last executing test programs:

45.168894872s ago: executing program 3 (id=1287):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
creat(&(0x7f00000001c0)='./file0/bus\x00', 0xa8)
acct(&(0x7f0000000100)='./file0/bus\x00')

44.974042557s ago: executing program 3 (id=1292):
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856afe13be00", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x40004, 0x1})
close_range(r0, 0xffffffffffffffff, 0x0)

44.719579727s ago: executing program 3 (id=1295):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe)

44.60732119s ago: executing program 3 (id=1297):
mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', 0x81)
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10)
linkat(r0, &(0x7f0000000340)='./file0\x00', r0, &(0x7f0000000380)='./file1\x00', 0x1000)

44.492567253s ago: executing program 3 (id=1298):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0x0, 0x4}, 0x1}, 0x18)
sendmsg$can_j1939(r0, &(0x7f0000001680)={&(0x7f0000001700)={0x1d, r1, 0x0, {0x1, 0xfe, 0x4}, 0x1fe}, 0x18, &(0x7f0000000200)={&(0x7f0000000440)="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", 0x6fa}, 0x1, 0x0, 0x0, 0x40}, 0x24000005)

43.735526195s ago: executing program 3 (id=1304):
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16)
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000000c0)=[{0x800000000, 0x2000000}, {0xfffffffffffffffc}], 0x2, 0xbfe, 0x38, 0x8, 0x70, 0x6e})

43.216813707s ago: executing program 32 (id=1304):
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16)
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000000c0)=[{0x800000000, 0x2000000}, {0xfffffffffffffffc}], 0x2, 0xbfe, 0x38, 0x8, 0x70, 0x6e})

36.127798938s ago: executing program 1 (id=1370):
gettid()
timer_create(0x0, 0x0, &(0x7f0000bbdffc)=<r0=>0x0)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
timer_settime(r0, 0x1, &(0x7f0000000080)={{}, {0x77359400}}, &(0x7f00000000c0))

35.931244641s ago: executing program 1 (id=1372):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x4, 0x7fffffff, 0x8}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x2, 0x7}}, @TCA_U32_SEL={0x24, 0x5, {0xb, 0x9, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x3, 0xb}]}}]}}]}, 0x5c}}, 0x404c004)

35.738872026s ago: executing program 1 (id=1375):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmmsg$inet_sctp(r0, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0x1}], 0x1, &(0x7f0000000200)=[@init={0x18, 0x84, 0x0, {0xc71f, 0xfff, 0x8, 0xc4}}], 0x18, 0x48060}], 0x1, 0x200000d0)
getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)

34.983149905s ago: executing program 1 (id=1383):
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x2020000, 0x0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)

34.752912582s ago: executing program 1 (id=1385):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0xc, @loopback, 0x8}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000200)={0x4, 0x8209, 0x5, 0xe2e, r1}, &(0x7f0000000300)=0x10)

34.272007742s ago: executing program 1 (id=1392):
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESDEC, @ANYRESHEX=0x0], 0x2, 0x9fc, &(0x7f0000002680)="$eJzs3c1vVOd+B/Dv8Qs4TgQkoWmKkjCQQpzENbZpoCiLFuwBnPqlso0U1EVIi6kQbtMmrUSiSiVS1VWjVmrVRbuLuuoqUjbNpsqud3fv6i7u1VX+heiuuCtfnTNjGNszjO3rFwKfD5qZ8/I7z/M7L3MeZnzmPOGHZeXwmrGVleqxzfFr/7MHGfMYuzT53ZdffVE+Pr+XA+nNO8X/JgNJaklfkpeT/onJ+bmZLgXdSW4k+TYpkhxM43VTbqT4lzz3cPzbFP9V1tvRgc2WTDcrPNX2+/gDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDHUTExOTo6VhzI1Oy192sNSW2Dicn5uSIrKxvnrC7T8E3V63fxTdd6k6J8ZGBgtavvl48+nP1SktrJvNIYe6XqkDwD+ezZl468+2Jfz+rynbL5jRzcfLGffPrZnQ+Xl5c+3pVEHn9X6rNTC3NTMxev1GtTC3O1C+fOjZ65enmhdnlqur5wfWGxPlObmK9fXJybrw1NvFkbu3DhbK0+cn3u2uyVyZHp+urE8783Pjp6rvbeyJ/UL84vzM2eeW9kYeLq1PT01OyVKqacXcacLw/EP55arC3WL87UarduLy+dXZdTb9Ydv2XQWLc1KYPGuwWNj46Pj42Nj4993uw9+8GEc+9ceOf86Gjf6DrZELFLBy2Pl2c67+adP4nDNvU02v9kOlOZzbW8n1rbfxOZzHzmMtNhftNq+3/qTL21mnPPrau3tf1vtvJ9LbOPlU8n81pzdKBD+98hl73790k+zWeH7+TDLGc5S/l43zPa239XUs9sprKQuUxlJherKbXmlFou5FzOZTQf5GqOZyG1XM5UplPPQq5nIYupV0fUROZTz8UsZi7zqWUoE3kztYzlQi7kbGqpZyTXM5drmc2VTOZiVcqt3K62+9lH5PggaGwzQeOPCNrQmG+5/a+v/88JT51dOpPD1q002/8D3UOHJvYiIQAAAGDH/c6PcujoC///i6TIq9X38penpuuj+50WAAAAsIOqy/VeKV/6y6FXU/j8DwAAAE+aovqNXZFkMMcbQ6u/hPIlAAAAADwhqr//v5bi+MMJPv8DAADAE6b7Pfa7RhTDq7f/rd1svN5sRjTGisHLU9P1kYm56XfHcrq6y0D1S4MNpfUmRX/184O3cqIRdWKw8Tr4sMSyzoEyamzk3bG8lZPNFRl6vXx5fahN5Hgj8o1G5Butkb1ZE3m2jASAJ93Jzu3xM9lk+/9WhhsRw8eqJr/vWJs2eFTLCgCPiwd97Pyq2aVZm8//zYjXOrX/v/+Iz/9lxAu5dbxxScFIciRZzs0Mp3nFwfF2pa72RtC4DGG4y7cBg81LFn5yvifDG74PGHiwrq2xSxnPcNtvBFrKLVZzONuI692dfQAAe+3kI9vhzbX/w10+/w+6pBAAHisPerDvPnB3EzFtB/Z7HQGAtbTSAAAAAAAAAAAAAAAAAAAAAAAAAAAAsPM2dQP/H59OlpeXku3d/397AwNbyfDRAz3ZnVQP7N3W2ORAb5L9qv0Ps+Wlyn3cOebnzSNg37fqUzmwjyclAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9kyR9Lab3pMcTDKa5MzeZ7V77u13Ajultr3Fivu5n7s5tNPpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA87Zr3/+9J4/XZxqT09SSnktxI8qf7neNOur/fCeybv6yeW+7/35P0Z6VIX2O3p+ifmJyfmyl3f3GwnP/dl199UT66l72xV4WygLKGNZ1LNGtomdK/dqnnq6UGJ5c+ufO3H/11bfJSdWBeWrw8PTlzZf6PHga+VHzd6AKhtRuE1Xz//tT//WvL5APNyr8u17S99fVeruqd3Fjvb7dbukO9m3B7eWm8rGmx/v7i3/3V7bsts17IieT1oWRobU1/UT461HRi/fZcq/i++KfiUP4jN6r9X26NYqUod9Hhav2fuXV7eWnkzz9avvkgp39Yk9ORHE9yMxnYfE7Hq/NJW9VR19Nf1jpaBZVPR7uU90gtJY512K7PV4fM4JbWodZ5HSpdtnszo7NtM/q3v3kxp7e8p093qbGt4vviZ8XV/DT/2NL/R0+5/0+l7buzTRFVZMuR0jpvzdurpxFZrfl464wP1pfZ8V3JLvjn/Fn+4MH+72k5/zf31d6cj1pqbP++SLb+vvjvwxtalIeqFunouhapefbptEwzz6ONqA55/lbeTvqObemM8naXM8puvf//sxjKL3NP/z8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDjr0h6203vSU4lOZLkcDleS1bWx9zbRn09g8V20twx28n5h6fouKLF/dzP3Rza64wAAAAAAAAA2B2XJr/78qsvykf19/je/G6yUqklfUmOFP/ePzE5PzfTpaD+5Mbqn/QHtpbDjfLpuYfj35ZjL3dZaH8vHwCAH7RfBwAA//87+nFy")
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x42800, 0x0)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

33.773173873s ago: executing program 33 (id=1392):
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESDEC, @ANYRESHEX=0x0], 0x2, 0x9fc, &(0x7f0000002680)="$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")
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x42800, 0x0)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

22.430823934s ago: executing program 2 (id=1470):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6"], 0x7c}}, 0x10)
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x146b, 0x902, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc, 0x0, 0x3}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)

20.519780183s ago: executing program 2 (id=1489):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$bt_hci(r1, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012)

20.315937589s ago: executing program 2 (id=1492):
mount$9p_fd(0x0, 0x0, 0x0, 0x600080, &(0x7f0000000140))
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100), &(0x7f0000000140)=0x8)

20.214313642s ago: executing program 2 (id=1494):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

20.110942729s ago: executing program 2 (id=1497):
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x6a)
close(r0)
r1 = socket$tipc(0x1e, 0x4, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x200480, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

19.311271791s ago: executing program 2 (id=1503):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x64)

18.85768279s ago: executing program 34 (id=1503):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x64)

6.997417007s ago: executing program 7 (id=1610):
syz_mount_image$xfs(&(0x7f0000000240), &(0x7f0000009780)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x986b, &(0x7f00000097c0)="$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")
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000240)={0x0, 0x0, 0x2, 0x8, 0x4})

5.072233489s ago: executing program 7 (id=1628):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x1c4, 0x0, 0x8e73}]})

