last executing test programs:

3m29.172523214s ago: executing program 32 (id=11):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$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")
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x2007, 0x3a, 'M', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000))

3m18.596643194s ago: executing program 5 (id=78):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x21}, 0x18)

3m16.700597781s ago: executing program 5 (id=86):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2}, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000400)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @val={@void, {0x88a8}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x3, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @link_local, @loopback}}}}, 0x0)

3m16.135924786s ago: executing program 5 (id=89):
syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local}, {{0x0, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00'})
r0 = socket$inet(0x2, 0x80001, 0x84)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e24, @private=0xa010100}}, 0x30000000, 0x2, 0x7ff, 0x13, 0x4a, 0x6, 0x3}, &(0x7f0000000080)=0x9c)

3m15.322768875s ago: executing program 5 (id=93):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
umount2(&(0x7f0000000440)='./file0\x00', 0x9)

3m13.670372022s ago: executing program 5 (id=98):
r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f00000001c0)={0x0, 0xc}, 0x0, 0x0})

3m12.611488075s ago: executing program 5 (id=103):
syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000480)={r2})

3m11.521071629s ago: executing program 33 (id=103):
syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000480)={r2})

2m38.010833655s ago: executing program 1 (id=291):
openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x0, 0x0)
r0 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1})
io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0)

2m36.040375532s ago: executing program 1 (id=307):
memfd_create(&(0x7f00000000c0)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS', 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r1 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x95}, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4}}, 0xe8)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)

2m35.57068309s ago: executing program 1 (id=311):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100)
syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
syz_mount_image$fuse(&(0x7f0000000b80), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000c00)=ANY=[], 0x1, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.parent_freezing\x00', 0x275a, 0x0)
readahead(r0, 0x0, 0xffffffffffffff01)

2m35.047493108s ago: executing program 1 (id=316):
socket$kcm(0x11, 0xa, 0x300)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000700000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

2m33.438431353s ago: executing program 1 (id=328):
syz_mount_image$bcachefs(&(0x7f00000058c0), &(0x7f0000005900)='./file0\x00', 0x10000, &(0x7f0000000240)=ANY=[@ANYBLOB='fsck,inline_data,nocow,degraded,str_hash=siphash,norecovery,discard,reconstruct_alloc,erasure_code,acl,no_splitbrain_check,hash,uid=', @ANYRESDEC=0x0, @ANYRES32], 0x0, 0x58b4, &(0x7f0000005980)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x101100, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r1, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x4010bc14, &(0x7f0000000200)={0x10, 0x10005, 0xffffffffffff8ab7, 0x2, 0x86b, 0x6})

2m30.13192741s ago: executing program 1 (id=350):
creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14c)
r0 = socket$inet6(0xa, 0x3, 0x5)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
r2 = dup3(r1, r0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0)
sendmmsg$inet6(r2, &(0x7f0000001580)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0xfff, @mcast2, 0x5}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1400000000000000290000000b000000"], 0x18}}], 0x1, 0x0)

2m15.063078273s ago: executing program 34 (id=350):
creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14c)
r0 = socket$inet6(0xa, 0x3, 0x5)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
r2 = dup3(r1, r0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0)
sendmmsg$inet6(r2, &(0x7f0000001580)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0xfff, @mcast2, 0x5}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1400000000000000290000000b000000"], 0x18}}], 0x1, 0x0)

1m22.911216446s ago: executing program 6 (id=787):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000700)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x0, 0x0, 0x4000}], 0x1, 0x800)
recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000540)=""/113, 0x71}], 0x1}, 0x40000000)

1m22.290037171s ago: executing program 6 (id=790):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000004c0)='./file1\x00', 0x2004004, &(0x7f0000000500)=ANY=[@ANYRES64=0x0], 0x1, 0x5eb2, &(0x7f000000a280)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000)
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0)
lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000680)=@known='user.incfs.metadata\x00', 0x0, 0x2)

1m18.971517859s ago: executing program 6 (id=805):
writev(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000980), &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000009c0)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYBLOB="4a3a9f8c2aab73255ecca15a5ad5b0b10a818868cc63e509dca434325eec52c449bc0f78c4d4996b7c34f8c4027731d8084daf83fa32ac4f26093d06abe1c066b64b56d81577ccc09ee10fa7258f8c9a08a6fa6f21d52366469e697011812e7133138514e15b9fe1f64a7d3062ee9a77ca0a5d9f6af20321dc3f0f0577b860b69773048ec9a9a6d40e94d2f4aca5a132897494efd6232446f0d416f1a75c1e7e1e233ad655fc58f85c"], 0xff, 0x6de, &(0x7f0000000180)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_open_dev$usbfs(0x0, 0xf, 0x8041)
fstat(0xffffffffffffffff, 0x0)
statfs(&(0x7f0000000000)='./file0\x00', 0x0)

1m17.483099585s ago: executing program 6 (id=818):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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")
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
mount(0x0, &(0x7f0000000480)='./file0/../file0/../file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0)
chroot(&(0x7f0000000300)='.\x00')
pivot_root(&(0x7f0000001f80)='./file0/../file0/../file0/../file0\x00', &(0x7f00000002c0)='./file0\x00')

1m16.550173384s ago: executing program 6 (id=823):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b3", 0x14}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4d", 0x2c}], 0x2}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)

1m15.773736293s ago: executing program 7 (id=826):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0)

1m15.531351923s ago: executing program 6 (id=827):
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x35c, @loopback}, 0x1c)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x80000079b0, 0x4)
sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000005100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)=""/218, 0xda}, 0x4}], 0x1, 0x40012021, 0x0)

1m15.443003736s ago: executing program 7 (id=828):
r0 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x4, 0x80, 0x0, 0x21e}, &(0x7f00000003c0)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1})
io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff})
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20042, 0x1})

1m14.491229946s ago: executing program 35 (id=827):
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x35c, @loopback}, 0x1c)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x80000079b0, 0x4)
sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000005100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)=""/218, 0xda}, 0x4}], 0x1, 0x40012021, 0x0)

1m14.472843461s ago: executing program 7 (id=833):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
nanosleep(0x0, 0x0)
syz_open_dev$sndmidi(0x0, 0x2, 0x141102)

1m12.02426989s ago: executing program 7 (id=844):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000540), 0x1, 0x558, &(0x7f0000000c00)="$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")
mkdir(&(0x7f00000004c0)='./bus\x00', 0x92)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000040)='./file1/file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x10000, 0x0)
mkdirat(r0, &(0x7f0000000000)='./bus/file0\x00', 0x0)

1m11.455460437s ago: executing program 7 (id=849):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4)
setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4)
listen(r1, 0x0)
close(r1)

1m8.585837419s ago: executing program 7 (id=864):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000070000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
io_setup(0x8, &(0x7f0000000600)=<r1=>0x0)
r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002)
io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f00000000c0)="01", 0x400000}])

1m7.405687851s ago: executing program 36 (id=864):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000070000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
io_setup(0x8, &(0x7f0000000600)=<r1=>0x0)
r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002)
io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f00000000c0)="01", 0x400000}])

10.436121086s ago: executing program 9 (id=1190):
syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000000)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4400, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746164000000006d653d3030303030303030303030303030303030b030342c6e6f6164696e6963622c7569643d00", @ANYRESHEX, @ANYRES64=0x0], 0x1, 0xa23, &(0x7f0000000a80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
write$UHID_INPUT(r0, &(0x7f00000016c0)={0x8, {"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", 0x1000}}, 0x1006)

9.622510857s ago: executing program 9 (id=1195):
r0 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0x1000, 0x4)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x78, 0x0, 0x7e0, {0x7, 0x1e54, 0x0, {0x2, 0xfffffffffffffffc, 0x4, 0x6, 0x200000000, 0x0, 0x2, 0x9, 0x5, 0x2000, 0x1000, 0x0, 0x0, 0x1ff, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000540)=0x2, 0x4)
sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0)

9.131306903s ago: executing program 9 (id=1197):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000000), &(0x7f0000000100)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20)

8.847052436s ago: executing program 9 (id=1201):
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x185093, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x185093, 0x0)
r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x80000, 0x0)
r1 = open_tree(r0, &(0x7f0000000080)='\x00', 0x89901)
move_mount(r1, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160)

8.372946919s ago: executing program 9 (id=1204):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="8d", 0x1}], 0x1)

7.311109218s ago: executing program 9 (id=1213):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_io_uring_setup(0xbf0, &(0x7f0000000340)={0x0, 0xa129, 0x400, 0x3, 0x400132b}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0x47ba, 0x233a, 0x0, 0x0, 0x41)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0xfffffffd, 0xfffffffc, 0x0, 0x6, 0x7, "30af0128ffffb70800000000000000ff7800"})

6.662435756s ago: executing program 37 (id=1213):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_io_uring_setup(0xbf0, &(0x7f0000000340)={0x0, 0xa129, 0x400, 0x3, 0x400132b}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0x47ba, 0x233a, 0x0, 0x0, 0x41)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0xfffffffd, 0xfffffffc, 0x0, 0x6, 0x7, "30af0128ffffb70800000000000000ff7800"})

6.652939982s ago: executing program 3 (id=1220):
syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x1, 0x14fd, &(0x7f0000002180)="$eJzs3Au4jtXWMP4x5pw3i6QnyXmOOW6e5DBJkhwSEkmSJElOCUmSJCGxyCkJScg5yTkkp1jJ+XzKOUm2JElCQpL5v7Tbf+9+2+/b3t/u+3zfu8bvuu7LHO41xjPnGs91P/c917XWtx0HV61frXJdZoZ/C/71n1QASAGAfgBwDQBEAFAqW6lsgMMgk8bUf+9FxJ/roWlXegbiSpL+p2/S//RN+p++Sf/TN+l/+ib9T9+k/+mb9F+I9Gzr9NzXypF+jz9r/1/94f4/yP7//3Xk8/9/kMPFxny5vtj1nf6FFOl/+ib9T9+k/+mb9D99k/6nb9L//+EigEr/zWnpf/om/RciPbvS+89yXNnjSr//hBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEKkD+fCZQYA/ja+0vMSQgghhBBCCCHEnydkvNIzEEIIIYQQQgghxP9+CAo0GIggA2SEFMgEmeEqyAJXQ1a4BhJwLWSD6yA7XA85ICfkgtyQB/JCPrBA4IAhhvxQAJJwAxSEG6EQFIYiUBQ8FIPicBOUgJuhJNwCpeBWKA23QRkoC+WgPNwOFeAOqAiVoDLcCVXgLqgK1eBuqA73QA24F2rCfVAL7ofa8ADUgQehLjwE9eBhqA+PQAN4FBpCI2gMTaDp/1L+i9AVXoJu0B1SoQf0hJehF/SGPtAX+sEr0B9ehQHwGgyEQTAYXoch8AYMhTdhGAyHEfAWjIRRMBrGwFgYB+PhbZgA78BEeBcmwWSYAlNhGkyHGfAezIRZMBvehznwAcyFeTAfFsBC+BAWwWJIg49gCXwMS2EZLIcVsBJWwWpYA2thHayHDbARNsFm2AJb4RPYBtthB+yEXbAb9sCnsBc+g33wOeyHL/7F/LP/Kb8TAgIqVGjQYAbMgCmYgpkxM2bBLJgVs2ICE5gNs2F2zI45MAfmwlyYB/NgPsyHhISMjPkxPyYxiQWxIBbCQlgEi6BHj8WxOJbAm7EklsRSWApLY2ksg2WxLJbH8lgBK2BFrIiVsTJWwSpYFavi3Xg33oM1sAbWxJpYC2thbayNdbAO1sW6WA/rYX2sjw2wATbEhtgYG2NTbIrNsBk2x+bYEltiK2yFrbE1tsE22BbbYjtsh+2xPXbADtgRO2In7Iyd8UV8EV/Cl7A7VlE9sCf2xF7YC/tgX+yLr2B/fBVfxddwIA7Cwfg6vo5v4FA8g8NwOI7AEVhBjcLROAZZjcPxOB4n4ASciBNxEk7GyTgVp+F0nIEzcCbOwln4Ps7BD/ADnIfzcAEuxIW4CBdjGqbhEjyLS3EZLscVuBJX4Upcg2txDa7HDbgeN+Em3IJb8BP8BLfjdtyJO3E37sZP8VP8DD/Dgbgf9+MBPIAH8SAewkN4GA/jETyCR/EoHsNjeByP4wk8iafwJJ7G03gGz+I5PIfn8TxewOfzfF1vd+F1A0FdYpRRGVQGlaJSVGaVWWVRWVRWlVUlVEJlU9lUdpVd5VA5VC6VS+VReVQ+lU+RIsUqVvlVfpVUSVVQFVSFVCFVRBVRXnlVXBVXJVQJVVKVVKXUraq0uk2VUWVVC19elVcVVEtfUVVSlVVlVUXdpaqqaqqaqq6qqxqqhqqpaqpaqpaqrR5QdVQP7IMPqUudqa8GYQM1GBuqRqqxaqLewMdUMzUUm6sWqqV6Qg3HYdhaNfNt1NOqrRqN7dSzagw+pzqocdhRvaA6qc6qi3pRdVXNfbcMv10C1VTspXqrPqqvmol3qUsdq6peUwPVIDVYva4W4BtqqHpTDVPD1Qj1lhqpRqnRaowaq8ap8eptNUG9oyaqd9UkNVlNUVPVNDVdzVDvqZlqlpqt3ldz1Adqrpqn5qsFaqH6UC1Si1Wa+kgtUR+rpWqZWq5WqJVqlVqt1qi1ap1arzaojWqT2qy2qK3qE7VNbVc71E61S+1We9Snaq/6TO1Tn6v96gt1QP1FHVRfqkPqK3VYfa2OqG/UUfWtOqa+U8fV9+qEOqlOqR/UafWjOqPOqnPqJ3Ve/awuqF/URRUUaNRKa210pDPojDpFZ9KZ9VU6i75aZ9XX6IS+VmfT1+ns+nqdQ+fUuXRunUfn1fm01aSdZh3r/LqATuobdEF9oy6kC+siuqj2upgurm/SJfTNuqS+RZfSt+rS+jZdRpfV5XR5fbuuoO/QFXUlXVnfqavou3RVXU3fravre3QNfa+uqe/TtfT9urZ+QNfRD+q6+iFdTz+s6+tHdAP9qG6oG+nGuoluqh/TzfTjurluoVvqJ3Qr/aRurZ/SbfTTuq1+RrfTz+r2+jndQT+vO+oXdCfdWXfRv+iLOuhuurtO1T10T/2y7qV76z66r+6nX9H99at6gH5ND9SD9GD9uh6i39BD9Zt6mB6uR+i39Eg9So/WY/RYPU6P12/rCfodPVG/qyfpyXqKnqqn6em6z2+VZv8T+e/8g/wBv776Fr1Vf6K36e16h96pd+ndeo/eo/fqvXqf3qf3a0j96xv4oD6kD+nD+rA+oo/oo/qoPqaP6eP6uD6hT+qf9A/6tP5Rn9Fn9Vn9kz6vz+sLv30PwKBRRhtjIpPBZDQpJpPJbK4yWczVJqu5xiTMtSabuc5kN9ebHCanyWVymzwmr8lnrCHjDJvY5DcFTNLcYAqaG00hU9gUMUWNN8VMcXPTv53/R/NrapqaZqaZaW6am5ampWllWpnWprVpY9qYtqataWfamfamvelgOpiOpqPpZDqZLqaL6Wq6mm6mm0k1qaanedn0Mr1NH9PX9DOvmP6mvxlgBpiBZqAZbAabIWaIGWqGmmFmmBlhRpiRZqQZbUabsWasGW/GmwlmgploJppJZpKZYqaYaWaamWFmmJlmppltZps5Zo6Za+aa+Wa+WWgWmkVmkUkzaWaJWWKWmmVmmVlhVphVZpVZY9aYdWad2WA2mE1mk1lqtpqtZpvZZnaYHWaX2WX2mD1mr9lr9pl9Zr+pnAJwwBw0B80hc8gcNofNEXPEHDVHzTFzzBw3x80Jc8KcMqfMaXPanDFnzDlzzpw3580Fc8FcNBcv3fZFKlKRiUyUIcoQpUQpUeYoc5QlyhJljbJGiSgRZYuyRdmj66McUc4oV5Q7yhPljVLBRhS5iKM4yh8ViJLRDVHB6MaoUFQ4KhIVjXxULCoe3RSViG6OSka3RKWiW6PS0W1RmahsVC4qH90eVYjuiCpGlaLK0Z1RleiuqGpULbo7qh7dE9WI7o1qRvdFtaL7o9rRA1Gd6MGobvRQVC96OKofPRI1iB6NGkaNosZRk6jpn1o/hDM5H/fdbHebanvYnvZl28v2tn1sX9vPvmL721ftAPuaHWgH2cH2dTvEvmGH2jftMDvcjrBv2ZF2lB1tx9ixdpwdb9+2E+w7dqJ9106yk+0UO9VOs9PtDPuenWln2dn2fTvHfmDn2nl2vl1gF9oP7SK72KbZj+wS+7FdapfZ5XaFXWlX2dV2jV1r19n1doPdaDfZzXaL3Wo/sdvsdrvD7rS77G67x35q99rP7D77ud1vv7AH7F/sQfulPWS/soft1/aI/cYetd/aY/Y7e9x+b0/Yk/aU/cGetj/aM/asPWd/suftz/aC/cVetOHSzf2lj3cyZCgDZaAUSqHMlJmyUBbKSlkpQQnKRtkoO2WnHJSDclEuykN5KB/lo0uYmPJTfkpSkgpSQSpEhagIFSFPnopTcSpBJagklaRSVIpKU2kqQ2WoHJWj2+l2uoPuoEpUie6kO+kuuouqUTWqTtWpBtWgmlSTalEtqk21qQ7VobpUl+pRPapP9akBNaCG1JAaU2NqSk2pGTWj5tScWlJLakWtqDW1pjbUhtpSW2pH7ag9tacO1IE6UkfqRJ2oC3WhrtSVulE3SqVU6kk9qRf1oj7Uh/pRP+pP/WkADaCBNJAG02AaQkNoKA2lYTScRtBbNJJG0WgaQ2NpHI2n8TSBJtBEmkiTaBJNoSk0jabRDJpBM2kmzabZNIfm0FyaS/NpPi2khbSIFlEapdESWkJLaSktp+W0klbSalpNa2ktraf1tJE20mbaTFtpK22jbbSDdtAu2kV7aA/tpb20j/bRftpPB+gAHaSDdIgO0WE6TEfoCB2lo3SMjtFxOk4n6ASdolN0mk7TGTpD5+gcnaef6QL9QhcpUIpTkNld5bK4q11Wd41LcZncpTgCgEtxLpfb5XF5XT5nXQ6X8+9ics4VcoVdEVfUeVfMFXc3/S4u48q6cq68u91VcHe4ir+Lq7t7XA13r6vp7nPV3N1/F9dy97va7hFXxz3q6rpGrp5r4uq7R1wD96hr6Bq5xq6Ja+WedK3dU66Ne9q1dc/8Ll7kFru1bp1b7za4ve4zd8795I66b91597Pr5rq7fu4V19+96ga419xAN+h38Qj3lhvpRrnRbowb68b9Lp7iprppbrqb4d5zM92s38UL3Ydujktzc908N98t+DW+NKc095Fb4j52S90yt9ytcCvdKrfarfn/57rCbXKb3Ra3x33qtrntbofb6Xa53b/Gl9axz33u9rsv3BH3jTvovnSH3DF32H39a3xpfcfcd+64+96dcCfdKfeDO+1+dGfc2V/Xf2ntP7hf3EUXHJjf7o054gyckVM4E2fmqzgLX81Z+RpO8LWcja/j7Hw95+CcnItzcx7Oy/nYMrFj5pjzcwFO8g1ckG/kQlyYi3BR9lyMi/NNXIJv5pJ8C5fiW7k038ZluCyX4/J8O1fgO7giV+LKfCdXCYGrcjW+m6vzPVyD7+WafB/X4vu5Nj/AdfhBrssPcT1+mOvzI9yAH+WG3IgbcxNuyo9xM36cm3MLbslPcCt+klvzU9yGn+a2/Ay342e5PT/HHfh57sgvcCfuzF34Re7KL3E37s6p3IN78svci3tzH+7L/fgV7s+v8gB+jQfyIB7Mr/MQfoOH8ps8jIfzCH6LR/IoHs1jeCyP4/H8Nk/gd3giv8uTeDJP4ak8jafzDH6PZ/Isns3v8xz+gOfyPJ7PC3ghf8iLeDGn8Ue8hD/mpbyMl/MKXsmreDWv4bW8jtfzBt7Im3gzb+Gt/Alv4+28g3fyLt7Ne/hT3suf8T7+nPfzF3yA/8IH+Us+xF/xYf6aj/A3fJS/5WP8HR/n7/kEn+RT/AOf5h/5DJ/lc/wTn+ef+QL/whc5MMQYq1jHJo7iDHHGOCXOFGeOr4qzxFfHWeNr4kR8bZwtvi7OHl8f54hzxrni3HGeOG+cL7YxxS7mOI7zxwXiZHxDXDC+MS4UF46LxEVjHxeLi8c3xSXim+OS8S1xqfjWuHR8W1wmLhs/cl/5+Pa4QnxHXDGuFFeO74yrxHfFVeNq8d1x9fieuEZ8b1wzvi8uGd8f144fiOvED8Z144fievHDcf34kbhB/GjcMG4UN46bxE3jx+Jm8eNx87hF3DJ+Im4VPxm3jp+K28RPx23jZ/7wfGrcI+4Zvxy/HIdwr56fXJBcmPwwuSi5OJmW/Ci5JPlxcmlyWXJ5ckVyZXJVcnVyTXJtcl1yfXJDcmNyU3JzcksyhGoZwaNXXnvjI5/BZ/QpPpPP7K/yWfzVPqu/xif8tT6bv85n99f7HD6nz+Vz+zw+r8/nrSfvPPvY5/cFfNLf4Av6G30hX9gX8UW998V8cd/EN/VNfTP/uG/uW/iW/gn/hH/SP+mf8k/5p31b/4xv55/17f1zvoN/3j/vX/CdfGffxb/ou/qXfDff3af6VN/T9/S9fC/fx/fx/Xw/39/39wP8AD/QD/SD/WA/xA/xQ/1QP8wP8yP8CD/Sj/Sj/Wg/1o/14/14P8FP8BP9RD/JT/JT/BQ/zU/zM/wMP9PP9LP9bD+n0Bw/18/Vv11P/CK/yKf5NL/EL/FL/VK/3C/3K/1Kv9qv9mv9Wr/er/cb/Ua/2W/2W/1Wv81v8zv8Dr/L7/J7/B6/1+/1+/w+v9/v9wf8AX/QH/SH/Ff+sP/aH/Hf+KP+W3/Mf+eP++/9CX/Sn/I/+NP+R3/Gn/Xn/E/+vP/ZX/C/+Is++PGJtxMTEu8kJibeTUxKTE5MSUxNTEtMT8xIvJeYmZiVmJ14PzEn8UFibmJeYn5iQWJh4sPEosTiRFrio8SSxMeJpYllieWJFYmViVWJEPJui0P+UCAkww2hYLgxFAqFQ5FQNPhQLBQPN4US4eZQMtwSSoVbQ+lwWygTyoZy4dHQMDQKjUOT0DQ8FpqFx0Pz0CK0DE+EVuHJ0Do8FdqEp0Pb8EzQ4dnQPjwXOoTnQ8fwQugUOocu4cXQNbwUuoXuITX0CD3Dy6FX6B36hL6hX3gl9A+vhgHhtTAwDAqDw+thSHgjDA1vhmFheBgR3gojw6gwOowJY8O4MD68HSaEd8LE8G6YFCaHKWFqmBamhxnhvTAzzAqzw/thTvggzA3zwvywICwMH4ZFYXFICx+FJeHjsDQsC8vDirAyrAqrw5qwNqwL68OGsDFsCpvDlrA1fBK2he1hR9gZdoXdYU/4NOwNn4V94fOwP3wRDoS/hIPhy3AofBUOh6/DkfBNOBq+DcfCd+F4+D6cCCfDqfBDOB1+DGfC2XAu/BTOh5/DhfBLuCi/syaEEEII8U/Rf3C+xz/4vwwAoH4b9wSAq7fnPvyfa27M8ddxb5WnVQIAnu7e8aG/HVWqpKb+9oMLWKohKjAPABJ/X/9v8TJoCU9CG2gBJf7h/Hqrzuf5D+onbwXI/B9yUuByfLn+zf9F/ceeGLGodHwu239Tfx5AoQKXczLB5fhy/ZL/Rf2czf5g/pm+HA/Q/D/kZIHL8eX6xeFxeAba/N1XCiGEEEIIIYQQf9VblWv/R8/Pl57P85jLORnhcvxHz+dCCCGEEEIIIYS48p7r3OWpx9q0adH+nxvgb/sC/1qWDGQgg//HBlf6yiSEEEIIIYT4s12+6b/SMxFCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIdKv/xN/TuxKr1EIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYS40v6/AAAA//+YHDBm")
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000000180)=""/32, 0x20)
getdents64(r0, &(0x7f0000001f80)=""/4104, 0x1008)
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0)

