last executing test programs:

15.630756145s ago: executing program 0 (id=1458):
r0 = socket$inet(0x2, 0x80001, 0x84)
listen(r0, 0x3)
accept(r0, 0x0, 0x0)
shutdown(r0, 0x0)

15.412444716s ago: executing program 0 (id=1461):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)

15.286550494s ago: executing program 0 (id=1463):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0)
clock_adjtime(0xffffffd3, &(0x7f0000000340)={0x6})

15.094860447s ago: executing program 0 (id=1467):
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file1\x00', &(0x7f0000000240), &(0x7f0000000040)=ANY=[], 0xff68, 0x0)
lsetxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1)
setxattr$security_capability(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1)

14.86848853s ago: executing program 0 (id=1470):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x451, &(0x7f0000000480)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000a80)='./file0\x00', 0x0, 0x20000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)

14.378870693s ago: executing program 0 (id=1471):
syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x0, &(0x7f0000009780), 0x1, 0x9716, &(0x7f0000012ec0)="$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")
lsetxattr(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)=@known='user.syz\x00', 0x0, 0x0, 0x0)
setxattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=@known='trusted.syz\x00', 0x0, 0x0, 0x1)
open(&(0x7f0000000140)='./file1\x00', 0x64842, 0x21)

12.953799238s ago: executing program 3 (id=1485):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000ffdbdf25150000000b0014002e0c5b2e265e2e0008000100", @ANYRES32], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x800)

12.839774109s ago: executing program 3 (id=1487):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1})
fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7})
fcntl$lock(r0, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x1})

12.651248443s ago: executing program 3 (id=1489):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x40541, 0x0)
r1 = syz_io_uring_setup(0x1f8a, &(0x7f0000000080)={0x0, 0x403, 0x800}, &(0x7f0000000100), &(0x7f00000001c0))
io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000440)=r0, 0x1)

12.391158928s ago: executing program 3 (id=1492):
syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000000)='./bus\x00', 0x2000000, &(0x7f00000002c0)={[{@file_umask={'file_umask', 0x3d, 0x1}}, {@part={'part', 0x3d, 0x2}}, {@codepage={'codepage', 0x3d, 'cp866'}}, {@file_umask={'file_umask', 0x3d, 0x1}}, {@iocharset={'iocharset', 0x3d, 'cp936'}}]}, 0x1, 0x30e, &(0x7f0000000740)="$eJzs3b9u00AcB/DvnZ02pVExbRESC6hQCZaKAgNiCUJZ2ZkQkKRShFVEWyRgIVSMiAdgYuEVeAgWEC8ALExsLNmM7nx27PjiJGocp+X7kRo55/vzu/jP3VkCg4j+W3cbPz7d+K3+BODAAXAbkACqgAvgLM5Vn+8edA78diuvIkeXUH8CYUmRydPcbduKqnK6hOGpby5qyTQqRhAEd36WHQSVTl/9FhJYNNeh3l+dcVzTMti5LnChpFBKk/wNRA89vMBKieEQEdEcMOO/NMNETScJSAlsmmF/nsf/7FpjhF4xcZTlpp9JCnILJMZ/PbsLhDq+p/Wu/npP/6xqv4xWieMEUxn4voDwzErNwYR9VfkrCJlY5NJOx8VW8w1aEoeoG4kC6/qzFZ66kRHRbkx2vgyvrYJ7p8LeqBnl0uDuKKSdjt9eVBuW+Ncma/HoxBfxTTwQHj6gFc//3ECow6SPlDdwpGRFxX9teI3LupTKBXMp1ut1mcpyRjdy3rRgjOhl1b4iSdYZPSDoxhFY4jyMNnTbq0g/Vgh7t21rQPQrX7OV8uJv2bK6rfVUKcecCVvNp37uo5RiRF0U78V9sYE/+IxGYv4vVXybSFyZebd6oXOaMyPsz4I9p6tzepmRoxtvXYwjMBYn7hsBEz4te4fHuIWV/Zevnji+395TG48sG89qe8KkVN4C1jzFbzjIyYNuP0UPHq+DYNyag3TKx7/AUUJVQ18/5epUfwR1/4hT1OVjy6yusjhFFn10ohFvWhV6mP2plb/hwrar8RV5J2ShG9HUZSoVqonWkF1Tvz/RHNoX0UE3CZlJLJ1wat4lwvWfnsmbWZ2+z6gPL2eenr/IRKrG7XgFl54KrtrmLiPWBsvDV3CJFq8PWTPqNdelK8DlRKJAbouejvPEEA18x0M+/yciIiIiIiIiIiIiIiIiIiIiIiIiOm5m8S8Wyu4jEREREREREREREREREREREREREREREdFxN/77f5f6b2qy/R/x+v2/3sj3/6ZeAGxeFMX3/xKV418AAAD///k/d1Y=")
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={[{@dyn}]})
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}]})

12.038421674s ago: executing program 3 (id=1496):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$f2fs(&(0x7f0000010600), &(0x7f00000001c0)='./file0\x00', 0x3004050, &(0x7f0000000540)=ANY=[], 0x5, 0x10629, &(0x7f0000020c80)="$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")
mkdir(&(0x7f0000000200)='./bus\x00', 0x100)

11.59514869s ago: executing program 3 (id=1498):
r0 = syz_io_uring_setup(0x45b4, &(0x7f00000035c0)={0x0, 0xfffffffc, 0x10100}, &(0x7f0000000140)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0})
io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0)

11.11566328s ago: executing program 32 (id=1498):
r0 = syz_io_uring_setup(0x45b4, &(0x7f00000035c0)={0x0, 0xfffffffc, 0x10100}, &(0x7f0000000140)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0})
io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0)

3.841299462s ago: executing program 2 (id=1541):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB="88000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fedbdf251200000008000300", @ANYRES32=r2, @ANYBLOB="0a000600ffffffffffff0000440081000500010009000000050002"], 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4000004)

3.246443826s ago: executing program 2 (id=1543):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xe, 0x3}, {}, {0x5, 0xfff1}}}, 0x24}}, 0x40004)

3.016163626s ago: executing program 2 (id=1546):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@dioread_nolock}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa}}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
truncate(&(0x7f0000000000)='./file1\x00', 0xd105)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0)
lseek(r0, 0x0, 0x4)

2.562545718s ago: executing program 4 (id=1549):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0xfffff000, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.461605303s ago: executing program 4 (id=1550):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
shutdown(r0, 0x1)
pipe2(&(0x7f0000000000), 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, &(0x7f0000000240)={0x1f, 0x0, 0x10001, 0x0, 0x5, 0x0, 0x5, 0x2000000000}, 0x0, 0x0, 0x0)

2.445652632s ago: executing program 2 (id=1551):
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x78, 0x7, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)

2.331052245s ago: executing program 4 (id=1552):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000026c0)=ANY=[@ANYBLOB="280000001d000100000000010000000007000000", @ANYRES32=r2, @ANYBLOB="800002000a0002"], 0x28}, 0x1, 0x0, 0x0, 0x4041}, 0x0)

2.276029615s ago: executing program 2 (id=1553):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000240)='./bus\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="6163746976655f6c6f67733d342c646174615f666c7573682c66617374626f6f742c6a71666d743d76667376312c6e6f696e6c696e655f64656e7472792c7573726a71756f74613d66326673002c00ff371013587045d0d273e856ce75c2b11120ece6d6a76856a2cdd8c835ef14aa3aea583b7f3affd12ff9abc9b21098874a75607f009920ad1a283ce7b8b528e239692ab156e30dd8365f708e6c98cfcd0b30d5304dd70f87da026e2d4e4df1ad07ba72683f43d76541d455d1fa118f0900000009fe28bfded255e7c5806f05b80ec0e186b4f72759eb096a1fe6793e734fe61555f01ff9f23bc11370aa247215e8f1410ea4728bb2a2c2d20bc5e61b0a4c7ddb25da21c75f35f711581d1f5b8db3be07c80000000000000000"], 0x1, 0x54f4, &(0x7f0000005600)="$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")
r0 = open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0)
fallocate(r0, 0x0, 0x0, 0x7000000)
link(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file2\x00')

2.207786634s ago: executing program 4 (id=1554):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)={0x20, 0x11, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000180)={0x1, 0x9, 0x7, &(0x7f0000000100)={0x8, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe17a04bc517b5452b3b94bce47509d"}})

1.633029025s ago: executing program 1 (id=1557):
socket$nl_xfrm(0x10, 0x3, 0x6)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SCROLLCONSOLE(r0, 0x4bfb, 0x0)

1.440962038s ago: executing program 1 (id=1558):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000240)={[{@test_dummy_encryption}, {@nouid32}, {@stripe}, {@noblock_validity}, {}]}, 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==")
mkdir(&(0x7f0000000040)='./bus\x00', 0x0)
r0 = open(&(0x7f0000000980)='./bus\x00', 0x30000, 0x1b0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x4000)

1.099405901s ago: executing program 1 (id=1559):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x8601, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0xa0000005})
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000100)={0x80000001})

817.880919ms ago: executing program 2 (id=1560):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10)

686.229775ms ago: executing program 1 (id=1561):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[], 0x98}}, 0x4000010)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, &(0x7f0000000040))

335.158581ms ago: executing program 4 (id=1562):
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000040)='./file1\x00', 0x80c406, &(0x7f0000001fc0)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRES64, @ANYRES32, @ANYRES16, @ANYBLOB="5b2870244b9333119db7984f27099b7a72cda67151b6960c424249e2fc1e3ee9ade4b488a3cf5ac81526431c16eacc2c72a1505cc0752d5ac3005d4003eab79a7609241cb460a739da399287690d04e8cede5a7a8f38fe67ea723ab8fbab6b49f089f7c012b7d6fd6d016c4a7dd593138359ac238271ab9fef8ca696b6cfcb5cd4a955ff2d404eda357084532bafe9f7be4016c1ef149d25e2402c8a74926d7045c031dc97a7301a6fe3e750740a09d528a85c91c59b75c3ed24614dd5444f9bedbf0d39ecdf93c4e59da78639f3538975c61e1fd3c2bb51b0fc838a5467be15fa62b2dc84b8a95353b3cf481201a34e9bdf9f221a5f2f8718e6b9ef55b9b3c61de023550dc7afb019fa2d114ade07435ed7f28b17ffc3a02b8927dd149af8b93b5f897f2acf0fd254648dd5f7a0daa223afdf12bbbe3e215e9a2a66e7bbb77f48058d2172f905e27a9ff46db36fe32c310ac945203c4e39b2d2b8134231b3fa7eb65d42431a21e347390f217287dbeaf2beefb26c21a1549d0e134490b7fa755d1aa55dfd7b0f9c16eac37229589c6facaba7464d9eb479de3ba4a4b93793be68cfb69f8621ef202fb96c8bac70c716f4ea89953d863ac22f819051e3d59e8f770595a32b3aed6957ccfa1c1fafcc3b73b8a413c2e4ea304f228d4d5e67dfd040ae5de4196f5d14a6e774a1350d721b696f43c41de27e59b749cc0c77242458cfcce83cc94ad30d4590072b99d3cca0e6d226b8cf34ecb73afb1358777ce575aa21f01eb374925ed8045e765464918df624c3f91dfb48f5cb9a71789fd2c660c1c10bef89914f734d9234df03e5cc86442784a71580dd3385d4d54e35754d3f54a22f14d8544decf04b21df1cdeac25c72527aef8d9266425911c0c40b17088cfa7469282c7e9b67ae12b292f5de36d16ae7765d32bd6d29d742bc65de0f21378d0c75ca7f5d78fb370c30db2bd20619cc24945d78489da936971683617bab89fecaa9b4c1384a8c49bcc0e2676e921e823281714d7daddf6fe62b0ebeb0ba1e4c9b8d25311bf1fa0d475b9fc485e9e1056704df9b7954055d371e934a27eb7db9a4bda6b4efcee3c9e99401681f94c002c5dadd83e0ec032a6dddd70e86fba5ff40b139863f8d255e2824c4bcb065b3bc841c3e16ec6425a5b8eb3dd137a8cefa80148b2c74e9ca89be3847a4320623f61e4264fb818675906828a99b7acea67677d926ec530f62eb3e61f2c3db9ab16472d46139bf579751728367a1598e78550a5517e08ac7bc8b26613ac1b549438aeb90251c0e84751a54712e5e7dd2c72a3cfea5fd90e507292e1de36400c241e4115e898f52f8a616b84053f65b79f17f9058d5ff967d114a28be4ef1202ac768e9e17bcee6722b6d7e05dc521eb463c8d8125932373f1c8b9708b09885ab74c8c100670078a9d5a45782ff08f06c76dc7f6f66ee9d7c4f9c25f1d59fcb973a165308961a6102b70cdef7c15b410705196d088e8c5a8658c2cc2fd8c3d24e3720407cdf7829348f5e22fe0b32b9b460999ad5b333f836c29cffdc4c04f2ee3fb336d1e2a312005e575a75aa89e9bf02e279dad7022c65ef861321b5e665792bc8e204cc65b7d6bf2410b5e9c12b364cd0666e1bba6f9cd7dd48e7d9b0ca28f0c484ac34cc7fd78163a2b06e5737b1556449e4293a03336da86854bf8b26e2153f74be56b3c0d932547e01753837f61c64d55ed3de6e11fd5824ba0e4ec8a7ec43ea8fd66865e8c6330afcc95609bd153bd2121dfa6a5e203e1010fbaa98e01f4b4f3545069f61165f380cd6cfc9bd38814e8b7fb48963e0e1e532bec10f0a38ab70ccd7af8c36a2e6b2a963513b4585f4c007d9de54ed4c73ddb15f3ffd6f9947aade45fc2a29e63efddaee898de08ac2bd65adfb6a2341c6b9c2c2912c9ac9d7ae6a612c87fd8409bb931673f070a7e470ed96c261f5da37eb5bedba2ea9c1d8cd576ec7fe2f804d63fa303cd20b687c8a1b9b0bf2ed24e748d572aa26def2d0eca474f81e854290c876b90159892380d90fc8a9a63a613f9bea54a06d5ba763a6aedfbab088d3c5c101e02a49dd589d089baab9b333b460c670d550c2e95a8f3936989325f5737feb9c6b57cd40fcf6a8f27051301273fca445be7e9f5d4800cbf72e1c8eef6874bf4e7f697d501a5c39e522d5fb969a347d1b70d7920b9149efd81ad2ad3f7a992239390a4b0079c8f446cc7e2cad70db94f1aa838bf2be7fe64bd6b050705aca79aa037df451287159f4108d3b46a58d37ae63643502a95bd3147626a54fd7a959a8cbb30d936739370558fe98c789ba0b9132e20b2a96fafd16f7f7d52902a93fbcb73ec133c32ed14bd3b94e46f25c7d3cce027b193bb8e96983c430824b57d554082c5e87788da69fd86d3ee122426d048bbbef994c5a52bbb2daba0491bbb536743e6f704e114e8db10c10a00ef6f786f845a375963aa1d50162907257d526b031f0871fb9c0ed44e0f8300dd2bc67c54d2570be058192ddcee038b17616ad029ce63ff4b181e4e521315fec87c0c96ec9965b929f8f1a9098f3bf2dfb1845f243a8ddae6076a8c3a688f4aa97af532087f1b237545458cabf2256f2d08bc86e57b430913e8091f446311e70ae6aeb65549c5e139c67b6af0aaffe4195dd8a1e7e2d216d93f7d752d8ff8a8621bcdc0879dacd363ee8061eb4d5354bae3c536ef27e37811f6702c6e54ce5119cd05a9efca49e5a7b6e0d27480de32485e0276bc64be305dbe91e8754fde78248f51a97e524c7286f16f817cc506ab2eaede583787c3c978dcd37e98e14d0944c7d1792e092e821491b68ad45af2ba0ed62e127b3ca411be220563cd0f44fc55990ba995a58df79e0a665624d0f8d82ae9b2310c6a6bea43ede916b87752aa9f1120101b30a41d7685830c4afe1ba33a258d2b9990363a42f981ab55a5c27638ec1891b431692383da9ad4166dc8e682a733bbe885532bf3dfd56c92bff44daef74c176ece70188a1fa77c000c52076f56da95aded1fc786fd64ce984f646888612e90af60028b2b783cff225862f052f53f60502c4db370f232ec28ce182b617433e0df27e70e600f5a2e98735cd3fec067a6e0ce0f5b6dbd5622da4734488a1cd9e8ac00b5e9c51befd84adfa3dcf2ba2ade65ae2c83e51962c41166527e46ce67f18657396c3927ad42fd1534dd34d7c39cec1b1d6ab502a574c6683f62e0d6aafaf2a3ee38cc4cb89e9f111869b1d3ee4b2b5b8e0480797463ddf7be0afc50b9faedcb63ffafe919a44364179bc65a6487530127a9ff8b6e5e1c0c081c92aa9dfcaff3c8909eec17d1c17eace7f48a571bb1bda365bf91aee9e4996ea5114824888d409134830d0db15b964b0cae19c876e5d1cdbc30a86ef98f160a1a847cecc72e12a648bf78a66e5dd34244190dc053ca3c3be99295047667b1a30c6b472847e06c50c2f9b57fdedf4e3d45341dfb185c2331faf66a2e9e92a95b67baac77bdf0a6af4921e92847ccd92c4ea663bdc0cb7f168e2943901d68438805f7c07ab17b11818f71657a4d1265ba0d620c05571869d04b62aa531b97cb674daa3981b2673601c52196d41af5a49b87c0e24c675fb1d44bf75e352ded7e893cf8037d6d9e77cd14f5effaf029e3a3edb9daa9f181b095dbdb8267b286906d5b6397d3939182843c3ab61542b90fc616f3c0bc1939540486b2a350e4e1067a0281ff34ecc13eb5416f25e8d3b9dc71988fc47a30f2f82ad5226c23c628ad41ea1dce29e3a78aef4342b3b5b8f8abb9453f12a88658654de9424123fb14204a7b30329e7585345fbec32d6a1ae4309725b49f0210cd349743a2cf22129dd49bec3d813569e7cd3bbb199ee62fabe4b1cbbd944125aa106d364686b7c0973142b4b0d5f46c21ce0b42076542b275cb34dafa3720cbdec9c5f182a352a31b2a911c8296ede47eff78315abdd8ec8ef39f650e12e0628177916e8278b8ae6129ed26a399cbf967149b9a67e636800d905b7cf723e1e21bcbfbb22e57b40c567c62eabc20cc2f48bb1dce0389c565c7ba6ea1332634c0aeaeed393edf2adcabf871a6ec9dbbafbc278dd1d36a41f0f5f9702cd56f4b6047504235bae489c5cb78e76ee949be68fc55f8d9be3c10672a4048074482567de5cf33eecfb012d2c400c74cefdd0f587920f5ebd65913e57ac0083e06874d4f3328991e5072174eb452d5a96ed8278f505e681b50b0817ea8e8e04a0505f81b3ab5896b6488987546b5fe3547a95c6f3850582daeedf51593d9755cc17029bea85cb79ed80bdcaa6418d7a021237f00372e8cbea7028232f25970c53a7dae4a08b0f96e9b895c6a95e95a591285cfd00831c0b357abbf85888d78938a615a97787ea3c4ddf7049ec49596523c71d45df39d5b6c18a8a5c771118ac4f7c178e49918067f7857a45c312f0718dbb5d99bf6b0730ed013f91f80467f328939051a619173842f08982f6e7f36682f52dce9d815653825b5d4b2a86e65a049923a40189131d45c25ee97f8979cac9e1816e7ff690b6da4e4f2cbe18b17bb0dabf648ac7ea6a88f263ef4ebf4c3893d3a740f8de86a09443845d02b26ea656de90919887b338b877476aa2be9d2fe192fe99fa52af9cb1f1a40902000fb3e48ef2fb4d4853a9b6ed2e90936de55a58e60e6aef3081b7bcb4226c0dafc3e8b3f23334c34ce712f8eca141f078e45ad466fe79517436c130d81b9074f46b417ee53aa7ae0766806390f6b57b6ca4228697ecd7b6583c0aa2a20aa796af870918a5d3cb327b98fde106b4cc1f2022d0c5be4a6f6e41149613d5043334fd095162abb175a12881ef68789c15b496e6c23cb54326c2efd2bda6b6588a6c0c9fc2d8b1035f8b5d3c8938fdac12b2f0b5821c115c283fc355f345d218ab6516639cfd2d3d9c596eca34a4dcfc19ec353320458c85bb2703a4f7913d11634ee5b2098f9889abb5fd01e24edcdfe10491394d3ae2c51056f8054f1c798dca0ea74f117816faccf6ed818c87c31ec0590e84cea1b5748a9d4ca7110f581b763ca3e1c5b2cdbb019d78d266bede291db13b0a5ac6366b384aa9de9c2df0f48bd07e8d84bb23e8b224aa1afd09ba5f6ffbd4e7cfcc14ac3e2ca39a317f42e25ff312c260499923d76d81d2198b606cb0e91419991b4095e74e1b37736e0929d3e1a62c7678a092fafa7dd80e4eb99bbd91da92aa79bfa8c1f8bd33b76a1460f4ae9c102f78426ebaaebd2c108d26f044d3c561c399f606e2895103fe13c35a1333cb9cf4fe339fa5b9b02b5d88b027dbce6597f1484ac6ed0750afb745d47ee42e44386bb3d5ee3bc43e4be7f82ab0085b425c450ebd67272d1c40843dac280a77faeb3de66e96d6a97a154b117b52fd53886208f309757ab387a46bdac6ffdce90a8a3599611a0f4287b7200363476a3588dc75996a0eb3d0241976aa333b3bc01fe1513956c803cffdd28713755b974a6dae6f27a9cde314c446ccfeadc3517ffb88cc4ecf1fe986805d512e9dd385bdd86d1b5657f41307ff398eddbdcc7a60acfcdd8b5e855924253e20501f4b1a5cc600f0ed7719f46f213f18d65a4a10a1fd2c118fb46746d96f4d975860d9ec5152cea6b7552a1512eac7cec297ce86f46ace8a796db1395e124ee4f4c88f693356ac62a348a30de6de564f229cf35cd8c7b6faad09c068158940082fd1fa237b0516652106fcb11b96ebf29e50b52c04eb053506120ce27459958981d9beeafb2d8d075f4286c69a0f6d6b2d2a16c813b7256f363095ced98dcc4938c"], 0xff, 0x2b3, &(0x7f0000000ac0)="$eJzs3MFrE08UwPGXTZtN+6NpTz/Qiw+96GWp8aiCUVoQA0raiHoQtnSrITEpu0ETEczZk39H8ehNEPHeu3+AtyBITz25kmSz3cakYl0TTb+fy87O26FvMt3ypnTavvf6SXnLs7bsuhhpFUOkJfsiS1KSvkRwTXXbqbBfrmalJReWn+69Wrv/4FYun18pqK7m1i9lVTVz5v2zF2/Ofqj/d/dtxjRld+lh+2v28+7/u6fa39YflzwteVqt1dXWjVqtbm9UHN0seWVL9U7FsT1HS1XPcQ/Ftyq17e2m2tXNhflt1/E8tatNNaSp9Zqmg6yqalmWLsx32mk5QVK/PKK4UyjYuaGhE/XJTTfXzdlJEZn7YU2LO5PJCAAATNLo+t8In+nX/8Zg/S/yk/r/ZfBU5l3s9X9Swvq/7HTr/7rbVPuRXYrW/zhS8drI+v8Ixp9JBr8j0YrcXD8Uct3c3PBB1P8AAAAAAAAAAAAAAAAAAAAAAPwL9n1/0ff9xc7VEBE/uDdFJBm5HzKUE+JTILr+fv9kT7D+6aPXH1MgcnAvLfKl1Sg2ionutRdfvZlfWdauyMG/vUajmAzjF3txPRyflfkgnh0aT8n5c714J3bjdj6Mtz/2rpuRPGeCn0cHWjF/EgAAAAAATC9LQ0thZ1rC/b1lqSmD8e7+vdvobMv7vx8Y2N/PyOmZMU4EAAAAAACM5DWfl+1KxXHH00iO8WsduyFyvOGXfTOWNJIiEukxg6WKPlNYE4lvyik57pQHGqY4/WzHu3CfcpP/thndyMT4ol2JLTE/IdLrmQ3WbOAt4C/8AAAAgOlysB+YdCYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJxc4/gXaJOeIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPC3+B4AAP//iGirAg==")
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