4.311377129s ago: executing program 7 (id=1633):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f00000105c0)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='active_logs=4,jqfmt=vfsv0,prjjquota=f2fs\x00,mode=adaptive,heap,norecovery,fsync_mode=posix,user_xattr,disable_roll_forward,\x00\x00\x00'], 0x1, 0x105da, &(0x7f0000010600)="$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")
link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00')

3.388233295s ago: executing program 0 (id=1639):
r0 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x40}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000780)=[{0x18, 0x29, 0x37, "57f2"}], 0x18}}], 0x1, 0x4000000)

3.256145418s ago: executing program 0 (id=1642):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
syz_clone(0x28000, 0x0, 0x0, 0x0, 0x0, 0x0)

3.144285982s ago: executing program 7 (id=1643):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x200023, 0x0)

3.101122413s ago: executing program 0 (id=1646):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x0, {0x1, 0x0, 0x4}}, 0x18)
sendmmsg(r0, &(0x7f00000017c0)=[{{&(0x7f00000000c0)=@can={0x1d, r1}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000380)="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", 0x6fa}, {0x0}], 0x2}}], 0x1, 0xf5)

2.711364312s ago: executing program 0 (id=1651):
syz_usb_connect$cdc_ecm(0x3, 0x91, &(0x7f0000000dc0)=ANY=[@ANYBLOB="12015002020000202505a1a440000122030109027f00010109207f0904000003020600fc0924060000071abf5e0524000b000d240f0104000000040009000707240a008c06061524120400"], &(0x7f0000001040)={0x0, 0x0, 0x1b, &(0x7f0000000ec0)=ANY=[]})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

2.047906934s ago: executing program 6 (id=1658):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$eJzs3U9rY1UUAPDz0uQ1QxftwpUIvsUs3Fims3VhBqkgdqVk4R/QwZmBoQkDDQRGxTArP4ELF34Pd+4FN34DwYVLdw5SuPLeS5NMkkmmHdMO5ffb9HLuOe/em3fbFMK7+fKN/vG9R4MHT779I9rtLBqd6MTTLPaiEWfSWAAA18LTlOLvC72/NxubmhMAsFkz7/+t56RsL4be3fS0AIAN+viTTz+8c3R0+FFRtCP63w+7WdQ/6/47D+Jh9OJ+3IrdOJ1+FpBS3X7/g6PDaBalvbjZHw27ZWX/i98mqXlU9QexG3vL6w+K2kz9aNis/vPIsoiHnXIit2M3XluoL/sPby+pj24eb7XHiyzH34/d+P2reBS9uFd9pjEd/7s8ivfSD/9881mZXNZno2F3u8qbSluXfW8AAAAAAAAAAAAAAAAAAAAAALi+9ouJvbjZL0P1+TvdrdOqf/+Z/up8nUbVX9dnEXnVmDsfaJTip7PzdW4VRZGyOn9yvs+NZrzejOaVLRwAAAAAAAAAAAAAAAAAAABeIYPHXx/f7fXun/wvjfFD/pPH+i96nc5M5M1Ynbx9rrFia5xeznU+5+DXz/uTSLmIi0x+2CoiVs25tRC5Uc5n/ZX/TSmlLIt4udvUepGx1jR2VueUL/AvP+68fXw3W/cats9u3M+zXXmcDB7P3dPIVg96+kwknWv75Sty8vGOeaHr7LzkL9E7f9aDjSPZmlW0ZiKtcSOet/3a59rPl/c3CAAAAAAAAAAAAAAAAAAAqE0f+l3S+WRlaWNjkwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACASzb9/v9pIxYic41R/FUVL89JKY0mkTxOBle9RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK6//wIAAP//qWdtxQ==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0x8}}, 0x20)

2.029268032s ago: executing program 5 (id=1659):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x43504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e24, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0xfe, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xffffffbffffffffc, 0x4}, {0x10000000000009, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844)

1.804133502s ago: executing program 5 (id=1660):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r0}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0x1c, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000180000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

1.573653582s ago: executing program 7 (id=1661):
r0 = getpgid(0x0)
r1 = syz_clone3(&(0x7f0000000180)={0x800000, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x4, 0x0, 0x0, 0xfffffffe})
kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, 0x0)

1.57338142s ago: executing program 4 (id=1662):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
eventfd2(0xbfb, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x103040, 0x114)
sendfile(r0, r1, &(0x7f0000000600)=0x400, 0xe)

1.55591941s ago: executing program 5 (id=1663):
r0 = syz_io_uring_setup(0x1eb6, &(0x7f0000000200)={0x0, 0x69cd, 0x40}, &(0x7f0000000780), &(0x7f0000000040))
r1 = eventfd2(0x3, 0x1)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000000)=r1, 0x1)
io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1)

1.371761211s ago: executing program 4 (id=1664):
r0 = epoll_create1(0x0)
r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00'}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)={@ifindex, r2, 0x11, 0x0, 0xffffffffffffffff, @void, @value=r1}, 0x20)

1.371213749s ago: executing program 5 (id=1665):
syz_mount_image$jfs(&(0x7f0000000700), &(0x7f0000000180)='./file1\x00', 0x802, &(0x7f0000000100)=ANY=[], 0x1, 0x60d9, &(0x7f0000008180)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x2900, 0x1cf)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, 0x0)

1.350449604s ago: executing program 7 (id=1666):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$printer(0x1, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x83e}}]})
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000600)={0x1c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0})

1.296429627s ago: executing program 4 (id=1667):
r0 = io_uring_setup(0x423d, &(0x7f00000000c0)={0x0, 0x8c6c, 0x1040, 0xffffffff, 0x20161})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x13}], 0x1)
io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000000)=[0x1, 0x40], 0x2)

1.208911743s ago: executing program 4 (id=1668):
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000001c0)='./file2\x00', 0x800c08, &(0x7f0000000540)=ANY=[@ANYBLOB="2c756d61736b3d300004000000000000000000", @ANYRES8=0x0, @ANYRES16=0x0, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRESHEX=0x0, @ANYRESDEC, @ANYRES64=0x0, @ANYRES8, @ANYRES8=0x0, @ANYBLOB="c49ecfdd8711048bea9eb55574810b5cbc454ccd5a63c7941ba393a86e5b7a8fdcf7b75e9bd7459f7e129fadabeef1e9b084a7568c9ce90014069121b0700a4f948941c59d1e8e3f80ffa601a20f979dd6e1fe150ba283f14999be8b6fe530f67dbac2443da65608409abd01602980fb5227c272180171dfa09978bf40bd650d5c4a54e6cecfcfd2e41e9ec85c6a274e668e7443cdd2c3cba6972ccffb41487a8202816ac3ba65bb5cb3d1323194c102f39aae52e46500849660e484f39210872d958d69f61e1311c51a34b64f81cb8a5cc30bf568185b0bb1f0d438777c833a9b362a10cace728b508eb7642244"], 0x21, 0x62b3, &(0x7f000000b800)="$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")
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140))
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0)
getdents(r0, &(0x7f0000000440)=""/97, 0x61)

1.179655273s ago: executing program 6 (id=1669):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100))
ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f00000003c0)={0x2, &(0x7f0000000080)=[{0x50, 0x1, 0x2, 0x9}, {0x6, 0x0, 0x3, 0x365}]})
write$ppp(r0, &(0x7f0000000400)='k\'', 0x2)

1.177603448s ago: executing program 0 (id=1670):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmsg(r0, &(0x7f0000001d00)={0x0, 0x0, 0x0}, 0x40000020)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002700)=""/4087, 0xff7}, {&(0x7f0000003700)=""/4087, 0xe78}, {&(0x7f0000000340)=""/51, 0x33}, {&(0x7f0000000600)=""/21, 0x15}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/198, 0xc6}], 0x6}, 0x32120)

1.003517074s ago: executing program 0 (id=1671):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x566, 0x3004, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000c40)=ANY=[@ANYBLOB='\x00\x00W'], 0x0, 0x0, 0x0, 0x0}, 0x0)

859.776948ms ago: executing program 6 (id=1672):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000980)={0xf8, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_SETUP={0xd0, 0x70, [@NL80211_MESH_SETUP_IE={0xcb, 0x3, "adc488399e322d9f58677b818a54f027e538d0d7abb155c2b0949a2f7016d6a00cfc9a3d9d9c5c6b45e6966d37f329fc7c865005cb6c2c033496c7e8161b8b815761dfe0842f4992e56089722eeb568653aa92eefa78ff857bcc6c3e82868a6425df48b3c742a9cfb8be1fc53884018f10773bc095d203b6fc94ae3c776356a2d75deeddc5248017b1f703e21a2e8fb1c2223b4ea4d453def12f8f9bca3b848d153816feeeca493516c91dd3caef469437d6fc821ee89db2e9a477e644000000000d2b6e140000"}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0xf8}}, 0xd4)

708.82664ms ago: executing program 6 (id=1673):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}]}, 0x2c}}, 0x80)

546.892835ms ago: executing program 5 (id=1674):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0xfff3}, {0x8, 0xfff1}, {0x2, 0x2}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x0, 0x7f9, 0xb6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40098}, 0x10)

