last executing test programs:

2m17.127380284s ago: executing program 2 (id=309):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
write$vhost_msg_v2(r0, &(0x7f00000004c0)={0x2, 0x0, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x48)

2m16.801737671s ago: executing program 2 (id=311):
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4010, &(0x7f00000001c0), 0x1, 0xbe4, &(0x7f0000006540)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x4)

2m13.981143969s ago: executing program 2 (id=324):
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158)
syz_mount_image$fuse(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x480a8, &(0x7f0000000340)=ANY=[], 0x21, 0x0, 0x0)

2m13.255402896s ago: executing program 2 (id=329):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x1000000, &(0x7f0000004440)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x1, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20000, 0x0)
mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount$tmpfs(0x0, 0x0, 0x0, 0x80000, 0x0)

2m12.068385794s ago: executing program 2 (id=335):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0xe}}, {@commit={'commit', 0x3d, 0x5}}, {@nodelalloc}, {@abort}, {@errors_remount}, {@nodiscard}]}, 0xfd, 0x461, &(0x7f0000001840)="$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")

2m8.648806925s ago: executing program 1 (id=352):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0xa105c2, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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")
renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x0)

2m8.252712085s ago: executing program 2 (id=355):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00')
read$FUSE(r0, 0x0, 0x0)

2m7.736206907s ago: executing program 32 (id=355):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00')
read$FUSE(r0, 0x0, 0x0)

2m7.268788858s ago: executing program 1 (id=361):
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0)
write$binfmt_register(r0, 0x0, 0x0)

2m6.788238749s ago: executing program 1 (id=364):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0)
fcntl$lock(r0, 0x25, &(0x7f0000002380)={0x0, 0x1})
preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x1000000)

2m6.651875613s ago: executing program 1 (id=366):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x107)

2m6.471334097s ago: executing program 1 (id=367):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000080)=@v2={0x2, @adiantum, 0x8, '\x00', @auto="e190dace3b4f609154554b2603939807"})

2m4.408245436s ago: executing program 1 (id=382):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$fuse(&(0x7f0000000540), &(0x7f0000000000)='./bus\x00', 0x322020, &(0x7f0000000580)=ANY=[], 0x3, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)

2m4.21377434s ago: executing program 33 (id=382):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$fuse(&(0x7f0000000540), &(0x7f0000000000)='./bus\x00', 0x322020, &(0x7f0000000580)=ANY=[], 0x3, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)

1m50.786396159s ago: executing program 4 (id=457):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x1a6c6000)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x1e0)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

1m50.631011753s ago: executing program 4 (id=459):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98)
fallocate(r0, 0x80, 0x5d, 0x1000000005)

1m50.298793451s ago: executing program 4 (id=460):
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfff)
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000600), 0x300c804, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x7f1}}]}})

1m50.081322126s ago: executing program 4 (id=462):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x107)

1m49.781687894s ago: executing program 4 (id=465):
mount$fuse(0x0, 0x0, 0x0, 0x800400, &(0x7f00000001c0)=ANY=[@ANYRES8=0x0, @ANYRESDEC, @ANYBLOB=',rootmode=00000000000000040000'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x189002, 0x40)
write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='c *:'], 0x11)

1m47.681021473s ago: executing program 4 (id=472):
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000080)=@v2={0x2, @adiantum, 0x8, '\x00', @auto="e190dace3b4f609154554b2603939807"})

1m47.280506482s ago: executing program 34 (id=472):
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000080)=@v2={0x2, @adiantum, 0x8, '\x00', @auto="e190dace3b4f609154554b2603939807"})

7.620428829s ago: executing program 3 (id=767):
r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='\x00\xe5\xff\xff\xff\xff\xff\xff\xff2', &(0x7f0000000180)='%*.\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000002c0)='\xe6\xdf\xf4\x89\b,\xcd\x9dP\x9e\xd7\xe3/\xd2=#\xc8\xb7\x98\f\x87\xcf\x00\x00\x00\x00\x00\x00\x00\x9a\x8e\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000200)="82", 0x1)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000c40)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG<v\xb8\x18\x80\xe1Kf\xf8R\xdd\x06\xe8\xfbl\v\xb0\xdd\x05\x05\xd8\xdb\xfd`\xf9\xf8\x915\b\x8c\xad\xc8\x9d=\xfeN\x8b\x1eR\x1e\xf8\x9dn\x19H\xd2aE\xa0\x06\xb0Yv\xf9^\x8c\x8f\xc3\xa5\x985\x85U\x8cZ/\'\xbd\xe2\xdc\xe3\xb9\x8e$Z\xef\xa8\xe5(Mt\xd3\xd9\xf6X\x1a\x9b\t$N\xd0U\xe2z\xeb\x01\x80!0\xe8\xc3\xce\xf8\x03\xde\x92s\xf9', &(0x7f0000000ac0)='fuseblk\x00M\x13k\x92#\x05z)\xe0c\\35\xdf%\xa3\xac!zoO\xf8\xcex\xb3\f\xad@\x853o\x0f0\x1a\xc0\"\xf7\x11Z\x01\xc1\xd9\x9fbJ7\xd1\xad\xe1\xed\x87\xae\x11-s\xb4\xbd\x1e\x9a\xd7\xc1crt\x88%\x92\x8fL\x8d\xb3-\xb60O \xc5\xd1q\xcc\x97\xe0\xe8\xb0\n\v\xa9V\xfa\xeb\x1e|M\x98W\x81\xa2@{_\xba^\xa2\x82k\x10G\xfc\xd4\x99Pl\xfa\xe8\x7f\xc9 h\xd0\xfd\x04\x95\x8c\xb1\xe7', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='\x1cX\x00\x00', &(0x7f0000000880)='R\x8d\xe9\x1a\xe0\x04\x00\x00\x00\x00\x00\x00\x00s\x03l\x8c\x11kSg\x03\x14 \'_\v/\xe0\xb0A\rx\x19\xe8\xf6sU\xfe<\xef\xc9\x12\xc25\xf8A\t\xdb\xb7\x88\xeeT\x80\x00\x00\x00=-\xe0\xf9\xff\xd2/x\x86i9\xcb@\xfa-\x19Q\x00\x90\x04\'J\xf8\xdfs\xad\xe6dS\x98\xeb\x89p\xd6)\xe8\x94d\x9dv.3\x9b\x81\x8e\x10\xca\xbc\x888', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000580)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\xf5S>\xb8\x86\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?_\xc9\xef\xe0Q\xdb\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\xbd\xb5\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf[\xd13\xb3\xd3j\r6\x7f', &(0x7f0000000640)='y', 0x1)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000680)='P\xfc#N\x1d\x04\x00\x01\x00\x00\x00\x00\x00\x00\x04\x00\xbe\xd8\x83M\x1a\x06mEy\xcf\xb7\xb1\xd0N\x01\x03}\v\xcc\xaaca$|U\xdd\x1fhM\xa6\xa4-\x84Y\x0f\xdd\"\xf0\xf8\x1e\x84H\x7f\xf5*\x88\x8c\x0fF#-)\xa1|\xc2\x17\x1e\xedq*n\xaeT\xbc\xc7fJL\xa3Jq\xd8\xc5S\xed\xb3\fH\xe7kC\xcf', &(0x7f0000000900)="0e", 0x1)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='%\x00', &(0x7f0000000300)='\x1c@\\X', 0x0)

7.066597802s ago: executing program 3 (id=769):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000140)={[{@init_itable_val={'init_itable', 0x3d, 0x4}}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@nojournal_checksum}, {@grpjquota}]}, 0x3, 0x446, &(0x7f0000000380)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f00000005c0)='\"', 0x1, 0x4fed0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff)
sendfile(r2, r2, 0x0, 0xfffe80)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x40003, 0xfffffffe, 0x4})

5.727054164s ago: executing program 7 (id=773):
r0 = open(&(0x7f0000000180)='./bus\x00', 0x1c92ff, 0x182)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x3000)
fallocate(r0, 0x0, 0x80000, 0x4)
fcntl$notify(0xffffffffffffffff, 0x402, 0x8000000e)
fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff)
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x80f811, 0x0, 0x0, 0x0, &(0x7f0000000080))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d)
r2 = open(0x0, 0x1ad941, 0x176)
pwritev2(r2, &(0x7f0000000240), 0x0, 0x7000, 0x0, 0x3)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x200800, &(0x7f0000000300)=ANY=[@ANYBLOB='iocharset=cp857,time_offset=0x0000000000000003,errors=remount-ro,fmask=00000000000000000000006,iocharset=cp862,allow_utime=00000000000000000077777,namecase=1,dmask=00000000000000000000201,utf8,dmask=000000000000\x00'/224, @ANYRES64, @ANYRES16, @ANYRES16], 0x9, 0x155d, &(0x7f0000002640)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0)
sendfile(r3, r4, 0x0, 0x20fffe82)
open(&(0x7f0000000240)='./file0\x00', 0xc2bc1, 0xa7)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r5, &(0x7f0000000140)='2', 0x1, 0xe7f)
r6 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000440)={[{@nodelalloc}, {@dioread_lock}, {@bsdgroups}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xc}}, {@data_err_ignore}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x2}}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x578, &(0x7f0000000500)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000080)='.\x00', 0x1a5a438, &(0x7f0000000f80)=ANY=[@ANYRES32=0x0, @ANYBLOB="9eb1d7adf1e9c81dcdddfafc0a5f1711a6f084b46160030f1339945cd25122506761a99ff2baa25eec0781a5cab11060881a2b6e8a0ec536840153f35eeb87bdd749f1c76b867fd9683655a5bc6c1b3ee2cb16f514a76fbc6bc9a8ee87fcf350c2e492f2b854c4cc023c53abe8202478d714240e65b914fc67a5e321ee4a496e677cef93aa2c72040629e99554d1e6a59e2ccd1fc6776ec3076caf0b37238d9f417f67e239c5300064be98498edd93301f250b56", @ANYRES8, @ANYRESDEC=r0, @ANYRES8, @ANYRES8=r1, @ANYBLOB="4c07f18b4a72a428cdf1fcc6a889d51c7d395bfc15396c272d41b4a79dba0739c1c7461ae19481932aa4c03054c8b2442a4c1e4311032bebb0cb70495acfcfd659d9fee00da55c", @ANYRES16, @ANYRES8=r6, @ANYRES32, @ANYRES16=r5, @ANYBLOB="4b5b40505ce4295c79dcaf712e50bc7e91c4501e03e44ce7c98e30df04de10ee861097fdc0244296b0cdb9fb091e8872149bc55fc3de32d9bc67139102c0c51604fa", @ANYBLOB="2a9c391454fae006c3257644a36e012fded32eb739ddee0b9408b2cdc84c0ad23307f7f9fb4196d7b734531cf9d9ec651ce62953553cf51fc252b55a9b9a6fb6d118f4303c7dbe8e5ceea37680ca93cf0000000000", @ANYRES8=r2], 0xd, 0x0, &(0x7f0000000000))
link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

5.640266826s ago: executing program 3 (id=774):
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x8042, 0x85)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}})
r1 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
read$FUSE(r1, 0x0, 0x0)

4.700177709s ago: executing program 3 (id=775):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/class/rtc/rtc0/wakealarm\x00', 0x2, 0x61)
read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020)

4.415385095s ago: executing program 7 (id=776):
mkdir(&(0x7f0000000a00)='./debug\x00', 0x1b9)
mount(0x0, &(0x7f0000000c00)='./debug\x00', &(0x7f0000000d00)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./debug/dynamic_debug/control\x00', 0x1, 0x0)
write(r0, &(0x7f0000000f00)='file snps_udc_core.c +p', 0x17)

4.273943719s ago: executing program 3 (id=777):
syz_open_procfs$namespace(0x0, 0x0)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x445a, &(0x7f0000004480)="$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")
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
write$FUSE_NOTIFY_RESEND(r0, &(0x7f0000000040)={0x14}, 0x14)
syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./file1\x00', 0x3a00041, &(0x7f0000000140)=ANY=[@ANYBLOB="6561733d6e6f2c6561733d6e6f2c636173653d617369732c636865636b3d6e6f6e652c002a8147bd45d266c8b59269"], 0x1, 0x9e28, &(0x7f000000a040)="$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")
close(0xffffffffffffffff)
truncate(0x0, 0x20000008)
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file2\x00', 0x81d001, 0x0, 0x3d, 0x0, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2010480, &(0x7f00000001c0), 0x5, 0x76a, &(0x7f0000000fc0)="$eJzs3d9rW1UcAPDvTdt17aatIOh8KghaGEvtrJuCDxMfRHAw0Ge3kGZlNm1Gk461FNwQwRdBxQdBX/bsj/nmqz9e9b/wQTamdsOJD1K5adJla9KlW5MI+XzgNOfce9Nzvjn3nnuSe0kC6FsT6Z9MxKGI+CiJGKstTyJiqJobjDixud3t9bV8mpLY2Hjzj6S6za31tXw0PCd1oFZ4MiJ+fD/icGZ7veWV1flcsVhYqpWnKgvnp8orq0fOLeTmCnOFxWPTMzNHj79w/NjexfrXL6sHr3/82rPfnPjnvSeufvhTEifiYG1dYxx7ZSImaq/JUPoS3uXVva6sx5JeN4AHkh6aA5tHeRyKsRio5loY6WbLAIBOeTciNgCAPpM4/wNAn6l/DnBrfS1fT739RKK7brwSEfs3469f39xcM1i7Zre/eh109FZy15WRJCLG96D+iYj44ru3v0pTdOg6JEAzly5HxJnxie3jf7LtnoXdeq6NbSbuKRv/oHu+T+c/Lzab/2W25j/RZP4z3OTYfRD3P/4z1/agmpbS+d/LDfe23W6Iv2Z8oFZ6pDrnG0rOnisW0rHt0YiYjKHhtDy9Qx2TN/+92Wpd4/zvz0/e+TKtP328s0Xm2uDw3c+ZzVVyDxNzoxuXI54abBZ/stX/SYv576k263j9pQ8+b7UujT+Nt562x99ZG1cinmna/3fuaEt2vD9xqro7TNV3iia+/fWz0Vb1N/Z/mtL66+8FuiHt/9Gd4x9PGu/XLO++jp+vjP3Qat3942++/+9L3qrm99WWXcxVKkvTEfuSN7YvP3rnufVyffs0/smnmx//O+3/6XvCM23GP3j9968fPP7OSuOf3VX/7z5z9fb8QKv62+v/mWpusraknfGv3QY+zGsHAAAAAAAAAAAAAAAAAAAAAAAAAO3KRMTBSDLZrXwmk81u/ob34zGaKZbKlcNnS8uLs1H9rezxGMrUv+pyrOH7UKdr34dfLx+9p/x8RDwWEZ8Oj1TL2XypONvr4AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg5kCL3/9P/Tbc69YBAB2zv9cNAAC6zvkfAPrP7s7/Ix1rBwDQPd7/A0D/cf4HgP7j/A8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECHnTp5Mk0bf6+v5dPy7IWV5fnShSOzhfJ8dmE5n82Xls5n50qluWIhmy8ttPxHlzYfiqXS+ZlYXL44VSmUK1PlldXTC6Xlxcrpcwu5ucLpwlDXIgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA9pVXVudzxWJhSUZGRmYr0zhKjPRugAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4n/svAAD//9EyKso=")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0xd7)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000146000/0x4000)=nil)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
openat$urandom(0xffffffffffffff9c, 0x0, 0x6a2f41, 0x0)
copy_file_range(r1, 0x0, r1, &(0x7f0000000500)=0xffff, 0x9, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40)
r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
fcntl$setownex(r3, 0xf, 0x0)
pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0x10008)
mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

4.21676424s ago: executing program 0 (id=778):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x8, 0x4fe, &(0x7f0000000a40)="$eJzs3c9vG1kdAPDvTOImm3U3XdgDIGDLslDQqs6P7kYrONC9gNBqJcSKE4duSNwoil1HcVKa0ENy5I5EJU7wJ3DjgNQTB27c4MalHJAqqEANUg9GM54mJoljs03iJv58pPHMe+P4+57t957nJc4LYGhdjYjtiLgUEZ9ExGSRnxRb3Gxv2f2ePrm/sPvk/kISrdbH/0jy81ledPxM5tXiMccj4offi/hJcjhuc3NrZb5Wq64V6an1+upUc3Pr+nJa5MzOzcxNv3/jvdkTq+ub9d8+/u7yhz/6/e++9OhP29/8WVas8s8v5+c663GS2lUvRbkjbzQiPjyNYAMyWrx/OH+y1vaZiHgrb/+TMZK/mv05olkDAOdAqzUZrcnONABw0WXX/+VI0koxF1CONK1U2nN4b8REWms019+ZbGzcWYx8DutKlNLby7XqdDFXeCVKSZaeyY/307MH0jci4vWI+MXYK3m6stCoLQ7ygw8ADLFXD4z//x5rj/8AwAU3PugCAABnzvgPAMPH+A8Aw+f/GP/7/3YgAPBSc/0PAMPH+A8Aw6fn+L9zNuUAAM7EDz76KNtau8X/v168u7nx7fLd64vV5kqlvrFQWWisrVaWGo2lWrWy0Gr1erxao7E68+5esrm5dave2Lizfmu5Pr9UvVUtnXJ9AIDeXn/z4V+SiNj+1iv5Fh1rORir4WJLB10AYGBGBl0AYGB8nweGVx/X+KYB4ILrtZZn1z8RemDxVzivrn3e/D8MK/P/MLw+3fz/d068HMDZM/8Pw6vVSqz5DwBDxhw/8EK//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAhVc63JK3ka4FvZ7dppRJxOSKuRCm5vVyrTkfEaxHx57HSWJaeGXShAYAXlP49Kdb/ujb5dvng2UvJf8byfUT89Fcf//Le/Pr62kyW/8+9/PUHRf7spUFUAADodPNwVnucLvYdF/JPn9xfeL6dZREff9BeXDSLu1ts7TOjMZrvx6MUERP/Sop0W/Z5ZeQE4m/vRMTn9ut/ryNCOZ8Daa98ejB+FvvyKcTff/4Pxk//J36an8v2pfy5+OwJlAWGzcMP2v1k0fayJla0vzSu5vuj2/943kO9uOf93+6h/i/d6/9GDsVP8jZ/dS99fEkev/uH7x/KbE22z+1EfGH0qPjJXvykS//7dp91/OsXv/xWt3OtX0dci6Pjt9XzbnZqvb461dzcur5cn1+qLlXvzM7OzcxNv3/jvdmpfI66ffvHAw//rFjm/rWuz81OxESX+OM96v+1Puv/m2ef/Pgrx8T/xlePfv3fOCZ+NiZ+vc/48xM3uy7fncVf7FL/Xq//O33Gf/S3rcU+7woAnIHm5tbKfK1WXetxkH3W7HUfB+fzILYjXoJi9DpIi7fsy1KeC35wTKeRnlHnBJyq/UY/6JIAAAAAAAAAAAAAAADdNDe3VsbidL9ONOg6AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHH9NwAA//8tM9Id")
r0 = creat(&(0x7f00000007c0)='./bus\x00', 0x182)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x107b42, 0x1b4)
ftruncate(r2, 0x6000000)
r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x182)
fallocate(r3, 0x0, 0x1, 0x2000402)
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0, 0x3)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000740)={0xc, r0, 0x6, 0x0, 0xa697, 0x3})