199.276558ms ago: executing program 1 (id=1563):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r1)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x48, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0xffffffffffffffff}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x841}, 0x8004)

90.832125ms ago: executing program 4 (id=1564):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
clock_gettime(0x0, &(0x7f0000000040))
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

0s ago: executing program 1 (id=1565):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
chdir(&(0x7f0000000480)='./cgroup\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
open_by_handle_at(r1, &(0x7f0000002780)=ANY=[@ANYRES32=r0], 0xdd9c83)

kernel console output (not intermixed with test programs):

e flag for FREE_SPACE_TREE_VALID (0x2)
[  186.720466][ T8295] XFS (loop1): Quotacheck needed: Please wait.
[  186.773719][ T8289] BTRFS info (device loop3): rebuilding free space tree
[  186.796054][ T8289] BTRFS info (device loop3): disabling free space tree
[  186.803386][ T8289] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  186.813754][ T8289] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  186.848427][ T8295] XFS (loop1): Quotacheck: Done.
[  186.908846][   T37] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared)
[  186.937723][ T1330] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared)
[  186.994469][ T7199] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  187.019542][ T5834] BTRFS info (device loop3): last unmount of filesystem 979d12ad-3c23-4b9e-9054-48b63013de2b
[  187.031894][ T5840] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  187.514087][ T8358] loop2: detected capacity change from 0 to 1024
[  187.530373][ T8363] loop3: detected capacity change from 0 to 128
[  187.946562][ T8371] loop2: detected capacity change from 0 to 512
[  187.974270][ T8373] bond1 (unregistering): Released all slaves
[  187.980461][ T8371] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  188.020023][ T8371] EXT4-fs (loop2): invalid journal inode
[  188.048162][ T8371] EXT4-fs (loop2): can't get journal size
[  188.124198][ T8376] loop0: detected capacity change from 0 to 4096
[  188.143237][ T8371] EXT4-fs (loop2): 1 truncate cleaned up
[  188.164656][ T8376] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  188.184970][ T8371] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  188.445775][ T7199] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.565676][ T8387] loop1: detected capacity change from 0 to 512
[  188.568153][ T8390] mmap: syz.2.847 (8390) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  188.596865][ T8387] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  188.633293][ T8387] EXT4-fs error (device loop1): ext4_orphan_get:1419: comm syz.1.846: bad orphan inode 131083
[  188.646563][ T8387] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  189.058160][ T5840] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.257157][ T8409] loop2: detected capacity change from 0 to 1024
[  189.287295][ T8409] EXT4-fs: Ignoring removed oldalloc option
[  189.318081][ T8409] EXT4-fs: Ignoring removed orlov option
[  189.348682][ T8409] EXT4-fs (loop2): stripe (1570) is not aligned with cluster size (16), stripe is disabled
[  189.372329][ T8391] loop0: detected capacity change from 0 to 32768
[  189.389117][ T8409] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  189.437624][ T8391] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.845 (8391)
[  189.483931][ T8391] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  189.525425][ T8409] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt.
[  189.533119][ T8391] BTRFS info (device loop0): using sha256 (sha256-x86_64) checksum algorithm
[  189.566405][ T8391] BTRFS info (device loop0): disk space caching is enabled
[  189.590744][ T8391] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  189.593082][ T8409] EXT4-fs (loop2): Remounting filesystem read-only
[  189.726595][ T7199] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.809067][ T8408] loop1: detected capacity change from 0 to 32768
[  189.824835][ T8391] BTRFS info (device loop0): rebuilding free space tree
[  189.834470][ T8408] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  189.874667][ T8391] BTRFS info (device loop0): disabling free space tree
[  189.881650][ T8391] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  189.926012][ T8408] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  189.949137][ T8391] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  190.031896][ T8408] overlayfs: upper fs does not support tmpfile.
[  190.060024][ T8408] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  190.073406][ T8408] overlayfs: failed to set xattr on upper
[  190.079193][ T8408] overlayfs: ...falling back to redirect_dir=nofollow.
[  190.123620][ T8408] overlayfs: ...falling back to index=off.
[  190.131799][ T8408] overlayfs: ...falling back to uuid=null.
[  190.156651][ T8408] overlayfs: upper fs missing required features.
[  190.183315][ T8447] netlink: 'syz.3.864': attribute type 5 has an invalid length.
[  190.196517][ T1330] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared)
[  190.279224][ T5831] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  190.393739][ T8453] loop3: detected capacity change from 0 to 16
[  190.408663][ T5840] ocfs2: Unmounting device (7,1) on (node local)
[  190.419813][ T8453] erofs (device loop3): mounted with root inode @ nid 36.
[  190.479758][ T8453] erofs (device loop3): corrupted dir block 8200 @ nid 36
[  190.504092][ T8453] erofs (device loop3): readahead error at folio 12 @ nid 36
[  190.534169][ T8453] erofs (device loop3): readahead error at folio 9 @ nid 36
[  190.551554][ T8453] syz.3.869: attempt to access beyond end of device
[  190.551554][ T8453] loop3: rw=524288, sector=67108872, nr_sectors = 16 limit=16
[  190.613312][ T8453] syz.3.869: attempt to access beyond end of device
[  190.613312][ T8453] loop3: rw=524288, sector=720, nr_sectors = 8 limit=16
[  191.156947][ T8466] sctp: [Deprecated]: syz.1.873 (pid 8466) Use of struct sctp_assoc_value in delayed_ack socket option.
[  191.156947][ T8466] Use struct sctp_sack_info instead
[  192.064852][ T8477] loop3: detected capacity change from 0 to 32768
[  192.078384][ T8477] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.877 (8477)
[  192.132742][ T8477] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  192.165102][ T8477] BTRFS info (device loop3): using sha256 (sha256-x86_64) checksum algorithm
[  192.178454][ T8477] BTRFS info (device loop3): disk space caching is enabled
[  192.199832][ T8477] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  192.360662][ T8477] BTRFS info (device loop3): rebuilding free space tree
[  192.443947][ T8477] BTRFS info (device loop3): disabling free space tree
[  192.450953][ T8477] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  192.492624][ T8477] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  192.504694][ T8537] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  192.533562][ T8537] batadv_slave_1: entered promiscuous mode
[  192.588270][ T8537] netlink: 24 bytes leftover after parsing attributes in process `syz.2.899'.
[  192.688361][   T12] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared)
[  192.823653][ T5834] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  193.082744][ T8544] loop2: detected capacity change from 0 to 1024
[  193.335756][ T1330] hfsplus: b-tree write err: -5, ino 4
[  193.356931][ T8532] loop0: detected capacity change from 0 to 40427
[  193.398041][ T8532] F2FS-fs (loop0): invalid crc value
[  193.717770][ T8532] F2FS-fs (loop0): Start checkpoint disabled!
[  193.737562][ T8532] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  193.868144][   T13] kworker/u8:1: attempt to access beyond end of device
[  193.868144][   T13] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  193.890589][   T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.15.0-next-20250606-syzkaller #0 PREEMPT(full) 
[  193.890620][   T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  193.890635][   T13] Workqueue: writeback wb_workfn (flush-7:0)
[  193.890691][   T13] Call Trace:
[  193.890699][   T13]  <TASK>
[  193.890708][   T13]  dump_stack_lvl+0x189/0x250
[  193.890735][   T13]  ? __pfx_dump_stack_lvl+0x10/0x10
[  193.890752][   T13]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  193.890785][   T13]  ? __pfx_queue_work_on+0x10/0x10
[  193.890805][   T13]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  193.890836][   T13]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  193.890872][   T13]  ? f2fs_hw_is_readonly+0x39b/0x470
[  193.890904][   T13]  f2fs_handle_critical_error+0x37c/0x540
[  193.890939][   T13]  f2fs_write_end_io+0x495/0x810
[  193.890966][   T13]  ? blkg_put+0x22/0x240
[  193.891013][   T13]  __submit_merged_bio+0x27a/0x6a0
[  193.891047][   T13]  __submit_merged_write_cond+0x255/0x530
[  193.891083][   T13]  f2fs_write_data_pages+0x261d/0x3000
[  193.891158][   T13]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  193.891205][   T13]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  193.891284][   T13]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  193.891328][   T13]  ? trace_f2fs_writepages+0x7f/0x200
[  193.891355][   T13]  ? f2fs_write_node_pages+0x478/0x6e0
[  193.891388][   T13]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  193.891433][   T13]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  193.891463][   T13]  do_writepages+0x32b/0x550
[  193.891503][   T13]  ? reacquire_held_locks+0x127/0x1d0
[  193.891523][   T13]  ? writeback_sb_inodes+0x372/0x1000
[  193.891566][   T13]  __writeback_single_inode+0x145/0xff0
[  193.891586][   T13]  ? do_raw_spin_unlock+0x122/0x240
[  193.891616][   T13]  writeback_sb_inodes+0x6b5/0x1000
[  193.891690][   T13]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  193.891776][   T13]  ? rcu_is_watching+0x15/0xb0
[  193.891820][   T13]  wb_writeback+0x43b/0xaf0
[  193.891863][   T13]  ? queue_io+0x391/0x590
[  193.891898][   T13]  ? __pfx_wb_writeback+0x10/0x10
[  193.891943][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  193.891982][   T13]  wb_workfn+0x409/0xef0
[  193.892032][   T13]  ? __pfx_wb_workfn+0x10/0x10
[  193.892074][   T13]  ? __lock_acquire+0xab9/0xd20
[  193.892119][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  193.892159][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  193.892189][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  193.892218][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  193.892252][   T13]  process_scheduled_works+0xae1/0x17b0
[  193.892324][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  193.892380][   T13]  worker_thread+0x8a0/0xda0
[  193.892437][   T13]  kthread+0x70e/0x8a0
[  193.892465][   T13]  ? __pfx_worker_thread+0x10/0x10
[  193.892483][   T13]  ? __pfx_kthread+0x10/0x10
[  193.892509][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  193.892540][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  193.892559][   T13]  ? __pfx_kthread+0x10/0x10
[  193.892585][   T13]  ret_from_fork+0x3f9/0x770
[  193.892620][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  193.892657][   T13]  ? __switch_to_asm+0x39/0x70
[  193.892677][   T13]  ? __switch_to_asm+0x33/0x70
[  193.892703][   T13]  ? __pfx_kthread+0x10/0x10
[  193.892728][   T13]  ret_from_fork_asm+0x1a/0x30
[  193.892772][   T13]  </TASK>
[  193.892781][   T13] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  194.220700][ T8569] IPVS: set_ctl: invalid protocol: 255 172.30.1.3:20000
[  194.229237][ T8565] loop4: detected capacity change from 0 to 1024
[  194.244573][ T8565] EXT4-fs: Ignoring removed orlov option
[  194.250286][ T8565] EXT4-fs: Ignoring removed nomblk_io_submit option
[  194.325001][ T8565] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  194.460095][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  194.466646][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  194.530725][ T5833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.614557][ T8581] loop2: detected capacity change from 0 to 64
[  194.755960][ T5901] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  194.798376][ T8585] loop2: detected capacity change from 0 to 256
[  194.831222][ T8585] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d)
[  194.853393][ T8585] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  194.918806][ T8585] exFAT-fs (loop2): valid_size(150994954) is greater than size(10)
[  194.933557][   T30] audit: type=1800 audit(1749274639.834:50): pid=8585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.920" name="file1" dev="loop2" ino=1048622 res=0 errno=0
[  194.973597][ T5901] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  194.993826][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  195.023019][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  195.044478][ T5901] usb 4-1: New USB device found, idVendor=056a, idProduct=010e, bcdDevice= 0.00
[  195.053837][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=32, SerialNumber=0
[  195.078383][ T5901] usb 4-1: Product: syz
[  195.097638][ T5901] usb 4-1: config 0 descriptor??
[  195.722596][ T5901] hid (null): nested delimiters
[  195.732615][ T5901] wacom 0003:056A:010E.0003: nested delimiters
[  195.756338][ T5901] wacom 0003:056A:010E.0003: item 0 2 2 10 parsing failed
[  195.773770][ T5901] wacom 0003:056A:010E.0003: parse failed
[  195.816789][ T5901] wacom 0003:056A:010E.0003: probe with driver wacom failed with error -22
[  195.950931][ T5950] usb 4-1: USB disconnect, device number 3
[  196.066206][ T8595] loop2: detected capacity change from 0 to 32768
[  196.089398][ T8595] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  196.138270][ T8595] XFS (loop2): Ending clean mount
[  196.148426][ T8595] XFS (loop2): Quotacheck needed: Please wait.
[  196.192204][ T8595] XFS (loop2): Quotacheck: Done.
[  196.243098][ T5836] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  196.323207][ T7199] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  196.416970][ T5836] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  196.432995][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.450986][ T8626] loop1: detected capacity change from 0 to 64
[  196.457538][ T5836] usb 5-1: Product: syz
[  196.467355][ T5836] usb 5-1: Manufacturer: syz
[  196.488320][ T5836] usb 5-1: SerialNumber: syz
[  196.512356][ T5836] usb 5-1: config 0 descriptor??
[  196.545787][ T5836] gspca_main: sunplus-2.14.0 probing 055f:c230
[  196.716672][ T8630] loop2: detected capacity change from 0 to 2048
[  196.751766][ T8630] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  196.762788][ T8632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.935'.
[  196.792459][ T8630] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  196.815412][ T8634] loop3: detected capacity change from 0 to 16
[  196.828897][ T8634] erofs (device loop3): mounted with root inode @ nid 36.
[  197.378605][ T5836] usb 5-1: USB disconnect, device number 7
[  197.446516][ T8660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.948'.
[  197.528823][ T5852] Bluetooth: hci3: Malformed LE Event: 0x0b
[  197.626023][ T8670] loop1: detected capacity change from 0 to 128
[  197.649553][ T8670] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  197.666384][ T8670] ext4 filesystem being mounted at /195/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  197.764365][ T5840] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  198.081925][ T8688] loop3: detected capacity change from 0 to 512
[  198.097664][ T8688] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.961: iget: bad extra_isize 50264 (inode size 256)
[  198.112658][ T8688] EXT4-fs (loop3): Remounting filesystem read-only
[  198.121915][ T8688] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  198.292133][ T8688] PKCS7: Unknown OID: [5] 1.8.48.48.48.48.48.48.44.110.111.105.110.105.116.
[  198.313055][ T8688] PKCS7: Only support pkcs7_signedData type
[  198.340407][ T8697] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  198.361055][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.609396][ T8709] loop3: detected capacity change from 0 to 16
[  198.617718][ T8707] loop0: detected capacity change from 0 to 2048
[  198.625611][ T8709] erofs (device loop3): mounted with root inode @ nid 36.
[  198.636841][ T8707] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  199.015512][ T8720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.973'.
[  199.057162][ T8721] tun0: tun_chr_ioctl cmd 1074025677
[  199.079901][ T8721] tun0: linktype set to 776
[  199.355759][ T8723] loop2: detected capacity change from 0 to 32768
[  199.421886][ T8723] JBD2: Ignoring recovery information on journal
[  199.461082][ T8723] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  199.561440][ T8723] OCFS2: ERROR (device loop2): int ocfs2_reserve_suballoc_bits(struct ocfs2_super *, struct ocfs2_alloc_context *, int, u32, u64 *, int): Invalid chain allocator 71
[  199.579738][ T8723] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  199.589702][ T8723] OCFS2: File system is now read-only.
[  199.595631][ T8723] (syz.2.975,8723,1):ocfs2_reserve_suballoc_bits:856 ERROR: status = -30
[  199.601017][ T8732] loop3: detected capacity change from 0 to 1024
[  199.605872][ T8723] (syz.2.975,8723,1):ocfs2_reserve_cluster_bitmap_bits:1139 ERROR: status = -30
[  199.620543][ T8723] (syz.2.975,8723,1):ocfs2_local_alloc_reserve_for_window:1119 ERROR: status = -30