6.128455862s ago: executing program 3 (id=1222):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0)=0x7, 0x4)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000100)=0xf, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10)
setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8)
recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)

5.255120048s ago: executing program 4 (id=1229):
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
recvmmsg$unix(r1, &(0x7f0000009ac0)=[{{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000000680)=""/131, 0x83}], 0x1}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000002ec0)=""/167, 0xa7}], 0x1}}, {{0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000004100)=""/77, 0x4d}], 0x1}}, {{0x0, 0x0, &(0x7f0000005640)=[{&(0x7f00000043c0)=""/160, 0xa0}], 0x1}}], 0x4, 0x58ca1280, 0x0)

4.813721573s ago: executing program 3 (id=1231):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@verity_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
lseek(r0, 0x10001, 0x0)

4.728489565s ago: executing program 4 (id=1232):
r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_connect$uac1(0x6, 0x0, 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5016, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0xa0}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0)

4.725082013s ago: executing program 2 (id=1243):
syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f0000000040)={[{@lazytime}, {@nodiscard}, {@filestreams}, {@uqnoenforce}, {@prjquota}]}, 0x4, 0x9647, &(0x7f0000012cc0)="$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")
r0 = open(&(0x7f0000000000)='./bus\x00', 0x64142, 0x20)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
fsync(0xffffffffffffffff)
fallocate(0xffffffffffffffff, 0x0, 0xb7d4, 0x1001f0)
sendfile(r0, r1, 0x0, 0x1000000201005)

4.475226905s ago: executing program 3 (id=1234):
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0)

2.809119714s ago: executing program 2 (id=1236):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000c, 0x38011, r0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000340), 0x800, r1}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000000), 0x20008, r1}, 0x38)

2.271220839s ago: executing program 8 (id=1237):
r0 = epoll_create1(0x0)
r1 = creat(&(0x7f0000000340)='./bus\x00', 0x41)
close(r1)
eventfd2(0x2, 0x80001)
mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0])
write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x129400, 0x80000, 0x3, 0x7, 0x8, 0x10000, 0x0, 0x0, 0x1, 0x7604b4aa}}, 0x50)

2.242346389s ago: executing program 0 (id=1238):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=")
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x1, 0x1, 0x246, 0x7fffffffffffffff, 0x6, 0xfffffbffffffffff, 0x2, 0x7fff, 0x25})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendfile(r0, r1, 0x0, 0xfffe82)
truncate(&(0x7f00000000c0)='./file1\x00', 0x40)

1.940890568s ago: executing program 4 (id=1239):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fchdir(r2)
getcwd(&(0x7f00000013c0)=""/4096, 0x1000)

1.831155177s ago: executing program 2 (id=1240):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000025c0)=@newtaction={0xd40, 0x30, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [{0xa80, 0x1, [@m_ipt={0x25c, 0x17, 0x0, 0x0, {{0x8}, {0x1a0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xf1, 0x6, {0x0, 'raw\x00', 0xe, 0xb3, "01df771ed4aa468d466490bb6d3a762752b0276450737133d354ea68c13a92efe99064741e04d8a20e194e30a60295d386bccda0f3007979597e6d03b954a8f914ba7b899f16c20d6d72edd9b6f52db88f3ba2e308499f6252662a51fa4b12868b58f75e27ec9103b8068b9b811e21bd2aa37e31ee1bb8e60ecb8155c8e19ea1c7fdbb9aa819059c61aa86c434a7c8da18ab573d7585bec9c1d4494956d182e7b35a526fd48659ab60beb8f339651c715661a36a876cce3dd7a98863f318caef99752c65346980"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0x3d, 0x6, {0xff3b, 'nat\x00', 0x6a, 0xfff, "ec6c358b1b02688c45d6891b8d39befc710e9c"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x3ff}, @TCA_IPT_HOOK={0x8}]}, {0x95, 0x6, "33c428b1016ea0e62b6c917780554ec63a01a7382016d430730d1158d5469fa35f73d351ec348637d292a8c8699738644c304a14a0ca2e2c1422d9493ae361a88a61e76022334cc9eff1d9b15acf815ab9bf490688724773d3775e92953306fa3923bf0b3eb78ed4c4e43760fb360a12727f0000004fe4c5639595b4ce1706ccb85c9b5872240c31834297cfb06b7eaaa1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x17c, 0x11, 0x0, 0x0, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xb5, 0x6, {0x7, 'mangle\x00', 0x4, 0x7, "852c07967e4bde8acbdebf709c7f67b435415e9fad5eed399218069c30b3db399d5bdbdffc09aa13d6aef79a3360cf4b7d5e8a92b817394560aba652eb4e4ec31470dd9b8becbf6cad6f3328aec2ac14541a30a5f89f2a6e60534a70c1deccc519f73984d6d2ae8b9fe17278f03e9f60e876c3b1fc1ef49873f24bd44137256bfd0a27e100d2162e3f7b17"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x5}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0x65, 0x6, "195244b493b69a109e343c48236a318aa067ccccb2000506f4e63246fce6276de9355aae82ccf014b3a51009a53cc597e7eec180e252560262d28e1340152b8389fc3dcbd1c60cbef5aa738a80d9582b7bf553a33208654c9b7b642eb56b8a9716"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ipt={0x154, 0x17, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}]}, {0x89, 0x6, "828d51b8c024f3ba75276291fd744bf1d83ac94c40f59c2d7aabe5cffe85cb1235f3e723c7a0ca6f1a15a0e38afac0bc7115796816162cbc6d09aea501ff36a46772ec7a3aa4d7c60363ff8f0eeda2f3eb8c435fb1d254244779da6c44c5dc30ed21a60df465ec395bc4d898dc7104dc47d809383d1d5431371c66f76842e2571bf73ce597"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x114, 0x3, 0x0, 0x0, {{0x8}, {0x78, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0x69, 0x6, {0x3, 'security\x00', 0x84, 0x8, "cf8102ab12c6b2198a413eaa65607ab7ca51ab206bef3fe70b20aa2e7aacfa341b2d9158773430366e3a48eb70679ab8b9759ebcd3b2636776df09c3eb7702"}}]}, {0x75, 0x6, "1d4af027bf39e92f2bc3b16061477612108c4de6dbb9dbc37f978e20a11849888f1cfa0d69961cc5b133c25b0a606d867918fd28cefd9936cea3c502ba83dbc878d09708660761105b2cb89c15f4eb2ff9ca07aba60aef01aab6097fa30bc52f5c31cbba441df32848abb9344a809a2a4c"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x18c, 0x11, 0x0, 0x0, {{0x8}, {0xe0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xd9, 0x6, {0x2, 'mangle\x00', 0x1, 0x1, "26b28bee405c084d7d3004660f6902208128531e54ab5a1819783607be3e2e463fc401b2d641a72c11f6aea69efbc1dac1e8f34f762cbc8ee0231ffeebcb773de1e20df7f65c7029200a9570577fe540733523b10491dc5fda6c0091603360fb1b6019648c7b5ef50f8741b6670963cc5d8533f50c4a2cfbeda3e0ed5070ab41e44997bdda4c34c11413cb846041ef4060b9cb71e527a7dd8e4efb7877f6f37b7cd8648d2d22911f9fbfdd95b69e14"}}]}, {0x85, 0x6, "e7ba22f1ebc93a7960461c2acdaf1da6af842571f14f3b0700806b225899f9ba581b6cc401693affa591693a24cad555ae47eb61507e3df51e30376dbb9780ecc91c631074e20b4513fa584c477599ed6d4bbdc811974af25df4ce292cb40b1a215a26222dae6892981f49ab96617843df0c8d8fc510dcfc9efc159423e997b04d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ipt={0x124, 0x20, 0x0, 0x0, {{0x8}, {0xd8, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TARG={0xad, 0x6, {0x3, 'filter\x00', 0x3, 0x8000, "7321d3165c8ab897b14be3507650eaf094c67732fa3f4ab22cd8bca581bc064084050a6f96c2e61a3bb6c194b9f1d3f180e736efa543ecfabb616af384474c3d6d9a3043b10ee6d6a4107d0bce5e8f0a28061c0b9f8aee7809049ab63ac51d9bb33d33e4e5959872a00607a1c567dc67eb4a9976e52b5729e3ff0d31e223c41624f88e"}}]}, {0x25, 0x6, "a0f801aae36e077609a01908bc70dd5a7c96a2ac75b4913648e352e8b436f61326"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ipt={0x18c, 0x20, 0x0, 0x0, {{0x8}, {0x6c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x55, 0x6, {0x7, 'nat\x00', 0x4, 0x4c2d, "b112d50939750fa56623826275793a59f694cdc8bda79320bfe1d4c8997abe43daace6790afb2937cfb2e0"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_INDEX={0x8, 0x3, 0x6062ae06}]}, {0xf9, 0x6, "080f497fef56763eb14339e04d8880b35d4fcb1f3ccd5757021fa31ef38a7d4c8fca4f32d5757fdee1a2aceaaeb6abdad810154a059435c356867b27c8df5015f90bffb81405bdefffef46fede1a8038897bb9fd967f32f04f15a8596894786759dc20093ddbffb2158f5c0591205638b11d518d459f3137f1349ab013b3b5732e45d6b45ff97596fdbdf3439459190d9338a0e20dcecdd00602431f725cf59a7957828027ae5e0ea0bb80fe37046c240d77df80dbcc2cc07154e28d0d3637a16826e450cc77c3d4fc6dba86cc15e4e1d703c38c1271209ac040405e14b1209edd541dde1c4febf30b9352eee21f43fb1874af22be"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x97dd299ab8dc81d}}}}]}, {0x108, 0x1, [@m_ipt={0x104, 0x3, 0x0, 0x0, {{0x8}, {0xc8, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x4d, 0x6, {0x3, 'mangle\x00', 0x2, 0x10, "9dc28082735da529c81704b3c85be69a5717c9a351fbadfdcc8a6d78fe18ed10c80506"}}, @TCA_IPT_TARG={0x71, 0x6, {0x8, 'mangle\x00', 0x80, 0x100, "07625db7849301f3c760230789043c3c5de12e22cc8e1f5f20c97ba14d907f5a3eae7673340356d1e624a3f315c4d0b1439a387605ebd024be5895e6659813581fe54a8998e1ca"}}]}, {0x15, 0x6, "e2ebd2e0185a4d308803e9306ec5d2b0e6"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}, {0x1a4, 0x1, [@m_ipt={0xf8, 0x6, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0xa9, 0x6, "f5fcf6c5d281ac07391f35700b5786a70ee288211391aef6ec3378d7dd4a7c7445b8d3046ec059dd382a214deedda165d8663d562a47b1afb15557c5ceab4960c0442cc36ea1e65aa9650e7ac2c900fbb08da34b73b6b699463a47761daa69afd529deea7f5c97d3f950af23793139f4c0c3cea503bb9a23d2f7677c9bf150e350defce66ec3eccbaabb1e8f7fe7c49b9e91ecca113edb7f81da88a113c1065219a1d6062e"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ipt={0xa8, 0x1a, 0x0, 0x0, {{0x8}, {0x4}, {0x7d, 0x6, "4b6275823d714c9413915317da89818cb9f96e8938cf5d91ef0ce403d55fc9bdc74a0a5b88653980ed0af5c857ee3a0361bfe072c3d9c7b9f1648e75347ab9c4c22c5a146387bd1cec713a6318eacd7c4a645fbd7f633a0468f29e22d61d4ece8dd17dc96a2825122f223a84b12e8468eba92fb18ec7a31621"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0xd40}}, 0x4000)
recvmmsg$unix(r1, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

1.564780161s ago: executing program 0 (id=1241):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008050, &(0x7f0000002480)=ANY=[@ANYRES32=0x0, @ANYBLOB="9e053116a9196e0b9664fb835a3a5cdf85a9fd22a7fa463d02ce8cf4db269cc39c613680a52ffa2ffe93ad7054f0a77f15395ce0b86ed943b0d8e4d56ded0b47f08415bfc02f605c6b3ddac2f8fbcb378d5c017996de67447f0d2e0c8ef421c70f8d442bb64983f218b55ef14d033507c7b0bbab37345840534509f6050e1084dba94bff98a2543ff657ea4c2a02a67df59f3620a81535c4d8cecc2ea37d0629ab27a829638b9ee601dffffd1bd0166edbe194087afaad848fdbb3f10878784bed53d76150277ca861ef55b838c213651e55a6cdfbbc84ae901ce35508412a22", @ANYRES16=0x0, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRESHEX], 0x1, 0x6d0, &(0x7f0000001340)="$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")
symlink(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000080))
rmdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)

1.564578204s ago: executing program 4 (id=1242):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102000000206a0529004000010203010902240001010201"], 0x0)
openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x20400, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8)

1.288962922s ago: executing program 0 (id=1244):
syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000000)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2004400, &(0x7f0000001140)=ANY=[@ANYBLOB="73686f72746164000000006d653d3030303030303030303030303030303030b030342c6e6f6164696e6963622c7569643d00", @ANYBLOB="a85f0dc3446ae0c36ba4848c770920cd9addace5c10dee3a96f810395203ae3bd777155e0b6764a2fd6da6853696460e4dc9849661ef1979cffa16b5bf59dabf336f10c3c559e5e6957f06f8cc8dc9d87dce1e2fe00f1a9e839df7923f50ee737985bd9b461e751d8f2be497d8651d589f890f61b87b83f3c7ad3ba191fa8e9a0ea1b14157305d0891f22ea0bbafcc5044e7177fcb08366d582b977b1847305408f72d19577993c4f746315483175fd218fe2194c2e6c97f561184a4f7c739d2ae93ba3016354f0d2ed26e6b810ebbbd0d1f93e7251bd3b5ed60ea3c840a2bbe7fc0", @ANYRES32], 0x1, 0xa1b, &(0x7f0000001f80)="$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")
setgroups(0x0, 0x0)
getgroups(0x1, &(0x7f0000000080)=[<r0=>0xee00])
setregid(0x0, r0)
capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x9})
fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3)

1.254291843s ago: executing program 8 (id=1245):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x2}], 0x1, 0x0, 0x0, 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_open_procfs(0x0, 0x0)

1.028475447s ago: executing program 8 (id=1246):
socket$nl_netfilter(0x10, 0x3, 0xc)
eventfd(0xe61)
r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x2556, 0x1000, 0x2, 0x24d}, &(0x7f00000006c0)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000300)=""/139, 0x8b}], 0x2})
io_uring_enter(r0, 0x100847c0, 0x0, 0x1, 0x0, 0x0)

871.197529ms ago: executing program 3 (id=1247):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000c80)={[{@nombcache}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@mblk_io_submit}, {@minixdf}, {@resuid}, {@grpjquota}, {}]}, 0x0, 0x7b1, &(0x7f00000004c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0/../file0'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
lsetxattr$system_posix_acl(&(0x7f0000000e00)='./file0\x00', &(0x7f0000000e40)='system.posix_acl_default\x00', 0x0, 0x0, 0x1)

798.782622ms ago: executing program 0 (id=1248):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_opts(r0, 0x29, 0x4d, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x8)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0xffff, 0x0, @mcast2, 0x9}, 0x1c)
sendto$inet6(r1, &(0x7f0000000680)="5cdb0231ae354901cefd797e4f22e17729a6349e62a5c44fa5ed29cb27b54d0900000069302210e3b0edf912d28dfcb80200000000000000ee2811b732f0e1e9a1bb8653f4d0fbb53249e76b2f911a7df9d9adbd0b8e", 0x56, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40000488, 0x0)

772.595402ms ago: executing program 2 (id=1249):
r0 = memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
r2 = fanotify_init(0x200, 0x0)
r3 = dup(r1)
fanotify_mark(r2, 0x1, 0x48001059, r3, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

635.555569ms ago: executing program 8 (id=1250):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f00000005c0), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vxcan1\x00', <r2=>0x0})
sendmsg$can_bcm(r1, &(0x7f00000000c0)={&(0x7f0000000180)={0x1d, r2}, 0x10, &(0x7f0000000040)={&(0x7f0000000340)={0x5, 0x400, 0x0, {0x77359400}, {}, {0x0, 0x0, 0x1, 0x1}, 0x1, @can={{0x0, 0x0, 0x1}, 0x2, 0x0, 0x0, 0x0, "e8ee000000000022"}}, 0x48}}, 0x20000015)
bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xf0, 0x6}, 0xfe}, 0x18)

501.265842ms ago: executing program 2 (id=1251):
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r1 = memfd_create(&(0x7f0000000480)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=2\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce\xb3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x3)
ftruncate(r1, 0xffff)
fcntl$addseals(r1, 0x409, 0x7)
r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x2000})
lseek(r2, 0xd, 0x0)

447.686828ms ago: executing program 4 (id=1252):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%-010d \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000c40)='sys_enter\x00', r2}, 0x10)
msync(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2)

320.946349ms ago: executing program 4 (id=1253):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0xffff, 0x1}, 0x4)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4)

303.536751ms ago: executing program 8 (id=1254):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfe, 0x4}, 0xc)
r2 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)
close_range(r0, 0xffffffffffffffff, 0x0)

301.265199ms ago: executing program 0 (id=1255):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {}, 0x2, 0x4}}, 0x26)
ioctl$PPPIOCSFLAGS(r2, 0x40047459, 0x0)

138.616832ms ago: executing program 3 (id=1256):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937e, &(0x7f00000019c0)={{0x1, 0x1, 0x1018, r0}, './file1\x00'})

71.341573ms ago: executing program 2 (id=1257):
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0)
mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x421})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3})

