last executing test programs:

7.883571191s ago: executing program 2 (id=168):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000007d9153625ca47ee000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000110500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x2000300, 0xe, 0xfffffd83, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

7.723883301s ago: executing program 2 (id=169):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000200000005"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xc)

7.514833947s ago: executing program 2 (id=173):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x600000, 0x0, 0x334e8b})

7.145637569s ago: executing program 2 (id=178):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$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")
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000880)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=\xb9\xc4\xd7A%S\n\x10i\xcf\x84\x93v\x02\xe4y}\xcbV\xbb\xc1\xd5\x06\v\xdc\xd8\\\xc5\xb3\ag\xa6u\xbe\xf4)\xae\xb6\xfe*\x9d?\xb2C\xf0<\xc9\x820M\x92Tzs\xba\xca\x9d\xad\x17\x1b\x84\xbc\xb3\xd8\xad\f\x17\xbe\x17\xb5}.H\x90\xc7\x0e\xb3y\xd0\xc3\xf0c\x04\xe6\fzZ\x02\xfd_W\x9a\xa7\x81\xfcr\xe9B\x95\x13\x9f\x10\'5\xc0\xf9\xb5\xe1\x15Y\x9b$\xa43\xe7F>\xb7\xa1\xb7zw\xac\xc8\x12\x94\xa7\xe5\xcb\xc0g\x865\\\x9e\xca\x8e\xe2\t\xb7\b\x00\x00\x00\x00\x00\x00\x00i7b\xad\x14oVT\xcb\xea\xd3\xad\xa9\x16\xd5\xb2\xa0 \x13^\xf6>\xd4\x8bZzl\x88\xddn\xab\xd6\x12\x1f\x06', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x113)
fspick(0xffffffffffffff9c, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x40042, 0x1)

6.543786076s ago: executing program 2 (id=184):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
getsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f0000000140))

5.332228508s ago: executing program 0 (id=189):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="09000000040000000c0000000b"], 0x50)
close(0x3)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
unshare(0x2c020400)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4.949204281s ago: executing program 2 (id=192):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x16, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})

4.428098495s ago: executing program 32 (id=192):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x16, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})

4.39897215s ago: executing program 0 (id=194):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x44080)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0xc010)

4.398306367s ago: executing program 4 (id=195):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000200)={[{@barrier}, {@errors_remount}, {@resgid}, {@barrier}, {@auto_da_alloc}, {@nodelalloc}]}, 0x1, 0x59c, &(0x7f0000001840)="$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")
r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$notify(r1, 0x402, 0x30)
preadv2(r0, &(0x7f0000000280)=[{&(0x7f0000004200)=""/4089, 0xff9}], 0x1, 0x2, 0x0, 0x0)

4.024376815s ago: executing program 4 (id=196):
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000d40)="d8", 0x1}], 0x1}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x2, 0x4, 0x4, 0x84a}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d00000017000000040000000100000000000000", @ANYRES32=r0], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r1, &(0x7f0000000d40), 0x0}, 0x20)

3.997235112s ago: executing program 0 (id=197):
syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
close(0x3)
syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x2202)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read$FUSE(r0, &(0x7f0000003b80)={0x2020}, 0xffffff20)

3.786250183s ago: executing program 1 (id=198):
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0)
r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xf6b1, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x16, 0x1})
io_uring_enter(r0, 0xd44, 0x44c1, 0x7, 0x0, 0x0)

3.630876631s ago: executing program 4 (id=200):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$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")
creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1)
unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f00000005c0)=""/188, 0xbc)

3.414556483s ago: executing program 3 (id=201):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4048aecb, &(0x7f0000000780)=@vmx={0x1, 0x0, 0x2080, {0x60000, 0xc000, {}, 0x1, 0x4}, {"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", "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"}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.008452913s ago: executing program 3 (id=202):
r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0xa02, 0x0)
r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0xfffffff9, 0x15f}, &(0x7f00000006c0)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f00000000c0)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd=r0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000700)=""/229, 0xe5}], 0x1})
io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0)

2.779947464s ago: executing program 1 (id=203):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0)

2.380143013s ago: executing program 3 (id=204):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r0}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94)

2.167181438s ago: executing program 0 (id=205):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "000000002210699e", "5193bb672965593c97c186a80e000000001000090000000000001000", '\x00\x00=*'}, 0x38)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x8, @loopback, 0x7}}, 0x0, 0x0, 0x44, 0x0, "b208405cce4456e4fc8f2dabd194ff3763f799f91cf7e5e8260998f956ec57c24451db07550335ebf4a3d0168ccaa268e928f39cd7494c2b19ebef230a3373685fbacfcf3b6e9633bd997a9bfcf08f67"}, 0xd8)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x5, @loopback}, 0x1c)

2.132708904s ago: executing program 4 (id=206):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000180)={0xc, r1})
ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000040)={0x20, 0x0, 0x0, 0x0, 0x8000000000000400})
ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000a40)={0x28, 0x4, r1, r1, 0x8000000000000001, 0xfffffffffffdfffe})

1.818586069s ago: executing program 3 (id=207):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x2, 0x0, [{0x4000009b, 0x0, 0x5}, {0x25f, 0x0, 0x4}]})
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]})

1.628682676s ago: executing program 1 (id=208):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0)
close(r0)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x4, 0x1, 0x3, {0xa, 0x4e23, 0x7, @mcast2, 0x100}}}, 0x80, 0x0}, 0x40004)
ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="a59b58aac764"})

1.559389234s ago: executing program 4 (id=209):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000005c40)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRESDEC], 0x1, 0x550f, &(0x7f00000001c0)="$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")
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
r1 = fspick(r0, &(0x7f00000000c0)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)

1.425164175s ago: executing program 3 (id=210):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x8000)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000040)={0x10000, 0x0, 0x60000, 0x2000, &(0x7f0000ffd000/0x2000)=nil})

1.352596745s ago: executing program 3 (id=211):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
syz_usb_connect(0x2, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="120110031ecd2b20101401a05bec0102030109022f0003064d400f0904030000817be9020904025a00ff00400b0904", @ANYRES64], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0})

1.162733764s ago: executing program 1 (id=212):
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x541})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00006c6000/0x400000)=nil, &(0x7f0000685000/0x4000)=nil, 0x400000, 0x0, 0x18100})

1.086175685s ago: executing program 0 (id=213):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x336)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast})

515.611854ms ago: executing program 1 (id=214):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}]}, 0x1, 0x241, &(0x7f0000000540)="$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")
mknod$loop(&(0x7f0000000ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
creat(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10)
mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1)

489.613855ms ago: executing program 0 (id=215):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

72.046829ms ago: executing program 1 (id=216):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xfff1, 0xffff}}}, 0x24}}, 0x10)

