852]  ? __pfx_dump_stack_lvl+0x10/0x10
[  333.741884][ T5852]  ? __pfx_queue_work_on+0x10/0x10
[  333.741903][ T5852]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  333.741930][ T5852]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  333.741960][ T5852]  f2fs_handle_critical_error+0x37c/0x540
[  333.741990][ T5852]  f2fs_write_end_io+0x886/0xb60
[  333.742020][ T5852]  __submit_merged_bio+0x27a/0x6a0
[  333.742048][ T5852]  __submit_merged_write_cond+0x255/0x530
[  333.742077][ T5852]  f2fs_write_data_pages+0x261d/0x3000
[  333.742123][ T5852]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  333.742174][ T5852]  ? __mod_zone_page_state+0xd7/0x140
[  333.742204][ T5852]  ? srso_alias_return_thunk+0x5/0xfbef5
[  333.742225][ T5852]  ? folios_put_refs+0x560/0x640
[  333.742250][ T5852]  ? __pfx_folios_put_refs+0x10/0x10
[  333.742269][ T5852]  ? rcu_is_watching+0x15/0xb0
[  333.742287][ T5852]  ? lru_add+0xa2f/0xd80
[  333.742305][ T5852]  ? lru_add+0x198/0xd80
[  333.742324][ T5852]  ? srso_alias_return_thunk+0x5/0xfbef5
[  333.742344][ T5852]  ? folio_batch_move_lru+0x319/0x3a0
[  333.742367][ T5852]  ? srso_alias_return_thunk+0x5/0xfbef5
[  333.742387][ T5852]  ? rcu_is_watching+0x15/0xb0
[  333.742407][ T5852]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  333.742435][ T5852]  do_writepages+0x32e/0x550
[  333.742460][ T5852]  ? srso_alias_return_thunk+0x5/0xfbef5
[  333.742480][ T5852]  ? rcu_is_watching+0x15/0xb0
[  333.742497][ T5852]  ? srso_alias_return_thunk+0x5/0xfbef5
[  333.742523][ T5852]  ? srso_alias_return_thunk+0x5/0xfbef5
[  333.742543][ T5852]  ? do_raw_spin_unlock+0x122/0x240
[  333.742568][ T5852]  filemap_fdatawrite+0x199/0x240
[  333.742594][ T5852]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  333.742639][ T5852]  ? srso_alias_return_thunk+0x5/0xfbef5
[  333.742660][ T5852]  ? rcu_is_watching+0x15/0xb0
[  333.742677][ T5852]  ? srso_alias_return_thunk+0x5/0xfbef5
[  333.742700][ T5852]  ? do_raw_spin_unlock+0x122/0x240
[  333.742725][ T5852]  f2fs_sync_dirty_inodes+0x31f/0x830
[  333.742751][ T5852]  f2fs_write_checkpoint+0x95a/0x1df0
[  333.742783][ T5852]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  333.742800][ T5852]  ? srso_alias_return_thunk+0x5/0xfbef5
[  333.742846][ T5852]  ? kill_f2fs_super+0x298/0x6c0
[  333.742867][ T5852]  kill_f2fs_super+0x2c3/0x6c0
[  333.742888][ T5852]  ? __pfx_kill_f2fs_super+0x10/0x10
[  333.742904][ T5852]  ? radix_tree_delete_item+0x2b6/0x400
[  333.742932][ T5852]  ? srso_alias_return_thunk+0x5/0xfbef5
[  333.742952][ T5852]  ? shrinker_free+0x2ce/0x3e0
[  333.742973][ T5852]  deactivate_locked_super+0xbc/0x130
[  333.742995][ T5852]  cleanup_mnt+0x425/0x4c0
[  333.743018][ T5852]  task_work_run+0x1d4/0x260
[  333.743044][ T5852]  ? __pfx_task_work_run+0x10/0x10
[  333.743067][ T5852]  ? __x64_sys_umount+0x122/0x160
[  333.743091][ T5852]  ? __pfx___x64_sys_umount+0x10/0x10
[  333.743114][ T5852]  ? srso_alias_return_thunk+0x5/0xfbef5
[  333.743136][ T5852]  ? srso_alias_return_thunk+0x5/0xfbef5
[  333.743156][ T5852]  ? rcu_is_watching+0x15/0xb0
[  333.743175][ T5852]  exit_to_user_mode_loop+0xec/0x110
[  333.743201][ T5852]  do_syscall_64+0x2bd/0x3b0
[  333.743227][ T5852]  ? srso_alias_return_thunk+0x5/0xfbef5
[  333.743248][ T5852]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  333.743265][ T5852]  ? srso_alias_return_thunk+0x5/0xfbef5
[  333.743285][ T5852]  ? exc_page_fault+0x9f/0xf0
[  333.743310][ T5852]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  333.743327][ T5852] RIP: 0033:0x7f96ef18ff17
[  333.743343][ T5852] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  333.743358][ T5852] RSP: 002b:00007ffcbfb8eeb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  333.743377][ T5852] RAX: 0000000000000000 RBX: 00007f96ef211c05 RCX: 00007f96ef18ff17
[  333.743390][ T5852] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcbfb8ef70
[  333.743401][ T5852] RBP: 00007ffcbfb8ef70 R08: 0000000000000000 R09: 0000000000000000
[  333.743412][ T5852] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcbfb90000
[  333.743424][ T5852] R13: 00007f96ef211c05 R14: 0000000000051770 R15: 00007ffcbfb90040
[  333.743447][ T5852]  </TASK>
[  333.743640][ T5852] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  334.150668][   T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  334.560837][ T5929] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  334.570884][   T10] usb 3-1: Using ep0 maxpacket: 16
[  334.578237][   T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  334.588823][   T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  334.601777][   T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  334.611385][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.619715][   T10] usb 3-1: Product: syz
[  334.624167][   T10] usb 3-1: Manufacturer: syz
[  334.670324][   T10] usb 3-1: SerialNumber: syz
[  334.761828][ T5929] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  334.772174][ T5929] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.781034][ T5929] usb 7-1: Product: syz
[  334.785431][ T5929] usb 7-1: Manufacturer: syz
[  334.790116][ T5929] usb 7-1: SerialNumber: syz
[  334.802552][ T5929] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  334.818824][ T1206] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  334.886630][   T10] usb 3-1: 0:2 : does not exist
[  334.895887][   T10] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  334.924006][   T10] usb 3-1: USB disconnect, device number 28
[  335.267107][T13396] input: syz0 as /devices/virtual/input/input44
[  335.370678][T13381] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  335.379092][T13381] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  335.921367][ T1206] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive
[  336.621893][ T5175] Bluetooth: hci1: command 0x080f tx timeout
[  336.715451][ T5929] usb 7-1: USB disconnect, device number 3
[  336.724653][ T1206] ath9k_htc: Failed to initialize the device
[  336.743430][ T5929] usb 7-1: ath9k_htc: USB layer deinitialized
[  336.760420][T13381] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  336.767707][T13381] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  336.776107][T13381] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  336.782083][T13381] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  336.790191][T13381] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  336.797476][T13381] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  336.806158][T13381] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  336.812140][T13381] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  337.072825][T13412] loop4: detected capacity change from 0 to 128
[  337.094880][T13412] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  337.114493][T13412] ext4 filesystem being mounted at /398/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  337.138112][T13412] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni"
[  337.142301][T13417] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  337.153381][T13412] fscrypt: loop4: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12
[  337.164195][T13417] syzkaller0: entered promiscuous mode
[  337.193561][T13417] syzkaller0: entered allmulticast mode
[  337.200922][ T5853] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  337.244646][T13425] validate_nla: 42 callbacks suppressed
[  337.244664][T13425] netlink: 'syz.2.2597': attribute type 3 has an invalid length.
[  337.277107][T13425] netlink: 'syz.2.2597': attribute type 3 has an invalid length.
[  337.284976][T13425] netlink: 'syz.2.2597': attribute type 3 has an invalid length.
[  337.295653][T13425] netlink: 'syz.2.2597': attribute type 3 has an invalid length.
[  337.303825][T13425] netlink: 'syz.2.2597': attribute type 3 has an invalid length.
[  337.311662][T13425] netlink: 'syz.2.2597': attribute type 3 has an invalid length.
[  337.319496][T13425] netlink: 'syz.2.2597': attribute type 3 has an invalid length.
[  337.349863][T13425] netlink: 'syz.2.2597': attribute type 3 has an invalid length.
[  337.358313][T13430] loop0: detected capacity change from 0 to 512
[  337.368327][T13425] netlink: 'syz.2.2597': attribute type 3 has an invalid length.
[  337.376967][T13425] netlink: 'syz.2.2597': attribute type 3 has an invalid length.
[  337.386165][T13430] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  337.418840][T13430] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  337.431612][T13430] ext4 filesystem being mounted at /412/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  337.449425][T13430] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  337.459538][T13430] EXT4-fs error (device loop0): __ext4_remount:6740: comm syz.0.2601: Abort forced by user
[  337.474084][T13430] EXT4-fs (loop0): Remounting filesystem read-only
[  337.482034][T13430] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000d40000 ro.
[  337.520045][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  337.610787][ T5868] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  337.893179][ T5868] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  337.920422][ T5868] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  337.945121][ T5868] usb 6-1: Product: syz
[  337.957076][ T5868] usb 6-1: Manufacturer: syz
[  337.976777][ T5868] usb 6-1: SerialNumber: syz
[  338.013326][ T5868] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  338.040234][  T973] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  340.784044][  T973] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  341.402900][   T43] usb 6-1: USB disconnect, device number 14
[  341.410938][  T973] ath9k_htc: Failed to initialize the device
[  341.424513][   T43] usb 6-1: ath9k_htc: USB layer deinitialized
[  341.451268][T13453] block nbd1: shutting down sockets
[  341.558679][T13468] tipc: Failed to remove unknown binding: 66,1,1/2468024451:1290700255/1290700257
[  341.678070][T13468] tipc: Failed to remove unknown binding: 66,1,1/2468024451:1290700255/1290700257
[  341.701039][T13468] tipc: Failed to remove unknown binding: 66,1,1/2468024451:1290700255/1290700257
[  341.739130][T13468] netlink: 788 bytes leftover after parsing attributes in process `syz.2.2616'.
[  341.878375][T13486] loop4: detected capacity change from 0 to 1024
[  341.961601][T13486] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  341.983667][T13486] ext4 filesystem being mounted at /404/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  342.084360][ T5853] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  342.091040][T13502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2628'.
[  342.795142][T13530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  343.017416][T13540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2644'.
[  343.200701][   T43] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  343.256546][T13515] block nbd2: shutting down sockets
[  343.370360][   T43] usb 2-1: Using ep0 maxpacket: 16
[  343.384254][   T43] usb 2-1: config 0 has an invalid interface number: 126 but max is 0
[  343.394393][   T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  343.433271][   T43] usb 2-1: config 0 has no interface number 0
[  343.465352][   T43] usb 2-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87
[  343.507347][   T43] usb 2-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024
[  343.525091][T13552] IPVS: Scheduler module ip_vs_sip not found
[  343.539391][   T43] usb 2-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64
[  343.600315][   T43] usb 2-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  343.625514][   T43] usb 2-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  343.676198][   T43] usb 2-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  343.824319][T13563] loop6: detected capacity change from 0 to 40427
[  343.841997][T13563] F2FS-fs (loop6): build fault injection rate: 14
[  343.848472][T13563] F2FS-fs (loop6): build fault injection type: 0x3bfe8c
[  343.856796][T13563] F2FS-fs (loop6): invalid crc value
[  343.899223][    C0] F2FS-fs (loop6): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  343.918156][    C0] F2FS-fs (loop6): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  343.982665][T13563] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  343.991731][T13563] F2FS-fs (loop6): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  344.010089][T13565] loop0: detected capacity change from 0 to 40427
[  344.018404][   T43] usb 2-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88
[  344.027700][   T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  344.027724][T13563] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  344.029203][   T43] usb 2-1: config 0 descriptor??
[  344.048815][T13565] F2FS-fs (loop0): build fault injection rate: 14
[  344.055378][T13565] F2FS-fs (loop0): build fault injection type: 0x3bfe8c
[  344.068035][T13563] F2FS-fs (loop6): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  344.068240][T13536] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  344.086650][T13565] F2FS-fs (loop0): invalid crc value
[  344.094459][   T43] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  344.094686][T13563] F2FS-fs (loop6): inject dquot initialize in f2fs_dquot_initialize of f2fs_mkdir+0xfa/0x570
[  344.114485][T13563] F2FS-fs (loop6): inject no more block in inc_valid_node_count of f2fs_new_node_folio+0x18b/0xa40
[  344.116075][   T43] snd-usb-audio 2-1:0.126: probe with driver snd-usb-audio failed with error -12
[  344.127322][T13563] F2FS-fs (loop6): inject inconsistent footer in sanity_check_node_footer of f2fs_write_begin+0x952/0x2290
[  344.146451][T13563] F2FS-fs (loop6): inconsistent node block, node_type:1, nid:17, node_footer[nid:17,ino:17,ofs:0,cpver:0,blkaddr:0]
[  344.162650][    C1] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  344.177366][    C0] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  344.216648][T13565] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  344.225712][T13565] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  344.250848][T13565] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  344.288001][ T5849] syz-executor: attempt to access beyond end of device
[  344.288001][ T5849] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  344.293678][T13579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2658'.