3.583272315s ago: executing program 7 (id=779):
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89101)
dup3(0xffffffffffffffff, r0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000)
syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x2000008, &(0x7f0000000280), 0x1, 0x603, &(0x7f0000000700)="$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")
open(&(0x7f00000000c0)='./file2\x00', 0x24842, 0x80)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/asound/seq/clients\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f00000012c0)={0x2020}, 0x2020)
r2 = syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000000080)='./file0\x00', 0x6218840, &(0x7f0000000040), 0x1, 0x9877, &(0x7f0000012f80)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0)
sendfile(r3, r4, 0x0, 0x20fffe82)
sendfile(r4, r2, 0x0, 0x9)
getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc0186e86, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8541, 0x1a9)
fallocate(r5, 0x10, 0x1, 0x8000)
mount$9p_tcp(0x0, 0x0, 0x0, 0x8, 0x0)

2.804571354s ago: executing program 0 (id=780):
mkdir(0x0, 0x1ff)
mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/usb/devices\x00', 0x0, 0x60)
lseek(r0, 0x7f, 0x4)

2.012932822s ago: executing program 0 (id=781):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000004500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
r1 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000040)={[{@abort}, {@dioread_nolock}, {@grpid}, {@noload}, {@data_err_ignore}]}, 0x1, 0x77f, &(0x7f0000000840)="$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")
sendfile(r1, r0, 0x0, 0x2000)

1.009893596s ago: executing program 0 (id=782):
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)

1.004046376s ago: executing program 7 (id=783):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000580)='./bus\x00', 0x4080, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200)

548.921067ms ago: executing program 0 (id=784):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file2\x00', 0x0, &(0x7f0000000300)={[{@oldalloc}, {@quota}, {@quota}, {@stripe={'stripe', 0x3d, 0x3}}, {@jqfmt_vfsold}]}, 0xff, 0x4fa, &(0x7f0000001040)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}})
link(&(0x7f0000000100)='./file1\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

259.934314ms ago: executing program 7 (id=785):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.0/streaming/color_matching/my_color2/bMatrixCoefficients\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='1\n', 0x2)
close(r0)

238.654894ms ago: executing program 0 (id=786):
syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000014c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)

69.149239ms ago: executing program 7 (id=787):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, &(0x7f0000000100)='\x00')
write(0xffffffffffffffff, &(0x7f00000001c0), 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
symlinkat(&(0x7f0000000300)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/uac2.usb0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r0, &(0x7f00000003c0)='usbip-vudc.0', 0xc)
unlinkat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1/uac2.usb0\x00', 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x200)

0s ago: executing program 3 (id=788):
syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000040)='./bus\x00', 0x1000c00, &(0x7f00000000c0)=ANY=[], 0xf5, 0x218, &(0x7f0000000480)="$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")

kernel console output (not intermixed with test programs):