[  199.630075][ T8723] (syz.2.975,8723,1):ocfs2_local_alloc_reserve_for_window:1135 ERROR: status = -30
[  199.640139][ T8723] (syz.2.975,8723,1):ocfs2_local_alloc_slide_window:1250 ERROR: status = -30
[  199.649162][ T8723] (syz.2.975,8723,1):ocfs2_local_alloc_slide_window:1317 ERROR: status = -30
[  199.658524][ T8723] (syz.2.975,8723,1):ocfs2_reserve_local_alloc_bits:672 ERROR: status = -30
[  199.667348][ T8723] (syz.2.975,8723,1):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -30
[  199.677231][ T8723] (syz.2.975,8723,1):ocfs2_reserve_clusters_with_limit:1172 ERROR: status = -30
[  199.686412][ T8723] (syz.2.975,8723,1):ocfs2_reserve_clusters_with_limit:1221 ERROR: status = -30
[  199.695570][ T8723] (syz.2.975,8723,1):ocfs2_symlink:1923 ERROR: status = -30
[  199.703073][ T8723] (syz.2.975,8723,1):ocfs2_symlink:2077 ERROR: status = -30
[  199.778940][ T7199] ocfs2: Unmounting device (7,2) on (node local)
[  199.798852][ T8736] loop1: detected capacity change from 0 to 512
[  199.828316][   T30] audit: type=1804 audit(1749274644.734:51): pid=8738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.977" name="/newroot/213/file2/file1" dev="loop3" ino=20 res=1 errno=0
[  199.891095][ T8732] hfsplus: can't free extent
[  199.918871][ T8736] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  199.934084][ T8736] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  199.994110][   T30] audit: type=1800 audit(1749274644.904:52): pid=8736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.980" name="file1" dev="loop1" ino=15 res=0 errno=0
[  200.075550][   T30] audit: type=1800 audit(1749274644.904:53): pid=8736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.980" name="file2" dev="loop1" ino=16 res=0 errno=0
[  200.103487][ T5840] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.365363][ T8756] loop3: detected capacity change from 0 to 1024
[  200.397725][ T8756] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  200.416912][ T8756] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  200.444256][ T8756] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869)
[  200.474068][ T8756] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  200.516419][ T8756] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  200.738729][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.809656][ T8744] loop2: detected capacity change from 0 to 32768
[  200.958442][ T8760] loop4: detected capacity change from 0 to 32768
[  200.974962][ T8760] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.989 (8760)
[  201.062385][ T8744] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow,no_data_io
[  201.062385][ T8744]   allowing incompatible features above 0.0: (unknown version)
[  201.062385][ T8744]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  201.105581][ T8760] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  201.117551][ T8760] BTRFS info (device loop4): using sha256 (sha256-x86_64) checksum algorithm
[  201.133546][ T8760] BTRFS info (device loop4): using free-space-tree
[  201.148010][ T8744] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  201.161763][ T8744] bcachefs (loop2): recovering from clean shutdown, journal seq 10
[  201.182273][ T8744] bcachefs (loop2): Version upgrade required:
[  201.182273][ T8744] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  201.182273][ T8744] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  201.182273][ T8744]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  201.258403][ T8744] bcachefs (loop2): dropping and reconstructing all alloc info
[  201.291724][ T8744] bcachefs (loop2): accounting_read... done
[  201.300103][ T8744] bcachefs (loop2): alloc_read... done
[  201.307919][ T8744] bcachefs (loop2): snapshots_read... done
[  201.315473][ T8744] bcachefs (loop2): done starting filesystem
[  201.405146][ T8790] loop3: detected capacity change from 0 to 1024
[  201.434131][ T8790] EXT4-fs: Ignoring removed orlov option
[  201.443988][ T5833] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  201.453203][ T7199] bcachefs (loop2): shutting down
[  201.464609][ T8790] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  201.566632][ T8790] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  201.631713][ T7199] bcachefs (loop2): shutdown complete
[  201.646041][ T8765] loop1: detected capacity change from 0 to 40427
[  201.668275][ T8765] F2FS-fs (loop1): Fix alignment : done, start(4096) end(16896) block(12288)
[  201.680764][ T8795] loop0: detected capacity change from 0 to 256
[  201.709384][ T8795] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  201.722086][ T8765] F2FS-fs (loop1): invalid crc value
[  201.741619][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.753977][ T8795] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  201.782614][ T8795] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  202.025479][ T8765] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  202.097881][   T30] audit: type=1800 audit(1749274647.004:54): pid=8765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.991" name="file1" dev="loop1" ino=10 res=0 errno=0
[  202.105893][ T8765] syz.1.991: attempt to access beyond end of device
[  202.105893][ T8765] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  202.254338][ T5840] syz-executor: attempt to access beyond end of device
[  202.254338][ T5840] loop1: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[  202.281060][ T5840] CPU: 0 UID: 0 PID: 5840 Comm: syz-executor Not tainted 6.15.0-next-20250606-syzkaller #0 PREEMPT(full) 
[  202.281090][ T5840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  202.281104][ T5840] Call Trace:
[  202.281112][ T5840]  <TASK>
[  202.281121][ T5840]  dump_stack_lvl+0x189/0x250
[  202.281151][ T5840]  ? __pfx_dump_stack_lvl+0x10/0x10
[  202.281168][ T5840]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  202.281202][ T5840]  ? __pfx_queue_work_on+0x10/0x10
[  202.281224][ T5840]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  202.281256][ T5840]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  202.281291][ T5840]  ? f2fs_hw_is_readonly+0x39b/0x470
[  202.281324][ T5840]  f2fs_handle_critical_error+0x37c/0x540
[  202.281358][ T5840]  f2fs_write_end_io+0x495/0x810
[  202.281384][ T5840]  ? blkg_put+0x22/0x240
[  202.281430][ T5840]  __submit_merged_bio+0x27a/0x6a0
[  202.281464][ T5840]  __submit_merged_write_cond+0x255/0x530
[  202.281499][ T5840]  f2fs_write_data_pages+0x261d/0x3000
[  202.281572][ T5840]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  202.281597][ T5840]  ? is_bpf_text_address+0x26/0x2b0
[  202.281687][ T5840]  ? lockdep_hardirqs_on+0x9c/0x150
[  202.281715][ T5840]  ? __lock_acquire+0xab9/0xd20
[  202.281779][ T5840]  ? __lock_acquire+0xab9/0xd20
[  202.281828][ T5840]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  202.281858][ T5840]  do_writepages+0x32b/0x550
[  202.281905][ T5840]  ? do_raw_spin_unlock+0x122/0x240
[  202.281945][ T5840]  filemap_fdatawrite+0x191/0x230
[  202.281966][ T5840]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  202.282050][ T5840]  ? do_raw_spin_unlock+0x122/0x240
[  202.282080][ T5840]  f2fs_sync_dirty_inodes+0x31f/0x830
[  202.282130][ T5840]  f2fs_write_checkpoint+0x94a/0x1de0
[  202.282193][ T5840]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  202.282291][ T5840]  ? kill_f2fs_super+0x298/0x6c0
[  202.282328][ T5840]  kill_f2fs_super+0x2c3/0x6c0
[  202.282366][ T5840]  ? __pfx_kill_f2fs_super+0x10/0x10
[  202.282397][ T5840]  ? radix_tree_delete_item+0x2b6/0x400
[  202.282428][ T5840]  ? shrinker_free+0x2ce/0x3e0
[  202.282458][ T5840]  deactivate_locked_super+0xb9/0x130
[  202.282492][ T5840]  cleanup_mnt+0x425/0x4c0
[  202.282521][ T5840]  ? lockdep_hardirqs_on+0x9c/0x150
[  202.282546][ T5840]  task_work_run+0x1d1/0x260
[  202.282580][ T5840]  ? __pfx_task_work_run+0x10/0x10
[  202.282603][ T5840]  ? __x64_sys_umount+0x122/0x160
[  202.282631][ T5840]  ? exit_to_user_mode_loop+0x40/0x110
[  202.282665][ T5840]  exit_to_user_mode_loop+0xec/0x110
[  202.282695][ T5840]  do_syscall_64+0x2bd/0x3b0
[  202.282716][ T5840]  ? lockdep_hardirqs_on+0x9c/0x150
[  202.282738][ T5840]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.282759][ T5840]  ? clear_bhb_loop+0x60/0xb0
[  202.282785][ T5840]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.282804][ T5840] RIP: 0033:0x7f829338fc57
[  202.282835][ T5840] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  202.282852][ T5840] RSP: 002b:00007ffda8f23388 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  202.282873][ T5840] RAX: 0000000000000000 RBX: 00007f8293410925 RCX: 00007f829338fc57
[  202.282886][ T5840] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda8f23440
[  202.282899][ T5840] RBP: 00007ffda8f23440 R08: 0000000000000000 R09: 0000000000000000
[  202.282918][ T5840] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffda8f244d0
[  202.282932][ T5840] R13: 00007f8293410925 R14: 00000000000315c5 R15: 00007ffda8f24510
[  202.282970][ T5840]  </TASK>
[  202.635837][ T5840] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  202.851978][ T8806] loop3: detected capacity change from 0 to 32768
[  202.908946][ T8806] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  202.930812][ T8822] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  202.942436][ T8822] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  202.953040][ T8822] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  202.961787][ T8822] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  202.976443][ T8822] vxlan0: entered promiscuous mode
[  202.981624][ T8822] vxlan0: entered allmulticast mode
[  203.095191][ T8806] XFS (loop3): Ending clean mount
[  203.125033][ T8806] XFS (loop3): Quotacheck needed: Please wait.
[  203.209807][ T8836] netlink: 'syz.4.1009': attribute type 5 has an invalid length.
[  203.241342][ T8806] XFS (loop3): Quotacheck: Done.
[  203.463026][ T5834] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  203.912110][ T8850] loop4: detected capacity change from 0 to 1024
[  203.933889][ T8850] EXT4-fs: Ignoring removed mblk_io_submit option
[  203.941167][ T8850] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  203.969964][ T8850] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (4096), stripe is disabled
[  204.024657][ T8850] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #11: comm syz.4.1016: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  204.044634][ T8856] loop1: detected capacity change from 0 to 1024
[  204.051651][ T8850] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.1016: couldn't read orphan inode 11 (err -117)
[  204.067166][ T8850] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  204.120207][ T8850] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1016: Invalid block bitmap block 0 in block_group 0
[  204.233584][ T8850] Quota error (device loop4): write_blk: dquota write failed
[  204.239327][ T8868] loop0: detected capacity change from 0 to 64
[  204.241399][ T8850] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  204.275077][ T8850] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1016: Failed to acquire dquot type 0
[  204.309647][   T37] hfsplus: b-tree write err: -5, ino 4
[  204.437884][ T5833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.168110][ T8895] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1033'.
[  205.464208][ T8872] loop2: detected capacity change from 0 to 32768
[  205.488391][ T8872] find_entry called with index = 0
[  205.500135][ T8872] read_mapping_page failed!
[  205.509518][ T8872] ERROR: (device loop2): txCommit: 
[  205.509518][ T8872] 
[  205.939883][ T8913] usb usb8: usbfs: process 8913 (syz.0.1042) did not claim interface 0 before use
[  206.398994][ T8930] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  206.475323][ T8936] loop2: detected capacity change from 0 to 16
[  206.524196][ T8936] erofs (device loop2): mounted with root inode @ nid 36.
[  206.610019][ T5852] erofs (device loop2): failed to decompress 6887 in[4096, 0] out[9000]
[  206.628114][ T8936] erofs (device loop2): failed to decompress 6887 in[4096, 0] out[9000]
[  206.639426][ T8936] erofs (device loop2): read error -117 @ 0 of nid 89
[  206.653048][   T30] audit: type=1800 audit(1749274651.554:55): pid=8936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1048" name="file3" dev="loop2" ino=89 res=0 errno=0
[  206.986485][ T8948] netlink: 'syz.4.1053': attribute type 1 has an invalid length.
[  207.016967][ T8948] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1053'.
[  207.052931][ T8948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1053'.
[  207.357713][ T8958] loop4: detected capacity change from 0 to 4096
[  207.369250][ T8932] loop1: detected capacity change from 0 to 32768
[  207.399107][ T8932] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  207.411792][ T8932] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  207.461293][ T8932] XFS (loop1): Ending clean mount
[  207.508231][ T8932] XFS (loop1): Quotacheck needed: Please wait.
[  207.587895][ T8932] XFS (loop1): Quotacheck: Done.
[  207.631957][ T1330] ntfs3(loop4): ino=5, mi_enum_attr
[  207.682715][ T8972] loop3: detected capacity change from 0 to 4096
[  207.759802][ T8976] loop4: detected capacity change from 0 to 512
[  207.780074][ T5840] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  207.801045][ T8976] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  207.817202][ T8976] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  207.877412][ T8976] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[  207.917685][ T8978] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  207.940183][ T8976] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  207.980194][ T8976] System zones: 0-2, 18-18, 34-35
[  207.990919][   T30] audit: type=1800 audit(1749274652.894:56): pid=8972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1061" name="file1" dev="loop3" ino=15 res=0 errno=0
[  208.047756][ T8976] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  208.286620][ T5833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.607561][ T8985] netlink: 'syz.3.1067': attribute type 9 has an invalid length.
[  208.762019][ T8974] loop2: detected capacity change from 0 to 131072
[  208.792230][ T8974] F2FS-fs (loop2): QUOTA feature is enabled, so ignore qf_name
[  208.799990][ T8974] F2FS-fs (loop2): QUOTA feature is enabled, so ignore jquota_fmt
[  208.820992][ T8991] loop4: detected capacity change from 0 to 1024
[  208.908787][ T8991] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  208.954121][ T8974] F2FS-fs (loop2): Mounted with checkpoint version = 1b41e955
[  208.969570][ T8974] F2FS-fs (loop2): sanity_check_inode: inode (ino=4) has corrupted i_inline_xattr_size: 0, min: 6, max: 903
[  209.051131][   T30] audit: type=1800 audit(1749274653.944:57): pid=8991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1066" name="bus" dev="loop4" ino=18 res=0 errno=0
[  209.157943][ T8991] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt.
[  209.278758][ T5833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.765330][ T9023] loop4: detected capacity change from 0 to 1024
[  209.818036][ T9023] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  209.888486][ T9023] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1082: Invalid block bitmap block 0 in block_group 0
[  210.013449][ T9023] Quota error (device loop4): write_blk: dquota write failed
[  210.021334][ T9023] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  210.062973][ T9023] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1082: Failed to acquire dquot type 0
[  210.133609][ T9023] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.1082: Freeing blocks not in datazone - block = 0, count = 4096
[  210.189671][ T9023] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.1082: Invalid inode bitmap blk 0 in block_group 0
[  210.223360][ T2947] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-8
[  210.233237][ T9023] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem
[  210.252570][ T2947] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 0
[  210.274896][ T9023] EXT4-fs (loop4): 1 orphan inode deleted
[  210.282582][ T9023] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  210.327780][ T9012] loop1: detected capacity change from 0 to 32768
[  210.388528][ T9012] JBD2: Ignoring recovery information on journal
[  210.401963][ T9017] loop0: detected capacity change from 0 to 32768
[  210.438130][ T9023] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000.
[  210.486806][ T9017] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1079 (9017)
[  210.513582][ T9012] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  210.545725][ T5833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.568943][ T9017] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  210.615982][ T9017] BTRFS info (device loop0): using sha256 (sha256-x86_64) checksum algorithm
[  210.641075][ T9017] BTRFS info (device loop0): disk space caching is enabled
[  210.660019][ T9017] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  210.696396][ T5840] ocfs2: Unmounting device (7,1) on (node local)
[  210.845071][ T9017] BTRFS info (device loop0): rebuilding free space tree
[  210.898960][ T9017] BTRFS info (device loop0): disabling free space tree
[  210.913328][ T9017] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  210.951793][ T9017] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  211.113360][ T3461] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared)