0s ago: executing program 4 (id=217):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11)
pwritev2(r0, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0xffffffbc}], 0x1, 0xfff, 0xc, 0x4)
r1 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00')
lseek(r1, 0x2000, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.219' (ED25519) to the list of known hosts.
[   78.140103][ T5807] cgroup: Unknown subsys name 'net'
[   78.281141][ T5807] cgroup: Unknown subsys name 'cpuset'
[   78.290384][ T5807] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   79.974909][ T5807] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   82.124394][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   82.132798][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   82.140748][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   82.153194][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   82.159833][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   82.162949][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   82.174600][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   82.177705][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   82.183263][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   82.198005][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   82.205322][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   82.208622][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   82.218056][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   82.221374][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   82.234387][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   82.236606][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   82.243216][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   82.249947][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   82.263661][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   82.263690][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   82.272817][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   82.279397][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   82.292665][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   82.300956][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   82.308707][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   82.969727][ T5822] chnl_net:caif_netlink_parms(): no params data found
[   83.038246][ T5819] chnl_net:caif_netlink_parms(): no params data found
[   83.149624][ T5821] chnl_net:caif_netlink_parms(): no params data found
[   83.270990][ T5820] chnl_net:caif_netlink_parms(): no params data found
[   83.342752][ T5829] chnl_net:caif_netlink_parms(): no params data found
[   83.381554][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.389684][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.397087][ T5822] bridge_slave_0: entered allmulticast mode
[   83.404861][ T5822] bridge_slave_0: entered promiscuous mode
[   83.461056][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.468509][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.475911][ T5822] bridge_slave_1: entered allmulticast mode
[   83.483932][ T5822] bridge_slave_1: entered promiscuous mode
[   83.518811][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.526116][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.533551][ T5821] bridge_slave_0: entered allmulticast mode
[   83.542275][ T5821] bridge_slave_0: entered promiscuous mode
[   83.578574][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.585889][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.593663][ T5819] bridge_slave_0: entered allmulticast mode
[   83.601387][ T5819] bridge_slave_0: entered promiscuous mode
[   83.622586][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.629907][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.637352][ T5821] bridge_slave_1: entered allmulticast mode
[   83.645125][ T5821] bridge_slave_1: entered promiscuous mode
[   83.685723][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.693123][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.700720][ T5819] bridge_slave_1: entered allmulticast mode
[   83.709960][ T5819] bridge_slave_1: entered promiscuous mode
[   83.779299][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.815926][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.842509][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.872501][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.900287][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.924782][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.932304][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.939710][ T5820] bridge_slave_0: entered allmulticast mode
[   83.947707][ T5820] bridge_slave_0: entered promiscuous mode
[   83.973315][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.024501][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.031905][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.039490][ T5820] bridge_slave_1: entered allmulticast mode
[   84.047570][ T5820] bridge_slave_1: entered promiscuous mode
[   84.058407][ T5822] team0: Port device team_slave_0 added
[   84.077744][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.085056][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.092728][ T5829] bridge_slave_0: entered allmulticast mode
[   84.100547][ T5829] bridge_slave_0: entered promiscuous mode
[   84.111961][ T5821] team0: Port device team_slave_0 added
[   84.135908][ T5822] team0: Port device team_slave_1 added
[   84.144926][ T5819] team0: Port device team_slave_0 added
[   84.151082][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.158578][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.165848][ T5829] bridge_slave_1: entered allmulticast mode
[   84.173788][ T5829] bridge_slave_1: entered promiscuous mode
[   84.184491][ T5821] team0: Port device team_slave_1 added
[   84.237732][ T5819] team0: Port device team_slave_1 added
[   84.274401][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.326104][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.333302][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.359311][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.375139][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.385346][ T5833] Bluetooth: hci1: command tx timeout
[   84.387197][ T5836] Bluetooth: hci4: command tx timeout
[   84.392817][ T5833] Bluetooth: hci0: command tx timeout
[   84.396674][ T5836] Bluetooth: hci2: command tx timeout
[   84.402461][ T5833] Bluetooth: hci3: command tx timeout
[   84.428676][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.435655][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.461846][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.491040][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.502397][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.509499][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.536025][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.563034][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.570107][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.596189][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.608932][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.615889][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.641978][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.657556][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.680080][ T5820] team0: Port device team_slave_0 added
[   84.698066][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.705041][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.731420][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.779298][ T5820] team0: Port device team_slave_1 added
[   84.824655][ T5829] team0: Port device team_slave_0 added
[   84.860716][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.867856][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.894161][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.908281][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.915258][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.941361][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.956333][ T5829] team0: Port device team_slave_1 added
[   84.988729][ T5821] hsr_slave_0: entered promiscuous mode
[   84.995706][ T5821] hsr_slave_1: entered promiscuous mode
[   85.077988][ T5822] hsr_slave_0: entered promiscuous mode
[   85.085219][ T5822] hsr_slave_1: entered promiscuous mode
[   85.092434][ T5822] debugfs: 'hsr0' already exists in 'hsr'
[   85.098511][ T5822] Cannot create hsr debugfs directory
[   85.112524][ T5819] hsr_slave_0: entered promiscuous mode
[   85.119692][ T5819] hsr_slave_1: entered promiscuous mode
[   85.126405][ T5819] debugfs: 'hsr0' already exists in 'hsr'
[   85.132240][ T5819] Cannot create hsr debugfs directory
[   85.193507][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.200675][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   85.226757][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.270335][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.277466][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   85.303579][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.358212][ T5820] hsr_slave_0: entered promiscuous mode
[   85.365207][ T5820] hsr_slave_1: entered promiscuous mode
[   85.372784][ T5820] debugfs: 'hsr0' already exists in 'hsr'
[   85.378918][ T5820] Cannot create hsr debugfs directory
[   85.608176][ T5829] hsr_slave_0: entered promiscuous mode
[   85.615160][ T5829] hsr_slave_1: entered promiscuous mode
[   85.622176][ T5829] debugfs: 'hsr0' already exists in 'hsr'
[   85.627965][ T5829] Cannot create hsr debugfs directory
[   86.102442][ T5819] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   86.116030][ T5819] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   86.127653][ T5819] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   86.158651][ T5819] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   86.259803][ T5822] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   86.276627][ T5822] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   86.290990][ T5822] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   86.319270][ T5822] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   86.419534][ T5821] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   86.433595][ T5821] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   86.445900][ T5821] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   86.453238][ T5836] Bluetooth: hci2: command tx timeout
[   86.459301][ T5840] Bluetooth: hci3: command tx timeout
[   86.459323][ T5833] Bluetooth: hci0: command tx timeout
[   86.464753][ T5840] Bluetooth: hci4: command tx timeout
[   86.471560][ T5832] Bluetooth: hci1: command tx timeout