[  344.320044][ T5849] CPU: 1 UID: 0 PID: 5849 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  344.320076][ T5849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  344.320092][ T5849] Call Trace:
[  344.320101][ T5849]  <TASK>
[  344.320111][ T5849]  dump_stack_lvl+0x189/0x250
[  344.320145][ T5849]  ? srso_alias_return_thunk+0x5/0xfbef5
[  344.320176][ T5849]  ? __pfx_dump_stack_lvl+0x10/0x10
[  344.320204][ T5849]  ? __pfx_queue_work_on+0x10/0x10
[  344.320227][ T5849]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  344.320258][ T5849]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  344.320296][ T5849]  f2fs_handle_critical_error+0x37c/0x540
[  344.320334][ T5849]  f2fs_write_end_io+0x886/0xb60
[  344.320369][ T5849]  __submit_merged_bio+0x27a/0x6a0
[  344.320405][ T5849]  __submit_merged_write_cond+0x255/0x530
[  344.320442][ T5849]  f2fs_write_data_pages+0x261d/0x3000
[  344.320501][ T5849]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  344.320546][ T5849]  ? arch_stack_walk+0xfc/0x150
[  344.320600][ T5849]  ? __mod_zone_page_state+0xd7/0x140
[  344.320644][ T5849]  ? srso_alias_return_thunk+0x5/0xfbef5
[  344.320670][ T5849]  ? folios_put_refs+0x560/0x640
[  344.320703][ T5849]  ? __pfx_folios_put_refs+0x10/0x10
[  344.320727][ T5849]  ? rcu_is_watching+0x15/0xb0
[  344.320760][ T5849]  ? lru_add+0xa2f/0xd80
[  344.320784][ T5849]  ? lru_add+0x198/0xd80
[  344.320808][ T5849]  ? srso_alias_return_thunk+0x5/0xfbef5
[  344.320834][ T5849]  ? do_raw_spin_lock+0x121/0x290
[  344.320867][ T5849]  ? srso_alias_return_thunk+0x5/0xfbef5
[  344.320897][ T5849]  ? srso_alias_return_thunk+0x5/0xfbef5
[  344.320924][ T5849]  ? do_raw_spin_unlock+0x122/0x240
[  344.320952][ T5849]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  344.320990][ T5849]  do_writepages+0x32e/0x550
[  344.321022][ T5849]  ? srso_alias_return_thunk+0x5/0xfbef5
[  344.321048][ T5849]  ? rcu_is_watching+0x15/0xb0
[  344.321071][ T5849]  ? srso_alias_return_thunk+0x5/0xfbef5
[  344.321099][ T5849]  ? srso_alias_return_thunk+0x5/0xfbef5
[  344.321125][ T5849]  ? do_raw_spin_unlock+0x122/0x240
[  344.321156][ T5849]  filemap_fdatawrite+0x199/0x240
[  344.321190][ T5849]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  344.321249][ T5849]  ? srso_alias_return_thunk+0x5/0xfbef5
[  344.321275][ T5849]  ? rcu_is_watching+0x15/0xb0
[  344.321297][ T5849]  ? srso_alias_return_thunk+0x5/0xfbef5
[  344.321327][ T5849]  ? do_raw_spin_unlock+0x122/0x240
[  344.321359][ T5849]  f2fs_sync_dirty_inodes+0x31f/0x830
[  344.321393][ T5849]  f2fs_write_checkpoint+0x95a/0x1df0
[  344.321432][ T5849]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  344.321454][ T5849]  ? srso_alias_return_thunk+0x5/0xfbef5
[  344.321513][ T5849]  ? kill_f2fs_super+0x298/0x6c0
[  344.321540][ T5849]  kill_f2fs_super+0x2c3/0x6c0
[  344.321567][ T5849]  ? __pfx_kill_f2fs_super+0x10/0x10
[  344.321588][ T5849]  ? radix_tree_delete_item+0x2b6/0x400
[  344.321624][ T5849]  ? srso_alias_return_thunk+0x5/0xfbef5
[  344.321649][ T5849]  ? shrinker_free+0x2ce/0x3e0
[  344.321676][ T5849]  deactivate_locked_super+0xbc/0x130
[  344.321706][ T5849]  cleanup_mnt+0x425/0x4c0
[  344.321735][ T5849]  task_work_run+0x1d4/0x260
[  344.321774][ T5849]  ? __pfx_task_work_run+0x10/0x10
[  344.321803][ T5849]  ? __x64_sys_umount+0x122/0x160
[  344.321834][ T5849]  ? __pfx___x64_sys_umount+0x10/0x10
[  344.321863][ T5849]  ? srso_alias_return_thunk+0x5/0xfbef5
[  344.321891][ T5849]  ? srso_alias_return_thunk+0x5/0xfbef5
[  344.321917][ T5849]  ? rcu_is_watching+0x15/0xb0
[  344.321942][ T5849]  exit_to_user_mode_loop+0xec/0x110
[  344.321976][ T5849]  do_syscall_64+0x2bd/0x3b0
[  344.322009][ T5849]  ? srso_alias_return_thunk+0x5/0xfbef5
[  344.322036][ T5849]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  344.322058][ T5849]  ? srso_alias_return_thunk+0x5/0xfbef5
[  344.322084][ T5849]  ? exc_page_fault+0x9f/0xf0
[  344.322116][ T5849]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  344.322138][ T5849] RIP: 0033:0x7f21f558ff17
[  344.322158][ T5849] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  344.322178][ T5849] RSP: 002b:00007ffcf4134338 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  344.322202][ T5849] RAX: 0000000000000000 RBX: 00007f21f5611c05 RCX: 00007f21f558ff17
[  344.322218][ T5849] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcf41343f0
[  344.322233][ T5849] RBP: 00007ffcf41343f0 R08: 0000000000000000 R09: 0000000000000000
[  344.322247][ T5849] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcf4135480
[  344.322263][ T5849] R13: 00007f21f5611c05 R14: 00000000000540c2 R15: 00007ffcf41354c0
[  344.322292][ T5849]  </TASK>
[  344.339658][ T1206] usb 2-1: USB disconnect, device number 9
[  344.342934][ T5849] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  344.348365][T11874] syz-executor: attempt to access beyond end of device
[  344.348365][T11874] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  344.798759][T11874] CPU: 1 UID: 0 PID: 11874 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  344.798794][T11874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  344.798811][T11874] Call Trace:
[  344.798820][T11874]  <TASK>
[  344.798830][T11874]  dump_stack_lvl+0x189/0x250
[  344.798867][T11874]  ? srso_alias_return_thunk+0x5/0xfbef5
[  344.798900][T11874]  ? __pfx_dump_stack_lvl+0x10/0x10
[  344.798930][T11874]  ? __pfx_queue_work_on+0x10/0x10
[  344.798956][T11874]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  344.798990][T11874]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  344.799031][T11874]  f2fs_handle_critical_error+0x37c/0x540
[  344.799075][T11874]  f2fs_write_end_io+0x886/0xb60
[  344.799115][T11874]  __submit_merged_bio+0x27a/0x6a0
[  344.799154][T11874]  __submit_merged_write_cond+0x255/0x530
[  344.799196][T11874]  f2fs_write_data_pages+0x261d/0x3000
[  344.799264][T11874]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  344.799337][T11874]  ? __mod_zone_page_state+0xd7/0x140
[  344.799379][T11874]  ? srso_alias_return_thunk+0x5/0xfbef5
[  344.799408][T11874]  ? folios_put_refs+0x560/0x640
[  344.799443][T11874]  ? __pfx_folios_put_refs+0x10/0x10
[  344.799470][T11874]  ? rcu_is_watching+0x15/0xb0
[  344.799494][T11874]  ? lru_add+0xa2f/0xd80
[  344.799519][T11874]  ? lru_add+0x198/0xd80
[  344.799546][T11874]  ? srso_alias_return_thunk+0x5/0xfbef5
[  344.799575][T11874]  ? do_raw_spin_lock+0x121/0x290
[  344.799613][T11874]  ? srso_alias_return_thunk+0x5/0xfbef5
[  344.799644][T11874]  ? srso_alias_return_thunk+0x5/0xfbef5
[  344.799666][T11874]  ? do_raw_spin_unlock+0x122/0x240
[  344.799689][T11874]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  344.799718][T11874]  do_writepages+0x32e/0x550
[  344.799743][T11874]  ? srso_alias_return_thunk+0x5/0xfbef5
[  344.799769][T11874]  ? rcu_is_watching+0x15/0xb0
[  344.799786][T11874]  ? srso_alias_return_thunk+0x5/0xfbef5
[  344.799809][T11874]  ? srso_alias_return_thunk+0x5/0xfbef5
[  344.799829][T11874]  ? do_raw_spin_unlock+0x122/0x240
[  344.799854][T11874]  filemap_fdatawrite+0x199/0x240
[  344.799880][T11874]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  344.799926][T11874]  ? srso_alias_return_thunk+0x5/0xfbef5
[  344.799946][T11874]  ? rcu_is_watching+0x15/0xb0
[  344.799963][T11874]  ? srso_alias_return_thunk+0x5/0xfbef5
[  344.799986][T11874]  ? do_raw_spin_unlock+0x122/0x240
[  344.800011][T11874]  f2fs_sync_dirty_inodes+0x31f/0x830
[  344.800037][T11874]  f2fs_write_checkpoint+0x95a/0x1df0
[  344.800068][T11874]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  344.800086][T11874]  ? srso_alias_return_thunk+0x5/0xfbef5
[  344.800132][T11874]  ? kill_f2fs_super+0x298/0x6c0
[  344.800152][T11874]  kill_f2fs_super+0x2c3/0x6c0
[  344.800174][T11874]  ? __pfx_kill_f2fs_super+0x10/0x10
[  344.800190][T11874]  ? radix_tree_delete_item+0x2b6/0x400
[  344.800218][T11874]  ? srso_alias_return_thunk+0x5/0xfbef5
[  344.800238][T11874]  ? shrinker_free+0x2ce/0x3e0
[  344.800259][T11874]  deactivate_locked_super+0xbc/0x130
[  344.800282][T11874]  cleanup_mnt+0x425/0x4c0
[  344.800305][T11874]  task_work_run+0x1d4/0x260
[  344.800331][T11874]  ? __pfx_task_work_run+0x10/0x10
[  344.800354][T11874]  ? __x64_sys_umount+0x122/0x160
[  344.800378][T11874]  ? __pfx___x64_sys_umount+0x10/0x10
[  344.800401][T11874]  ? srso_alias_return_thunk+0x5/0xfbef5
[  344.800423][T11874]  ? srso_alias_return_thunk+0x5/0xfbef5
[  344.800444][T11874]  ? rcu_is_watching+0x15/0xb0
[  344.800463][T11874]  exit_to_user_mode_loop+0xec/0x110
[  344.800490][T11874]  do_syscall_64+0x2bd/0x3b0
[  344.800517][T11874]  ? srso_alias_return_thunk+0x5/0xfbef5
[  344.800538][T11874]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  344.800559][T11874]  ? srso_alias_return_thunk+0x5/0xfbef5
[  344.800588][T11874]  ? exc_page_fault+0x9f/0xf0
[  344.800623][T11874]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  344.800647][T11874] RIP: 0033:0x7f26beb8ff17
[  344.800669][T11874] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  344.800687][T11874] RSP: 002b:00007fffc371f088 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  344.800706][T11874] RAX: 0000000000000000 RBX: 00007f26bec11c05 RCX: 00007f26beb8ff17
[  344.800719][T11874] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffc371f140
[  344.800730][T11874] RBP: 00007fffc371f140 R08: 0000000000000000 R09: 0000000000000000
[  344.800742][T11874] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffc37201d0
[  344.800760][T11874] R13: 00007f26bec11c05 R14: 00000000000540a0 R15: 00007fffc3720210
[  344.800783][T11874]  </TASK>
[  345.351333][T11874] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  345.757137][T11874] F2FS-fs (loop6): f2fs_evict_inode: inconsistent node id, ino:17
[  346.407307][T13608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2667'.
[  346.423963][T13608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2667'.
[  346.575722][T13614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2671'.
[  346.870940][T13617] block nbd1: shutting down sockets
[  347.434738][T13628] loop1: detected capacity change from 0 to 32768
[  347.480886][T13623] block nbd6: Device being setup by another task
[  347.487617][T13628] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  347.499743][T13636] syzkaller0: entered promiscuous mode
[  347.505661][T13636] syzkaller0: entered allmulticast mode
[  347.517435][T13620] block nbd6: shutting down sockets
[  347.702966][T13643] loop0: detected capacity change from 0 to 32768
[  347.733216][T13628] XFS (loop1): Ending clean mount
[  347.734664][T13643] JBD2: Ignoring recovery information on journal
[  347.762957][T13628] XFS (loop1): Quotacheck needed: Please wait.
[  347.770402][T13643] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[  347.787456][T13628] XFS (loop1): Quotacheck: Done.
[  347.801237][T13643] OCFS2: ERROR (device loop0): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 23 has 4294967295 used bits but only 16777215 total
[  347.823295][T13643] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  347.833173][T13643] OCFS2: File system is now read-only.
[  347.838610][T13643] (syz.0.2678,13643,0):ocfs2_claim_suballoc_bits:2063 ERROR: status = -30
[  347.847149][T13643] (syz.0.2678,13643,0):__ocfs2_claim_clusters:2438 ERROR: status = -30
[  347.855432][T13643] (syz.0.2678,13643,0):__ocfs2_claim_clusters:2446 ERROR: status = -30
[  347.863712][T13643] (syz.0.2678,13643,0):ocfs2_add_clusters_in_btree:4838 ERROR: status = -30
[  347.872414][T13643] (syz.0.2678,13643,0):ocfs2_write_cluster:1132 ERROR: status = -30
[  347.880376][T13643] (syz.0.2678,13643,0):ocfs2_write_cluster_by_desc:1226 ERROR: status = -30
[  347.889065][T13643] (syz.0.2678,13643,0):ocfs2_write_begin_nolock:1799 ERROR: status = -30
[  347.897597][T13643] (syz.0.2678,13643,0):ocfs2_write_begin:1887 ERROR: status = -30
[  348.117188][ T5848] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  348.173226][ T5849] ocfs2: Unmounting device (7,0) on (node local)
[  348.203661][T13647] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2679'.
[  348.293434][T13605] loop4: detected capacity change from 0 to 32768
[  348.326539][T13605] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[  348.432228][T13657] Invalid ELF header magic: != ELF
[  348.564151][ T5853] ocfs2: Unmounting device (7,4) on (node local)
[  348.616681][T13659] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  348.647418][T13659] syzkaller0: entered promiscuous mode
[  348.669296][T13659] syzkaller0: entered allmulticast mode
[  348.725225][T13659] tipc: Resetting bearer <eth:syzkaller0>
[  348.752979][T13658] tipc: Resetting bearer <eth:syzkaller0>
[  348.776345][T13658] tipc: Disabling bearer <eth:syzkaller0>
[  348.841164][T13669] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[  348.847675][T13669] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  348.897060][T13669] vhci_hcd vhci_hcd.0: Device attached
[  348.924126][T13673] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  348.961036][ T5934] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  348.977482][T13669] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(5)
[  348.983993][T13669] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  349.080940][T13669] vhci_hcd vhci_hcd.0: Device attached
[  349.140097][T13680] loop5: detected capacity change from 0 to 32768
[  349.147418][ T5984] vhci_hcd: vhci_device speed not set
[  349.171904][ T5934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  349.188142][T13669] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  349.310770][ T5984] usb 41-1: new full-speed USB device number 3 using vhci_hcd
[  349.327039][T13686] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  349.352419][T13680] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  349.354952][ T5934] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  349.383497][T13686] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(14)
[  349.390096][T13686] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  349.457863][ T5934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  349.476260][T13680] OCFS2: ERROR (device loop5): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #2304 has bad signature 
[  349.491487][T13680] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  349.501323][T13680] OCFS2: File system is now read-only.