[  211.205019][ T5831] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  211.663285][ T9032] loop2: detected capacity change from 0 to 40427
[  211.688800][ T9032] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504)
[  211.708607][ T9032] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  211.745125][ T9032] F2FS-fs (loop2): invalid crc value
[  211.755656][ T9077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1099'.
[  211.775810][ T9077] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  211.786885][ T9075] overlay: Unknown parameter '
[  211.786885][ T9075] time
[  211.786885][ T9075] string
[  211.786885][ T9075] statistic
[  211.786885][ T9075] state
[  211.786885][ T9075] realm
[  211.786885][ T9075] rateest
[  211.786885][ T9075] quota
[  211.786885][ T9075] pkttype
[  211.786885][ T9075] physdev
[  211.786885][ T9075] cgroup
[  211.786885][ T9075] cgroup
[  211.786885][ T9075] cgroup
[  211.786885][ T9075] owner
[  211.786885][ T9075] nfacct
[  211.786885][ T9075] nfacct
[  211.786885][ T9075] mac
[  211.786885][ T9075] limit
[  211.786885][ T9075] ipvs
[  211.786885][ T9075] helper
[  211.786885][ T9075] devgroup
[  211.786885][ T9075] cpu
[  211.786885][ T9075] conntrack
[  211.786885][ T9075] conntrack
[  211.786885][ T9075] conntrack
[  211.786885][ T9075] connlabel
[  211.786885][ T9075] connbytes
[  211.786885][ T9075] comment
[  211.786885][ T9075] bpf
[  211.786885][ T9075] bpf
[  211.786885][ T9075] connmark
[  211.786885][ T9075] mark
[  211.786885][ T9075] rpfilter
[  211.786885][ T9075] ah
[  211.786885][ T9075] tcpmss
[  211.786885][ T9075] socket
[  211.786885][ T9075] socket
[  211.786885][ T9075] socket
[  211.786885][ T9075] socket
[  211.786885][ T9075] sctp
[  211.786885][ T9075] recent
[  211.786885][ T9075] recent
[  211.786885][ T9075] policy
[  211.786885][ T9075] osf
[  211.786885][ T9075] multiport
[  211.786885][ T9075] length
[  211.786885][ T9075] l2tp
[  211.786885][ T9075] iprange
[  211.786885][ T9075] ipcomp
[  211.786885][ T9075] ttl
[  211.786885][ T9075] hashlimit
[  211.786885][ T9075] hashlimit
[  211.786885][ T9075] hashlimit
[  211.786885][ T9075] esp
[  211.786885][ T9075] ecn
[  211.786885][ T9075] tos
[  211.786885][ T9075] dscp
[  211.786885][ T9075] dccp
[  211.786885][ T9075] connlimit
[  211.786885][ T9075] cluster
[  211.786885][ T9075] addrtype
[  211.786885][ T9075] addrtype
[  211.786885][ T9075] set
[  211.786885][ T9075] set
[  211.786885][ T9075] set
[  211.786885][ T9075] set
[  211.786885][ T9075] set
[  211.786885][ T9075] icmp
[  211.979786][ T5835] Bluetooth: hci1: command 0x0406 tx timeout
[  211.989379][ T5835] Bluetooth: hci0: command 0x0406 tx timeout
[  211.996741][ T5835] Bluetooth: hci2: command 0x0406 tx timeout
[  212.002891][ T5835] Bluetooth: hci3: command 0x0406 tx timeout
[  212.264232][ T9032] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  212.306568][ T9032] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  212.347341][ T9086] loop1: detected capacity change from 0 to 4096
[  212.410156][ T9091] loop3: detected capacity change from 0 to 256
[  212.419247][ T9092] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  212.457366][ T7199] syz-executor: attempt to access beyond end of device
[  212.457366][ T7199] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  212.499674][ T7199] CPU: 0 UID: 0 PID: 7199 Comm: syz-executor Not tainted 6.15.0-next-20250606-syzkaller #0 PREEMPT(full) 
[  212.499706][ T7199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  212.499718][ T7199] Call Trace:
[  212.499727][ T7199]  <TASK>
[  212.499736][ T7199]  dump_stack_lvl+0x189/0x250
[  212.499766][ T7199]  ? __pfx_dump_stack_lvl+0x10/0x10
[  212.499783][ T7199]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  212.499817][ T7199]  ? __pfx_queue_work_on+0x10/0x10
[  212.499840][ T7199]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  212.499872][ T7199]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  212.499907][ T7199]  ? f2fs_hw_is_readonly+0x39b/0x470
[  212.499940][ T7199]  f2fs_handle_critical_error+0x37c/0x540
[  212.499975][ T7199]  f2fs_write_end_io+0x495/0x810
[  212.500001][ T7199]  ? blkg_put+0x22/0x240
[  212.500048][ T7199]  __submit_merged_bio+0x27a/0x6a0
[  212.500092][ T7199]  __submit_merged_write_cond+0x255/0x530
[  212.500127][ T7199]  f2fs_write_data_pages+0x261d/0x3000
[  212.500201][ T7199]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  212.500246][ T7199]  ? arch_stack_walk+0xfc/0x150
[  212.500304][ T7199]  ? __mod_zone_page_state+0xd7/0x140
[  212.500336][ T7199]  ? folios_put_refs+0x560/0x640
[  212.500379][ T7199]  ? __lock_acquire+0xab9/0xd20
[  212.500419][ T7199]  ? do_raw_spin_lock+0x121/0x290
[  212.500453][ T7199]  ? do_raw_spin_unlock+0x122/0x240
[  212.500476][ T7199]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  212.500499][ T7199]  do_writepages+0x32b/0x550
[  212.500539][ T7199]  ? do_raw_spin_unlock+0x122/0x240
[  212.500565][ T7199]  filemap_fdatawrite+0x191/0x230
[  212.500585][ T7199]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  212.500665][ T7199]  ? do_raw_spin_unlock+0x122/0x240
[  212.500694][ T7199]  f2fs_sync_dirty_inodes+0x31f/0x830
[  212.500739][ T7199]  f2fs_write_checkpoint+0x94a/0x1de0
[  212.500797][ T7199]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  212.500886][ T7199]  ? kill_f2fs_super+0x298/0x6c0
[  212.500923][ T7199]  kill_f2fs_super+0x2c3/0x6c0
[  212.500961][ T7199]  ? __pfx_kill_f2fs_super+0x10/0x10
[  212.500985][ T7199]  ? radix_tree_delete_item+0x2b6/0x400
[  212.501013][ T7199]  ? shrinker_free+0x2ce/0x3e0
[  212.501041][ T7199]  deactivate_locked_super+0xb9/0x130
[  212.501083][ T7199]  cleanup_mnt+0x425/0x4c0
[  212.501109][ T7199]  ? lockdep_hardirqs_on+0x9c/0x150
[  212.501131][ T7199]  task_work_run+0x1d1/0x260
[  212.501158][ T7199]  ? __pfx_task_work_run+0x10/0x10
[  212.501177][ T7199]  ? __x64_sys_umount+0x122/0x160
[  212.501201][ T7199]  ? exit_to_user_mode_loop+0x40/0x110
[  212.501231][ T7199]  exit_to_user_mode_loop+0xec/0x110
[  212.501258][ T7199]  do_syscall_64+0x2bd/0x3b0
[  212.501277][ T7199]  ? lockdep_hardirqs_on+0x9c/0x150
[  212.501296][ T7199]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.501317][ T7199]  ? clear_bhb_loop+0x60/0xb0
[  212.501343][ T7199]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.501361][ T7199] RIP: 0033:0x7f7cee38fc57
[  212.501380][ T7199] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  212.501397][ T7199] RSP: 002b:00007ffc873937d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  212.501419][ T7199] RAX: 0000000000000000 RBX: 00007f7cee410925 RCX: 00007f7cee38fc57
[  212.501432][ T7199] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc87393890
[  212.501445][ T7199] RBP: 00007ffc87393890 R08: 0000000000000000 R09: 0000000000000000
[  212.501457][ T7199] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc87394920
[  212.501470][ T7199] R13: 00007f7cee410925 R14: 0000000000033d77 R15: 00007ffc87394960
[  212.501507][ T7199]  </TASK>
[  212.501516][ T7199] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  212.790614][ T9076] loop0: detected capacity change from 0 to 32768
[  212.924077][ T9076] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1090 (9076)
[  213.041509][ T9076] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  213.067021][ T9076] BTRFS info (device loop0): using sha256 (sha256-x86_64) checksum algorithm
[  213.091411][ T9076] BTRFS info (device loop0): using free-space-tree
[  213.103961][ T9100] program syz.4.1109 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  213.719579][ T5831] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  213.823992][ T9130] smc: net device bond0 applied user defined pnetid SYZ0
[  213.853786][ T9130] smc: net device bond0 erased user defined pnetid SYZ0
[  214.067319][ T9134] loop2: detected capacity change from 0 to 1024
[  214.296575][ T9141] loop3: detected capacity change from 0 to 256
[  214.440722][ T9141] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d)
[  214.483773][ T9141] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  214.554047][ T9141] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000006)
[  215.410972][ T9158] loop1: detected capacity change from 0 to 32768
[  215.485350][ T9158] btrfs: Deprecated parameter 'usebackuproot'
[  215.492890][ T9158] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  215.571788][ T9158] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1128 (9158)
[  215.600728][ T9174] loop0: detected capacity change from 0 to 2048
[  215.673731][ T9158] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  215.686878][ T9174] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  215.738250][ T9158] BTRFS info (device loop1): using crc32c (crc32c-x86_64) checksum algorithm
[  215.749646][ T9174] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  215.769966][ T9158] BTRFS info (device loop1): using free-space-tree
[  215.783027][ T9174] UDF-fs: Scanning with blocksize 512 failed
[  215.833034][ T9174] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  215.869719][ T9174] UDF-fs: Scanning with blocksize 1024 failed
[  215.881971][ T9174] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512
[  215.892659][ T9174] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  215.904868][ T9174] UDF-fs: Scanning with blocksize 2048 failed
[  215.916985][ T9174] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  215.970933][ T9196] loop3: detected capacity change from 0 to 4096
[  215.980308][ T9196] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  215.981429][ T9174] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512
[  216.021867][ T9158] BTRFS info (device loop1): rebuilding free space tree
[  216.053317][ T9174] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  216.061047][ T9174] UDF-fs: Scanning with blocksize 4096 failed
[  216.073208][ T9174] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1)
[  216.092895][ T9196] ntfs3(loop3): ino=19, mi_enum_attr
[  216.098284][ T9196] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  216.307703][ T5840] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  216.331730][ T9182] loop2: detected capacity change from 0 to 32768
[  216.340212][ T9182] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1138 (9182)
[  216.393958][ T9182] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  216.408726][ T9182] BTRFS info (device loop2): using sha256 (sha256-x86_64) checksum algorithm
[  216.449410][ T9203] kvm: user requested TSC rate below hardware speed
[  216.450503][ T9178] loop4: detected capacity change from 0 to 32768
[  216.468071][ T9178] BTRFS: device /dev/loop4 (7:4) using temp-fsid b9361ef3-3014-4ba0-888d-0f600f10d5f4
[  216.481757][ T9178] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1135 (9178)
[  216.501090][ T9178] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  216.511803][ T9178] BTRFS info (device loop4): using crc32c (crc32c-x86_64) checksum algorithm
[  216.526869][ T9178] BTRFS info (device loop4): using free-space-tree
[  216.720926][ T9182] BTRFS warning (device loop2 state M): remount supports changing free space tree only from RO to RW
[  216.794443][ T9182] BTRFS info (device loop2 state M): enabling free space tree
[  216.803156][   T30] audit: type=1800 audit(1749274661.704:58): pid=9178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1135" name="file1" dev="loop4" ino=260 res=0 errno=0
[  216.854509][ T9182] BTRFS info (device loop2 state M): force clearing of disk cache
[  216.974121][ T7199] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  217.074186][ T5833] BTRFS info (device loop4): last unmount of filesystem b9361ef3-3014-4ba0-888d-0f600f10d5f4
[  217.238984][ T9235] loop3: detected capacity change from 0 to 32768
[  217.313151][ T9235] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  217.365701][ T9235] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  217.664980][ T5834] ocfs2: Unmounting device (7,3) on (node local)
[  218.028251][ T9250] loop1: detected capacity change from 0 to 2048
[  218.069887][ T9250] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  218.157133][ T9254] loop3: detected capacity change from 0 to 24
[  218.221017][ T9254] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  218.246900][ T9254] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  218.275075][ T9257] loop4: detected capacity change from 0 to 512
[  218.376440][ T9257] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.1151: casefold flag without casefold feature
[  218.394133][ T9257] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.1151: couldn't read orphan inode 15 (err -117)
[  218.436014][ T9257] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  218.460764][ T9262] loop3: detected capacity change from 0 to 128
[  218.554674][   T30] audit: type=1800 audit(1749274663.464:59): pid=9262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1152" name="file2" dev="loop3" ino=1048625 res=0 errno=0
[  218.579023][ T9262] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 550)
[  218.648320][ T9262] FAT-fs (loop3): Filesystem has been set read-only
[  218.672976][   T30] audit: type=1800 audit(1749274663.484:60): pid=9262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1152" name="file2" dev="loop3" ino=1048625 res=0 errno=0
[  218.702516][ T9262] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 550)
[  218.743767][ T9262] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 550)
[  218.752542][ T9262] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 550)
[  218.809974][ T5833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.827076][   T30] audit: type=1800 audit(1749274663.504:61): pid=9257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1151" name="file1" dev="loop4" ino=18 res=0 errno=0
[  218.878702][ T9262] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 550)
[  218.927984][ T9262] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 550)
[  218.958875][ T9262] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 550)
[  218.992418][ T9262] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 550)
[  219.018870][ T9262] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 550)
[  219.072995][ T9262] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 550)
[  219.161413][ T9271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1156'.
[  219.578035][ T9264] loop0: detected capacity change from 0 to 131072
[  219.586372][ T9264] F2FS-fs (loop0): Invalid segment/section count (31, 24 x 150994945)
[  219.594691][ T9264] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  219.607690][ T9279] loop3: detected capacity change from 0 to 2048
[  219.639201][ T9264] F2FS-fs (loop0): invalid crc value
[  219.656985][ T9286] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  219.737357][ T9264] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  219.745404][ T9264] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  219.749948][ T9288] loop4: detected capacity change from 0 to 1024
[  219.877350][ T9292] overlayfs: upper fs does not support tmpfile.
[  219.894605][ T9292] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  219.902427][ T9292] overlayfs: failed to set xattr on upper
[  219.909881][ T9292] overlayfs: ...falling back to redirect_dir=nofollow.
[  219.917251][ T9292] overlayfs: ...falling back to index=off.
[  219.930749][ T9292] overlayfs: ...falling back to uuid=null.
[  219.945366][ T9292] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  220.070321][ T5834] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 8796093022222
[  220.096565][ T5834] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=16)
[  220.120243][ T5834] Remounting filesystem read-only
[  220.125914][ T5834] NILFS (loop3): error -5 truncating bmap (ino=16)
[  220.139899][ T5834] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer
[  220.195538][ T9299] loop4: detected capacity change from 0 to 736
[  220.919763][ T9322] loop4: detected capacity change from 0 to 512
[  220.954752][ T9322] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  221.010232][ T9322] EXT4-fs (loop4): 1 truncate cleaned up
[  221.032755][ T9330] loop0: detected capacity change from 0 to 256
[  221.054818][ T9322] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  221.077949][ T9322] fscrypt (loop4, inode 18): Unsupported encryption flags (0x08)
[  221.138200][ T9330] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbbba8adb, utbl_chksum : 0xe619d30d)
[  221.148927][ T5833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.203180][   T30] audit: type=1800 audit(1749274666.114:62): pid=9330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1162" name="file1" dev="loop0" ino=1048626 res=0 errno=0
[  221.290721][ T9338] loop4: detected capacity change from 0 to 64
[  221.433220][ T5849] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  221.566913][ T9352] vivid-004: =================  START STATUS  =================
[  221.583007][ T9352] vivid-004: Radio HW Seek Mode: Bounded
[  221.597245][ T9352] vivid-004: Radio Programmable HW Seek: false
[  221.604519][ T9352] vivid-004: RDS Rx I/O Mode: Block I/O
[  221.610384][ T9352] vivid-004: Generate RBDS Instead of RDS: false
[  221.620585][ T9352] vivid-004: RDS Reception: true
[  221.624723][ T5849] usb 4-1: Using ep0 maxpacket: 32
[  221.628091][ T9352] vivid-004: RDS Program Type: 0 inactive
[  221.639719][ T5849] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  221.649635][ T9352] vivid-004: RDS PS Name:  inactive
[  221.652946][ T5849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.659886][ T9352] vivid-004: RDS Radio Text:  inactive