545.66071ms ago: executing program 6 (id=1675):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x1c0, 0x380, &(0x7f0000000180)=[0x0, 0xec66, 0xff, 0x8, 0x98bd, 0x80000000000000c, 0x0, 0x4, 0x10000, 0x7, 0x9004, 0x9, 0x8, 0x9, 0x5, 0x49, 0x3ff, 0x5, 0x2, 0x1, 0x8, 0x7, 0xc1, 0x1, 0x6, 0x2, 0x6, 0x9, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x5, 0x7, 0x4, 0x3, 0x9, 0x888f, 0x1, 0x6, 0x46, 0x1, 0x3, 0xa3de, 0x20000000006, 0x8, 0x7, 0x400, 0x7, 0xffffffffffffffb7, 0xfffffffffffffffa, 0x2, 0xe, 0x6, 0x4, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0x9, 0xd, 0x10001, 0xbbd9, 0x80000000, 0xfffffffffffffc00, 0x2, 0x4, 0x2, 0x1000, 0x4000000007, 0x2, 0x3, 0x2, 0x2, 0xfff, 0x6, 0x4, 0x1, 0xab6, 0x0, 0x4, 0x0, 0xffffffffffffff81, 0x9, 0x7, 0x6, 0x6, 0x5, 0x80619, 0x3, 0x7, 0xf6, 0x4, 0x6, 0x204, 0x7, 0xe53e, 0x8, 0x8, 0x2293332f, 0x6, 0x5, 0x1e, 0xd, 0x2, 0x4, 0xfffffffffffffffb, 0x80000001, 0x7, 0xdfd6, 0xfff9, 0x10, 0x5, 0x8, 0x1, 0x51e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0xcc, 0x8, 0x1000003]})

295.380939ms ago: executing program 4 (id=1676):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={<r1=>0x0, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}]}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x82, &(0x7f0000000040)={r1}, &(0x7f00000000c0)=0x8)

138.137354ms ago: executing program 5 (id=1677):
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2b2, &(0x7f0000000880)="$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")
lsetxattr(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='b[rgs4}%.'], 0x0, 0x0, 0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)

123.423558ms ago: executing program 6 (id=1678):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$TCSETS(r0, 0x40204706, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, "3eccd8000200000500000000000000feffffff"})

0s ago: executing program 4 (id=1679):
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'hsr0\x00', <r1=>0x0})
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r1}, 0x14)
close_range(r0, r0, 0x0)

kernel console output (not intermixed with test programs):