[   86.497444][ T5821] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   86.596598][ T5820] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   86.614797][ T5820] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   86.626636][ T5820] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   86.661437][ T5820] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   86.783575][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   86.825083][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.834422][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   86.849752][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   86.898180][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   86.946213][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.033772][ T5819] 8021q: adding VLAN 0 to HW filter on device team0
[   87.061875][ T5822] 8021q: adding VLAN 0 to HW filter on device team0
[   87.131583][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.138963][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.149808][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.157030][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.169959][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.177188][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.225960][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.233235][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.303567][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.424951][ T5821] 8021q: adding VLAN 0 to HW filter on device team0
[   87.444972][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.494811][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.502058][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.528271][  T146] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.535484][  T146] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.605212][ T5820] 8021q: adding VLAN 0 to HW filter on device team0
[   87.639389][  T146] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.646584][  T146] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.713530][  T146] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.720847][  T146] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.811158][ T5821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   87.894272][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.980585][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[   87.994751][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.053462][ T3573] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.060702][ T3573] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.089394][ T1266] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.096585][ T1266] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.152355][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.404537][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   88.439376][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.454003][ T5822] veth0_vlan: entered promiscuous mode
[   88.522625][ T5822] veth1_vlan: entered promiscuous mode
[   88.532656][ T5833] Bluetooth: hci2: command tx timeout
[   88.540573][ T5837] Bluetooth: hci3: command tx timeout
[   88.540603][ T5840] Bluetooth: hci1: command tx timeout
[   88.546258][ T5832] Bluetooth: hci4: command tx timeout
[   88.554158][ T5836] Bluetooth: hci0: command tx timeout
[   88.586063][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.751764][ T5822] veth0_macvtap: entered promiscuous mode
[   88.800031][ T5822] veth1_macvtap: entered promiscuous mode
[   88.889602][ T5821] veth0_vlan: entered promiscuous mode
[   88.905377][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.938562][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.949102][ T5821] veth1_vlan: entered promiscuous mode
[   88.975493][ T5820] veth0_vlan: entered promiscuous mode
[   88.987178][ T5819] veth0_vlan: entered promiscuous mode
[   89.009782][   T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.019631][   T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.034489][ T5820] veth1_vlan: entered promiscuous mode
[   89.046271][   T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.056176][   T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.076104][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.108723][ T5819] veth1_vlan: entered promiscuous mode
[   89.172192][ T5821] veth0_macvtap: entered promiscuous mode
[   89.203350][ T5821] veth1_macvtap: entered promiscuous mode
[   89.272551][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.294781][ T5820] veth0_macvtap: entered promiscuous mode
[   89.338863][ T5819] veth0_macvtap: entered promiscuous mode
[   89.371558][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.379825][ T5820] veth1_macvtap: entered promiscuous mode
[   89.415074][ T5829] veth0_vlan: entered promiscuous mode
[   89.421686][   T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.433176][   T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.442217][ T5819] veth1_macvtap: entered promiscuous mode
[   89.452104][ T1266] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.461193][ T1266] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.495332][ T1266] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.508578][ T1266] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.531256][ T5829] veth1_vlan: entered promiscuous mode
[   89.572427][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.596626][   T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.611394][   T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.628562][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.661331][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.676451][   T58] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.686510][   T58] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.725189][   T58] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.738821][   T58] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.784928][ T5822] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   89.812499][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.821351][ T5829] veth0_macvtap: entered promiscuous mode
[   89.836469][ T5829] veth1_macvtap: entered promiscuous mode
[   89.865285][   T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.876710][   T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.918794][  T146] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.934546][  T146] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.000504][  T146] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.065779][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.076595][  T146] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.106455][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.118170][   T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.126041][   T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.193312][   T58] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.214646][   T58] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.234238][ T5946] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   90.243656][ T3573] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.269448][ T3573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.290353][   T58] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.341808][   T58] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.390013][  T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.421603][  T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.517665][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.539063][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.607948][ T5840] Bluetooth: hci1: command tx timeout
[   90.613123][ T5836] Bluetooth: hci0: command tx timeout
[   90.613443][ T5840] Bluetooth: hci4: command tx timeout
[   90.618872][ T5836] Bluetooth: hci2: command tx timeout
[   90.618900][ T5836] Bluetooth: hci3: command tx timeout
[   90.655975][ T3573] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.665602][ T3573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.751095][  T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.780980][  T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.851675][ T5890] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   90.889342][ T5954] loop2: detected capacity change from 0 to 8192
[   90.900717][ T5956] loop3: detected capacity change from 0 to 256
[   90.939682][ T5954] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   90.964716][ T3573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.988894][ T3573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.009502][ T5956] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d)
[   91.037968][ T5890] usb 1-1: Using ep0 maxpacket: 32
[   91.065450][ T5890] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[   91.093923][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.182241][ T5890] usb 1-1: config 0 descriptor??
[   91.252202][ T5890] as10x_usb: device has been detected
[   91.297056][ T5890] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[   91.388692][ T5890] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[   91.495734][ T5890] as10x_usb: error during firmware upload part1
[   91.548640][ T5890] Registered device nBox DVB-T Dongle
[   91.588122][ T5890] usb 1-1: USB disconnect, device number 2
[   91.735013][ T5890] Unregistered device nBox DVB-T Dongle
[   91.755667][ T5890] as10x_usb: device has been disconnected
[   91.904766][  T982] cfg80211: failed to load regulatory.db
[   92.079454][ T5975] sp0: Synchronizing with TNC
[   92.136488][ T5974] [U] è``
[   92.510333][ T5968] loop1: detected capacity change from 0 to 32768
[   92.681580][ T5968] jfs_strtoUCS: char2uni returned -22.
[   92.717232][ T5968] charset = cp932, char = 0xec
[   92.962455][ T5981] loop0: detected capacity change from 0 to 32768
[   93.018558][ T5981] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.16 (5981)
[   93.076577][ T5979] loop3: detected capacity change from 0 to 32768
[   93.111167][ T5981] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   93.200360][ T5981] BTRFS info (device loop0): using sha256 checksum algorithm
[   93.208713][ T5979] JBD2: Ignoring recovery information on journal
[   93.362930][ T5979] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[   93.558170][ T5981] BTRFS info (device loop0): rebuilding free space tree
[   93.670285][ T5985] loop2: detected capacity change from 0 to 32768
[   93.703700][ T5981] BTRFS info (device loop0): disabling free space tree
[   93.722686][ T5985] BTRFS info: device /dev/loop2 (7:2) using temp-fsid a6da7a58-d166-43e7-a2f9-bfc54652dc78
[   93.737740][ T5981] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   93.763878][ T5985] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.18 (5985)
[   93.777490][ T5820] ocfs2: Unmounting device (7,3) on (node local)
[   93.785520][ T5981] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   93.863497][ T5985] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   93.895937][ T5981] BTRFS info (device loop0): setting nodatasum
[   93.915930][ T5985] BTRFS info (device loop2): using sha256 checksum algorithm
[   93.922988][ T5981] BTRFS info (device loop0): setting nodatacow
[   93.942620][ T5987] loop4: detected capacity change from 0 to 40427
[   93.956995][ T5981] BTRFS info (device loop0): turning off barriers