[  221.669401][ T9352] vivid-004: RDS Traffic Announcement: false inactive
[  221.677906][ T5849] usb 4-1: config 0 descriptor??
[  221.693150][ T9352] vivid-004: RDS Traffic Program: false inactive
[  221.708520][ T9352] vivid-004: RDS Music: false inactive
[  221.723777][ T9352] vivid-004: ==================  END STATUS  ==================
[  222.058433][ T9366] loop0: detected capacity change from 0 to 2048
[  222.079511][ T9366] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  222.361051][ T5849] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware
[  222.399931][ T5849] usb 4-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2
[  222.441604][ T5849] usb 4-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw
[  222.449621][ T9382] netlink: 'syz.1.1200': attribute type 21 has an invalid length.
[  222.449648][ T9382] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1200'.
[  222.449741][ T9382] netlink: 'syz.1.1200': attribute type 5 has an invalid length.
[  222.449757][ T9382] netlink: 'syz.1.1200': attribute type 6 has an invalid length.
[  222.449771][ T9382] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1200'.
[  222.861482][ T9395] loop0: detected capacity change from 0 to 128
[  222.909484][ T9395] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  222.925847][ T9395] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  222.986126][ T9395] fscrypt (loop0, inode 12): Direct key flag not allowed with different contents and filenames modes
[  223.020902][ T9375] loop2: detected capacity change from 0 to 32768
[  223.043326][ T9375] (syz.2.1197,9375,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  223.067799][ T9375] (syz.2.1197,9375,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  223.120956][ T5831] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  223.152213][ T9375] JBD2: Ignoring recovery information on journal
[  223.289992][ T9375] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  223.411437][ T9391] loop1: detected capacity change from 0 to 32768
[  223.421171][ T9391] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1205 (9391)
[  223.487167][ T9391] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  223.538335][ T9391] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  223.549442][ T7199] ocfs2: Unmounting device (7,2) on (node local)
[  223.590638][ T9391] BTRFS info (device loop1): using free-space-tree
[  223.639986][ T9413] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1215'.
[  223.914108][ T5840] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  224.032735][ T9403] loop4: detected capacity change from 0 to 32768
[  224.108484][ T9403] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  224.221058][ T9450] loop2: detected capacity change from 0 to 8192
[  224.241554][ T9450] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  224.376930][ T9403] XFS (loop4): Ending clean mount
[  224.391587][ T9403] XFS (loop4): Quotacheck needed: Please wait.
[  224.470650][ T9403] XFS (loop4): Quotacheck: Done.
[  224.568885][ T5833] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  224.592428][ T9460] input input10: cannot allocate more than FF_MAX_EFFECTS effects
[  224.946501][ T9468] loop3: detected capacity change from 0 to 512
[  224.954677][ T9468] EXT4-fs: inline encryption not supported
[  224.968608][ T9469] program syz.2.1229 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  225.127666][ T9468] EXT4-fs: Ignoring removed orlov option
[  225.135936][ T9468] EXT4-fs (loop3): Test dummy encryption mode enabled
[  225.242942][ T9481] loop2: detected capacity change from 0 to 2048
[  225.250903][ T9468] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #12: comm syz.3.1228: corrupted in-inode xattr: invalid ea_ino
[  225.298241][ T9485] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  225.331199][ T9468] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.1228: couldn't read orphan inode 12 (err -117)
[  225.374981][ T9468] EXT4-fs (loop3): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  225.406329][ T9485] NILFS (loop2): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3)
[  225.423867][ T9485] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=16)
[  225.439432][ T9485] Remounting filesystem read-only
[  225.451974][ T9490] NILFS (loop2): error -2 truncating bmap (ino=16)
[  225.510141][ T5834] EXT4-fs (loop3): unmounting filesystem 00000005-0000-0000-0000-000000000000.
[  225.539615][ T7199] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer
[  225.674059][ T9494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1236'.
[  226.089233][ T9489] loop1: detected capacity change from 0 to 40427
[  226.104698][ T9489] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  226.129746][ T9489] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  226.150377][ T9489] F2FS-fs (loop1): invalid crc value
[  226.293799][ T9489] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  226.305759][ T9489] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  226.313748][ T9511] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.1243'.
[  226.606662][ T9504] loop2: detected capacity change from 0 to 32768
[  226.627235][ T9504] btrfs: Deprecated parameter 'usebackuproot'
[  226.636521][ T9504] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  226.651406][ T9504] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1241 (9504)
[  226.678649][ T9504] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  226.697806][ T9504] BTRFS info (device loop2): using crc32c (crc32c-x86_64) checksum algorithm
[  226.711427][ T9504] BTRFS info (device loop2): using free-space-tree
[  226.792085][ T9504] BTRFS info (device loop2): rebuilding free space tree
[  226.875036][   T30] audit: type=1800 audit(1749274671.784:63): pid=9504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1241" name="bus" dev="loop2" ino=263 res=0 errno=0
[  226.971857][ T7199] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  227.068169][ T9540] loop3: detected capacity change from 0 to 8192
[  227.105152][ T9540] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  227.436281][ T9544] loop3: detected capacity change from 0 to 128
[  227.461207][ T9544] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  227.522293][ T9519] loop4: detected capacity change from 0 to 40427
[  227.568274][ T9544] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  227.580577][ T9519] F2FS-fs (loop4): Wrong SSA boundary, start(3584) end(4096) blocks(0)
[  227.591718][ T9519] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  227.608106][ T9544] ext2 filesystem being mounted at /285/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  227.630190][ T9519] F2FS-fs (loop4): build fault injection type: 0x6
[  227.666389][ T9554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1255'.
[  227.684033][ T9519] F2FS-fs (loop4): invalid crc value
[  227.773565][ T5834] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  227.912134][ T9519] F2FS-fs (loop4): Start checkpoint disabled!
[  227.949689][ T9519] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  227.960070][ T9519] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  228.019320][ T9560] loop3: detected capacity change from 0 to 512
[  228.026801][ T9144] kworker/u8:10: attempt to access beyond end of device
[  228.026801][ T9144] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  228.034806][ T9560] EXT4-fs: Ignoring removed nobh option
[  228.066037][ T9144] CPU: 0 UID: 0 PID: 9144 Comm: kworker/u8:10 Not tainted 6.15.0-next-20250606-syzkaller #0 PREEMPT(full) 
[  228.066069][ T9144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  228.066084][ T9144] Workqueue: writeback wb_workfn (flush-7:4)
[  228.066120][ T9144] Call Trace:
[  228.066129][ T9144]  <TASK>
[  228.066138][ T9144]  dump_stack_lvl+0x189/0x250
[  228.066165][ T9144]  ? __pfx_dump_stack_lvl+0x10/0x10
[  228.066182][ T9144]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  228.066216][ T9144]  ? __pfx_queue_work_on+0x10/0x10
[  228.066238][ T9144]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  228.066270][ T9144]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  228.066305][ T9144]  ? f2fs_hw_is_readonly+0x39b/0x470
[  228.066338][ T9144]  f2fs_handle_critical_error+0x37c/0x540
[  228.066372][ T9144]  f2fs_write_end_io+0x495/0x810
[  228.066398][ T9144]  ? blkg_put+0x22/0x240
[  228.066445][ T9144]  __submit_merged_bio+0x27a/0x6a0
[  228.066478][ T9144]  __submit_merged_write_cond+0x255/0x530
[  228.066513][ T9144]  f2fs_write_data_pages+0x261d/0x3000
[  228.066587][ T9144]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  228.066631][ T9144]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  228.066708][ T9144]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  228.066751][ T9144]  ? trace_f2fs_writepages+0x7f/0x200
[  228.066779][ T9144]  ? f2fs_write_node_pages+0x478/0x6e0
[  228.066830][ T9144]  ? sched_clock+0x3f/0x60
[  228.066853][ T9144]  ? sched_clock_cpu+0x74/0x430
[  228.066882][ T9144]  ? psi_task_switch+0x16a/0x6d0
[  228.066906][ T9144]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  228.066936][ T9144]  do_writepages+0x32b/0x550
[  228.066975][ T9144]  ? reacquire_held_locks+0x127/0x1d0
[  228.066994][ T9144]  ? writeback_sb_inodes+0x372/0x1000
[  228.067037][ T9144]  __writeback_single_inode+0x145/0xff0
[  228.067058][ T9144]  ? do_raw_spin_unlock+0x122/0x240
[  228.067089][ T9144]  writeback_sb_inodes+0x6b5/0x1000
[  228.067119][ T9144]  ? lockdep_hardirqs_on+0x9c/0x150
[  228.067149][ T9144]  ? rcu_is_watching+0x15/0xb0
[  228.067203][ T9144]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  228.067290][ T9144]  ? rcu_is_watching+0x15/0xb0
[  228.067334][ T9144]  wb_writeback+0x43b/0xaf0
[  228.067377][ T9144]  ? queue_io+0x391/0x590
[  228.067412][ T9144]  ? __pfx_wb_writeback+0x10/0x10
[  228.067456][ T9144]  ? _raw_spin_unlock_irq+0x23/0x50
[  228.067495][ T9144]  wb_workfn+0x409/0xef0
[  228.067542][ T9144]  ? __pfx_wb_workfn+0x10/0x10
[  228.067577][ T9144]  ? __lock_acquire+0xab9/0xd20
[  228.067620][ T9144]  ? process_scheduled_works+0x9ef/0x17b0
[  228.067659][ T9144]  ? _raw_spin_unlock_irq+0x23/0x50
[  228.067689][ T9144]  ? process_scheduled_works+0x9ef/0x17b0
[  228.067718][ T9144]  ? process_scheduled_works+0x9ef/0x17b0
[  228.067751][ T9144]  process_scheduled_works+0xae1/0x17b0
[  228.067828][ T9144]  ? __pfx_process_scheduled_works+0x10/0x10
[  228.067884][ T9144]  worker_thread+0x8a0/0xda0
[  228.067939][ T9144]  kthread+0x70e/0x8a0
[  228.067968][ T9144]  ? __pfx_worker_thread+0x10/0x10
[  228.067987][ T9144]  ? __pfx_kthread+0x10/0x10
[  228.068014][ T9144]  ? _raw_spin_unlock_irq+0x23/0x50
[  228.068045][ T9144]  ? lockdep_hardirqs_on+0x9c/0x150
[  228.068064][ T9144]  ? __pfx_kthread+0x10/0x10
[  228.068090][ T9144]  ret_from_fork+0x3f9/0x770
[  228.068123][ T9144]  ? __pfx_ret_from_fork+0x10/0x10
[  228.068161][ T9144]  ? __switch_to_asm+0x39/0x70
[  228.068180][ T9144]  ? __switch_to_asm+0x33/0x70
[  228.068199][ T9144]  ? __pfx_kthread+0x10/0x10
[  228.068224][ T9144]  ret_from_fork_asm+0x1a/0x30
[  228.068268][ T9144]  </TASK>
[  228.068276][ T9144] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  228.447797][ T9560] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.1256: iget: bad i_size value: 38620345925642
[  228.472011][ T9571] loop0: detected capacity change from 0 to 1764
[  228.489431][ T9560] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.1256: couldn't read orphan inode 15 (err -117)
[  228.511534][ T9567] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  228.568130][ T9560] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  228.734566][ T9573] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  228.757387][ T9560] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1256: bg 0: block 5: invalid block bitmap
[  228.833707][ T9560] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 292 with error 28
[  228.865409][ T9560] EXT4-fs (loop3): This should not happen!! Data will be lost
[  228.865409][ T9560] 
[  228.883325][ T9560] EXT4-fs (loop3): Total free blocks count 0
[  228.889399][ T9560] EXT4-fs (loop3): Free/Dirty block details
[  228.935177][ T9560] EXT4-fs (loop3): free_blocks=0
[  228.940257][ T9560] EXT4-fs (loop3): dirty_blocks=296
[  228.986341][ T9560] EXT4-fs (loop3): Block reservation details
[  228.992418][ T9560] EXT4-fs (loop3): i_reserved_data_blocks=296
[  229.140521][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.237365][ T9589] loop1: detected capacity change from 0 to 1024
[  229.303163][ T9592] loop3: detected capacity change from 0 to 256
[  229.491612][ T9575] loop2: detected capacity change from 0 to 40427
[  229.493289][   T30] audit: type=1800 audit(1749274674.394:64): pid=9594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1270" name="bus" dev="loop3" ino=1048631 res=0 errno=0
[  229.629884][ T9602] loop1: detected capacity change from 0 to 512
[  229.665721][ T9575] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  229.688385][ T9602] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  229.708766][ T7199] syz-executor: attempt to access beyond end of device
[  229.708766][ T7199] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  229.728946][ T7199] CPU: 0 UID: 0 PID: 7199 Comm: syz-executor Not tainted 6.15.0-next-20250606-syzkaller #0 PREEMPT(full) 
[  229.728976][ T7199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  229.728989][ T7199] Call Trace:
[  229.728998][ T7199]  <TASK>
[  229.729007][ T7199]  dump_stack_lvl+0x189/0x250
[  229.729037][ T7199]  ? __pfx_dump_stack_lvl+0x10/0x10
[  229.729054][ T7199]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  229.729088][ T7199]  ? __pfx_queue_work_on+0x10/0x10
[  229.729111][ T7199]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  229.729144][ T7199]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  229.729179][ T7199]  ? f2fs_hw_is_readonly+0x39b/0x470
[  229.729211][ T7199]  f2fs_handle_critical_error+0x37c/0x540
[  229.729247][ T7199]  f2fs_write_end_io+0x495/0x810
[  229.729274][ T7199]  ? blkg_put+0x22/0x240
[  229.729320][ T7199]  __submit_merged_bio+0x27a/0x6a0
[  229.729355][ T7199]  __submit_merged_write_cond+0x255/0x530
[  229.729390][ T7199]  f2fs_write_data_pages+0x261d/0x3000
[  229.729464][ T7199]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  229.729550][ T7199]  ? is_bpf_text_address+0x292/0x2b0
[  229.729583][ T7199]  ? is_bpf_text_address+0x26/0x2b0
[  229.729616][ T7199]  ? kernel_text_address+0xa5/0xe0
[  229.729643][ T7199]  ? __kernel_text_address+0xd/0x40
[  229.729687][ T7199]  ? __lock_acquire+0xab9/0xd20
[  229.729727][ T7199]  ? do_raw_spin_lock+0x121/0x290
[  229.729767][ T7199]  ? do_raw_spin_unlock+0x122/0x240
[  229.729791][ T7199]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  229.729820][ T7199]  do_writepages+0x32b/0x550
[  229.729875][ T7199]  ? do_raw_spin_unlock+0x122/0x240
[  229.729905][ T7199]  filemap_fdatawrite+0x191/0x230
[  229.729927][ T7199]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  229.730027][ T7199]  ? do_raw_spin_unlock+0x122/0x240
[  229.730058][ T7199]  f2fs_sync_dirty_inodes+0x31f/0x830
[  229.730109][ T7199]  f2fs_write_checkpoint+0x94a/0x1de0
[  229.730171][ T7199]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  229.730265][ T7199]  ? kill_f2fs_super+0x298/0x6c0
[  229.730302][ T7199]  kill_f2fs_super+0x2c3/0x6c0
[  229.730340][ T7199]  ? __pfx_kill_f2fs_super+0x10/0x10
[  229.730367][ T7199]  ? radix_tree_delete_item+0x2b6/0x400
[  229.730399][ T7199]  ? shrinker_free+0x2ce/0x3e0
[  229.730430][ T7199]  deactivate_locked_super+0xb9/0x130
[  229.730464][ T7199]  cleanup_mnt+0x425/0x4c0
[  229.730493][ T7199]  ? lockdep_hardirqs_on+0x9c/0x150
[  229.730519][ T7199]  task_work_run+0x1d1/0x260
[  229.730550][ T7199]  ? __pfx_task_work_run+0x10/0x10
[  229.730573][ T7199]  ? __x64_sys_umount+0x122/0x160
[  229.730601][ T7199]  ? exit_to_user_mode_loop+0x40/0x110
[  229.730637][ T7199]  exit_to_user_mode_loop+0xec/0x110
[  229.730668][ T7199]  do_syscall_64+0x2bd/0x3b0
[  229.730689][ T7199]  ? lockdep_hardirqs_on+0x9c/0x150
[  229.730711][ T7199]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.730731][ T7199]  ? clear_bhb_loop+0x60/0xb0
[  229.730758][ T7199]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.730778][ T7199] RIP: 0033:0x7f7cee38fc57
[  229.730798][ T7199] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  229.730816][ T7199] RSP: 002b:00007ffc873937d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  229.730838][ T7199] RAX: 0000000000000000 RBX: 00007f7cee410925 RCX: 00007f7cee38fc57
[  229.730852][ T7199] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc87393890
[  229.730870][ T7199] RBP: 00007ffc87393890 R08: 0000000000000000 R09: 0000000000000000
[  229.730883][ T7199] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc87394920
[  229.730897][ T7199] R13: 00007f7cee410925 R14: 0000000000038110 R15: 00007ffc87394960
[  229.730935][ T7199]  </TASK>
[  229.730944][ T7199] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  229.741079][ T9602] ext4 filesystem being mounted at /245/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  230.153671][ T9602] EXT4-fs (loop1): shut down requested (1)
[  230.256600][ T5840] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.580322][ T9620] loop1: detected capacity change from 0 to 256
[  231.036768][ T9635] loop1: detected capacity change from 0 to 2048
[  231.080472][ T9635] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  231.080596][ T9635] ext4 filesystem being mounted at /249/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  231.225338][ T5840] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.435746][ T9627] loop0: detected capacity change from 0 to 32768