33.673328ms ago: executing program 0 (id=1258):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0)
readv(r0, &(0x7f0000001380)=[{0x0}, {&(0x7f0000001300)=""/103, 0x67}], 0x2)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"})
r1 = syz_open_pts(r0, 0x101)
r2 = dup3(r1, r0, 0x0)
write$UHID_INPUT(r2, &(0x7f00000001c0)={0xa, {"08c39ee52f329f1698b1c4865f8b540a5eee9f496a0809c3d20325867b6edda88489ab4c09fe0a7f1e8640aa8e344f412df0d69475a5d6570e21f31fac7dfb4aa7ade0e851582d5c1abdd809580cb34c9e48576b1c73ed76023256fca058ada3db47d86cc75b33cf762b67fe61f152618c49a40858f68794a4fc484ab73ccd254ba3d147f5feddaf91dacc238c0a8096f79597ca1e6da781fcf37a0141a335c6a7577d2d53c6e552a7be208381bb31d1d3e0e92ea651655217535734b286d3f19780a4c720075a36a734151f8c00e651cb3a6bbe30e3f6aee48750436da6471e965e81f38134674fcb697108fb7345010bb8fa15fba9b33355d7858327171ab9c68f6c21b2ffbff4eb061dab80bc77a4a7769e7ff73bcd98790e09415bfc5978cf5af45c3ec9ef9c1a39f766c59d59590281038dbcb765580ba2b3f141d5bbfc40910a0894cd1f22d2a8b6d4e4778debef99438b54d44b4b7568de2777431a5b2f3e8d1a45a60a468f5e33e8ef534f803dfb6798c270f52edf031ecd996bb78c4e92961c63c079676d77412ebc6074e5f235417785e7a14b14ce7626b015071c154cc2bf8f4499b93293e9997c23df4c7a1498cf12414fb31eb873728e4f613b540d22e7ca718f18da5b82ed24995e4309c3af4a2e1097465bf09728082d09e71ea365522035eb9772b8e072f8454777ee304dacd59d3eb9f933f151fa14f8c38eadbeba04810a2dea7a66824f09235c13a45f07870210d0d310ce3ae6284577bd4e65f32700f6723727926cb52e4f27776a1dab0f6668327ab5cf1893879a635261f2e0d9923ccecbf5b80f10a8275c1515f47930d614e787f14c105d3a4f8faf8e7f738cf4eae4fc39ef3db3cb87794ace87f7239b69dc4ab4e5ae57cdfbd309e847d99600ef14b51faead01e8ade57d24270bc13a1787896096eeacb8ab1c93d31d93cfb244bb09ecfecf336362a5656db7df327cbb9aeb898f8af229c7bb9452805f2b4510c5df86b6d564e01f000000167ade5205331523a6392af2bea9e6db0ba5480cbf1b202714233289c4017cb66e83c0c8b6e88bedb922162d0ceecf6c5da173bbefe6781ab7720d2be6cca378db650c69d4228141ae190922fbbaddb86c7f0fe138b704e8305b3bcc7910b2280d96d71dafdbfa876b0013fc4de586f85d9ee077b6349becbdca8bd989a51c4c76ed8a8cc691a65078e0272a62edec8236a779f0cbffeda49dcdccd4def7064e0d77ae5a8c64f3057b4a3a0d4457d33f2bc6c112378315411baa4bb126fe540d750491fc58fbb66911ef82bce5ed76872dbcd8e05dea2f3f347a653aa39ab5d75e71671bfeb924e71476134dbf91e3f287fd853cc34bf81e717edd41aa04b6fbeb43cf2074f0c8fe5350401b6cff801c147a3b58b972aa5652629a9fd8b1df2852708ce958d4e9974ec4383aa5da4e3f75fdc85981e97b75863546f67a8703673b6fe2c26f0e9eeb8c45c26f673adac55fa5d69b82ae7d032fd3b26866047e8c029b90a62794a89c11398944b398b4177b2dcc5a743c16d4a5333b1e30af678d3db8df849c1753db067a6f94bab00c0dd3c7e94a8675924c89bda98ac09e10bcdf83f5114b9b466c413477a5cdc48c857230798934bcc1f0eb3a2d2944b139e459af32e515785f46ed4e97cdcb23c7e4dc7c4f91b5b5ca5228344aeb6652fffaf31325c7429bc70a5f6beaaa98ef190dffdeccc94bd814b3edfdd48243bf34291076ab5438ee00e924a827d5b453df42d24144fe1a45bb6c84fcbb2143d0a561c1e867c1279bdf0a47061ea77a84f36c720aff785f0db10eda84c767b5f3874f9455c0f026735ded32f0403ef7dbcf97d2233d59c670114ddf89314ba74fc248bcbdbf43c24e46304e229b3cf583aa410f4dfd119152495da8737518ee2a05a8ca1f004be3c551408f2e4013e444b63bf2bb26ddeae505642dffcc989ee241c48741181b506e22fdc4530319522780c74bf786852dc66ebbb51f8ecbb1e35de09ef7afe589bb8a31c5d63477db5d5e7174694ea04cfa98057d39127a4e5eedb4897a491c6693acd0a036abf846f3b6f3006e5e5fd586f29a4a8a31abbccf732e4f1b88187a72d669c16302657e9cbbeb9322662e111edc7771526400b6123d0f8207bcaa38bee07043e36e223d418ac948d65e7acfe72cc3fdcf03a3e43ecfec8ae489ddba09126709c5c7968829e3504de8a5010c9372de09476a7b96b04d7aed2486d8f89f21f075321abe350024abe00a81f87df3dc372fc3206496776c26b6958243070bda4cace3e358da5d39a3945765c2ba4b002b06efd416af66f3343f218ed84550ea83f02f9a5c3fc677ea60987aa25f0406d6154081cfdc074814a2465accdfa102858f5a52c9eae293c56ddcaf8f6926d3dd0ccb51a30c960d6b7e473038ebd3702b5106f6bc040efdfd7169fd3f2dc42ff23de26a239e13b74278729fd7e843b38a35c55fd50181ac13a9cbbbfd8feb36afaeb1993349c0ac5a0c44ffd92919dfe272b0f8ed7df7198cd299715f021109a58dced4753d3c7ddd6e9ea01596f18b2fe7000000004ccfca57aed5b5cebdff65de480a56bd53f4c7f83ddef00d7c9686311d1fce76f320bb3222a11db30ba6ed31535d8fda61e694478ca9935d72719b8d6b9be88ae3df30b60ee251b919b4d1734b994c62accdf855488b351738331b462eccf27efdc5577d7a5548579dc90d227a42ac010f33a720dc3cf0a63454f8b07c775287495761a058ec1e28e6aaf8057241f4ef8b5de56e279355bb66630c4ddf35e7c2cfff26a4241b1df0379d2a1e9f959e46d3843f89844ead50aff44640fcbc4a1edb033afff7cc9e57c4f8d31900764233e11fa4c28e547788c1b00de4268df692ba3415a9ad90fa712f9618f5ecff57da32809380eeff040cd3b23f508614c72b303cec3bcd732708303b166193366a062b9cea536f28478c387e626744c6a611a8e7162d274efccc84eee8eb31d3310c86752777dd5b5ffe234e895c54909f19a4aabcf3c15b90c02170409e314fd90e766ec4ba93c8ec6321237a980ad3c32fb2fab69e57541ea7f5427a85c2c57d40f9ebe9de5572f46a4713fb28e0af42d0adef3e29195aa41a3ba318181512eebfadffede4e35ff7f975928edc5d4d9f2d931fb44b30e1df55e66c52e1648e9cdaf71221b57c6a6b087428ccc57ade5b1531341cba2be452b426c434c70fd8c493337d4995cbd76ea1dd545226e3eb59d5f94ffb5352f87a4a66cd7c5e88322404fd397c46e198646a9c819d0eb1f10e54d8a3ea912f1cb134ff1095aa7325287f6ea9af8c13b67d6abcbb70dbc06838ecb33e45b60f6cb832c3e72d1401770f66bd02f35a2d007815ab676099e31f5102000000c0e83d5e7107c8dc5830c9cddb9781185b94d7f2814c5058ba3ac54c268741c5728f4997a9628602c2a36090162379f3f37c47619b3e7c7397a5913b7060b51e0c7f7226ff1135444f866f89a4b74136cbd3acb7178bd63183b3fd9cd19fdeb6fcc6341910ad4605da76a9af4bfb8b75fcd666f8188902b380ae560d9aa04f8f9b0ac5c109d1824a470726e06a49d955f8f71c8a86081e75b13f62600deb941da181eaff544cd559c467d8dae432debd22e7a7b3e1ad731a5b9470f5f60423dda061ff899c07c79f3da34f38e1d8182d6ee0c36c602945509167be440382a8a8a759b20e41638fd57152029b190b5701d30a86f579e2d0cc53a2f809ca9bd3aba1eb2772a7acc35c4d983afa83a9baea35c0ed4931234719636cf8f5fe1884bde6cebbdf23bd62b1ebf0a5cb78c27295349bd7d5cf28c4ee4689497238fd3aa71a417914e6892667a56bd69dc2e5882cfb67df71494e9a9199e025892e4e7435f727636cd988cc7563d28db5133f649849c5b3973a3428de10ad39d96146b22acc50f50eee5a038876452b960686892de40efe30081ccdaa2bf64af78d5988026e529b36c62a21378ac42d220d0dd878010178e374e6dbb2b61206066d04e729ed03c6fd9a4e00547fe9304aec0925d85a0acd07fdc5d48c1a1cff656916f5d25952327792255e0d606a32517781cc3d737ec753eb95b5b5b95dabd8946907ab54cc85d05b475e2e5486c6fc070417198d3a50910e2949d20d3fa68fd327934cff5171224942b8f18d88947763a7c710d09c4b269bdf2d3e715329917fb70728a4a0530999b755ba8fc04deabf4bc4bcffc4d62d491538c65078122bf2c263ae0020af67cfc9cf19e5b929e086af281fb43d5504d728935c5cfac136eb81703d50fddb39a5a713b2914c6acd9b2d07819cf7bba495ac5734fe423e611d309b80eeafcf9053d51b0ab3c29d5ca5eb8861ffc1ebc4d53f361b8991baecb52860c15202f979e34054fcde869d018103ccd6d914a70f1840fc6aaf426beec975ddb980b19b0f4cc2ca393c0b9e6ebe5e7d1c9fc1ef7a1c91378f0b73262993fb80667ecf62bac3c47cbd002ae1b87b8dc3ec99d5c987765d778868eb55022cc3bed14b8f934a584bcc98fa0b4f6e6982ab8d8a2bb49f9074ef429dd7b8db332a96ccec6983a97be7c8634c02e7937ffc8d613b83aa375886bf40a87ec062090382f874bf2c8e5fbb58ac18a46c4d9e85af3ca21bdacb7755f49776b0eb3972ff682c84beb07d74cbe2764e378253e72128991b73d2730704a5448280e8a0fd8cc87d4cddcffbfe5525ae3d2304877a3988e33c8e12bf77793e753f25840e9af2ce56bdb999fc62623a2298b4244534f662eb398a2577c72f6cfd5174697dcee151d4f3a7293b11de3889c43744da4165aca4e4a1e926d37ae4d7471584a06f3641f2037a74a58c2397a594f29d142d59f91bb57e24e1a3f30f68c626033cc34895c1b16d62e3a375c3e09f5dbd9338cd3a500643143cd404b57019c648c3ec31d696233fe16efc3c4c84aca0830ca8b9fbf1144b98d82f41e4cf67631c74cdcf8d9c8b8556b876ff1592683ccac0b47a26cb3a2cb1b917f433bb54e0b53deae9ac4b1cd0594c1fa0e6744e7ed88fdac60901e3da989f3b0d7c12b140cc576fa1b0e8e705321d37c303691aafc9fed9c3dc419078d0925ead56455ea5f3cd57941e410c1c14c2e8972d7cca44fcaca1f64fc817f4a41b6d9fb237fed159cb09e788ae560726537f49cb64b9f60915d402e0931355c55ad792cde758548b1af54b196e414046d4af3579a6c30ceac3d68bbfd2adef309c064e759a9f0dd69d682a3880b8ff27b69abffaa45ee7e65d8f1f6e40c188f6249fdf72220b4c87243217ba0292b9e9b67ebeda4fb83406216a4d765812bafeff34cc57f7d2cd1608282079c076055b9cabffe5fa491b970291bc2672540ccc15ed877d7dbe3ef683724c715ace770905e48c2dc6a44e1fc095773676d070eac00ee3834b07590cba7093f56b678313870471c81599d34c53fc03ec6c913d8ba3f604ace8da12d2025cbb5000bc062f4db65a6feacaf3915206d1c15ce7e78c17dc2ea32cb57d6fab0a22d487c77118e75016006f812541ec8180a321287a2d57248d4ee4a19706a19d802c70e250c3b0fc400a0b5cdc06537d2f55fd5300be4eeeaab8cc481a84b6a5e17d8c47ec92fe40710d4ec3530a94ca16710ade2ec7562398106e0ddbb6c8af6412166afd99d45d29a3a967e58decd0d6fc5bebb98d639b5606efd358a43d635d50f0ccb8472197da604994e7fb700243d5f7e45700", 0x1000}}, 0xffffff5c)

0s ago: executing program 8 (id=1259):
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0xc0101282, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_usb_connect$hid(0x6, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000010ac0100000001000000010902240001000000000904000001030000000921ffff0001220500090581"], 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000dae11c105e048402"], 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

kernel console output (not intermixed with test programs):