p2: unable to read RDB block 7
[  197.858108][ T6123]  loop2: unable to read partition table
[  197.882235][ T6123] loop2: partition table beyond EOD, truncated
[  197.921583][ T9075] Dev loop2: unable to read RDB block 7
[  197.933382][ T9075]  loop2: unable to read partition table
[  197.951745][ T9075] loop2: partition table beyond EOD, truncated
[  197.961412][ T9075] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  198.091701][ T9087] loop1: detected capacity change from 0 to 128
[  198.105074][ T9086] loop2: detected capacity change from 0 to 512
[  198.149129][ T9087] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  198.179778][ T9086] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  198.205444][ T9086] System zones: 0-2, 18-18, 34-35
[  198.220916][ T9087] ext4 filesystem being mounted at /207/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  198.291711][ T9086] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.361362][ T9086] ext4 filesystem being mounted at /220/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  198.411711][ T9087] EXT4-fs (loop1): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  198.484921][ T5828] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.578861][ T5818] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  198.668456][ T9104] hsr0: entered promiscuous mode
[  198.704785][ T9104] macvtap1: entered allmulticast mode
[  198.710505][ T9104] hsr0: entered allmulticast mode
[  198.717342][ T9110] loop2: detected capacity change from 0 to 1024
[  198.765871][ T9104] hsr_slave_0: entered allmulticast mode
[  198.782876][ T9104] hsr_slave_1: entered allmulticast mode
[  198.803917][ T3589] hfsplus: b-tree write err: -5, ino 25
[  198.828331][ T9104] hsr0: left allmulticast mode
[  198.836010][ T3589] hfsplus: b-tree write err: -5, ino 4
[  198.846938][ T9104] hsr_slave_0: left allmulticast mode
[  198.861441][ T3589] hfsplus: b-tree write err: -5, ino 2
[  198.862539][ T9104] hsr_slave_1: left allmulticast mode
[  198.960724][  T980] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  199.073142][ T9123] loop2: detected capacity change from 0 to 512
[  199.094883][ T9123] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  199.127073][  T980] usb 4-1: Using ep0 maxpacket: 32
[  199.144798][ T9123] EXT4-fs (loop2): 1 orphan inode deleted
[  199.175338][  T980] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  199.208221][ T9123] EXT4-fs (loop2): 1 truncate cleaned up
[  199.231835][ T9123] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  199.246735][  T980] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  199.334377][  T980] usb 4-1: New USB device found, idVendor=0421, idProduct=0223, bcdDevice=b1.bd
[  199.349058][ T9123] EXT4-fs (loop2): shut down requested (1)
[  199.362610][  T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.382912][  T980] usb 4-1: Product: syz
[  199.391017][  T980] usb 4-1: Manufacturer: syz
[  199.398366][  T980] usb 4-1: SerialNumber: syz
[  199.432975][ T5828] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.452388][  T980] usb 4-1: config 0 descriptor??
[  199.482607][  T980] rndis_host 4-1:0.0: skipping garbage
[  199.496122][  T980] usb 4-1: bad CDC descriptors
[  199.516133][  T980] cdc_acm 4-1:0.0: skipping garbage
[  199.531375][  T980] cdc_acm 4-1:0.0: Control and data interfaces are not separated!
[  199.572724][   T29] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  199.573473][  T980] cdc_acm 4-1:0.0: This needs exactly 3 endpoints
[  199.587995][  T980] cdc_acm 4-1:0.0: probe with driver cdc_acm failed with error -22
[  199.704808][ T9112] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1027'.
[  199.723591][   T24] usb 4-1: USB disconnect, device number 10
[  199.732061][   T29] usb 1-1: Using ep0 maxpacket: 32
[  199.750204][   T29] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  199.762929][   T29] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  199.783225][   T29] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  199.795733][   T29] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  199.806576][   T29] usb 1-1: Product: syz
[  199.825029][   T29] usb 1-1: Manufacturer: syz
[  199.841682][   T29] hub 1-1:4.0: USB hub found
[  200.030732][   T30] audit: type=1804 audit(1772027105.673:31): pid=9158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1048" name="/newroot/217/bus/file1" dev="loop1" ino=22 res=1 errno=0
[  200.050472][   T29] hub 1-1:4.0: config failed, hub has too many ports! (err -19)
[  200.131982][ T9160] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  200.167030][ T9160] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  200.214355][ T9160] ntfs3(loop4): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr
[  200.245334][ T9160] ntfs3(loop4): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr
[  200.400850][   T24] usb 1-1: USB disconnect, device number 11
[  200.732716][ T9178] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  200.804795][ T9182] sp0: Synchronizing with TNC
[  201.098650][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  201.215163][ T9194] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  201.289020][ T9194] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  201.325249][ T9203] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  201.402982][ T9194] ntfs3(loop3): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr
[  201.496271][ T9194] ntfs3(loop3): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr
[  201.544900][ T5820] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.732766][ T9216] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  201.875236][   T30] audit: type=1326 audit(1772027107.523:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9220 comm="syz.0.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58cf39c629 code=0x7ffc0000
[  201.932644][   T30] audit: type=1326 audit(1772027107.523:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9220 comm="syz.0.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58cf39c629 code=0x7ffc0000
[  201.957660][   T30] audit: type=1326 audit(1772027107.543:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9220 comm="syz.0.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f58cf39c629 code=0x7ffc0000
[  202.071085][   T30] audit: type=1326 audit(1772027107.543:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9220 comm="syz.0.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58cf39c629 code=0x7ffc0000
[  202.138036][   T30] audit: type=1326 audit(1772027107.543:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9220 comm="syz.0.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58cf39c629 code=0x7ffc0000
[  202.186347][   T30] audit: type=1326 audit(1772027107.553:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9220 comm="syz.0.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f58cf39c629 code=0x7ffc0000
[  202.210526][   T30] audit: type=1326 audit(1772027107.553:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9220 comm="syz.0.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58cf39c629 code=0x7ffc0000
[  202.271231][  T980] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  202.427599][  T980] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[  202.439977][  T980] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  202.458337][  T980] usb 5-1: config 220 has no interface number 2
[  202.477925][  T980] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  202.504084][  T980] usb 5-1: config 220 interface 0 has no altsetting 0
[  202.511455][  T980] usb 5-1: config 220 interface 76 has no altsetting 0
[  202.518781][  T980] usb 5-1: config 220 interface 1 has no altsetting 0
[  202.529310][  T980] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  202.540718][  T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.542499][ T9242] set_capacity_and_notify: 5 callbacks suppressed
[  202.542514][ T9242] loop0: detected capacity change from 0 to 4096
[  202.548907][  T980] usb 5-1: Product: syz
[  202.548928][  T980] usb 5-1: Manufacturer: syz
[  202.548941][  T980] usb 5-1: SerialNumber: syz
[  202.584837][ T9242] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  202.632347][ T9242] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  202.634325][ T9247] input: syz0 as /devices/virtual/input/input7
[  202.674647][ T9242] ntfs3(loop0): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr
[  202.742650][ T9242] ntfs3(loop0): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr
[  202.823441][  T980] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  202.861755][  T980] uvcvideo 5-1:220.0: No valid video chain found.
[  202.868458][  T980] usb 5-1: selecting invalid altsetting 0
[  202.913516][  T980] usb 5-1: selecting invalid altsetting 0
[  202.919594][  T980] usbtest 5-1:220.1: probe with driver usbtest failed with error -22
[  202.981074][  T980] usb 5-1: USB disconnect, device number 10
[  203.075763][ T9251] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  203.251529][ T9262] loop9: detected capacity change from 0 to 7
[  203.259235][ T9262] Buffer I/O error on dev loop9, logical block 0, async page read
[  203.268778][ T9262] Buffer I/O error on dev loop9, logical block 0, async page read
[  203.312395][ T9262] Buffer I/O error on dev loop9, logical block 0, async page read
[  203.332250][ T9264] loop1: detected capacity change from 0 to 1024
[  203.345186][ T9262] Buffer I/O error on dev loop9, logical block 0, async page read
[  203.383356][ T9267] loop2: detected capacity change from 0 to 256
[  203.401135][ T9262] Buffer I/O error on dev loop9, logical block 0, async page read
[  203.409532][ T9262] Buffer I/O error on dev loop9, logical block 0, async page read
[  203.428799][ T9262] Buffer I/O error on dev loop9, logical block 0, async page read
[  203.439072][ T9262] ldm_validate_partition_table(): Disk read failed.
[  203.448158][ T9262] Buffer I/O error on dev loop9, logical block 0, async page read
[  203.458569][ T9262] Buffer I/O error on dev loop9, logical block 0, async page read
[  203.467668][ T9262] Buffer I/O error on dev loop9, logical block 0, async page read
[  203.477606][ T9262] Dev loop9: unable to read RDB block 0
[  203.486545][ T9262]  loop9: unable to read partition table
[  203.494973][ T9262] loop9: partition table beyond EOD, truncated
[  203.502546][   T30] audit: type=1800 audit(1772027109.153:39): pid=9270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1097" name="file1" dev="loop1" ino=20 res=0 errno=0
[  203.506484][ T9262] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ �â·û
[  203.506484][ T9262] 
) failed (rc=-5)
[  203.654372][ T9274] overlayfs: upper fs does not support file handles, falling back to index=off.
[  203.694881][ T9274] overlayfs: NFS export requires "index=on", falling back to nfs_export=off.
[  203.737152][ T9277] input: syz0 as /devices/virtual/input/input8
[  203.795632][ T9279] loop1: detected capacity change from 0 to 8
[  203.956591][ T9285] loop4: detected capacity change from 0 to 1024
[  203.956591][ T9286] loop2: detected capacity change from 0 to 512
[  203.957438][ T9286] EXT4-fs: Ignoring removed nomblk_io_submit option
[  204.009976][ T9286] EXT4-fs: Ignoring removed bh option
[  204.043130][ T9286] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  204.063172][ T9285] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  204.095128][ T9286] EXT4-fs error (device loop2): mb_free_blocks:2047: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[  204.120838][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  204.127460][    C1] EXT4-fs (loop2): initial error at time 1772027109: mb_free_blocks:2047: inode 11: block 64
[  204.129668][ T9286] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #11: comm syz.2.1105: corrupted inode contents
[  204.138269][    C1] EXT4-fs (loop2): last error at time 1772027109: mb_free_blocks:2047: inode 11: block 64
[  204.214939][ T9286] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  204.225444][ T9286] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #11: comm syz.2.1105: mark_inode_dirty error
[  204.251200][ T9286] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  204.257109][ T9286] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1105: invalid indirect mapped block 1 (level 1)
[  204.293167][ T5820] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.303362][ T9286] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  204.303794][ T9286] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #11: comm syz.2.1105: corrupted inode contents
[  204.306378][ T9298] loop1: detected capacity change from 0 to 4096
[  204.315369][ T9286] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  204.344019][ T9286] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[  204.361226][ T9298] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  204.431068][ T9286] loop2: lost filesystem error report for type 5 error -117
[  204.431960][ T9286] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #11: comm syz.2.1105: corrupted inode contents
[  204.460555][ T9304] loop0: detected capacity change from 0 to 512
[  204.492588][ T9286] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  204.493688][ T9286] EXT4-fs error (device loop2): ext4_truncate:4587: inode #11: comm syz.2.1105: mark_inode_dirty error