278.028646][  T994] EXT4-fs (loop3): i_reserved_data_blocks=2
[  278.054602][   T86] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28
[  278.055277][ T5598] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  278.157920][ T5605] Bluetooth: hci2: command tx timeout
[  278.176349][ T5261] 8021q: adding VLAN 0 to HW filter on device eth4
[  278.392195][ T8565] loop3: detected capacity change from 0 to 256
[  278.440331][ T8565] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  278.440349][ T8565] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  278.522237][ T8565] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  278.529778][ T8565] exFAT-fs (loop3): failed to load alloc-bitmap
[  278.529792][ T8565] exFAT-fs (loop3): failed to recognize exfat type
[  278.794692][ T8557] loop0: detected capacity change from 0 to 32768
[  278.798825][ T8557] btrfs: Deprecated parameter 'usebackuproot'
[  278.798846][ T8557] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  278.803079][ T8557] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.516 (8557)
[  278.883552][ T8557] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  278.883584][ T8557] BTRFS info (device loop0): using crc32c checksum algorithm
[  279.094757][ T8557] BTRFS info (device loop0): rebuilding free space tree
[  279.559039][ T8557] BTRFS info (device loop0): enabling ssd optimizations
[  279.559063][ T8557] BTRFS info (device loop0): turning on flush-on-commit
[  279.559078][ T8557] BTRFS info (device loop0): enabling free space tree
[  279.559092][ T8557] BTRFS info (device loop0): force clearing of disk cache
[  279.561767][ T8557] BTRFS info (device loop0): trying to use backup root at mount time
[  279.561790][ T8557] BTRFS info (device loop0): use zstd compression, level 3
[  279.704679][ T8038] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  279.724652][ T5602] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  279.755949][ T8038] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  279.780339][ T8569] loop3: detected capacity change from 0 to 32768
[  279.868979][ T8569] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  280.168296][ T8569] XFS (loop3): Ending clean mount
[  280.476240][ T8569] XFS (loop3): Quotacheck needed: Please wait.
[  280.788833][ T1021] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  281.100161][ T8038] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  281.219165][ T8569] XFS (loop3): Quotacheck: Done.
[  281.225181][ T8038] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  281.297293][ T8038] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  281.337810][ T5598] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  281.368030][ T8038] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  281.499451][ T8038] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  281.652498][ T8038] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  282.087697][ T8618] loop3: detected capacity change from 0 to 16
[  282.181673][ T1021] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  282.182378][ T8618] erofs (device loop3): invalid ishare xattr prefix id 0
[  282.338433][ T8622] loop0: detected capacity change from 0 to 736
[  282.344906][ T8622] iso9660: Bad value for 'mode'
[  282.596812][ T8626] overlayfs: overlapping lowerdir path
[  282.760064][ T8632] loop0: detected capacity change from 0 to 256
[  283.026250][ T8620] loop3: detected capacity change from 0 to 32768
[  283.027586][ T8620] btrfs: Deprecated parameter 'usebackuproot'
[  283.027605][ T8620] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  283.038740][ T1021] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.052594][ T8620] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.528 (8620)
[  283.074992][ T8620] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  283.075022][ T8620] BTRFS info (device loop3): using crc32c checksum algorithm
[  283.076327][ T8411] bridge0: port 1(bridge_slave_0) entered blocking state
[  283.076477][ T8411] bridge0: port 1(bridge_slave_0) entered disabled state
[  283.076703][ T8411] bridge_slave_0: entered allmulticast mode
[  283.100862][ T8411] bridge_slave_0: entered promiscuous mode
[  283.284825][ T8411] bridge0: port 2(bridge_slave_1) entered blocking state
[  283.284924][ T8411] bridge0: port 2(bridge_slave_1) entered disabled state
[  283.285193][ T8411] bridge_slave_1: entered allmulticast mode
[  283.287301][ T8411] bridge_slave_1: entered promiscuous mode
[  283.346006][ T8620] BTRFS info (device loop3): rebuilding free space tree
[  283.722032][ T8620] BTRFS info (device loop3): enabling ssd optimizations
[  283.722055][ T8620] BTRFS info (device loop3): turning on flush-on-commit
[  283.722068][ T8620] BTRFS info (device loop3): enabling free space tree
[  283.722082][ T8620] BTRFS info (device loop3): force clearing of disk cache
[  283.722096][ T8620] BTRFS info (device loop3): trying to use backup root at mount time
[  283.722112][ T8620] BTRFS info (device loop3): use zstd compression, level 3
[  283.889818][ T5598] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  284.095929][ T1021] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  284.316724][ T8411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  284.706845][ T8657] loop0: detected capacity change from 0 to 256
[  284.774071][ T8657] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  284.774089][ T8657] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  284.783561][ T8657] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  284.786252][ T8657] exFAT-fs (loop0): failed to load alloc-bitmap
[  284.786266][ T8657] exFAT-fs (loop0): failed to recognize exfat type
[  285.000540][ T8660] loop0: detected capacity change from 0 to 512
[  285.111504][ T8660] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  285.111647][ T8660] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  285.173757][ T8660] EXT4-fs warning (device loop0): verify_group_input:137: Cannot add at group 2365587455 (only 1 groups)
[  285.187402][ T8411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  285.355181][ T5602] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.481147][ T8664] loop0: detected capacity change from 0 to 256
[  285.483335][ T8655] loop3: detected capacity change from 0 to 32768
[  285.525847][ T8655] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  285.555770][ T8664] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d)
[  285.610137][ T8664] exFAT-fs (loop0): error, in sector 160, dentry 12 should be unused, but 0x85
[  285.610166][ T8664] exFAT-fs (loop0): Filesystem has been set read-only
[  285.674861][ T8411] team0: Port device team_slave_0 added
[  285.704131][ T8411] team0: Port device team_slave_1 added
[  285.736092][ T8655] XFS (loop3): Ending clean mount
[  285.748391][ T8655] XFS (loop3): Quotacheck needed: Please wait.
[  285.872247][ T8674] loop0: detected capacity change from 0 to 8
[  285.962229][ T8674] SQUASHFS error: Unable to read directory block [1d0:26]
[  286.038487][ T8411] batman_adv: batadv0: Adding interface: batadv_slave_0
[  286.038503][ T8411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  286.038525][ T8411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  286.204833][ T8676] overlayfs: overlapping lowerdir path
[  286.348350][ T8655] XFS (loop3): Quotacheck: Done.
[  286.368941][ T8411] batman_adv: batadv0: Adding interface: batadv_slave_1
[  286.368957][ T8411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  286.368980][ T8411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  286.465344][ T8115] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  286.504353][ T5598] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  286.508777][ T8679] loop0: detected capacity change from 0 to 512
[  286.545340][ T8679] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  286.684699][ T8115] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  287.274510][ T8684] loop3: detected capacity change from 0 to 256
[  287.319605][ T8684] FAT-fs (loop3): Directory bread(block 1285) failed
[  287.319641][ T8684] FAT-fs (loop3): Directory bread(block 1286) failed
[  287.319659][ T8684] FAT-fs (loop3): Directory bread(block 1287) failed
[  287.319869][ T8684] FAT-fs (loop3): Directory bread(block 1288) failed
[  287.320467][ T8115] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  287.485269][ T8686] loop3: detected capacity change from 0 to 1024
[  287.541519][ T8115] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  287.573024][ T8686] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  287.708979][ T8115] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  287.816023][ T8682] loop0: detected capacity change from 0 to 40427
[  287.818571][ T8115] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  287.868643][ T8682] F2FS-fs (loop0): invalid crc value
[  288.015633][ T8115] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  288.127358][ T8115] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  288.146995][ T8411] hsr_slave_0: entered promiscuous mode
[  288.160852][ T8411] hsr_slave_1: entered promiscuous mode
[  288.161763][ T8411] debugfs: 'hsr0' already exists in 'hsr'
[  288.161786][ T8411] Cannot create hsr debugfs directory
[  288.232184][ T5598] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  288.436493][ T8682] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  288.477706][ T8682] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  289.081798][ T5602] syz-executor: attempt to access beyond end of device
[  289.081798][ T5602] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  289.158028][ T5602] CPU: 0 UID: 0 PID: 5602 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  289.158051][ T5602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  289.158063][ T5602] Call Trace:
[  289.158069][ T5602]  <TASK>
[  289.158075][ T5602]  dump_stack_lvl+0xe8/0x150
[  289.158097][ T5602]  f2fs_stop_checkpoint+0x3f9/0x5e0
[  289.158117][ T5602]  f2fs_write_end_io+0x124b/0x1710
[  289.158143][ T5602]  __submit_merged_bio+0x258/0x6a0
[  289.158158][ T5602]  ? rcu_is_watching+0x15/0xb0
[  289.158173][ T5602]  __submit_merged_write_cond+0x3c9/0x4e0
[  289.158192][ T5602]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  289.158218][ T5602]  f2fs_write_data_pages+0x2a27/0x36f0
[  289.158247][ T5602]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  289.158281][ T5602]  ? do_raw_spin_lock+0x12b/0x2f0
[  289.158305][ T5602]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  289.158318][ T5602]  ? rt_mutex_slowunlock+0x4ee/0xa20
[  289.158334][ T5602]  ? reacquire_held_locks+0x104/0x190
[  289.158350][ T5602]  ? rt_spin_unlock+0x157/0x200
[  289.158365][ T5602]  ? rt_spin_unlock+0x163/0x200
[  289.158378][ T5602]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  289.158389][ T5602]  do_writepages+0x338/0x560
[  289.158404][ T5602]  ? rt_spin_unlock+0x157/0x200
[  289.158422][ T5602]  filemap_fdatawrite+0x1ec/0x2f0
[  289.158436][ T5602]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  289.158446][ T5602]  ? do_raw_spin_lock+0x12b/0x2f0
[  289.158478][ T5602]  ? rt_spin_unlock+0x157/0x200
[  289.158494][ T5602]  ? rt_spin_unlock+0x163/0x200
[  289.158508][ T5602]  f2fs_sync_dirty_inodes+0x30e/0x830
[  289.158527][ T5602]  f2fs_write_checkpoint+0xa3d/0x2710
[  289.158538][ T5602]  ? __lock_acquire+0x683/0x2ce0
[  289.158563][ T5602]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  289.158601][ T5602]  kill_f2fs_super+0x2f6/0x700
[  289.158616][ T5602]  ? __pfx_kill_f2fs_super+0x10/0x10
[  289.158633][ T5602]  ? call_rcu+0x64b/0x8b0
[  289.158644][ T5602]  ? lockdep_hardirqs_on+0x7a/0x110
[  289.158662][ T5602]  deactivate_locked_super+0xbc/0x130
[  289.158675][ T5602]  cleanup_mnt+0x3d3/0x460
[  289.158690][ T5602]  task_work_run+0x1d9/0x270
[  289.158702][ T5602]  ? __pfx_task_work_run+0x10/0x10
[  289.158717][ T5602]  exit_to_user_mode_loop+0x1fa/0x730
[  289.158728][ T5602]  ? rcu_is_watching+0x15/0xb0
[  289.158740][ T5602]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.158750][ T5602]  do_syscall_64+0x353/0x580
[  289.158762][ T5602]  ? trace_irq_disable+0x3b/0x140
[  289.158772][ T5602]  ? clear_bhb_loop+0x40/0x90
[  289.158784][ T5602]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.158794][ T5602] RIP: 0033:0x7ff71977f0d7
[  289.158808][ T5602] Code: a2 c7 05 1c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  289.158816][ T5602] RSP: 002b:00007ffccc2a4718 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  289.158828][ T5602] RAX: 0000000000000000 RBX: 00007ff71981330a RCX: 00007ff71977f0d7
[  289.158835][ T5602] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffccc2a47d0
[  289.158840][ T5602] RBP: 00007ffccc2a47d0 R08: 00007ffccc2a57d0 R09: 00000000ffffffff
[  289.158847][ T5602] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffccc2a5860
[  289.158853][ T5602] R13: 00007ff71981330a R14: 00000000000467b6 R15: 00007ffccc2a58a0
[  289.158869][ T5602]  </TASK>
[  289.158873][ T5602] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  289.925231][ T1021] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.155828][ T8709] loop0: detected capacity change from 0 to 256
[  290.188303][ T8709] FAT-fs (loop0): error, allocated dir entry found after end-of-directory marker (i_pos 1)
[  290.188327][ T8709] FAT-fs (loop0): Filesystem has been set read-only
[  290.400687][ T8711] overlayfs: overlapping lowerdir path
[  290.641544][ T8038] 8021q: adding VLAN 0 to HW filter on device bond0
[  290.875718][ T1021] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.107946][ T8038] 8021q: adding VLAN 0 to HW filter on device team0
[  291.224992][  T994] bridge0: port 1(bridge_slave_0) entered blocking state
[  291.251134][  T994] bridge0: port 1(bridge_slave_0) entered forwarding state
[  291.306089][ T8705] loop3: detected capacity change from 0 to 131072
[  291.311075][ T8705] F2FS-fs (loop3): invalid crc value
[  291.703204][ T8705] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  291.746456][ T1021] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.929888][ T1009] bridge0: port 2(bridge_slave_1) entered blocking state
[  291.930070][ T1009] bridge0: port 2(bridge_slave_1) entered forwarding state
[  291.933398][ T5261] 8021q: adding VLAN 0 to HW filter on device eth5
[  292.033107][ T8705] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  292.282084][ T8744] loop0: detected capacity change from 0 to 512
[  292.381890][ T8744] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  293.197568][ T1021] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.385437][ T8115] 8021q: adding VLAN 0 to HW filter on device bond0
[  293.934829][ T8115] 8021q: adding VLAN 0 to HW filter on device team0
[  294.022992][   T56] bridge0: port 1(bridge_slave_0) entered blocking state
[  294.023067][   T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[  294.113101][ T8411] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  294.147955][ T8762] loop3: detected capacity change from 0 to 4096
[  294.184963][ T8762] EXT4-fs: inline encryption not supported
[  294.207291][ T8762] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  294.207327][ T8762] EXT4-fs (loop3): Test dummy encryption mode enabled
[  294.226382][ T5602] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  294.337402][ T8762] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003]
[  294.337531][ T8762] System zones: 0-5
[  294.338469][ T8411] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  294.344572][ T8762] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  294.419893][ T8411] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  294.538718][ T8772] loop0: detected capacity change from 0 to 512
[  294.808249][ T8772] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.552: bad orphan inode 15
[  294.808280][ T8772] loop0: lost filesystem error report for type 5 error -117
[  294.808717][ T8772] ext4_test_bit(bit=14, block=5) = 0
[  294.878229][ T8772] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  294.914077][ T8411] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  294.950188][  T994] bridge0: port 2(bridge_slave_1) entered blocking state
[  294.952258][  T994] bridge0: port 2(bridge_slave_1) entered forwarding state
[  294.977706][ T8411] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  295.077300][ T8411] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  295.190023][ T5602] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  295.443702][ T5598] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  295.640740][ T8411] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  295.683359][ T8411] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  295.697198][ T5261] 8021q: adding VLAN 0 to HW filter on device eth6
[  295.713124][ T8790] loop3: detected capacity change from 0 to 512
[  295.714337][ T8790] EXT4-fs: Ignoring removed nobh option
[  295.731366][ T8790] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  295.731386][ T8790] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  295.759398][ T8790] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (35405!=33349)
[  295.804605][ T8790] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002]
[  295.804705][ T8790] System zones: 1-12
[  295.804944][ T8790] EXT4-fs (loop3): orphan cleanup on readonly fs
[  295.848441][ T8790] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.554: Block bitmap for bg 0 marked uninitialized
[  295.848461][ T8790] loop3: lost filesystem error report for type 5 error -117
[  295.856915][    C1] EXT4-fs (loop3): initial error at time 1784955603: ext4_read_block_bitmap_nowait:517
[  295.856943][    C1] EXT4-fs (loop3): last error at time 1784955603: ext4_read_block_bitmap_nowait:517
[  295.993213][ T8790] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.554: Block bitmap for bg 0 marked uninitialized
[  295.993232][ T8790] loop3: lost filesystem error report for type 5 error -117
[  296.066238][ T8800] loop0: detected capacity change from 0 to 256
[  296.161816][ T8790] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.554: Block bitmap for bg 0 marked uninitialized
[  296.161845][ T8790] loop3: lost filesystem error report for type 5 error -117
[  296.190728][ T8790] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.554: Block bitmap for bg 0 marked uninitialized
[  296.190759][ T8790] loop3: lost filesystem error report for type 5 error -117
[  296.252997][ T8790] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.554: Block bitmap for bg 0 marked uninitialized
[  296.253027][ T8790] loop3: lost filesystem error report for type 5 error -117
[  296.258999][ T8790] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.554: Block bitmap for bg 0 marked uninitialized
[  296.259028][ T8790] loop3: lost filesystem error report for type 5 error -117
[  296.261482][ T8790] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  296.262108][ T8790] EXT4-fs (loop3): 1 truncate cleaned up
[  296.264787][ T8800] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011e7e, chksum : 0x04bede55, utbl_chksum : 0xe619d30d)
[  296.277052][ T8790] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  296.316758][ T8800] exFAT-fs (loop0): error, data valid size is invalid(-281474976706560)
[  296.561874][ T8808] exFAT-fs (loop0): error, data valid size is invalid(-281474976706560)
[  296.621246][ T5598] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  297.410118][ T1021] bridge_slave_1: left allmulticast mode
[  297.410153][ T1021] bridge_slave_1: left promiscuous mode
[  297.410427][ T1021] bridge0: port 2(bridge_slave_1) entered disabled state
[  297.460420][ T8818] loop0: detected capacity change from 0 to 40427
[  297.465985][ T8818] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  297.466007][ T8818] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  297.496604][ T8818] F2FS-fs (loop0): invalid crc_offset: 33558524
[  297.580986][ T1021] bridge_slave_0: left allmulticast mode
[  297.581021][ T1021] bridge_slave_0: left promiscuous mode
[  297.617736][ T1021] bridge0: port 1(bridge_slave_0) entered disabled state
[  297.622985][ T8818] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  297.675399][ T8818] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  297.675420][ T8818] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  297.929657][ T1021] bridge_slave_1: left allmulticast mode
[  297.929691][ T1021] bridge_slave_1: left promiscuous mode
[  297.929925][ T1021] bridge0: port 2(bridge_slave_1) entered disabled state
[  298.121049][ T1021] bridge_slave_0: left allmulticast mode
[  298.121084][ T1021] bridge_slave_0: left promiscuous mode
[  298.122088][ T1021] bridge0: port 1(bridge_slave_0) entered disabled state
[  298.712904][ T8830] loop0: detected capacity change from 0 to 256
[  298.790769][ T8830] FAT-fs (loop0): data area starts beyond volume (274 > 64)
[  298.790794][ T8830] FAT-fs (loop0): Can't find a valid FAT filesystem
[  299.021102][ T8834] loop0: detected capacity change from 0 to 128