 EXT4-fs error (device loop6) in do_split:2029: Corrupt filesystem
[  226.051563][ T8623] btrfs: Deprecated parameter 'usebackuproot'
[  226.078137][ T8623] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  226.089596][ T8638] EXT4-fs error (device loop6): dx_make_map:1296: inode #2: block 18: comm syz.6.766: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1
[  226.108634][ T8647] capability: warning: `syz.2.768' uses deprecated v2 capabilities in a way that may be insecure
[  226.110047][ T8625] loop0: detected capacity change from 0 to 32768
[  226.149101][ T8623] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.759 (8623)
[  226.166923][ T8638] EXT4-fs error (device loop6) in do_split:2029: Corrupt filesystem
[  226.184653][ T8649] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  226.253271][ T8623] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  226.271728][ T8625] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.756 (8625)
[  226.320617][ T8623] BTRFS info (device loop4): using crc32c (crc32c-x86_64) checksum algorithm
[  226.383120][ T5857] Bluetooth: hci5: command 0x0406 tx timeout
[  226.391190][ T8625] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  226.394056][ T5970] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  226.411682][ T8623] BTRFS info (device loop4): disk space caching is enabled
[  226.442303][ T8625] BTRFS info (device loop0): using sha256 (sha256-x86_64) checksum algorithm
[  226.453712][ T8623] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  226.513150][ T8625] BTRFS info (device loop0): disk space caching is enabled
[  226.532030][ T8625] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  226.991418][ T8625] BTRFS info (device loop0): rebuilding free space tree
[  227.046312][ T8623] BTRFS error (device loop4 state M): cannot disable free-space-tree
[  227.089629][ T8625] BTRFS info (device loop0): disabling free space tree
[  227.112858][ T8625] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  227.171151][ T8625] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  227.235748][ T5838] BTRFS info (device loop4 state M): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  227.321262][   T30] audit: type=1800 audit(1748599585.957:570): pid=8625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.756" name="file1" dev="loop0" ino=260 res=0 errno=0
[  227.735516][ T5833] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  227.813053][  T971] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  228.000064][  T971] usb 9-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  228.041735][  T971] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.070582][  T971] usb 9-1: Product: syz
[  228.098939][  T971] usb 9-1: Manufacturer: syz
[  228.127057][  T971] usb 9-1: SerialNumber: syz
[  228.169380][  T971] usb 9-1: config 0 descriptor??
[  228.175386][ T8667] loop2: detected capacity change from 0 to 32768
[  228.198133][  T971] ch341 9-1:0.0: ch341-uart converter detected
[  228.282447][ T8667] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  228.672951][ T8667] XFS (loop2): Ending clean mount
[  228.729857][ T8667] XFS (loop2): Quotacheck needed: Please wait.
[  228.835271][ T8667] XFS (loop2): Quotacheck: Done.
[  229.219148][ T5836] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  229.401017][ T8733] loop0: detected capacity change from 0 to 8192
[  229.431114][  T971] ch341-uart ttyUSB0: failed to read break control: -71
[  229.438737][  T971] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[  229.454605][  T974] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  229.482499][ T8733] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  229.494772][  T971] usb 9-1: USB disconnect, device number 2
[  229.554765][  T971] ch341 9-1:0.0: device disconnected
[  229.605860][ T6774] udevd[6774]: setting owner of /dev/bus/usb/009/002 to uid=0, gid=0 failed: No such file or directory
[  229.654079][  T974] usb 8-1: Using ep0 maxpacket: 32
[  229.676247][  T974] usb 8-1: config 0 has an invalid interface number: 36 but max is 0
[  229.704876][  T974] usb 8-1: config 0 has no interface number 0
[  229.711034][  T974] usb 8-1: config 0 interface 36 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  229.792336][  T974] usb 8-1: config 0 interface 36 has no altsetting 0
[  229.824681][  T974] usb 8-1: New USB device found, idVendor=2304, idProduct=0208, bcdDevice=e9.bc
[  229.848940][  T974] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.871719][  T974] usb 8-1: Product: syz
[  229.877279][ T8713] loop4: detected capacity change from 0 to 32768
[  229.890519][  T974] usb 8-1: Manufacturer: syz
[  229.910699][  T974] usb 8-1: SerialNumber: syz
[  229.922677][ T8713] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.775 (8713)
[  229.948100][  T974] usb 8-1: config 0 descriptor??
[  230.002749][ T8713] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  230.005880][  T974] em28xx 8-1:0.36: New device syz syz @ 480 Mbps (2304:0208, interface 36, class 36)
[  230.070325][  T974] em28xx 8-1:0.36: Video interface 36 found:
[  230.087248][ T8713] BTRFS info (device loop4): using crc32c (crc32c-x86_64) checksum algorithm
[  230.155306][ T8713] BTRFS info (device loop4): disk space caching is enabled
[  230.192177][ T8713] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  230.273975][  T974] em28xx 8-1:0.36: unknown em28xx chip ID (0)
[  230.280124][ T5847] Bluetooth: hci6: ISO packet too small
[  230.405308][  T974] em28xx 8-1:0.36: reading from i2c device at 0xa0 failed (error=-5)
[  230.421395][  T974] em28xx 8-1:0.36: board has no eeprom
[  230.452129][ T8763] loop8: detected capacity change from 0 to 512
[  230.474700][ T8713] BTRFS info (device loop4): rebuilding free space tree
[  230.542246][  T974] em28xx 8-1:0.36: Identified as Pinnacle PCTV USB 2 (card=3)
[  230.549756][  T974] em28xx 8-1:0.36: analog set to bulk mode.
[  230.567889][ T8713] BTRFS info (device loop4): disabling free space tree
[  230.584860][ T8763] EXT4-fs: Ignoring removed bh option
[  230.617753][ T8713] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  230.642714][ T5898] em28xx 8-1:0.36: Registering V4L2 extension
[  230.662897][ T8713] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  230.683729][ T8763] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem
[  230.743900][  T974] usb 8-1: USB disconnect, device number 5
[  230.791791][ T8763] EXT4-fs (loop8): 1 truncate cleaned up
[  230.855209][ T8763] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  230.859928][  T974] em28xx 8-1:0.36: Disconnecting em28xx
[  230.912720][ T8771] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  231.005816][ T8774] netlink: 'syz.2.795': attribute type 1 has an invalid length.
[  231.406214][ T5838] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  231.417064][ T5898] em28xx 8-1:0.36: Config register raw data: 0xffffffed
[  231.437547][ T8782] loop0: detected capacity change from 0 to 1024
[  231.440774][ T5898] em28xx 8-1:0.36: AC97 chip type couldn't be determined
[  231.449894][ T8783] netlink: 4 bytes leftover after parsing attributes in process `syz.7.808'.
[  231.457478][ T5898] em28xx 8-1:0.36: No AC97 audio processor
[  231.484466][ T7535] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.493318][ T8776] 8021q: adding VLAN 0 to HW filter on device bond2
[  231.501173][ T5898] usb 8-1: Decoder not found
[  231.517911][ T8776] bond1: (slave bond2): making interface the new active one
[  231.553053][ T5898] em28xx 8-1:0.36: failed to create media graph
[  231.563548][ T8782] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  231.573971][ T8776] bond1: (slave bond2): Enslaving as an active interface with an up link
[  231.603803][ T5898] em28xx 8-1:0.36: V4L2 device video103 deregistered
[  231.636691][ T8781] veth0: entered promiscuous mode
[  231.663885][ T5898] em28xx 8-1:0.36: Registering input extension
[  231.847342][ T8739] loop6: detected capacity change from 0 to 32768
[  232.202128][ T5898] rc_core: IR keymap rc-pinnacle-grey not found
[  232.233976][ T5898] Registered IR keymap rc-empty
[  232.266338][ T5898] rc rc0: Pinnacle PCTV USB 2 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.36/rc/rc0
[  232.317049][ T5898] input: Pinnacle PCTV USB 2 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.36/rc/rc0/input9
[  232.424274][ T5898] em28xx 8-1:0.36: Input extension successfully initialized
[  232.502388][  T974] em28xx 8-1:0.36: Closing input extension
[  232.917881][ T8799] loop0: detected capacity change from 0 to 4096
[  232.924470][  T974] em28xx 8-1:0.36: Freeing device
[  232.983247][ T8799] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  233.112561][ T5849] usb 9-1: new full-speed USB device number 3 using dummy_hcd
[  233.285133][ T5849] usb 9-1: config 0 has an invalid interface number: 160 but max is 0
[  233.321510][ T8812] input: syz1 as /devices/virtual/input/input10
[  233.332215][ T5849] usb 9-1: config 0 has no interface number 0
[  233.336123][ T8811] overlayfs: failed to resolve './file0': -22
[  233.372378][ T5849] usb 9-1: config 0 interface 160 has no altsetting 0
[  233.386797][ T8799] ntfs3(loop0): ino=1b, "file0" ntfs_readdir
[  233.434318][ T5849] usb 9-1: New USB device found, idVendor=a6da, idProduct=1e78, bcdDevice=56.e4
[  233.456601][ T5849] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.478387][ T5849] usb 9-1: Product: syz
[  233.489611][ T5849] usb 9-1: Manufacturer: syz
[  233.517799][ T5849] usb 9-1: SerialNumber: syz
[  233.541845][ T5849] usb 9-1: config 0 descriptor??
[  233.573648][ T5849] usb-storage 9-1:0.160: USB Mass Storage device detected
[  233.861419][ T8790] loop4: detected capacity change from 0 to 40427
[  233.883031][ T5849] usb 9-1: USB disconnect, device number 3
[  233.931446][ T8790] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3fffff
[  234.013974][ T8790] F2FS-fs (loop4): invalid crc value
[  234.099636][ T5847] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  234.279255][ T8835] loop6: detected capacity change from 0 to 1024
[  234.376834][ T8790] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  234.509506][ T8790] F2FS-fs (loop4): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x5b2/0x1ed0
[  234.573936][ T8790] F2FS-fs (loop4): invalid blkaddr: 5638, type: 7, run fsck to fix.
[  234.626493][ T8790] syz.4.797: attempt to access beyond end of device
[  234.626493][ T8790] loop4: rw=2049, sector=45096, nr_sectors = 112 limit=40427
[  234.825299][ T8848] loop6: detected capacity change from 0 to 1024
[  234.876473][ T5838] syz-executor: attempt to access beyond end of device
[  234.876473][ T5838] loop4: rw=2049, sector=45208, nr_sectors = 8 limit=40427
[  234.950362][ T8848] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  234.950727][ T5838] CPU: 1 UID: 0 PID: 5838 Comm: syz-executor Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(full) 
[  234.950758][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  234.950773][ T5838] Call Trace:
[  234.950782][ T5838]  <TASK>
[  234.950793][ T5838]  dump_stack_lvl+0x189/0x250
[  234.950840][ T5838]  ? __pfx_dump_stack_lvl+0x10/0x10
[  234.950880][ T5838]  ? __pfx_queue_work_on+0x10/0x10
[  234.950912][ T5838]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  234.950938][ T5838]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  234.950977][ T5838]  f2fs_handle_critical_error+0x37c/0x540
[  234.951023][ T5838]  f2fs_write_end_io+0x597/0x7b0
[  234.951048][ T5838]  ? __submit_merged_bio+0x221/0x6a0
[  234.951100][ T5838]  __submit_merged_bio+0x27a/0x6a0
[  234.951143][ T5838]  __submit_merged_write_cond+0x255/0x530
[  234.951193][ T5838]  f2fs_write_data_pages+0x2854/0x31f0
[  234.951233][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  234.951300][ T5838]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  234.951359][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  234.951386][ T5838]  ? __mod_memcg_lruvec_state+0x2ae/0x480
[  234.951457][ T5838]  ? __mod_zone_page_state+0xd7/0x140
[  234.951501][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  234.951529][ T5838]  ? folios_put_refs+0x560/0x640
[  234.951567][ T5838]  ? __pfx_folios_put_refs+0x10/0x10
[  234.951591][ T5838]  ? rcu_is_watching+0x15/0xb0
[  234.951632][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  234.951660][ T5838]  ? __lock_acquire+0xab9/0xd20
[  234.951707][ T5838]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  234.951748][ T5838]  do_writepages+0x32e/0x550
[  234.951787][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  234.951819][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  234.951847][ T5838]  ? do_raw_spin_unlock+0x122/0x240
[  234.951891][ T5838]  filemap_fdatawrite+0x191/0x230
[  234.951926][ T5838]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  234.952008][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  234.952042][ T5838]  ? do_raw_spin_unlock+0x122/0x240
[  234.952085][ T5838]  f2fs_sync_dirty_inodes+0x31f/0x830
[  234.952129][ T5838]  f2fs_write_checkpoint+0x94a/0x1de0
[  234.952190][ T5838]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  234.952263][ T5838]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  234.952289][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  234.952317][ T5838]  ? kfree+0x18e/0x440
[  234.952347][ T5838]  ? kill_f2fs_super+0x298/0x6c0
[  234.952379][ T5838]  kill_f2fs_super+0x2c3/0x6c0
[  234.952412][ T5838]  ? __pfx_kill_f2fs_super+0x10/0x10
[  234.952435][ T5838]  ? radix_tree_delete_item+0x2b6/0x400
[  234.952468][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  234.952496][ T5838]  ? shrinker_free+0x2ce/0x3e0
[  234.952525][ T5838]  deactivate_locked_super+0xbc/0x130
[  234.952553][ T5838]  cleanup_mnt+0x425/0x4c0
[  234.952575][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  234.952603][ T5838]  ? lockdep_hardirqs_on+0x9c/0x150
[  234.952634][ T5838]  task_work_run+0x1d4/0x260
[  234.952663][ T5838]  ? __pfx_task_work_run+0x10/0x10
[  234.952684][ T5838]  ? __x64_sys_umount+0x122/0x160
[  234.952721][ T5838]  ? exit_to_user_mode_loop+0x40/0x110
[  234.952754][ T5838]  exit_to_user_mode_loop+0xec/0x110
[  234.952782][ T5838]  do_syscall_64+0x2bd/0x3b0
[  234.952811][ T5838]  ? lockdep_hardirqs_on+0x9c/0x150
[  234.952837][ T5838]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.952860][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  234.952888][ T5838]  ? exc_page_fault+0x9f/0xf0
[  234.952917][ T5838]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.952941][ T5838] RIP: 0033:0x7f85d9b8fc97
[  234.952963][ T5838] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  234.952984][ T5838] RSP: 002b:00007ffd8189e278 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  234.953009][ T5838] RAX: 0000000000000000 RBX: 00007f85d9c1089d RCX: 00007f85d9b8fc97
[  234.953026][ T5838] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd8189e330
[  234.953042][ T5838] RBP: 00007ffd8189e330 R08: 0000000000000000 R09: 0000000000000000
[  234.953058][ T5838] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd8189f3c0
[  234.953075][ T5838] R13: 00007f85d9c1089d R14: 00000000000394d4 R15: 00007ffd8189f400
[  234.953113][ T5838]  </TASK>
[  234.960153][ T5838] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  235.492802][  T974] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  235.687929][  T974] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  235.704843][  T974] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  235.752116][  T974] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  235.776811][  T974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.808056][ T8855] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  235.825836][  T974] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  235.986381][ T8842] loop8: detected capacity change from 0 to 32768
[  236.061118][ T8842] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.817 (8842)
[  236.101762][ T5944] usb 3-1: USB disconnect, device number 7
[  236.169105][ T8842] BTRFS info (device loop8): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  236.209380][ T8842] BTRFS info (device loop8): using blake2b (blake2b-256-generic) checksum algorithm
[  236.237430][ T8846] loop0: detected capacity change from 0 to 40427
[  236.254669][ T8842] BTRFS info (device loop8): using free-space-tree
[  236.282228][ T8846] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  236.296325][ T8846] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  236.328670][ T8857] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.389585][ T8846] F2FS-fs (loop0): invalid crc value
[  236.525265][ T1151] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.624317][   T30] audit: type=1800 audit(1748599595.267:571): pid=8842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.817" name="file1" dev="loop8" ino=260 res=0 errno=0
[  236.680416][ T8846] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  236.701915][ T8846] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  236.784454][ T1151] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.980035][ T7535] BTRFS info (device loop8): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  236.991620][ T5944] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  237.241177][ T1151] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.384056][ T5944] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  237.426640][ T5944] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  237.492116][ T5944] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  237.501202][ T5944] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.612612][ T8886] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  237.626506][ T5944] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  237.773971][ T1151] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.872145][ T5944] usb 5-1: USB disconnect, device number 7
[  238.725816][ T1151] bridge_slave_1: left allmulticast mode
[  238.772199][ T1151] bridge_slave_1: left promiscuous mode
[  238.777986][ T1151] bridge0: port 2(bridge_slave_1) entered disabled state
[  239.032529][ T1151] bridge_slave_0: left allmulticast mode
[  239.038245][ T1151] bridge_slave_0: left promiscuous mode
[  239.115039][ T1151] bridge0: port 1(bridge_slave_0) entered disabled state
[  239.363255][ T5857] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  239.388268][ T5857] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  239.398593][ T5857] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  239.410470][ T5857] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  239.435584][ T5857] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  239.950799][ T8929] loop0: detected capacity change from 0 to 512
[  240.059027][ T8929] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.843: casefold flag without casefold feature
[  240.067424][ T8933] loop7: detected capacity change from 0 to 1024
[  240.152253][ T8929] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.843: couldn't read orphan inode 15 (err -117)
[  240.195841][ T8929] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  240.217795][ T8933] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  240.400198][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.576483][ T6309] EXT4-fs error (device loop7): ext4_empty_dir:3075: inode #11: comm syz-executor: invalid size
[  240.634668][ T8941] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  240.645909][ T6309] EXT4-fs error (device loop7): ext4_empty_dir:3075: inode #11: comm syz-executor: invalid size
[  240.672359][ T8941] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  240.703489][ T6309] EXT4-fs error (device loop7): ext4_empty_dir:3075: inode #11: comm syz-executor: invalid size
[  240.796283][ T6309] EXT4-fs error (device loop7): ext4_empty_dir:3075: inode #11: comm syz-executor: invalid size
[  240.838851][ T6309] EXT4-fs error (device loop7): ext4_empty_dir:3075: inode #11: comm syz-executor: invalid size
[  240.880163][ T6309] EXT4-fs error (device loop7): ext4_empty_dir:3075: inode #11: comm syz-executor: invalid size
[  240.909973][ T6309] EXT4-fs error (device loop7): ext4_empty_dir:3075: inode #11: comm syz-executor: invalid size
[  240.928767][ T6309] EXT4-fs error (device loop7): ext4_empty_dir:3075: inode #11: comm syz-executor: invalid size
[  240.943632][ T6309] EXT4-fs error (device loop7): ext4_empty_dir:3075: inode #11: comm syz-executor: invalid size
[  240.960760][ T6309] EXT4-fs error (device loop7): ext4_empty_dir:3075: inode #11: comm syz-executor: invalid size
[  241.000738][ T1151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  241.054739][ T1151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  241.076846][ T1151] bond0 (unregistering): Released all slaves
[  241.130889][ T8949] netlink: 40 bytes leftover after parsing attributes in process `syz.0.851'.
[  241.161100][ T8949] netlink: 40 bytes leftover after parsing attributes in process `syz.0.851'.
[  241.178672][ T8949] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  241.229753][ T8950] netlink: 12 bytes leftover after parsing attributes in process `syz.8.852'.
[  241.582962][ T5847] Bluetooth: hci5: command tx timeout
[  241.616310][ T8963] loop0: detected capacity change from 0 to 1024
[  241.648555][ T8966] loop8: detected capacity change from 0 to 4096
[  241.677471][ T8966] ntfs3(loop8): Different NTFS sector size (2048) and media sector size (512).
[  241.804393][ T8963] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  242.440451][ T8972] loop4: detected capacity change from 0 to 65536
[  242.535615][ T8972] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  242.557755][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.669438][ T8972] XFS (loop4): Ending clean mount
[  242.678828][ T8972] XFS (loop4): Quotacheck needed: Please wait.
[  242.716477][ T3538] XFS (loop4): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  242.737632][ T3538] XFS (loop4): Unmount and run xfs_repair
[  242.747837][ T3538] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  242.813514][ T3538] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  242.848632][ T3538] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  242.858467][ T3538] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  242.902108][ T3538] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  242.961802][ T3538] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  243.041222][ T3538] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  243.081293][ T6309] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.092273][ T3538] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  243.126085][ T3538] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  243.138608][ T3538] XFS (loop4): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74
[  243.202473][ T8972] XFS (loop4): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  243.250658][ T8972] XFS (loop4): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  243.261582][ T8972] XFS (loop4): Unmount and run xfs_repair
[  243.267359][ T8972] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  243.275051][ T8972] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  243.284022][ T8972] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  243.292947][ T8972] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  243.301836][ T8972] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  243.310739][ T8972] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  243.319711][ T8972] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  243.330479][ T8972] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  243.340786][ T8972] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  243.352262][ T8972] XFS (loop4): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74
[  243.391486][ T8964] loop2: detected capacity change from 0 to 32768
[  243.411970][ T8972] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8e0 (fs/xfs/xfs_trans_buf.c:311).  Shutting down filesystem.
[  243.429635][ T8972] XFS (loop4): Please unmount the filesystem and rectify the problem(s)
[  243.497203][ T8964] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  243.497964][ T5838] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  243.663606][ T5847] Bluetooth: hci5: command tx timeout
[  243.800606][ T8964] XFS (loop2): Ending clean mount
[  244.249842][ T5836] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  244.300831][ T1151] hsr_slave_0: left promiscuous mode
[  244.368168][ T1151] hsr_slave_1: left promiscuous mode
[  244.393502][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  244.450443][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_0
[  244.497386][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  244.530932][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_1
[  244.667252][ T8998] loop8: detected capacity change from 0 to 32768
[  244.716516][ T1151] veth1_macvtap: left promiscuous mode
[  244.740488][ T8998] 
[  244.740488][ T8998]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  244.740488][ T8998] 
[  244.763151][ T1151] veth0_macvtap: left promiscuous mode
[  244.800966][ T1151] veth1_vlan: left promiscuous mode
[  244.819899][ T1151] veth0_vlan: left promiscuous mode
[  244.860898][ T8998] 
[  244.860898][ T8998]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  244.860898][ T8998] 
[  244.938991][ T8998] 
[  244.938991][ T8998]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  244.938991][ T8998] 
[  245.061501][ T9018] loop4: detected capacity change from 0 to 256
[  245.225060][ T9018] FAT-fs (loop4): Directory bread(block 64) failed
[  245.270285][ T9018] FAT-fs (loop4): Directory bread(block 65) failed