[  204.503179][ T9298] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  204.522643][ T9286] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  204.529782][ T9286] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem
[  204.533198][ T9304] EXT4-fs (loop0): Test dummy encryption mode enabled
[  204.558364][ T9286] loop2: lost filesystem error report for type 5 error -117
[  204.560365][ T9286] EXT4-fs (loop2): 1 truncate cleaned up
[  204.578152][ T9286] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  204.607624][ T9298] ntfs3(loop1): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr
[  204.654131][ T9304] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  204.696351][ T9298] ntfs3(loop1): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr
[  204.716847][ T9304] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni"
[  204.843534][ T9304] EXT4-fs error (device loop0): ext4_add_entry:2415: inode #2: comm syz.0.1111: Directory hole found for htree leaf block 0
[  204.886606][ T5828] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.897203][ T9304] EXT4-fs (loop0): Remounting filesystem read-only
[  205.006246][ T5829] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000.
[  205.415244][   T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  205.581021][   T24] usb 2-1: Using ep0 maxpacket: 16
[  205.588347][   T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  205.619064][   T24] usb 2-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00
[  205.648985][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.702273][   T24] usb 2-1: config 0 descriptor??
[  206.069471][ T9355] loop0: detected capacity change from 0 to 256
[  206.109539][ T9355] exFAT-fs (loop0): failed to test first cluster bit of root dir(5)
[  206.121047][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  206.174193][   T24] sony 0003:054C:0374.000C: hiddev0,hidraw0: USB HID v0.06 Device [HID 054c:0374] on usb-dummy_hcd.1-1/input0
[  206.221141][   T24] sony 0003:054C:0374.000C: failed to claim input
[  206.357731][   T24] usb 2-1: USB disconnect, device number 9
[  206.396707][ T9359] fido_id[9359]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  206.616384][ T9369] netlink: 'syz.3.1140': attribute type 83 has an invalid length.
[  206.723907][ T9378] exfat: Deprecated parameter 'namecase'
[  206.753517][ T9378] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  207.150797][ T5890] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  207.161300][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  207.331577][ T5890] usb 1-1: too many configurations: 83, using maximum allowed: 8
[  207.353527][ T5890] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  207.381356][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.409013][ T5890] usb 1-1: Product: syz
[  207.425650][ T5890] usb 1-1: Manufacturer: syz
[  207.444098][ T5890] usb 1-1: SerialNumber: syz
[  207.479067][ T9405] msdos: Bad value for 'errors'
[  207.625826][ T9408] set_capacity_and_notify: 2 callbacks suppressed
[  207.625847][ T9408] loop2: detected capacity change from 0 to 256
[  207.671979][ T9408] exfat: Deprecated parameter 'namecase'
[  207.699796][ T9408] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  207.731542][ T5890] rtl8150 1-1:1.0: couldn't reset the device
[  207.767387][ T5890] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5
[  207.787271][ T5890] usb 1-1: USB disconnect, device number 12
[  207.932869][ T9417] loop2: detected capacity change from 0 to 256
[  208.068318][ T9420] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1164'.
[  208.201278][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  208.317831][ T9431] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  208.462119][  T980] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  208.465098][ T9437] loop0: detected capacity change from 0 to 24
[  208.623552][  T980] usb 5-1: Using ep0 maxpacket: 32
[  208.667433][  T980] usb 5-1: config 0 has an invalid interface number: 188 but max is 0
[  208.692065][  T980] usb 5-1: config 0 has no interface number 0
[  208.698476][  T980] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  208.745790][  T980] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  208.782132][ T9425] loop2: detected capacity change from 0 to 32768
[  208.782148][  T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.805440][ T9425] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1167 (9425)
[  208.823924][  T980] usb 5-1: Product: syz
[  208.828146][  T980] usb 5-1: Manufacturer: syz
[  208.861008][  T980] usb 5-1: SerialNumber: syz
[  208.873021][  T980] usb 5-1: config 0 descriptor??
[  208.881218][ T9427] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  208.915467][ T9425] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  208.971541][ T9448] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1176'.
[  208.983515][ T9425] BTRFS info (device loop2): using crc32c checksum algorithm
[  209.108549][ T9427] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  209.175622][ T9425] BTRFS info (device loop2): enabling ssd optimizations
[  209.201069][ T9425] BTRFS info (device loop2): turning on async discard
[  209.228611][ T9425] BTRFS info (device loop2): enabling free space tree
[  209.366123][ T9477] loop1: detected capacity change from 0 to 8
[  209.459961][ T5828] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  209.465687][ T5833] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  209.596017][ T9482] loop3: detected capacity change from 0 to 512
[  209.644833][ T5833] usb 1-1: Using ep0 maxpacket: 8
[  209.652786][ T5833] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  209.654884][ T9484] loop1: detected capacity change from 0 to 512
[  209.672407][ T5833] usb 1-1: config 179 has no interface number 0
[  209.678927][ T9482] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  209.691446][ T5833] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  209.721024][ T5833] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  209.746370][  T980] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  209.754663][ T5833] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  209.760201][ T9482] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=00c2]
[  209.788633][ T5833] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  209.812795][ T5833] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  209.818097][  T980] asix 5-1:0.188: probe with driver asix failed with error -71
[  209.827687][ T5833] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  209.844798][ T5833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.873416][ T9482] System zones: 0-2, 18-18, 34-34
[  209.878994][ T9482] EXT4-fs (loop3): orphan cleanup on readonly fs
[  209.895290][ T9472] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  209.895993][ T9484] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0007-000000000000 r/w without journal. Quota mode: writeback.
[  209.937733][ T9482] EXT4-fs error (device loop3): ext4_quota_enable:7192: inode #15: comm syz.3.1188: iget: bad i_size value: 360287970189639690
[  209.988791][  T980] usb 5-1: USB disconnect, device number 11
[  210.034743][ T9482] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  210.038521][ T9482] EXT4-fs error (device loop3): ext4_quota_enable:7195: comm syz.3.1188: Bad quota inode: 15, type: 2
[  210.048412][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  210.048436][    C0] EXT4-fs (loop3): last error at time 1772027115: ext4_quota_enable:7192: inode 15
[  210.050384][ T9484] ext4 filesystem being mounted at /244/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  210.076450][ T9492] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1190'.
[  210.079609][ T9482] loop3: lost filesystem error report for type 5 error -117
[  210.098033][ T9482] EXT4-fs warning (device loop3): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix.
[  210.180150][ T5833] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input9
[  210.203697][ T9482] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  210.225814][ T9482] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  210.277087][ T9494] ªªªªªª: renamed from vlan0 (while UP)
[  210.327439][ T5818] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0007-000000000000.
[  210.385238][ T5833] usb 1-1: USB disconnect, device number 13
[  210.391353][    C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  210.391409][    C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  210.495312][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.544414][ T9498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1193'.
[  210.601495][ T9498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1193'.
[  210.657453][ T9498] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1193'.
[  210.707162][ T9504] loop1: detected capacity change from 0 to 1024
[  210.773144][ T9504] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  210.823660][ T9504] ext4 filesystem being mounted at /246/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  210.944840][ T9504] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1196: bg 0: block 112: padding at end of block bitmap is not set
[  211.043368][ T9504] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 21 with max blocks 44 with error 117
[  211.073832][ T9502] loop3: detected capacity change from 0 to 32768
[  211.113141][ T9504] EXT4-fs (loop1): This should not happen!! Data will be lost
[  211.113141][ T9504] 
[  211.173952][ T9502] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  211.217601][ T5818] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  211.231478][ T5821] block nbd1: Receive control failed (result -32)
[  211.299884][ T9502] XFS (loop3): Ending clean mount
[  211.332542][ T9502] XFS (loop3): Quotacheck needed: Please wait.
[  211.380425][   T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  211.397512][ T9502] XFS (loop3): Quotacheck: Done.
[  211.516768][ T5827] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  211.554717][   T10] usb 1-1: Using ep0 maxpacket: 8
[  211.588984][   T10] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  211.594131][ T9542] loop1: detected capacity change from 0 to 64
[  211.614704][   T10] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  211.647583][   T10] usb 1-1: Product: syz
[  211.675466][   T10] usb 1-1: Manufacturer: syz
[  211.709325][   T30] audit: type=1800 audit(1772027117.343:40): pid=9542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1209" name="file1" dev="loop1" ino=22 res=0 errno=0
[  211.734641][   T10] usb 1-1: SerialNumber: syz
[  211.756940][   T10] usb 1-1: config 0 descriptor??
[  211.780048][ T9542] syz.1.1209: attempt to access beyond end of device
[  211.780048][ T9542] loop1: rw=8388608, sector=57, nr_sectors = 8 limit=64
[  211.783294][   T10] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  211.818776][  T980] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  211.909284][   T12] kworker/u8:0: attempt to access beyond end of device
[  211.909284][   T12] loop1: rw=1, sector=65, nr_sectors = 2 limit=64
[  212.024122][  T980] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  212.070769][  T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.094054][  T980] usb 5-1: Product: syz
[  212.098515][  T980] usb 5-1: Manufacturer: syz
[  212.131107][  T980] usb 5-1: SerialNumber: syz
[  212.149385][  T980] usb 5-1: config 0 descriptor??
[  212.395950][   T10] input: gspca_zc3xx as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10
[  212.473987][ T9544] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1211 (9544)
[  212.519660][ T9544] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  212.536866][ T9544] BTRFS info (device loop1): using sha256 checksum algorithm
[  212.572833][  T980] usb 5-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0)
[  212.591452][  T980] usb 5-1: Firmware version (0.0) predates our first public release.
[  212.600199][  T980] usb 5-1: Please update to version 0.2 or newer
[  212.664779][ T9544] BTRFS info (device loop1): rebuilding free space tree
[  212.670463][   T10] usb 1-1: USB disconnect, device number 14
[  212.700962][ T9544] BTRFS info (device loop1): disabling free space tree
[  212.708088][ T9544] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  212.721091][ T9544] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  212.740461][ T9544] BTRFS info (device loop1): enabling ssd optimizations
[  212.748372][ T9544] BTRFS info (device loop1): turning on async discard
[  212.757150][ T9544] BTRFS info (device loop1): force clearing of disk cache
[  212.764982][ T9544] BTRFS info (device loop1): enabling auto defrag
[  212.772945][ T9544] BTRFS info (device loop1): max_inline set to 4096
[  212.844320][  T980] usb 5-1: USB disconnect, device number 12
[  212.925281][ T5818] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  212.990465][ T9576] set_capacity_and_notify: 3 callbacks suppressed
[  212.990484][ T9576] loop2: detected capacity change from 0 to 512
[  213.036191][ T9576] EXT4-fs: Ignoring removed bh option
[  213.079958][ T9576] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  213.149916][ T9576] EXT4-fs (loop2): 1 truncate cleaned up