[   93.964832][ T5987] F2FS-fs: heap/no_heap options were deprecated
[   93.987052][ T5981] BTRFS info (device loop0): force clearing of disk cache
[   94.003196][ T5987] F2FS-fs (loop4): Invalid log_blocksize (64), supports only 12
[   94.016994][ T5987] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   94.087695][ T5987] F2FS-fs (loop4): invalid crc value
[   94.311583][ T5985] BTRFS info (device loop2): rebuilding free space tree
[   94.325811][ T5990] loop1: detected capacity change from 0 to 40427
[   94.378784][ T5985] BTRFS info (device loop2): disabling free space tree
[   94.403488][ T5985] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   94.426991][ T5985] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   94.446108][ T5985] BTRFS info (device loop2): setting nodatasum
[   94.463605][ T5990] F2FS-fs (loop1): build fault injection rate: 174
[   94.475912][ T5985] BTRFS info (device loop2): setting nodatacow
[   94.498169][ T5990] F2FS-fs (loop1): build fault injection type: 0x3bfe8c
[   94.506777][ T5987] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[   94.516455][ T5985] BTRFS info (device loop2): force clearing of disk cache
[   94.545405][ T5990] F2FS-fs (loop1): invalid crc value
[   94.604276][ T5987] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   94.651221][ T5987] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   94.657201][   T29] audit: type=1800 audit(1772460928.710:2): pid=5985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.18" name="file1" dev="loop2" ino=260 res=0 errno=0
[   94.904966][ T5990] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   94.932176][ T5990] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   95.015260][ T5821] BTRFS info (device loop2): last unmount of filesystem a6da7a58-d166-43e7-a2f9-bfc54652dc78
[   95.059280][ T5819] syz-executor: attempt to access beyond end of device
[   95.059280][ T5819] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   95.137921][ T5819] CPU: 1 UID: 0 PID: 5819 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   95.137949][ T5819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   95.137969][ T5819] Call Trace:
[   95.137982][ T5819]  <TASK>
[   95.137992][ T5819]  dump_stack_lvl+0xe8/0x150
[   95.138029][ T5819]  f2fs_handle_critical_error+0x37c/0x540
[   95.138097][ T5819]  f2fs_write_end_io+0xcdb/0xff0
[   95.138144][ T5819]  __submit_merged_bio+0x256/0x700
[   95.138187][ T5819]  __submit_merged_write_cond+0x3c9/0x4e0
[   95.138232][ T5819]  ? __pfx___submit_merged_write_cond+0x10/0x10
[   95.138295][ T5819]  f2fs_write_data_pages+0x2975/0x35e0
[   95.138364][ T5819]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   95.138406][ T5819]  ? css_rstat_updated+0x23a/0x530
[   95.138464][ T5819]  ? arch_stack_walk+0xe3/0x150
[   95.138485][ T5819]  ? unwind_next_frame+0xa5/0x23c0
[   95.138517][ T5819]  ? rcu_is_watching+0x15/0xb0
[   95.138545][ T5819]  ? __bfs+0x153/0x290
[   95.138578][ T5819]  ? __pfx_hlock_conflict+0x10/0x10
[   95.138632][ T5819]  ? lockdep_unlock+0x5d/0xd0
[   95.138655][ T5819]  ? __lock_acquire+0x146e/0x2cf0
[   95.138687][ T5819]  ? is_bpf_text_address+0x292/0x2b0
[   95.138731][ T5819]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   95.138758][ T5819]  do_writepages+0x32e/0x550
[   95.138803][ T5819]  ? do_raw_spin_unlock+0xf5/0x210
[   95.138832][ T5819]  filemap_fdatawrite+0x1e9/0x2f0
[   95.138868][ T5819]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   95.138955][ T5819]  ? do_raw_spin_unlock+0xf5/0x210
[   95.138983][ T5819]  f2fs_sync_dirty_inodes+0x30e/0x860
[   95.139028][ T5819]  f2fs_write_checkpoint+0x9df/0x26a0
[   95.139128][ T5819]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   95.139221][ T5819]  kill_f2fs_super+0x314/0x720
[   95.139254][ T5819]  ? __pfx_kill_f2fs_super+0x10/0x10
[   95.139296][ T5819]  ? lockdep_hardirqs_on+0x7a/0x110
[   95.139337][ T5819]  deactivate_locked_super+0xbc/0x130
[   95.139386][ T5819]  cleanup_mnt+0x437/0x4d0
[   95.139409][ T5819]  ? _raw_spin_unlock_irq+0x23/0x50
[   95.139447][ T5819]  task_work_run+0x1d9/0x270
[   95.139475][ T5819]  ? __pfx_task_work_run+0x10/0x10
[   95.139513][ T5819]  exit_to_user_mode_loop+0xed/0x480
[   95.139537][ T5819]  ? rcu_is_watching+0x15/0xb0
[   95.139573][ T5819]  do_syscall_64+0x32d/0xf80
[   95.139594][ T5819]  ? trace_irq_disable+0x3b/0x150
[   95.139612][ T5819]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.139634][ T5819]  ? clear_bhb_loop+0x40/0x90
[   95.139661][ T5819]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.139682][ T5819] RIP: 0033:0x7f366739d9d7
[   95.139714][ T5819] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[   95.139731][ T5819] RSP: 002b:00007fff0bf1be78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   95.139752][ T5819] RAX: 0000000000000000 RBX: 00007f3667431f90 RCX: 00007f366739d9d7
[   95.139766][ T5819] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff0bf1bf30
[   95.139778][ T5819] RBP: 00007fff0bf1bf30 R08: 00007fff0bf1cf30 R09: 00000000ffffffff
[   95.139792][ T5819] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff0bf1cfc0
[   95.139805][ T5819] R13: 00007f3667431f90 R14: 00000000000172b1 R15: 00007fff0bf1d000
[   95.139842][ T5819]  </TASK>
[   95.139851][ T5819] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[   95.489225][ T5822] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   95.489734][ T5829] syz-executor: attempt to access beyond end of device
[   95.489734][ T5829] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   95.568697][ T5829] CPU: 1 UID: 0 PID: 5829 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   95.568727][ T5829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   95.568739][ T5829] Call Trace:
[   95.568746][ T5829]  <TASK>
[   95.568755][ T5829]  dump_stack_lvl+0xe8/0x150
[   95.568790][ T5829]  f2fs_handle_critical_error+0x37c/0x540
[   95.568831][ T5829]  f2fs_write_end_io+0xcdb/0xff0
[   95.568861][ T5829]  ? __submit_merged_bio+0x256/0x700
[   95.568910][ T5829]  __submit_merged_bio+0x256/0x700
[   95.568949][ T5829]  __submit_merged_write_cond+0x3c9/0x4e0
[   95.568989][ T5829]  ? __pfx___submit_merged_write_cond+0x10/0x10
[   95.569045][ T5829]  f2fs_write_data_pages+0x2975/0x35e0
[   95.569107][ T5829]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   95.569142][ T5829]  ? unwind_get_return_address+0x4d/0x90
[   95.569174][ T5829]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[   95.569224][ T5829]  ? check_noncircular+0xda/0x150
[   95.569262][ T5829]  ? lockdep_unlock+0x5d/0xd0
[   95.569285][ T5829]  ? __lock_acquire+0x146e/0x2cf0
[   95.569337][ T5829]  ? do_raw_spin_lock+0x12b/0x2f0
[   95.569370][ T5829]  ? do_raw_spin_unlock+0xf5/0x210
[   95.569402][ T5829]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   95.569427][ T5829]  do_writepages+0x32e/0x550
[   95.569468][ T5829]  ? do_raw_spin_unlock+0xf5/0x210
[   95.569495][ T5829]  filemap_fdatawrite+0x1e9/0x2f0
[   95.569534][ T5829]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   95.569612][ T5829]  ? do_raw_spin_unlock+0xf5/0x210
[   95.569639][ T5829]  f2fs_sync_dirty_inodes+0x30e/0x860
[   95.569681][ T5829]  f2fs_write_checkpoint+0x9df/0x26a0
[   95.569741][ T5829]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   95.569824][ T5829]  kill_f2fs_super+0x314/0x720
[   95.569855][ T5829]  ? __pfx_kill_f2fs_super+0x10/0x10
[   95.569894][ T5829]  ? lockdep_hardirqs_on+0x7a/0x110
[   95.569930][ T5829]  deactivate_locked_super+0xbc/0x130
[   95.569965][ T5829]  cleanup_mnt+0x437/0x4d0
[   95.569988][ T5829]  ? _raw_spin_unlock_irq+0x23/0x50
[   95.570024][ T5829]  task_work_run+0x1d9/0x270
[   95.570049][ T5829]  ? __pfx_task_work_run+0x10/0x10
[   95.570081][ T5829]  exit_to_user_mode_loop+0xed/0x480
[   95.570104][ T5829]  ? rcu_is_watching+0x15/0xb0
[   95.570136][ T5829]  do_syscall_64+0x32d/0xf80
[   95.570155][ T5829]  ? trace_irq_disable+0x3b/0x150
[   95.570172][ T5829]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.570194][ T5829]  ? clear_bhb_loop+0x40/0x90
[   95.570219][ T5829]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.570239][ T5829] RIP: 0033:0x7fd25bd9d9d7
[   95.570259][ T5829] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[   95.570275][ T5829] RSP: 002b:00007ffffd0d5328 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   95.570297][ T5829] RAX: 0000000000000000 RBX: 00007fd25be31f90 RCX: 00007fd25bd9d9d7
[   95.570310][ T5829] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffffd0d53e0
[   95.570322][ T5829] RBP: 00007ffffd0d53e0 R08: 00007ffffd0d63e0 R09: 00000000ffffffff
[   95.570335][ T5829] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffffd0d6470
[   95.570346][ T5829] R13: 00007fd25be31f90 R14: 000000000001732b R15: 00007ffffd0d64b0
[   95.570379][ T5829]  </TASK>
[   95.571099][ T5829] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   96.293738][ T6049] loop3: detected capacity change from 0 to 512
[   96.377988][ T6049] EXT4-fs: Ignoring removed i_version option
[   96.426009][ T6049] EXT4-fs: Ignoring removed nobh option
[   96.467272][ T6049] EXT4-fs (loop3): Test dummy encryption mode enabled
[   96.517079][ T6049] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   96.609441][ T6049] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   96.758746][ T6049] EXT4-fs (loop3): 1 truncate cleaned up
[   96.766413][ T6049] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   96.922654][ T6049] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni"
[   96.976134][ T6057] evm: overlay not supported
[   97.112913][ T5820] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.241786][ T6064] overlayfs: "xino" feature enabled using 2 upper inode bits.
[   97.704703][ T6061] loop4: detected capacity change from 0 to 32768
[   97.733292][ T6061] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.26 (6061)
[   97.808902][ T6061] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   97.850152][ T6061] BTRFS info (device loop4): using blake2b checksum algorithm
[   97.964383][ T6059] loop0: detected capacity change from 0 to 32768
[   98.052262][ T6061] BTRFS info (device loop4): enabling ssd optimizations
[   98.066961][ T6061] BTRFS info (device loop4): turning on async discard
[   98.084048][ T6061] BTRFS info (device loop4): enabling free space tree
[   98.097498][ T6059] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[   98.117584][ T6061] BTRFS info (device loop4): use zstd compression, level 3
[   98.172925][ T6059] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[   98.347947][ T6059] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[   98.577017][ T6059] gfs2: fsid=syz:syz.s: first mount done, others may mount
[   98.595520][ T5819] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   98.610881][ T6081] loop1: detected capacity change from 0 to 32768
[   98.781093][ T6081] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   98.875952][ T6081] XFS (loop1): Ending clean mount
[   98.898406][ T6081] XFS (loop1): Quotacheck needed: Please wait.
[   99.113536][ T6081] XFS (loop1): Quotacheck: Done.