[  245.292729][ T9018] FAT-fs (loop4): Directory bread(block 66) failed
[  245.312125][ T9018] FAT-fs (loop4): Directory bread(block 67) failed
[  245.318766][ T9018] FAT-fs (loop4): Directory bread(block 68) failed
[  245.403238][ T9018] FAT-fs (loop4): Directory bread(block 69) failed
[  245.409880][ T9018] FAT-fs (loop4): Directory bread(block 70) failed
[  245.477249][ T9018] FAT-fs (loop4): Directory bread(block 71) failed
[  245.526514][ T9018] FAT-fs (loop4): Directory bread(block 72) failed
[  245.599302][ T9018] FAT-fs (loop4): Directory bread(block 73) failed
[  245.708650][ T9030] loop8: detected capacity change from 0 to 16
[  245.752174][ T5847] Bluetooth: hci5: command tx timeout
[  245.813528][ T9030] erofs (device loop8): mounted with root inode @ nid 36.
[  245.834705][   T30] audit: type=1800 audit(1748599604.467:572): pid=9018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.868" name="file1" dev="loop4" ino=1048625 res=0 errno=0
[  245.966472][ T5857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  245.989931][ T5857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  246.011485][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  246.028902][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  246.041721][ T5857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  246.042289][ T9041] loop2: detected capacity change from 0 to 8
[  246.150276][ T9041] SQUASHFS error: zlib decompression failed, data probably corrupt
[  246.195471][ T9041] SQUASHFS error: Failed to read block 0x9b: -5
[  246.205841][ T9041] SQUASHFS error: Unable to read metadata cache entry [99]
[  246.225186][ T9041] SQUASHFS error: Unable to read inode 0x127
[  246.493629][ T5849] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  246.553328][ T5815] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  246.654065][ T5849] usb 3-1: config 0 has an invalid interface number: 239 but max is 0
[  246.663394][ T5849] usb 3-1: config 0 has an invalid descriptor of length 171, skipping remainder of the config
[  246.674198][ T5849] usb 3-1: config 0 has no interface number 0
[  246.680407][ T5849] usb 3-1: config 0 interface 239 altsetting 0 endpoint 0x2 has invalid maxpacket 36130, setting to 1024
[  246.695039][ T5849] usb 3-1: config 0 interface 239 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024
[  246.712292][ T5815] usb 9-1: Using ep0 maxpacket: 32
[  246.727397][ T5815] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  246.742155][ T5849] usb 3-1: config 0 interface 239 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  246.762126][ T5815] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  246.777886][ T5815] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  246.791884][ T5815] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.801192][ T5849] usb 3-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=60.d9
[  246.825528][ T5849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.841802][ T5815] usb 9-1: config 0 descriptor??
[  246.851303][ T1151] team0 (unregistering): Port device team_slave_1 removed
[  246.860738][ T5849] usb 3-1: Product: syz
[  246.877700][ T5849] usb 3-1: Manufacturer: syz
[  246.891001][ T5849] usb 3-1: SerialNumber: syz
[  246.913114][ T5849] usb 3-1: config 0 descriptor??
[  246.929149][ T9041] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  247.032399][ T1151] team0 (unregistering): Port device team_slave_0 removed
[  247.171588][ T5849] usb 3-1: probing VID:PID(2201:012C)   
[  247.191858][ T5849] usb 3-1: vub300 testing BULK OUT EndPoint(0) 02
[  247.226994][ T5849] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs
[  247.289491][ T5849] vub300 3-1:0.239: probe with driver vub300 failed with error -22
[  247.350493][ T5815] savu 0003:1E7D:2D5A.0009: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.8-1/input0
[  247.362783][ T5849] usb 3-1: USB disconnect, device number 8
[  247.564961][ T5897] usb 9-1: USB disconnect, device number 4
[  247.670913][ T9050] fido_id[9050]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory
[  247.828403][ T5847] Bluetooth: hci5: command tx timeout
[  248.109224][ T9056] loop4: detected capacity change from 0 to 256
[  248.142365][ T5847] Bluetooth: hci1: command tx timeout
[  248.821016][ T9068] loop4: detected capacity change from 0 to 512
[  248.900228][ T9068] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.884: corrupted in-inode xattr: invalid ea_ino
[  249.022027][ T9068] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.884: couldn't read orphan inode 15 (err -117)
[  249.075812][ T9054] loop2: detected capacity change from 0 to 32768
[  249.118738][ T9054] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.880 (9054)
[  249.146180][ T9068] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  249.230520][ T9054] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  249.272277][ T9054] BTRFS info (device loop2): using crc32c (crc32c-x86_64) checksum algorithm
[  249.317722][ T9054] BTRFS info (device loop2): disk space caching is enabled
[  249.347307][ T9054] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  249.423517][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.685889][ T9054] BTRFS info (device loop2): rebuilding free space tree
[  249.758124][ T9054] BTRFS info (device loop2): disabling free space tree
[  249.792707][ T9054] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  249.845513][ T9054] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  249.991471][ T8917] chnl_net:caif_netlink_parms(): no params data found
[  250.222620][ T5847] Bluetooth: hci1: command tx timeout
[  250.703148][ T5836] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  250.724829][ T9107] loop0: detected capacity change from 0 to 32768
[  250.760952][ T9107] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  250.769241][ T9107] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  250.794210][ T9107] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[  250.804841][ T5849] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  250.811622][ T5849] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  251.053532][ T9075] loop8: detected capacity change from 0 to 40427
[  251.085258][ T9075] F2FS-fs (loop8): build fault injection attr: rate: 690, type: 0x3fffff
[  251.131889][ T5849] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 320ms
[  251.134008][ T9075] F2FS-fs (loop8): Image doesn't support compression
[  251.185244][ T9075] F2FS-fs (loop8): Image doesn't support compression
[  251.188265][ T5849] gfs2: fsid=syz:syz.0: jid=0: Done
[  251.252158][ T9107] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  251.289205][ T9075] F2FS-fs (loop8): invalid crc value
[  251.416446][ T9107] gfs2: fsid=syz:syz.0: found 1 quota changes
[  251.655995][ T8917] bridge0: port 1(bridge_slave_0) entered blocking state
[  251.703029][ T8917] bridge0: port 1(bridge_slave_0) entered disabled state
[  251.710549][ T8917] bridge_slave_0: entered allmulticast mode
[  251.849607][ T8917] bridge_slave_0: entered promiscuous mode
[  251.963565][ T9075] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  252.061920][ T8917] bridge0: port 2(bridge_slave_1) entered blocking state
[  252.136245][ T8917] bridge0: port 2(bridge_slave_1) entered disabled state
[  252.182373][ T8917] bridge_slave_1: entered allmulticast mode
[  252.190260][ T8917] bridge_slave_1: entered promiscuous mode
[  252.196601][ T9075] F2FS-fs (loop8): inject inconsistent footer in sanity_check_node_footer of read_inline_xattr+0x1af/0x320
[  252.301823][ T9075] F2FS-fs (loop8): inconsistent node block, node_type:1, nid:10, node_footer[nid:10,ino:10,ofs:0,cpver:0,blkaddr:0]
[  252.320122][ T5847] Bluetooth: hci1: command tx timeout
[  252.479184][ T7535] syz-executor: attempt to access beyond end of device
[  252.479184][ T7535] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  252.558589][ T7535] CPU: 1 UID: 0 PID: 7535 Comm: syz-executor Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(full) 
[  252.558624][ T7535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  252.558639][ T7535] Call Trace:
[  252.558649][ T7535]  <TASK>
[  252.558660][ T7535]  dump_stack_lvl+0x189/0x250
[  252.558710][ T7535]  ? __pfx_dump_stack_lvl+0x10/0x10
[  252.558752][ T7535]  ? __pfx_queue_work_on+0x10/0x10
[  252.558786][ T7535]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  252.558813][ T7535]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  252.558857][ T7535]  f2fs_handle_critical_error+0x37c/0x540
[  252.558907][ T7535]  f2fs_write_end_io+0x597/0x7b0
[  252.558933][ T7535]  ? __submit_merged_bio+0x221/0x6a0
[  252.559000][ T7535]  __submit_merged_bio+0x27a/0x6a0
[  252.559047][ T7535]  __submit_merged_write_cond+0x255/0x530
[  252.559097][ T7535]  f2fs_write_data_pages+0x2854/0x31f0
[  252.559188][ T7535]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  252.559249][ T7535]  ? srso_alias_return_thunk+0x5/0xfbef5
[  252.559278][ T7535]  ? is_bpf_text_address+0x292/0x2b0
[  252.559310][ T7535]  ? is_bpf_text_address+0x26/0x2b0
[  252.559382][ T7535]  ? srso_alias_return_thunk+0x5/0xfbef5
[  252.559411][ T7535]  ? stack_trace_save+0x9c/0xe0
[  252.559453][ T7535]  ? srso_alias_return_thunk+0x5/0xfbef5
[  252.559482][ T7535]  ? stack_depot_save_flags+0x40/0x900
[  252.559536][ T7535]  ? srso_alias_return_thunk+0x5/0xfbef5
[  252.559565][ T7535]  ? __lock_acquire+0xab9/0xd20
[  252.559606][ T7535]  ? srso_alias_return_thunk+0x5/0xfbef5
[  252.559634][ T7535]  ? do_raw_spin_lock+0x121/0x290
[  252.559682][ T7535]  ? srso_alias_return_thunk+0x5/0xfbef5
[  252.559716][ T7535]  ? srso_alias_return_thunk+0x5/0xfbef5
[  252.559745][ T7535]  ? do_raw_spin_unlock+0x122/0x240
[  252.559784][ T7535]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  252.559827][ T7535]  do_writepages+0x32e/0x550
[  252.559869][ T7535]  ? srso_alias_return_thunk+0x5/0xfbef5
[  252.559904][ T7535]  ? srso_alias_return_thunk+0x5/0xfbef5
[  252.559933][ T7535]  ? do_raw_spin_unlock+0x122/0x240
[  252.559985][ T7535]  filemap_fdatawrite+0x191/0x230
[  252.560022][ T7535]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  252.560119][ T7535]  ? srso_alias_return_thunk+0x5/0xfbef5
[  252.560155][ T7535]  ? do_raw_spin_unlock+0x122/0x240
[  252.560202][ T7535]  f2fs_sync_dirty_inodes+0x31f/0x830
[  252.560250][ T7535]  f2fs_write_checkpoint+0x94a/0x1de0
[  252.560313][ T7535]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  252.560411][ T7535]  ? kill_f2fs_super+0x298/0x6c0
[  252.560446][ T7535]  kill_f2fs_super+0x2c3/0x6c0
[  252.560482][ T7535]  ? __pfx_kill_f2fs_super+0x10/0x10
[  252.560505][ T7535]  ? radix_tree_delete_item+0x2b6/0x400
[  252.560542][ T7535]  ? srso_alias_return_thunk+0x5/0xfbef5
[  252.560570][ T7535]  ? shrinker_free+0x2ce/0x3e0
[  252.560600][ T7535]  deactivate_locked_super+0xbc/0x130
[  252.560630][ T7535]  cleanup_mnt+0x425/0x4c0
[  252.560654][ T7535]  ? srso_alias_return_thunk+0x5/0xfbef5
[  252.560682][ T7535]  ? lockdep_hardirqs_on+0x9c/0x150
[  252.560715][ T7535]  task_work_run+0x1d4/0x260
[  252.560746][ T7535]  ? __pfx_task_work_run+0x10/0x10
[  252.560768][ T7535]  ? __x64_sys_umount+0x122/0x160
[  252.560807][ T7535]  ? exit_to_user_mode_loop+0x40/0x110
[  252.560843][ T7535]  exit_to_user_mode_loop+0xec/0x110
[  252.560873][ T7535]  do_syscall_64+0x2bd/0x3b0
[  252.560901][ T7535]  ? lockdep_hardirqs_on+0x9c/0x150
[  252.560929][ T7535]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.560961][ T7535]  ? srso_alias_return_thunk+0x5/0xfbef5
[  252.560989][ T7535]  ? exc_page_fault+0x9f/0xf0
[  252.561020][ T7535]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.561045][ T7535] RIP: 0033:0x7f891ef8fc97
[  252.561067][ T7535] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  252.561089][ T7535] RSP: 002b:00007ffe64810fa8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  252.561115][ T7535] RAX: 0000000000000000 RBX: 00007f891f01089d RCX: 00007f891ef8fc97
[  252.561133][ T7535] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe64811060
[  252.561150][ T7535] RBP: 00007ffe64811060 R08: 0000000000000000 R09: 0000000000000000
[  252.561171][ T7535] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe648120f0
[  252.561188][ T7535] R13: 00007f891f01089d R14: 000000000003d987 R15: 00007ffe64812130
[  252.561232][ T7535]  </TASK>
[  252.561242][ T7535] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[  253.061405][ T8917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  253.168948][ T8917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  253.262614][ T5944] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  253.424179][ T5944] usb 1-1: Using ep0 maxpacket: 8
[  253.472315][ T5944] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  253.481409][ T5944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.501401][ T9174] loop4: detected capacity change from 0 to 4096
[  253.525836][ T1151] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.537602][ T5944] usb 1-1: config 0 descriptor??
[  253.602203][ T9174] NILFS (loop4): invalid segment: Checksum error in segment payload
[  253.610441][ T9174] NILFS (loop4): trying rollback from an earlier position
[  253.657108][ T8917] team0: Port device team_slave_0 added
[  253.706411][ T8917] team0: Port device team_slave_1 added
[  253.745648][ T9035] chnl_net:caif_netlink_parms(): no params data found
[  253.757551][ T9174] NILFS (loop4): recovery complete
[  253.815965][ T9181] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  253.905543][ T1151] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.383318][ T5847] Bluetooth: hci1: command tx timeout
[  254.454150][ T1151] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.686134][ T8917] batman_adv: batadv0: Adding interface: batadv_slave_0
[  254.742268][ T8917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  254.792582][ T5944] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  254.813648][ T5944] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  254.824710][ T8917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  254.835962][ T5944] asix 1-1:0.0: probe with driver asix failed with error -71
[  254.860059][ T5944] usb 1-1: USB disconnect, device number 9
[  254.860705][ T9206] sctp: [Deprecated]: syz.8.901 (pid 9206) Use of struct sctp_assoc_value in delayed_ack socket option.
[  254.860705][ T9206] Use struct sctp_sack_info instead
[  255.031125][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  255.037798][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  255.236532][ T1151] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  255.278890][ T8917] batman_adv: batadv0: Adding interface: batadv_slave_1
[  255.297334][ T8917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  255.385852][ T8917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  255.519474][ T9214] bridge_slave_0: left allmulticast mode
[  255.537801][ T9214] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.696576][ T9214] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  256.980600][  T974] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  257.023241][  T974] hid-generic 0000:0000:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  257.112948][ T5935] IPVS: starting estimator thread 0...
[  257.120131][ T8917] hsr_slave_0: entered promiscuous mode
[  257.125919][ T9237] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  257.163371][ T8917] hsr_slave_1: entered promiscuous mode
[  257.183300][ T8917] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  257.212289][ T8917] Cannot create hsr debugfs directory
[  257.238570][ T9242] IPVS: using max 24 ests per chain, 57600 per kthread
[  257.318310][ T1151] bridge_slave_1: left allmulticast mode
[  257.347336][ T1151] bridge_slave_1: left promiscuous mode
[  257.369012][ T1151] bridge0: port 2(bridge_slave_1) entered disabled state
[  257.423873][ T1151] bridge_slave_0: left allmulticast mode
[  257.444839][ T1151] bridge_slave_0: left promiscuous mode
[  257.457891][ T1151] bridge0: port 1(bridge_slave_0) entered disabled state
[  257.531527][ T9246] loop4: detected capacity change from 0 to 4096
[  257.612860][  T971] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  257.651824][ T9248] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  257.695495][   T30] audit: type=1326 audit(1748599616.317:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9231 comm="syz.0.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febf1b8e969 code=0x7fc00000
[  257.772130][  T971] usb 3-1: Using ep0 maxpacket: 16
[  257.789353][  T971] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  257.817308][  T971] usb 3-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00
[  257.853606][  T971] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.903850][  T971] usb 3-1: config 0 descriptor??
[  258.348334][  T971] wacom 0003:056A:0094.000B: Using device in hidraw-only mode
[  258.402593][  T971] wacom 0003:056A:0094.000B: hidraw0: USB HID v0.00 Device [HID 056a:0094] on usb-dummy_hcd.2-1/input0
[  258.571293][  T971] usb 3-1: USB disconnect, device number 9
[  258.789060][ T9271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.920'.
[  259.011142][ T5898] hid-generic FFFC:0003:0000.000C: unknown main item tag 0x0
[  259.028787][ T5898] hid-generic FFFC:0003:0000.000C: unknown main item tag 0x0
[  259.037408][ T5898] hid-generic FFFC:0003:0000.000C: unknown main item tag 0x0
[  259.048443][ T5898] hid-generic FFFC:0003:0000.000C: unknown main item tag 0x0
[  259.085256][ T5898] hid-generic FFFC:0003:0000.000C: unknown main item tag 0x0
[  259.108277][ T5898] hid-generic FFFC:0003:0000.000C: unknown main item tag 0x0
[  259.122798][ T5898] hid-generic FFFC:0003:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  259.247552][ T1151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  259.271851][ T1151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  259.288357][ T9283] loop2: detected capacity change from 0 to 8
[  259.299144][ T9284] loop0: detected capacity change from 0 to 128
[  259.307626][ T1151] bond0 (unregistering): Released all slaves
[  259.312349][ T5935] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  259.327733][ T9279] fido_id[9279]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  259.384470][ T9284] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  259.447617][ T9284] ext4 filesystem being mounted at /186/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  259.492408][ T5935] usb 5-1: Using ep0 maxpacket: 32
[  259.499596][ T9035] bridge0: port 1(bridge_slave_0) entered blocking state
[  259.524873][ T5935] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[  259.554141][ T9035] bridge0: port 1(bridge_slave_0) entered disabled state
[  259.561330][ T5935] usb 5-1: config 0 has no interface number 0
[  259.569443][ T5935] usb 5-1: config 0 interface 12 has no altsetting 0
[  259.572294][ T9035] bridge_slave_0: entered allmulticast mode
[  259.599051][ T9035] bridge_slave_0: entered promiscuous mode
[  259.609806][ T5935] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  259.618464][ T9035] bridge0: port 2(bridge_slave_1) entered blocking state
[  259.626958][ T5935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  259.643156][ T9035] bridge0: port 2(bridge_slave_1) entered disabled state
[  259.653157][ T9035] bridge_slave_1: entered allmulticast mode
[  259.659335][ T5935] usb 5-1: Product: syz
[  259.665318][ T5935] usb 5-1: Manufacturer: syz
[  259.669934][ T5935] usb 5-1: SerialNumber: syz
[  259.681061][ T5833] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  259.700600][ T5935] usb 5-1: config 0 descriptor??
[  259.714821][ T9035] bridge_slave_1: entered promiscuous mode
[  260.437784][ T9035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  260.846171][ T9035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  260.990824][ T5935] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  260.999628][ T9311] loop8: detected capacity change from 0 to 1024
[  261.023501][ T5935] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71
[  261.072950][ T5935] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  261.081750][ T5935] f81534 5-1:0.12: probe with driver f81534 failed with error -71
[  261.114391][ T9311] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  261.116685][ T5935] usb 5-1: USB disconnect, device number 8
[  261.180380][ T1151] hsr_slave_0: left promiscuous mode
[  261.248424][ T1151] hsr_slave_1: left promiscuous mode
[  261.276898][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  261.309748][ T7535] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  261.320644][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_0
[  261.364986][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  261.402548][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_1
[  261.478432][ T1151] veth1_macvtap: left promiscuous mode
[  261.512287][ T1151] veth0_macvtap: left promiscuous mode
[  261.517979][ T1151] veth1_vlan: left promiscuous mode
[  261.569396][ T1151] veth0_vlan: left promiscuous mode
[  261.879229][ T9335] loop4: detected capacity change from 0 to 2048
[  261.961132][ T9335] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  262.320254][ T9341] loop2: detected capacity change from 0 to 40427
[  262.332161][ T5898] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  262.332171][   T30] audit: type=1326 audit(1748599620.917:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9342 comm="syz.8.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891ef8e969 code=0x7ffc0000
[  262.363825][ T9341] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x3fffff
[  262.388666][ T9341] F2FS-fs (loop2): invalid crc value
[  262.503299][   T30] audit: type=1326 audit(1748599620.927:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9342 comm="syz.8.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891ef8e969 code=0x7ffc0000
[  262.536729][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  262.547879][ T9341] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  262.578063][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  262.588260][ T5898] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  262.602173][ T5898] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  262.611223][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.657684][ T9341] F2FS-fs (loop2): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0x23e/0x1e00
[  262.670428][ T9341] F2FS-fs (loop2): inconsistent node block, node_type:1, nid:3, node_footer[nid:3,ino:3,ofs:0,cpver:1219692001,blkaddr:4098]
[  262.694971][ T9341] syz.2.943: attempt to access beyond end of device
[  262.694971][ T9341] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  262.709562][ T9341] CPU: 0 UID: 0 PID: 9341 Comm: syz.2.943 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(full) 
[  262.709585][ T9341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  262.709597][ T9341] Call Trace:
[  262.709605][ T9341]  <TASK>
[  262.709613][ T9341]  dump_stack_lvl+0x189/0x250
[  262.709649][ T9341]  ? __pfx_dump_stack_lvl+0x10/0x10
[  262.709679][ T9341]  ? __pfx_queue_work_on+0x10/0x10
[  262.709703][ T9341]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  262.709723][ T9341]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  262.709752][ T9341]  f2fs_handle_critical_error+0x37c/0x540
[  262.709787][ T9341]  f2fs_write_end_io+0x597/0x7b0
[  262.709806][ T9341]  ? __submit_merged_bio+0x221/0x6a0
[  262.709846][ T9341]  __submit_merged_bio+0x27a/0x6a0
[  262.709871][ T9341]  ? up_write+0x1c4/0x420
[  262.709902][ T9341]  __submit_merged_write_cond+0x44c/0x530
[  262.709936][ T9341]  f2fs_sync_node_pages+0x1746/0x18d0
[  262.709987][ T9341]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  262.710012][ T9341]  ? __lock_acquire+0xab9/0xd20
[  262.710059][ T9341]  ? f2fs_write_checkpoint+0xe33/0x1de0
[  262.710083][ T9341]  ? up_write+0x1c4/0x420
[  262.710106][ T9341]  ? do_raw_spin_unlock+0x122/0x240
[  262.710138][ T9341]  f2fs_write_checkpoint+0xe5f/0x1de0
[  262.710178][ T9341]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  262.710234][ T9341]  ? __pfx_down_write+0x10/0x10
[  262.710268][ T9341]  f2fs_issue_checkpoint+0x328/0x490
[  262.710291][ T9341]  ? __pfx_f2fs_issue_checkpoint+0x10/0x10
[  262.710311][ T9341]  ? srso_alias_return_thunk+0x5/0xfbef5
[  262.710332][ T9341]  ? __lock_acquire+0xab9/0xd20
[  262.710364][ T9341]  ? srso_alias_return_thunk+0x5/0xfbef5
[  262.710385][ T9341]  ? __up_read+0x280/0x680
[  262.710417][ T9341]  ? srso_alias_return_thunk+0x5/0xfbef5
[  262.710438][ T9341]  ? f2fs_sync_fs+0x200/0x3d0
[  262.710465][ T9341]  f2fs_do_sync_file+0x86a/0x1860
[  262.710494][ T9341]  ? __pfx_f2fs_do_sync_file+0x10/0x10
[  262.710549][ T9341]  ? srso_alias_return_thunk+0x5/0xfbef5
[  262.710570][ T9341]  ? __mark_inode_dirty+0x3ab/0xdf0
[  262.710603][ T9341]  ? vfs_fsync_range+0x149/0x1c0
[  262.710628][ T9341]  ? srso_alias_return_thunk+0x5/0xfbef5
[  262.710649][ T9341]  ? f2fs_sync_file+0xe9/0x160
[  262.710670][ T9341]  f2fs_file_write_iter+0x78e/0x2340
[  262.710706][ T9341]  ? srso_alias_return_thunk+0x5/0xfbef5
[  262.710732][ T9341]  ? __pfx_f2fs_file_write_iter+0x10/0x10
[  262.710751][ T9341]  ? rcu_read_lock_any_held+0xb3/0x120
[  262.710796][ T9341]  vfs_write+0x54b/0xa90
[  262.710823][ T9341]  ? __pfx_f2fs_file_write_iter+0x10/0x10
[  262.710846][ T9341]  ? __pfx_vfs_write+0x10/0x10
[  262.710877][ T9341]  ? __fget_files+0x2a/0x420
[  262.710907][ T9341]  ? srso_alias_return_thunk+0x5/0xfbef5
[  262.710932][ T9341]  ksys_write+0x145/0x250
[  262.710955][ T9341]  ? __pfx_ksys_write+0x10/0x10
[  262.710979][ T9341]  ? rcu_is_watching+0x15/0xb0