[  213.171793][ T9576] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  213.257348][   T30] audit: type=1800 audit(1772027118.903:41): pid=9576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1218" name="file1" dev="loop2" ino=15 res=0 errno=0
[  213.460501][ T5828] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.574258][ T5821] block nbd2: Receive control failed (result -32)
[  213.681424][ T9591] loop4: detected capacity change from 0 to 128
[  213.688658][ T9591] EXT4-fs: Ignoring removed nobh option
[  213.834845][ T9591] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  213.921066][ T9584] loop3: detected capacity change from 0 to 32768
[  213.928840][ T9591] ext4 filesystem being mounted at /263/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  213.997279][ T9584] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  214.060375][ T9584] XFS (loop3): Ending clean mount
[  214.098553][ T9584] XFS (loop3): Quotacheck needed: Please wait.
[  214.108395][ T5820] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  214.331071][ T9584] XFS (loop3): Quotacheck: Done.
[  214.343661][ T9616] netlink: 'syz.4.1230': attribute type 7 has an invalid length.
[  214.454417][ T5827] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  214.727969][ T9622] loop0: detected capacity change from 0 to 512
[  214.761734][ T9622] EXT4-fs: Ignoring removed bh option
[  214.790756][   T24] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  214.802361][ T9622] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  214.838865][ T9611] loop2: detected capacity change from 0 to 32768
[  214.845156][ T9622] EXT4-fs (loop0): 1 truncate cleaned up
[  214.883813][ T9611] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  214.897617][ T9622] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  214.938368][   T30] audit: type=1800 audit(1772027120.583:42): pid=9622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1233" name="file1" dev="loop0" ino=15 res=0 errno=0
[  214.982698][   T24] usb 5-1: Using ep0 maxpacket: 8
[  215.007174][   T24] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  215.020421][   T24] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  215.029665][   T24] usb 5-1: Product: syz
[  215.034828][   T24] usb 5-1: Manufacturer: syz
[  215.039780][   T24] usb 5-1: SerialNumber: syz
[  215.047803][   T24] usb 5-1: config 0 descriptor??
[  215.070494][   T24] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  215.099382][ T9611] XFS (loop2): Ending clean mount
[  215.138251][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.229689][ T5828] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  215.416835][ T5821] block nbd3: Receive control failed (result -32)
[  215.611397][  T980] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  215.638234][   T30] audit: type=1400 audit(1772027121.283:43): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3A202020202030206B420A4C617A79467265653A202020202020202020202020202030206B420A416E6F6E4875676550616765733A20202020202020202030206B420A53686D656D506D644D61707065643A202020202020202030206B420A46696C65506D644D61707065643A20202020202020202030206B420A5368617265645F48756765746C623A202020202020202030206B420A50 pid=9649 comm="syz.3.1243"
[  215.703981][   T24] input: gspca_zc3xx as /devices/platform/dummy_hcd.4/usb5/5-1/input/input11
[  215.796314][  T980] usb 2-1: unable to get BOS descriptor or descriptor too short
[  215.831568][  T980] usb 2-1: no configurations
[  215.836396][  T980] usb 2-1: can't read configurations, error -22
[  215.926943][   T10] usb 5-1: USB disconnect, device number 13
[  216.348272][ T9671] trusted_key: encrypted_key: keyword '¦·date' not recognized
[  216.360225][ T9675] loop1: detected capacity change from 0 to 512
[  216.375006][ T9675] EXT4-fs: Ignoring removed bh option
[  216.393147][ T9675] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  216.425882][ T9675] EXT4-fs (loop1): 1 truncate cleaned up
[  216.444388][ T9675] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  216.516991][   T30] audit: type=1800 audit(1772027122.163:44): pid=9675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1248" name="file1" dev="loop1" ino=15 res=0 errno=0
[  216.643944][ T5818] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.722619][ T5821] block nbd4: Receive control failed (result -32)
[  217.059259][ T9697] loop4: detected capacity change from 0 to 8192
[  217.174461][ T9707] loop3: detected capacity change from 0 to 256
[  217.285080][ T9707] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x00949fb8, utbl_chksum : 0x7319d30d)
[  217.551172][ T5890] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  217.580132][ T9718] loop0: detected capacity change from 0 to 2048
[  217.665464][ T9722] loop1: detected capacity change from 0 to 128
[  217.691815][ T9725] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  217.724577][ T9722] EXT4-fs (loop1): Test dummy encryption mode enabled
[  217.732587][ T5890] usb 3-1: Using ep0 maxpacket: 32
[  217.747796][ T5890] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  217.777008][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.815394][ T5890] usb 3-1: config 0 descriptor??
[  217.818655][ T9722] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  217.879438][ T9722] ext4 filesystem being mounted at /258/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  218.025571][ T9734] loop4: detected capacity change from 0 to 512
[  218.030083][ T5890] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  218.058851][ T5890] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  218.066929][ T5818] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  218.104190][ T5890] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  218.130787][ T5890] usb 3-1: media controller created
[  218.167155][ T9734] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  218.174828][ T5890] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  218.226854][ T9711] az6027: more than 2 i2c messages at a time is not handled yet. TODO.
[  218.297235][ T9734] ext4 filesystem being mounted at /271/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  218.322664][ T5890] az6027: usb out operation failed. (-71)
[  218.331987][ T5890] az6027: usb out operation failed. (-71)
[  218.339868][ T5890] stb0899_attach: Driver disabled by Kconfig
[  218.368554][ T5890] az6027: no front-end attached
[  218.368554][ T5890] 
[  218.420921][ T5890] az6027: usb out operation failed. (-71)
[  218.427041][ T5890] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  218.457978][ T5890] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input12
[  218.513285][ T5820] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  218.524711][ T5890] dvb-usb: schedule remote query interval to 400 msecs.
[  218.559077][ T5890] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  218.606829][ T5890] usb 3-1: USB disconnect, device number 10
[  218.690397][ T9752] netem: unknown loss type 0
[  218.715309][ T9752] netem: change failed
[  218.861962][ T5890] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  219.385993][ T9777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1296'.
[  219.588686][ T9764] loop1: detected capacity change from 0 to 32768
[  219.655738][ T9764] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  219.713666][ T9764] XFS (loop1): Ending clean mount
[  219.753078][ T9764] XFS (loop1): Quotacheck needed: Please wait.
[  219.918545][ T9764] XFS (loop1): Quotacheck: Done.
[  219.957506][ T9789] loop4: detected capacity change from 0 to 512
[  220.116212][ T5818] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  220.321015][   T10] usb 5-1: new full-speed USB device number 14 using dummy_hcd
[  220.482929][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[  220.517923][   T10] usb 5-1: not running at top speed; connect to a high speed hub
[  220.532335][   T10] usb 5-1: config 5 has an invalid interface number: 2 but max is 0
[  220.540881][   T10] usb 5-1: config 5 has no interface number 0
[  220.547008][   T10] usb 5-1: config 5 interface 2 has no altsetting 0
[  220.556998][   T10] usb 5-1: New USB device found, idVendor=04f2, idProduct=b071, bcdDevice=40.b4
[  220.567001][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.591120][   T10] usb 5-1: Product: syz
[  220.595694][   T10] usb 5-1: Manufacturer: syz
[  220.600495][   T10] usb 5-1: SerialNumber: syz
[  220.842057][   T10] uvcvideo 5-1:5.2: probe with driver uvcvideo failed with error -22
[  220.875653][   T10] usb 5-1: USB disconnect, device number 14
[  220.876166][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  220.894684][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  220.904519][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  220.914940][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  220.926061][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  221.036241][ T9808] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  221.272504][ T9803] chnl_net:caif_netlink_parms(): no params data found
[  221.463064][ T9819] loop4: detected capacity change from 0 to 2048
[  221.488162][ T9819] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  221.542341][ T9824] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  221.599986][ T9803] bridge0: port 1(bridge_slave_0) entered blocking state
[  221.629912][ T9803] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.656962][ T9803] bridge_slave_0: entered allmulticast mode
[  221.686554][ T9803] bridge_slave_0: entered promiscuous mode
[  221.743194][ T9803] bridge0: port 2(bridge_slave_1) entered blocking state
[  221.762193][ T9803] bridge0: port 2(bridge_slave_1) entered disabled state
[  221.784645][ T9803] bridge_slave_1: entered allmulticast mode
[  221.804600][ T9803] bridge_slave_1: entered promiscuous mode
[  221.830982][   T24] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  221.884796][ T9803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  221.899385][ T9803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  221.964527][ T9803] team0: Port device team_slave_0 added
[  221.975826][ T9803] team0: Port device team_slave_1 added
[  222.023880][   T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  222.052704][ T9803] batman_adv: batadv0: Adding interface: batadv_slave_0
[  222.054369][ T5890] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  222.060297][ T9803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  222.068735][   T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  222.107641][   T24] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  222.118338][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.133959][ T9839] loop0: detected capacity change from 0 to 2048
[  222.148861][ T9803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  222.153011][   T24] usb 2-1: config 0 descriptor??
[  222.188227][ T9839] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 1344: 0x15 != 0x00
[  222.212309][   T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  222.214025][ T9803] batman_adv: batadv0: Adding interface: batadv_slave_1
[  222.219466][   T24] dvb-usb: bulk message failed: -22 (3/0)
[  222.238589][ T9803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  222.250782][ T9839] UDF-fs: warning (device loop0): udf_fill_super: No fileset found
[  222.267229][ T9803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  222.275256][ T5890] usb 3-1: Using ep0 maxpacket: 16
[  222.302455][   T24] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  222.321201][   T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  222.329561][ T5890] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  222.339526][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  222.368488][   T24] usb 2-1: media controller created
[  222.378933][ T5890] usb 3-1: Product: syz
[  222.386655][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  222.398876][ T5890] usb 3-1: Manufacturer: syz
[  222.426099][ T5890] usb 3-1: SerialNumber: syz
[  222.450228][   T24] dvb-usb: bulk message failed: -22 (6/0)
[  222.470793][ T5890] usb 3-1: config 0 descriptor??
[  222.476313][ T9841] loop0: detected capacity change from 0 to 1024
[  222.480789][   T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  222.537159][   T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input13
[  222.574570][ T9841] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  222.591220][ T9841] ext4 filesystem being mounted at /237/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  222.619562][   T24] dvb-usb: schedule remote query interval to 150 msecs.
[  222.651285][   T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  222.680278][ T9841] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1322: bg 0: block 112: padding at end of block bitmap is not set
[  222.684990][ T9837] loop4: detected capacity change from 0 to 32768
[  222.704869][ T9803] hsr_slave_0: entered promiscuous mode
[  222.740416][   T24] usb 3-1: USB disconnect, device number 11
[  222.743175][ T9841] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 117
[  222.760547][ T9837] BTRFS warning: excessive commit interval 34043, use with care
[  222.773239][ T9803] hsr_slave_1: entered promiscuous mode
[  222.811942][ T9803] debugfs: 'hsr0' already exists in 'hsr'
[  222.814373][ T5890] dvb-usb: bulk message failed: -22 (1/0)