[  349.506765][T13680] (syz.5.2691,13680,0):ocfs2_search_chain:1852 ERROR: status = -30
[  349.514680][T13680] (syz.5.2691,13680,0):ocfs2_search_chain:1940 ERROR: status = -30
[  349.522592][T13680] (syz.5.2691,13680,0):ocfs2_claim_suballoc_bits:2010 ERROR: status = -30
[  349.531108][T13680] (syz.5.2691,13680,0):ocfs2_claim_suballoc_bits:2063 ERROR: status = -30
[  349.539589][T13680] (syz.5.2691,13680,0):__ocfs2_claim_clusters:2438 ERROR: status = -30
[  349.547835][T13680] (syz.5.2691,13680,0):__ocfs2_claim_clusters:2446 ERROR: status = -30
[  349.556166][T13680] (syz.5.2691,13680,0):ocfs2_local_alloc_new_window:1199 ERROR: status = -30
[  349.565269][T13680] (syz.5.2691,13680,0):ocfs2_local_alloc_new_window:1224 ERROR: status = -30
[  349.574183][T13680] (syz.5.2691,13680,0):ocfs2_local_alloc_slide_window:1298 ERROR: status = -30
[  349.583179][T13680] (syz.5.2691,13680,0):ocfs2_local_alloc_slide_window:1317 ERROR: status = -30
[  349.592132][T13680] (syz.5.2691,13680,0):ocfs2_reserve_local_alloc_bits:672 ERROR: status = -30
[  349.600990][T13680] (syz.5.2691,13680,0):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -30
[  349.609818][T13680] (syz.5.2691,13680,0):ocfs2_reserve_clusters_with_limit:1172 ERROR: status = -30
[  349.619052][T13680] (syz.5.2691,13680,0):ocfs2_reserve_clusters_with_limit:1221 ERROR: status = -30
[  349.628266][T13680] (syz.5.2691,13680,0):ocfs2_expand_inline_dir:2864 ERROR: status = -30
[  349.636623][T13680] (syz.5.2691,13680,0):ocfs2_extend_dir:3211 ERROR: status = -30
[  349.644364][T13680] (syz.5.2691,13680,0):ocfs2_prepare_dir_for_insert:4316 ERROR: status = -30
[  349.653162][T13680] (syz.5.2691,13680,0):ocfs2_rename:1486 ERROR: status = -30
[  349.660520][T13680] (syz.5.2691,13680,0):ocfs2_rename:1702 ERROR: status = -30
[  349.677602][T13686] vhci_hcd vhci_hcd.0: Device attached
[  349.860261][ T5934] usb 1-1: config 0 descriptor??
[  350.043956][T13691] loop1: detected capacity change from 0 to 32768
[  350.087790][T13692] vhci_hcd vhci_hcd.0: pdev(4) rhport(7) sockfd(11)
[  350.094402][T13692] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  350.106376][ T5852] (syz-executor,5852,1):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 72
[  350.159722][ T5852] ocfs2: Unmounting device (7,5) on (node local)
[  350.168481][T13691] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  350.179239][T13688] vhci_hcd: connection closed
[  350.179459][ T6080] vhci_hcd: stop threads
[  350.179691][T13670] vhci_hcd: connection reset by peer
[  350.200841][T13677] vhci_hcd: connection closed
[  350.231207][T13692] vhci_hcd vhci_hcd.0: Device attached
[  350.238261][T13693] vhci_hcd: connection closed
[  350.241731][ T6080] vhci_hcd: release socket
[  350.279852][ T6080] vhci_hcd: disconnect device
[  350.289809][ T5934] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor
[  350.300048][ T6080] vhci_hcd: stop threads
[  350.317583][ T6080] vhci_hcd: release socket
[  350.334517][ T6080] vhci_hcd: disconnect device
[  350.334567][T13691] XFS (loop1): Metadata corruption detected at xfs_dinode_verify+0x1a6/0x1570, inode 0x1141 dinode
[  350.341332][ T5934] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0009/input/input45
[  350.349886][T13691] XFS (loop1): Unmount and run xfs_repair
[  350.361540][ T6080] vhci_hcd: stop threads
[  350.367044][T13691] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  350.371669][ T6080] vhci_hcd: release socket
[  350.378693][T13691] 00000000: 49 4e 80 00 03 02 00 00 00 00 00 00 00 00 00 00  IN..............
[  350.392424][T13691] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  350.401381][T13691] 00000020: 1d cd 65 00 00 00 00 00 34 f7 58 68 80 1f e2 68  ..e.....4.Xh...h
[  350.410204][T13691] 00000030: 34 f7 58 68 80 1f e2 68 00 00 00 00 00 00 00 00  4.Xh...h........
[  350.419071][T13691] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  350.428016][T13691] 00000050: 00 00 00 02 00 00 00 00 00 00 00 04 00 00 00 00  ................
[  350.436876][T13691] 00000060: ff ff ff ff 22 b5 cb 17 00 00 00 00 00 00 00 02  ...."...........
[  350.445727][T13691] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08  ................
[  350.454619][T13691] XFS (loop1): metadata inode 0x1141 type 5 is corrupt
[  350.461601][T13691] XFS (loop1): failed to read RT inodes
[  350.467234][T13691] XFS (loop1): Uncorrected metadata errors detected; please run xfs_repair.
[  350.484138][ T6080] vhci_hcd: disconnect device
[  350.489499][ T6080] vhci_hcd: stop threads
[  350.494940][ T6080] vhci_hcd: release socket
[  350.500856][ T6080] vhci_hcd: disconnect device
[  350.700953][ T5934] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
[  350.915033][ T5934] usb 1-1: USB disconnect, device number 9
[  350.921053][   T43] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  351.120910][   T43] usb 2-1: Using ep0 maxpacket: 8
[  351.131401][   T43] usb 2-1: unable to get BOS descriptor or descriptor too short
[  351.143919][   T43] usb 2-1: config 4 interface 0 has no altsetting 0
[  351.161764][   T43] usb 2-1: string descriptor 0 read error: -22
[  351.168637][   T43] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  351.196667][   T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  351.382374][   T43] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  351.393815][   T43] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  351.408161][   T43] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  351.417679][   T43] usb 2-1: media controller created
[  351.436381][   T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  351.627716][T13706] usb 2-1: dvb_usb_au6610: wlen=0, aborting
[  351.783755][T13724] loop5: detected capacity change from 0 to 164
[  351.842487][   T43] zl10353_read_register: readreg error (reg=127, ret==0)
[  351.853250][T13724] A
[  351.984712][   T43] usb 2-1: USB disconnect, device number 10
[  352.059462][T13731] loop6: detected capacity change from 0 to 128
[  352.238537][T13737] netlink: 324 bytes leftover after parsing attributes in process `syz.0.2705'.
[  353.346065][T13742] loop6: detected capacity change from 0 to 32768
[  353.353319][T13742] XFS: noikeep mount option is deprecated.
[  353.406549][T13742] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  353.522083][T13742] XFS (loop6): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  353.555048][T13742] XFS (loop6): Starting recovery (logdev: internal)
[  353.603957][T13783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2719'.
[  353.626791][T13742] XFS (loop6): Ending recovery (logdev: internal)
[  353.704890][T13742] XFS (loop6): Metadata corruption detected at xfs_inobt_verify+0x9e/0x1f0, xfs_finobt block 0x8 
[  353.767762][T13790] Invalid ELF header magic: != ELF
[  353.776467][T13742] XFS (loop6): Unmount and run xfs_repair
[  353.791907][T13742] XFS (loop6): First 128 bytes of corrupted metadata buffer:
[  353.805162][T13742] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  353.834046][T13742] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  353.876677][T13742] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  353.901960][T13742] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02  ......1....N....
[  353.911465][T13800] syzkaller0: entered promiscuous mode
[  353.917111][T13800] syzkaller0: entered allmulticast mode
[  353.917123][T13797] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2725'.
[  353.917142][T13797] openvswitch: netlink: Flow actions attr not present in new flow.
[  353.925819][T13742] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  353.954342][T13742] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  353.963555][T13742] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  353.976561][T13742] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  354.004550][T13742] XFS (loop6): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x8 len 8 error 117
[  354.053564][T11874] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  354.063808][T11874] XFS (loop6): Uncorrected metadata errors detected; please run xfs_repair.
[  354.549108][T13821] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2736'.
[  354.628785][T13817] loop4: detected capacity change from 0 to 40427
[  354.636538][ T5984] vhci_hcd: vhci_device speed not set
[  354.646482][T13817] F2FS-fs (loop4): build fault injection rate: 14
[  354.652953][T13817] F2FS-fs (loop4): build fault injection type: 0x3bfe8c
[  354.664668][T13817] F2FS-fs (loop4): invalid crc value
[  354.677191][    C1] f2fs_printk: 3 callbacks suppressed
[  354.677213][    C1] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  354.701057][    C1] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  354.740325][T13817] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  354.749451][T13817] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  354.774812][T13817] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  354.787741][T13817] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  354.817448][T13833] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2741'.
[  354.851145][ T5853] syz-executor: attempt to access beyond end of device
[  354.851145][ T5853] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  354.870698][T13833] openvswitch: netlink: Flow actions attr not present in new flow.
[  354.878804][ T5853] CPU: 0 UID: 0 PID: 5853 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  354.878832][ T5853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  354.878846][ T5853] Call Trace:
[  354.878854][ T5853]  <TASK>
[  354.878862][ T5853]  dump_stack_lvl+0x189/0x250
[  354.878893][ T5853]  ? srso_alias_return_thunk+0x5/0xfbef5
[  354.878921][ T5853]  ? __pfx_dump_stack_lvl+0x10/0x10
[  354.878947][ T5853]  ? __pfx_queue_work_on+0x10/0x10
[  354.878970][ T5853]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  354.879002][ T5853]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  354.879041][ T5853]  f2fs_handle_critical_error+0x37c/0x540
[  354.879082][ T5853]  f2fs_write_end_io+0x886/0xb60
[  354.879115][ T5853]  __submit_merged_bio+0x27a/0x6a0
[  354.879149][ T5853]  __submit_merged_write_cond+0x255/0x530
[  354.879182][ T5853]  f2fs_write_data_pages+0x261d/0x3000
[  354.879216][ T5853]  ? srso_alias_return_thunk+0x5/0xfbef5
[  354.879258][ T5853]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  354.879299][ T5853]  ? srso_alias_return_thunk+0x5/0xfbef5
[  354.879340][ T5853]  ? __mod_zone_page_state+0xd7/0x140
[  354.879381][ T5853]  ? srso_alias_return_thunk+0x5/0xfbef5
[  354.879409][ T5853]  ? folios_put_refs+0x560/0x640
[  354.879443][ T5853]  ? __pfx_folios_put_refs+0x10/0x10
[  354.879469][ T5853]  ? rcu_is_watching+0x15/0xb0
[  354.879493][ T5853]  ? lru_add+0xa2f/0xd80
[  354.879524][ T5853]  ? lru_add+0x198/0xd80
[  354.879546][ T5853]  ? srso_alias_return_thunk+0x5/0xfbef5
[  354.879571][ T5853]  ? do_raw_spin_lock+0x121/0x290
[  354.879601][ T5853]  ? srso_alias_return_thunk+0x5/0xfbef5
[  354.879628][ T5853]  ? srso_alias_return_thunk+0x5/0xfbef5
[  354.879653][ T5853]  ? do_raw_spin_unlock+0x122/0x240
[  354.879680][ T5853]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  354.879715][ T5853]  do_writepages+0x32e/0x550
[  354.879745][ T5853]  ? srso_alias_return_thunk+0x5/0xfbef5
[  354.879770][ T5853]  ? rcu_is_watching+0x15/0xb0
[  354.879790][ T5853]  ? srso_alias_return_thunk+0x5/0xfbef5
[  354.879817][ T5853]  ? srso_alias_return_thunk+0x5/0xfbef5
[  354.879842][ T5853]  ? do_raw_spin_unlock+0x122/0x240
[  354.879871][ T5853]  filemap_fdatawrite+0x199/0x240
[  354.879904][ T5853]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  354.879961][ T5853]  ? srso_alias_return_thunk+0x5/0xfbef5
[  354.879989][ T5853]  ? rcu_is_watching+0x15/0xb0
[  354.880012][ T5853]  ? srso_alias_return_thunk+0x5/0xfbef5
[  354.880043][ T5853]  ? do_raw_spin_unlock+0x122/0x240
[  354.880076][ T5853]  f2fs_sync_dirty_inodes+0x31f/0x830
[  354.880110][ T5853]  f2fs_write_checkpoint+0x95a/0x1df0
[  354.880148][ T5853]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  354.880169][ T5853]  ? srso_alias_return_thunk+0x5/0xfbef5
[  354.880219][ T5853]  ? kill_f2fs_super+0x298/0x6c0
[  354.880242][ T5853]  kill_f2fs_super+0x2c3/0x6c0
[  354.880267][ T5853]  ? __pfx_kill_f2fs_super+0x10/0x10
[  354.880286][ T5853]  ? radix_tree_delete_item+0x2b6/0x400
[  354.880319][ T5853]  ? srso_alias_return_thunk+0x5/0xfbef5
[  354.880344][ T5853]  ? shrinker_free+0x2ce/0x3e0
[  354.880369][ T5853]  deactivate_locked_super+0xbc/0x130
[  354.880396][ T5853]  cleanup_mnt+0x425/0x4c0
[  354.880422][ T5853]  task_work_run+0x1d4/0x260
[  354.880454][ T5853]  ? __pfx_task_work_run+0x10/0x10
[  354.880486][ T5853]  ? __x64_sys_umount+0x122/0x160
[  354.880526][ T5853]  ? __pfx___x64_sys_umount+0x10/0x10
[  354.880558][ T5853]  ? srso_alias_return_thunk+0x5/0xfbef5
[  354.880588][ T5853]  ? srso_alias_return_thunk+0x5/0xfbef5
[  354.880617][ T5853]  ? rcu_is_watching+0x15/0xb0
[  354.880642][ T5853]  exit_to_user_mode_loop+0xec/0x110
[  354.880678][ T5853]  do_syscall_64+0x2bd/0x3b0
[  354.880713][ T5853]  ? srso_alias_return_thunk+0x5/0xfbef5
[  354.880742][ T5853]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.880764][ T5853]  ? srso_alias_return_thunk+0x5/0xfbef5
[  354.880792][ T5853]  ? exc_page_fault+0x9f/0xf0
[  354.880825][ T5853]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.880848][ T5853] RIP: 0033:0x7fb11d18ff17
[  354.880867][ T5853] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  354.880885][ T5853] RSP: 002b:00007ffdd894c5e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  354.880908][ T5853] RAX: 0000000000000000 RBX: 00007fb11d211c05 RCX: 00007fb11d18ff17
[  354.880923][ T5853] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdd894c6a0
[  354.880937][ T5853] RBP: 00007ffdd894c6a0 R08: 0000000000000000 R09: 0000000000000000
[  354.880951][ T5853] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdd894d730
[  354.880966][ T5853] R13: 00007fb11d211c05 R14: 00000000000569e6 R15: 00007ffdd894d770
[  354.880991][ T5853]  </TASK>
[  355.421990][ T5853] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  355.534560][T13845] syz_tun: entered allmulticast mode
[  355.825692][T13848] loop6: detected capacity change from 0 to 32768
[  355.844880][T13848] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  355.870008][T13848] XFS (loop6): Ending clean mount
[  355.915943][   T30] audit: type=1800 audit(1755805837.613:13): pid=13848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2746" name="file1" dev="loop6" ino=4422 res=0 errno=0
[  355.959179][T13865] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  355.993817][T13865] syzkaller0: entered promiscuous mode
[  356.007315][T11874] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  356.010377][T13865] syzkaller0: entered allmulticast mode
[  356.072411][T13865] tipc: Resetting bearer <eth:syzkaller0>
[  356.079258][T13863] tipc: Resetting bearer <eth:syzkaller0>
[  356.109487][T13863] tipc: Disabling bearer <eth:syzkaller0>
[  356.175703][T13868] loop4: detected capacity change from 0 to 64
[  356.267690][T13841] syz_tun: left allmulticast mode
[  356.322707][T13872] fuseblk: Bad value for 'fd'
[  356.334213][T13870] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2753'.