[  231.459830][ T9627] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1283 (9627)
[  231.504842][ T9627] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  231.525782][ T9627] BTRFS info (device loop0): using sha256 (sha256-x86_64) checksum algorithm
[  231.538871][ T9627] BTRFS info (device loop0): using free-space-tree
[  231.555407][ T9657] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1295'.
[  231.566969][ T9653] loop3: detected capacity change from 0 to 1024
[  231.607324][ T9657] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1295'.
[  231.617944][ T5908] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  231.635270][ T9657] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.647733][ T9657] bridge0: port 2(bridge_slave_1) entered blocking state
[  231.656812][ T9657] bridge0: port 2(bridge_slave_1) entered forwarding state
[  231.674406][ T2947] hfsplus: b-tree write err: -5, ino 4
[  231.751062][ T9627] BTRFS info (device loop0): rebuilding free space tree
[  231.793010][ T5908] usb 2-1: config 0 has an invalid interface number: 255 but max is 0
[  231.795477][ T9671] loop2: detected capacity change from 0 to 8192
[  231.801256][ T5908] usb 2-1: config 0 has no interface number 0
[  231.801295][ T5908] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  231.868429][ T5908] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  231.923085][ T5908] usb 2-1: config 0 interface 255 has no altsetting 0
[  231.941814][ T5908] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  231.969664][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.986228][ T5908] usb 2-1: config 0 descriptor??
[  232.015627][ T5908] ums-realtek 2-1:0.255: USB Mass Storage device detected
[  232.267639][   T24] usb 2-1: USB disconnect, device number 6
[  232.303744][ T5831] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  233.100745][ T9711] loop0: detected capacity change from 0 to 1024
[  233.281423][   T30] audit: type=1326 audit(1749274678.184:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9715 comm="syz.1.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829338e929 code=0x7ffc0000
[  233.348841][   T30] audit: type=1326 audit(1749274678.184:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9715 comm="syz.1.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829338e929 code=0x7ffc0000
[  233.395261][ T9697] loop2: detected capacity change from 0 to 40427
[  233.401842][   T30] audit: type=1326 audit(1749274678.194:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9715 comm="syz.1.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f829338e929 code=0x7ffc0000
[  233.444639][   T30] audit: type=1326 audit(1749274678.194:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9715 comm="syz.1.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829338e929 code=0x7ffc0000
[  233.471541][   T30] audit: type=1326 audit(1749274678.194:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9715 comm="syz.1.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f829338e929 code=0x7ffc0000
[  233.495723][   T30] audit: type=1326 audit(1749274678.214:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9715 comm="syz.1.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829338e929 code=0x7ffc0000
[  233.519279][   T30] audit: type=1326 audit(1749274678.214:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9715 comm="syz.1.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829338e929 code=0x7ffc0000
[  233.578438][   T30] audit: type=1326 audit(1749274678.214:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9717 comm="syz.1.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f82933c11e5 code=0x7ffc0000
[  233.643047][   T30] audit: type=1326 audit(1749274678.264:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9715 comm="syz.1.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f829338e929 code=0x7ffc0000
[  233.712613][ T9697] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  233.713160][   T30] audit: type=1326 audit(1749274678.374:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9717 comm="syz.1.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f829338e929 code=0x7ffc0000
[  233.869188][ T7199] syz-executor: attempt to access beyond end of device
[  233.869188][ T7199] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  233.901152][ T7199] CPU: 1 UID: 0 PID: 7199 Comm: syz-executor Not tainted 6.15.0-next-20250606-syzkaller #0 PREEMPT(full) 
[  233.901183][ T7199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  233.901196][ T7199] Call Trace:
[  233.901205][ T7199]  <TASK>
[  233.901214][ T7199]  dump_stack_lvl+0x189/0x250
[  233.901245][ T7199]  ? __pfx_dump_stack_lvl+0x10/0x10
[  233.901262][ T7199]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  233.901295][ T7199]  ? __pfx_queue_work_on+0x10/0x10
[  233.901317][ T7199]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  233.901347][ T7199]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  233.901381][ T7199]  ? f2fs_hw_is_readonly+0x39b/0x470
[  233.901412][ T7199]  f2fs_handle_critical_error+0x37c/0x540
[  233.901445][ T7199]  f2fs_write_end_io+0x495/0x810
[  233.901470][ T7199]  ? blkg_put+0x22/0x240
[  233.901522][ T7199]  __submit_merged_bio+0x27a/0x6a0
[  233.901557][ T7199]  __submit_merged_write_cond+0x255/0x530
[  233.901590][ T7199]  f2fs_write_data_pages+0x261d/0x3000
[  233.901661][ T7199]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  233.901704][ T7199]  ? arch_stack_walk+0xfc/0x150
[  233.901759][ T7199]  ? __mod_zone_page_state+0xd7/0x140
[  233.901791][ T7199]  ? folios_put_refs+0x560/0x640
[  233.901833][ T7199]  ? __lock_acquire+0xab9/0xd20
[  233.901872][ T7199]  ? do_raw_spin_lock+0x121/0x290
[  233.901914][ T7199]  ? do_raw_spin_unlock+0x122/0x240
[  233.901937][ T7199]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  233.901966][ T7199]  do_writepages+0x32b/0x550
[  233.902011][ T7199]  ? do_raw_spin_unlock+0x122/0x240
[  233.902040][ T7199]  filemap_fdatawrite+0x191/0x230
[  233.902061][ T7199]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  233.902141][ T7199]  ? do_raw_spin_unlock+0x122/0x240
[  233.902171][ T7199]  f2fs_sync_dirty_inodes+0x31f/0x830
[  233.902219][ T7199]  f2fs_write_checkpoint+0x94a/0x1de0
[  233.902278][ T7199]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  233.902368][ T7199]  ? kill_f2fs_super+0x298/0x6c0
[  233.902404][ T7199]  kill_f2fs_super+0x2c3/0x6c0
[  233.902440][ T7199]  ? __pfx_kill_f2fs_super+0x10/0x10
[  233.902465][ T7199]  ? radix_tree_delete_item+0x2b6/0x400
[  233.902501][ T7199]  ? shrinker_free+0x2ce/0x3e0
[  233.902531][ T7199]  deactivate_locked_super+0xb9/0x130
[  233.902562][ T7199]  cleanup_mnt+0x425/0x4c0
[  233.902590][ T7199]  ? lockdep_hardirqs_on+0x9c/0x150
[  233.902614][ T7199]  task_work_run+0x1d1/0x260
[  233.902643][ T7199]  ? __pfx_task_work_run+0x10/0x10
[  233.902665][ T7199]  ? __x64_sys_umount+0x122/0x160
[  233.902692][ T7199]  ? exit_to_user_mode_loop+0x40/0x110
[  233.902725][ T7199]  exit_to_user_mode_loop+0xec/0x110
[  233.902754][ T7199]  do_syscall_64+0x2bd/0x3b0
[  233.902774][ T7199]  ? lockdep_hardirqs_on+0x9c/0x150
[  233.902794][ T7199]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.902812][ T7199]  ? clear_bhb_loop+0x60/0xb0
[  233.902837][ T7199]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.902856][ T7199] RIP: 0033:0x7f7cee38fc57
[  233.902874][ T7199] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  233.902892][ T7199] RSP: 002b:00007ffc873937d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  233.902913][ T7199] RAX: 0000000000000000 RBX: 00007f7cee410925 RCX: 00007f7cee38fc57
[  233.902926][ T7199] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc87393890
[  233.902938][ T7199] RBP: 00007ffc87393890 R08: 0000000000000000 R09: 0000000000000000
[  233.902951][ T7199] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc87394920
[  233.902964][ T7199] R13: 00007f7cee410925 R14: 0000000000039135 R15: 00007ffc87394960
[  233.903000][ T7199]  </TASK>
[  234.353679][ T7199] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  234.711966][ T9725] loop0: detected capacity change from 0 to 65536
[  234.754498][ T9725] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  234.824845][ T9725] XFS (loop0): Ending clean mount
[  234.862767][ T9725] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_cntbt block 0x6 
[  234.883010][ T9725] XFS (loop0): Unmount and run xfs_repair
[  234.888957][ T9725] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  234.899983][ T9725] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  234.909656][ T9725] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10  ................
[  234.919376][ T9725] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  234.935073][ T9725] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03  .....J..........
[  234.949550][ T9725] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00  ...9..?.........
[  234.961856][ T9725] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00  ...........?....
[  234.972209][ T9725] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  234.981942][ T9725] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  234.992518][ T9725] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x6 len 2 error 74
[  235.027424][ T9725] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8e0 (fs/xfs/xfs_trans_buf.c:311).  Shutting down filesystem.
[  235.043731][ T9725] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[  235.085961][ T5831] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  235.683635][ T9764] netlink: 816 bytes leftover after parsing attributes in process `syz.4.1332'.
[  235.823897][ T5846] Bluetooth: hci5: command 0x1003 tx timeout
[  235.852897][ T5155] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  236.113716][ T9766] loop0: detected capacity change from 0 to 32768
[  236.162018][ T9766] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  236.170766][ T9766] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  236.277876][ T9766] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  236.298656][ T5901] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  236.323154][ T5901] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  236.478259][ T5901] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 155ms
[  236.496595][ T5901] gfs2: fsid=syz:syz.0: jid=0: Done
[  236.526035][ T9766] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  237.044218][ T9789] loop2: detected capacity change from 0 to 256
[  237.151264][ T9776] loop4: detected capacity change from 0 to 32768
[  237.200850][ T9776] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[  237.383580][ T5833] ocfs2: Unmounting device (7,4) on (node local)
[  238.210609][ T9799] loop1: detected capacity change from 0 to 32768
[  238.227737][ T9799] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1345 (9799)
[  238.258778][ T9799] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  238.271161][ T9799] BTRFS info (device loop1): using crc32c (crc32c-x86_64) checksum algorithm
[  238.286380][ T9799] BTRFS info (device loop1): using free-space-tree
[  238.356327][ T9821] loop4: detected capacity change from 0 to 4096
[  238.378477][ T9803] loop2: detected capacity change from 0 to 32768
[  238.397237][ T9821] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512).
[  238.439895][ T9799] BTRFS info (device loop1): rebuilding free space tree
[  238.683757][ T5840] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  239.072362][ T9855] loop2: detected capacity change from 0 to 512
[  239.150938][ T9855] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1359: bg 0: block 5: invalid block bitmap
[  239.249808][ T9855] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  239.282027][ T9863] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  239.303119][ T9855] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1359: invalid indirect mapped block 4294967295 (level 1)
[  239.354807][ T9855] EXT4-fs (loop2): 1 orphan inode deleted
[  239.360611][ T9855] EXT4-fs (loop2): 1 truncate cleaned up
[  239.394762][ T9855] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  239.586624][ T7199] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  239.802201][ T9852] loop0: detected capacity change from 0 to 32768
[  239.886363][ T9852] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  239.964844][ T9894] loop2: detected capacity change from 0 to 4096
[  240.003211][ T9894] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  240.084201][ T9894] EXT4-fs (loop2): shut down requested (2)
[  240.151168][ T7199] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.183887][ T9852] XFS (loop0): Ending clean mount
[  240.232778][ T9909] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  240.370104][ T5831] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  240.450436][ T9911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1382'.
[  240.496469][ T9915] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1384'.
[  240.951316][ T9929] loop4: detected capacity change from 0 to 65
[  240.965586][ T9929] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway
[  241.029792][ T9905] loop3: detected capacity change from 0 to 32768
[  241.052328][ T9905] XFS (loop3): DAX unsupported by block device. Turning off DAX.
[  241.071996][ T5950] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  241.101755][ T9905] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  241.161289][ T9905] XFS (loop3): Ending clean mount
[  241.176354][ T9905] XFS (loop3): Quotacheck needed: Please wait.
[  241.236933][ T9905] XFS (loop3): Quotacheck: Done.
[  241.258270][ T5950] usb 3-1: Using ep0 maxpacket: 8
[  241.310937][ T5950] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  241.341361][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.361887][ T5834] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  241.361893][ T5950] pvrusb2: Hardware description: Terratec Grabster AV400
[  241.381126][ T5950] pvrusb2: **********
[  241.387662][ T5950] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  241.401232][ T9947] loop1: detected capacity change from 0 to 64
[  241.419975][ T5950] pvrusb2: Important functionality might not be entirely working.
[  241.455960][ T5950] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  241.475602][ T5950] pvrusb2: **********
[  241.499849][ T9949] loop4: detected capacity change from 0 to 256
[  241.565002][ T2345] pvrusb2: Invalid write control endpoint
[  241.758774][ T9952] syz_tun: entered promiscuous mode
[  241.769043][ T5950] usb 3-1: USB disconnect, device number 5
[  241.805390][ T2345] pvrusb2: Invalid write control endpoint
[  241.820908][ T9952] syz_tun: left promiscuous mode
[  241.839329][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  241.883401][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  241.912435][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  241.931975][ T9956] loop1: detected capacity change from 0 to 512
[  241.935118][ T2345] pvrusb2: Device being rendered inoperable
[  241.953577][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  241.971118][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  241.995119][ T9956] EXT4-fs error (device loop1): ext4_orphan_get:1419: comm syz.1.1401: bad orphan inode 13
[  242.000023][ T2345] pvrusb2: Attached sub-driver cx25840
[  242.034478][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  242.038737][ T9956] ext4_test_bit(bit=12, block=4) = 1
[  242.045585][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  242.104596][ T9956] is_bad_inode(inode)=0
[  242.108820][ T9956] NEXT_ORPHAN(inode)=0
[  242.122408][ T9942] loop0: detected capacity change from 0 to 40427
[  242.148763][ T9956] max_ino=32
[  242.152008][ T9956] i_nlink=1
[  242.157027][ T9942] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504)
[  242.166711][ T9956] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  242.179184][ T9942] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  242.199251][ T9942] F2FS-fs (loop0): invalid crc value
[  242.206445][ T9956] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.1401: Unrecognised inode hash code 20
[  242.225377][ T9956] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1401: Corrupt directory, running e2fsck is recommended
[  242.263570][ T9956] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.1401: Unrecognised inode hash code 20
[  242.280967][ T9956] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1401: Corrupt directory, running e2fsck is recommended
[  242.371620][ T9970] loop4: detected capacity change from 0 to 64
[  242.421823][ T5840] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.506453][ T9942] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  242.521817][ T9942] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  242.667890][ T5831] syz-executor: attempt to access beyond end of device
[  242.667890][ T5831] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  242.723004][ T5831] CPU: 0 UID: 0 PID: 5831 Comm: syz-executor Not tainted 6.15.0-next-20250606-syzkaller #0 PREEMPT(full) 
[  242.723034][ T5831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  242.723047][ T5831] Call Trace:
[  242.723055][ T5831]  <TASK>
[  242.723065][ T5831]  dump_stack_lvl+0x189/0x250
[  242.723093][ T5831]  ? __pfx_dump_stack_lvl+0x10/0x10
[  242.723110][ T5831]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  242.723151][ T5831]  ? __pfx_queue_work_on+0x10/0x10