[  222.821402][ T9837] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1320 (9837)
[  222.825563][ T9841] EXT4-fs (loop0): This should not happen!! Data will be lost
[  222.825563][ T9841] 
[  222.841047][ T9803] Cannot create hsr debugfs directory
[  222.849555][ T5890] dvb-usb: error while querying for an remote control event.
[  222.888204][  T980] usb 2-1: USB disconnect, device number 12
[  222.920885][ T9837] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  222.936878][  T980] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  222.946481][ T9837] BTRFS info (device loop4): using crc32c checksum algorithm
[  222.986643][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  223.001136][ T5821] Bluetooth: hci3: command tx timeout
[  223.156373][ T9837] BTRFS info (device loop4): rebuilding free space tree
[  223.199686][ T9837] BTRFS info (device loop4): checking UUID tree
[  223.218068][ T9837] BTRFS info (device loop4): setting nodatasum
[  223.254490][ T9837] BTRFS info (device loop4): allowing degraded mounts
[  223.321225][ T9837] BTRFS info (device loop4): setting nodatacow
[  223.328321][ T9837] BTRFS info (device loop4): enabling ssd optimizations
[  223.386632][ T9837] BTRFS info (device loop4): using spread ssd allocation scheme
[  223.439513][ T9837] BTRFS info (device loop4): disabling tree log
[  223.475540][ T9837] BTRFS info (device loop4): enabling free space tree
[  223.520119][ T9837] BTRFS info (device loop4): force clearing of disk cache
[  223.593635][ T9803] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  223.700516][ T9803] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  223.723533][ T9803] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  223.731519][ T9871] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.1326'.
[  223.763890][ T9803] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  223.773670][ T5820] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  223.902045][ T9863] loop0: detected capacity change from 0 to 32768
[  223.954330][ T9863] 
[  223.954330][ T9863]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  223.954330][ T9863] 
[  224.018752][ T9863] ERROR: (device loop0): diWrite: ixpxd invalid
[  224.018752][ T9863] 
[  224.056247][ T9863] ERROR: (device loop0): txCommit: 
[  224.056247][ T9863] 
[  224.095627][ T9863] ERROR: (device loop0): diWrite: ixpxd invalid
[  224.095627][ T9863] 
[  224.133856][ T9863] ERROR: (device loop0): txCommit: 
[  224.133856][ T9863] 
[  224.221004][  T980] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  224.257578][ T5829] 
[  224.257578][ T5829]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  224.257578][ T5829] 
[  224.271092][ T5829] 
[  224.271092][ T5829]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  224.271092][ T5829] 
[  224.332054][ T9803] 8021q: adding VLAN 0 to HW filter on device bond0
[  224.405909][ T9803] 8021q: adding VLAN 0 to HW filter on device team0
[  224.413005][  T980] usb 3-1: Using ep0 maxpacket: 8
[  224.426456][  T980] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  224.462354][  T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.477663][ T3552] bridge0: port 1(bridge_slave_0) entered blocking state
[  224.485366][ T3552] bridge0: port 1(bridge_slave_0) entered forwarding state
[  224.495759][  T980] usb 3-1: Product: syz
[  224.500209][  T980] usb 3-1: Manufacturer: syz
[  224.517501][ T3552] bridge0: port 2(bridge_slave_1) entered blocking state
[  224.526401][ T3552] bridge0: port 2(bridge_slave_1) entered forwarding state
[  224.540607][  T980] usb 3-1: SerialNumber: syz
[  224.552660][  T980] usb 3-1: config 0 descriptor??
[  224.562953][  T980] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  224.741796][ T9897] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1335'.
[  225.081047][ T5821] Bluetooth: hci3: command tx timeout
[  225.123053][ T9803] 8021q: adding VLAN 0 to HW filter on device batadv0
[  225.372416][  T980] gspca_sonixj: reg_r err -71
[  225.387613][  T980] sonixj 3-1:0.0: probe with driver sonixj failed with error -71
[  225.412840][  T980] usb 3-1: USB disconnect, device number 12
[  225.513374][ T9903] loop0: detected capacity change from 0 to 32768
[  225.555974][ T9903] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  225.609424][ T9930] ªªªªªª: renamed from vlan0 (while UP)
[  225.644597][ T9903] XFS (loop0): Ending clean mount
[  225.666590][ T9803] veth0_vlan: entered promiscuous mode
[  225.686411][ T9903] XFS (loop0): Quotacheck needed: Please wait.
[  225.728346][ T9803] veth1_vlan: entered promiscuous mode
[  225.775261][ T9803] veth0_macvtap: entered promiscuous mode
[  225.788983][ T9903] XFS (loop0): Quotacheck: Done.
[  225.818837][ T9803] veth1_macvtap: entered promiscuous mode
[  225.916833][ T9803] batman_adv: batadv0: Interface activated: batadv_slave_0
[  225.944613][ T9803] batman_adv: batadv0: Interface activated: batadv_slave_1
[  225.955533][ T5829] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  225.987227][  T127] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  226.004941][  T127] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  226.063605][  T127] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  226.086598][  T127] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  226.178347][ T9944] loop1: detected capacity change from 0 to 128
[  226.274177][ T9944] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  226.316158][ T9944] ext4 filesystem being mounted at /280/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  226.389578][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  226.432048][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  226.538823][ T5818] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  226.558465][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  226.572833][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  226.973356][ T9969] netlink: 'syz.5.1306': attribute type 15 has an invalid length.
[  227.166048][ T5821] Bluetooth: hci3: command tx timeout
[  227.245504][ T9985] loop5: detected capacity change from 0 to 512
[  227.506620][ T9990] loop1: detected capacity change from 0 to 1024
[  227.593488][ T9990] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  227.625706][ T9992] loop2: detected capacity change from 0 to 16
[  227.698415][ T9992] erofs (device loop2): mounted with root inode @ nid 36.
[  227.752966][ T5818] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  227.897706][ T9998] syzkaller0: tun_chr_ioctl cmd 1074812117
[  228.120050][ T9984] loop4: detected capacity change from 0 to 32768
[  228.164452][ T9984] BTRFS: device fsid 8f67342e-760a-4d9f-bdfe-dfdef307742f devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1365 (9984)
[  228.211258][ T9984] BTRFS info (device loop4): first mount of filesystem 8f67342e-760a-4d9f-bdfe-dfdef307742f
[  228.241782][ T9984] BTRFS info (device loop4): using sha256 checksum algorithm
[  228.379100][ T9984] BTRFS info (device loop4): enabling ssd optimizations
[  228.442741][ T9984] BTRFS info (device loop4): turning on async discard
[  228.449844][ T9984] BTRFS info (device loop4): enabling free space tree
[  228.482833][T10035] loop2: detected capacity change from 0 to 512
[  228.490896][T10033] loop0: detected capacity change from 0 to 1024
[  228.494830][T10035] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.1378: inode has both inline data and extents flags
[  228.513347][T10035] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  228.521088][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  228.537451][    C0] EXT4-fs (loop2): initial error at time 1772027134: ext4_orphan_get:1391: inode 15
[  228.547527][    C0] EXT4-fs (loop2): last error at time 1772027134: ext4_orphan_get:1391: inode 15
[  228.554095][T10035] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1378: couldn't read orphan inode 15 (err -117)
[  228.611952][T10033] EXT4-fs: Ignoring removed orlov option
[  228.647183][ T9996] loop5: detected capacity change from 0 to 32768
[  228.669325][T10033] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[  228.723792][T10035] loop2: lost filesystem error report for type 5 error -117
[  228.726660][T10035] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback.
[  228.733876][T10033] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  228.808589][T10033] EXT4-fs (loop0): invalid journal inode
[  228.812382][ T9996] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  228.814786][T10033] EXT4-fs (loop0): can't get journal size
[  228.834430][T10033] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  228.836784][ T5820] BTRFS info (device loop4): last unmount of filesystem 8f67342e-760a-4d9f-bdfe-dfdef307742f
[  228.889076][   T30] audit: type=1800 audit(1772027134.523:45): pid=10035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1378" name="file1" dev="loop2" ino=18 res=0 errno=0
[  228.922424][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.073956][ T5828] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000070000.
[  229.140549][ T9996] XFS (loop5): Ending clean mount
[  229.208861][ T9996] XFS (loop5): Quotacheck needed: Please wait.
[  229.242874][ T5821] Bluetooth: hci3: command tx timeout
[  229.369018][ T9996] XFS (loop5): Quotacheck: Done.
[  229.537452][T10060] loop2: detected capacity change from 0 to 256
[  229.570423][ T9803] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  229.631328][T10060] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d)
[  230.404689][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  230.422082][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  230.430301][T10065] loop4: detected capacity change from 0 to 40427
[  230.437648][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  230.455048][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  230.463020][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  230.473732][T10065] F2FS-fs (loop4): Invalid SB checksum offset: 0
[  230.489576][T10065] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  230.523757][T10065] F2FS-fs (loop4): invalid crc value
[  230.630959][ T5923] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  230.681153][T10065] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  230.707343][T10065] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  230.730726][T10065] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  230.791583][ T5923] usb 3-1: Using ep0 maxpacket: 16
[  230.815419][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  230.838783][ T5923] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  230.857640][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.867748][T10065] F2FS-fs (loop4): Stopped filesystem due to reason: 0
[  230.871116][ T5923] usb 3-1: config 0 descriptor??
[  230.961888][T10081] chnl_net:caif_netlink_parms(): no params data found
[  231.046810][T10085] loop5: detected capacity change from 0 to 40427
[  231.095318][T10085] F2FS-fs (loop5): build fault injection rate: 771
[  231.158815][T10085] F2FS-fs (loop5): invalid crc value
[  231.248239][T10081] bridge0: port 1(bridge_slave_0) entered blocking state
[  231.260957][T10081] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.282031][T10081] bridge_slave_0: entered allmulticast mode
[  231.291083][T10081] bridge_slave_0: entered promiscuous mode
[  231.298748][ T5923] mcp2221 0003:04D8:00DD.000D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0
[  231.300363][T10081] bridge0: port 2(bridge_slave_1) entered blocking state
[  231.333103][T10081] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.346294][T10085] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  231.357617][T10081] bridge_slave_1: entered allmulticast mode
[  231.376595][T10081] bridge_slave_1: entered promiscuous mode
[  231.383446][T10085] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  231.420826][   T30] audit: type=1800 audit(1772027137.063:46): pid=10085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1401" name="file1" dev="loop5" ino=10 res=0 errno=0
[  231.443106][  T980] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  231.459022][ T9803] syz-executor: attempt to access beyond end of device
[  231.459022][ T9803] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  231.490002][ T9803] CPU: 1 UID: 0 PID: 9803 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  231.490032][ T9803] Tainted: [L]=SOFTLOCKUP
[  231.490039][ T9803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  231.490049][ T9803] Call Trace:
[  231.490056][ T9803]  <TASK>
[  231.490063][ T9803]  dump_stack_lvl+0xe8/0x150
[  231.490093][ T9803]  f2fs_handle_critical_error+0x37c/0x540
[  231.490122][ T9803]  f2fs_write_end_io+0xcdb/0xff0
[  231.490163][ T9803]  __submit_merged_bio+0x256/0x700
[  231.490191][ T9803]  __submit_merged_write_cond+0x3c9/0x4e0
[  231.490231][ T9803]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  231.490277][ T9803]  f2fs_write_data_pages+0x2975/0x35e0
[  231.490338][ T9803]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  231.490405][ T9803]  ? arch_stack_walk+0xfb/0x150
[  231.490441][ T9803]  ? __lock_acquire+0x6b5/0x2cf0
[  231.490480][ T9803]  ? __lock_acquire+0x6b5/0x2cf0
[  231.490507][ T9803]  ? do_raw_spin_lock+0x12b/0x2f0
[  231.490537][ T9803]  ? do_raw_spin_unlock+0xf5/0x210