[  299.035162][ T8834] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  299.035189][ T8834] FAT-fs (loop0): data area starts beyond volume (36 > 6)
[  299.035203][ T8834] FAT-fs (loop0): Can't find a valid FAT filesystem
[  299.545057][ T8828] loop3: detected capacity change from 0 to 131072
[  299.565120][ T8828] F2FS-fs (loop3): Wrong NAT boundary, start(2560) end(5) blocks(1024)
[  299.565147][ T8828] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  299.963608][ T8828] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  299.990866][ T8828] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  299.990896][ T8828] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b
[  300.318196][ T1021] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  300.386673][ T8842] loop0: detected capacity change from 0 to 40427
[  300.443067][ T8842] F2FS-fs (loop0): invalid crc value
[  300.494436][ T1021] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  300.610359][ T1021] bond0 (unregistering): Released all slaves
[  300.852030][ T8844] fscrypt: loop3: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 4
[  300.856268][ T8842] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  300.886404][ T8842] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  301.251630][ T5602] syz-executor: attempt to access beyond end of device
[  301.251630][ T5602] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  301.313353][ T5602] CPU: 1 UID: 0 PID: 5602 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  301.313379][ T5602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  301.313388][ T5602] Call Trace:
[  301.313395][ T5602]  <TASK>
[  301.313403][ T5602]  dump_stack_lvl+0xe8/0x150
[  301.313441][ T5602]  f2fs_stop_checkpoint+0x3f9/0x5e0
[  301.313472][ T5602]  f2fs_write_end_io+0x124b/0x1710
[  301.313507][ T5602]  __submit_merged_bio+0x258/0x6a0
[  301.313531][ T5602]  ? rcu_is_watching+0x15/0xb0
[  301.313556][ T5602]  __submit_merged_write_cond+0x3c9/0x4e0
[  301.313589][ T5602]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  301.313635][ T5602]  f2fs_write_data_pages+0x2a27/0x36f0
[  301.313685][ T5602]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  301.313742][ T5602]  ? do_raw_spin_lock+0x12b/0x2f0
[  301.313781][ T5602]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  301.313801][ T5602]  ? rt_mutex_slowunlock+0x4ee/0xa20
[  301.313829][ T5602]  ? reacquire_held_locks+0x104/0x190
[  301.313859][ T5602]  ? rt_spin_unlock+0x157/0x200
[  301.313887][ T5602]  ? rt_spin_unlock+0x163/0x200
[  301.313908][ T5602]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  301.313928][ T5602]  do_writepages+0x338/0x560
[  301.313955][ T5602]  ? rt_spin_unlock+0x157/0x200
[  301.313987][ T5602]  filemap_fdatawrite+0x1ec/0x2f0
[  301.314007][ T5602]  ? trace_irq_disable+0x3b/0x140
[  301.314025][ T5602]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  301.314077][ T5602]  ? rt_spin_unlock+0x157/0x200
[  301.314101][ T5602]  ? rt_spin_unlock+0x163/0x200
[  301.314124][ T5602]  f2fs_sync_dirty_inodes+0x30e/0x830
[  301.314156][ T5602]  f2fs_write_checkpoint+0xa3d/0x2710
[  301.314173][ T5602]  ? __lock_acquire+0x683/0x2ce0
[  301.314215][ T5602]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  301.314288][ T5602]  kill_f2fs_super+0x2f6/0x700
[  301.314315][ T5602]  ? __pfx_kill_f2fs_super+0x10/0x10
[  301.314347][ T5602]  ? call_rcu+0x64b/0x8b0
[  301.314367][ T5602]  ? lockdep_hardirqs_on+0x7a/0x110
[  301.314401][ T5602]  deactivate_locked_super+0xbc/0x130
[  301.314424][ T5602]  cleanup_mnt+0x3d3/0x460
[  301.314458][ T5602]  task_work_run+0x1d9/0x270
[  301.314480][ T5602]  ? __pfx_task_work_run+0x10/0x10
[  301.314515][ T5602]  exit_to_user_mode_loop+0x1fa/0x730
[  301.314532][ T5602]  ? rcu_is_watching+0x15/0xb0
[  301.314554][ T5602]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.314574][ T5602]  do_syscall_64+0x353/0x580
[  301.314593][ T5602]  ? trace_irq_disable+0x3b/0x140
[  301.314611][ T5602]  ? clear_bhb_loop+0x40/0x90
[  301.314632][ T5602]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.314650][ T5602] RIP: 0033:0x7ff71977f0d7
[  301.314667][ T5602] Code: a2 c7 05 1c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  301.314681][ T5602] RSP: 002b:00007ffccc2a4718 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  301.314701][ T5602] RAX: 0000000000000000 RBX: 00007ff71981330a RCX: 00007ff71977f0d7
[  301.314713][ T5602] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffccc2a47d0
[  301.314723][ T5602] RBP: 00007ffccc2a47d0 R08: 00007ffccc2a57d0 R09: 00000000ffffffff
[  301.314735][ T5602] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffccc2a5860
[  301.314746][ T5602] R13: 00007ff71981330a R14: 0000000000049796 R15: 00007ffccc2a58a0
[  301.314776][ T5602]  </TASK>
[  301.315150][ T5602] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  302.026584][ T1021] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  302.083104][ T8854] loop0: detected capacity change from 0 to 512
[  302.085802][ T8854] EXT4-fs: Ignoring removed bh option
[  302.222997][ T1021] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  302.233371][ T8854] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  302.287927][ T1021] bond0 (unregistering): Released all slaves
[  302.377509][ T8854] EXT4-fs (loop0): 1 truncate cleaned up
[  302.439990][ T8854] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  302.916186][ T8038] 8021q: adding VLAN 0 to HW filter on device batadv0
[  303.483222][ T8411] 8021q: adding VLAN 0 to HW filter on device bond0
[  303.545976][ T8411] 8021q: adding VLAN 0 to HW filter on device team0
[  303.562447][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  303.563888][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  303.666889][ T3847] bridge0: port 2(bridge_slave_1) entered blocking state
[  303.666970][ T3847] bridge0: port 2(bridge_slave_1) entered forwarding state
[  304.351899][ T8038] veth0_vlan: entered promiscuous mode
[  304.865964][ T5602] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  305.112222][ T5261] 8021q: adding VLAN 0 to HW filter on device eth7
[  305.184357][ T8038] veth1_vlan: entered promiscuous mode
[  305.255254][ T8115] 8021q: adding VLAN 0 to HW filter on device batadv0
[  306.107780][ T8920] loop0: detected capacity change from 0 to 2048
[  306.160672][ T8920] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  306.205405][ T8920] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  306.254037][ T8920] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28
[  306.254068][ T8920] EXT4-fs (loop0): This should not happen!! Data will be lost
[  306.254068][ T8920] 
[  306.254081][ T8920] EXT4-fs (loop0): Total free blocks count 0
[  306.254092][ T8920] EXT4-fs (loop0): Free/Dirty block details
[  306.254104][ T8920] EXT4-fs (loop0): free_blocks=66060288
[  306.254116][ T8920] EXT4-fs (loop0): dirty_blocks=48
[  306.254127][ T8920] EXT4-fs (loop0): Block reservation details
[  306.254137][ T8920] EXT4-fs (loop0): i_reserved_data_blocks=3
[  306.274101][ T8038] veth0_macvtap: entered promiscuous mode
[  306.316555][ T8038] veth1_macvtap: entered promiscuous mode
[  306.434442][ T8038] batman_adv: batadv0: Interface activated: batadv_slave_0
[  306.506601][ T8038] batman_adv: batadv0: Interface activated: batadv_slave_1
[  306.564487][ T3847] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  306.564888][ T3847] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  306.592160][ T3847] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  306.596360][ T3847] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  306.719062][ T5602] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  306.852944][ T5602] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  307.537280][ T8411] 8021q: adding VLAN 0 to HW filter on device batadv0
[  308.235643][   T36] audit: type=1800 audit(1784955615.489:96): pid=8951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.574" name="bTransferCharacteristics" dev="configfs" ino=14216 res=0 errno=0
[  308.489053][   T36] audit: type=1800 audit(1784955615.739:97): pid=8957 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.575" name="bTransferCharacteristics" dev="configfs" ino=14287 res=0 errno=0
[  308.512872][   T36] audit: type=1800 audit(1784955615.769:98): pid=8957 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.575" name="bMatrixCoefficients" dev="configfs" ino=14942 res=0 errno=0
[  308.647119][ T8115] veth0_vlan: entered promiscuous mode
[  308.679353][ T1190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  308.679382][ T1190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  309.352941][ T4915] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  309.408300][ T4915] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  309.427586][ T4915] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  309.435341][ T4915] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  309.456518][ T4915] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  309.565745][ T8115] veth1_vlan: entered promiscuous mode
[  310.057180][ T8115] veth0_macvtap: entered promiscuous mode
[  310.330267][ T8964] loop3: detected capacity change from 0 to 40427
[  310.349069][ T8964] F2FS-fs (loop3): invalid crc value
[  310.371438][ T1021] hsr_slave_0: left promiscuous mode
[  310.410655][ T1021] hsr_slave_1: left promiscuous mode
[  310.411575][ T1021] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  310.411598][ T1021] batman_adv: batadv0: Removing interface: batadv_slave_0
[  310.471000][ T1021] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  310.471025][ T1021] batman_adv: batadv0: Removing interface: batadv_slave_1
[  310.819862][ T8964] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  310.849280][ T1021] hsr_slave_0: left promiscuous mode
[  310.857584][ T8964] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  310.920427][ T1021] hsr_slave_1: left promiscuous mode
[  310.921365][ T1021] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  310.921387][ T1021] batman_adv: batadv0: Removing interface: batadv_slave_0
[  310.924032][ T8964] F2FS-fs (loop3): Can't enable fs-verity on inode 10: the verity feature is not enabled on this filesystem
[  311.033461][ T1021] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  311.033485][ T1021] batman_adv: batadv0: Removing interface: batadv_slave_1
[  311.067375][ T5598] syz-executor: attempt to access beyond end of device
[  311.067375][ T5598] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  311.116764][ T5598] CPU: 1 UID: 0 PID: 5598 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  311.116791][ T5598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  311.116802][ T5598] Call Trace:
[  311.116809][ T5598]  <TASK>
[  311.116818][ T5598]  dump_stack_lvl+0xe8/0x150
[  311.116849][ T5598]  f2fs_stop_checkpoint+0x3f9/0x5e0
[  311.116881][ T5598]  f2fs_write_end_io+0x124b/0x1710
[  311.116924][ T5598]  __submit_merged_bio+0x258/0x6a0
[  311.116948][ T5598]  ? rcu_is_watching+0x15/0xb0
[  311.116976][ T5598]  __submit_merged_write_cond+0x3c9/0x4e0
[  311.117010][ T5598]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  311.117057][ T5598]  f2fs_write_data_pages+0x2a27/0x36f0
[  311.117112][ T5598]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  311.117177][ T5598]  ? do_raw_spin_lock+0x12b/0x2f0
[  311.117218][ T5598]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  311.117239][ T5598]  ? rt_mutex_slowunlock+0x4ee/0xa20
[  311.117266][ T5598]  ? reacquire_held_locks+0x104/0x190
[  311.117297][ T5598]  ? rt_spin_unlock+0x157/0x200
[  311.117324][ T5598]  ? rt_spin_unlock+0x163/0x200
[  311.117346][ T5598]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  311.117366][ T5598]  do_writepages+0x338/0x560
[  311.117392][ T5598]  ? rt_spin_unlock+0x157/0x200
[  311.117434][ T5598]  filemap_fdatawrite+0x1ec/0x2f0
[  311.117458][ T5598]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  311.117477][ T5598]  ? do_raw_spin_lock+0x12b/0x2f0
[  311.117538][ T5598]  ? rt_spin_unlock+0x157/0x200
[  311.117566][ T5598]  ? rt_spin_unlock+0x163/0x200
[  311.117592][ T5598]  f2fs_sync_dirty_inodes+0x30e/0x830
[  311.117632][ T5598]  f2fs_write_checkpoint+0xa3d/0x2710
[  311.117652][ T5598]  ? __lock_acquire+0x683/0x2ce0
[  311.117701][ T5598]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  311.117774][ T5598]  kill_f2fs_super+0x2f6/0x700
[  311.117800][ T5598]  ? __pfx_kill_f2fs_super+0x10/0x10
[  311.117837][ T5598]  ? call_rcu+0x64b/0x8b0
[  311.117857][ T5598]  ? lockdep_hardirqs_on+0x7a/0x110
[  311.117891][ T5598]  deactivate_locked_super+0xbc/0x130
[  311.117915][ T5598]  cleanup_mnt+0x3d3/0x460
[  311.117941][ T5598]  task_work_run+0x1d9/0x270
[  311.117962][ T5598]  ? __pfx_task_work_run+0x10/0x10
[  311.117990][ T5598]  exit_to_user_mode_loop+0x1fa/0x730
[  311.118008][ T5598]  ? rcu_is_watching+0x15/0xb0
[  311.118030][ T5598]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.118049][ T5598]  do_syscall_64+0x353/0x580
[  311.118068][ T5598]  ? trace_irq_disable+0x3b/0x140
[  311.118086][ T5598]  ? clear_bhb_loop+0x40/0x90
[  311.118108][ T5598]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.118125][ T5598] RIP: 0033:0x7fda77e2f0d7
[  311.118143][ T5598] Code: a2 c7 05 1c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  311.118157][ T5598] RSP: 002b:00007ffe81a57e48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  311.118175][ T5598] RAX: 0000000000000000 RBX: 00007fda77ec330a RCX: 00007fda77e2f0d7
[  311.118186][ T5598] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe81a57f00
[  311.118197][ T5598] RBP: 00007ffe81a57f00 R08: 00007ffe81a58f00 R09: 00000000ffffffff
[  311.118209][ T5598] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe81a58f90
[  311.118220][ T5598] R13: 00007fda77ec330a R14: 000000000004bdc8 R15: 00007ffe81a58fd0
[  311.118250][ T5598]  </TASK>
[  311.118303][ T5598] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  311.580636][   T36] audit: type=1800 audit(1784955618.829:99): pid=9001 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.579" name="bMatrixCoefficients" dev="configfs" ino=15030 res=0 errno=0
[  311.590171][ T4915] Bluetooth: hci5: command tx timeout
[  311.745353][ T1021] veth1_macvtap: left promiscuous mode
[  311.747671][ T1021] veth0_macvtap: left promiscuous mode
[  311.747932][ T1021] veth1_vlan: left promiscuous mode
[  311.748112][ T1021] veth0_vlan: left promiscuous mode
[  311.992554][ T1021] veth1_macvtap: left promiscuous mode
[  311.992701][ T1021] veth0_macvtap: left promiscuous mode
[  311.992949][ T1021] veth1_vlan: left promiscuous mode
[  311.993119][ T1021] veth0_vlan: left promiscuous mode
[  312.136966][   T36] audit: type=1800 audit(1784955619.389:100): pid=9007 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.577" name="bTransferCharacteristics" dev="configfs" ino=15042 res=0 errno=0
[  312.238991][ T9009] loop3: detected capacity change from 0 to 128
[  312.251833][ T9009] EXT4-fs (loop3): Test dummy encryption mode enabled
[  312.275367][ T9009] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  312.275773][ T9009] ext4 filesystem being mounted at /146/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  312.462149][ T9005] loop0: detected capacity change from 0 to 40427
[  312.486037][ T9005] F2FS-fs (loop0): build fault injection rate: 174
[  312.486058][ T9005] F2FS-fs (loop0): build fault injection type: 0x3bfe8c
[  312.587147][ T5598] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  312.638536][ T9005] F2FS-fs (loop0): invalid crc value
[  312.791775][   T36] audit: type=1800 audit(1784955620.049:101): pid=9017 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.583" name="bTransferCharacteristics" dev="configfs" ino=15054 res=0 errno=0
[  312.836762][   T36] audit: type=1800 audit(1784955620.049:102): pid=9017 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.583" name="bMatrixCoefficients" dev="configfs" ino=15055 res=0 errno=0
[  313.051003][ T9005] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  313.104576][ T9020] loop3: detected capacity change from 0 to 4096
[  313.158520][ T5605] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  313.158813][ T9005] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  313.174767][ T9020] EXT4-fs: Ignoring removed orlov option
[  313.249213][ T9020] EXT4-fs (loop3): Test dummy encryption mode enabled
[  313.254574][ T5605] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  313.257340][ T5605] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  313.288237][ T5605] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  313.293219][ T5605] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  313.325354][ T9020] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  313.671409][ T4915] Bluetooth: hci5: command tx timeout
[  313.755980][ T5598] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  314.073575][   T36] audit: type=1800 audit(1784955621.329:103): pid=9033 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.587" name="bMatrixCoefficients" dev="configfs" ino=15083 res=0 errno=0
[  314.407345][   T36] audit: type=1800 audit(1784955621.659:104): pid=9037 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.589" name="bTransferCharacteristics" dev="configfs" ino=15098 res=0 errno=0
[  314.835766][   T36] audit: type=1800 audit(1784955622.089:105): pid=9042 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.591" name="bMatrixCoefficients" dev="configfs" ino=15101 res=0 errno=0
[  314.910251][ T1021] team0 (unregistering): Port device team_slave_1 removed
[  314.971201][ T1021] team0 (unregistering): Port device team_slave_0 removed
[  315.509431][ T4915] Bluetooth: hci3: command tx timeout
[  315.612793][ T9046] loop0: detected capacity change from 0 to 40427
[  315.715363][ T9046] F2FS-fs (loop0): Image doesn't support compression
[  315.715387][ T9046] F2FS-fs (loop0): build fault injection type: 0x4
[  315.716429][ T9046] F2FS-fs (loop0): invalid crc value
[  315.749299][ T4915] Bluetooth: hci5: command tx timeout
[  315.990621][ T9046] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  316.022448][ T9046] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  316.135438][ T9046] syz.0.586: attempt to access beyond end of device
[  316.135438][ T9046] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  316.166816][ T9046] CPU: 1 UID: 0 PID: 9046 Comm: syz.0.586 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  316.166835][ T9046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  316.166841][ T9046] Call Trace:
[  316.166847][ T9046]  <TASK>
[  316.166852][ T9046]  dump_stack_lvl+0xe8/0x150
[  316.166875][ T9046]  f2fs_stop_checkpoint+0x3f9/0x5e0
[  316.166896][ T9046]  f2fs_write_end_io+0x124b/0x1710
[  316.166918][ T9046]  __submit_merged_bio+0x258/0x6a0
[  316.166934][ T9046]  ? rcu_is_watching+0x15/0xb0
[  316.166949][ T9046]  __submit_merged_write_cond+0x3c9/0x4e0
[  316.166968][ T9046]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  316.166995][ T9046]  f2fs_write_data_pages+0x2a27/0x36f0
[  316.167026][ T9046]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  316.167086][ T9046]  ? do_raw_spin_lock+0x12b/0x2f0
[  316.167136][ T9046]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  316.167152][ T9046]  ? rt_mutex_slowunlock+0x4ee/0xa20
[  316.167169][ T9046]  ? reacquire_held_locks+0x104/0x190
[  316.167187][ T9046]  ? rt_spin_unlock+0x157/0x200
[  316.167203][ T9046]  ? rt_spin_unlock+0x163/0x200
[  316.167216][ T9046]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  316.167228][ T9046]  do_writepages+0x338/0x560
[  316.167242][ T9046]  ? rt_spin_unlock+0x157/0x200
[  316.167261][ T9046]  filemap_fdatawrite+0x1ec/0x2f0
[  316.167275][ T9046]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  316.167285][ T9046]  ? do_raw_spin_lock+0x12b/0x2f0
[  316.167319][ T9046]  ? rt_spin_unlock+0x157/0x200
[  316.167335][ T9046]  ? rt_spin_unlock+0x163/0x200
[  316.167350][ T9046]  f2fs_sync_dirty_inodes+0x30e/0x830
[  316.167369][ T9046]  f2fs_write_checkpoint+0xa3d/0x2710
[  316.167398][ T9046]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  316.167433][ T9046]  ? rcu_is_watching+0x15/0xb0
[  316.167448][ T9046]  f2fs_issue_checkpoint+0x424/0x6f0
[  316.167464][ T9046]  ? __pfx_f2fs_issue_checkpoint+0x10/0x10
[  316.167475][ T9046]  ? __kasan_slab_free+0x5c/0x80
[  316.167484][ T9046]  ? kmem_cache_free+0x187/0x6c0
[  316.167494][ T9046]  ? f2fs_create+0x456/0x690
[  316.167506][ T9046]  ? path_openat+0x1344/0x3850
[  316.167520][ T9046]  ? do_raw_spin_lock+0x12b/0x2f0
[  316.167536][ T9046]  ? do_raw_spin_lock+0x12b/0x2f0
[  316.167558][ T9046]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  316.167569][ T9046]  ? rt_mutex_slowunlock+0x4ee/0xa20
[  316.167595][ T9046]  ? f2fs_sync_fs+0x1f2/0x3c0
[  316.167610][ T9046]  f2fs_create+0x516/0x690
[  316.167629][ T9046]  ? __pfx_f2fs_create+0x10/0x10
[  316.167645][ T9046]  ? bpf_lsm_inode_permission+0x9/0x20