[  356.730210][T13880] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2757'.
[  356.770812][T13880] openvswitch: netlink: Flow actions attr not present in new flow.
[  356.993762][T13887] loop1: detected capacity change from 0 to 32768
[  357.012977][T13885] syzkaller0: entered promiscuous mode
[  357.018458][T13885] syzkaller0: entered allmulticast mode
[  357.104605][T13887] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  357.104639][T13887]   allowing incompatible features above 0.0: (unknown version)
[  357.104653][T13887]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  357.117862][T13896] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  357.127371][T13887] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  357.127408][T13887] bcachefs (loop1): initializing new filesystem
[  357.135122][T13887] bcachefs (loop1): going read-write
[  357.210392][T13896] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  357.219710][T13887] bcachefs (loop1): marking superblocks
[  357.232158][T13887] bcachefs (loop1): initializing freespace
[  357.233610][T13896] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  357.241263][T13887] bcachefs (loop1): done initializing freespace
[  357.252837][T13887] bcachefs (loop1): reading snapshots table
[  357.258292][T13896] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[  357.258784][T13887] bcachefs (loop1): reading snapshots done
[  357.273078][T13896] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  357.279585][T13896] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  357.292856][T13876] loop4: detected capacity change from 0 to 32768
[  357.315388][T13887] bcachefs (loop1): done starting filesystem
[  357.322600][T13876] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2755 (13876)
[  357.334235][T13896] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4)
[  357.344008][T13896] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  357.359787][T13896] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  357.383708][T13876] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  357.384433][ T5848] bcachefs (loop1): shutting down
[  357.430434][ T5848] bcachefs (loop1): going read-only
[  357.436106][ T5848] bcachefs (loop1): finished waiting for writes to stop
[  357.443265][T13876] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  357.475782][T13896] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  357.501511][ T5848] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3
[  357.515531][T13896] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  357.539905][T13896] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  357.557336][T13896] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4)
[  357.565464][T13896] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4)
[  357.587578][ T5848] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3
[  357.597520][T13876] BTRFS info (device loop4): rebuilding free space tree
[  357.614137][T13918] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[  357.620659][T13918] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  357.628457][T13918] vhci_hcd vhci_hcd.0: Device attached
[  357.635036][ T5848] bcachefs (loop1): clean shutdown complete, journal seq 4
[  357.751498][T13931] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0
[  357.762735][ T5848] bcachefs (loop1): marking filesystem clean
[  357.773145][T13876] BTRFS info (device loop4): enabling ssd optimizations
[  357.780181][T13876] BTRFS info (device loop4): enabling free space tree
[  357.828712][  T973] vhci_hcd: vhci_device speed not set
[  357.952270][T13937] 8021q: adding VLAN 0 to HW filter on device bond4
[  358.081188][T13876] BTRFS info (device loop4): force clearing of disk cache
[  358.088516][T13876] BTRFS info (device loop4): enabling auto defrag
[  358.088579][   T13] vhci_hcd: stop threads
[  358.095077][T13876] BTRFS info (device loop4): force zlib compression, level 3
[  358.111300][   T13] vhci_hcd: release socket
[  358.115844][   T13] vhci_hcd: disconnect device
[  358.135106][ T5848] bcachefs (loop1): shutdown complete
[  358.160697][  T973] usb 33-1: new full-speed USB device number 3 using vhci_hcd
[  358.170748][  T973] usb 33-1: enqueue for inactive port 0
[  358.229203][ T5853] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  358.240647][  T973] vhci_hcd: vhci_device speed not set
[  359.243357][ T5858] block nbd5: Receive control failed (result -32)
[  359.243562][T13953] block nbd5: shutting down sockets
[  359.350653][ T5984] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  359.490970][ T5984] usb 5-1: device descriptor read/64, error -71
[  359.741041][ T5984] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  359.901155][ T5984] usb 5-1: device descriptor read/64, error -71
[  360.039801][ T5984] usb usb5-port1: attempt power cycle
[  360.068790][T13986] syz_tun: entered allmulticast mode
[  360.282328][T13979] loop6: detected capacity change from 0 to 40427
[  360.292556][T13979] F2FS-fs (loop6): invalid crc value
[  360.354417][T13979] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  360.367475][T13979] F2FS-fs (loop6): Start checkpoint disabled!
[  360.375040][T13979] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  360.410754][ T5984] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  360.431532][ T5984] usb 5-1: device descriptor read/8, error -71
[  360.550797][  T973] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  360.622348][    T9] usb 3-1: new full-speed USB device number 29 using dummy_hcd
[  360.648733][T14008] openvswitch: netlink: Missing valid actions attribute.
[  360.658719][T14008] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  360.670397][T14008] tipc: Failed to remove unknown binding: 66,1,1/134418688:500896521/500896523
[  360.684718][T14008] tipc: Failed to remove unknown binding: 66,1,1/134418688:500896521/500896523
[  360.694209][ T5984] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  360.705590][T14008] tipc: Failed to remove unknown binding: 66,1,1/134418688:500896521/500896523
[  360.708765][T14010] fuse: Bad value for 'fd'
[  360.716089][T14008] netlink: 788 bytes leftover after parsing attributes in process `syz.0.2796'.
[  360.725475][  T973] usb 6-1: Using ep0 maxpacket: 8
[  360.732822][ T5984] usb 5-1: device descriptor read/8, error -71
[  360.744940][  T973] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  360.758861][  T973] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  360.787229][  T973] usb 6-1: Product: syz
[  360.792295][  T973] usb 6-1: Manufacturer: syz
[  360.796891][  T973] usb 6-1: SerialNumber: syz
[  360.806290][    T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  360.819604][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  360.828653][    T9] usb 3-1: Product: syz
[  360.830293][  T973] usb 6-1: config 0 descriptor??
[  360.834349][    T9] usb 3-1: Manufacturer: syz
[  360.834369][    T9] usb 3-1: SerialNumber: syz
[  360.835926][    T9] usb 3-1: config 0 descriptor??
[  360.853905][ T5984] usb usb5-port1: unable to enumerate USB device
[  361.124869][  T973] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  361.143493][    T9] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  361.410649][   T43] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  361.412598][T14015] loop0: detected capacity change from 0 to 32768
[  361.522593][T14015] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow
[  361.522629][T14015]   allowing incompatible features above 0.9: (unknown version)
[  361.522644][T14015]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  361.578482][T14015] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  361.587461][T14015] bcachefs (loop0): initializing new filesystem
[  361.631460][   T43] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  361.648512][   T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  361.673235][   T43] usb 2-1: Product: syz
[  361.685632][   T43] usb 2-1: Manufacturer: syz
[  361.690266][   T43] usb 2-1: SerialNumber: syz
[  361.708926][   T43] usb 2-1: config 0 descriptor??
[  361.716082][T14015] bcachefs (loop0): going read-write
[  361.729375][T14015] bcachefs (loop0): marking superblocks
[  361.751329][  T973] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  361.775272][T14015] bcachefs (loop0): initializing freespace
[  361.792207][T14015] bcachefs (loop0): done initializing freespace
[  361.817921][T14015] bcachefs (loop0): reading snapshots table
[  361.834185][T14015] bcachefs (loop0): reading snapshots done
[  361.849644][T14015] bcachefs (loop0): done starting filesystem
[  361.922697][T14025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2802'.
[  361.948209][   T43] cx82310_eth 2-1:0.0: probe with driver cx82310_eth failed with error -22
[  361.990539][   T43] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19!
[  362.010997][ T5849] bcachefs (loop0): shutting down
[  362.058988][   T43] usb 2-1: USB disconnect, device number 11
[  362.065111][ T5849] bcachefs (loop0): going read-only
[  362.072338][ T5849] bcachefs (loop0): finished waiting for writes to stop
[  362.127552][ T5849] bcachefs (loop0): flushing journal and stopping allocators, journal seq 6
[  362.160415][ T5849] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 7
[  362.173686][ T5849] bcachefs (loop0): clean shutdown complete, journal seq 8
[  362.193807][ T5849] bcachefs (loop0): marking filesystem clean
[  362.225392][ T5849] bcachefs (loop0): shutdown complete
[  362.369279][    T9] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  362.383351][    T9] usb 3-1: USB disconnect, device number 29
[  362.392538][T14050] loop6: detected capacity change from 0 to 1764
[  362.518348][T14055] openvswitch: netlink: Missing valid actions attribute.
[  362.529066][T14055] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  362.546954][T14055] tipc: Failed to remove unknown binding: 66,1,1/0:251240979/251240981
[  362.557121][T14055] tipc: Failed to remove unknown binding: 66,1,1/0:251240979/251240981
[  362.601790][T14055] tipc: Failed to remove unknown binding: 66,1,1/0:251240979/251240981
[  362.633930][T14055] netlink: 788 bytes leftover after parsing attributes in process `syz.1.2810'.
[  362.691644][T14045] loop4: detected capacity change from 0 to 40427
[  362.709661][T14045] F2FS-fs (loop4): invalid crc value
[  362.749482][T14045] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  362.758875][T14045] F2FS-fs (loop4): Start checkpoint disabled!
[  362.767041][T14045] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  362.799075][ T6319] kworker/u8:10: attempt to access beyond end of device
[  362.799075][ T6319] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  362.826174][ T6319] CPU: 0 UID: 0 PID: 6319 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) 
[  362.826208][ T6319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  362.826225][ T6319] Workqueue: writeback wb_workfn (flush-7:4)
[  362.826260][ T6319] Call Trace:
[  362.826269][ T6319]  <TASK>
[  362.826278][ T6319]  dump_stack_lvl+0x189/0x250
[  362.826309][ T6319]  ? srso_alias_return_thunk+0x5/0xfbef5
[  362.826341][ T6319]  ? __pfx_dump_stack_lvl+0x10/0x10
[  362.826375][ T6319]  ? __pfx_queue_work_on+0x10/0x10
[  362.826401][ T6319]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  362.826435][ T6319]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  362.826475][ T6319]  f2fs_handle_critical_error+0x37c/0x540
[  362.826516][ T6319]  f2fs_write_end_io+0x886/0xb60
[  362.826552][ T6319]  __submit_merged_bio+0x27a/0x6a0
[  362.826592][ T6319]  __submit_merged_write_cond+0x255/0x530
[  362.826631][ T6319]  f2fs_write_data_pages+0x261d/0x3000
[  362.826692][ T6319]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  362.826741][ T6319]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  362.826774][T14066] validate_nla: 42 callbacks suppressed
[  362.826789][T14066] netlink: 'syz.6.2812': attribute type 3 has an invalid length.