[  262.711007][ T9341]  ? do_syscall_64+0xbe/0x3b0
[  262.711033][ T9341]  do_syscall_64+0xfa/0x3b0
[  262.711053][ T9341]  ? lockdep_hardirqs_on+0x9c/0x150
[  262.711073][ T9341]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.711090][ T9341]  ? srso_alias_return_thunk+0x5/0xfbef5
[  262.711110][ T9341]  ? exc_page_fault+0x9f/0xf0
[  262.711131][ T9341]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.711149][ T9341] RIP: 0033:0x7f08d538e969
[  262.711165][ T9341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  262.711180][ T9341] RSP: 002b:00007f08d6152038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  262.711199][ T9341] RAX: ffffffffffffffda RBX: 00007f08d55b5fa0 RCX: 00007f08d538e969
[  262.711212][ T9341] RDX: 000000000000045c RSI: 0000200000000980 RDI: 0000000000000004
[  262.711224][ T9341] RBP: 00007f08d5410ab1 R08: 0000000000000000 R09: 0000000000000000
[  262.711236][ T9341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  262.711247][ T9341] R13: 0000000000000000 R14: 00007f08d55b5fa0 R15: 00007ffde4f632e8
[  262.711275][ T9341]  </TASK>
[  262.711282][ T9341] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  263.109582][ T9341] CPU: 0 UID: 0 PID: 9341 Comm: syz.2.943 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(full) 
[  263.109608][ T9341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  263.109620][ T9341] Call Trace:
[  263.109628][ T9341]  <TASK>
[  263.109636][ T9341]  dump_stack_lvl+0x189/0x250
[  263.109672][ T9341]  ? __pfx_dump_stack_lvl+0x10/0x10
[  263.109702][ T9341]  ? __pfx_queue_work_on+0x10/0x10
[  263.109726][ T9341]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  263.109746][ T9341]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  263.109775][ T9341]  f2fs_handle_critical_error+0x37c/0x540
[  263.109810][ T9341]  f2fs_write_end_io+0x597/0x7b0
[  263.109829][ T9341]  ? __submit_merged_bio+0x221/0x6a0
[  263.109869][ T9341]  __submit_merged_bio+0x27a/0x6a0
[  263.109893][ T9341]  ? up_write+0x1c4/0x420
[  263.109925][ T9341]  __submit_merged_write_cond+0x44c/0x530
[  263.109958][ T9341]  f2fs_sync_node_pages+0x1746/0x18d0
[  263.110007][ T9341]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  263.110033][ T9341]  ? __lock_acquire+0xab9/0xd20
[  263.110081][ T9341]  ? f2fs_write_checkpoint+0xe33/0x1de0
[  263.110105][ T9341]  ? up_write+0x1c4/0x420
[  263.110128][ T9341]  ? do_raw_spin_unlock+0x122/0x240
[  263.110161][ T9341]  f2fs_write_checkpoint+0xe5f/0x1de0
[  263.110203][ T9341]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  263.110259][ T9341]  ? __pfx_down_write+0x10/0x10
[  263.110294][ T9341]  f2fs_issue_checkpoint+0x328/0x490
[  263.110317][ T9341]  ? __pfx_f2fs_issue_checkpoint+0x10/0x10
[  263.110337][ T9341]  ? srso_alias_return_thunk+0x5/0xfbef5
[  263.110358][ T9341]  ? __lock_acquire+0xab9/0xd20
[  263.110391][ T9341]  ? srso_alias_return_thunk+0x5/0xfbef5
[  263.110412][ T9341]  ? __up_read+0x280/0x680
[  263.110445][ T9341]  ? srso_alias_return_thunk+0x5/0xfbef5
[  263.110466][ T9341]  ? f2fs_sync_fs+0x200/0x3d0
[  263.110494][ T9341]  f2fs_do_sync_file+0x86a/0x1860
[  263.110523][ T9341]  ? __pfx_f2fs_do_sync_file+0x10/0x10
[  263.110579][ T9341]  ? srso_alias_return_thunk+0x5/0xfbef5
[  263.110599][ T9341]  ? __mark_inode_dirty+0x3ab/0xdf0
[  263.110634][ T9341]  ? vfs_fsync_range+0x149/0x1c0
[  263.110659][ T9341]  ? srso_alias_return_thunk+0x5/0xfbef5
[  263.110680][ T9341]  ? f2fs_sync_file+0xe9/0x160
[  263.110702][ T9341]  f2fs_file_write_iter+0x78e/0x2340
[  263.110738][ T9341]  ? srso_alias_return_thunk+0x5/0xfbef5
[  263.110765][ T9341]  ? __pfx_f2fs_file_write_iter+0x10/0x10
[  263.110785][ T9341]  ? rcu_read_lock_any_held+0xb3/0x120
[  263.110827][ T9341]  vfs_write+0x54b/0xa90
[  263.110853][ T9341]  ? __pfx_f2fs_file_write_iter+0x10/0x10
[  263.110877][ T9341]  ? __pfx_vfs_write+0x10/0x10
[  263.110908][ T9341]  ? __fget_files+0x2a/0x420
[  263.110938][ T9341]  ? srso_alias_return_thunk+0x5/0xfbef5
[  263.110963][ T9341]  ksys_write+0x145/0x250
[  263.110991][ T9341]  ? __pfx_ksys_write+0x10/0x10
[  263.111010][ T9341]  ? rcu_is_watching+0x15/0xb0
[  263.111039][ T9341]  ? do_syscall_64+0xbe/0x3b0
[  263.111065][ T9341]  do_syscall_64+0xfa/0x3b0
[  263.111086][ T9341]  ? lockdep_hardirqs_on+0x9c/0x150
[  263.111106][ T9341]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.111123][ T9341]  ? srso_alias_return_thunk+0x5/0xfbef5
[  263.111144][ T9341]  ? exc_page_fault+0x9f/0xf0
[  263.111166][ T9341]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.111184][ T9341] RIP: 0033:0x7f08d538e969
[  263.111201][ T9341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  263.111217][ T9341] RSP: 002b:00007f08d6152038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  263.111236][ T9341] RAX: ffffffffffffffda RBX: 00007f08d55b5fa0 RCX: 00007f08d538e969
[  263.111250][ T9341] RDX: 000000000000045c RSI: 0000200000000980 RDI: 0000000000000004
[  263.111262][ T9341] RBP: 00007f08d5410ab1 R08: 0000000000000000 R09: 0000000000000000
[  263.111274][ T9341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  263.111285][ T9341] R13: 0000000000000000 R14: 00007f08d55b5fa0 R15: 00007ffde4f632e8
[  263.111313][ T9341]  </TASK>
[  263.111321][ T9341] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  263.509801][ T9341] CPU: 0 UID: 0 PID: 9341 Comm: syz.2.943 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(full) 
[  263.509827][ T9341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  263.509839][ T9341] Call Trace:
[  263.509847][ T9341]  <TASK>
[  263.509855][ T9341]  dump_stack_lvl+0x189/0x250
[  263.509893][ T9341]  ? __pfx_dump_stack_lvl+0x10/0x10
[  263.509923][ T9341]  ? __pfx_queue_work_on+0x10/0x10
[  263.509947][ T9341]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  263.509974][ T9341]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  263.510003][ T9341]  f2fs_handle_critical_error+0x37c/0x540
[  263.510038][ T9341]  f2fs_write_end_io+0x597/0x7b0
[  263.510057][ T9341]  ? __submit_merged_bio+0x221/0x6a0
[  263.510096][ T9341]  __submit_merged_bio+0x27a/0x6a0
[  263.510121][ T9341]  ? up_write+0x1c4/0x420
[  263.510152][ T9341]  __submit_merged_write_cond+0x44c/0x530
[  263.510185][ T9341]  f2fs_sync_node_pages+0x1746/0x18d0
[  263.510230][ T9341]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  263.510255][ T9341]  ? __lock_acquire+0xab9/0xd20
[  263.510302][ T9341]  ? f2fs_write_checkpoint+0xe33/0x1de0
[  263.510326][ T9341]  ? up_write+0x1c4/0x420
[  263.510350][ T9341]  ? do_raw_spin_unlock+0x122/0x240
[  263.510383][ T9341]  f2fs_write_checkpoint+0xe5f/0x1de0
[  263.510424][ T9341]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  263.510480][ T9341]  ? __pfx_down_write+0x10/0x10
[  263.510514][ T9341]  f2fs_issue_checkpoint+0x328/0x490
[  263.510537][ T9341]  ? __pfx_f2fs_issue_checkpoint+0x10/0x10
[  263.510557][ T9341]  ? srso_alias_return_thunk+0x5/0xfbef5
[  263.510579][ T9341]  ? __lock_acquire+0xab9/0xd20
[  263.510611][ T9341]  ? srso_alias_return_thunk+0x5/0xfbef5
[  263.510634][ T9341]  ? __up_read+0x280/0x680
[  263.510668][ T9341]  ? srso_alias_return_thunk+0x5/0xfbef5
[  263.510689][ T9341]  ? f2fs_sync_fs+0x200/0x3d0
[  263.510717][ T9341]  f2fs_do_sync_file+0x86a/0x1860
[  263.510746][ T9341]  ? __pfx_f2fs_do_sync_file+0x10/0x10
[  263.510801][ T9341]  ? srso_alias_return_thunk+0x5/0xfbef5
[  263.510822][ T9341]  ? __mark_inode_dirty+0x3ab/0xdf0
[  263.510857][ T9341]  ? vfs_fsync_range+0x149/0x1c0
[  263.510882][ T9341]  ? srso_alias_return_thunk+0x5/0xfbef5
[  263.510903][ T9341]  ? f2fs_sync_file+0xe9/0x160
[  263.510924][ T9341]  f2fs_file_write_iter+0x78e/0x2340
[  263.510964][ T9341]  ? srso_alias_return_thunk+0x5/0xfbef5
[  263.510992][ T9341]  ? __pfx_f2fs_file_write_iter+0x10/0x10
[  263.511011][ T9341]  ? rcu_read_lock_any_held+0xb3/0x120
[  263.511053][ T9341]  vfs_write+0x54b/0xa90
[  263.511081][ T9341]  ? __pfx_f2fs_file_write_iter+0x10/0x10
[  263.511103][ T9341]  ? __pfx_vfs_write+0x10/0x10
[  263.511135][ T9341]  ? __fget_files+0x2a/0x420
[  263.511165][ T9341]  ? srso_alias_return_thunk+0x5/0xfbef5
[  263.511190][ T9341]  ksys_write+0x145/0x250
[  263.511215][ T9341]  ? __pfx_ksys_write+0x10/0x10
[  263.511235][ T9341]  ? rcu_is_watching+0x15/0xb0
[  263.511264][ T9341]  ? do_syscall_64+0xbe/0x3b0
[  263.511290][ T9341]  do_syscall_64+0xfa/0x3b0
[  263.511310][ T9341]  ? lockdep_hardirqs_on+0x9c/0x150
[  263.511330][ T9341]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.511348][ T9341]  ? srso_alias_return_thunk+0x5/0xfbef5
[  263.511368][ T9341]  ? exc_page_fault+0x9f/0xf0
[  263.511390][ T9341]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.511408][ T9341] RIP: 0033:0x7f08d538e969
[  263.511425][ T9341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  263.511440][ T9341] RSP: 002b:00007f08d6152038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  263.511460][ T9341] RAX: ffffffffffffffda RBX: 00007f08d55b5fa0 RCX: 00007f08d538e969
[  263.511474][ T9341] RDX: 000000000000045c RSI: 0000200000000980 RDI: 0000000000000004
[  263.511486][ T9341] RBP: 00007f08d5410ab1 R08: 0000000000000000 R09: 0000000000000000
[  263.511497][ T9341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  263.511509][ T9341] R13: 0000000000000000 R14: 00007f08d55b5fa0 R15: 00007ffde4f632e8
[  263.511537][ T9341]  </TASK>
[  263.511545][ T9341] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  263.925112][ T5898] usb 1-1: config 0 descriptor??
[  263.978323][   T30] audit: type=1326 audit(1748599620.927:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9342 comm="syz.8.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f891ef8e969 code=0x7ffc0000
[  264.004899][   T30] audit: type=1326 audit(1748599620.927:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9342 comm="syz.8.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891ef8e969 code=0x7ffc0000
[  264.029912][   T30] audit: type=1326 audit(1748599620.927:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9342 comm="syz.8.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891ef8e969 code=0x7ffc0000
[  264.060415][   T30] audit: type=1326 audit(1748599620.927:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9342 comm="syz.8.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f891ef8e969 code=0x7ffc0000
[  264.115693][   T30] audit: type=1326 audit(1748599620.947:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9342 comm="syz.8.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f891ef2ab39 code=0x7ffc0000
[  264.193538][   T30] audit: type=1326 audit(1748599620.947:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9342 comm="syz.8.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f891ef2ab39 code=0x7ffc0000
[  264.230295][   T30] audit: type=1326 audit(1748599620.947:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9342 comm="syz.8.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f891ef2ab39 code=0x7ffc0000
[  264.337025][   T30] audit: type=1326 audit(1748599620.957:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9342 comm="syz.8.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f891ef2ab39 code=0x7ffc0000
[  264.409428][   T30] audit: type=1326 audit(1748599620.957:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9342 comm="syz.8.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f891ef2ab39 code=0x7ffc0000
[  264.436889][ T5898] plantronics 0003:047F:FFFF.000D: item 0 0 0 11 parsing failed
[  264.452904][ T5898] plantronics 0003:047F:FFFF.000D: parse failed
[  264.473125][ T5898] plantronics 0003:047F:FFFF.000D: probe with driver plantronics failed with error -22
[  264.505651][   T30] audit: type=1326 audit(1748599620.957:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9342 comm="syz.8.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f891ef2ab39 code=0x7ffc0000
[  264.702661][ T5935] usb 1-1: USB disconnect, device number 10
[  264.851277][ T5898] Process accounting resumed
[  265.521874][ T1151] team0 (unregistering): Port device team_slave_1 removed
[  265.599350][ T1151] team0 (unregistering): Port device team_slave_0 removed
[  265.670456][ T5935] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  265.834322][ T5935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  265.846578][ T5935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  265.858518][ T5935] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  265.868565][ T9383] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  265.919543][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.960407][ T5935] usb 1-1: config 0 descriptor??
[  266.493283][ T9035] team0: Port device team_slave_0 added
[  266.590689][ T5935] usb 1-1: string descriptor 0 read error: -22
[  266.600596][ T9035] team0: Port device team_slave_1 added
[  266.672932][ T9391] Bluetooth: hci0: invalid length 0, exp 2 for type 5
[  266.819394][ T5935] uclogic 0003:256C:006D.000E: interface is invalid, ignoring
[  266.921422][ T9400] loop2: detected capacity change from 0 to 256
[  266.934023][ T9400] exfat: Deprecated parameter 'utf8'
[  266.975087][ T9400] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  267.028198][  T971] usb 1-1: USB disconnect, device number 11
[  267.098438][ T9035] batman_adv: batadv0: Adding interface: batadv_slave_0
[  267.147408][ T9035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  267.252262][ T9035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  267.302215][ T9035] batman_adv: batadv0: Adding interface: batadv_slave_1
[  267.325286][ T9035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  267.438893][ T9035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  267.710775][ T9035] hsr_slave_0: entered promiscuous mode
[  267.721068][ T9035] hsr_slave_1: entered promiscuous mode
[  267.990622][ T8917] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  268.029524][ T8917] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  268.055595][ T8917] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  268.118284][ T8917] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  268.407084][ T9428] trusted_key: syz.0.974 sent an empty control message without MSG_MORE.
[  268.492511][ T9430] loop4: detected capacity change from 0 to 1024
[  268.619950][ T9430] hfsplus: bad catalog entry type
[  268.679776][ T9430] hfsplus: bad catalog entry type
[  268.914897][   T36] hfsplus: bad catalog file entry
[  268.920273][   T36] hfsplus: b-tree write err: -5, ino 3
[  269.028460][ T9442] netlink: 4 bytes leftover after parsing attributes in process `syz.8.978'.
[  269.371089][ T8917] 8021q: adding VLAN 0 to HW filter on device bond0
[  269.397364][ T9452] netlink: 36 bytes leftover after parsing attributes in process `syz.2.982'.
[  269.556586][ T9457] loop4: detected capacity change from 0 to 512
[  269.691351][ T9457] EXT4-fs (loop4): 1 orphan inode deleted
[  269.717797][ T9457] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  269.731939][ T3440] __quota_error: 55 callbacks suppressed
[  269.731953][ T3440] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  269.778917][ T9457] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  269.796024][ T3440] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1
[  269.857355][ T9457] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.984: iget: bad i_size value: 360287970189639690
[  269.895625][ T8917] 8021q: adding VLAN 0 to HW filter on device team0
[  270.068616][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.082424][ T5849] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  270.197393][ T9475] loop2: detected capacity change from 0 to 4096
[  270.239345][ T3473] bridge0: port 1(bridge_slave_0) entered blocking state
[  270.242146][ T5849] usb 9-1: Using ep0 maxpacket: 16
[  270.246531][ T3473] bridge0: port 1(bridge_slave_0) entered forwarding state
[  270.276025][ T5849] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  270.307772][ T5849] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  270.327974][ T5849] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  270.378946][ T9191] bridge0: port 2(bridge_slave_1) entered blocking state
[  270.386168][ T9191] bridge0: port 2(bridge_slave_1) entered forwarding state
[  270.422568][ T5849] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  270.478294][ T5849] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  270.613408][ T5849] usb 9-1: config 0 descriptor??
[  270.834654][ T8917] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  270.896625][ T8917] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  271.010543][ T9035] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  271.057516][ T5849] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0
[  271.116491][ T9035] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  271.129936][ T5849] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.000F/input/input11
[  271.222573][ T9035] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  271.302265][ T9035] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  271.333961][ T5849] microsoft 0003:045E:07DA.000F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0
[  271.432484][ T5849] usb 9-1: USB disconnect, device number 5
[  271.681400][ T9497] fido_id[9497]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory
[  271.910715][ T9035] 8021q: adding VLAN 0 to HW filter on device bond0
[  271.951196][ T9508] loop4: detected capacity change from 0 to 1024
[  272.050166][ T9035] 8021q: adding VLAN 0 to HW filter on device team0
[  272.128887][ T9191] bridge0: port 1(bridge_slave_0) entered blocking state
[  272.136114][ T9191] bridge0: port 1(bridge_slave_0) entered forwarding state
[  272.190499][ T9508] hfsplus: xattr search failed
[  272.250996][ T9191] bridge0: port 2(bridge_slave_1) entered blocking state
[  272.258204][ T9191] bridge0: port 2(bridge_slave_1) entered forwarding state
[  272.448373][ T8917] 8021q: adding VLAN 0 to HW filter on device batadv0
[  272.512297][ T5897] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  272.712780][ T5897] usb 9-1: Using ep0 maxpacket: 16
[  272.783217][ T5897] usb 9-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[  272.818522][ T5897] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  272.882399][ T5897] usb 9-1: Product: syz
[  272.886611][ T5897] usb 9-1: Manufacturer: syz
[  272.891213][ T5897] usb 9-1: SerialNumber: syz
[  272.986569][ T5897] usb 9-1: config 0 descriptor??
[  273.032407][ T5897] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected
[  273.074541][ T5897] usb 9-1: Detected FT232H
[  273.240870][ T5897] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  273.560599][ T9035] 8021q: adding VLAN 0 to HW filter on device batadv0
[  273.716384][ T5897] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  273.768652][ T9035] veth0_vlan: entered promiscuous mode
[  273.800930][ T9035] veth1_vlan: entered promiscuous mode
[  273.918734][ T5897] usb 9-1: USB disconnect, device number 6
[  273.983205][ T5897] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  274.014480][ T5897] ftdi_sio 9-1:0.0: device disconnected
[  274.017824][ T9035] veth0_macvtap: entered promiscuous mode
[  274.074904][ T8917] veth0_vlan: entered promiscuous mode
[  274.105386][ T9035] veth1_macvtap: entered promiscuous mode
[  274.179679][ T8917] veth1_vlan: entered promiscuous mode
[  274.220234][ T9035] batman_adv: batadv0: Interface activated: batadv_slave_0
[  274.259577][ T9035] batman_adv: batadv0: Interface activated: batadv_slave_1
[  274.308364][ T9035] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  274.352160][ T9035] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  274.360901][ T9035] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  274.412234][ T9035] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  274.591613][ T8917] veth0_macvtap: entered promiscuous mode
[  274.612214][ T5897] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  274.688752][ T8917] veth1_macvtap: entered promiscuous mode
[  274.798657][ T8917] batman_adv: batadv0: Interface activated: batadv_slave_0
[  274.840774][ T5897] usb 3-1: Using ep0 maxpacket: 8
[  274.875661][ T5897] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  274.891183][ T9548] loop4: detected capacity change from 0 to 32768
[  274.911511][ T5897] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  274.926402][ T8917] batman_adv: batadv0: Interface activated: batadv_slave_1
[  274.958401][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  274.988180][ T8917] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  275.006826][ T5897] usb 3-1: config 0 descriptor??
[  275.011043][ T8917] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  275.021612][   T30] audit: type=1800 audit(1748599633.667:641): pid=9548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1007" name="file1" dev="loop4" ino=4 res=0 errno=0
[  275.049427][ T8917] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  275.059383][ T8917] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  275.061232][ T5897] gspca_main: vc032x-2.14.0 probing 046d:0892
[  275.084939][   T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  275.117905][   T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  275.341907][ T3473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  275.380801][ T3473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  275.589274][ T9191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  275.652249][ T9191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  275.881776][ T9584] loop0: detected capacity change from 0 to 1024
[  275.996576][ T9584] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  276.175196][ T9582] loop4: detected capacity change from 0 to 40427
[  276.185097][ T9582] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504)
[  276.193288][ T9582] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  276.203298][ T9582] F2FS-fs (loop4): build fault injection attr: rate: 17008, type: 0x3fffff
[  276.212004][ T9582] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x1f8
[  276.220108][ T9582] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x6
[  276.235105][ T9582] F2FS-fs (loop4): invalid crc value
[  276.311528][ T5897] gspca_vc032x: reg_w err -71
[  276.318562][ T5897] vc032x 3-1:0.0: probe with driver vc032x failed with error -71
[  276.374772][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  276.412897][ T9582] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  276.419961][ T9582] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  276.421676][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  276.485661][ T5897] usb 3-1: USB disconnect, device number 10
[  276.566694][ T9582] syz.4.1016: attempt to access beyond end of device
[  276.566694][ T9582] loop4: rw=2049, sector=53248, nr_sectors = 136 limit=40427
[  276.711475][ T5838] syz-executor: attempt to access beyond end of device
[  276.711475][ T5838] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  276.758474][ T5838] CPU: 0 UID: 0 PID: 5838 Comm: syz-executor Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(full) 
[  276.758508][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  276.758524][ T5838] Call Trace:
[  276.758534][ T5838]  <TASK>
[  276.758544][ T5838]  dump_stack_lvl+0x189/0x250
[  276.758593][ T5838]  ? __pfx_dump_stack_lvl+0x10/0x10
[  276.758632][ T5838]  ? __pfx_queue_work_on+0x10/0x10
[  276.758665][ T5838]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  276.758691][ T5838]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  276.758731][ T5838]  f2fs_handle_critical_error+0x37c/0x540
[  276.758778][ T5838]  f2fs_write_end_io+0x597/0x7b0
[  276.758803][ T5838]  ? __submit_merged_bio+0x221/0x6a0
[  276.758856][ T5838]  __submit_merged_bio+0x27a/0x6a0
[  276.758899][ T5838]  __submit_merged_write_cond+0x255/0x530
[  276.758943][ T5838]  f2fs_write_data_pages+0x2854/0x31f0
[  276.759023][ T5838]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  276.759080][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  276.759109][ T5838]  ? __mod_memcg_lruvec_state+0x2ae/0x480
[  276.759180][ T5838]  ? __mod_zone_page_state+0xd7/0x140
[  276.759223][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  276.759257][ T5838]  ? folios_put_refs+0x560/0x640
[  276.759295][ T5838]  ? __pfx_folios_put_refs+0x10/0x10
[  276.759319][ T5838]  ? rcu_is_watching+0x15/0xb0
[  276.759362][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  276.759390][ T5838]  ? __lock_acquire+0xab9/0xd20
[  276.759437][ T5838]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  276.759479][ T5838]  do_writepages+0x32e/0x550
[  276.759519][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  276.759552][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  276.759581][ T5838]  ? do_raw_spin_unlock+0x122/0x240
[  276.759625][ T5838]  filemap_fdatawrite+0x191/0x230
[  276.759660][ T5838]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  276.759743][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  276.759777][ T5838]  ? do_raw_spin_unlock+0x122/0x240
[  276.759821][ T5838]  f2fs_sync_dirty_inodes+0x31f/0x830
[  276.759863][ T5838]  f2fs_write_checkpoint+0x94a/0x1de0
[  276.759917][ T5838]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  276.759997][ T5838]  ? kill_f2fs_super+0x298/0x6c0
[  276.760030][ T5838]  kill_f2fs_super+0x2c3/0x6c0
[  276.760062][ T5838]  ? __pfx_kill_f2fs_super+0x10/0x10
[  276.760085][ T5838]  ? radix_tree_delete_item+0x2b6/0x400
[  276.760119][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  276.760148][ T5838]  ? shrinker_free+0x2ce/0x3e0
[  276.760177][ T5838]  deactivate_locked_super+0xbc/0x130
[  276.760205][ T5838]  cleanup_mnt+0x425/0x4c0