[  316.167657][ T9046]  ? security_inode_permission+0xb7/0x2e0
[  316.167669][ T9046]  ? may_o_create+0x2d2/0x370
[  316.167680][ T9046]  ? bpf_lsm_inode_create+0x9/0x20
[  316.167693][ T9046]  ? __pfx_f2fs_create+0x10/0x10
[  316.167705][ T9046]  path_openat+0x1344/0x3850
[  316.167736][ T9046]  do_file_open+0x23e/0x4a0
[  316.167748][ T9046]  ? lockdep_hardirqs_on+0x7a/0x110
[  316.167761][ T9046]  ? __pfx_do_file_open+0x10/0x10
[  316.167786][ T9046]  ? alloc_fd+0x654/0x6d0
[  316.167802][ T9046]  do_sys_openat2+0x115/0x200
[  316.167812][ T9046]  ? __se_sys_futex+0x3a8/0x450
[  316.167825][ T9046]  ? __pfx_do_sys_openat2+0x10/0x10
[  316.167838][ T9046]  ? rcu_is_watching+0x15/0xb0
[  316.167852][ T9046]  __x64_sys_openat+0x138/0x170
[  316.167864][ T9046]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  316.167875][ T9046]  do_syscall_64+0x174/0x580
[  316.167886][ T9046]  ? trace_irq_disable+0x3b/0x140
[  316.167896][ T9046]  ? clear_bhb_loop+0x40/0x90
[  316.167907][ T9046]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  316.167917][ T9046] RIP: 0033:0x7ff71977de99
[  316.167928][ T9046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  316.167936][ T9046] RSP: 002b:00007ff7179d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  316.167948][ T9046] RAX: ffffffffffffffda RBX: 00007ff719a05fa0 RCX: 00007ff71977de99
[  316.167955][ T9046] RDX: 0000000000000042 RSI: 00002000000002c0 RDI: ffffffffffffff9c
[  316.167962][ T9046] RBP: 00007ff719813eaf R08: 0000000000000000 R09: 0000000000000000
[  316.167969][ T9046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  316.167975][ T9046] R13: 00007ff719a06038 R14: 00007ff719a05fa0 R15: 00007ffccc2a54a8
[  316.167995][ T9046]  </TASK>
[  316.180251][ T9046] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  316.822926][ T1021] team0 (unregistering): Port device team_slave_1 removed
[  316.976357][ T1021] team0 (unregistering): Port device team_slave_0 removed
[  317.122045][ T1338] ieee802154 phy0 wpan0: encryption failed: -22
[  317.122112][ T1338] ieee802154 phy1 wpan1: encryption failed: -22
[  317.267403][ T9048] loop3: detected capacity change from 0 to 131072
[  317.279769][ T9048] F2FS-fs (loop3): Test dummy encryption mode enabled
[  317.280965][ T9048] F2FS-fs (loop3): invalid crc value
[  317.581406][ T9048] F2FS-fs (loop3): access invalid blkaddr:0
[  317.581433][ T9048] CPU: 0 UID: 0 PID: 9048 Comm: syz.3.593 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  317.581456][ T9048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  317.581469][ T9048] Call Trace:
[  317.581476][ T9048]  <TASK>
[  317.581484][ T9048]  dump_stack_lvl+0xe8/0x150
[  317.581520][ T9048]  __f2fs_is_valid_blkaddr+0xe62/0x14f0
[  317.581549][ T9048]  sanity_check_extent_cache+0x1a3/0x620
[  317.581572][ T9048]  ? f2fs_sanity_check_inline_data+0x70/0x740
[  317.581602][ T9048]  f2fs_iget+0x3f18/0x5cd0
[  317.581658][ T9048]  f2fs_fill_super+0x4e88/0x7760
[  317.581716][ T9048]  get_tree_bdev_flags+0x430/0x4f0
[  317.581742][ T9048]  ? __pfx_f2fs_fill_super+0x10/0x10
[  317.581762][ T9048]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  317.581785][ T9048]  ? safesetid_security_capable+0xa9/0x1a0
[  317.581814][ T9048]  vfs_get_tree+0x92/0x2a0
[  317.581841][ T9048]  do_new_mount+0x319/0xdc0
[  317.581862][ T9048]  ? cap_capable+0x123/0x460
[  317.581886][ T9048]  ? __pfx_do_new_mount+0x10/0x10
[  317.581906][ T9048]  ? ns_capable+0x89/0xe0
[  317.581934][ T9048]  ? path_mount+0x647/0x1040
[  317.581954][ T9048]  ? user_path_at+0xd4/0x160
[  317.581980][ T9048]  __se_sys_mount+0x31d/0x420
[  317.582005][ T9048]  ? __pfx___se_sys_mount+0x10/0x10
[  317.582031][ T9048]  ? __x64_sys_mount+0x20/0xc0
[  317.582051][ T9048]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  317.582083][ T9048]  do_syscall_64+0x174/0x580
[  317.582106][ T9048]  ? trace_irq_disable+0x3b/0x140
[  317.582126][ T9048]  ? clear_bhb_loop+0x40/0x90
[  317.582149][ T9048]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  317.582168][ T9048] RIP: 0033:0x7fda77e2f10a
[  317.582187][ T9048] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  317.582205][ T9048] RSP: 002b:00007fda76085e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  317.582225][ T9048] RAX: ffffffffffffffda RBX: 00007fda76085ee0 RCX: 00007fda77e2f10a
[  317.582240][ T9048] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 00007fda76085ea0
[  317.582255][ T9048] RBP: 0000200000000100 R08: 00007fda76085ee0 R09: 0000000000000010
[  317.582269][ T9048] R10: 0000000000000010 R11: 0000000000000246 R12: 00002000000000c0
[  317.582282][ T9048] R13: 00007fda76085ea0 R14: 00000000000105eb R15: 0000200000000280
[  317.582310][ T9048]  </TASK>
[  317.593259][ T4915] Bluetooth: hci3: command tx timeout
[  317.636424][ T8115] veth1_macvtap: entered promiscuous mode
[  317.674066][   T36] audit: type=1800 audit(1784955624.909:106): pid=9058 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.595" name="bMatrixCoefficients" dev="configfs" ino=15516 res=0 errno=0
[  317.695245][ T9048] loop3: lost filesystem error report for type 5 error -117
[  317.695265][ T9048] F2FS-fs (loop3): sanity_check_extent_cache: inode (ino=3) extent info [0, 0, 4128768] is incorrect, run fsck to fix
[  317.695330][ T9048] loop3: lost filesystem error report for type 5 error -117
[  317.695343][ T9048] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  317.695625][ T9048] F2FS-fs (loop3): Failed to read root inode
[  317.831306][ T4915] Bluetooth: hci5: command tx timeout
[  317.932800][ T5261] 8021q: adding VLAN 0 to HW filter on device eth8
[  318.332071][ T9064] loop0: detected capacity change from 0 to 1024
[  318.374598][ T9064] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  318.397100][ T8411] veth0_vlan: entered promiscuous mode
[  318.536659][ T8411] veth1_vlan: entered promiscuous mode
[  319.005214][ T5602] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  319.006032][ T8411] veth0_macvtap: entered promiscuous mode
[  319.037553][ T8411] veth1_macvtap: entered promiscuous mode
[  319.221528][ T8411] batman_adv: batadv0: Interface activated: batadv_slave_0
[  319.322838][ T8411] batman_adv: batadv0: Interface activated: batadv_slave_1
[  319.674228][ T4915] Bluetooth: hci3: command tx timeout
[  319.777607][ T9092] fuse: Bad value for 'fd'
[  320.232216][ T3807] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  320.237046][ T5261] 8021q: adding VLAN 0 to HW filter on device eth9
[  320.255860][ T9098] loop3: detected capacity change from 0 to 4096
[  320.267134][ T9098] EXT4-fs: inline encryption not supported
[  320.285233][ T9098] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  320.285252][ T9098] EXT4-fs (loop3): Test dummy encryption mode enabled
[  320.348063][ T3807] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  320.372524][ T9098] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003]
[  320.372648][ T9098] System zones: 0-5
[  320.385298][ T9098] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  320.407830][ T3807] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  320.620878][ T3807] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  320.703187][   T36] audit: type=1804 audit(1784955627.929:107): pid=9098 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.601" name="/newroot/159/file0/file0/file1" dev="loop3" ino=22 res=1 errno=0
[  320.703230][   T36] audit: type=1800 audit(1784955627.939:108): pid=9106 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.603" name="bMatrixCoefficients" dev="configfs" ino=15635 res=0 errno=0
[  321.006895][ T9108] loop0: detected capacity change from 0 to 512
[  321.426489][ T9108] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF
[  321.426506][ T9108] FAT-fs (loop0): Filesystem has been set read-only
[  321.762340][ T4915] Bluetooth: hci3: command tx timeout
[  322.438124][ T3807] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  322.438138][ T3807] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  322.559227][ T5598] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  322.903943][ T9122] loop0: detected capacity change from 0 to 1024
[  323.025609][ T9122] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  323.025728][ T9122] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  323.480668][ T3807] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  323.480688][ T3807] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  323.602077][ T5602] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  323.819519][ T9138] fuse: Bad value for 'fd'
[  323.895587][ T5261] 8021q: adding VLAN 0 to HW filter on device eth10
[  324.061643][ T9120] loop3: detected capacity change from 0 to 40427
[  324.067536][ T9120] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  324.067560][ T9120] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  324.101527][ T9120] F2FS-fs (loop3): invalid crc value
[  324.312108][ T8974] bridge0: port 1(bridge_slave_0) entered blocking state
[  324.312207][ T8974] bridge0: port 1(bridge_slave_0) entered disabled state
[  324.312405][ T8974] bridge_slave_0: entered allmulticast mode
[  324.352178][ T8974] bridge_slave_0: entered promiscuous mode
[  324.375554][ T8974] bridge0: port 2(bridge_slave_1) entered blocking state
[  324.375636][ T8974] bridge0: port 2(bridge_slave_1) entered disabled state
[  324.375786][ T8974] bridge_slave_1: entered allmulticast mode
[  324.436383][ T8974] bridge_slave_1: entered promiscuous mode
[  324.594603][ T9120] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  324.640966][   T36] audit: type=1800 audit(1784955631.879:109): pid=9155 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.611" name="bMatrixCoefficients" dev="configfs" ino=15931 res=0 errno=0
[  324.854539][ T8974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  324.901602][ T9120] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  324.901632][ T9120] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  324.945077][ T9160] loop7: detected capacity change from 0 to 2048
[  324.967593][ T9161] loop0: detected capacity change from 0 to 256
[  325.055896][ T8974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  325.467768][ T9160] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  325.738955][ T8411] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  326.464481][ T9186] loop7: detected capacity change from 0 to 512
[  326.465741][ T9186] EXT4-fs: Ignoring removed i_version option
[  326.465762][ T9186] EXT4-fs: Ignoring removed mblk_io_submit option
[  326.551765][ T9186] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  326.680058][ T5261] 8021q: adding VLAN 0 to HW filter on device eth11
[  326.693679][ T8974] team0: Port device team_slave_0 added
[  326.760186][ T8411] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  326.815138][ T8974] team0: Port device team_slave_1 added
[  326.919656][ T9169] loop0: detected capacity change from 0 to 40427
[  326.923371][ T9169] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  326.923393][ T9169] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  326.926115][ T9169] F2FS-fs (loop0): invalid crc_offset: 33558524
[  327.052505][ T9169] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  327.076554][ T9169] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  327.076582][ T9169] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  327.342715][   T36] audit: type=1800 audit(1784955634.599:110): pid=9196 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.614" name="bMatrixCoefficients" dev="configfs" ino=15282 res=0 errno=0
[  327.453304][ T9200] loop7: detected capacity change from 0 to 512
[  327.817403][ T9200] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[  327.817427][ T9200] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[  327.863800][ T9200] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended
[  327.876031][ T9200] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  327.876136][ T9200] System zones: 0-2, 18-18, 34-35
[  328.052052][ T9200] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  328.306913][ T9018] bridge0: port 1(bridge_slave_0) entered blocking state
[  328.307010][ T9018] bridge0: port 1(bridge_slave_0) entered disabled state
[  328.307214][ T9018] bridge_slave_0: entered allmulticast mode
[  328.361360][ T9018] bridge_slave_0: entered promiscuous mode
[  328.455160][ T9018] bridge0: port 2(bridge_slave_1) entered blocking state
[  328.455255][ T9018] bridge0: port 2(bridge_slave_1) entered disabled state
[  328.455430][ T9018] bridge_slave_1: entered allmulticast mode
[  328.457489][ T9018] bridge_slave_1: entered promiscuous mode
[  328.489561][ T8974] batman_adv: batadv0: Adding interface: batadv_slave_0
[  328.489577][ T8974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  328.489597][ T8974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  328.575090][ T8974] batman_adv: batadv0: Adding interface: batadv_slave_1
[  328.575104][ T8974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  328.575122][ T8974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  328.980026][ T8411] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  329.499366][ T9018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  329.630878][ T9018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  329.854023][ T9215] loop3: detected capacity change from 0 to 1024
[  329.885837][ T8974] hsr_slave_0: entered promiscuous mode
[  329.887110][ T8974] hsr_slave_1: entered promiscuous mode
[  329.888090][ T8974] debugfs: 'hsr0' already exists in 'hsr'
[  329.888112][ T8974] Cannot create hsr debugfs directory
[  329.922176][ T9018] team0: Port device team_slave_0 added
[  329.965158][ T9018] team0: Port device team_slave_1 added
[  329.966796][ T9215] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  330.198058][ T5598] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  330.487702][   T36] audit: type=1800 audit(1784955637.739:111): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.628" name="bMatrixCoefficients" dev="configfs" ino=16031 res=0 errno=0
[  330.666921][ T9229] loop0: detected capacity change from 0 to 1024
[  330.668188][ T9229] EXT4-fs: Ignoring removed orlov option
[  330.711855][ T9229] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal
[  331.056165][ T9246] fuse: Bad value for 'fd'
[  331.245016][ T9250] overlayfs: failed to resolve './file1/file0': -2
[  331.547799][ T5261] 8021q: adding VLAN 0 to HW filter on device eth12
[  331.584993][   T36] audit: type=1800 audit(1784955638.829:112): pid=9263 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.638" name="bMatrixCoefficients" dev="configfs" ino=16414 res=0 errno=0
[  331.731017][ T9018] batman_adv: batadv0: Adding interface: batadv_slave_0
[  331.731032][ T9018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  331.731053][ T9018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  331.843998][ T9018] batman_adv: batadv0: Adding interface: batadv_slave_1
[  331.844013][ T9018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  331.844034][ T9018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  331.865480][ T9271] loop7: detected capacity change from 0 to 16
[  331.961615][ T9271] erofs (device loop7): mounted with root inode @ nid 36.
[  332.021062][ T9274] overlayfs: failed to resolve './file1/file0': -2
[  332.451644][ T9018] hsr_slave_0: entered promiscuous mode
[  332.455332][ T9018] hsr_slave_1: entered promiscuous mode
[  332.456188][ T9018] debugfs: 'hsr0' already exists in 'hsr'
[  332.456209][ T9018] Cannot create hsr debugfs directory
[  332.503242][   T36] audit: type=1800 audit(1784955639.749:113): pid=9286 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.649" name="bMatrixCoefficients" dev="configfs" ino=16146 res=0 errno=0
[  332.666412][ T9291] overlayfs: overlapping lowerdir path
[  332.906992][ T9296] loop0: detected capacity change from 0 to 512
[  332.931757][ T9296] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  333.160626][   T42] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  333.420739][ T9304] overlayfs: failed to resolve './file1/file0': -2
[  333.713825][ T9294] loop3: detected capacity change from 0 to 40427
[  333.770797][ T9294] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  333.770822][ T9294] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  333.797531][ T9294] F2FS-fs (loop3): invalid crc_offset: 33558524
[  333.932686][   T36] audit: type=1800 audit(1784955641.189:114): pid=9315 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.658" name="bMatrixCoefficients" dev="configfs" ino=16560 res=0 errno=0
[  334.132023][ T9294] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  334.234481][ T8974] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  334.289824][ T9319] overlayfs: overlapping lowerdir path
[  334.444335][ T9294] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  334.444364][ T9294] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  334.692162][ T9309] loop7: detected capacity change from 0 to 40427
[  334.696225][ T9309] f2fs: Bad value for 'memory'
[  335.082141][ T9327] loop7: detected capacity change from 0 to 128
[  335.083890][ T9327] EXT4-fs: Ignoring removed orlov option
[  335.084768][ T9327] EXT4-fs (loop7): Test dummy encryption mode enabled
[  335.115860][ T9327] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  335.143434][ T9327] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  335.622121][ T9323] loop0: detected capacity change from 0 to 40427
[  335.668293][ T9323] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  335.668317][ T9323] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  335.708171][ T9323] F2FS-fs (loop0): invalid crc value
[  335.757204][   T36] audit: type=1800 audit(1784955643.009:115): pid=9324 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.650" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=12 res=0 errno=0
[  335.831490][ T8411] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  335.952276][ T8974] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.132068][ T9337] overlayfs: failed to resolve './file1/file0': -2
[  336.156381][ T9323] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  336.516405][ T9323] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  336.516447][ T9323] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  336.619759][ T9341] loop7: detected capacity change from 0 to 4096
[  336.673711][ T9341] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  337.256991][ T8974] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.398070][ T8411] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  337.809491][ T9357] overlayfs: overlapping lowerdir path
[  338.186623][ T9367] loop7: detected capacity change from 0 to 256
[  338.217030][ T9367] FAT-fs (loop7): data area starts beyond volume (274 > 64)
[  338.217052][ T9367] FAT-fs (loop7): Can't find a valid FAT filesystem
[  338.408643][ T8974] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  338.464462][ T5261] 8021q: adding VLAN 0 to HW filter on device eth13
[  338.523126][ T9374] loop3: detected capacity change from 0 to 1024
[  338.532678][ T9374] EXT4-fs: Ignoring removed oldalloc option
[  338.532726][ T9374] EXT4-fs: Ignoring removed bh option
[  338.697431][ T9374] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  338.697515][ T9374] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  338.775803][ T9374] EXT4-fs error (device loop3): ext4_free_blocks:6718: comm syz.3.673: Freeing blocks not in datazone - block = 0, count = 16
[  338.827482][ T9374] EXT4-fs (loop3): Remounting filesystem read-only
[  339.010620][ T5598] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  339.199397][ T9389] loop0: detected capacity change from 0 to 512
[  339.240126][ T9389] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  339.252278][ T9389] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  339.312682][ T9389] EXT4-fs (loop0): 1 truncate cleaned up
[  339.331429][ T9389] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  339.470547][ T9371] loop7: detected capacity change from 0 to 40427
[  339.506793][ T9371] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  339.506816][ T9371] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  339.536654][ T9371] F2FS-fs (loop7): invalid crc value
[  339.574490][ T1021] bridge_slave_1: left allmulticast mode
[  339.574527][ T1021] bridge_slave_1: left promiscuous mode
[  339.574736][ T1021] bridge0: port 2(bridge_slave_1) entered disabled state
[  339.759263][ T1021] bridge_slave_0: left allmulticast mode
[  339.759309][ T1021] bridge_slave_0: left promiscuous mode
[  339.759550][ T1021] bridge0: port 1(bridge_slave_0) entered disabled state
[  339.880971][ T5602] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  339.970189][ T9371] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  340.087603][ T9408] overlayfs: failed to resolve './file1/file0': -2