[  362.826800][ T6319]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  362.826843][ T6319]  ? trace_f2fs_writepages+0x7f/0x200
[  362.826878][ T6319]  ? f2fs_write_node_pages+0x478/0x6e0
[  362.826908][ T6319]  ? xa_load+0x60/0x210
[  362.826949][ T6319]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  362.826979][ T6319]  ? do_raw_spin_lock+0x121/0x290
[  362.827012][ T6319]  ? rcu_is_watching+0x15/0xb0
[  362.827039][ T6319]  ? srso_alias_return_thunk+0x5/0xfbef5
[  362.827066][ T6319]  ? rcu_qs+0xc4/0x170
[  362.827088][ T6319]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  362.827126][ T6319]  do_writepages+0x32e/0x550
[  362.827165][ T6319]  ? srso_alias_return_thunk+0x5/0xfbef5
[  362.827200][ T6319]  __writeback_single_inode+0x145/0xff0
[  362.827232][ T6319]  ? srso_alias_return_thunk+0x5/0xfbef5
[  362.827259][ T6319]  ? do_raw_spin_unlock+0x122/0x240
[  362.827293][ T6319]  writeback_sb_inodes+0x6c7/0x1010
[  362.827329][ T6319]  ? srso_alias_return_thunk+0x5/0xfbef5
[  362.827359][ T6319]  ? srso_alias_return_thunk+0x5/0xfbef5
[  362.827397][ T6319]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  362.827458][ T6319]  ? srso_alias_return_thunk+0x5/0xfbef5
[  362.827485][ T6319]  ? rcu_is_watching+0x15/0xb0
[  362.827509][ T6319]  ? srso_alias_return_thunk+0x5/0xfbef5
[  362.827543][ T6319]  wb_writeback+0x43b/0xaf0
[  362.827579][ T6319]  ? queue_io+0x341/0x590
[  362.827612][ T6319]  ? __pfx_wb_writeback+0x10/0x10
[  362.827649][ T6319]  ? rcu_is_watching+0x15/0xb0
[  362.827676][ T6319]  wb_workfn+0x409/0xef0
[  362.827711][ T6319]  ? __pfx_wb_workfn+0x10/0x10
[  362.827736][ T6319]  ? srso_alias_return_thunk+0x5/0xfbef5
[  362.827763][ T6319]  ? rcu_is_watching+0x15/0xb0
[  362.827796][ T6319]  ? srso_alias_return_thunk+0x5/0xfbef5
[  362.827823][ T6319]  ? rcu_is_watching+0x15/0xb0
[  362.827846][ T6319]  ? srso_alias_return_thunk+0x5/0xfbef5
[  362.827879][ T6319]  ? srso_alias_return_thunk+0x5/0xfbef5
[  362.827906][ T6319]  ? rcu_is_watching+0x15/0xb0
[  362.827930][ T6319]  ? srso_alias_return_thunk+0x5/0xfbef5
[  362.827957][ T6319]  ? lock_acquire+0x5f/0x360
[  362.827993][ T6319]  ? srso_alias_return_thunk+0x5/0xfbef5
[  362.828023][ T6319]  ? rcu_is_watching+0x15/0xb0
[  362.828046][ T6319]  ? process_scheduled_works+0x9ef/0x17b0
[  362.828070][ T6319]  ? process_scheduled_works+0x9ef/0x17b0
[  362.828095][ T6319]  process_scheduled_works+0xae1/0x17b0
[  362.828139][ T6319]  ? __pfx_process_scheduled_works+0x10/0x10
[  362.828168][ T6319]  ? srso_alias_return_thunk+0x5/0xfbef5
[  362.828203][ T6319]  worker_thread+0x8a0/0xda0
[  362.828246][ T6319]  kthread+0x711/0x8a0
[  362.828278][ T6319]  ? __pfx_worker_thread+0x10/0x10
[  362.828303][ T6319]  ? __pfx_kthread+0x10/0x10
[  362.828331][ T6319]  ? srso_alias_return_thunk+0x5/0xfbef5
[  362.828360][ T6319]  ? srso_alias_return_thunk+0x5/0xfbef5
[  362.828388][ T6319]  ? rcu_is_watching+0x15/0xb0
[  362.828411][ T6319]  ? __pfx_kthread+0x10/0x10
[  362.828442][ T6319]  ret_from_fork+0x3fc/0x770
[  362.828470][ T6319]  ? __pfx_ret_from_fork+0x10/0x10
[  362.828503][ T6319]  ? __switch_to_asm+0x39/0x70
[  362.828534][ T6319]  ? __switch_to_asm+0x33/0x70
[  362.828566][ T6319]  ? __pfx_kthread+0x10/0x10
[  362.828596][ T6319]  ret_from_fork_asm+0x1a/0x30
[  362.828640][ T6319]  </TASK>
[  362.829507][ T6319] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  362.836507][T14066] netlink: 'syz.6.2812': attribute type 3 has an invalid length.
[  362.836575][T14066] netlink: 'syz.6.2812': attribute type 3 has an invalid length.
[  362.970648][    T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  362.991926][T14066] netlink: 'syz.6.2812': attribute type 3 has an invalid length.
[  363.080196][T14071] No control pipe specified
[  363.081338][T14066] netlink: 'syz.6.2812': attribute type 3 has an invalid length.
[  363.165257][    T9] usb 2-1: Using ep0 maxpacket: 16
[  363.179052][T14066] netlink: 'syz.6.2812': attribute type 3 has an invalid length.
[  363.183986][    T9] usb 2-1: config 0 has no interfaces?
[  363.196778][T14066] netlink: 'syz.6.2812': attribute type 3 has an invalid length.
[  363.196835][T14066] netlink: 'syz.6.2812': attribute type 3 has an invalid length.
[  363.196886][T14066] netlink: 'syz.6.2812': attribute type 3 has an invalid length.
[  363.196936][T14066] netlink: 'syz.6.2812': attribute type 3 has an invalid length.
[  363.313905][   T43] usb 6-1: USB disconnect, device number 15
[  363.361764][    T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00
[  363.373966][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  363.398460][    T9] usb 2-1: config 0 descriptor??
[  363.617144][ T1206] usb 2-1: USB disconnect, device number 12
[  363.760970][   T43] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  363.922029][   T43] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  363.940638][   T43] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  363.973859][   T43] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  363.994052][   T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  364.016286][   T43] usb 6-1: config 0 descriptor??
[  364.242485][  T973] usb 6-1: USB disconnect, device number 16
[  364.296411][T14094] loop6: detected capacity change from 0 to 40427
[  364.336419][T14094] F2FS-fs (loop6): invalid crc value
[  364.432577][T14098] loop4: detected capacity change from 0 to 40427
[  364.456244][T14098] F2FS-fs (loop4): invalid crc value
[  364.470820][T14094] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  364.510336][T14094] F2FS-fs (loop6): Start checkpoint disabled!
[  364.530329][T14094] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  364.593532][T14098] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  364.606873][T14098] F2FS-fs (loop4): Start checkpoint disabled!
[  364.616309][ T1119] kworker/u8:5: attempt to access beyond end of device
[  364.616309][ T1119] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  364.616372][ T1119] CPU: 0 UID: 0 PID: 1119 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) 
[  364.616400][ T1119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  364.616417][ T1119] Workqueue: writeback wb_workfn (flush-7:6)
[  364.616453][ T1119] Call Trace:
[  364.616462][ T1119]  <TASK>
[  364.616472][ T1119]  dump_stack_lvl+0x189/0x250
[  364.616512][ T1119]  ? srso_alias_return_thunk+0x5/0xfbef5
[  364.616544][ T1119]  ? __pfx_dump_stack_lvl+0x10/0x10
[  364.616574][ T1119]  ? __pfx_queue_work_on+0x10/0x10
[  364.616598][ T1119]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  364.616632][ T1119]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  364.616672][ T1119]  f2fs_handle_critical_error+0x37c/0x540
[  364.616714][ T1119]  f2fs_write_end_io+0x886/0xb60
[  364.616751][ T1119]  __submit_merged_bio+0x27a/0x6a0
[  364.616794][ T1119]  __submit_merged_write_cond+0x255/0x530
[  364.616833][ T1119]  f2fs_write_data_pages+0x261d/0x3000
[  364.616897][ T1119]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  364.616946][ T1119]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  364.616999][ T1119]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  364.617044][ T1119]  ? trace_f2fs_writepages+0x7f/0x200
[  364.617080][ T1119]  ? f2fs_write_node_pages+0x478/0x6e0
[  364.617114][ T1119]  ? xa_load+0x60/0x210
[  364.617156][ T1119]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  364.617187][ T1119]  ? do_raw_spin_lock+0x121/0x290
[  364.617222][ T1119]  ? rcu_is_watching+0x15/0xb0
[  364.617248][ T1119]  ? srso_alias_return_thunk+0x5/0xfbef5
[  364.617276][ T1119]  ? rcu_qs+0xc4/0x170
[  364.617296][ T1119]  ? __pfx_rcu_qs+0x10/0x10
[  364.617316][ T1119]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  364.617356][ T1119]  do_writepages+0x32e/0x550
[  364.617410][ T1119]  ? srso_alias_return_thunk+0x5/0xfbef5
[  364.617438][ T1119]  ? do_raw_spin_lock+0x121/0x290
[  364.617470][ T1119]  ? srso_alias_return_thunk+0x5/0xfbef5
[  364.617542][ T1119]  __writeback_single_inode+0x145/0xff0
[  364.617576][ T1119]  ? srso_alias_return_thunk+0x5/0xfbef5
[  364.617604][ T1119]  ? do_raw_spin_unlock+0x122/0x240
[  364.617639][ T1119]  writeback_sb_inodes+0x6c7/0x1010
[  364.617677][ T1119]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  364.617716][ T1119]  ? fprop_reflect_period_percpu+0x205/0x330
[  364.617756][ T1119]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  364.617819][ T1119]  ? srso_alias_return_thunk+0x5/0xfbef5
[  364.617848][ T1119]  ? rcu_is_watching+0x15/0xb0
[  364.617873][ T1119]  ? srso_alias_return_thunk+0x5/0xfbef5
[  364.617908][ T1119]  wb_writeback+0x43b/0xaf0
[  364.617944][ T1119]  ? queue_io+0x341/0x590
[  364.617976][ T1119]  ? __pfx_wb_writeback+0x10/0x10
[  364.618013][ T1119]  ? rcu_is_watching+0x15/0xb0
[  364.618041][ T1119]  wb_workfn+0x409/0xef0
[  364.618077][ T1119]  ? __pfx_wb_workfn+0x10/0x10
[  364.618102][ T1119]  ? srso_alias_return_thunk+0x5/0xfbef5
[  364.618130][ T1119]  ? rcu_is_watching+0x15/0xb0
[  364.618156][ T1119]  ? srso_alias_return_thunk+0x5/0xfbef5
[  364.618184][ T1119]  ? rcu_is_watching+0x15/0xb0
[  364.618208][ T1119]  ? srso_alias_return_thunk+0x5/0xfbef5
[  364.618241][ T1119]  ? srso_alias_return_thunk+0x5/0xfbef5
[  364.618269][ T1119]  ? rcu_is_watching+0x15/0xb0
[  364.618293][ T1119]  ? srso_alias_return_thunk+0x5/0xfbef5
[  364.618321][ T1119]  ? lock_acquire+0x5f/0x360
[  364.618357][ T1119]  ? srso_alias_return_thunk+0x5/0xfbef5
[  364.618388][ T1119]  ? rcu_is_watching+0x15/0xb0
[  364.618411][ T1119]  ? process_scheduled_works+0x9ef/0x17b0
[  364.618435][ T1119]  ? process_scheduled_works+0x9ef/0x17b0
[  364.618460][ T1119]  process_scheduled_works+0xae1/0x17b0
[  364.618511][ T1119]  ? __pfx_process_scheduled_works+0x10/0x10
[  364.618542][ T1119]  ? srso_alias_return_thunk+0x5/0xfbef5
[  364.618578][ T1119]  worker_thread+0x8a0/0xda0
[  364.618623][ T1119]  kthread+0x711/0x8a0
[  364.618656][ T1119]  ? __pfx_worker_thread+0x10/0x10
[  364.618680][ T1119]  ? __pfx_kthread+0x10/0x10
[  364.618708][ T1119]  ? srso_alias_return_thunk+0x5/0xfbef5
[  364.618738][ T1119]  ? srso_alias_return_thunk+0x5/0xfbef5
[  364.618767][ T1119]  ? rcu_is_watching+0x15/0xb0
[  364.618791][ T1119]  ? __pfx_kthread+0x10/0x10
[  364.618823][ T1119]  ret_from_fork+0x3fc/0x770
[  364.618850][ T1119]  ? __pfx_ret_from_fork+0x10/0x10
[  364.618879][ T1119]  ? __switch_to_asm+0x39/0x70
[  364.618913][ T1119]  ? __switch_to_asm+0x33/0x70
[  364.618945][ T1119]  ? __pfx_kthread+0x10/0x10
[  364.618977][ T1119]  ret_from_fork_asm+0x1a/0x30
[  364.619024][ T1119]  </TASK>
[  364.619624][T14098] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  364.628101][ T1119] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  364.702996][ T6080] kworker/u8:8: attempt to access beyond end of device
[  364.702996][ T6080] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  364.703061][ T6080] CPU: 0 UID: 0 PID: 6080 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) 
[  364.703091][ T6080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  364.703108][ T6080] Workqueue: writeback wb_workfn (flush-7:4)
[  364.703143][ T6080] Call Trace:
[  364.703153][ T6080]  <TASK>
[  364.703162][ T6080]  dump_stack_lvl+0x189/0x250
[  364.703194][ T6080]  ? srso_alias_return_thunk+0x5/0xfbef5
[  364.703226][ T6080]  ? __pfx_dump_stack_lvl+0x10/0x10
[  364.703257][ T6080]  ? __pfx_queue_work_on+0x10/0x10
[  364.703283][ T6080]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  364.703317][ T6080]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  364.703358][ T6080]  f2fs_handle_critical_error+0x37c/0x540
[  364.703398][ T6080]  f2fs_write_end_io+0x886/0xb60
[  364.703435][ T6080]  __submit_merged_bio+0x27a/0x6a0
[  364.703473][ T6080]  __submit_merged_write_cond+0x255/0x530
[  364.703518][ T6080]  f2fs_write_data_pages+0x261d/0x3000
[  364.703581][ T6080]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  364.703629][ T6080]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  364.703653][ T6080]  ? fixup_exception+0xe2d/0x1d30
[  364.703707][ T6080]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  364.703752][ T6080]  ? trace_f2fs_writepages+0x7f/0x200
[  364.703786][ T6080]  ? f2fs_write_node_pages+0x478/0x6e0
[  364.703823][ T6080]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  364.703853][ T6080]  ? srso_alias_return_thunk+0x5/0xfbef5
[  364.703889][ T6080]  ? srso_alias_return_thunk+0x5/0xfbef5
[  364.703917][ T6080]  ? rcu_qs+0xc4/0x170
[  364.703938][ T6080]  ? __pfx_rcu_qs+0x10/0x10
[  364.703958][ T6080]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  364.703997][ T6080]  do_writepages+0x32e/0x550
[  364.704035][ T6080]  ? srso_alias_return_thunk+0x5/0xfbef5
[  364.704070][ T6080]  __writeback_single_inode+0x145/0xff0
[  364.704102][ T6080]  ? srso_alias_return_thunk+0x5/0xfbef5
[  364.704129][ T6080]  ? do_raw_spin_unlock+0x122/0x240
[  364.704163][ T6080]  writeback_sb_inodes+0x6c7/0x1010
[  364.704204][ T6080]  ? srso_alias_return_thunk+0x5/0xfbef5
[  364.704234][ T6080]  ? fprop_reflect_period_percpu+0x6b/0x330
[  364.704273][ T6080]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  364.704335][ T6080]  ? srso_alias_return_thunk+0x5/0xfbef5
[  364.704363][ T6080]  ? rcu_is_watching+0x15/0xb0
[  364.704386][ T6080]  ? srso_alias_return_thunk+0x5/0xfbef5
[  364.704421][ T6080]  wb_writeback+0x43b/0xaf0
[  364.704457][ T6080]  ? queue_io+0x341/0x590
[  364.704489][ T6080]  ? __pfx_wb_writeback+0x10/0x10
[  364.704532][ T6080]  ? rcu_is_watching+0x15/0xb0
[  364.704560][ T6080]  wb_workfn+0x409/0xef0
[  364.704596][ T6080]  ? __pfx_wb_workfn+0x10/0x10
[  364.704620][ T6080]  ? srso_alias_return_thunk+0x5/0xfbef5
[  364.704647][ T6080]  ? rcu_is_watching+0x15/0xb0
[  364.704672][ T6080]  ? srso_alias_return_thunk+0x5/0xfbef5
[  364.704706][ T6080]  ? rcu_is_watching+0x15/0xb0
[  364.704729][ T6080]  ? srso_alias_return_thunk+0x5/0xfbef5
[  364.704762][ T6080]  ? srso_alias_return_thunk+0x5/0xfbef5
[  364.704789][ T6080]  ? rcu_is_watching+0x15/0xb0
[  364.704812][ T6080]  ? srso_alias_return_thunk+0x5/0xfbef5
[  364.704840][ T6080]  ? lock_acquire+0x5f/0x360
[  364.704875][ T6080]  ? srso_alias_return_thunk+0x5/0xfbef5
[  364.704906][ T6080]  ? rcu_is_watching+0x15/0xb0
[  364.704929][ T6080]  ? process_scheduled_works+0x9ef/0x17b0
[  364.704952][ T6080]  ? process_scheduled_works+0x9ef/0x17b0
[  364.704977][ T6080]  process_scheduled_works+0xae1/0x17b0
[  364.705023][ T6080]  ? __pfx_process_scheduled_works+0x10/0x10
[  364.705052][ T6080]  ? srso_alias_return_thunk+0x5/0xfbef5
[  364.705087][ T6080]  worker_thread+0x8a0/0xda0
[  364.705114][ T6080]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  364.705156][ T6080]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  364.705188][ T6080]  ? __kthread_parkme+0x7b/0x200
[  364.705222][ T6080]  kthread+0x711/0x8a0
[  364.705254][ T6080]  ? __pfx_worker_thread+0x10/0x10
[  364.705278][ T6080]  ? __pfx_kthread+0x10/0x10
[  364.705305][ T6080]  ? srso_alias_return_thunk+0x5/0xfbef5
[  364.705335][ T6080]  ? srso_alias_return_thunk+0x5/0xfbef5
[  364.705362][ T6080]  ? rcu_is_watching+0x15/0xb0
[  364.705387][ T6080]  ? __pfx_kthread+0x10/0x10
[  364.705417][ T6080]  ret_from_fork+0x3fc/0x770
[  364.705444][ T6080]  ? __pfx_ret_from_fork+0x10/0x10
[  364.705474][ T6080]  ? __switch_to_asm+0x39/0x70
[  364.705510][ T6080]  ? __switch_to_asm+0x33/0x70
[  364.705541][ T6080]  ? __pfx_kthread+0x10/0x10
[  364.705571][ T6080]  ret_from_fork_asm+0x1a/0x30
[  364.705617][ T6080]  </TASK>
[  364.705648][ T6080] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  364.748724][T14118] overlayfs: missing 'lowerdir'
[  364.808913][T14119] binder: 14112:14119 ioctl c0306201 0 returned -14
[  364.822973][T14120] Invalid ELF header magic: != ELF
[  365.250898][ T1206] usb 6-1: new full-speed USB device number 17 using dummy_hcd
[  365.793843][ T1206] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  365.810656][ T1206] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  365.820912][T14134] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  365.840716][ T1206] usb 6-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00
[  365.849131][T14134] syzkaller0: entered promiscuous mode
[  365.862724][T14134] syzkaller0: entered allmulticast mode
[  365.872951][ T1206] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  365.889771][T14134] tipc: Resetting bearer <eth:syzkaller0>
[  365.906405][ T1206] usb 6-1: config 0 descriptor??