[  276.760228][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  276.760260][ T5838]  ? lockdep_hardirqs_on+0x9c/0x150
[  276.760292][ T5838]  task_work_run+0x1d4/0x260
[  276.760322][ T5838]  ? __pfx_task_work_run+0x10/0x10
[  276.760343][ T5838]  ? __x64_sys_umount+0x122/0x160
[  276.760381][ T5838]  ? exit_to_user_mode_loop+0x40/0x110
[  276.760414][ T5838]  exit_to_user_mode_loop+0xec/0x110
[  276.760443][ T5838]  do_syscall_64+0x2bd/0x3b0
[  276.760471][ T5838]  ? lockdep_hardirqs_on+0x9c/0x150
[  276.760498][ T5838]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.760520][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  276.760548][ T5838]  ? exc_page_fault+0x9f/0xf0
[  276.760578][ T5838]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.760601][ T5838] RIP: 0033:0x7f85d9b8fc97
[  276.760623][ T5838] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  276.760644][ T5838] RSP: 002b:00007ffd8189e278 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  276.760669][ T5838] RAX: 0000000000000000 RBX: 00007f85d9c1089d RCX: 00007f85d9b8fc97
[  276.760686][ T5838] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd8189e330
[  276.760702][ T5838] RBP: 00007ffd8189e330 R08: 0000000000000000 R09: 0000000000000000
[  276.760719][ T5838] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd8189f3c0
[  276.760736][ T5838] R13: 00007f85d9c1089d R14: 0000000000043864 R15: 00007ffd8189f400
[  276.760775][ T5838]  </TASK>
[  276.760784][ T5838] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  277.256130][ T9608] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1025'.
[  277.268275][ T9608] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1025'.
[  277.312752][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.490549][ T5849] usb 10-1: new full-speed USB device number 2 using dummy_hcd
[  277.723836][ T5849] usb 10-1: config 0 has an invalid interface number: 237 but max is 0
[  277.756827][ T5849] usb 10-1: config 0 has no interface number 0
[  277.806140][ T5849] usb 10-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10
[  277.892089][ T5849] usb 10-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  277.942114][ T5849] usb 10-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10
[  277.992400][ T5849] usb 10-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  278.057999][ T5849] usb 10-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6
[  278.069412][ T9625] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  278.098816][ T5849] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  278.113263][ T9632] loop0: detected capacity change from 0 to 128
[  278.154816][ T5849] usb 10-1: Product: syz
[  278.159087][ T5849] usb 10-1: Manufacturer: syz
[  278.202564][ T5849] usb 10-1: SerialNumber: syz
[  278.248707][ T5849] usb 10-1: config 0 descriptor??
[  278.362681][ T5849] xpad 10-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  278.420810][ T5849] input: Generic X-Box pad as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.237/input/input12
[  278.535133][ T5849] usb 10-1: USB disconnect, device number 2
[  278.588560][ T5849] xpad 10-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  278.972438][ T5815] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  279.245929][ T5815] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  279.265325][ T5815] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  279.285321][ T5815] usb 1-1: config 0 interface 0 has no altsetting 0
[  279.313477][ T5815] usb 1-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00
[  279.336818][ T9667] loop9: detected capacity change from 0 to 256
[  279.360499][ T5815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.388792][ T9667] exFAT-fs (loop9): failed to load upcase table (idx : 0x000104d0, chksum : 0xc0d18ace, utbl_chksum : 0xe619d30d)
[  279.425399][ T5815] usb 1-1: config 0 descriptor??
[  279.666707][ T9672] vlan2: entered allmulticast mode
[  279.731786][ T9672] bridge0: entered allmulticast mode
[  279.783966][ T9672] bridge0: port 3(vlan2) entered blocking state
[  279.790479][ T9672] bridge0: port 3(vlan2) entered disabled state
[  279.915850][ T5815] logitech-djreceiver 0003:046D:C534.0010: unknown main item tag 0x0
[  279.956712][ T5815] logitech-djreceiver 0003:046D:C534.0010: unknown main item tag 0x0
[  280.008736][ T5815] logitech-djreceiver 0003:046D:C534.0010: unknown main item tag 0x0
[  280.038834][ T5815] logitech-djreceiver 0003:046D:C534.0010: unknown main item tag 0x0
[  280.145835][  T974] usb 1-1: USB disconnect, device number 12
[  280.269829][ T9682] loop3: detected capacity change from 0 to 4096
[  280.452352][ T9692] loop9: detected capacity change from 0 to 2048
[  280.470864][ T9694] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  280.538223][   T30] audit: type=1800 audit(1748599639.177:642): pid=9682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1045" name="file1" dev="loop3" ino=15 res=0 errno=0
[  280.631596][ T9692] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  280.712169][  T974] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  280.723696][ T9692] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  280.812303][ T9692] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  280.889919][ T9703] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  280.919113][  T974] usb 5-1: Using ep0 maxpacket: 32
[  280.955533][ T9692] EXT4-fs (loop9): This should not happen!! Data will be lost
[  280.955533][ T9692] 
[  280.957100][  T974] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  281.024642][  T974] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  281.040002][  T974] usb 5-1: New USB device strings: Mfr=1, Product=8, SerialNumber=0
[  281.059567][  T974] usb 5-1: Product: syz
[  281.066713][ T9703] EXT4-fs (loop9): This should not happen!! Data will be lost
[  281.066713][ T9703] 
[  281.067185][  T974] usb 5-1: Manufacturer: syz
[  281.092115][ T9692] EXT4-fs (loop9): Total free blocks count 0
[  281.098129][ T9692] EXT4-fs (loop9): Free/Dirty block details
[  281.126126][  T974] usb 5-1: config 0 descriptor??
[  281.133557][ T9691] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  281.146774][ T9703] EXT4-fs (loop9): Total free blocks count 0
[  281.151135][ T9692] EXT4-fs (loop9): free_blocks=4096
[  281.246198][ T9692] EXT4-fs (loop9): dirty_blocks=64
[  281.504676][ T5849] usb 5-1: USB disconnect, device number 9
[  281.874318][    C1] vcan0: j1939_tp_rxtimer: 0xffff888031a27800: rx timeout, send abort
[  281.884240][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888031a27800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[  282.193309][ T9727] loop8: detected capacity change from 0 to 4096
[  282.270755][ T9727] NILFS (loop8): invalid segment: Checksum error in segment payload
[  282.325944][ T9727] NILFS (loop8): trying rollback from an earlier position
[  282.365186][ T9737] loop2: detected capacity change from 0 to 1024
[  282.421638][ T9737] EXT4-fs: Ignoring removed nomblk_io_submit option
[  282.479067][ T9727] NILFS (loop8): recovery complete
[  282.520267][ T9737] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  282.567500][ T9746] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  282.964238][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  283.284731][ T9717] loop3: detected capacity change from 0 to 40427
[  283.328494][ T9717] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x3fffff
[  283.389737][ T9717] F2FS-fs (loop3): Image doesn't support compression
[  283.459798][ T9717] F2FS-fs (loop3): Image doesn't support compression
[  283.508886][ T9717] F2FS-fs (loop3): invalid crc value
[  283.942691][ T9717] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  284.602235][ T9787] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1078'.
[  284.616300][ T9785] loop9: detected capacity change from 0 to 4096
[  284.742762][ T9785] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  284.931124][ T9753] loop8: detected capacity change from 0 to 32768
[  285.131551][ T9753] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  285.157313][ T9795] loop2: detected capacity change from 0 to 4096
[  285.176796][ T9795] ntfs3(loop2): It is recommened to use chkdsk.
[  285.214136][ T9795] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00
[  285.281441][ T9815] loop0: detected capacity change from 0 to 128
[  285.296930][ T9795] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00
[  285.343608][ T9795] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00
[  285.373079][ T9795] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00
[  285.432423][ T9795] ntfs3(loop2): try to read out of volume at offset 0x3fffffc1c00
[  285.465628][ T9795] ntfs3(loop2): try to read out of volume at offset 0x3fffffc2c00
[  285.489860][ T9795] ntfs3(loop2): try to read out of volume at offset 0x3fffffc4c00
[  285.491500][ T9815] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  285.511691][ T5849] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  285.547343][ T9795] ntfs3(loop2): try to read out of volume at offset 0x3fffffc8c00
[  285.562299][ T9815] ext4 filesystem being mounted at /213/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  285.579406][ T9795] ntfs3(loop2): try to read out of volume at offset 0x3fffffd0c00
[  285.587652][ T8917] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.711707][ T9753] XFS (loop8): Ending clean mount
[  285.745452][ T5849] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  285.799871][ T5849] usb 5-1: config 1 has no interface number 0
[  285.878453][ T5849] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  285.891528][ T5833] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  285.943095][ T5849] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  285.990180][ T5849] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  286.078004][ T5849] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 59391, setting to 1024
[  286.137355][ T9821] loop9: detected capacity change from 0 to 64
[  286.170914][ T5849] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  286.190765][ T5849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.211662][ T9821] hfs: Unknown parameter '0xffffffffffffffffÿÿÿÿÿÿÿÿÿÈzxPÆEØíÀM`k00•´"0xffffffffffffffff01777777777777777777777'
[  286.255462][ T5849] usb 5-1: Product: syz
[  286.280631][ T5849] usb 5-1: Manufacturer: syz
[  286.305943][ T5849] usb 5-1: SerialNumber: syz
[  286.370278][ T7535] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  286.566292][ T9814] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  287.214836][ T9814] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  287.227409][ T5849] cdc_ncm 5-1:1.1: bind() failure
[  287.484731][ T5849] usb 5-1: USB disconnect, device number 10
[  288.014570][ T9866] loop3: detected capacity change from 0 to 256
[  288.248397][ T9836] loop9: detected capacity change from 0 to 32768
[  288.279774][ T9866] FAT-fs (loop3): Directory bread(block 64) failed
[  288.331346][ T9866] FAT-fs (loop3): Directory bread(block 65) failed
[  288.409770][ T9836] ocfs2: Mounting device (7,9) on (node local, slot 0) with writeback data mode.
[  288.411369][ T9866] FAT-fs (loop3): Directory bread(block 66) failed
[  288.433522][ T9866] FAT-fs (loop3): Directory bread(block 67) failed
[  288.440233][ T9866] FAT-fs (loop3): Directory bread(block 68) failed
[  288.449196][ T9866] FAT-fs (loop3): Directory bread(block 69) failed
[  288.456000][ T9866] FAT-fs (loop3): Directory bread(block 70) failed
[  288.463251][ T9866] FAT-fs (loop3): Directory bread(block 71) failed
[  288.469937][ T9866] FAT-fs (loop3): Directory bread(block 72) failed
[  288.508450][  T974] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  288.532415][ T9866] FAT-fs (loop3): Directory bread(block 73) failed
[  288.717486][  T974] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  288.763099][  T974] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  288.821956][  T974] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  288.882247][  T974] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  288.971958][ T1151] kworker/u8:6: attempt to access beyond end of device
[  288.971958][ T1151] loop3: rw=1, sector=1224, nr_sectors = 12 limit=256
[  288.983116][  T974] usb 9-1: config 0 descriptor??
[  289.046981][ T8917] ocfs2: Unmounting device (7,9) on (node local)
[  289.131192][ T9891] loop2: detected capacity change from 0 to 4096
[  289.244340][ T9891] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  289.455480][  T974] pyra 0003:1E7D:2CF6.0011: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.8-1/input0
[  289.769406][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.817114][ T9900] loop4: detected capacity change from 0 to 4096
[  290.010796][ T9900] ntfs3(loop4): ino=1a, mi_enum_attr
[  290.045100][ T9900] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  290.225425][  T974] pyra 0003:1E7D:2CF6.0011: couldn't init struct pyra_device
[  290.247393][  T974] pyra 0003:1E7D:2CF6.0011: couldn't install mouse
[  290.294853][  T974] pyra 0003:1E7D:2CF6.0011: probe with driver pyra failed with error -71
[  290.351152][  T974] usb 9-1: USB disconnect, device number 7
[  290.402154][ T5897] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  290.572208][ T5897] usb 4-1: Using ep0 maxpacket: 32
[  290.581373][ T5897] usb 4-1: unable to get BOS descriptor or descriptor too short
[  290.604851][ T5897] usb 4-1: config 1 has an invalid interface descriptor of length 2, skipping
[  290.625197][ T5897] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 189, changing to 7
[  290.668002][ T5897] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  290.708039][ T5897] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  290.734517][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  290.769071][ T5897] usb 4-1: Product: syz
[  290.789291][ T5897] usb 4-1: Manufacturer: syz
[  290.809515][ T5897] usb 4-1: SerialNumber: syz
[  291.066430][ T9915] loop3: detected capacity change from 0 to 256
[  291.104239][ T9915] msdos: Unknown parameter ''
[  291.166873][ T5897] usb 4-1: 2:1: invalid format type 0x6b70 is detected, processed as PCM
[  291.205831][ T5897] usb 4-1: 2:1 : sample bitwidth 222 in over sample bytes 4
[  291.238132][ T5897] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  291.269971][ T9943] input: syz0 as /devices/virtual/input/input13
[  291.401851][ T5897] usb 4-1: USB disconnect, device number 2
[  291.658988][ T8903] udevd[8903]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  292.061196][ T9926] loop4: detected capacity change from 0 to 32768
[  292.118809][ T9926] XFS: noikeep mount option is deprecated.
[  292.199461][ T9926] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  292.387822][ T9972] loop0: detected capacity change from 0 to 512
[  292.501799][ T9926] XFS (loop4): Ending clean mount
[  292.504656][ T9972] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  292.553950][ T9984] loop9: detected capacity change from 0 to 4096
[  292.567780][ T9926] XFS (loop4): Quotacheck needed: Please wait.
[  292.592488][ T9972] ext4 filesystem being mounted at /223/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  292.636583][ T9984] ntfs3(loop9): Different NTFS sector size (2048) and media sector size (512).
[  292.715335][ T9926] XFS (loop4): Quotacheck: Done.
[  292.747533][ T9972] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #2: block 18: comm syz.0.1131: lblock 23 mapped to illegal pblock 18 (length 1)
[  292.896274][ T9996] XFS (loop4): User initiated shutdown received.
[  292.928080][ T9996] XFS (loop4): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:472).  Shutting down filesystem.
[  293.004981][ T9996] XFS (loop4): Please unmount the filesystem and rectify the problem(s)
[  293.049304][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.144613][  T974] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  293.227811][ T5838] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  293.362562][  T974] usb 3-1: Using ep0 maxpacket: 8
[  293.394365][  T974] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  293.458321][ T5197] udevd[5197]: worker [8903] terminated by signal 33 (Unknown signal 33)
[  293.532584][  T971] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  293.555637][T10013] fuse: Bad value for 'fd'
[  293.586285][ T5197] udevd[5197]: worker [8903] failed while handling '/devices/virtual/block/loop9'
[  293.596289][  T974] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  293.655854][  T974] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  293.736823][  T974] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  293.786917][  T971] usb 4-1: config 0 has an invalid interface number: 230 but max is 0
[  293.798572][  T974] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  293.832098][  T971] usb 4-1: config 0 has no interface number 0
[  293.838223][  T971] usb 4-1: config 0 interface 230 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  293.872409][  T974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.911680][  T971] usb 4-1: config 0 interface 230 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  293.973550][  T971] usb 4-1: config 0 interface 230 has no altsetting 0
[  293.993840][  T971] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05
[  294.021896][  T971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  294.031068][T10017] vcan0: entered allmulticast mode
[  294.037179][  T971] usb 4-1: Product: syz
[  294.053764][T10017] vcan0: left allmulticast mode
[  294.074189][  T971] usb 4-1: Manufacturer: syz
[  294.092322][  T971] usb 4-1: SerialNumber: syz
[  294.122594][  T971] usb 4-1: config 0 descriptor??
[  294.129083][T10001] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  294.142902][T10001] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  294.154502][  T974] usb 3-1: GET_CAPABILITIES returned 0
[  294.170277][  T974] usbtmc 3-1:16.0: can't read capabilities
[  294.198120][  T971] ums-usbat 4-1:0.230: USB Mass Storage device detected
[  294.262289][  T971] ums-usbat 4-1:0.230: Quirks match for vid 0781 pid 0005: 1
[  294.365519][ T5815] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  294.414314][    C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  294.446537][ T9992] usbtmc 3-1:16.0: Unable to send data, error -71
[  294.474469][  T974] usb 3-1: USB disconnect, device number 11
[  294.524605][ T5815] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  294.562470][ T5815] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  294.597424][T10033] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  294.598812][ T5815] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  294.644428][ T5815] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  294.689394][ T5815] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  294.754075][ T5815] usb 10-1: config 0 descriptor??
[  295.137799][ T5849] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  295.176156][ T5815] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving
[  295.200123][T10051] input: syz0 as /devices/virtual/input/input15
[  295.225303][ T5815] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0
[  295.322117][ T5849] usb 1-1: Using ep0 maxpacket: 16
[  295.565823][    T9] usb 10-1: USB disconnect, device number 3
[  295.967970][T10062] loop8: detected capacity change from 0 to 2048
[  296.006565][T10062] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024)
[  296.069533][T10065] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  296.292854][ T5849] usb 1-1: descriptor type invalid, skip
[  296.298546][ T5849] usb 1-1: descriptor type invalid, skip
[  296.304877][ T5849] usb 1-1: descriptor type invalid, skip
[  296.314786][ T5849] usb 1-1: config 0 has too many interfaces: 88, using maximum allowed: 32
[  296.323582][ T5849] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 88
[  296.335145][ T5849] usb 1-1: New USB device found, idVendor=056a, idProduct=0035, bcdDevice= 0.40
[  296.400199][T10065] NILFS (loop8): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  296.446413][T10065] NILFS error (device loop8): nilfs_bmap_propagate: broken bmap (inode number=4)
[  296.549308][T10065] Remounting filesystem read-only
[  296.620301][  T971] ums-usbat 4-1:0.230: probe with driver ums-usbat failed with error -5
[  296.636869][ T7535] NILFS (loop8): disposed unprocessed dirty file(s) when stopping log writer
[  296.730152][  T971] usb 4-1: USB disconnect, device number 3
[  297.294569][ T5849] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  297.302663][ T5849] usb 1-1: Product: syz
[  297.306835][ T5849] usb 1-1: Manufacturer: syz
[  297.311567][ T5849] usb 1-1: SerialNumber: syz
[  297.335657][ T5849] usb 1-1: config 0 descriptor??
[  297.608016][T10056] loop4: detected capacity change from 0 to 262144
[  297.622371][  T974] usb 1-1: USB disconnect, device number 13
[  297.639582][T10056] F2FS-fs (loop4): invalid crc value
[  297.785095][T10056] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  298.133288][T10092] vivid-003: disconnect
[  298.425637][T10087] vivid-003: reconnect
[  299.110679][T10115] loop9: detected capacity change from 0 to 47
[  299.604011][   T30] audit: type=1326 audit(1748599658.247:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10123 comm="syz.9.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815498e969 code=0x7ffc0000
[  299.731093][   T30] audit: type=1326 audit(1748599658.247:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10123 comm="syz.9.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815498e969 code=0x7ffc0000
[  299.774267][T10129] netlink: 80 bytes leftover after parsing attributes in process `syz.8.1187'.
[  299.863942][   T30] audit: type=1326 audit(1748599658.277:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10123 comm="syz.9.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f815498e969 code=0x7ffc0000
[  300.011213][   T30] audit: type=1326 audit(1748599658.277:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10123 comm="syz.9.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815498e969 code=0x7ffc0000
[  300.062480][ T5944] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  300.073983][T10102] loop2: detected capacity change from 0 to 40427
[  300.127440][T10102] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x7
[  300.142355][   T30] audit: type=1326 audit(1748599658.277:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10123 comm="syz.9.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815498e969 code=0x7ffc0000
[  300.468653][T10131] loop8: detected capacity change from 0 to 32768
[  300.482171][   T30] audit: type=1326 audit(1748599658.277:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10123 comm="syz.9.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f815498e969 code=0x7ffc0000
[  300.504615][   T30] audit: type=1326 audit(1748599658.277:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10123 comm="syz.9.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f815492ab39 code=0x7ffc0000
[  300.527085][   T30] audit: type=1326 audit(1748599658.277:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10123 comm="syz.9.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f815492ab39 code=0x7ffc0000
[  300.552818][   T30] audit: type=1326 audit(1748599658.277:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10123 comm="syz.9.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f815492ab39 code=0x7ffc0000
[  300.552907][T10102] F2FS-fs (loop2): invalid crc value
[  300.594520][T10131] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  300.602717][T10131] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  300.627301][T10131] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[  300.650278][   T30] audit: type=1326 audit(1748599658.277:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10123 comm="syz.9.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f815492ab39 code=0x7ffc0000
[  300.676411][  T971] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  300.684667][  T971] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  300.708650][ T5944] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  300.737873][ T5944] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  300.749176][ T5944] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  300.761693][ T5944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.866239][T10128] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  300.934757][ T5944] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  301.160007][ T5944] usb 4-1: USB disconnect, device number 4
[  301.205799][T10102] F2FS-fs (loop2): Start checkpoint disabled!
[  301.245155][ T5966] udevd[5966]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  301.266710][T10102] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  301.422426][  T971] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 737ms
[  301.471870][  T971] gfs2: fsid=syz:syz.0: jid=0: Done
[  301.509996][T10131] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  301.724651][T10131] gfs2: fsid=syz:syz.0: found 1 quota changes
[  301.797502][T10140] loop9: detected capacity change from 0 to 1024
[  301.870532][T10140] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  301.936757][T10119] loop0: detected capacity change from 0 to 40427
[  302.019517][T10119] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x3fffff
[  302.051568][T10142] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  302.099798][T10119] F2FS-fs (loop0): invalid crc value
[  302.495474][T10149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1194'.