[  242.723173][ T5831]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  242.723204][ T5831]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  242.723244][ T5831]  ? f2fs_hw_is_readonly+0x39b/0x470
[  242.723274][ T5831]  f2fs_handle_critical_error+0x37c/0x540
[  242.723307][ T5831]  f2fs_write_end_io+0x495/0x810
[  242.723333][ T5831]  ? blkg_put+0x22/0x240
[  242.723375][ T5831]  __submit_merged_bio+0x27a/0x6a0
[  242.723406][ T5831]  __submit_merged_write_cond+0x255/0x530
[  242.723439][ T5831]  f2fs_write_data_pages+0x261d/0x3000
[  242.723523][ T5831]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  242.723560][ T5831]  ? is_bpf_text_address+0x292/0x2b0
[  242.723617][ T5831]  ? __mod_zone_page_state+0xd7/0x140
[  242.723647][ T5831]  ? folios_put_refs+0x560/0x640
[  242.723688][ T5831]  ? __lock_acquire+0xab9/0xd20
[  242.723725][ T5831]  ? do_raw_spin_lock+0x121/0x290
[  242.723761][ T5831]  ? do_raw_spin_unlock+0x122/0x240
[  242.723808][ T5831]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  242.723845][ T5831]  do_writepages+0x32b/0x550
[  242.723895][ T5831]  ? do_raw_spin_unlock+0x122/0x240
[  242.723928][ T5831]  filemap_fdatawrite+0x191/0x230
[  242.723955][ T5831]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  242.724027][ T5831]  ? do_raw_spin_unlock+0x122/0x240
[  242.724056][ T5831]  f2fs_sync_dirty_inodes+0x31f/0x830
[  242.724101][ T5831]  f2fs_write_checkpoint+0x94a/0x1de0
[  242.724157][ T5831]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  242.724237][ T5831]  ? kill_f2fs_super+0x298/0x6c0
[  242.724271][ T5831]  kill_f2fs_super+0x2c3/0x6c0
[  242.724306][ T5831]  ? __pfx_kill_f2fs_super+0x10/0x10
[  242.724332][ T5831]  ? radix_tree_delete_item+0x2b6/0x400
[  242.724360][ T5831]  ? shrinker_free+0x2ce/0x3e0
[  242.724389][ T5831]  deactivate_locked_super+0xb9/0x130
[  242.724421][ T5831]  cleanup_mnt+0x425/0x4c0
[  242.724448][ T5831]  ? lockdep_hardirqs_on+0x9c/0x150
[  242.724473][ T5831]  task_work_run+0x1d1/0x260
[  242.724519][ T5831]  ? __pfx_task_work_run+0x10/0x10
[  242.724541][ T5831]  ? __x64_sys_umount+0x122/0x160
[  242.724563][ T5831]  ? exit_to_user_mode_loop+0x40/0x110
[  242.724597][ T5831]  exit_to_user_mode_loop+0xec/0x110
[  242.724625][ T5831]  do_syscall_64+0x2bd/0x3b0
[  242.724646][ T5831]  ? lockdep_hardirqs_on+0x9c/0x150
[  242.724666][ T5831]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.724686][ T5831]  ? clear_bhb_loop+0x60/0xb0
[  242.724711][ T5831]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.724731][ T5831] RIP: 0033:0x7fb42f38fc57
[  242.724754][ T5831] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  242.724771][ T5831] RSP: 002b:00007fffd4b15b08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  242.724802][ T5831] RAX: 0000000000000000 RBX: 00007fb42f410925 RCX: 00007fb42f38fc57
[  242.724817][ T5831] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffd4b15bc0
[  242.724829][ T5831] RBP: 00007fffd4b15bc0 R08: 0000000000000000 R09: 0000000000000000
[  242.724841][ T5831] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffd4b16c50
[  242.724853][ T5831] R13: 00007fb42f410925 R14: 000000000003b38e R15: 00007fffd4b16c90
[  242.724887][ T5831]  </TASK>
[  242.724896][ T5831] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  242.782743][ T9983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1412'.
[  243.134206][ T9987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1412'.
[  243.419264][ T9995] macsec1: entered promiscuous mode
[  243.813119][T10004] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1420'.
[  243.858373][ T9979] loop2: detected capacity change from 0 to 32768
[  243.911941][ T9979] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  244.097253][ T5908] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  244.116728][ T9979] XFS (loop2): Ending clean mount
[  244.130951][ T9979] XFS (loop2): Quotacheck needed: Please wait.
[  244.194885][ T9979] XFS (loop2): Quotacheck: Done.
[  244.273266][ T5908] usb 5-1: Using ep0 maxpacket: 32
[  244.290911][ T5908] usb 5-1: config 0 has an invalid interface number: 35 but max is 0
[  244.306524][ T5908] usb 5-1: config 0 has no interface number 0
[  244.308671][ T7199] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  244.333853][ T5908] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  244.370470][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.428061][ T5908] usb 5-1: Product: syz
[  244.432298][ T5908] usb 5-1: Manufacturer: syz
[  244.470375][ T5908] usb 5-1: SerialNumber: syz
[  244.485414][ T5908] usb 5-1: config 0 descriptor??
[  244.506025][ T5908] radio-si470x 5-1:0.35: could not find interrupt in endpoint
[  244.536757][ T5908] radio-si470x 5-1:0.35: probe with driver radio-si470x failed with error -5
[  244.701457][T10034] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  245.097597][T10042] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1433'.
[  245.531239][ T5908] radio-raremono 5-1:0.35: this is not Thanko's Raremono.
[  245.539127][ T5908] usbhid 5-1:0.35: couldn't find an input interrupt endpoint
[  245.737290][   T24] usb 5-1: USB disconnect, device number 8
[  245.864791][T10049] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  245.886385][T10049] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  245.905571][T10049] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  245.931097][T10049] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  245.983310][T10050] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  246.001716][T10050] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  246.032895][T10050] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  246.055399][T10050] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  246.457622][T10045] loop3: detected capacity change from 0 to 32768
[  246.510638][T10045] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  246.659447][T10045] XFS (loop3): Metadata corruption detected at __xfs_buf_ioend+0x33f/0x6f0, xfs_inode block 0x3000 xfs_inode_buf_verify
[  246.728670][T10045] XFS (loop3): Unmount and run xfs_repair
[  246.757423][T10045] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  246.767039][T10031] loop1: detected capacity change from 0 to 262144
[  246.776771][T10045] 00000000: 49 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00  I...............
[  246.785792][T10045] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  246.794826][T10045] 00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  246.804336][T10045] 00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  246.815348][T10045] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  246.827650][T10045] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  246.837173][T10045] 00000060: ff ff ff ff 34 42 28 19 00 00 00 00 00 00 00 00  ....4B(.........
[  246.846854][T10031] F2FS-fs (loop1): invalid crc value
[  246.852309][T10045] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  246.879381][T10045] XFS (loop3): metadata I/O error in "xfs_imap_to_bp+0x127/0x2f0" at daddr 0x3000 len 64 error 117
[  246.968617][T10045] XFS (loop3): Failed to read root inode 0x1800, error 117
[  246.976247][T10031] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  246.992230][T10045] XFS (loop3): Uncorrected metadata errors detected; please run xfs_repair.
[  247.655224][T10090] netlink: 452 bytes leftover after parsing attributes in process `syz.2.1449'.
[  248.055625][T10077] loop4: detected capacity change from 0 to 32768
[  248.090818][T10103] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1456'.
[  248.128443][T10077] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  248.278172][T10077] XFS (loop4): Ending clean mount
[  248.297653][T10077] XFS (loop4): Quotacheck needed: Please wait.
[  248.389364][T10077] XFS (loop4): Quotacheck: Done.
[  248.615594][ T5833] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  248.983685][T10140] loop0: detected capacity change from 0 to 512
[  249.026610][T10140] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[  249.065162][T10140] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1470: invalid indirect mapped block 2683928664 (level 1)
[  249.137949][T10140] EXT4-fs (loop0): Remounting filesystem read-only
[  249.163535][T10140] EXT4-fs (loop0): 1 truncate cleaned up
[  249.191471][T10140] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  249.562096][T10129] loop2: detected capacity change from 0 to 32768
[  250.962105][T10185] syzkaller0: tun_chr_ioctl cmd 35108
[  251.110704][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  251.110723][   T30] audit: type=1326 audit(1749274696.014:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="syz.4.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43918e929 code=0x7fc00000
[  251.225581][   T30] audit: type=1326 audit(1749274696.014:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="syz.4.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc43918e929 code=0x7fc00000
[  251.294589][   T30] audit: type=1326 audit(1749274696.014:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="syz.4.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43918e929 code=0x7fc00000
[  251.374134][   T30] audit: type=1326 audit(1749274696.014:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="syz.4.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43918e929 code=0x7fc00000
[  251.416540][T10197] loop3: detected capacity change from 0 to 64
[  251.434093][   T30] audit: type=1326 audit(1749274696.014:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="syz.4.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43918e929 code=0x7fc00000
[  251.496138][   T30] audit: type=1326 audit(1749274696.014:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="syz.4.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43918e929 code=0x7fc00000
[  251.559661][   T30] audit: type=1326 audit(1749274696.014:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="syz.4.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43918e929 code=0x7fc00000
[  251.569768][T10197] overlay: filesystem on ./bus not supported
[  251.652940][   T30] audit: type=1326 audit(1749274696.014:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="syz.4.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43918e929 code=0x7fc00000
[  251.727063][T10201] loop4: detected capacity change from 0 to 4096
[  251.743203][   T30] audit: type=1326 audit(1749274696.014:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="syz.4.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43918e929 code=0x7fc00000
[  251.779970][T10201] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512).
[  251.819015][   T30] audit: type=1326 audit(1749274696.014:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="syz.4.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43918e929 code=0x7fc00000
[  252.348489][ T9144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.501058][ T9144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.532269][T10204] loop1: detected capacity change from 0 to 32768
[  252.551063][T10204] (syz.1.1495,10204,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  252.568982][T10204] (syz.1.1495,10204,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  252.609313][T10204] JBD2: Ignoring recovery information on journal
[  252.784486][ T9144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.809413][T10204] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  252.904908][T10214] loop2: detected capacity change from 0 to 512
[  252.945268][T10214] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  252.985227][T10214] EXT4-fs (loop2): orphan cleanup on readonly fs
[  253.028654][ T9144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.115938][T10214] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1500: bg 0: block 248: padding at end of block bitmap is not set
[  253.184319][ T5840] ocfs2: Unmounting device (7,1) on (node local)
[  253.195233][T10214] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1500: Failed to acquire dquot type 1
[  253.300878][T10214] EXT4-fs (loop2): 1 truncate cleaned up
[  253.342437][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  253.352368][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  253.361192][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  253.370367][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  253.378758][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  253.394731][T10214] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  253.538996][ T9144] bridge_slave_1: left allmulticast mode
[  253.555594][ T7199] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.576152][ T9144] bridge_slave_1: left promiscuous mode
[  253.583782][ T9144] bridge0: port 2(bridge_slave_1) entered disabled state
[  253.680186][ T9144] 
: left allmulticast mode
[  253.693000][ T9144] 
: left promiscuous mode
[  253.697865][ T9144] bridge0: port 1(
) entered disabled state
[  254.362558][T10241] netlink: 'syz.1.1510': attribute type 1 has an invalid length.
[  254.370773][T10241] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1510'.
[  254.640246][ T9144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  254.660549][ T9144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  254.673756][ T9144] bond0 (unregistering): Released all slaves
[  254.806337][T10228] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  254.848227][ T9144] tipc: Left network mode
[  254.895766][T10228] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  255.041068][T10250] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1514'.
[  255.062349][T10250] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1514'.
[  255.117299][T10250] gretap0: entered promiscuous mode
[  255.124633][T10250] macvlan0: entered promiscuous mode
[  255.484580][ T5155] Bluetooth: hci2: command tx timeout
[  255.521990][ T9144] hsr_slave_0: left promiscuous mode
[  255.538745][ T9144] hsr_slave_1: left promiscuous mode
[  255.559356][ T9144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  255.596544][ T9144] batman_adv: batadv0: Removing interface: batadv_slave_0
[  255.617499][ T9144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  255.642031][T10258] loop2: detected capacity change from 0 to 4096
[  255.648591][ T9144] batman_adv: batadv0: Removing interface: batadv_slave_1
[  255.670193][T10258] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  255.694177][T10258] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096)
[  255.710155][ T9144] veth1_macvtap: left promiscuous mode
[  255.723209][ T9144] veth0_macvtap: left promiscuous mode
[  255.733478][ T9144] veth1_vlan: left promiscuous mode
[  255.741815][ T9144] veth0_vlan: left promiscuous mode
[  255.757157][T10262] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  255.807655][T10261] loop4: detected capacity change from 0 to 1024
[  255.846867][T10261] EXT4-fs: Ignoring removed orlov option
[  255.889629][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  255.896558][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  255.955359][T10261] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  255.982127][T10265] loop1: detected capacity change from 0 to 512
[  256.045653][T10265] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  256.054890][T10261] EXT4-fs (loop4): resizing filesystem from 512 to 0 blocks
[  256.075840][T10261] EXT4-fs warning (device loop4): ext4_resize_fs:2042: can't shrink FS - resize aborted
[  256.156592][T10265] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  256.208742][T10265] ext4 filesystem being mounted at /296/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  256.254341][ T5833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.518025][ T5840] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.181824][T10278] loop4: detected capacity change from 0 to 32768
[  257.226993][T10278] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1522 (10278)
[  257.287920][T10278] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  257.314339][T10278] BTRFS info (device loop4): using sha256 (sha256-x86_64) checksum algorithm
[  257.341004][T10278] BTRFS info (device loop4): using free-space-tree
[  257.443174][T10278] BTRFS info (device loop4): rebuilding free space tree
[  257.564105][ T5155] Bluetooth: hci2: command tx timeout
[  257.567307][ T9144] team0 (unregistering): Port device team_slave_1 removed
[  257.819107][ T9144] team0 (unregistering): Port device team_slave_0 removed
[  257.998608][ T5833] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  259.510172][T10222] chnl_net:caif_netlink_parms(): no params data found
[  259.646042][ T5155] Bluetooth: hci2: command tx timeout
[  259.677799][T10328] loop1: detected capacity change from 0 to 32768
[  259.686102][T10328] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1537 (10328)
[  259.715543][T10328] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  259.727287][T10328] BTRFS info (device loop1): using sha256 (sha256-x86_64) checksum algorithm
[  259.736961][T10328] BTRFS info (device loop1): using free-space-tree
[  260.005139][T10328] BTRFS info (device loop1): rebuilding free space tree
[  260.048773][T10354] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1541'.
[  260.088659][T10354] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1541'.
[  260.132504][T10222] bridge0: port 1(bridge_slave_0) entered blocking state
[  260.145194][T10355] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_team, syncid = 0, id = 0
[  260.170489][T10222] bridge0: port 1(bridge_slave_0) entered disabled state