[  365.912669][T14133] tipc: Resetting bearer <eth:syzkaller0>
[  365.919110][T14124] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  365.950246][T14133] tipc: Disabling bearer <eth:syzkaller0>
[  366.004562][T14140] syzkaller0: entered promiscuous mode
[  366.010065][T14140] syzkaller0: entered allmulticast mode
[  366.193496][T14153] pimreg: tun_chr_ioctl cmd 1074025676
[  366.199048][T14153] pimreg: owner set to 60929
[  366.382593][ T1206] hid-rmi 0003:0461:4E72.000A: global environment stack underflow
[  366.390459][ T1206] hid-rmi 0003:0461:4E72.000A: item 0 0 1 11 parsing failed
[  366.411168][ T1206] hid-rmi 0003:0461:4E72.000A: parse failed
[  366.420714][ T1206] hid-rmi 0003:0461:4E72.000A: probe with driver hid-rmi failed with error -22
[  366.503870][T14145] loop0: detected capacity change from 0 to 32768
[  366.532181][T14145] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2845 (14145)
[  366.564866][T14149] loop1: detected capacity change from 0 to 32768
[  366.575239][T14149] XFS: noikeep mount option is deprecated.
[  366.590661][T14145] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  366.601776][ T1206] usb 6-1: USB disconnect, device number 17
[  366.611839][T14145] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  366.615656][T14149] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  366.620386][T14145] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  366.688682][T14149] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  366.703763][T14147] loop4: detected capacity change from 0 to 40427
[  366.715677][T14149] XFS (loop1): Starting recovery (logdev: internal)
[  366.723086][T14147] F2FS-fs (loop4): build fault injection rate: 14
[  366.729599][T14147] F2FS-fs (loop4): build fault injection type: 0x3bfe8c
[  366.745109][T14145] BTRFS info (device loop0): rebuilding free space tree
[  366.746865][T14149] XFS (loop1): Ending recovery (logdev: internal)
[  366.752458][T14147] F2FS-fs (loop4): invalid crc value
[  366.769264][T14149] XFS (loop1): Metadata corruption detected at xfs_inobt_verify+0x9e/0x1f0, xfs_finobt block 0x8 
[  366.783553][T14149] XFS (loop1): Unmount and run xfs_repair
[  366.789326][T14149] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  366.789351][T14145] BTRFS info (device loop0): disabling free space tree
[  366.796926][T14149] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  366.812963][T14145] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  366.813267][T14149] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  366.825999][T14145] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  366.832327][T14149] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  366.847022][    C0] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  366.870577][    C0] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  366.878199][T14149] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02  ......1....N....
[  366.904062][T14145] BTRFS info (device loop0): setting nodatasum
[  366.910381][T14149] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  366.920415][T14145] BTRFS info (device loop0): setting nodatacow
[  366.929518][T14149] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  366.930636][T14145] BTRFS info (device loop0): enabling disk space caching
[  366.957632][T14149] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  366.958016][T14147] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  366.976438][T14145] BTRFS info (device loop0): force clearing of disk cache
[  366.983791][T14147] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  366.994254][T14145] BTRFS info (device loop0): doing ref verification
[  367.006165][T14147] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  367.008886][T14149] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  367.056826][T14149] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x8 len 8 error 117
[  367.095537][T14147] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  367.119860][ T5848] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  367.128857][ T5848] XFS (loop1): Uncorrected metadata errors detected; please run xfs_repair.
[  367.144383][ T5849] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  367.157038][T14147] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_convert_inline_inode+0x6bd/0x880
[  367.314630][ T5853] syz-executor: attempt to access beyond end of device
[  367.314630][ T5853] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  367.337912][ T5853] CPU: 1 UID: 0 PID: 5853 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  367.337948][ T5853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  367.337965][ T5853] Call Trace:
[  367.337974][ T5853]  <TASK>
[  367.337984][ T5853]  dump_stack_lvl+0x189/0x250
[  367.338018][ T5853]  ? srso_alias_return_thunk+0x5/0xfbef5
[  367.338050][ T5853]  ? __pfx_dump_stack_lvl+0x10/0x10
[  367.338079][ T5853]  ? __pfx_queue_work_on+0x10/0x10
[  367.338104][ T5853]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  367.338138][ T5853]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  367.338176][ T5853]  f2fs_handle_critical_error+0x37c/0x540
[  367.338217][ T5853]  f2fs_write_end_io+0x886/0xb60
[  367.338254][ T5853]  __submit_merged_bio+0x27a/0x6a0
[  367.338293][ T5853]  __submit_merged_write_cond+0x255/0x530
[  367.338333][ T5853]  f2fs_write_data_pages+0x261d/0x3000
[  367.338372][ T5853]  ? ktime_get+0x3e/0x1f0
[  367.338422][ T5853]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  367.338459][ T5853]  ? __switch_to+0xdae/0x1670
[  367.338534][ T5853]  ? rcu_is_watching+0x15/0xb0
[  367.338559][ T5853]  ? srso_alias_return_thunk+0x5/0xfbef5
[  367.338586][ T5853]  ? trace_sched_exit_tp+0x36/0x110
[  367.338618][ T5853]  ? srso_alias_return_thunk+0x5/0xfbef5
[  367.338646][ T5853]  ? __schedule+0x17ae/0x4cc0
[  367.338701][ T5853]  ? srso_alias_return_thunk+0x5/0xfbef5
[  367.338728][ T5853]  ? do_raw_spin_lock+0x121/0x290
[  367.338763][ T5853]  ? srso_alias_return_thunk+0x5/0xfbef5
[  367.338794][ T5853]  ? srso_alias_return_thunk+0x5/0xfbef5
[  367.338822][ T5853]  ? do_raw_spin_unlock+0x122/0x240
[  367.338852][ T5853]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  367.338891][ T5853]  do_writepages+0x32e/0x550
[  367.338926][ T5853]  ? srso_alias_return_thunk+0x5/0xfbef5
[  367.338953][ T5853]  ? rcu_is_watching+0x15/0xb0
[  367.338976][ T5853]  ? srso_alias_return_thunk+0x5/0xfbef5
[  367.339007][ T5853]  ? srso_alias_return_thunk+0x5/0xfbef5
[  367.339034][ T5853]  ? do_raw_spin_unlock+0x122/0x240
[  367.339068][ T5853]  filemap_fdatawrite+0x199/0x240
[  367.339104][ T5853]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  367.339166][ T5853]  ? srso_alias_return_thunk+0x5/0xfbef5
[  367.339193][ T5853]  ? rcu_is_watching+0x15/0xb0
[  367.339217][ T5853]  ? srso_alias_return_thunk+0x5/0xfbef5
[  367.339248][ T5853]  ? do_raw_spin_unlock+0x122/0x240
[  367.339281][ T5853]  f2fs_sync_dirty_inodes+0x31f/0x830
[  367.339316][ T5853]  f2fs_write_checkpoint+0x95a/0x1df0
[  367.339358][ T5853]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  367.339381][ T5853]  ? srso_alias_return_thunk+0x5/0xfbef5
[  367.339442][ T5853]  ? kill_f2fs_super+0x298/0x6c0
[  367.339469][ T5853]  kill_f2fs_super+0x2c3/0x6c0
[  367.339497][ T5853]  ? __pfx_kill_f2fs_super+0x10/0x10
[  367.339526][ T5853]  ? radix_tree_delete_item+0x2b6/0x400
[  367.339564][ T5853]  ? srso_alias_return_thunk+0x5/0xfbef5
[  367.339592][ T5853]  ? shrinker_free+0x2ce/0x3e0
[  367.339620][ T5853]  deactivate_locked_super+0xbc/0x130
[  367.339650][ T5853]  cleanup_mnt+0x425/0x4c0
[  367.339680][ T5853]  task_work_run+0x1d4/0x260
[  367.339717][ T5853]  ? __pfx_task_work_run+0x10/0x10
[  367.339749][ T5853]  ? __x64_sys_umount+0x122/0x160
[  367.339782][ T5853]  ? __pfx___x64_sys_umount+0x10/0x10
[  367.339813][ T5853]  ? srso_alias_return_thunk+0x5/0xfbef5
[  367.339843][ T5853]  ? srso_alias_return_thunk+0x5/0xfbef5
[  367.339871][ T5853]  ? rcu_is_watching+0x15/0xb0
[  367.339897][ T5853]  exit_to_user_mode_loop+0xec/0x110
[  367.339934][ T5853]  do_syscall_64+0x2bd/0x3b0
[  367.339971][ T5853]  ? srso_alias_return_thunk+0x5/0xfbef5
[  367.340000][ T5853]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.340024][ T5853]  ? srso_alias_return_thunk+0x5/0xfbef5
[  367.340052][ T5853]  ? exc_page_fault+0x9f/0xf0
[  367.340087][ T5853]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.340111][ T5853] RIP: 0033:0x7fb11d18ff17
[  367.340133][ T5853] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  367.340154][ T5853] RSP: 002b:00007ffdd894c5e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  367.340179][ T5853] RAX: 0000000000000000 RBX: 00007fb11d211c05 RCX: 00007fb11d18ff17
[  367.340197][ T5853] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdd894c6a0
[  367.340213][ T5853] RBP: 00007ffdd894c6a0 R08: 0000000000000000 R09: 0000000000000000
[  367.340230][ T5853] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdd894d730
[  367.340247][ T5853] R13: 00007fb11d211c05 R14: 0000000000059a98 R15: 00007ffdd894d770
[  367.340277][ T5853]  </TASK>
[  367.816270][ T5853] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  368.268947][T14206] loop6: detected capacity change from 0 to 32768
[  368.312981][T14206] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  368.339103][T14206] XFS (loop6): Ending clean mount
[  368.346461][T14206] XFS (loop6): Quotacheck needed: Please wait.
[  368.368864][T14206] XFS (loop6): Quotacheck: Done.
[  368.466158][T14224] fuse: Unknown parameter '0x000000000000000a'
[  368.628247][T11874] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  369.398819][T14237] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2865'.
[  369.447964][T14237] openvswitch: netlink: Flow actions attr not present in new flow.
[  369.766266][T14248] validate_nla: 94 callbacks suppressed
[  369.766287][T14248] netlink: 'syz.0.2869': attribute type 3 has an invalid length.