[  302.542917][T10149] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[  302.602276][T10149] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (133)
[  303.588722][T10170] loop3: detected capacity change from 0 to 512
[  303.785419][T10170] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  303.837123][T10179] loop8: detected capacity change from 0 to 512
[  303.882439][T10170] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  303.913320][T10179] EXT4-fs: quotafile must be on filesystem root
[  304.012848][T10170] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.1202: corrupted inode contents
[  304.085394][T10170] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.1202: mark_inode_dirty error
[  304.180709][T10170] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.1202: corrupted inode contents
[  304.319059][T10170] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.1202: mark_inode_dirty error
[  304.675229][ T9035] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  305.103601][   T36] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.305021][   T36] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.483386][T10207] loop3: detected capacity change from 0 to 256
[  305.532498][T10207] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  305.587840][T10207] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  305.629939][T10207] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x226242d1, utbl_chksum : 0xe619d30d)
[  305.655954][T10210] loop4: detected capacity change from 0 to 4096
[  305.698433][   T36] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.787387][T10216] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  305.864613][T10217] loop8: detected capacity change from 0 to 1024
[  305.907346][T10217] EXT4-fs: Ignoring removed oldalloc option
[  305.944911][T10217] EXT4-fs: Ignoring removed orlov option
[  305.979941][T10217] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  306.084216][T10217] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  306.147364][   T36] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.251884][T10217] EXT4-fs: Ignoring removed orlov option
[  306.322647][T10217] EXT4-fs (loop8): can't enable nombcache during remount
[  306.555902][ T7535] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  306.730696][ T5857] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  306.741375][ T5857] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  306.751173][ T5857] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  306.762587][ T5857] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  306.791925][ T5857] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  306.948257][   T36] bridge_slave_1: left allmulticast mode
[  306.986589][   T36] bridge_slave_1: left promiscuous mode
[  307.010229][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  307.066238][   T36] bridge_slave_0: left allmulticast mode
[  307.071925][   T36] bridge_slave_0: left promiscuous mode
[  307.119832][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  307.334376][T10208] loop0: detected capacity change from 0 to 40427
[  307.364497][T10208] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x3fffff
[  307.432727][T10208] F2FS-fs (loop0): invalid crc value
[  307.851605][T10260] netlink: 'syz.3.1234': attribute type 27 has an invalid length.
[  307.864675][T10208] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  307.912933][    T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  307.957836][T10208] F2FS-fs (loop0): inject slab alloc in f2fs_alloc_inode of alloc_inode+0x6a/0x1b0
[  308.024484][ T5833] syz-executor: attempt to access beyond end of device
[  308.024484][ T5833] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  308.054617][ T5833] CPU: 0 UID: 0 PID: 5833 Comm: syz-executor Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(full) 
[  308.054650][ T5833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  308.054664][ T5833] Call Trace:
[  308.054674][ T5833]  <TASK>
[  308.054684][ T5833]  dump_stack_lvl+0x189/0x250
[  308.054733][ T5833]  ? __pfx_dump_stack_lvl+0x10/0x10
[  308.054773][ T5833]  ? __pfx_queue_work_on+0x10/0x10
[  308.054805][ T5833]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  308.054837][ T5833]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  308.054876][ T5833]  f2fs_handle_critical_error+0x37c/0x540
[  308.054922][ T5833]  f2fs_write_end_io+0x597/0x7b0
[  308.054947][ T5833]  ? __submit_merged_bio+0x221/0x6a0
[  308.054999][ T5833]  __submit_merged_bio+0x27a/0x6a0
[  308.055043][ T5833]  __submit_merged_write_cond+0x255/0x530
[  308.055092][ T5833]  f2fs_write_data_pages+0x2854/0x31f0
[  308.055131][ T5833]  ? __lock_acquire+0xab9/0xd20
[  308.055198][ T5833]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  308.055254][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  308.055283][ T5833]  ? __mod_memcg_lruvec_state+0x2ae/0x480
[  308.055353][ T5833]  ? __mod_zone_page_state+0xd7/0x140
[  308.055394][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  308.055423][ T5833]  ? folios_put_refs+0x560/0x640
[  308.055463][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  308.055491][ T5833]  ? __lock_acquire+0xab9/0xd20
[  308.055527][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  308.055555][ T5833]  ? do_raw_spin_lock+0x121/0x290
[  308.055598][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  308.055631][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  308.055659][ T5833]  ? do_raw_spin_unlock+0x122/0x240
[  308.055697][ T5833]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  308.055739][ T5833]  do_writepages+0x32e/0x550
[  308.055778][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  308.055811][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  308.055839][ T5833]  ? do_raw_spin_unlock+0x122/0x240
[  308.055882][ T5833]  filemap_fdatawrite+0x191/0x230
[  308.055919][ T5833]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  308.056001][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  308.056035][ T5833]  ? do_raw_spin_unlock+0x122/0x240
[  308.056087][ T5833]  f2fs_sync_dirty_inodes+0x31f/0x830
[  308.056131][ T5833]  f2fs_write_checkpoint+0x94a/0x1de0
[  308.056184][ T5833]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  308.056258][ T5833]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  308.056283][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  308.056311][ T5833]  ? kfree+0x18e/0x440
[  308.056343][ T5833]  ? kill_f2fs_super+0x298/0x6c0
[  308.056375][ T5833]  kill_f2fs_super+0x2c3/0x6c0
[  308.056408][ T5833]  ? __pfx_kill_f2fs_super+0x10/0x10
[  308.056431][ T5833]  ? radix_tree_delete_item+0x2b6/0x400
[  308.056465][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  308.056493][ T5833]  ? shrinker_free+0x2ce/0x3e0
[  308.056522][ T5833]  deactivate_locked_super+0xbc/0x130
[  308.056550][ T5833]  cleanup_mnt+0x425/0x4c0
[  308.056573][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  308.056601][ T5833]  ? lockdep_hardirqs_on+0x9c/0x150
[  308.056632][ T5833]  task_work_run+0x1d4/0x260
[  308.056661][ T5833]  ? __pfx_task_work_run+0x10/0x10
[  308.056683][ T5833]  ? __x64_sys_umount+0x122/0x160
[  308.056720][ T5833]  ? exit_to_user_mode_loop+0x40/0x110
[  308.056754][ T5833]  exit_to_user_mode_loop+0xec/0x110
[  308.056783][ T5833]  do_syscall_64+0x2bd/0x3b0
[  308.056812][ T5833]  ? lockdep_hardirqs_on+0x9c/0x150
[  308.056838][ T5833]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.056861][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  308.056890][ T5833]  ? exc_page_fault+0x9f/0xf0
[  308.056918][ T5833]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.056942][ T5833] RIP: 0033:0x7febf1b8fc97
[  308.056963][ T5833] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  308.056985][ T5833] RSP: 002b:00007ffedd3797e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  308.057011][ T5833] RAX: 0000000000000000 RBX: 00007febf1c1089d RCX: 00007febf1b8fc97
[  308.057028][ T5833] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffedd3798a0
[  308.057045][ T5833] RBP: 00007ffedd3798a0 R08: 0000000000000000 R09: 0000000000000000
[  308.057065][ T5833] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffedd37a930
[  308.057082][ T5833] R13: 00007febf1c1089d R14: 000000000004b2f7 R15: 00007ffedd37a970
[  308.057120][ T5833]  </TASK>
[  308.057235][ T5833] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  308.313855][T10252] loop2: detected capacity change from 0 to 32768
[  308.318080][    T9] usb 5-1: Using ep0 maxpacket: 16
[  308.546439][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  308.560242][    T9] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00
[  308.579700][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.591020][    T9] usb 5-1: config 0 descriptor??
[  308.608289][T10252] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  308.795241][T10252] XFS (loop2): Ending clean mount
[  308.826542][T10252] XFS (loop2): Quotacheck needed: Please wait.
[  308.869414][ T5847] Bluetooth: hci5: command tx timeout
[  309.011171][T10252] XFS (loop2): Quotacheck: Done.
[  309.057859][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  309.086667][    T9] kye 0003:0458:5016.0013: control desc unexpectedly large
[  309.089774][   T30] kauditd_printk_skb: 275 callbacks suppressed
[  309.089792][   T30] audit: type=1800 audit(1748599667.727:928): pid=10252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1243" name="bus" dev="loop2" ino=9291 res=0 errno=0
[  309.105159][    T9] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.0013/input/input16
[  309.193120][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  309.210051][   T30] audit: type=1800 audit(1748599667.777:929): pid=10252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1243" name="bus" dev="loop2" ino=9291 res=0 errno=0
[  309.223110][    T9] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.0013/input/input17
[  309.267441][ T5836] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  309.288389][   T36] bond0 (unregistering): Released all slaves
[  309.394924][    T9] kye 0003:0458:5016.0013: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.4-1/input0
[  309.436580][    T9] usb 5-1: USB disconnect, device number 11
[  309.486874][T10271] loop0: detected capacity change from 0 to 2048
[  309.619004][T10271] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  309.732134][T10272] fido_id[10272]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  309.936717][T10260] bridge0: port 2(bridge_slave_1) entered disabled state
[  309.944515][T10260] bridge0: port 1(bridge_slave_0) entered disabled state
[  310.023645][T10277] loop0: detected capacity change from 0 to 512
[  310.164059][T10277] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  310.209474][T10277] ext4 filesystem being mounted at /238/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  310.282552][   T30] audit: type=1800 audit(1748599668.917:930): pid=10277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1238" name="file1" dev="loop0" ino=15 res=0 errno=0
[  310.404281][T10260] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  310.415868][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  310.419915][T10260] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  310.593469][T10290] loop0: detected capacity change from 0 to 1024
[  310.668548][T10290] hfsplus: xattr search failed
[  310.726092][T10260] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  310.743041][    T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  310.749323][T10260] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  310.769718][T10260] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  310.780756][T10260] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  310.932133][    T9] usb 5-1: Using ep0 maxpacket: 32
[  310.942909][ T5847] Bluetooth: hci5: command tx timeout
[  310.961615][    T9] usb 5-1: unable to get BOS descriptor or descriptor too short
[  311.010622][    T9] usb 5-1: unable to read config index 0 descriptor/start: -71
[  311.028890][T10295] loop0: detected capacity change from 0 to 1024
[  311.052477][    T9] usb 5-1: can't read configurations, error -71
[  311.066642][T10295] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  311.381541][T10300] loop3: detected capacity change from 0 to 2048
[  311.408628][T10300] EXT4-fs: Ignoring removed mblk_io_submit option
[  311.549393][T10300] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  311.988311][   T31] INFO: task syz-executor:5834 blocked for more than 143 seconds.
[  312.004347][ T9035] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  312.024298][   T31]       Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0
[  312.042311][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  312.057114][   T31] task:syz-executor    state:D stack:21784 pid:5834  tgid:5834  ppid:1      task_flags:0x400140 flags:0x00004006
[  312.085139][   T31] Call Trace:
[  312.104228][   T31]  <TASK>
[  312.134856][   T31]  __schedule+0x16f5/0x4d00
[  312.147764][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.158271][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.184921][   T31]  ? do_raw_spin_lock+0x121/0x290
[  312.194314][   T31]  ? schedule+0x165/0x360
[  312.203359][   T31]  ? __lock_acquire+0xab9/0xd20
[  312.211987][   T31]  ? __pfx___schedule+0x10/0x10
[  312.217670][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.230893][   T31]  ? schedule+0x91/0x360
[  312.253269][   T31]  schedule+0x165/0x360
[  312.273541][   T31]  __bch2_fs_stop+0x704/0x900
[  312.291265][   T31]  ? __pfx___bch2_fs_stop+0x10/0x10
[  312.317128][   T31]  ? __pfx_autoremove_wake_function+0x10/0x10
[  312.333087][   T31]  ? __pfx_evict_inodes+0x10/0x10
[  312.344904][   T31]  ? bch2_sync_fs+0x14f/0x2e0
[  312.356348][   T31]  ? __pfx_bch2_put_super+0x10/0x10
[  312.378932][   T31]  generic_shutdown_super+0x135/0x2c0
[  312.385362][   T31]  bch2_kill_sb+0x41/0x50
[  312.390138][   T31]  deactivate_locked_super+0xbc/0x130
[  312.396248][   T31]  cleanup_mnt+0x425/0x4c0
[  312.400796][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.406804][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  312.432184][   T31]  task_work_run+0x1d4/0x260
[  312.442183][ T5849] usb 9-1: new full-speed USB device number 8 using dummy_hcd
[  312.455104][   T31]  ? __pfx_task_work_run+0x10/0x10
[  312.460244][   T31]  ? __x64_sys_umount+0x122/0x160
[  312.466101][   T31]  ? exit_to_user_mode_loop+0x40/0x110
[  312.472522][   T31]  exit_to_user_mode_loop+0xec/0x110
[  312.477841][   T31]  do_syscall_64+0x2bd/0x3b0
[  312.483552][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  312.488773][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.494936][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.500590][   T31]  ? exc_page_fault+0x9f/0xf0
[  312.505356][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.511268][   T31] RIP: 0033:0x7fea3578fc97
[  312.515807][   T31] RSP: 002b:00007ffcfd7e45c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  312.524349][   T31] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fea3578fc97
[  312.533053][   T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcfd7e4680
[  312.541037][   T31] RBP: 00007ffcfd7e4680 R08: 0000000000000000 R09: 0000000000000000
[  312.549518][   T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcfd7e5710
[  312.557621][   T31] R13: 00007fea3581089d R14: 00000000000277c5 R15: 00007ffcfd7e5750
[  312.565666][   T31]  </TASK>
[  312.572218][   T31] 
[  312.572218][   T31] Showing all locks held in the system:
[  312.591763][   T31] 1 lock held by rcu_exp_gp_kthr/18:
[  312.624720][ T5849] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64
[  312.644910][   T31]  #0: ffff8880b873b9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  312.667142][ T5849] usb 9-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00
[  312.676301][   T31] 1 lock held by khungtaskd/31:
[  312.681167][   T31]  #0: ffffffff8e13cc80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  312.691400][ T5849] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.701502][   T31] 5 locks held by kworker/u8:2/36:
[  312.708565][   T31]  #0: ffff88801b2f6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  312.720867][   T31]  #1: 
[  312.720968][ T5849] usb 9-1: config 0 descriptor??
[  312.729853][T10326] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  312.737446][   T31] ffffc90000ac7bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  312.762080][   T31]  #2: ffffffff8f4fccd0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x8a0
[  312.771559][   T31]  #3: ffffffff8f5098c8 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xdc/0x890
[  312.781949][   T31]  #4: ffffffff8e1427b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b7/0x730
[  312.793302][   T31] 2 locks held by kworker/u8:4/77:
[  312.798425][   T31]  #0: ffff88801a481148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  312.810420][   T31]  #1: ffff88802d3a0a28 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0x6e/0x1290
[  312.821003][   T31] 3 locks held by kworker/u8:5/1137:
[  312.826325][   T31]  #0: ffff88801a481148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  312.838138][ T5849] rc_core: IR keymap rc-xbox-dvd not found
[  312.838379][   T31]  #1: ffffc90003e0fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  312.848245][ T5849] Registered IR keymap rc-empty
[  312.856604][   T31]  #2: ffffffff8f5098c8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  312.869757][   T31] 2 locks held by kworker/u8:8/3473:
[  312.875192][   T31] 1 lock held by klogd/5186:
[  312.879989][   T31]  #0: ffff8880b873b9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  312.881690][ T5849] rc rc0: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0
[  312.893940][   T31] 2 locks held by getty/5587:
[  312.906668][   T31]  #0: ffff888034bb20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  312.911437][ T5849] input: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input18
[  312.925816][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  312.948376][   T31] 1 lock held by syz-executor/5834:
[  312.956140][   T31]  #0: ffff888057c5e0e0 (&type->s_umount_key#87){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0
[  312.968113][   T31] 8 locks held by kworker/1:4/5849:
[  312.978679][   T31] 1 lock held by udevd/5966:
[  312.983606][   T31]  #0: ffff8880b873b9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  312.993974][   T31] 2 locks held by syz-executor/10233:
[  312.999668][   T31]  #0: ffffffff8fa0e200 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  313.009837][ T5849] usb 9-1: USB disconnect, device number 8
[  313.015842][    C1] xbox_remote 9-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19
[  313.016545][   T31]  #1: 
[  313.030366][ T5847] Bluetooth: hci5: command tx timeout
[  313.035264][   T31] ffffffff8f5098c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[  313.050696][   T31] 
[  313.053439][   T31] =============================================
[  313.053439][   T31] 
[  313.064094][   T31] NMI backtrace for cpu 0
[  313.064114][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(full) 
[  313.064143][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  313.064159][   T31] Call Trace:
[  313.064168][   T31]  <TASK>
[  313.064178][   T31]  dump_stack_lvl+0x189/0x250
[  313.064216][   T31]  ? __wake_up_klogd+0xd9/0x110
[  313.064251][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  313.064277][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  313.064315][   T31]  ? __pfx__printk+0x10/0x10
[  313.064357][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  313.064402][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  313.064438][   T31]  ? _printk+0xcf/0x120
[  313.064469][   T31]  ? __pfx__printk+0x10/0x10
[  313.064497][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  313.064529][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  313.064571][   T31]  watchdog+0xfee/0x1030
[  313.064599][   T31]  ? watchdog+0x1de/0x1030
[  313.064634][   T31]  kthread+0x711/0x8a0
[  313.064676][   T31]  ? __pfx_watchdog+0x10/0x10
[  313.064700][   T31]  ? __pfx_kthread+0x10/0x10
[  313.064735][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  313.064767][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  313.064791][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  313.064819][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  313.064843][   T31]  ? __pfx_kthread+0x10/0x10
[  313.064883][   T31]  ret_from_fork+0x3fc/0x770
[  313.064915][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  313.064952][   T31]  ? __switch_to_asm+0x39/0x70
[  313.064976][   T31]  ? __switch_to_asm+0x33/0x70
[  313.064999][   T31]  ? __pfx_kthread+0x10/0x10
[  313.065038][   T31]  ret_from_fork_asm+0x1a/0x30
[  313.065088][   T31]  </TASK>
[  313.065123][   T31] Sending NMI from CPU 0 to CPUs 1:
[  313.245703][    C1] NMI backtrace for cpu 1
[  313.245721][    C1] CPU: 1 UID: 0 PID: 3440 Comm: kworker/u8:7 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(full) 
[  313.245748][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  313.245763][    C1] Workqueue: bat_events batadv_nc_worker
[  313.245788][    C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x8/0x90
[  313.245813][    C1] Code: 48 89 44 11 20 e9 33 ff 4f ff cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 14 25 08 d0 9b 92 65 8b 0d 28 8e db 10 81 e1 00 01 ff 00
[  313.245832][    C1] RSP: 0018:ffffc9000bb07a18 EFLAGS: 00000246
[  313.245850][    C1] RAX: ffffffff8b31c0ff RBX: 0000000000000001 RCX: ffff888030b9bc00
[  313.245870][    C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  313.245883][    C1] RBP: fffffffffffffe38 R08: 0000000000000000 R09: ffffffff8b31bfd2
[  313.245899][    C1] R10: dffffc0000000000 R11: ffffffff8b31bf00 R12: dffffc0000000000
[  313.245916][    C1] R13: ffffffff8b31bfd2 R14: ffff88807bb7cd80 R15: 00000000000003e4
[  313.245934][    C1] FS:  0000000000000000(0000) GS:ffff888125d63000(0000) knlGS:0000000000000000
[  313.245960][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  313.245975][    C1] CR2: 0000001b3140cff8 CR3: 0000000027128000 CR4: 0000000000350ef0
[  313.245992][    C1] Call Trace:
[  313.246000][    C1]  <TASK>
[  313.246009][    C1]  batadv_nc_worker+0x1ff/0x610
[  313.246033][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[  313.246063][    C1]  process_scheduled_works+0xae1/0x17b0
[  313.246115][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  313.246148][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  313.246180][    C1]  worker_thread+0x8a0/0xda0
[  313.246226][    C1]  kthread+0x711/0x8a0
[  313.246262][    C1]  ? __pfx_worker_thread+0x10/0x10
[  313.246290][    C1]  ? __pfx_kthread+0x10/0x10
[  313.246321][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  313.246349][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  313.246369][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  313.246395][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  313.246416][    C1]  ? __pfx_kthread+0x10/0x10
[  313.246451][    C1]  ret_from_fork+0x3fc/0x770
[  313.246479][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  313.246508][    C1]  ? __switch_to_asm+0x39/0x70
[  313.246531][    C1]  ? __switch_to_asm+0x33/0x70
[  313.246553][    C1]  ? __pfx_kthread+0x10/0x10
[  313.246586][    C1]  ret_from_fork_asm+0x1a/0x30
[  313.246619][    C1]  </TASK>
[  313.247231][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  313.490929][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(full) 
[  313.502388][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  313.512439][   T31] Call Trace:
[  313.515711][   T31]  <TASK>
[  313.518638][   T31]  dump_stack_lvl+0x99/0x250
[  313.523247][   T31]  ? __asan_memcpy+0x40/0x70
[  313.527845][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  313.533064][   T31]  ? __pfx__printk+0x10/0x10
[  313.537668][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  313.543313][   T31]  panic+0x2db/0x790
[  313.547250][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  313.552891][   T31]  ? __pfx_panic+0x10/0x10
[  313.557317][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  313.562958][   T31]  ? nmi_backtrace_stall_check+0x433/0x440
[  313.568778][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  313.574418][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  313.579798][   T31]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  313.585968][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  313.591610][   T31]  watchdog+0x102d/0x1030
[  313.595944][   T31]  ? watchdog+0x1de/0x1030
[  313.600367][   T31]  kthread+0x711/0x8a0
[  313.604454][   T31]  ? __pfx_watchdog+0x10/0x10
[  313.609130][   T31]  ? __pfx_kthread+0x10/0x10
[  313.613731][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  313.619375][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  313.624577][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  313.630213][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  313.635412][   T31]  ? __pfx_kthread+0x10/0x10
[  313.640016][   T31]  ret_from_fork+0x3fc/0x770
[  313.644616][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  313.649735][   T31]  ? __switch_to_asm+0x39/0x70
[  313.654501][   T31]  ? __switch_to_asm+0x33/0x70
[  313.659288][   T31]  ? __pfx_kthread+0x10/0x10
[  313.663894][   T31]  ret_from_fork_asm+0x1a/0x30
[  313.668676][   T31]  </TASK>
[  313.671986][   T31] Kernel Offset: disabled
[  313.676315][   T31] Rebooting in 86400 seconds..