[   99.229709][   T29] audit: type=1800 audit(1772460933.280:3): pid=6081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.42" name="file1" dev="loop1" ino=4422 res=0 errno=0
[   99.289107][ T6100] loop3: detected capacity change from 0 to 32768
[   99.338196][ T6100] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.43 (6100)
[   99.376161][ T5829] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   99.407373][ T6079] loop2: detected capacity change from 0 to 32768
[   99.428303][ T6100] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   99.458298][ T6100] BTRFS info (device loop3): using xxhash64 checksum algorithm
[   99.495320][ T6079] 
[   99.495320][ T6079]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   99.495320][ T6079] 
[   99.647513][ T6100] BTRFS info (device loop3): enabling ssd optimizations
[   99.654537][ T6100] BTRFS info (device loop3): turning on flush-on-commit
[   99.664803][ T6079] 
[   99.664803][ T6079]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   99.664803][ T6079] 
[   99.749314][ T6100] BTRFS info (device loop3): turning on async discard
[   99.756168][ T6100] BTRFS info (device loop3): enabling free space tree
[   99.763546][ T6079] 
[   99.763546][ T6079]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   99.763546][ T6079] 
[   99.809377][ T6100] BTRFS info (device loop3): force zlib compression, level 3
[   99.817558][ T6100] BTRFS info (device loop3): max_inline set to 4096
[   99.839363][ T6079] 
[   99.839363][ T6079]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   99.839363][ T6079] 
[   99.908562][  T112] 
[   99.908562][  T112]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   99.908562][  T112] 
[   99.965388][ T6132] jfs: add_missing_indices: Invalid stbl[1] = -128 for inode 2, block = 0
[  100.066314][ T6100] BTRFS info (device loop3): balance: start -d -m
[  100.094970][  T146] 
[  100.094970][  T146]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  100.094970][  T146] 
[  100.122005][ T6100] BTRFS info (device loop3): relocating block group 6881280 flags data|metadata
[  100.135193][  T146] 
[  100.135193][  T146]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  100.135193][  T146] 
[  100.182446][ T6138] loop1: detected capacity change from 0 to 512
[  100.200910][ T5821] 
[  100.200910][ T5821]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  100.200910][ T5821] 
[  100.218476][  T111] 
[  100.218476][  T111]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  100.218476][  T111] 
[  100.263297][ T5821] 
[  100.263297][ T5821]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  100.263297][ T5821] 
[  100.281390][ T6100] BTRFS info (device loop3): relocating block group 5242880 flags data|metadata
[  100.631744][ T6114] loop4: detected capacity change from 0 to 40427
[  100.649498][ T6114] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  100.667096][ T6114] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  100.769668][ T6100] BTRFS info (device loop3): found 8 extents, stage: move data extents
[  100.788654][ T6142] loop1: detected capacity change from 0 to 4096
[  100.816563][ T6142] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  100.991271][ T6114] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  101.005319][ T6100] BTRFS info (device loop3): balance: canceled
[  101.056807][ T6114] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  101.089586][ T6114] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  101.181268][ T5820] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  101.257194][ T6114] F2FS-fs (loop4): Stopped filesystem due to reason: 0
[  101.847235][ T5890] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  102.010658][ T6162] loop4: detected capacity change from 0 to 2048
[  102.050741][ T5890] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  102.069239][ T5890] usb 1-1: config 0 interface 0 has no altsetting 0
[  102.096566][ T6151] loop2: detected capacity change from 0 to 32768
[  102.096606][ T6162] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  102.118302][ T5890] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  102.145982][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  102.159052][ T5890] usb 1-1: Product: syz
[  102.163282][ T5890] usb 1-1: Manufacturer: syz
[  102.171498][ T5890] usb 1-1: SerialNumber: syz
[  102.180589][ T5890] usb 1-1: config 0 descriptor??
[  102.186325][ T6151] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  102.200109][ T5890] usb 1-1: selecting invalid altsetting 0
[  102.241831][ T6162] NILFS (loop4): mounting unchecked fs
[  102.296390][ T5969] udevd[5969]: incorrect nilfs2 checksum on /dev/loop4
[  102.319612][ T6162] NILFS (loop4): recovery complete
[  102.362653][ T6174] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  102.406967][ T6151] XFS (loop2): Ending clean mount
[  102.415070][ T6151] XFS (loop2): Quotacheck needed: Please wait.
[  102.547438][   T43] usb 1-1: USB disconnect, device number 3
[  102.602843][ T6151] XFS (loop2): Quotacheck: Done.
[  102.670733][   T29] audit: type=1800 audit(1772460936.720:4): pid=6151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.52" name="file1" dev="loop2" ino=6150 res=0 errno=0
[  102.755365][ T6178] binder: 6177:6178 ioctl c0306201 2000000001c0 returned -14
[  102.941271][ T5821] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  102.966794][ T6180] process 'syz.4.61' launched './file1' with NULL argv: empty string added
[  103.366801][ T6188] loop4: detected capacity change from 0 to 512
[  103.390143][ T6188] =======================================================
[  103.390143][ T6188] WARNING: The mand mount option has been deprecated and
[  103.390143][ T6188]          and is ignored by this kernel. Remove the mand
[  103.390143][ T6188]          option from the mount to silence this warning.
[  103.390143][ T6188] =======================================================
[  103.493556][ T6188] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  103.504847][ T6188] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e854e018, mo2=0003]
[  103.514299][ T6188] System zones: 0-1, 15-15, 18-18, 34-34
[  103.520852][ T6188] EXT4-fs (loop4): orphan cleanup on readonly fs
[  103.527644][ T6188] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0
[  103.537361][ T6188] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  103.552537][ T6188] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  103.563714][ T6188] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #16: comm syz.4.65: iget: bad extended attribute block 1
[  103.578505][ T6188] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  103.586940][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  103.602939][    C0] EXT4-fs (loop4): initial error at time 1772460937: ext4_orphan_get:1391: inode 16
[  103.612408][    C0] EXT4-fs (loop4): last error at time 1772460937: ext4_orphan_get:1391: inode 16
[  103.641198][ T6188] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.65: couldn't read orphan inode 16 (err -117)
[  103.672451][ T6188] loop4: lost filesystem error report for type 5 error -117
[  103.691063][ T6188] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  103.809102][ T6202] batadv_slave_0: entered promiscuous mode
[  103.833261][ T6199] batadv_slave_0: left promiscuous mode
[  103.879784][ T6188] EXT4-fs (loop4): shut down requested (2)
[  103.933120][ T5819] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.101937][ T6212] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  104.205984][ T6212] syz_tun: entered promiscuous mode
[  104.259787][ T6212] syz_tun: left promiscuous mode
[  104.291595][ T6220] netlink: 452 bytes leftover after parsing attributes in process `syz.1.79'.
[  104.591599][ T6203] loop0: detected capacity change from 0 to 32768
[  104.613883][ T6203] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.70 (6203)
[  104.668575][ T6203] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  104.714216][ T6203] BTRFS info (device loop0): using sha256 checksum algorithm
[  104.826101][ T6203] BTRFS info (device loop0): setting nodatasum
[  104.841331][ T6244] loop2: detected capacity change from 0 to 512
[  104.848968][ T6203] BTRFS info (device loop0): setting nodatacow
[  104.855260][ T6203] BTRFS info (device loop0): enabling ssd optimizations
[  104.866327][ T6244] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  104.877305][ T6203] BTRFS info (device loop0): turning on async discard
[  104.903710][ T6244] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0102]
[  104.913051][ T6203] BTRFS info (device loop0): enabling free space tree
[  104.922889][ T6244] System zones: 1-12
[  104.948608][ T6244] EXT4-fs (loop2): orphan cleanup on readonly fs
[  104.982467][ T6244] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.84: invalid indirect mapped block 2 (level 2)
[  105.056563][ T6244] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  105.057123][    C1] EXT4-fs (loop2): initial error at time 1772460939: ext4_free_branches:1023: inode 11
[  105.076083][    C1] EXT4-fs (loop2): last error at time 1772460939: ext4_free_branches:1023: inode 11
[  105.098722][ T6244] EXT4-fs (loop2): Remounting filesystem read-only
[  105.113260][ T5890] IPVS: starting estimator thread 0...
[  105.125811][ T6244] EXT4-fs (loop2): 1 truncate cleaned up
[  105.148085][ T6244] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback.
[  105.217502][ T6244] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  105.257180][ T6253] IPVS: using max 29 ests per chain, 69600 per kthread
[  105.379202][ T5822] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  105.960403][ T6250] loop3: detected capacity change from 0 to 32768
[  106.131935][  T112] blkno = 8ed2c, nblocks = 1
[  106.138276][  T112] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map
[  106.138276][  T112] 
[  106.169663][  T112] ERROR: (device loop3): remounting filesystem as read-only
[  106.384680][ T6257] loop1: detected capacity change from 0 to 32768
[  106.397208][ T6250] JFS: metapage_get_blocks failed
[  106.427518][ T6257] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  106.469035][ T6257] XFS (loop1): Ending clean mount
[  106.480390][ T6257] XFS (loop1): Quotacheck needed: Please wait.
[  106.489785][ T6280] loop0: detected capacity change from 0 to 512
[  106.604579][ T6257] XFS (loop1): Quotacheck: Done.
[  106.795871][ T5829] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  106.989651][ T6286] loop2: detected capacity change from 0 to 4096
[  107.186006][ T6291] loop0: detected capacity change from 0 to 64
[  107.229198][ T6291] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing
[  107.289237][ T6293] loop3: detected capacity change from 0 to 2048
[  107.326540][ T6293] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  107.398965][ T6286] ntfs3(loop2): ino=21, "bus" failed to extend initialized size to 10000000005.
[  107.648188][ T5890] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  107.836966][ T5890] usb 2-1: Using ep0 maxpacket: 32