[  369.859181][T14248] netlink: 'syz.0.2869': attribute type 3 has an invalid length.
[  370.000710][T14248] netlink: 'syz.0.2869': attribute type 3 has an invalid length.
[  370.008687][T14248] netlink: 'syz.0.2869': attribute type 3 has an invalid length.
[  370.023745][T14248] netlink: 'syz.0.2869': attribute type 3 has an invalid length.
[  370.041316][T14248] netlink: 'syz.0.2869': attribute type 3 has an invalid length.
[  370.065173][T14248] netlink: 'syz.0.2869': attribute type 3 has an invalid length.
[  370.087169][T14248] netlink: 'syz.0.2869': attribute type 3 has an invalid length.
[  370.123129][T14248] netlink: 'syz.0.2869': attribute type 3 has an invalid length.
[  370.139317][T14248] netlink: 'syz.0.2869': attribute type 3 has an invalid length.
[  370.151020][T14265] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2875'.
[  370.316894][T14277] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2880'.
[  370.328555][T14277] openvswitch: netlink: Flow actions attr not present in new flow.
[  370.409217][T14281] netlink: 642 bytes leftover after parsing attributes in process `syz.2.2882'.
[  370.525872][T14279] loop4: detected capacity change from 0 to 32768
[  370.558380][T14279] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  370.574745][T14291] fuseblk: Bad value for 'fd'
[  370.611625][T14279] XFS (loop4): Ending clean mount
[  370.619759][T14279] XFS (loop4): Quotacheck needed: Please wait.
[  370.640117][T14279] XFS (loop4): Quotacheck: Done.
[  370.727288][T14305] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  371.095596][T14309] tipc: Resetting bearer <eth:syzkaller0>
[  371.100933][ T5853] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  371.311466][T14311] Invalid ELF header magic: != ELF
[  371.335940][T14315] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2892'.
[  371.803860][T14325] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  371.843737][T14325] syzkaller0: entered promiscuous mode
[  371.859697][T14326] loop0: detected capacity change from 0 to 1024
[  371.879622][T14325] syzkaller0: entered allmulticast mode
[  371.970279][ T1119] hfsplus: b-tree write err: -5, ino 4
[  372.513287][T14341] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  372.555808][T14341] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  372.572798][T14343] Invalid ELF header magic: != ELF
[  372.791367][T14346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2903'.
[  372.888606][T14346] hsr_slave_1 (unregistering): left promiscuous mode
[  372.944100][T14347] loop5: detected capacity change from 0 to 4096
[  372.990601][T14347] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  373.029578][T14330] loop6: detected capacity change from 0 to 32768
[  373.071136][T14330] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2898 (14330)
[  373.130080][T14347] ntfs3(loop5): ino=19, mi_enum_attr
[  373.146134][T14347] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  373.161203][T14330] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  373.220666][T14330] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm
[  373.327185][T14330] BTRFS info (device loop6): rebuilding free space tree
[  373.348219][T14364] syzkaller0: entered promiscuous mode
[  373.377274][T14364] syzkaller0: entered allmulticast mode
[  373.556542][T14373] loop0: detected capacity change from 0 to 32768
[  373.570263][T14373] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2908 (14373)
[  373.570468][T14330] BTRFS info (device loop6): enabling ssd optimizations
[  373.626300][T14330] BTRFS info (device loop6): enabling free space tree
[  373.626558][T14373] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  373.643409][T14373] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[  373.667281][T14330] BTRFS info (device loop6): force clearing of disk cache
[  373.696500][T14330] BTRFS info (device loop6): enabling auto defrag
[  373.786114][T14330] BTRFS info (device loop6): force zlib compression, level 3
[  373.786594][T14373] BTRFS info (device loop0): enabling ssd optimizations
[  373.804006][T14373] BTRFS info (device loop0): enabling free space tree
[  373.937652][ T5849] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  374.019414][T14393] loop4: detected capacity change from 0 to 4096
[  374.038891][T11874] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  374.127956][T14399] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  374.533263][T14405] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  374.549115][T14405] tipc: Failed to remove unknown binding: 66,1,1/0:4211831018/4211831020
[  374.568554][T14405] tipc: Failed to remove unknown binding: 66,1,1/0:4211831018/4211831020
[  374.582032][T14405] tipc: Failed to remove unknown binding: 66,1,1/0:4211831018/4211831020
[  374.595580][T14405] netlink: 788 bytes leftover after parsing attributes in process `syz.4.2915'.
[  374.789866][T14413] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  374.800208][T14413] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  374.817692][T14413] Invalid ELF header magic: != ELF
[  375.284946][T14427] syzkaller0: entered promiscuous mode
[  375.290824][T14427] syzkaller0: entered allmulticast mode
[  375.596750][T14434] loop6: detected capacity change from 0 to 16
[  375.625871][T14434] MTD: Attempt to mount non-MTD device "/dev/loop6"
[  376.041540][T14444] loop1: detected capacity change from 0 to 32768
[  376.084724][T14444] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  376.127146][T14444] XFS (loop1): Ending clean mount
[  376.137406][T14444] XFS (loop1): Quotacheck needed: Please wait.
[  376.147102][T14444] XFS (loop1): Quotacheck: Done.
[  376.410817][ T5929] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  376.572136][ T5929] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  376.598226][ T5929] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  376.608855][T14463] loop0: detected capacity change from 0 to 1024
[  376.625920][ T5929] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  376.647440][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  376.650427][T14463] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  376.657051][ T5929] usb 3-1: config 0 descriptor??
[  376.767983][ T5848] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  376.771110][T14461] loop4: detected capacity change from 0 to 32768
[  376.783873][T14461] XFS: noikeep mount option is deprecated.
[  376.802463][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  376.829786][T14461] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  376.914846][T14461] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  376.938325][T14461] XFS (loop4): Starting recovery (logdev: internal)
[  376.983487][T14461] XFS (loop4): Ending recovery (logdev: internal)
[  377.045672][T14461] XFS (loop4): Metadata corruption detected at xfs_inobt_verify+0x9e/0x1f0, xfs_finobt block 0x8 
[  377.093399][T14461] XFS (loop4): Unmount and run xfs_repair
[  377.119072][T14461] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  377.173598][T14461] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  377.227876][T14461] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  377.263263][T14461] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  377.292720][T14461] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02  ......1....N....
[  377.311060][T14461] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  377.370662][T14461] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  377.398352][T14461] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  377.449397][T14461] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  377.478714][T14461] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x8 len 8 error 117
[  377.519135][ T5853] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  377.529655][ T5853] XFS (loop4): Uncorrected metadata errors detected; please run xfs_repair.
[  377.893417][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  378.369469][T14511] binder: 14508:14511 ioctl c0306201 0 returned -14
[  379.023132][T14513] loop0: detected capacity change from 0 to 40427
[  379.053612][T14513] F2FS-fs (loop0): build fault injection rate: 14
[  379.060108][T14513] F2FS-fs (loop0): build fault injection type: 0x3bfe8c
[  379.069564][T14513] F2FS-fs (loop0): invalid crc value
[  379.087667][    C1] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  379.104800][    C1] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  379.140867][T14513] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  379.149814][T14513] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  379.164040][T14513] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  379.177981][T14513] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  379.199781][ T5929] usb 3-1: USB disconnect, device number 30
[  379.210067][T14513] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of f2fs_new_node_folio+0x131/0xa40
[  379.221600][T14513] F2FS-fs (loop0): inject dquot initialize in f2fs_dquot_initialize of f2fs_setxattr+0x142/0x380
[  379.281032][ T5849] syz-executor: attempt to access beyond end of device
[  379.281032][ T5849] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  379.348812][ T5849] CPU: 0 UID: 0 PID: 5849 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  379.348848][ T5849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  379.348865][ T5849] Call Trace:
[  379.348875][ T5849]  <TASK>
[  379.348884][ T5849]  dump_stack_lvl+0x189/0x250
[  379.348921][ T5849]  ? srso_alias_return_thunk+0x5/0xfbef5
[  379.348953][ T5849]  ? __pfx_dump_stack_lvl+0x10/0x10
[  379.348984][ T5849]  ? __pfx_queue_work_on+0x10/0x10
[  379.349009][ T5849]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  379.349042][ T5849]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  379.349083][ T5849]  f2fs_handle_critical_error+0x37c/0x540
[  379.349125][ T5849]  f2fs_write_end_io+0x886/0xb60
[  379.349161][ T5849]  __submit_merged_bio+0x27a/0x6a0
[  379.349201][ T5849]  __submit_merged_write_cond+0x255/0x530
[  379.349240][ T5849]  f2fs_write_data_pages+0x261d/0x3000
[  379.349305][ T5849]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  379.349353][ T5849]  ? srso_alias_return_thunk+0x5/0xfbef5
[  379.349382][ T5849]  ? kernel_text_address+0xa5/0xe0
[  379.349440][ T5849]  ? ktime_get+0x3e/0x1f0
[  379.349469][ T5849]  ? srso_alias_return_thunk+0x5/0xfbef5
[  379.349497][ T5849]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  379.349527][ T5849]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  379.349565][ T5849]  ? srso_alias_return_thunk+0x5/0xfbef5
[  379.349594][ T5849]  ? rcu_is_watching+0x15/0xb0
[  379.349622][ T5849]  ? __resched_curr+0x202/0x3e0
[  379.349647][ T5849]  ? srso_alias_return_thunk+0x5/0xfbef5
[  379.349676][ T5849]  ? do_raw_spin_lock+0x121/0x290
[  379.349710][ T5849]  ? srso_alias_return_thunk+0x5/0xfbef5
[  379.349742][ T5849]  ? srso_alias_return_thunk+0x5/0xfbef5
[  379.349776][ T5849]  ? do_raw_spin_unlock+0x122/0x240
[  379.349807][ T5849]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  379.349847][ T5849]  do_writepages+0x32e/0x550
[  379.349884][ T5849]  ? srso_alias_return_thunk+0x5/0xfbef5
[  379.349914][ T5849]  ? rcu_is_watching+0x15/0xb0
[  379.349938][ T5849]  ? srso_alias_return_thunk+0x5/0xfbef5
[  379.349971][ T5849]  ? srso_alias_return_thunk+0x5/0xfbef5
[  379.349999][ T5849]  ? do_raw_spin_unlock+0x122/0x240
[  379.350033][ T5849]  filemap_fdatawrite+0x199/0x240
[  379.350069][ T5849]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  379.350132][ T5849]  ? srso_alias_return_thunk+0x5/0xfbef5
[  379.350161][ T5849]  ? rcu_is_watching+0x15/0xb0
[  379.350185][ T5849]  ? srso_alias_return_thunk+0x5/0xfbef5
[  379.350217][ T5849]  ? do_raw_spin_unlock+0x122/0x240
[  379.350252][ T5849]  f2fs_sync_dirty_inodes+0x31f/0x830
[  379.350288][ T5849]  f2fs_write_checkpoint+0x95a/0x1df0
[  379.350331][ T5849]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  379.350355][ T5849]  ? srso_alias_return_thunk+0x5/0xfbef5
[  379.350418][ T5849]  ? kill_f2fs_super+0x298/0x6c0
[  379.350446][ T5849]  kill_f2fs_super+0x2c3/0x6c0
[  379.350475][ T5849]  ? __pfx_kill_f2fs_super+0x10/0x10
[  379.350499][ T5849]  ? radix_tree_delete_item+0x2b6/0x400
[  379.350537][ T5849]  ? srso_alias_return_thunk+0x5/0xfbef5
[  379.350570][ T5849]  ? shrinker_free+0x2ce/0x3e0
[  379.350599][ T5849]  deactivate_locked_super+0xbc/0x130
[  379.350631][ T5849]  cleanup_mnt+0x425/0x4c0
[  379.350661][ T5849]  task_work_run+0x1d4/0x260
[  379.350698][ T5849]  ? __pfx_task_work_run+0x10/0x10
[  379.350730][ T5849]  ? __x64_sys_umount+0x122/0x160
[  379.350770][ T5849]  ? __pfx___x64_sys_umount+0x10/0x10
[  379.350801][ T5849]  ? srso_alias_return_thunk+0x5/0xfbef5
[  379.350832][ T5849]  ? srso_alias_return_thunk+0x5/0xfbef5
[  379.350859][ T5849]  ? rcu_is_watching+0x15/0xb0
[  379.350886][ T5849]  exit_to_user_mode_loop+0xec/0x110
[  379.350923][ T5849]  do_syscall_64+0x2bd/0x3b0
[  379.350961][ T5849]  ? srso_alias_return_thunk+0x5/0xfbef5
[  379.350990][ T5849]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  379.351013][ T5849]  ? srso_alias_return_thunk+0x5/0xfbef5
[  379.351042][ T5849]  ? exc_page_fault+0x9f/0xf0
[  379.351077][ T5849]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  379.351101][ T5849] RIP: 0033:0x7f21f558ff17
[  379.351123][ T5849] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  379.351145][ T5849] RSP: 002b:00007ffcf4134338 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  379.351171][ T5849] RAX: 0000000000000000 RBX: 00007f21f5611c05 RCX: 00007f21f558ff17
[  379.351183][ T5849] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcf41343f0
[  379.351195][ T5849] RBP: 00007ffcf41343f0 R08: 0000000000000000 R09: 0000000000000000
[  379.351206][ T5849] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcf4135480
[  379.351218][ T5849] R13: 00007f21f5611c05 R14: 000000000005c95f R15: 00007ffcf41354c0
[  379.351241][ T5849]  </TASK>
[  379.804567][T14518] syz.2.2948 (14518): drop_caches: 2
[  379.893060][ T5849] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  380.035069][T14522] ref_ctr increment failed for inode: 0x936 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88807cde6b80
[  380.218205][T14527] fuse: Bad value for 'group_id'
[  380.223289][T14527] fuse: Bad value for 'group_id'
[  380.462443][T14537] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  380.480320][T14537] syzkaller0: entered promiscuous mode
[  380.524826][T14541] capability: warning: `syz.0.2957' uses deprecated v2 capabilities in a way that may be insecure
[  380.529367][T14537] syzkaller0: entered allmulticast mode
[  380.550639][  T973] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  380.590240][T14536] tipc: Resetting bearer <eth:syzkaller0>
[  380.614919][T14536] tipc: Disabling bearer <eth:syzkaller0>
[  380.713416][  T973] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  380.735282][  T973] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  380.754389][  T973] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  380.764574][  T973] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  380.774184][  T973] usb 6-1: config 0 descriptor??