[  340.332629][ T9371] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  340.332656][ T9371] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  340.379555][ T1021] bridge_slave_1: left allmulticast mode
[  340.379586][ T1021] bridge_slave_1: left promiscuous mode
[  340.379814][ T1021] bridge0: port 2(bridge_slave_1) entered disabled state
[  340.609374][ T1021] bridge_slave_0: left allmulticast mode
[  340.609408][ T1021] bridge_slave_0: left promiscuous mode
[  340.609643][ T1021] bridge0: port 1(bridge_slave_0) entered disabled state
[  340.825096][ T9405] loop3: detected capacity change from 0 to 40427
[  340.829261][ T9405] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64)
[  340.829283][ T9405] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  340.876534][ T9405] F2FS-fs (loop3): invalid crc value
[  340.925453][ T9415] loop0: detected capacity change from 0 to 40427
[  340.960404][ T9415] F2FS-fs (loop0): invalid crc value
[  341.071294][ T9415] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  341.231901][ T9415] F2FS-fs (loop0): f2fs_disable_checkpoint starts, unusable: 0
[  341.231920][ T9415] F2FS-fs (loop0): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  341.231955][ T9415] F2FS-fs (loop0): Start checkpoint disabled!
[  341.428855][ T9405] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  341.594288][ T9405] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  341.594315][ T9405] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  341.701230][ T9416] f2fs_ckpt-7:3: attempt to access beyond end of device
[  341.701230][ T9416] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  341.745530][ T9416] CPU: 1 UID: 0 PID: 9416 Comm: f2fs_ckpt-7:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  341.745552][ T9416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  341.745558][ T9416] Call Trace:
[  341.745562][ T9416]  <TASK>
[  341.745567][ T9416]  dump_stack_lvl+0xe8/0x150
[  341.745587][ T9416]  f2fs_stop_checkpoint+0x3f9/0x5e0
[  341.745606][ T9416]  f2fs_write_end_io+0x124b/0x1710
[  341.745633][ T9416]  __submit_merged_bio+0x258/0x6a0
[  341.745658][ T9416]  ? rcu_is_watching+0x15/0xb0
[  341.745675][ T9416]  __submit_merged_write_cond+0x3c9/0x4e0
[  341.745694][ T9416]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  341.745720][ T9416]  f2fs_write_data_pages+0x2a27/0x36f0
[  341.745749][ T9416]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  341.745783][ T9416]  ? do_raw_spin_lock+0x12b/0x2f0
[  341.745806][ T9416]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  341.745818][ T9416]  ? rt_mutex_slowunlock+0x4ee/0xa20
[  341.745834][ T9416]  ? reacquire_held_locks+0x104/0x190
[  341.745850][ T9416]  ? rt_spin_unlock+0x157/0x200
[  341.745866][ T9416]  ? rt_spin_unlock+0x163/0x200
[  341.745878][ T9416]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  341.745889][ T9416]  do_writepages+0x338/0x560
[  341.745911][ T9416]  ? rt_spin_unlock+0x157/0x200
[  341.745942][ T9416]  filemap_fdatawrite+0x1ec/0x2f0
[  341.745964][ T9416]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  341.745978][ T9416]  ? do_raw_spin_lock+0x12b/0x2f0
[  341.746028][ T9416]  ? rt_spin_unlock+0x157/0x200
[  341.746046][ T9416]  ? rt_spin_unlock+0x163/0x200
[  341.746061][ T9416]  f2fs_sync_dirty_inodes+0x30e/0x830
[  341.746080][ T9416]  f2fs_write_checkpoint+0xa3d/0x2710
[  341.746108][ T9416]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  341.746142][ T9416]  ? rcu_is_watching+0x15/0xb0
[  341.746157][ T9416]  __checkpoint_and_complete_reqs+0x135/0x480
[  341.746170][ T9416]  ? rt_mutex_slowunlock+0x4ee/0xa20
[  341.746187][ T9416]  ? __pfx___checkpoint_and_complete_reqs+0x10/0x10
[  341.746198][ T9416]  ? rt_spin_lock+0x1e0/0x400
[  341.746219][ T9416]  ? schedule+0x90/0x2b0
[  341.746233][ T9416]  issue_checkpoint_thread+0xd5/0x270
[  341.746246][ T9416]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  341.746258][ T9416]  ? __pfx_autoremove_wake_function+0x10/0x10
[  341.746273][ T9416]  ? __kthread_parkme+0x71/0x1f0
[  341.746288][ T9416]  ? __kthread_parkme+0x196/0x1f0
[  341.746303][ T9416]  kthread+0x388/0x470
[  341.746316][ T9416]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  341.746326][ T9416]  ? __pfx_kthread+0x10/0x10
[  341.746340][ T9416]  ret_from_fork+0x514/0xb70
[  341.746357][ T9416]  ? __pfx_ret_from_fork+0x10/0x10
[  341.746370][ T9416]  ? __switch_to+0xc89/0x1420
[  341.746385][ T9416]  ? __pfx_kthread+0x10/0x10
[  341.746399][ T9416]  ret_from_fork_asm+0x1a/0x30
[  341.746418][ T9416]  </TASK>
[  341.746422][ T9416] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  341.799562][ T9415] F2FS-fs (loop0): f2fs_disable_checkpoint finishes, err:0
[  341.808399][ T9415] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  343.001456][ T9436] loop0: detected capacity change from 0 to 1024
[  343.093841][ T9439] overlayfs: failed to resolve './file1/file0': -2
[  343.217114][ T9436] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  343.605758][ T5602] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  343.748574][ T9450] loop0: detected capacity change from 0 to 256
[  343.764241][ T9450] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  343.764258][ T9450] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  343.772334][ T9450] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  343.783474][ T9450] exFAT-fs (loop0): failed to load alloc-bitmap
[  343.783488][ T9450] exFAT-fs (loop0): failed to recognize exfat type
[  343.930885][ T1021] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  344.091385][ T9447] loop3: detected capacity change from 0 to 40427
[  344.101977][ T9447] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  344.101992][ T9447] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  344.105816][ T9447] F2FS-fs (loop3): invalid crc_offset: 33558524
[  344.114560][ T1021] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  344.176556][ T1021] bond0 (unregistering): Released all slaves
[  344.353667][ T9447] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  344.373066][ T9445] loop7: detected capacity change from 0 to 40427
[  344.377593][ T9445] F2FS-fs (loop7): invalid crc value
[  344.390531][ T9447] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  344.390558][ T9447] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  344.754559][   T36] audit: type=1800 audit(1784955652.009:116): pid=9458 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.689" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=12 res=0 errno=0
[  344.760870][ T9445] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  344.892511][ T9445] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  345.212475][ T8411] syz-executor: attempt to access beyond end of device
[  345.212475][ T8411] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  345.242283][ T8411] CPU: 1 UID: 0 PID: 8411 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  345.242302][ T8411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  345.242309][ T8411] Call Trace:
[  345.242315][ T8411]  <TASK>
[  345.242321][ T8411]  dump_stack_lvl+0xe8/0x150
[  345.242341][ T8411]  f2fs_stop_checkpoint+0x3f9/0x5e0
[  345.242361][ T8411]  f2fs_write_end_io+0x124b/0x1710
[  345.242383][ T8411]  __submit_merged_bio+0x258/0x6a0
[  345.242397][ T8411]  ? rcu_is_watching+0x15/0xb0
[  345.242413][ T8411]  __submit_merged_write_cond+0x3c9/0x4e0
[  345.242432][ T8411]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  345.242457][ T8411]  f2fs_write_data_pages+0x2a27/0x36f0
[  345.242487][ T8411]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  345.242520][ T8411]  ? do_raw_spin_lock+0x12b/0x2f0
[  345.242544][ T8411]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  345.242556][ T8411]  ? rt_mutex_slowunlock+0x4ee/0xa20
[  345.242572][ T8411]  ? reacquire_held_locks+0x104/0x190
[  345.242589][ T8411]  ? rt_spin_unlock+0x157/0x200
[  345.242616][ T8411]  ? rt_spin_unlock+0x163/0x200
[  345.242628][ T8411]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  345.242639][ T8411]  do_writepages+0x338/0x560
[  345.242655][ T8411]  ? rt_spin_unlock+0x157/0x200
[  345.242673][ T8411]  filemap_fdatawrite+0x1ec/0x2f0
[  345.242687][ T8411]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  345.242697][ T8411]  ? do_raw_spin_lock+0x12b/0x2f0
[  345.242729][ T8411]  ? rt_spin_unlock+0x157/0x200
[  345.242745][ T8411]  ? rt_spin_unlock+0x163/0x200
[  345.242760][ T8411]  f2fs_sync_dirty_inodes+0x30e/0x830
[  345.242778][ T8411]  f2fs_write_checkpoint+0xa3d/0x2710
[  345.242789][ T8411]  ? __lock_acquire+0x683/0x2ce0
[  345.242815][ T8411]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  345.242852][ T8411]  kill_f2fs_super+0x2f6/0x700
[  345.242867][ T8411]  ? __pfx_kill_f2fs_super+0x10/0x10
[  345.242884][ T8411]  ? call_rcu+0x64b/0x8b0
[  345.242895][ T8411]  ? lockdep_hardirqs_on+0x7a/0x110
[  345.242913][ T8411]  deactivate_locked_super+0xbc/0x130
[  345.242926][ T8411]  cleanup_mnt+0x3d3/0x460
[  345.242941][ T8411]  task_work_run+0x1d9/0x270
[  345.242953][ T8411]  ? __pfx_task_work_run+0x10/0x10
[  345.242968][ T8411]  exit_to_user_mode_loop+0x1fa/0x730
[  345.242978][ T8411]  ? rcu_is_watching+0x15/0xb0
[  345.242990][ T8411]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  345.243001][ T8411]  do_syscall_64+0x353/0x580
[  345.243012][ T8411]  ? trace_irq_disable+0x3b/0x140
[  345.243022][ T8411]  ? clear_bhb_loop+0x40/0x90
[  345.243034][ T8411]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  345.243044][ T8411] RIP: 0033:0x7f3ccf27f0d7
[  345.243055][ T8411] Code: a2 c7 05 1c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  345.243063][ T8411] RSP: 002b:00007fff145e2e08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  345.243074][ T8411] RAX: 0000000000000000 RBX: 00007f3ccf31330a RCX: 00007f3ccf27f0d7
[  345.243081][ T8411] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff145e2ec0
[  345.243087][ T8411] RBP: 00007fff145e2ec0 R08: 00007fff145e3ec0 R09: 00000000ffffffff
[  345.243093][ T8411] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff145e3f50
[  345.243099][ T8411] R13: 00007f3ccf31330a R14: 00000000000542d3 R15: 00007fff145e3f90
[  345.243115][ T8411]  </TASK>
[  345.243119][ T8411] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  345.609227][ T5741] loop7: lost filesystem error report for type 5 error -108
[  345.872498][ T1021] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  345.955114][ T1021] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  346.012859][ T1021] bond0 (unregistering): Released all slaves
[  346.068845][ T9467] loop3: detected capacity change from 0 to 256
[  346.103980][ T9467] FAT-fs (loop3): data area starts beyond volume (274 > 64)
[  346.104006][ T9467] FAT-fs (loop3): Can't find a valid FAT filesystem
[  346.365849][ T5261] 8021q: adding VLAN 0 to HW filter on device eth14
[  346.374859][ T9475] overlayfs: failed to resolve './file1/file0': -2
[  346.745280][ T9481] 
[  347.150595][ T9489] loop3: detected capacity change from 0 to 2048
[  347.316368][ T9489] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  347.355683][ T9473] loop0: detected capacity change from 0 to 40427
[  347.444302][ T9489] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  347.448024][ T9473] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  347.448047][ T9473] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  347.451712][ T9473] F2FS-fs (loop0): invalid crc value
[  347.775777][ T5598] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  347.882125][ T9473] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  347.968066][ T9483] loop7: detected capacity change from 0 to 40427
[  347.990679][ T9483] F2FS-fs (loop7): invalid crc value
[  348.180128][ T9473] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  348.180159][ T9473] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  348.223560][ T9483] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  348.581478][ T9483] F2FS-fs (loop7): f2fs_disable_checkpoint starts, unusable: 0
[  348.581505][ T9483] F2FS-fs (loop7): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  348.581531][ T9483] F2FS-fs (loop7): Start checkpoint disabled!
[  349.168798][ T9522] overlayfs: failed to resolve './file1/file0': -2
[  349.193090][ T9483] F2FS-fs (loop7): f2fs_disable_checkpoint finishes, err:0
[  349.197004][ T9483] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[  349.330884][ T1190] kworker/u8:10: attempt to access beyond end of device
[  349.330884][ T1190] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  349.361237][ T1190] CPU: 1 UID: 0 PID: 1190 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  349.361265][ T1190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  349.361277][ T1190] Workqueue: writeback wb_workfn (flush-7:7)
[  349.361474][ T1190] Call Trace:
[  349.361481][ T1190]  <TASK>
[  349.361490][ T1190]  dump_stack_lvl+0xe8/0x150
[  349.361605][ T1190]  f2fs_stop_checkpoint+0x3f9/0x5e0
[  349.361714][ T1190]  f2fs_write_end_io+0x124b/0x1710
[  349.361778][ T1190]  __submit_merged_bio+0x258/0x6a0
[  349.361827][ T1190]  ? rcu_is_watching+0x15/0xb0
[  349.361969][ T1190]  __submit_merged_write_cond+0x3c9/0x4e0
[  349.362003][ T1190]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  349.362049][ T1190]  f2fs_write_data_pages+0x2a27/0x36f0
[  349.362068][ T1190]  ? lockdep_hardirqs_on+0x7a/0x110
[  349.362158][ T1190]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  349.362189][ T1190]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  349.362264][ T1190]  ? __lock_acquire+0x683/0x2ce0
[  349.362320][ T1190]  ? __lock_acquire+0x683/0x2ce0
[  349.362350][ T1190]  ? __lock_acquire+0x683/0x2ce0
[  349.362370][ T1190]  ? do_raw_spin_lock+0x12b/0x2f0
[  349.362406][ T1190]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  349.362427][ T1190]  ? lockdep_hardirqs_on+0x7a/0x110
[  349.362445][ T1190]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  349.362464][ T1190]  do_writepages+0x338/0x560
[  349.362534][ T1190]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  349.362569][ T1190]  __writeback_single_inode+0x12e/0xf90
[  349.362621][ T1190]  writeback_sb_inodes+0x9db/0x1ab0
[  349.362653][ T1190]  ? lockdep_hardirqs_on+0x7a/0x110
[  349.362682][ T1190]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  349.362739][ T1190]  ? rcu_is_watching+0x15/0xb0
[  349.362758][ T1190]  ? queue_io+0x2c2/0x450
[  349.362779][ T1190]  wb_writeback+0x41c/0xad0
[  349.362798][ T1190]  ? queue_io+0x2c1/0x450
[  349.362821][ T1190]  ? __pfx_wb_writeback+0x10/0x10
[  349.362865][ T1190]  wb_workfn+0x437/0x10f0
[  349.362906][ T1190]  ? __pfx_wb_workfn+0x10/0x10
[  349.362926][ T1190]  ? rcu_is_watching+0x15/0xb0
[  349.362947][ T1190]  ? trace_hrtimer_start+0x82/0x200
[  349.363034][ T1190]  ? do_raw_spin_lock+0x12b/0x2f0
[  349.363060][ T1190]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  349.363085][ T1190]  ? process_scheduled_works+0xa20/0x14e0
[  349.363169][ T1190]  ? process_scheduled_works+0xa20/0x14e0
[  349.363211][ T1190]  ? rcu_is_watching+0x15/0xb0
[  349.363234][ T1190]  ? process_scheduled_works+0xa20/0x14e0
[  349.363254][ T1190]  process_scheduled_works+0xa8e/0x14e0
[  349.363300][ T1190]  ? __pfx_process_scheduled_works+0x10/0x10
[  349.363327][ T1190]  ? assign_work+0x3cf/0x5d0
[  349.363352][ T1190]  worker_thread+0xa47/0xfb0
[  349.363484][ T1190]  ? __kthread_parkme+0x71/0x1f0
[  349.363574][ T1190]  kthread+0x388/0x470
[  349.363600][ T1190]  ? __pfx_worker_thread+0x10/0x10
[  349.363619][ T1190]  ? __pfx_kthread+0x10/0x10
[  349.363644][ T1190]  ret_from_fork+0x514/0xb70
[  349.363720][ T1190]  ? __pfx_ret_from_fork+0x10/0x10
[  349.363745][ T1190]  ? __switch_to+0xc89/0x1420
[  349.363803][ T1190]  ? __pfx_kthread+0x10/0x10
[  349.363828][ T1190]  ret_from_fork_asm+0x1a/0x30
[  349.363862][ T1190]  </TASK>
[  349.368785][ T1190] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  350.137343][ T9528] 
[  350.392769][ T9526] loop3: detected capacity change from 0 to 40427
[  350.431601][ T9526] F2FS-fs (loop3): invalid crc value
[  350.776193][ T9526] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  350.843011][ T9526] F2FS-fs (loop3): f2fs_disable_checkpoint starts, unusable: 0
[  350.843037][ T9526] F2FS-fs (loop3): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  350.843083][ T9526] F2FS-fs (loop3): Start checkpoint disabled!
[  350.946846][ T9526] F2FS-fs (loop3): f2fs_disable_checkpoint finishes, err:0
[  350.948585][ T9526] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  351.319765][ T9530] loop7: detected capacity change from 0 to 40427
[  351.331275][ T9530] F2FS-fs (loop7): invalid crc value
[  351.448188][   T13] kworker/u8:1: attempt to access beyond end of device
[  351.448188][   T13] loop3: rw=1, sector=45096, nr_sectors = 16 limit=40427
[  351.506729][   T13] kworker/u8:1: attempt to access beyond end of device
[  351.506729][   T13] loop3: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[  351.526802][   T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  351.526828][   T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  351.526839][   T13] Workqueue: writeback wb_workfn (flush-7:3)
[  351.526872][   T13] Call Trace:
[  351.526879][   T13]  <TASK>
[  351.526886][   T13]  dump_stack_lvl+0xe8/0x150
[  351.526915][   T13]  f2fs_stop_checkpoint+0x3f9/0x5e0
[  351.526946][   T13]  f2fs_write_end_io+0x124b/0x1710
[  351.526983][   T13]  __submit_merged_bio+0x258/0x6a0
[  351.527016][   T13]  ? rcu_is_watching+0x15/0xb0
[  351.527041][   T13]  __submit_merged_write_cond+0x3c9/0x4e0
[  351.527074][   T13]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  351.527120][   T13]  f2fs_write_data_pages+0x2a27/0x36f0
[  351.527138][   T13]  ? lockdep_hardirqs_on+0x7a/0x110
[  351.527191][   T13]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  351.527224][   T13]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  351.527275][   T13]  ? __lock_acquire+0x683/0x2ce0
[  351.527297][   T13]  ? __lock_acquire+0x683/0x2ce0
[  351.527334][   T13]  ? do_raw_spin_lock+0x12b/0x2f0
[  351.527371][   T13]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  351.527391][   T13]  ? lockdep_hardirqs_on+0x7a/0x110
[  351.527409][   T13]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  351.527429][   T13]  do_writepages+0x338/0x560
[  351.527455][   T13]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  351.527490][   T13]  __writeback_single_inode+0x12e/0xf90
[  351.527517][   T13]  writeback_sb_inodes+0x9db/0x1ab0
[  351.527547][   T13]  ? lockdep_hardirqs_on+0x7a/0x110
[  351.527577][   T13]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  351.527636][   T13]  ? rcu_is_watching+0x15/0xb0
[  351.527657][   T13]  ? queue_io+0x2c2/0x450
[  351.527677][   T13]  wb_writeback+0x41c/0xad0
[  351.527697][   T13]  ? queue_io+0x2c1/0x450
[  351.527720][   T13]  ? __pfx_wb_writeback+0x10/0x10
[  351.527754][   T13]  wb_workfn+0x437/0x10f0
[  351.527795][   T13]  ? __pfx_wb_workfn+0x10/0x10
[  351.527816][   T13]  ? rcu_is_watching+0x15/0xb0
[  351.527836][   T13]  ? trace_hrtimer_start+0x82/0x200
[  351.527870][   T13]  ? do_raw_spin_lock+0x12b/0x2f0
[  351.527897][   T13]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  351.527923][   T13]  ? process_scheduled_works+0xa20/0x14e0
[  351.527945][   T13]  ? process_scheduled_works+0xa20/0x14e0
[  351.527971][   T13]  ? rcu_is_watching+0x15/0xb0
[  351.527994][   T13]  ? process_scheduled_works+0xa20/0x14e0
[  351.528020][   T13]  process_scheduled_works+0xa8e/0x14e0
[  351.528069][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  351.528097][   T13]  ? assign_work+0x3cf/0x5d0
[  351.528122][   T13]  worker_thread+0xa47/0xfb0
[  351.528175][   T13]  kthread+0x388/0x470
[  351.528199][   T13]  ? __pfx_worker_thread+0x10/0x10
[  351.528218][   T13]  ? __pfx_kthread+0x10/0x10
[  351.528244][   T13]  ret_from_fork+0x514/0xb70
[  351.528273][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  351.528297][   T13]  ? __switch_to+0xc89/0x1420
[  351.528322][   T13]  ? __pfx_kthread+0x10/0x10
[  351.528347][   T13]  ret_from_fork_asm+0x1a/0x30
[  351.528381][   T13]  </TASK>
[  351.528416][   T13] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  351.933367][ T1021] hsr_slave_0: left promiscuous mode
[  352.033734][ T1021] hsr_slave_1: left promiscuous mode
[  352.034775][ T1021] batman_adv: batadv0: Removing interface: batadv_slave_0
[  352.078098][ T9530] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  352.084062][ T1021] batman_adv: batadv0: Removing interface: batadv_slave_1
[  352.117808][ T9530] F2FS-fs (loop7): f2fs_disable_checkpoint starts, unusable: 0
[  352.117833][ T9530] F2FS-fs (loop7): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  352.117858][ T9530] F2FS-fs (loop7): Start checkpoint disabled!
[  352.436590][ T9530] F2FS-fs (loop7): f2fs_disable_checkpoint finishes, err:0
[  352.437296][ T9530] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[  352.484813][ T1021] hsr_slave_0: left promiscuous mode
[  352.521280][ T1021] hsr_slave_1: left promiscuous mode