[  107.865749][ T5890] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[  107.887550][ T5890] usb 2-1: config 0 has no interface number 0
[  107.914376][ T5890] usb 2-1: config 0 interface 184 has no altsetting 0
[  107.939207][ T5890] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  107.957775][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.968352][ T5890] usb 2-1: Product: syz
[  107.972889][ T5890] usb 2-1: Manufacturer: syz
[  107.977680][ T5890] usb 2-1: SerialNumber: syz
[  107.992915][ T5890] usb 2-1: config 0 descriptor??
[  108.021252][ T6307] loop3: detected capacity change from 0 to 256
[  108.065479][ T6307] exfat: Deprecated parameter 'namecase'
[  108.101035][ T6307] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  108.409155][ T6303] loop2: detected capacity change from 0 to 32768
[  108.461588][ T6303] JBD2: Ignoring recovery information on journal
[  108.536643][ T6303] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  108.597363][ T6321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.113'.
[  108.636942][ T5890] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  108.659099][ T6319] kvm: kvm [6317]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x4000000d)
[  108.691376][ T6321] vlan2: entered allmulticast mode
[  108.700931][ T6324] loop4: detected capacity change from 0 to 128
[  108.708303][ T5890] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  108.711148][ T6321] bridge0: port 3(vlan2) entered blocking state
[  108.777486][ T6321] bridge0: port 3(vlan2) entered disabled state
[  108.801709][ T6324] FAT-fs (loop4): error, clusters badly computed (2 != 0)
[  108.809388][ T6324] FAT-fs (loop4): Filesystem has been set read-only
[  108.817064][ T6324] FAT-fs (loop4): error, clusters badly computed (3 != 1)
[  108.837110][ T6321] vlan2: entered promiscuous mode
[  108.916560][ T5821] ocfs2: Unmounting device (7,2) on (node local)
[  108.941876][ T5890] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  108.977240][ T5890] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  109.030859][ T5890] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  109.061662][ T5890] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  109.099472][ T5890] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71
[  109.153890][ T6331] Invalid argument reading file caps for ./file0
[  109.195011][ T5890] usb 2-1: USB disconnect, device number 2
[  109.360923][ T6337] loop4: detected capacity change from 0 to 1024
[  109.421069][ T6337] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  109.636008][ T5819] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.961080][ T5890] kernel read not supported for file /dsp (pid: 5890 comm: kworker/0:4)
[  110.093183][ T6358] overlayfs: upper fs does not support file handles, falling back to index=off.
[  110.617226][ T6366] loop4: detected capacity change from 0 to 32768
[  110.667429][ T6366] 
[  110.667429][ T6366]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  110.667429][ T6366] 
[  110.696084][ T6366] 
[  110.696084][ T6366]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  110.696084][ T6366] 
[  110.706698][ T6366] 
[  110.706698][ T6366]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  110.706698][ T6366] 
[  110.717306][ T6366] 
[  110.717306][ T6366]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  110.717306][ T6366] 
[  110.730013][ T6366] 
[  110.730013][ T6366]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  110.730013][ T6366] 
[  110.740709][ T6366] 
[  110.740709][ T6366]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  110.740709][ T6366] 
[  110.751251][ T6366] 
[  110.751251][ T6366]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  110.751251][ T6366] 
[  110.765476][  T111] 
[  110.765476][  T111]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  110.765476][  T111] 
[  110.812917][ T6371] 
[  110.812917][ T6371]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  110.812917][ T6371] 
[  110.872075][ T6371] 
[  110.872075][ T6371]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  110.872075][ T6371] 
[  110.909226][ T6371] 
[  110.909226][ T6371]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  110.909226][ T6371] 
[  110.952491][ T6371] 
[  110.952491][ T6371]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  110.952491][ T6371] 
[  110.987499][  T112] 
[  110.987499][  T112]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  110.987499][  T112] 
[  111.052983][ T5819] 
[  111.052983][ T5819]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  111.052983][ T5819] 
[  111.085470][ T5819] 
[  111.085470][ T5819]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  111.085470][ T5819] 
[  111.349170][ T6379] loop2: detected capacity change from 0 to 512
[  111.515511][ T6368] loop0: detected capacity change from 0 to 40427
[  111.564807][ T6368] F2FS-fs (loop0): build fault injection rate: 771
[  111.610332][ T6368] F2FS-fs (loop0): invalid crc value
[  111.871949][ T6368] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  111.907016][ T6368] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  112.108021][ T5822] syz-executor: attempt to access beyond end of device
[  112.108021][ T5822] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  112.132460][ T5822] CPU: 1 UID: 0 PID: 5822 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  112.132490][ T5822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  112.132503][ T5822] Call Trace:
[  112.132512][ T5822]  <TASK>
[  112.132520][ T5822]  dump_stack_lvl+0xe8/0x150
[  112.132555][ T5822]  f2fs_handle_critical_error+0x37c/0x540
[  112.132598][ T5822]  f2fs_write_end_io+0xcdb/0xff0
[  112.132647][ T5822]  __submit_merged_bio+0x256/0x700
[  112.132694][ T5822]  __submit_merged_write_cond+0x3c9/0x4e0
[  112.132739][ T5822]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  112.132802][ T5822]  f2fs_write_data_pages+0x2975/0x35e0
[  112.132871][ T5822]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  112.132914][ T5822]  ? css_rstat_updated+0x23a/0x530
[  112.132970][ T5822]  ? rcu_is_watching+0x15/0xb0
[  112.133001][ T5822]  ? mod_memcg_lruvec_state+0x1b8/0x360
[  112.133038][ T5822]  ? __lock_acquire+0x6b5/0x2cf0
[  112.133083][ T5822]  ? __lock_acquire+0x6b5/0x2cf0
[  112.133118][ T5822]  ? do_raw_spin_lock+0x12b/0x2f0
[  112.133154][ T5822]  ? do_raw_spin_unlock+0xf5/0x210
[  112.133178][ T5822]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  112.133204][ T5822]  do_writepages+0x32e/0x550
[  112.133247][ T5822]  ? do_raw_spin_unlock+0xf5/0x210
[  112.133275][ T5822]  filemap_fdatawrite+0x1e9/0x2f0
[  112.133311][ T5822]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  112.133397][ T5822]  ? do_raw_spin_unlock+0xf5/0x210
[  112.133426][ T5822]  f2fs_sync_dirty_inodes+0x30e/0x860
[  112.133478][ T5822]  f2fs_write_checkpoint+0x9df/0x26a0
[  112.133545][ T5822]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  112.133620][ T5822]  ? kfree+0x1c1/0x630
[  112.133639][ T5822]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  112.133678][ T5822]  kill_f2fs_super+0x314/0x720
[  112.133712][ T5822]  ? __pfx_kill_f2fs_super+0x10/0x10
[  112.133753][ T5822]  ? lockdep_hardirqs_on+0x7a/0x110
[  112.133792][ T5822]  deactivate_locked_super+0xbc/0x130
[  112.133829][ T5822]  cleanup_mnt+0x437/0x4d0
[  112.133852][ T5822]  ? _raw_spin_unlock_irq+0x23/0x50
[  112.133889][ T5822]  task_work_run+0x1d9/0x270
[  112.133917][ T5822]  ? __pfx_task_work_run+0x10/0x10
[  112.133954][ T5822]  exit_to_user_mode_loop+0xed/0x480
[  112.133979][ T5822]  ? rcu_is_watching+0x15/0xb0
[  112.134014][ T5822]  do_syscall_64+0x32d/0xf80
[  112.134036][ T5822]  ? trace_irq_disable+0x3b/0x150
[  112.134054][ T5822]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.134076][ T5822]  ? clear_bhb_loop+0x40/0x90
[  112.134111][ T5822]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.134132][ T5822] RIP: 0033:0x7fc19a79d9d7
[  112.134152][ T5822] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  112.134169][ T5822] RSP: 002b:00007fff975a2b38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  112.134190][ T5822] RAX: 0000000000000000 RBX: 00007fc19a831f90 RCX: 00007fc19a79d9d7
[  112.134204][ T5822] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff975a2bf0
[  112.134217][ T5822] RBP: 00007fff975a2bf0 R08: 00007fff975a3bf0 R09: 00000000ffffffff
[  112.134230][ T5822] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff975a3c80
[  112.134242][ T5822] R13: 00007fc19a831f90 R14: 000000000001b557 R15: 00007fff975a3cc0
[  112.134279][ T5822]  </TASK>
[  112.453535][ T5822] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  112.575903][ T6381] loop4: detected capacity change from 0 to 40427
[  112.712659][ T6385] loop2: detected capacity change from 0 to 32768
[  112.740746][ T6381] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  112.759533][ T6381] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  112.850380][ T5819] syz-executor: attempt to access beyond end of device
[  112.850380][ T5819] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  112.870065][ T5819] CPU: 0 UID: 0 PID: 5819 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  112.870094][ T5819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  112.870106][ T5819] Call Trace:
[  112.870114][ T5819]  <TASK>
[  112.870123][ T5819]  dump_stack_lvl+0xe8/0x150
[  112.870159][ T5819]  f2fs_handle_critical_error+0x37c/0x540
[  112.870201][ T5819]  f2fs_write_end_io+0xcdb/0xff0
[  112.870249][ T5819]  __submit_merged_bio+0x256/0x700
[  112.870291][ T5819]  __submit_merged_write_cond+0x3c9/0x4e0
[  112.870336][ T5819]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  112.870398][ T5819]  f2fs_write_data_pages+0x2975/0x35e0
[  112.870467][ T5819]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  112.870510][ T5819]  ? css_rstat_updated+0x23a/0x530
[  112.870565][ T5819]  ? rcu_is_watching+0x15/0xb0
[  112.870595][ T5819]  ? mod_memcg_lruvec_state+0x1b8/0x360
[  112.870629][ T5819]  ? __lock_acquire+0x6b5/0x2cf0
[  112.870674][ T5819]  ? __lock_acquire+0x6b5/0x2cf0
[  112.870706][ T5819]  ? do_raw_spin_lock+0x12b/0x2f0
[  112.870741][ T5819]  ? do_raw_spin_unlock+0xf5/0x210
[  112.870763][ T5819]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  112.870787][ T5819]  do_writepages+0x32e/0x550
[  112.870828][ T5819]  ? do_raw_spin_unlock+0xf5/0x210
[  112.870857][ T5819]  filemap_fdatawrite+0x1e9/0x2f0
[  112.870894][ T5819]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  112.870990][ T5819]  ? do_raw_spin_unlock+0xf5/0x210
[  112.871020][ T5819]  f2fs_sync_dirty_inodes+0x30e/0x860
[  112.871064][ T5819]  f2fs_write_checkpoint+0x9df/0x26a0
[  112.871132][ T5819]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  112.871225][ T5819]  kill_f2fs_super+0x314/0x720
[  112.871259][ T5819]  ? __pfx_kill_f2fs_super+0x10/0x10
[  112.871302][ T5819]  ? lockdep_hardirqs_on+0x7a/0x110
[  112.871342][ T5819]  deactivate_locked_super+0xbc/0x130
[  112.871377][ T5819]  cleanup_mnt+0x437/0x4d0