[  380.781495][  T973] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  381.108874][T14560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2965'.
[  381.338019][T14573] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[  381.344569][T14573] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  381.352048][T14573] vhci_hcd vhci_hcd.0: Device attached
[  381.359479][T14575] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 1
[  381.866522][T14577] 8021q: adding VLAN 0 to HW filter on device bond2
[  381.900791][   T13] vhci_hcd: stop threads
[  381.920664][  T973] vhci_hcd: vhci_device speed not set
[  381.930164][   T13] vhci_hcd: release socket
[  381.980763][  T973] usb 35-1: new full-speed USB device number 3 using vhci_hcd
[  381.996158][   T13] vhci_hcd: disconnect device
[  382.175115][T14587] binder: 14586:14587 ioctl c0306201 0 returned -14
[  382.578700][T14599] loop4: detected capacity change from 0 to 512
[  382.604799][T14599] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  382.656851][T14599] ext4 filesystem being mounted at /457/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  382.745351][T14599] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  382.768347][T14607] loop0: detected capacity change from 0 to 2048
[  382.796190][T14607] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  382.828182][T14613] loop4: detected capacity change from 0 to 128
[  382.838108][T14615] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  382.852541][T14615] tipc: Resetting bearer <eth:syzkaller0>
[  382.855019][T14613] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  382.875061][T14613] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  382.886008][T14614] tipc: Disabling bearer <eth:syzkaller0>
[  382.969627][T14619] fuse: Unknown parameter 'grou00000000000000000000'
[  383.085906][T14617] loop0: detected capacity change from 0 to 32768
[  383.152662][T14617] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  383.152686][T14617]   allowing incompatible features above 0.0: (unknown version)
[  383.152697][T14617]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  383.197530][T14617] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  383.206509][T14617] bcachefs (loop0): initializing new filesystem
[  383.218562][T14617] bcachefs (loop0): going read-write
[  383.228122][T14617] bcachefs (loop0): marking superblocks
[  383.238787][T14617] bcachefs (loop0): initializing freespace
[  383.247362][T14617] bcachefs (loop0): done initializing freespace
[  383.249829][T14632] binder: 14631:14632 ioctl c0306201 0 returned -14
[  383.255724][T14617] bcachefs (loop0): reading snapshots table
[  383.266687][T14617] bcachefs (loop0): reading snapshots done
[  383.281784][T14617] bcachefs (loop0): done starting filesystem
[  383.340430][ T5849] bcachefs (loop0): shutting down
[  383.348341][ T5984] usb 6-1: USB disconnect, device number 18
[  383.358911][ T5849] bcachefs (loop0): going read-only
[  383.381882][T14637] loop5: detected capacity change from 0 to 256
[  383.386524][ T5849] bcachefs (loop0): finished waiting for writes to stop
[  383.403855][ T5849] bcachefs (loop0): flushing journal and stopping allocators, journal seq 4
[  383.437113][ T5849] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 4
[  383.457912][ T5849] bcachefs (loop0): clean shutdown complete, journal seq 5
[  383.473999][ T5849] bcachefs (loop0): marking filesystem clean
[  383.554374][ T5849] bcachefs (loop0): shutdown complete
[  383.771048][T14659] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  383.783328][T14659] tipc: Resetting bearer <eth:syzkaller0>
[  383.799281][T14658] tipc: Disabling bearer <eth:syzkaller0>
[  384.429072][T14670] binder: 14669:14670 ioctl c0306201 0 returned -14
[  384.467189][T14675] loop6: detected capacity change from 0 to 512
[  384.642879][T14678] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3008'.
[  384.671892][T14678] openvswitch: netlink: Flow actions attr not present in new flow.
[  385.687202][T14700] loop5: detected capacity change from 0 to 4096
[  386.004312][T14702] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  387.719083][  T973] vhci_hcd: vhci_device speed not set
[  390.412447][T14711] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  390.629712][T14726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3022'.
[  392.177035][ T5984] usb 6-1: new low-speed USB device number 19 using dummy_hcd
[  392.250679][   T30] audit: type=1800 audit(1755805873.693:14): pid=14738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3026" name="nullb0" dev="tmpfs" ino=2464 res=0 errno=0
[  392.317616][T14740] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  392.362088][ T5984] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[  392.718211][ T5984] usb 6-1: config 0 has no interface number 0
[  392.767613][ T5984] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  392.870006][ T5984] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[  393.138766][ T5984] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  393.201820][ T5984] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  393.598651][ T5984] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[  393.656876][ T5984] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  395.380701][ T5984] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  395.390210][ T5984] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  395.481480][ T5984] usb 6-1: config 0 descriptor??
[  398.400476][ T5984] usb 6-1: can't set config #0, error -71
[  398.603593][ T5984] usb 6-1: USB disconnect, device number 19
[  398.844933][T14765] fuse: Bad value for 'rootmode'
[  398.974215][T14771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3038'.
[  399.264161][T14779] 9pnet_fd: Insufficient options for proto=fd
[  399.614733][ T1206] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  400.221697][ T1206] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  400.249221][ T1206] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  400.267638][ T5175] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  400.273086][ T1206] usb 3-1: Product: syz
[  400.286799][ T5175] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  400.294512][ T5175] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  400.303583][ T5175] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  400.315520][ T5175] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  400.325467][ T5858] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  400.332794][ T5858] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  400.339989][ T5858] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  400.358642][ T1206] usb 3-1: Manufacturer: syz
[  400.363376][ T1206] usb 3-1: SerialNumber: syz
[  400.371732][ T1206] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  400.415369][ T5984] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  400.490867][ T5858] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  400.498674][ T5858] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  402.553885][ T5175] Bluetooth: hci6: command tx timeout
[  404.410794][ T5984] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  404.417772][ T5984] ath9k_htc: Failed to initialize the device
[  404.694419][T14797] Bluetooth: hci6: Opcode 0x0c1a failed: -110
[  404.700533][T14797] Bluetooth: hci6: Error when powering off device on rfkill (-110)
[  408.293630][ T5175] Bluetooth: hci6: command 0x041b tx timeout
[  412.414871][ T5175] Bluetooth: hci6: command 0x041b tx timeout
[  416.730658][ T5175] Bluetooth: hci6: command 0x041b tx timeout
[  423.094335][ T5175] Bluetooth: hci6: command 0x041b tx timeout
[  439.405150][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  459.038518][   T79] ==================================================================
[  459.046612][   T79] BUG: KASAN: null-ptr-deref in drop_buffers+0x65/0x4f0
[  459.053554][   T79] Read of size 4 at addr 0000000000000060 by task kswapd0/79
[  459.060913][   T79] 
[  459.063229][   T79] CPU: 1 UID: 0 PID: 79 Comm: kswapd0 Not tainted syzkaller #0 PREEMPT(full) 
[  459.063259][   T79] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  459.063274][   T79] Call Trace:
[  459.063283][   T79]  <TASK>
[  459.063294][   T79]  dump_stack_lvl+0x189/0x250
[  459.063330][   T79]  ? __pfx_dump_stack_lvl+0x10/0x10
[  459.063363][   T79]  ? __virt_addr_valid+0x7c/0x5c0
[  459.063399][   T79]  ? drop_buffers+0x65/0x4f0
[  459.063428][   T79]  kasan_report+0x118/0x150
[  459.063466][   T79]  ? drop_buffers+0x65/0x4f0
[  459.063500][   T79]  kasan_check_range+0x2b0/0x2c0
[  459.063538][   T79]  drop_buffers+0x65/0x4f0
[  459.063570][   T79]  ? srso_alias_return_thunk+0x5/0xfbef5
[  459.063602][   T79]  try_to_free_buffers+0x1e1/0x2d0
[  459.063636][   T79]  shrink_folio_list+0x20ac/0x4cd0
[  459.063685][   T79]  ? __pfx_shrink_folio_list+0x10/0x10
[  459.063716][   T79]  ? __pfx_css_rstat_updated+0x10/0x10
[  459.063739][   T79]  ? move_folios_to_lru+0xe9c/0x1080
[  459.063788][   T79]  ? __pfx_css_rstat_updated+0x10/0x10
[  459.063811][   T79]  ? srso_alias_return_thunk+0x5/0xfbef5
[  459.063840][   T79]  ? __mod_zone_page_state+0xd7/0x140
[  459.063877][   T79]  ? folio_try_get+0x1c/0x340
[  459.063901][   T79]  ? srso_alias_return_thunk+0x5/0xfbef5
[  459.063930][   T79]  ? rcu_is_watching+0x15/0xb0
[  459.063955][   T79]  ? srso_alias_return_thunk+0x5/0xfbef5
[  459.063986][   T79]  ? rcu_is_watching+0x15/0xb0
[  459.064013][   T79]  evict_folios+0x47f2/0x58b0
[  459.064065][   T79]  ? __pfx_evict_folios+0x10/0x10
[  459.064088][   T79]  ? rcu_is_watching+0x15/0xb0
[  459.064112][   T79]  ? srso_alias_return_thunk+0x5/0xfbef5
[  459.064141][   T79]  ? lock_release+0x4b/0x3e0
[  459.064182][   T79]  ? srso_alias_return_thunk+0x5/0xfbef5
[  459.064211][   T79]  ? rcu_is_watching+0x15/0xb0
[  459.064237][   T79]  ? rcu_is_watching+0x15/0xb0
[  459.064260][   T79]  ? srso_alias_return_thunk+0x5/0xfbef5
[  459.064288][   T79]  ? lock_release+0x4b/0x3e0
[  459.064326][   T79]  ? srso_alias_return_thunk+0x5/0xfbef5
[  459.064354][   T79]  ? mem_cgroup_get_nr_swap_pages+0x32/0x110
[  459.064393][   T79]  ? srso_alias_return_thunk+0x5/0xfbef5
[  459.064422][   T79]  ? get_swappiness+0x358/0x3c0
[  459.064463][   T79]  try_to_shrink_lruvec+0x8a3/0xb50
[  459.064504][   T79]  ? srso_alias_return_thunk+0x5/0xfbef5
[  459.064535][   T79]  shrink_one+0x21b/0x7c0
[  459.064563][   T79]  ? shrink_node+0x2f10/0x3760
[  459.064588][   T79]  shrink_node+0x314e/0x3760
[  459.064614][   T79]  ? srso_alias_return_thunk+0x5/0xfbef5
[  459.064646][   T79]  ? srso_alias_return_thunk+0x5/0xfbef5
[  459.064675][   T79]  ? srso_alias_return_thunk+0x5/0xfbef5
[  459.064704][   T79]  ? shrink_node+0x2f10/0x3760
[  459.064730][   T79]  ? psi_group_change+0xab8/0x1050
[  459.064760][   T79]  ? srso_alias_return_thunk+0x5/0xfbef5
[  459.064789][   T79]  ? rcu_is_watching+0x15/0xb0
[  459.064812][   T79]  ? srso_alias_return_thunk+0x5/0xfbef5
[  459.064844][   T79]  ? srso_alias_return_thunk+0x5/0xfbef5
[  459.064872][   T79]  ? rcu_is_watching+0x15/0xb0
[  459.064896][   T79]  ? percpu_ref_put+0x19/0x180
[  459.064932][   T79]  ? srso_alias_return_thunk+0x5/0xfbef5
[  459.064961][   T79]  ? rcu_is_watching+0x15/0xb0
[  459.064983][   T79]  ? percpu_ref_put+0x19/0x180
[  459.065019][   T79]  ? srso_alias_return_thunk+0x5/0xfbef5
[  459.065047][   T79]  ? lock_release+0x4b/0x3e0
[  459.065083][   T79]  ? srso_alias_return_thunk+0x5/0xfbef5
[  459.065113][   T79]  ? __pfx_shrink_node+0x10/0x10
[  459.065136][   T79]  ? percpu_ref_put+0x19/0x180
[  459.065176][   T79]  ? srso_alias_return_thunk+0x5/0xfbef5
[  459.065204][   T79]  ? mem_cgroup_iter+0x420/0x460
[  459.065230][   T79]  ? mem_cgroup_iter+0x3b/0x460
[  459.065257][   T79]  kswapd+0x147c/0x2830
[  459.065300][   T79]  ? kswapd+0x951/0x2830
[  459.065339][   T79]  ? __pfx_kswapd+0x10/0x10
[  459.065373][   T79]  ? srso_alias_return_thunk+0x5/0xfbef5
[  459.065402][   T79]  ? __lock_acquire+0xab9/0xd20
[  459.065454][   T79]  ? srso_alias_return_thunk+0x5/0xfbef5
[  459.065482][   T79]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  459.065516][   T79]  ? _raw_spin_lock_bh+0x50/0x50
[  459.065546][   T79]  ? __pfx_autoremove_wake_function+0x10/0x10
[  459.065578][   T79]  ? __pfx_set_cpus_allowed_ptr+0x10/0x10
[  459.065607][   T79]  ? __kthread_parkme+0x7b/0x200
[  459.065634][   T79]  ? srso_alias_return_thunk+0x5/0xfbef5
[  459.065663][   T79]  ? __kthread_parkme+0x1a1/0x200
[  459.065693][   T79]  kthread+0x711/0x8a0
[  459.065726][   T79]  ? __pfx_kswapd+0x10/0x10
[  459.065763][   T79]  ? __pfx_kthread+0x10/0x10
[  459.065792][   T79]  ? srso_alias_return_thunk+0x5/0xfbef5
[  459.065823][   T79]  ? _raw_spin_unlock_irq+0x23/0x50
[  459.065854][   T79]  ? srso_alias_return_thunk+0x5/0xfbef5
[  459.065882][   T79]  ? lockdep_hardirqs_on+0x9c/0x150
[  459.065917][   T79]  ? __pfx_kthread+0x10/0x10
[  459.065947][   T79]  ret_from_fork+0x3fc/0x770
[  459.065975][   T79]  ? __pfx_ret_from_fork+0x10/0x10
[  459.066003][   T79]  ? __switch_to_asm+0x39/0x70
[  459.066036][   T79]  ? __switch_to_asm+0x33/0x70
[  459.066069][   T79]  ? __pfx_kthread+0x10/0x10
[  459.066100][   T79]  ret_from_fork_asm+0x1a/0x30
[  459.066143][   T79]  </TASK>
[  459.066152][   T79] ==================================================================