[  352.522246][ T1021] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  352.522269][ T1021] batman_adv: batadv0: Removing interface: batadv_slave_0
[  352.580208][ T1021] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  352.580233][ T1021] batman_adv: batadv0: Removing interface: batadv_slave_1
[  352.695184][   T86] kworker/u8:4: attempt to access beyond end of device
[  352.695184][   T86] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  352.695244][   T86] CPU: 1 UID: 0 PID: 86 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  352.695264][   T86] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  352.695275][   T86] Workqueue: writeback wb_workfn (flush-7:7)
[  352.695308][   T86] Call Trace:
[  352.695315][   T86]  <TASK>
[  352.695323][   T86]  dump_stack_lvl+0xe8/0x150
[  352.695352][   T86]  f2fs_stop_checkpoint+0x3f9/0x5e0
[  352.695384][   T86]  f2fs_write_end_io+0x124b/0x1710
[  352.695423][   T86]  __submit_merged_bio+0x258/0x6a0
[  352.695448][   T86]  ? rcu_is_watching+0x15/0xb0
[  352.695474][   T86]  __submit_merged_write_cond+0x3c9/0x4e0
[  352.695507][   T86]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  352.695552][   T86]  f2fs_write_data_pages+0x2a27/0x36f0
[  352.695570][   T86]  ? lockdep_hardirqs_on+0x7a/0x110
[  352.695628][   T86]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  352.695661][   T86]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  352.695715][   T86]  ? __lock_acquire+0x683/0x2ce0
[  352.695737][   T86]  ? __lock_acquire+0x683/0x2ce0
[  352.695769][   T86]  ? __lock_acquire+0x683/0x2ce0
[  352.695790][   T86]  ? do_raw_spin_lock+0x12b/0x2f0
[  352.695827][   T86]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  352.695848][   T86]  ? lockdep_hardirqs_on+0x7a/0x110
[  352.695866][   T86]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  352.695887][   T86]  do_writepages+0x338/0x560
[  352.695912][   T86]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  352.695948][   T86]  __writeback_single_inode+0x12e/0xf90
[  352.695975][   T86]  writeback_sb_inodes+0x9db/0x1ab0
[  352.696005][   T86]  ? lockdep_hardirqs_on+0x7a/0x110
[  352.696042][   T86]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  352.696101][   T86]  ? rcu_is_watching+0x15/0xb0
[  352.696122][   T86]  ? queue_io+0x2c2/0x450
[  352.696143][   T86]  wb_writeback+0x41c/0xad0
[  352.696163][   T86]  ? queue_io+0x2c1/0x450
[  352.696186][   T86]  ? __pfx_wb_writeback+0x10/0x10
[  352.696220][   T86]  wb_workfn+0x437/0x10f0
[  352.696261][   T86]  ? __pfx_wb_workfn+0x10/0x10
[  352.696282][   T86]  ? rcu_is_watching+0x15/0xb0
[  352.696303][   T86]  ? trace_hrtimer_start+0x82/0x200
[  352.696336][   T86]  ? do_raw_spin_lock+0x12b/0x2f0
[  352.696362][   T86]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  352.696388][   T86]  ? process_scheduled_works+0xa20/0x14e0
[  352.696411][   T86]  ? process_scheduled_works+0xa20/0x14e0
[  352.696437][   T86]  ? rcu_is_watching+0x15/0xb0
[  352.696461][   T86]  ? process_scheduled_works+0xa20/0x14e0
[  352.696480][   T86]  process_scheduled_works+0xa8e/0x14e0
[  352.696528][   T86]  ? __pfx_process_scheduled_works+0x10/0x10
[  352.696556][   T86]  ? assign_work+0x3cf/0x5d0
[  352.696581][   T86]  worker_thread+0xa47/0xfb0
[  352.696616][   T86]  ? __kthread_parkme+0x71/0x1f0
[  352.696648][   T86]  kthread+0x388/0x470
[  352.696672][   T86]  ? __pfx_worker_thread+0x10/0x10
[  352.696691][   T86]  ? __pfx_kthread+0x10/0x10
[  352.696716][   T86]  ret_from_fork+0x514/0xb70
[  352.696744][   T86]  ? __pfx_ret_from_fork+0x10/0x10
[  352.696768][   T86]  ? __switch_to+0xc89/0x1420
[  352.696793][   T86]  ? __pfx_kthread+0x10/0x10
[  352.696819][   T86]  ret_from_fork_asm+0x1a/0x30
[  352.696852][   T86]  </TASK>
[  352.697164][   T86] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  352.979692][ T9558] loop3: detected capacity change from 0 to 512
[  352.991749][ T9558] EXT4-fs: Ignoring removed i_version option
[  353.011400][ T9558] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  353.140028][ T9558] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  353.140171][ T9558] ext4 filesystem being mounted at /198/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  353.234893][ T9545] loop0: detected capacity change from 0 to 40427
[  353.280313][ T9545] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504)
[  353.280337][ T9545] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  353.285583][ T9545] F2FS-fs (loop0): build fault injection type: 0x6
[  353.451996][ T9545] F2FS-fs (loop0): invalid crc value
[  353.496577][ T1021] veth1_macvtap: left promiscuous mode
[  353.496673][ T1021] veth0_macvtap: left promiscuous mode
[  353.518073][ T1021] veth1_vlan: left promiscuous mode
[  353.518582][ T1021] veth0_vlan: left promiscuous mode
[  353.571683][ T1021] veth1_macvtap: left promiscuous mode
[  353.571778][ T1021] veth0_macvtap: left promiscuous mode
[  353.665431][ T1021] veth1_vlan: left promiscuous mode
[  353.729355][ T1021] veth0_vlan: left promiscuous mode
[  353.804749][ T9545] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  353.967295][ T9545] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  353.967322][ T9545] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  353.988209][ T9567] overlayfs: failed index dir cleanup (-512)
[  353.988224][ T9567] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index.
[  354.166755][ T5598] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  354.380921][ T5602] syz-executor: attempt to access beyond end of device
[  354.380921][ T5602] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  354.416099][ T5602] CPU: 0 UID: 0 PID: 5602 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  354.416124][ T5602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  354.416134][ T5602] Call Trace:
[  354.416141][ T5602]  <TASK>
[  354.416148][ T5602]  dump_stack_lvl+0xe8/0x150
[  354.416180][ T5602]  f2fs_stop_checkpoint+0x3f9/0x5e0
[  354.416213][ T5602]  f2fs_write_end_io+0x124b/0x1710
[  354.416253][ T5602]  __submit_merged_bio+0x258/0x6a0
[  354.416278][ T5602]  ? rcu_is_watching+0x15/0xb0
[  354.416304][ T5602]  __submit_merged_write_cond+0x3c9/0x4e0
[  354.416339][ T5602]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  354.416387][ T5602]  f2fs_write_data_pages+0x2a27/0x36f0
[  354.416443][ T5602]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  354.416474][ T5602]  ? __lock_acquire+0x683/0x2ce0
[  354.416521][ T5602]  ? __lock_acquire+0x683/0x2ce0
[  354.416552][ T5602]  ? do_raw_spin_lock+0x12b/0x2f0
[  354.416591][ T5602]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  354.416612][ T5602]  ? rt_mutex_slowunlock+0x4ee/0xa20
[  354.416642][ T5602]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  354.416662][ T5602]  do_writepages+0x338/0x560
[  354.416688][ T5602]  ? rt_spin_unlock+0x157/0x200
[  354.416722][ T5602]  filemap_fdatawrite+0x1ec/0x2f0
[  354.416826][ T5602]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  354.416898][ T5602]  f2fs_sync_dirty_inodes+0x30e/0x830
[  354.416934][ T5602]  f2fs_write_checkpoint+0xa3d/0x2710
[  354.416954][ T5602]  ? __lock_acquire+0x683/0x2ce0
[  354.417003][ T5602]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  354.417073][ T5602]  kill_f2fs_super+0x2f6/0x700
[  354.417100][ T5602]  ? __pfx_kill_f2fs_super+0x10/0x10
[  354.417131][ T5602]  ? call_rcu+0x64b/0x8b0
[  354.417152][ T5602]  ? lockdep_hardirqs_on+0x7a/0x110
[  354.417186][ T5602]  deactivate_locked_super+0xbc/0x130
[  354.417252][ T5602]  cleanup_mnt+0x3d3/0x460
[  354.417309][ T5602]  task_work_run+0x1d9/0x270
[  354.417331][ T5602]  ? __pfx_task_work_run+0x10/0x10
[  354.417360][ T5602]  exit_to_user_mode_loop+0x1fa/0x730
[  354.417409][ T5602]  ? rcu_is_watching+0x15/0xb0
[  354.417431][ T5602]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.417464][ T5602]  do_syscall_64+0x353/0x580
[  354.417483][ T5602]  ? trace_irq_disable+0x3b/0x140
[  354.417542][ T5602]  ? clear_bhb_loop+0x40/0x90
[  354.417564][ T5602]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.417582][ T5602] RIP: 0033:0x7ff71977f0d7
[  354.417599][ T5602] Code: a2 c7 05 1c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  354.417613][ T5602] RSP: 002b:00007ffccc2a4718 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  354.417631][ T5602] RAX: 0000000000000000 RBX: 00007ff71981330a RCX: 00007ff71977f0d7
[  354.417642][ T5602] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffccc2a47d0
[  354.417652][ T5602] RBP: 00007ffccc2a47d0 R08: 00007ffccc2a57d0 R09: 00000000ffffffff
[  354.417663][ T5602] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffccc2a5860
[  354.417674][ T5602] R13: 00007ff71981330a R14: 000000000005669d R15: 00007ffccc2a58a0
[  354.417705][ T5602]  </TASK>
[  354.444719][ T5602] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  354.463278][ T5602] CPU: 1 UID: 0 PID: 5602 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  354.463314][ T5602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  354.463325][ T5602] Call Trace:
[  354.463332][ T5602]  <TASK>
[  354.463339][ T5602]  dump_stack_lvl+0xe8/0x150
[  354.463371][ T5602]  f2fs_stop_checkpoint+0x3f9/0x5e0
[  354.463408][ T5602]  f2fs_write_end_io+0x124b/0x1710
[  354.463447][ T5602]  __submit_merged_bio+0x258/0x6a0
[  354.463470][ T5602]  ? rcu_is_watching+0x15/0xb0
[  354.463497][ T5602]  __submit_merged_write_cond+0x3c9/0x4e0
[  354.463531][ T5602]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  354.463576][ T5602]  f2fs_write_data_pages+0x2a27/0x36f0
[  354.463630][ T5602]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  354.463660][ T5602]  ? __lock_acquire+0x683/0x2ce0
[  354.463710][ T5602]  ? __lock_acquire+0x683/0x2ce0
[  354.463741][ T5602]  ? do_raw_spin_lock+0x12b/0x2f0
[  354.463780][ T5602]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  354.463799][ T5602]  ? rt_mutex_slowunlock+0x4ee/0xa20
[  354.463828][ T5602]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  354.463848][ T5602]  do_writepages+0x338/0x560
[  354.463872][ T5602]  ? rt_spin_unlock+0x157/0x200
[  354.463904][ T5602]  filemap_fdatawrite+0x1ec/0x2f0
[  354.463928][ T5602]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  354.463997][ T5602]  f2fs_sync_dirty_inodes+0x30e/0x830
[  354.464031][ T5602]  f2fs_write_checkpoint+0xa3d/0x2710
[  354.464050][ T5602]  ? __lock_acquire+0x683/0x2ce0
[  354.464096][ T5602]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  354.464166][ T5602]  kill_f2fs_super+0x2f6/0x700
[  354.464191][ T5602]  ? __pfx_kill_f2fs_super+0x10/0x10
[  354.464222][ T5602]  ? call_rcu+0x64b/0x8b0
[  354.464242][ T5602]  ? lockdep_hardirqs_on+0x7a/0x110
[  354.464274][ T5602]  deactivate_locked_super+0xbc/0x130
[  354.464304][ T5602]  cleanup_mnt+0x3d3/0x460
[  354.464329][ T5602]  task_work_run+0x1d9/0x270
[  354.464350][ T5602]  ? __pfx_task_work_run+0x10/0x10
[  354.464377][ T5602]  exit_to_user_mode_loop+0x1fa/0x730
[  354.464394][ T5602]  ? rcu_is_watching+0x15/0xb0
[  354.464415][ T5602]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.464435][ T5602]  do_syscall_64+0x353/0x580
[  354.464454][ T5602]  ? trace_irq_disable+0x3b/0x140
[  354.464471][ T5602]  ? clear_bhb_loop+0x40/0x90
[  354.464491][ T5602]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.464507][ T5602] RIP: 0033:0x7ff71977f0d7
[  354.464525][ T5602] Code: a2 c7 05 1c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  354.464539][ T5602] RSP: 002b:00007ffccc2a4718 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  354.464557][ T5602] RAX: 0000000000000000 RBX: 00007ff71981330a RCX: 00007ff71977f0d7
[  354.464569][ T5602] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffccc2a47d0
[  354.464579][ T5602] RBP: 00007ffccc2a47d0 R08: 00007ffccc2a57d0 R09: 00000000ffffffff
[  354.464590][ T5602] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffccc2a5860
[  354.464601][ T5602] R13: 00007ff71981330a R14: 000000000005669d R15: 00007ffccc2a58a0
[  354.464627][ T5602]  </TASK>
[  354.464786][ T5602] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  354.574409][ T5587] loop0: lost filesystem error report for type 5 error -108
[  354.746513][ T9588] random: crng reseeded on system resumption
[  355.069653][ T5587] loop0: lost filesystem error report for type 5 error -108
[  355.205770][ T9590] 
[  355.382563][ T9594] fuse: Bad value for 'fd'
[  355.510975][ T9596] overlayfs: failed to resolve './file1/file0': -2
[  355.691288][ T9601] loop0: detected capacity change from 0 to 1024
[  355.759445][ T9601] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  355.853291][ T9606] loop3: detected capacity change from 0 to 1024
[  355.854531][ T9606] EXT4-fs: inline encryption not supported
[  355.896151][ T9606] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  356.528984][ T5598] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  356.647834][ T5602] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  356.778888][ T9611] loop3: detected capacity change from 0 to 256
[  356.781944][ T9611] exfat: Deprecated parameter 'namecase'
[  356.782002][ T9611] exfat: Deprecated parameter 'namecase'
[  356.878089][ T9611] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  357.286841][ T9618] loop3: detected capacity change from 0 to 2048
[  357.293131][ T9618] EXT4-fs: Ignoring removed nomblk_io_submit option
[  357.346751][ T1021] team0 (unregistering): Port device team_slave_1 removed
[  357.418918][ T9618] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  357.469947][   T36] audit: type=1800 audit(1784955664.729:117): pid=9618 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.728" name="file1" dev="loop3" ino=19 res=0 errno=0
[  357.470683][ T1021] team0 (unregistering): Port device team_slave_0 removed
[  357.516606][ T9623] 
[  357.635869][ T5598] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  357.812576][ T9627] fuse: Bad value for 'fd'
[  358.161871][ T9593] loop7: detected capacity change from 0 to 131072
[  358.230242][ T9593] F2FS-fs (loop7): Invalid log sectorsize (67108873)
[  358.230263][ T9593] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  358.231263][ T9593] F2FS-fs (loop7): invalid crc value
[  358.548946][ T9593] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  358.642558][ T9638] loop3: detected capacity change from 0 to 512
[  358.644072][ T9638] EXT4-fs: Ignoring removed oldalloc option
[  358.648373][ T9625] loop0: detected capacity change from 0 to 40427
[  358.677188][ T9625] F2FS-fs (loop0): invalid crc value
[  358.677784][ T9638] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  358.883400][ T9638] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  358.883532][ T9638] ext4 filesystem being mounted at /210/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  358.974909][ T9625] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  359.231579][ T9625] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  359.313783][ T5598] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  359.569956][ T1021] team0 (unregistering): Port device team_slave_1 removed
[  359.599841][ T5602] syz-executor: attempt to access beyond end of device
[  359.599841][ T5602] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  359.600301][ T5602] CPU: 0 UID: 0 PID: 5602 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  359.600322][ T5602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  359.600333][ T5602] Call Trace:
[  359.600340][ T5602]  <TASK>
[  359.600347][ T5602]  dump_stack_lvl+0xe8/0x150
[  359.600381][ T5602]  f2fs_stop_checkpoint+0x3f9/0x5e0
[  359.600414][ T5602]  f2fs_write_end_io+0x124b/0x1710
[  359.600455][ T5602]  __submit_merged_bio+0x258/0x6a0
[  359.600480][ T5602]  ? rcu_is_watching+0x15/0xb0
[  359.600506][ T5602]  __submit_merged_write_cond+0x3c9/0x4e0
[  359.600547][ T5602]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  359.600595][ T5602]  f2fs_write_data_pages+0x2a27/0x36f0
[  359.600646][ T5602]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  359.600712][ T5602]  ? do_raw_spin_lock+0x12b/0x2f0
[  359.600754][ T5602]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  359.600775][ T5602]  ? rt_mutex_slowunlock+0x4ee/0xa20
[  359.600804][ T5602]  ? reacquire_held_locks+0x104/0x190
[  359.600842][ T5602]  ? rt_spin_unlock+0x157/0x200
[  359.600871][ T5602]  ? rt_spin_unlock+0x163/0x200
[  359.600893][ T5602]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  359.600913][ T5602]  do_writepages+0x338/0x560
[  359.600939][ T5602]  ? rt_spin_unlock+0x157/0x200
[  359.600971][ T5602]  filemap_fdatawrite+0x1ec/0x2f0
[  359.600993][ T5602]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  359.601011][ T5602]  ? do_raw_spin_lock+0x12b/0x2f0
[  359.601070][ T5602]  ? rt_spin_unlock+0x157/0x200
[  359.601095][ T5602]  ? rt_spin_unlock+0x163/0x200
[  359.601120][ T5602]  f2fs_sync_dirty_inodes+0x30e/0x830
[  359.601152][ T5602]  f2fs_write_checkpoint+0xa3d/0x2710
[  359.601170][ T5602]  ? __lock_acquire+0x683/0x2ce0
[  359.601216][ T5602]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  359.601284][ T5602]  kill_f2fs_super+0x2f6/0x700
[  359.601309][ T5602]  ? __pfx_kill_f2fs_super+0x10/0x10
[  359.601339][ T5602]  ? call_rcu+0x64b/0x8b0
[  359.601358][ T5602]  ? lockdep_hardirqs_on+0x7a/0x110
[  359.601391][ T5602]  deactivate_locked_super+0xbc/0x130
[  359.601413][ T5602]  cleanup_mnt+0x3d3/0x460
[  359.601439][ T5602]  task_work_run+0x1d9/0x270
[  359.601459][ T5602]  ? __pfx_task_work_run+0x10/0x10
[  359.601485][ T5602]  exit_to_user_mode_loop+0x1fa/0x730
[  359.601502][ T5602]  ? rcu_is_watching+0x15/0xb0
[  359.601523][ T5602]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  359.601542][ T5602]  do_syscall_64+0x353/0x580
[  359.601562][ T5602]  ? trace_irq_disable+0x3b/0x140
[  359.601579][ T5602]  ? clear_bhb_loop+0x40/0x90
[  359.601602][ T5602]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  359.601620][ T5602] RIP: 0033:0x7ff71977f0d7
[  359.601638][ T5602] Code: a2 c7 05 1c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  359.601653][ T5602] RSP: 002b:00007ffccc2a4718 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  359.601672][ T5602] RAX: 0000000000000000 RBX: 00007ff71981330a RCX: 00007ff71977f0d7
[  359.601684][ T5602] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffccc2a47d0
[  359.601695][ T5602] RBP: 00007ffccc2a47d0 R08: 00007ffccc2a57d0 R09: 00000000ffffffff
[  359.601707][ T5602] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffccc2a5860
[  359.601718][ T5602] R13: 00007ff71981330a R14: 0000000000057b28 R15: 00007ffccc2a58a0
[  359.601749][ T5602]  </TASK>
[  359.601807][ T5602] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  359.956647][ T1021] team0 (unregistering): Port device team_slave_0 removed
[  360.518967][ T9650] loop3: detected capacity change from 0 to 40427
[  360.579347][ T9650] F2FS-fs (loop3): Invalid SB checksum offset: 0
[  360.579369][ T9650] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  360.581473][ T9650] F2FS-fs (loop3): invalid crc value
[  360.904007][ T9650] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  361.089460][ T9663] 
[  361.229373][ T9650] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  361.229402][ T9650] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  361.267117][ T9668] overlayfs: missing 'lowerdir'
[  362.055581][ T8974] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  362.068596][ T5598] syz-executor: attempt to access beyond end of device
[  362.068596][ T5598] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  362.118908][ T8974] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  362.146091][ T5598] CPU: 0 UID: 0 PID: 5598 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  362.146113][ T5598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  362.146126][ T5598] Call Trace:
[  362.146132][ T5598]  <TASK>
[  362.146138][ T5598]  dump_stack_lvl+0xe8/0x150
[  362.146166][ T5598]  f2fs_stop_checkpoint+0x3f9/0x5e0
[  362.146191][ T5598]  f2fs_write_end_io+0x124b/0x1710
[  362.146221][ T5598]  __submit_merged_bio+0x258/0x6a0
[  362.146240][ T5598]  ? rcu_is_watching+0x15/0xb0
[  362.146261][ T5598]  __submit_merged_write_cond+0x3c9/0x4e0
[  362.146287][ T5598]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  362.146323][ T5598]  f2fs_write_data_pages+0x2a27/0x36f0
[  362.146337][ T5598]  ? __bfs+0x153/0x290
[  362.146351][ T5598]  ? __pfx_hlock_conflict+0x10/0x10
[  362.146392][ T5598]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  362.146446][ T5598]  ? __lock_acquire+0x683/0x2ce0
[  362.146472][ T5598]  ? do_raw_spin_lock+0x12b/0x2f0
[  362.146502][ T5598]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  362.146517][ T5598]  ? rt_mutex_slowunlock+0x4ee/0xa20
[  362.146541][ T5598]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  362.146555][ T5598]  do_writepages+0x338/0x560
[  362.146581][ T5598]  ? rt_spin_unlock+0x157/0x200
[  362.146605][ T5598]  filemap_fdatawrite+0x1ec/0x2f0