[  260.189925][T10222] bridge_slave_0: entered allmulticast mode
[  260.198572][T10222] bridge_slave_0: entered promiscuous mode
[  260.230035][T10222] bridge0: port 2(bridge_slave_1) entered blocking state
[  260.237900][T10222] bridge0: port 2(bridge_slave_1) entered disabled state
[  260.245473][T10222] bridge_slave_1: entered allmulticast mode
[  260.279139][T10222] bridge_slave_1: entered promiscuous mode
[  260.304764][T10354] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1541'.
[  260.497180][T10222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  260.526437][T10222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  260.587334][T10362] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1544'.
[  260.611057][ T5840] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  260.792133][T10222] team0: Port device team_slave_0 added
[  260.830183][T10222] team0: Port device team_slave_1 added
[  260.890346][T10365] loop2: detected capacity change from 0 to 1024
[  260.930722][T10365] EXT4-fs: Ignoring removed bh option
[  260.958348][T10222] batman_adv: batadv0: Adding interface: batadv_slave_0
[  260.972900][T10222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  261.028757][T10222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  261.042485][T10222] batman_adv: batadv0: Adding interface: batadv_slave_1
[  261.049516][T10222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  261.075861][T10222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  261.088720][T10365] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  261.292217][ T7199] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  261.353561][T10222] hsr_slave_0: entered promiscuous mode
[  261.369436][T10222] hsr_slave_1: entered promiscuous mode
[  261.382757][T10222] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  261.402384][T10222] Cannot create hsr debugfs directory
[  261.725008][ T5155] Bluetooth: hci2: command tx timeout
[  261.812936][   T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  262.013309][   T24] usb 5-1: Using ep0 maxpacket: 32
[  262.024396][   T24] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  262.075120][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.100219][   T24] usb 5-1: config 0 descriptor??
[  262.318320][T10385] loop2: detected capacity change from 0 to 40427
[  262.325613][   T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  262.353003][T10385] F2FS-fs (loop2): invalid crc value
[  262.359202][   T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  262.395746][   T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  262.413003][   T24] usb 5-1: media controller created
[  262.452220][T10222] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  262.460328][T10400] loop1: detected capacity change from 0 to 512
[  262.472615][T10400] EXT4-fs (loop1): Test dummy encryption mode enabled
[  262.480390][T10400] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  262.499366][T10222] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  262.511439][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  262.519525][T10222] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  262.528733][T10400] EXT4-fs (loop1): 1 truncate cleaned up
[  262.546847][T10400] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  262.564618][T10222] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  262.647196][   T24] az6027: usb out operation failed. (-71)
[  262.661766][ T5840] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.689299][   T24] az6027: usb out operation failed. (-71)
[  262.713270][T10385] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  262.731743][   T24] stb0899_attach: Driver disabled by Kconfig
[  262.747876][   T24] az6027: no front-end attached
[  262.747876][   T24] 
[  262.773959][   T24] az6027: usb out operation failed. (-71)
[  262.783557][   T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  262.815424][   T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input12
[  262.835997][T10222] 8021q: adding VLAN 0 to HW filter on device bond0
[  262.850333][   T24] dvb-usb: schedule remote query interval to 400 msecs.
[  262.868276][   T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  262.901303][   T24] usb 5-1: USB disconnect, device number 9
[  262.916601][ T7199] syz-executor: attempt to access beyond end of device
[  262.916601][ T7199] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  262.930393][T10222] 8021q: adding VLAN 0 to HW filter on device team0
[  262.955087][  T138] bridge0: port 1(bridge_slave_0) entered blocking state
[  262.962267][  T138] bridge0: port 1(bridge_slave_0) entered forwarding state
[  262.970367][ T7199] CPU: 0 UID: 0 PID: 7199 Comm: syz-executor Not tainted 6.15.0-next-20250606-syzkaller #0 PREEMPT(full) 
[  262.970394][ T7199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  262.970406][ T7199] Call Trace:
[  262.970415][ T7199]  <TASK>
[  262.970423][ T7199]  dump_stack_lvl+0x189/0x250
[  262.970449][ T7199]  ? __pfx_dump_stack_lvl+0x10/0x10
[  262.970467][ T7199]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  262.970500][ T7199]  ? __pfx_queue_work_on+0x10/0x10
[  262.970522][ T7199]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  262.970553][ T7199]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  262.970588][ T7199]  ? f2fs_hw_is_readonly+0x39b/0x470
[  262.970618][ T7199]  f2fs_handle_critical_error+0x37c/0x540
[  262.970651][ T7199]  f2fs_write_end_io+0x495/0x810
[  262.970677][ T7199]  ? blkg_put+0x22/0x240
[  262.970719][ T7199]  __submit_merged_bio+0x27a/0x6a0
[  262.970749][ T7199]  __submit_merged_write_cond+0x255/0x530
[  262.970782][ T7199]  f2fs_write_data_pages+0x261d/0x3000
[  262.970846][ T7199]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  262.970934][ T7199]  ? folios_put_refs+0x559/0x640
[  262.970974][ T7199]  ? __lock_acquire+0xab9/0xd20
[  262.971013][ T7199]  ? do_raw_spin_lock+0x121/0x290
[  262.971057][ T7199]  ? do_raw_spin_unlock+0x122/0x240
[  262.971081][ T7199]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  262.971110][ T7199]  do_writepages+0x32b/0x550
[  262.971153][ T7199]  ? do_raw_spin_unlock+0x122/0x240
[  262.971182][ T7199]  filemap_fdatawrite+0x191/0x230
[  262.971203][ T7199]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  262.971274][ T7199]  ? do_raw_spin_unlock+0x122/0x240
[  262.971303][ T7199]  f2fs_sync_dirty_inodes+0x31f/0x830
[  262.971349][ T7199]  f2fs_write_checkpoint+0x94a/0x1de0
[  262.971404][ T7199]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  262.971484][ T7199]  ? kill_f2fs_super+0x298/0x6c0
[  262.971519][ T7199]  kill_f2fs_super+0x2c3/0x6c0
[  262.971552][ T7199]  ? __pfx_kill_f2fs_super+0x10/0x10
[  262.971577][ T7199]  ? radix_tree_delete_item+0x2b6/0x400
[  262.971604][ T7199]  ? shrinker_free+0x2ce/0x3e0
[  262.971634][ T7199]  deactivate_locked_super+0xb9/0x130
[  262.971666][ T7199]  cleanup_mnt+0x425/0x4c0
[  262.971694][ T7199]  ? lockdep_hardirqs_on+0x9c/0x150
[  262.971719][ T7199]  task_work_run+0x1d1/0x260
[  262.971748][ T7199]  ? __pfx_task_work_run+0x10/0x10
[  262.971771][ T7199]  ? __x64_sys_umount+0x122/0x160
[  262.971797][ T7199]  ? exit_to_user_mode_loop+0x40/0x110
[  262.971830][ T7199]  exit_to_user_mode_loop+0xec/0x110
[  262.971860][ T7199]  do_syscall_64+0x2bd/0x3b0
[  262.971881][ T7199]  ? lockdep_hardirqs_on+0x9c/0x150
[  262.971902][ T7199]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.971922][ T7199]  ? clear_bhb_loop+0x60/0xb0
[  262.971947][ T7199]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.971967][ T7199] RIP: 0033:0x7f7cee38fc57
[  262.971986][ T7199] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  262.972003][ T7199] RSP: 002b:00007ffc873937d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  262.972025][ T7199] RAX: 0000000000000000 RBX: 00007f7cee410925 RCX: 00007f7cee38fc57
[  262.972045][ T7199] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc87393890
[  262.972058][ T7199] RBP: 00007ffc87393890 R08: 0000000000000000 R09: 0000000000000000
[  262.972071][ T7199] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc87394920
[  262.972084][ T7199] R13: 00007f7cee410925 R14: 0000000000040294 R15: 00007ffc87394960
[  262.972118][ T7199]  </TASK>
[  262.972127][ T7199] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  263.323224][T10222] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  263.416406][T10222] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  263.445870][   T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  263.446383][T10414] loop4: detected capacity change from 0 to 128
[  263.491476][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[  263.498799][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[  263.979126][T10222] 8021q: adding VLAN 0 to HW filter on device batadv0
[  264.410558][ T7199] ------------[ cut here ]------------
[  264.416481][ T7199] refcount_t: underflow; use-after-free.
[  264.422666][ T7199] WARNING: CPU: 0 PID: 7199 at lib/refcount.c:28 refcount_warn_saturate+0x11a/0x1d0
[  264.432201][ T7199] Modules linked in:
[  264.436938][ T7199] CPU: 0 UID: 0 PID: 7199 Comm: syz-executor Not tainted 6.15.0-next-20250606-syzkaller #0 PREEMPT(full) 
[  264.448563][ T7199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  264.458777][ T7199] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0
[  264.465126][ T7199] Code: 00 5e e2 8b e8 47 07 c2 fc 90 0f 0b 90 90 eb d7 e8 1b 5c fe fc c6 05 38 22 c9 0a 01 90 48 c7 c7 60 5e e2 8b e8 27 07 c2 fc 90 <0f> 0b 90 90 eb b7 e8 fb 5b fe fc c6 05 15 22 c9 0a 01 90 48 c7 c7
[  264.485264][ T7199] RSP: 0018:ffffc9000b5f77d8 EFLAGS: 00010246
[  264.492896][ T7199] RAX: c8f7420e2e510d00 RBX: 0000000000000003 RCX: ffff888026f40000
[  264.500925][ T7199] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  264.510153][ T7199] RBP: 0000000000000000 R08: ffff8880b8624293 R09: 1ffff110170c4852
[  264.518750][ T7199] R10: dffffc0000000000 R11: ffffed10170c4853 R12: ffff88805b5bf400
[  264.527947][ T7199] R13: ffff88805aa5f860 R14: ffff88805aa5f878 R15: dffffc0000000000
[  264.536387][ T7199] FS:  0000000000000000(0000) GS:ffff888125c4d000(0000) knlGS:0000000000000000
[  264.545456][ T7199] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  264.552093][ T7199] CR2: 00007fc43937e2d8 CR3: 0000000024e68000 CR4: 00000000003526f0
[  264.560214][ T7199] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  264.568304][ T7199] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  264.576405][ T7199] Call Trace:
[  264.579786][ T7199]  <TASK>
[  264.582766][ T7199]  klist_dec_and_del+0x3c7/0x3d0
[  264.587820][ T7199]  klist_remove+0x1bd/0x340
[  264.593477][ T7199]  ? __pfx_klist_children_put+0x10/0x10
[  264.599089][ T7199]  ? __pfx_klist_remove+0x10/0x10
[  264.605560][ T7199]  ? __pfx_kobject_move+0x10/0x10
[  264.610658][ T7199]  ? get_device_parent+0x366/0x3a0
[  264.615912][ T7199]  device_move+0x193/0x700
[  264.620402][ T7199]  hci_conn_del_sysfs+0xb8/0x170
[  264.625475][ T7199]  hci_conn_del+0x8ff/0xcb0
[  264.630047][ T7199]  hci_conn_hash_flush+0x191/0x230
[  264.635358][ T7199]  hci_dev_close_sync+0xaef/0x1330
[  264.640544][ T7199]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  264.646248][ T7199]  ? up_write+0x1c4/0x420
[  264.650642][ T7199]  hci_unregister_dev+0x206/0x500
[  264.655799][ T7199]  vhci_release+0x80/0xd0
[  264.660181][ T7199]  ? __pfx_vhci_release+0x10/0x10
[  264.665353][ T7199]  __fput+0x44c/0xa70
[  264.669413][ T7199]  task_work_run+0x1d1/0x260
[  264.674149][ T7199]  ? __pfx_task_work_run+0x10/0x10
[  264.679324][ T7199]  ? kmem_cache_free+0x18f/0x400
[  264.684831][ T7199]  do_exit+0x6ad/0x22e0
[  264.689062][ T7199]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  264.695625][ T7199]  ? __pfx_do_exit+0x10/0x10
[  264.700300][ T7199]  ? _raw_spin_unlock_irq+0x23/0x50
[  264.706453][ T7199]  ? lockdep_hardirqs_on+0x9c/0x150
[  264.711721][ T7199]  do_group_exit+0x21c/0x2d0
[  264.716447][ T7199]  __x64_sys_exit_group+0x3f/0x40
[  264.721533][ T7199]  x64_sys_call+0x21ba/0x21c0
[  264.726355][ T7199]  do_syscall_64+0xfa/0x3b0
[  264.730913][ T7199]  ? lockdep_hardirqs_on+0x9c/0x150
[  264.736428][ T7199]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  264.742562][ T7199]  ? clear_bhb_loop+0x60/0xb0
[  264.747382][ T7199]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  264.753381][ T7199] RIP: 0033:0x7f7cee38e929
[  264.757844][ T7199] Code: Unable to access opcode bytes at 0x7f7cee38e8ff.
[  264.765138][ T7199] RSP: 002b:00007ffc873940c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  264.773657][ T7199] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7cee38e929
[  264.781697][ T7199] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043
[  264.789827][ T7199] RBP: 00007f7cee3ebad8 R08: 00007ffc87391e67 R09: 00000000000927c0
[  264.799013][ T7199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  264.807882][ T7199] R13: 00000000000927c0 R14: 0000000000000000 R15: 00007ffc87394960
[  264.816020][ T7199]  </TASK>
[  264.819085][ T7199] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  264.826408][ T7199] CPU: 0 UID: 0 PID: 7199 Comm: syz-executor Not tainted 6.15.0-next-20250606-syzkaller #0 PREEMPT(full) 
[  264.837737][ T7199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  264.847847][ T7199] Call Trace:
[  264.851167][ T7199]  <TASK>
[  264.854135][ T7199]  dump_stack_lvl+0x99/0x250
[  264.858776][ T7199]  ? __asan_memcpy+0x40/0x70
[  264.863423][ T7199]  ? __pfx_dump_stack_lvl+0x10/0x10
[  264.868667][ T7199]  ? __pfx__printk+0x10/0x10
[  264.873320][ T7199]  panic+0x2db/0x790
[  264.877312][ T7199]  ? __pfx_panic+0x10/0x10
[  264.881804][ T7199]  __warn+0x31b/0x4b0
[  264.885817][ T7199]  ? refcount_warn_saturate+0x11a/0x1d0
[  264.891387][ T7199]  ? refcount_warn_saturate+0x11a/0x1d0
[  264.896973][ T7199]  report_bug+0x2be/0x4f0
[  264.901327][ T7199]  ? refcount_warn_saturate+0x11a/0x1d0
[  264.906895][ T7199]  ? refcount_warn_saturate+0x11a/0x1d0
[  264.912496][ T7199]  ? refcount_warn_saturate+0x11c/0x1d0
[  264.918064][ T7199]  handle_bug+0x84/0x160
[  264.922343][ T7199]  exc_invalid_op+0x1a/0x50
[  264.926893][ T7199]  asm_exc_invalid_op+0x1a/0x20
[  264.931863][ T7199] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0
[  264.938048][ T7199] Code: 00 5e e2 8b e8 47 07 c2 fc 90 0f 0b 90 90 eb d7 e8 1b 5c fe fc c6 05 38 22 c9 0a 01 90 48 c7 c7 60 5e e2 8b e8 27 07 c2 fc 90 <0f> 0b 90 90 eb b7 e8 fb 5b fe fc c6 05 15 22 c9 0a 01 90 48 c7 c7
[  264.957674][ T7199] RSP: 0018:ffffc9000b5f77d8 EFLAGS: 00010246
[  264.963866][ T7199] RAX: c8f7420e2e510d00 RBX: 0000000000000003 RCX: ffff888026f40000
[  264.971870][ T7199] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  264.979863][ T7199] RBP: 0000000000000000 R08: ffff8880b8624293 R09: 1ffff110170c4852
[  264.987851][ T7199] R10: dffffc0000000000 R11: ffffed10170c4853 R12: ffff88805b5bf400
[  264.995841][ T7199] R13: ffff88805aa5f860 R14: ffff88805aa5f878 R15: dffffc0000000000
[  265.003848][ T7199]  ? refcount_warn_saturate+0x119/0x1d0
[  265.009414][ T7199]  klist_dec_and_del+0x3c7/0x3d0
[  265.014386][ T7199]  klist_remove+0x1bd/0x340
[  265.018916][ T7199]  ? __pfx_klist_children_put+0x10/0x10
[  265.024483][ T7199]  ? __pfx_klist_remove+0x10/0x10
[  265.029546][ T7199]  ? __pfx_kobject_move+0x10/0x10
[  265.034603][ T7199]  ? get_device_parent+0x366/0x3a0
[  265.039748][ T7199]  device_move+0x193/0x700
[  265.044202][ T7199]  hci_conn_del_sysfs+0xb8/0x170
[  265.049174][ T7199]  hci_conn_del+0x8ff/0xcb0
[  265.053704][ T7199]  hci_conn_hash_flush+0x191/0x230
[  265.058843][ T7199]  hci_dev_close_sync+0xaef/0x1330
[  265.063981][ T7199]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  265.069544][ T7199]  ? up_write+0x1c4/0x420
[  265.073913][ T7199]  hci_unregister_dev+0x206/0x500
[  265.078956][ T7199]  vhci_release+0x80/0xd0
[  265.083302][ T7199]  ? __pfx_vhci_release+0x10/0x10
[  265.088339][ T7199]  __fput+0x44c/0xa70
[  265.092349][ T7199]  task_work_run+0x1d1/0x260
[  265.096961][ T7199]  ? __pfx_task_work_run+0x10/0x10
[  265.102097][ T7199]  ? kmem_cache_free+0x18f/0x400
[  265.107057][ T7199]  do_exit+0x6ad/0x22e0
[  265.111234][ T7199]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  265.116624][ T7199]  ? __pfx_do_exit+0x10/0x10
[  265.121323][ T7199]  ? _raw_spin_unlock_irq+0x23/0x50
[  265.126545][ T7199]  ? lockdep_hardirqs_on+0x9c/0x150
[  265.131759][ T7199]  do_group_exit+0x21c/0x2d0
[  265.136377][ T7199]  __x64_sys_exit_group+0x3f/0x40
[  265.141417][ T7199]  x64_sys_call+0x21ba/0x21c0
[  265.146109][ T7199]  do_syscall_64+0xfa/0x3b0
[  265.150626][ T7199]  ? lockdep_hardirqs_on+0x9c/0x150
[  265.155839][ T7199]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.161931][ T7199]  ? clear_bhb_loop+0x60/0xb0
[  265.166626][ T7199]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.172529][ T7199] RIP: 0033:0x7f7cee38e929
[  265.176959][ T7199] Code: Unable to access opcode bytes at 0x7f7cee38e8ff.
[  265.183986][ T7199] RSP: 002b:00007ffc873940c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  265.192414][ T7199] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7cee38e929
[  265.200419][ T7199] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043
[  265.208418][ T7199] RBP: 00007f7cee3ebad8 R08: 00007ffc87391e67 R09: 00000000000927c0
[  265.216452][ T7199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  265.224442][ T7199] R13: 00000000000927c0 R14: 0000000000000000 R15: 00007ffc87394960
[  265.232546][ T7199]  </TASK>
[  265.235893][ T7199] Kernel Offset: disabled
[  265.240233][ T7199] Rebooting in 86400 seconds..