[  112.871410][ T5819]  ? _raw_spin_unlock_irq+0x23/0x50
[  112.871447][ T5819]  task_work_run+0x1d9/0x270
[  112.871475][ T5819]  ? __pfx_task_work_run+0x10/0x10
[  112.871513][ T5819]  exit_to_user_mode_loop+0xed/0x480
[  112.871538][ T5819]  ? rcu_is_watching+0x15/0xb0
[  112.871573][ T5819]  do_syscall_64+0x32d/0xf80
[  112.871595][ T5819]  ? trace_irq_disable+0x3b/0x150
[  112.871613][ T5819]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.871635][ T5819]  ? clear_bhb_loop+0x40/0x90
[  112.871662][ T5819]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.871683][ T5819] RIP: 0033:0x7f366739d9d7
[  112.871703][ T5819] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  112.871720][ T5819] RSP: 002b:00007fff0bf1be78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  112.871742][ T5819] RAX: 0000000000000000 RBX: 00007f3667431f90 RCX: 00007f366739d9d7
[  112.871756][ T5819] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff0bf1bf30
[  112.871768][ T5819] RBP: 00007fff0bf1bf30 R08: 00007fff0bf1cf30 R09: 00000000ffffffff
[  112.871781][ T5819] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff0bf1cfc0
[  112.871793][ T5819] R13: 00007f3667431f90 R14: 000000000001b863 R15: 00007fff0bf1d000
[  112.871828][ T5819]  </TASK>
[  112.871837][ T5819] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  112.891510][ T6385] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  113.550942][ T5821] ocfs2: Unmounting device (7,2) on (node local)
[  114.037890][ T6398] loop1: detected capacity change from 0 to 32768
[  114.048171][   T43] IPVS: starting estimator thread 0...
[  114.057710][ T6403] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  114.085942][ T6398] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  114.136990][ T6409] IPVS: using max 26 ests per chain, 62400 per kthread
[  114.237078][ T6398] XFS (loop1): Ending clean mount
[  114.274078][ T6398] XFS (loop1): Quotacheck needed: Please wait.
[  114.337854][ T6422] loop2: detected capacity change from 0 to 512
[  114.391024][ T6398] XFS (loop1): Quotacheck: Done.
[  114.471975][ T6422] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  114.542136][ T6422] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  114.556764][ T5829] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  114.585129][ T6422] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #2: comm syz.2.147: corrupted inode contents
[  114.639450][ T6422] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #2: comm syz.2.147: mark_inode_dirty error
[  114.675380][ T6422] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #2: comm syz.2.147: corrupted inode contents
[  114.765120][ T6422] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.147: mark_inode_dirty error
[  114.785790][ T6427] EXT4-fs warning (device loop2): ext4_es_cache_extent:1082: inode #2: comm syz.2.147: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18]
[  114.785790][ T6427] 
[  114.929932][ T5821] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.138809][ T6423] loop0: detected capacity change from 0 to 32768
[  115.199289][ T6423] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  115.302208][ T6423] XFS (loop0): Ending clean mount
[  115.318841][ T6423] XFS (loop0): Quotacheck needed: Please wait.
[  115.328653][ T6446] loop2: detected capacity change from 0 to 2048
[  115.402567][ T6423] XFS (loop0): Quotacheck: Done.
[  115.412008][ T6446] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  115.462373][   T29] audit: type=1800 audit(1772460949.520:5): pid=6423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.146" name="bus" dev="loop0" ino=4426 res=0 errno=0
[  115.511989][ T6423] XFS (loop0): User initiated shutdown received.
[  115.554796][ T6423] XFS (loop0): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:462).  Shutting down filesystem.
[  115.686935][ T6423] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[  115.834153][ T5822] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  115.895451][ T6462] loop2: detected capacity change from 0 to 512
[  115.936143][ T6462] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  116.093371][ T5821] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.242663][ T6471] loop2: detected capacity change from 0 to 64
[  116.664729][ T6482] loop4: detected capacity change from 0 to 2048
[  116.703766][ T6482] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  116.811258][ T6482] UDF-fs: unknown compression code (0)
[  117.078452][ T6496] loop4: detected capacity change from 0 to 512
[  117.109461][ T6496] EXT4-fs: Ignoring removed orlov option
[  117.146416][ T6496] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  117.246188][ T6496] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  117.334414][ T6496] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.170: corrupted in-inode xattr: e_value size too large
[  117.397146][ T6496] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  117.405362][ T6496] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.170: couldn't read orphan inode 15 (err -117)
[  117.414645][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  117.414685][    C1] EXT4-fs (loop4): initial error at time 1772460951: ext4_iget_extra_inode:5025: inode 15
[  117.414720][    C1] EXT4-fs (loop4): last error at time 1772460951: ext4_iget_extra_inode:5025: inode 15
[  117.527034][ T6496] loop4: lost filesystem error report for type 5 error -117
[  117.533748][ T6496] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  117.583568][ T6510] set_capacity_and_notify: 1 callbacks suppressed
[  117.583587][ T6510] loop2: detected capacity change from 0 to 1024
[  117.699503][ T6510] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  117.713953][ T6496] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 1336071902 > max in inode 18
[  117.748133][ T6510] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  117.983164][ T5819] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.039793][ T6521] loop1: detected capacity change from 0 to 512
[  118.114649][ T6521] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  118.173501][ T5821] EXT4-fs warning (device loop2): empty_inline_dir:1759: bad inline directory (dir #12) - no `..'
[  118.212099][ T6521] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  118.268596][ T5821] EXT4-fs warning (device loop2): empty_inline_dir:1759: bad inline directory (dir #12) - no `..'
[  118.297615][ T5821] EXT4-fs warning (device loop2): empty_inline_dir:1759: bad inline directory (dir #12) - no `..'
[  118.356813][ T5821] EXT4-fs warning (device loop2): empty_inline_dir:1759: bad inline directory (dir #12) - no `..'
[  118.402227][ T5821] EXT4-fs warning (device loop2): empty_inline_dir:1759: bad inline directory (dir #12) - no `..'
[  118.441047][ T5821] EXT4-fs warning (device loop2): empty_inline_dir:1759: bad inline directory (dir #12) - no `..'
[  118.468882][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.488384][ T5821] EXT4-fs warning (device loop2): empty_inline_dir:1759: bad inline directory (dir #12) - no `..'
[  118.519066][ T5821] EXT4-fs warning (device loop2): empty_inline_dir:1759: bad inline directory (dir #12) - no `..'
[  118.545462][ T5821] EXT4-fs warning (device loop2): empty_inline_dir:1759: bad inline directory (dir #12) - no `..'
[  118.566808][ T5821] EXT4-fs warning (device loop2): empty_inline_dir:1759: bad inline directory (dir #12) - no `..'
[  118.659841][ T6518] loop0: detected capacity change from 0 to 32768
[  118.699649][ T6532] loop1: detected capacity change from 0 to 128
[  118.748841][ T6518] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  118.781265][ T6532] EXT4-fs (loop1): Test dummy encryption mode enabled
[  118.835465][ T6532] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  118.910206][ T6518] XFS (loop0): Ending clean mount
[  118.933288][ T6532] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  118.967891][ T6518] XFS (loop0): Quotacheck needed: Please wait.
[  118.999512][ T6522] loop3: detected capacity change from 0 to 40427
[  119.029319][ T6522] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  119.045443][ T6532] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx"
[  119.055289][ T6522] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  119.074541][ T6518] XFS (loop0): Quotacheck: Done.
[  119.084450][ T6522] F2FS-fs (loop3): invalid crc value
[  119.139933][   T29] audit: type=1800 audit(1772460953.200:6): pid=6518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.180" name="file1" dev="loop0" ino=4422 res=0 errno=0
[  119.315230][ T6522] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  119.378930][ T6522] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  119.396848][ T6522] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  119.406103][ T5822] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  119.443216][ T5829] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  119.459911][ T6522] F2FS-fs (loop3): Stopped filesystem due to reason: 0
[  119.767683][ T6551] capability: warning: `syz.4.191' uses deprecated v2 capabilities in a way that may be insecure
[  120.072219][   T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.312602][ T6549] loop1: detected capacity change from 0 to 32768
[  120.318032][ T6557] loop4: detected capacity change from 0 to 1024
[  120.331267][   T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.393187][ T6549] JBD2: Ignoring recovery information on journal
[  120.410055][ T6557] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  120.422866][ T6557] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  120.454766][   T29] audit: type=1800 audit(1772460954.510:7): pid=6557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.195" name="file1" dev="loop4" ino=15 res=0 errno=0
[  120.549750][ T6549] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  120.575191][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  120.585064][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  120.601524][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  120.614209][ T5819] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  120.631634][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  120.640478][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  120.714200][   T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.883805][   T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.903618][ T5829] ocfs2: Unmounting device (7,1) on (node local)
[  120.948099][   T43] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  120.962126][ T6573] loop3: detected capacity change from 0 to 128
[  121.123159][   T43] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  121.144814][   T43] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  121.166629][   T43] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  121.216996][   T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.268868][ T6569] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  121.303758][   T43] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  121.567940][   T49] bridge_slave_1: left allmulticast mode