[  362.146631][ T5598]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  362.146645][ T5598]  ? do_raw_spin_lock+0x12b/0x2f0
[  362.146690][ T5598]  ? rt_spin_unlock+0x157/0x200
[  362.146710][ T5598]  ? rt_spin_unlock+0x163/0x200
[  362.146729][ T5598]  f2fs_sync_dirty_inodes+0x30e/0x830
[  362.146756][ T5598]  f2fs_write_checkpoint+0xa3d/0x2710
[  362.146770][ T5598]  ? __lock_acquire+0x683/0x2ce0
[  362.146805][ T5598]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  362.146858][ T5598]  kill_f2fs_super+0x2f6/0x700
[  362.146879][ T5598]  ? __pfx_kill_f2fs_super+0x10/0x10
[  362.146902][ T5598]  ? call_rcu+0x64b/0x8b0
[  362.146920][ T5598]  ? lockdep_hardirqs_on+0x7a/0x110
[  362.146945][ T5598]  deactivate_locked_super+0xbc/0x130
[  362.146963][ T5598]  cleanup_mnt+0x3d3/0x460
[  362.146984][ T5598]  task_work_run+0x1d9/0x270
[  362.147000][ T5598]  ? __pfx_task_work_run+0x10/0x10
[  362.147020][ T5598]  exit_to_user_mode_loop+0x1fa/0x730
[  362.147033][ T5598]  ? rcu_is_watching+0x15/0xb0
[  362.147049][ T5598]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  362.147063][ T5598]  do_syscall_64+0x353/0x580
[  362.147080][ T5598]  ? trace_irq_disable+0x3b/0x140
[  362.147097][ T5598]  ? clear_bhb_loop+0x40/0x90
[  362.147116][ T5598]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  362.147137][ T5598] RIP: 0033:0x7fda77e2f0d7
[  362.147154][ T5598] Code: a2 c7 05 1c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  362.147167][ T5598] RSP: 002b:00007ffe81a57e48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  362.147184][ T5598] RAX: 0000000000000000 RBX: 00007fda77ec330a RCX: 00007fda77e2f0d7
[  362.147195][ T5598] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe81a57f00
[  362.147204][ T5598] RBP: 00007ffe81a57f00 R08: 00007ffe81a58f00 R09: 00000000ffffffff
[  362.147215][ T5598] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe81a58f90
[  362.147226][ T5598] R13: 00007fda77ec330a R14: 0000000000058371 R15: 00007ffe81a58fd0
[  362.147252][ T5598]  </TASK>
[  362.147262][ T5598] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  362.304828][ T8974] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  362.442354][ T8974] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  362.457499][ T8974] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  362.553126][ T8974] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  362.590591][ T8974] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  362.707233][ T9694] loop7: detected capacity change from 0 to 128
[  362.768947][ T8974] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  362.816446][ T9694] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  362.838408][ T9694] ext4 filesystem being mounted at /43/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  363.755241][ T9713] 
[  363.818206][ T9715] loop3: detected capacity change from 0 to 16
[  363.828972][ T8411] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  363.961792][ T9715] erofs (device loop3): mounted with root inode @ nid 36.
[  364.225172][ T9719] overlayfs: missing 'lowerdir'
[  364.951872][ T8974] 8021q: adding VLAN 0 to HW filter on device bond0
[  365.163084][ T8974] 8021q: adding VLAN 0 to HW filter on device team0
[  365.178644][  T994] bridge0: port 1(bridge_slave_0) entered blocking state
[  365.178764][  T994] bridge0: port 1(bridge_slave_0) entered forwarding state
[  365.306450][ T9018] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  365.398221][ T9018] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  365.481999][ T3847] bridge0: port 2(bridge_slave_1) entered blocking state
[  365.482101][ T3847] bridge0: port 2(bridge_slave_1) entered forwarding state
[  365.487921][ T9018] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  365.572761][ T9018] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  365.603559][ T9018] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  365.827705][ T9018] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  365.899861][ T9018] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  365.987394][ T9018] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  366.270689][ T9756] loop3: detected capacity change from 0 to 1024
[  366.409655][ T9756] hfsplus: failed to load extents file
[  366.911064][ T9771] loop0: detected capacity change from 0 to 1764
[  367.336750][ T9778] loop0: detected capacity change from 0 to 8
[  367.553537][ T9018] 8021q: adding VLAN 0 to HW filter on device bond0
[  367.593372][ T5739] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0
[  367.593426][ T5739] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0
[  367.593450][ T5739] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0
[  367.593474][ T5739] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0
[  367.593496][ T5739] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0
[  367.593518][ T5739] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0
[  367.593540][ T5739] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0
[  367.593562][ T5739] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0
[  367.593584][ T5739] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0
[  367.593605][ T5739] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0
[  367.882440][ T5739] hid-generic 0006:0004:0009.0001: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0
[  368.020556][ T9018] 8021q: adding VLAN 0 to HW filter on device team0
[  368.158167][  T994] bridge0: port 1(bridge_slave_0) entered blocking state
[  368.158291][  T994] bridge0: port 1(bridge_slave_0) entered forwarding state
[  368.279515][ T9788] loop0: detected capacity change from 0 to 4096
[  368.305620][ T9788] EXT4-fs: Ignoring removed orlov option
[  368.346750][ T9788] EXT4-fs (loop0): Test dummy encryption mode enabled
[  368.347618][  T994] bridge0: port 2(bridge_slave_1) entered blocking state
[  368.347742][  T994] bridge0: port 2(bridge_slave_1) entered forwarding state
[  368.539639][ T9796] loop7: detected capacity change from 0 to 512
[  368.540732][ T9796] EXT4-fs: Ignoring removed i_version option
[  368.543941][ T9796] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[  368.547851][ T9788] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  368.695666][ T9796] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters
[  368.799153][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  368.799171][    C1] EXT4-fs (loop7): initial error at time 1784955676: ext4_mb_generate_buddy:1317
[  368.799188][    C1] EXT4-fs (loop7): last error at time 1784955676: ext4_mb_generate_buddy:1317
[  368.871342][ T9796] Quota error (device loop7): write_blk: dquota write failed
[  368.871362][ T9796] Quota error (device loop7): find_free_dqentry: Can't write quota data block 5
[  368.871466][ T9796] Quota error (device loop7): write_blk: dquota write failed
[  368.871571][ T9796] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota
[  368.871619][ T9796] EXT4-fs error (device loop7): ext4_acquire_dquot:7041: comm syz.7.765: Failed to acquire dquot type 1
[  368.871638][ T9796] loop7: lost filesystem error report for type 5 error -28
[  368.971847][ T9796] EXT4-fs (loop7): 1 truncate cleaned up
[  368.985593][ T5602] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  368.996599][ T9796] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  369.091386][ T9796] Quota error (device loop7): write_blk: dquota write failed
[  369.091454][ T9796] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota
[  369.091482][ T9796] EXT4-fs error (device loop7): ext4_acquire_dquot:7041: comm syz.7.765: Failed to acquire dquot type 1
[  369.446769][ T8411] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  369.652211][ T9812] loop3: detected capacity change from 0 to 512
[  369.844046][ T9812] EXT4-fs (loop3): 1 truncate cleaned up
[  369.846245][ T9812] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  370.026279][ T5605] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  370.115314][ T5605] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  370.163587][ T5605] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  370.179363][ T5605] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  370.187384][ T5605] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  370.939899][ T9833] loop0: detected capacity change from 0 to 4096
[  370.947980][ T9837] loop7: detected capacity change from 0 to 256
[  370.978420][ T5598] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  370.993809][ T9837] exfat: Deprecated parameter 'namecase'
[  370.993860][ T9837] exfat: Deprecated parameter 'utf8'
[  371.235019][ T9837] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d)
[  371.404917][   T36] audit: type=1800 audit(1784955678.659:118): pid=9837 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.7.773" name="file1" dev="loop7" ino=1048662 res=0 errno=0
[  371.509052][ T9833] ntfs3(loop0): Failed to load $Extend (-22).
[  371.509789][ T9833] ntfs3(loop0): Failed to initialize $Extend.
[  371.934581][   T36] audit: type=1800 audit(1784955679.189:119): pid=9833 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.772" name="file1" dev="loop0" ino=30 res=0 errno=0
[  372.366668][ T9018] 8021q: adding VLAN 0 to HW filter on device batadv0
[  372.431367][ T9868] loop0: detected capacity change from 0 to 512
[  372.479221][ T5605] Bluetooth: hci1: command tx timeout
[  372.500667][ T9868] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  372.501717][ T9868] ext4 filesystem being mounted at /252/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  372.867990][   T36] audit: type=1800 audit(1784955680.109:120): pid=9876 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.778" name="file1" dev="loop0" ino=15 res=0 errno=0
[  373.016933][ T9882] loop7: detected capacity change from 0 to 1024
[  373.232048][ T9882] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  373.266775][   T36] audit: type=1800 audit(1784955680.509:121): pid=9882 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.7.779" name="file2" dev="loop7" ino=16 res=0 errno=0
[  373.768174][ T5602] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  373.962697][ T9865] loop3: detected capacity change from 0 to 32768
[  374.038823][ T4915] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  374.115237][ T4915] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  374.148291][ T4915] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  374.174247][ T4915] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  374.186685][ T4915] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  374.336284][ T9865] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  374.341367][ T9865] JBD2: Ignoring recovery information on journal
[  374.553288][ T5605] Bluetooth: hci1: command tx timeout
[  374.812820][ T9865] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  374.896799][ T9899] loop0: detected capacity change from 0 to 2048
[  375.005462][ T9899] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  375.005593][ T9899] ext4 filesystem being mounted at /254/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  375.210817][   T36] kauditd_printk_skb: 1 callbacks suppressed
[  375.210831][   T36] audit: type=1800 audit(1784955682.459:123): pid=9882 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.7.779" name="file1" dev="loop7" ino=15 res=0 errno=0
[  375.508652][ T5602] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  375.662484][ T8411] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  375.816054][ T9907] overlayfs: failed to resolve './file1/file0': -2
[  376.064454][ T9911] loop0: detected capacity change from 0 to 512
[  376.070570][ T9911] EXT4-fs: Ignoring removed oldalloc option
[  376.071907][ T9911] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  376.087837][ T9911] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  376.087951][ T9911] ext4 filesystem being mounted at /256/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  376.169671][ T9911] EXT4-fs (loop0): shut down requested (2)
[  376.264573][ T5602] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  376.390323][ T5605] Bluetooth: hci5: command tx timeout
[  376.613619][ T9922] ==================================================================
[  376.613666][ T9922] BUG: KASAN: global-out-of-bounds in usb_copy_descriptors+0x1b8/0x320
[  376.613774][ T9922] Read of size 32 at addr ffffffff99e837a0 by task syz.7.787/9922
[  376.613789][ T9922] 
[  376.613800][ T9922] CPU: 1 UID: 0 PID: 9922 Comm: syz.7.787 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  376.613821][ T9922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  376.613833][ T9922] Call Trace:
[  376.613839][ T9922]  <TASK>
[  376.613847][ T9922]  dump_stack_lvl+0xe8/0x150
[  376.613875][ T9922]  print_address_description+0x55/0x1e0
[  376.613912][ T9922]  ? usb_copy_descriptors+0x1b8/0x320
[  376.613929][ T9922]  print_report+0x58/0x70
[  376.613952][ T9922]  kasan_report+0x117/0x150
[  376.614042][ T9922]  ? usb_copy_descriptors+0x1b8/0x320
[  376.614063][ T9922]  kasan_check_range+0x264/0x2c0
[  376.614083][ T9922]  ? usb_copy_descriptors+0x1b8/0x320
[  376.614102][ T9922]  __asan_memcpy+0x29/0x70
[  376.614133][ T9922]  usb_copy_descriptors+0x1b8/0x320
[  376.614154][ T9922]  usb_assign_descriptors+0xcf/0x290
[  376.614174][ T9922]  f_audio_bind+0x1b5e/0x34b0
[  376.614238][ T9922]  usb_add_function+0x290/0x930
[  376.614288][ T9922]  configfs_composite_bind+0xde0/0x1410
[  376.614338][ T9922]  ? __pfx_configfs_composite_bind+0x10/0x10
[  376.614358][ T9922]  gadget_bind_driver+0x2ca/0x9e0
[  376.614387][ T9922]  ? __pfx_gadget_bind_driver+0x10/0x10
[  376.614410][ T9922]  really_probe+0x254/0xae0
[  376.614490][ T9922]  __driver_probe_device+0x1e8/0x360
[  376.614521][ T9922]  driver_probe_device+0x4f/0x240
[  376.614546][ T9922]  __driver_attach+0x339/0x600
[  376.614570][ T9922]  bus_for_each_dev+0x23e/0x2c0
[  376.614588][ T9922]  ? __pfx___driver_attach+0x10/0x10
[  376.614611][ T9922]  ? __pfx_bus_for_each_dev+0x10/0x10
[  376.614632][ T9922]  ? rt_spin_unlock+0x163/0x200
[  376.614659][ T9922]  bus_add_driver+0x348/0x670
[  376.614679][ T9922]  driver_register+0x23a/0x320
[  376.614705][ T9922]  usb_gadget_register_driver_owner+0xf9/0x270
[  376.614731][ T9922]  gadget_dev_desc_UDC_store+0x1c9/0x2f0
[  376.614758][ T9922]  ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10
[  376.614791][ T9922]  configfs_write_iter+0x33a/0x430
[  376.614864][ T9922]  vfs_write+0x61e/0xbb0
[  376.614915][ T9922]  ? __pfx_vfs_write+0x10/0x10
[  376.614937][ T9922]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  376.614958][ T9922]  ? lockdep_hardirqs_on+0x7a/0x110
[  376.614978][ T9922]  ? mutex_lock_nested+0x152/0x1d0
[  376.615001][ T9922]  ? fdget_pos+0x252/0x320
[  376.615048][ T9922]  ksys_write+0x156/0x270
[  376.615070][ T9922]  ? __pfx_ksys_write+0x10/0x10
[  376.615095][ T9922]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  376.615114][ T9922]  do_syscall_64+0x174/0x580
[  376.615134][ T9922]  ? trace_irq_disable+0x3b/0x140
[  376.615152][ T9922]  ? clear_bhb_loop+0x40/0x90
[  376.615171][ T9922]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  376.615188][ T9922] RIP: 0033:0x7f3ccf27de99
[  376.615205][ T9922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  376.615220][ T9922] RSP: 002b:00007f3ccd4d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  376.615240][ T9922] RAX: ffffffffffffffda RBX: 00007f3ccf505fa0 RCX: 00007f3ccf27de99
[  376.615253][ T9922] RDX: 000000000000000c RSI: 00002000000003c0 RDI: 0000000000000003
[  376.615266][ T9922] RBP: 00007f3ccf313eaf R08: 0000000000000000 R09: 0000000000000000
[  376.615276][ T9922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  376.615287][ T9922] R13: 00007f3ccf506038 R14: 00007f3ccf505fa0 R15: 00007fff145e3b98
[  376.615308][ T9922]  </TASK>
[  376.615314][ T9922] 
[  376.615318][ T9922] The buggy address belongs to the variable:
[  376.615324][ T9922]  ac_header_desc+0x0/0x20
[  376.615409][ T9922] 
[  376.615413][ T9922] The buggy address belongs to the physical page:
[  376.615426][ T9922] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x19e83
[  376.615441][ T9922] flags: 0x80000000002000(reserved|node=0|zone=1)
[  376.615468][ T9922] raw: 0080000000002000 ffffea000067a0c8 ffffea000067a0c8 0000000000000000
[  376.615483][ T9922] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  376.615492][ T9922] page dumped because: kasan: bad access detected
[  376.615509][ T9922] page_owner info is not present (never set?)
[  376.615516][ T9922] 
[  376.615520][ T9922] Memory state around the buggy address:
[  376.615529][ T9922]  ffffffff99e83680: 00 00 f9 f9 00 00 00 00 00 00 00 00 00 00 00 00
[  376.615541][ T9922]  ffffffff99e83700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  376.615552][ T9922] >ffffffff99e83780: f9 f9 f9 f9 00 f9 f9 f9 00 f9 f9 f9 00 f9 f9 f9
[  376.615560][ T9922]                                   ^
[  376.615570][ T9922]  ffffffff99e83800: 00 00 f9 f9 00 00 f9 f9 00 00 f9 f9 00 00 f9 f9
[  376.615582][ T9922]  ffffffff99e83880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  376.615590][ T9922] ==================================================================
[  376.615605][ T9922] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  376.615617][ T9922] CPU: 1 UID: 0 PID: 9922 Comm: syz.7.787 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  376.615637][ T9922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  376.615647][ T9922] Call Trace:
[  376.615654][ T9922]  <TASK>
[  376.615661][ T9922]  vpanic+0x56c/0xa60
[  376.615681][ T9922]  ? __pfx_vpanic+0x10/0x10
[  376.615702][ T9922]  panic+0xc5/0xd0
[  376.615719][ T9922]  ? __pfx_panic+0x10/0x10
[  376.615737][ T9922]  ? usb_copy_descriptors+0x1b8/0x320
[  376.615760][ T9922]  ? usb_copy_descriptors+0x1b8/0x320
[  376.615784][ T9922]  check_panic_on_warn+0x89/0xb0
[  376.615834][ T9922]  ? usb_copy_descriptors+0x1b8/0x320
[  376.615852][ T9922]  end_report+0x73/0x170
[  376.615873][ T9922]  ? usb_copy_descriptors+0x1b8/0x320
[  376.615890][ T9922]  kasan_report+0x128/0x150
[  376.615911][ T9922]  ? usb_copy_descriptors+0x1b8/0x320
[  376.615932][ T9922]  kasan_check_range+0x264/0x2c0
[  376.615952][ T9922]  ? usb_copy_descriptors+0x1b8/0x320
[  376.615971][ T9922]  __asan_memcpy+0x29/0x70
[  376.615995][ T9922]  usb_copy_descriptors+0x1b8/0x320
[  376.616015][ T9922]  usb_assign_descriptors+0xcf/0x290
[  376.616034][ T9922]  f_audio_bind+0x1b5e/0x34b0
[  376.616063][ T9922]  usb_add_function+0x290/0x930
[  376.616083][ T9922]  configfs_composite_bind+0xde0/0x1410
[  376.616108][ T9922]  ? __pfx_configfs_composite_bind+0x10/0x10
[  376.616127][ T9922]  gadget_bind_driver+0x2ca/0x9e0
[  376.616156][ T9922]  ? __pfx_gadget_bind_driver+0x10/0x10
[  376.616179][ T9922]  really_probe+0x254/0xae0
[  376.616205][ T9922]  __driver_probe_device+0x1e8/0x360
[  376.616229][ T9922]  driver_probe_device+0x4f/0x240
[  376.616254][ T9922]  __driver_attach+0x339/0x600
[  376.616276][ T9922]  bus_for_each_dev+0x23e/0x2c0
[  376.616294][ T9922]  ? __pfx___driver_attach+0x10/0x10
[  376.616316][ T9922]  ? __pfx_bus_for_each_dev+0x10/0x10
[  376.616336][ T9922]  ? rt_spin_unlock+0x163/0x200
[  376.616363][ T9922]  bus_add_driver+0x348/0x670
[  376.616383][ T9922]  driver_register+0x23a/0x320
[  376.616409][ T9922]  usb_gadget_register_driver_owner+0xf9/0x270
[  376.616435][ T9922]  gadget_dev_desc_UDC_store+0x1c9/0x2f0
[  376.616460][ T9922]  ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10
[  376.616486][ T9922]  configfs_write_iter+0x33a/0x430
[  376.616508][ T9922]  vfs_write+0x61e/0xbb0
[  376.616532][ T9922]  ? __pfx_vfs_write+0x10/0x10
[  376.616566][ T9922]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  376.616586][ T9922]  ? lockdep_hardirqs_on+0x7a/0x110
[  376.616606][ T9922]  ? mutex_lock_nested+0x152/0x1d0
[  376.616629][ T9922]  ? fdget_pos+0x252/0x320
[  376.616651][ T9922]  ksys_write+0x156/0x270
[  376.616673][ T9922]  ? __pfx_ksys_write+0x10/0x10
[  376.616698][ T9922]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  376.616716][ T9922]  do_syscall_64+0x174/0x580
[  376.616735][ T9922]  ? trace_irq_disable+0x3b/0x140
[  376.616752][ T9922]  ? clear_bhb_loop+0x40/0x90
[  376.616777][ T9922]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  376.616794][ T9922] RIP: 0033:0x7f3ccf27de99
[  376.616810][ T9922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  376.616824][ T9922] RSP: 002b:00007f3ccd4d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  376.616843][ T9922] RAX: ffffffffffffffda RBX: 00007f3ccf505fa0 RCX: 00007f3ccf27de99
[  376.616856][ T9922] RDX: 000000000000000c RSI: 00002000000003c0 RDI: 0000000000000003
[  376.616867][ T9922] RBP: 00007f3ccf313eaf R08: 0000000000000000 R09: 0000000000000000
[  376.616878][ T9922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  376.616889][ T9922] R13: 00007f3ccf506038 R14: 00007f3ccf505fa0 R15: 00007fff145e3b98
[  376.616911][ T9922]  </TASK>
[  376.617180][ T9922] Kernel Offset: disabled