[  121.574233][   T49] bridge_slave_1: left promiscuous mode
[  121.585066][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.618827][   T49] bridge_slave_0: left allmulticast mode
[  121.624567][   T49] bridge_slave_0: left promiscuous mode
[  121.640954][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.681528][   T43] usb 1-1: USB disconnect, device number 4
[  121.983746][ T6575] loop4: detected capacity change from 0 to 32768
[  122.031880][ T6575] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.200 (6575)
[  122.076366][ T6575] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  122.110900][ T6575] BTRFS info (device loop4): using blake2b checksum algorithm
[  122.196539][ T6575] BTRFS info (device loop4): enabling ssd optimizations
[  122.210639][ T6575] BTRFS info (device loop4): turning on async discard
[  122.218728][ T6575] BTRFS info (device loop4): enabling free space tree
[  122.225651][ T6575] BTRFS info (device loop4): use zstd compression, level 3
[  122.323107][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  122.466374][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  122.541342][   T49] bond0 (unregistering): Released all slaves
[  122.605634][ T5819] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  122.768228][ T5832] Bluetooth: hci1: command tx timeout
[  123.333140][ T6613] warning: `syz.1.208' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  123.704115][ T6565] chnl_net:caif_netlink_parms(): no params data found
[  123.811436][ T6631] pim6reg1: entered promiscuous mode
[  123.842352][ T6631] pim6reg1: entered allmulticast mode
[  123.958471][ T6615] loop4: detected capacity change from 0 to 40427
[  123.993340][ T6615] F2FS-fs (loop4): invalid crc value
[  124.041018][   T49] hsr_slave_0: left promiscuous mode
[  124.078658][   T49] hsr_slave_1: left promiscuous mode
[  124.096794][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  124.137014][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  124.176590][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  124.195127][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  124.209617][ T6641] loop1: detected capacity change from 0 to 128
[  124.243815][ T6641] EXT4-fs (loop1): Test dummy encryption mode enabled
[  124.294763][ T6641] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  124.316006][   T49] veth1_macvtap: left promiscuous mode
[  124.342493][   T49] veth0_macvtap: left promiscuous mode
[  124.361924][ T6615] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  124.372754][   T49] veth1_vlan: left promiscuous mode
[  124.383077][ T6641] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  124.408025][   T49] veth0_vlan: left promiscuous mode
[  124.424927][ T6615] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  124.517062][  T796] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  124.556800][ T5829] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  124.698241][  T796] usb 1-1: Using ep0 maxpacket: 8
[  124.711910][  T796] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  124.723697][  T796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.733159][  T796] usb 1-1: Product: syz
[  124.738191][  T796] usb 1-1: Manufacturer: syz
[  124.743041][  T796] usb 1-1: SerialNumber: syz
[  124.759472][  T796] usb 1-1: config 0 descriptor??
[  124.778096][  T796] gspca_main: sonixj-2.14.0 probing 0c45:613e
[  124.847273][ T5832] Bluetooth: hci1: command tx timeout
[  125.035204][   T49] team0 (unregistering): Port device team_slave_1 removed
[  125.071060][   T49] team0 (unregistering): Port device team_slave_0 removed
[  125.356927][    C1] list_del corruption, ffff88807ce1c890->next is NULL
[  125.364740][    C1] ------------[ cut here ]------------
[  125.370240][    C1] kernel BUG at lib/list_debug.c:53!
[  125.375641][    C1] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[  125.381934][    C1] CPU: 1 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) 
[  125.391270][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  125.401365][    C1] Workqueue: netns cleanup_net
[  125.406192][    C1] RIP: 0010:__list_del_entry_valid_or_report+0xdf/0x190
[  125.413168][    C1] Code: 49 39 1f 0f 85 9e 00 00 00 b0 01 5b 41 5c 41 5d 41 5e 41 5f e9 52 5c f8 06 cc 48 c7 c7 a0 e8 27 8c 48 89 de e8 12 51 6e fc 90 <0f> 0b 48 c7 c7 00 e9 27 8c 48 89 de e8 00 51 6e fc 90 0f 0b 4c 89
[  125.432813][    C1] RSP: 0018:ffffc90000a08d58 EFLAGS: 00010046
[  125.438923][    C1] RAX: 0000000000000033 RBX: ffff88807ce1c890 RCX: bd40d42f25376d00
[  125.446980][    C1] RDX: 0000000000000100 RSI: 0000000080000101 RDI: 0000000000000000
[  125.454990][    C1] RBP: 0000000000000203 R08: ffffc90000a08ae7 R09: 1ffff9200014115c
[  125.462999][    C1] R10: dffffc0000000000 R11: fffff5200014115d R12: 1ffff1100f9c3912
[  125.471005][    C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000
[  125.479006][    C1] FS:  0000000000000000(0000) GS:ffff888125557000(0000) knlGS:0000000000000000
[  125.487955][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  125.494560][    C1] CR2: 0000200000d83000 CR3: 00000000352fe000 CR4: 00000000003526f0
[  125.502549][    C1] Call Trace:
[  125.505849][    C1]  <IRQ>
[  125.508734][    C1]  dst_destroy+0x202/0x5a0
[  125.513172][    C1]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  125.519001][    C1]  ? rcu_core+0x751/0x1070
[  125.523436][    C1]  ? __pfx_dst_destroy_rcu+0x10/0x10
[  125.528742][    C1]  rcu_core+0x7cd/0x1070
[  125.533013][    C1]  ? __pfx_rcu_core+0x10/0x10
[  125.538844][    C1]  handle_softirqs+0x22a/0x870
[  125.543628][    C1]  ? __irq_exit_rcu+0x5f/0x150
[  125.548418][    C1]  __irq_exit_rcu+0x5f/0x150
[  125.553022][    C1]  irq_exit_rcu+0x9/0x30
[  125.557281][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  125.562939][    C1]  </IRQ>
[  125.565885][    C1]  <TASK>
[  125.568826][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  125.574827][    C1] RIP: 0010:unwind_next_frame+0x18ce/0x23c0
[  125.580748][    C1] Code: c1 e8 03 0f b6 04 28 84 c0 0f 85 42 0a 00 00 49 0f bf 04 24 48 01 c6 4c 89 f7 48 89 da e8 9a 0d 00 00 84 c0 0f 84 46 01 00 00 <48> bd 00 00 00 00 00 fc ff df 48 8b 44 24 20 0f b6 04 28 84 c0 0f
[  125.600377][    C1] RSP: 0018:ffffc90000b971d8 EFLAGS: 00000202
[  125.606470][    C1] RAX: 1ffff92000172e01 RBX: ffffffff90a7c6c0 RCX: 0000000000000001
[  125.614463][    C1] RDX: ffffc90000b972e8 RSI: dffffc0000000000 RDI: ffffc90000b97e18
[  125.622447][    C1] RBP: dffffc0000000000 R08: ffffc90000b97e18 R09: 0000000000000000
[  125.630435][    C1] R10: ffffc90000b972f8 R11: fffff52000172e61 R12: ffffc90000b972f8
[  125.638421][    C1] R13: 1ffff92000172e57 R14: ffffc90000b972a8 R15: 1ffffffff214f8d8
[  125.646417][    C1]  ? unwind_next_frame+0x18c6/0x23c0
[  125.651752][    C1]  ? unwind_next_frame+0xa5/0x23c0
[  125.656887][    C1]  ? worker_thread+0xb46/0x1140
[  125.661768][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  125.667969][    C1]  arch_stack_walk+0x11b/0x150
[  125.672751][    C1]  ? kthread+0x388/0x470
[  125.677014][    C1]  stack_trace_save+0xa9/0x100
[  125.681799][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  125.687202][    C1]  kasan_save_track+0x3e/0x80
[  125.691903][    C1]  ? kasan_save_track+0x3e/0x80
[  125.696770][    C1]  ? kasan_save_free_info+0x46/0x50
[  125.701998][    C1]  ? __kasan_slab_free+0x5c/0x80
[  125.706984][    C1]  ? kfree+0x1c1/0x630
[  125.711072][    C1]  ? kobject_put+0x228/0x560
[  125.715678][    C1]  ? netdev_run_todo+0xfb7/0x1130
[  125.720725][    C1]  ? default_device_exit_batch+0x986/0xa00
[  125.726559][    C1]  ? ops_undo_list+0x52b/0x940
[  125.731344][    C1]  ? cleanup_net+0x56b/0x800
[  125.735955][    C1]  ? process_one_work+0x949/0x1650
[  125.741090][    C1]  ? worker_thread+0xb46/0x1140
[  125.745984][    C1]  kasan_save_free_info+0x46/0x50
[  125.751036][    C1]  __kasan_slab_free+0x5c/0x80
[  125.755849][    C1]  kfree+0x1c1/0x630
[  125.759762][    C1]  ? kobject_put+0x228/0x560
[  125.764465][    C1]  kobject_put+0x228/0x560
[  125.768923][    C1]  netdev_run_todo+0xfb7/0x1130
[  125.773798][    C1]  ? __pfx_netdev_run_todo+0x10/0x10
[  125.779108][    C1]  ? unregister_netdevice_queue+0x19b/0x360
[  125.785026][    C1]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  125.791294][    C1]  ? batadv_meshif_destroy_netlink+0x1b0/0x250
[  125.797482][    C1]  default_device_exit_batch+0x986/0xa00
[  125.803136][    C1]  ? __pfx_default_device_exit_batch+0x10/0x10
[  125.809330][    C1]  ? __pfx_default_device_exit_batch+0x10/0x10
[  125.815496][    C1]  ops_undo_list+0x52b/0x940
[  125.820104][    C1]  ? __pfx_ops_undo_list+0x10/0x10
[  125.825253][    C1]  ? idr_destroy+0x218/0x290
[  125.829864][    C1]  ? do_raw_spin_unlock+0xf5/0x210
[  125.834993][    C1]  cleanup_net+0x56b/0x800
[  125.839423][    C1]  ? __pfx_cleanup_net+0x10/0x10
[  125.844377][    C1]  ? lock_acquire+0x20b/0x2e0
[  125.849074][    C1]  ? process_one_work+0x87c/0x1650
[  125.854208][    C1]  process_one_work+0x949/0x1650
[  125.859173][    C1]  ? do_raw_spin_unlock+0x30/0x210
[  125.864301][    C1]  ? __pfx_process_one_work+0x10/0x10
[  125.869777][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  125.874833][    C1]  worker_thread+0xb46/0x1140
[  125.879544][    C1]  kthread+0x388/0x470
[  125.883634][    C1]  ? __pfx_worker_thread+0x10/0x10
[  125.888762][    C1]  ? __pfx_kthread+0x10/0x10
[  125.893371][    C1]  ret_from_fork+0x51e/0xb90
[  125.897988][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  125.903121][    C1]  ? __switch_to+0xc7d/0x1450
[  125.907817][    C1]  ? __pfx_kthread+0x10/0x10
[  125.912424][    C1]  ret_from_fork_asm+0x1a/0x30
[  125.917213][    C1]  </TASK>
[  125.920244][    C1] Modules linked in:
[  125.924166][    C1] ---[ end trace 0000000000000000 ]---
[  125.929640][    C1] RIP: 0010:__list_del_entry_valid_or_report+0xdf/0x190
[  125.936594][    C1] Code: 49 39 1f 0f 85 9e 00 00 00 b0 01 5b 41 5c 41 5d 41 5e 41 5f e9 52 5c f8 06 cc 48 c7 c7 a0 e8 27 8c 48 89 de e8 12 51 6e fc 90 <0f> 0b 48 c7 c7 00 e9 27 8c 48 89 de e8 00 51 6e fc 90 0f 0b 4c 89
[  125.956217][    C1] RSP: 0018:ffffc90000a08d58 EFLAGS: 00010046
[  125.962300][    C1] RAX: 0000000000000033 RBX: ffff88807ce1c890 RCX: bd40d42f25376d00
[  125.970312][    C1] RDX: 0000000000000100 RSI: 0000000080000101 RDI: 0000000000000000
[  125.978298][    C1] RBP: 0000000000000203 R08: ffffc90000a08ae7 R09: 1ffff9200014115c
[  125.986286][    C1] R10: dffffc0000000000 R11: fffff5200014115d R12: 1ffff1100f9c3912
[  125.994279][    C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000
[  126.002270][    C1] FS:  0000000000000000(0000) GS:ffff888125557000(0000) knlGS:0000000000000000
[  126.011209][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  126.017810][    C1] CR2: 0000200000d83000 CR3: 00000000352fe000 CR4: 00000000003526f0
[  126.025809][    C1] Kernel panic - not syncing: Fatal exception in interrupt
[  126.033592][    C1] Kernel Offset: disabled
[  126.037946][    C1] Rebooting in 86400 seconds..