[  231.490556][ T9803]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  231.490579][ T9803]  do_writepages+0x32e/0x550
[  231.490612][ T9803]  ? do_raw_spin_unlock+0xf5/0x210
[  231.490637][ T9803]  filemap_fdatawrite+0x1e9/0x2f0
[  231.490662][ T9803]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  231.490727][ T9803]  ? do_raw_spin_unlock+0xf5/0x210
[  231.490749][ T9803]  f2fs_sync_dirty_inodes+0x30e/0x860
[  231.490786][ T9803]  f2fs_write_checkpoint+0x9df/0x26a0
[  231.490842][ T9803]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  231.490911][ T9803]  ? kfree+0x1c1/0x630
[  231.490935][ T9803]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  231.490965][ T9803]  kill_f2fs_super+0x314/0x720
[  231.490992][ T9803]  ? __pfx_kill_f2fs_super+0x10/0x10
[  231.491025][ T9803]  ? lockdep_hardirqs_on+0x7a/0x110
[  231.491059][ T9803]  deactivate_locked_super+0xbc/0x130
[  231.491087][ T9803]  cleanup_mnt+0x437/0x4d0
[  231.491105][ T9803]  ? _raw_spin_unlock_irq+0x23/0x50
[  231.491128][ T9803]  task_work_run+0x1d9/0x270
[  231.491149][ T9803]  ? __pfx_task_work_run+0x10/0x10
[  231.491179][ T9803]  exit_to_user_mode_loop+0xed/0x480
[  231.491196][ T9803]  ? rcu_is_watching+0x15/0xb0
[  231.491233][ T9803]  do_syscall_64+0x32d/0xf80
[  231.491255][ T9803]  ? trace_irq_disable+0x3b/0x150
[  231.491278][ T9803]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.491297][ T9803]  ? clear_bhb_loop+0x40/0x90
[  231.491319][ T9803]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.491335][ T9803] RIP: 0033:0x7ff7b379d897
[  231.491352][ T9803] Code: a2 c7 05 5c ee 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  231.491368][ T9803] RSP: 002b:00007fffed0b8d88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  231.491386][ T9803] RAX: 0000000000000000 RBX: 00007ff7b3831ef0 RCX: 00007ff7b379d897
[  231.491398][ T9803] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffed0b8e40
[  231.491409][ T9803] RBP: 00007fffed0b8e40 R08: 00007fffed0b9e40 R09: 00000000ffffffff
[  231.491421][ T9803] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffed0b9ed0
[  231.491432][ T9803] R13: 00007ff7b3831ef0 R14: 00000000000387ef R15: 00007fffed0b9f10
[  231.491464][ T9803]  </TASK>
[  231.515233][T10081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  231.532846][ T9803] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  231.560323][T10081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  231.752648][ T5890] usb 3-1: USB disconnect, device number 13
[  231.771070][  T980] usb 5-1: Using ep0 maxpacket: 8
[  231.876190][T10081] team0: Port device team_slave_0 added
[  231.942463][  T980] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7
[  231.958420][T10081] team0: Port device team_slave_1 added
[  231.972706][  T980] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  231.991004][  T980] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  231.999463][  T980] usb 5-1: Product: syz
[  232.034319][  T980] usb 5-1: Manufacturer: syz
[  232.050326][T10109] loop0: detected capacity change from 0 to 512
[  232.057074][  T980] usb 5-1: SerialNumber: syz
[  232.099712][T10109] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.1407: inode has both inline data and extents flags
[  232.110348][T10081] batman_adv: batadv0: Adding interface: batadv_slave_0
[  232.131242][T10081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  232.141112][T10109] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  232.161774][T10081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  232.185873][T10081] batman_adv: batadv0: Adding interface: batadv_slave_1
[  232.194907][T10081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  232.224335][T10081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  232.231502][T10109] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1407: couldn't read orphan inode 15 (err -117)
[  232.248153][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  232.248183][    C0] EXT4-fs (loop0): initial error at time 1772027137: ext4_orphan_get:1391: inode 15
[  232.248211][    C0] EXT4-fs (loop0): last error at time 1772027137: ext4_orphan_get:1391: inode 15
[  232.283177][  T980] usb 5-1: Handspring Visor / Palm OS: No valid connect info available
[  232.299452][  T980] usb 5-1: Handspring Visor / Palm OS: port 0, is for HotSync use
[  232.308085][  T980] usb 5-1: Handspring Visor / Palm OS: port 0, is for Generic use
[  232.326786][  T980] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2
[  232.345526][T10081] hsr_slave_0: entered promiscuous mode
[  232.351724][T10109] loop0: lost filesystem error report for type 5 error -117
[  232.353488][T10109] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  232.359429][T10081] hsr_slave_1: entered promiscuous mode
[  232.414119][T10114] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1408'.
[  232.425717][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.436569][T10081] debugfs: 'hsr0' already exists in 'hsr'
[  232.454205][T10081] Cannot create hsr debugfs directory
[  232.460552][T10114] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1408'.
[  232.502196][  T980] usb 5-1: palm_os_3_probe - error -71 getting bytes available request
[  232.521349][  T980] visor 5-1:1.0: Handspring Visor / Palm OS converter detected
[  232.521644][ T5835] Bluetooth: hci0: command tx timeout
[  232.550223][  T980] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  232.673679][  T980] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  232.700463][  T980] usb 5-1: USB disconnect, device number 15
[  232.751404][  T980] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  232.803336][  T980] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  232.821462][  T980] visor 5-1:1.0: device disconnected
[  233.510825][  T980] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  233.567073][T10120] loop2: detected capacity change from 0 to 131072
[  233.573588][T10081] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  233.583406][T10120] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0)
[  233.592466][T10120] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  233.615342][T10120] F2FS-fs (loop2): invalid crc value
[  233.659682][T10081] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  233.696853][T10120] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  233.701183][  T980] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  233.719081][T10120] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  233.728305][T10120] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  233.745012][T10081] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  233.756770][T10118] loop0: detected capacity change from 0 to 32768
[  233.791002][T10081] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  233.800061][  T980] usb 5-1: config 0 interface 0 has no altsetting 0
[  233.843663][T10118] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  233.874147][  T980] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  233.911514][  T980] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  233.931525][  T980] usb 5-1: Product: syz
[  233.935900][  T980] usb 5-1: Manufacturer: syz
[  233.940524][  T980] usb 5-1: SerialNumber: syz
[  233.958257][  T980] usb 5-1: config 0 descriptor??
[  233.978949][  T980] usb 5-1: selecting invalid altsetting 0
[  233.995555][T10118] XFS (loop0): Ending clean mount
[  234.046834][T10118] XFS (loop0): Quotacheck needed: Please wait.
[  234.207467][T10118] XFS (loop0): Quotacheck: Done.
[  234.347231][ T5829] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  234.351123][T10153] loop5: detected capacity change from 0 to 1024
[  234.409848][T10153] EXT4-fs (loop5): bad geometry: block count 4294901760 exceeds size of device (512 blocks)
[  234.450152][T10081] 8021q: adding VLAN 0 to HW filter on device bond0
[  234.523479][T10081] 8021q: adding VLAN 0 to HW filter on device team0
[  234.584330][ T3589] bridge0: port 1(bridge_slave_0) entered blocking state
[  234.591671][ T3589] bridge0: port 1(bridge_slave_0) entered forwarding state
[  234.625392][ T5835] Bluetooth: hci0: command tx timeout
[  234.715734][ T3589] bridge0: port 2(bridge_slave_1) entered blocking state
[  234.723589][ T3589] bridge0: port 2(bridge_slave_1) entered forwarding state
[  234.891546][   T29] usb 5-1: USB disconnect, device number 16
[  235.110076][T10150] loop2: detected capacity change from 0 to 32768
[  235.215290][T10150] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  235.308368][T10150] XFS (loop2): Ending clean mount
[  235.341585][T10150] XFS (loop2): Quotacheck needed: Please wait.
[  235.443574][T10174] loop0: detected capacity change from 0 to 4096
[  235.469272][T10150] XFS (loop2): Quotacheck: Done.
[  235.528577][T10081] 8021q: adding VLAN 0 to HW filter on device batadv0
[  235.547003][T10181] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  235.605698][ T5828] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  235.859298][T10185] loop4: detected capacity change from 0 to 4096
[  235.921262][T10185] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  236.474806][T10081] veth0_vlan: entered promiscuous mode
[  236.511630][T10199] block nbd5: server does not support multiple connections per device.
[  236.529235][T10199] block nbd5: shutting down sockets
[  236.534195][T10081] veth1_vlan: entered promiscuous mode
[  236.687462][T10081] veth0_macvtap: entered promiscuous mode
[  236.710845][ T5835] Bluetooth: hci0: command tx timeout
[  236.718241][T10189] loop2: detected capacity change from 0 to 32768
[  236.736646][T10081] veth1_macvtap: entered promiscuous mode
[  236.764922][T10189] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1423 (10189)
[  236.767954][T10081] batman_adv: batadv0: Interface activated: batadv_slave_0
[  236.799171][T10081] batman_adv: batadv0: Interface activated: batadv_slave_1
[  236.826651][   T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  236.845679][T10189] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  236.884019][T10189] BTRFS info (device loop2): using crc32c checksum algorithm
[  236.894291][T10189] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  236.921692][   T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  236.932941][   T58] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  236.972178][    T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  236.997890][   T58] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  237.127178][T10189] BTRFS info (device loop2): rebuilding free space tree
[  237.147866][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  237.164454][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  237.175949][    T9] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  237.192334][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.192351][T10189] BTRFS info (device loop2): disabling free space tree
[  237.192454][T10189] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  237.206055][    T9] usb 5-1: config 0 descriptor??
[  237.236760][T10189] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  237.258964][T10189] BTRFS info (device loop2): enabling ssd optimizations
[  237.273796][T10189] BTRFS info (device loop2): turning on async discard
[  237.280921][ T3589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  237.294136][T10189] BTRFS info (device loop2): enabling disk space caching
[  237.303834][T10189] BTRFS info (device loop2): force clearing of disk cache
[  237.319901][ T3589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  237.327326][T10189] BTRFS info (device loop2): use zstd compression, level 3
[  237.438126][ T3589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  237.458789][ T3589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  237.664353][    T9] playstation 0003:054C:0DF2.000E: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0
[  237.735262][ T5828] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  237.862649][    T9] playstation 0003:054C:0DF2.000E: Invalid byte count transferred, expected 20 got 0
[  237.891822][    T9] playstation 0003:054C:0DF2.000E: Failed to retrieve DualSense pairing info: -22
[  237.924977][    T9] playstation 0003:054C:0DF2.000E: Failed to get MAC address from DualSense
[  237.967250][    T9] playstation 0003:054C:0DF2.000E: Failed to create dualsense.
[  238.027748][    T9] playstation 0003:054C:0DF2.000E: probe with driver playstation failed with error -22
[  238.111084][    T9] usb 5-1: USB disconnect, device number 17
[  238.150166][T10213] loop5: detected capacity change from 0 to 40427
[  238.199466][T10213] F2FS-fs: heap/no_heap options were deprecated
[  238.232604][T10213] F2FS-fs (loop5): build fault injection rate: 19
[  238.239187][T10213] F2FS-fs (loop5): build fault injection type: 0x77e8c
[  238.249655][T10213] F2FS-fs (loop5): invalid crc value
[  238.309426][T10213] F2FS-fs (loop5): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x21c/0xd60
[  238.363737][T10213] F2FS-fs (loop5): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_bio+0x18f/0xaa0
[  238.403315][T10239] loop6: detected capacity change from 0 to 8192
[  238.421595][    C0] F2FS-fs (loop5): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  238.567377][T10229] loop0: detected capacity change from 0 to 32768
[  238.626920][T10229] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  238.670006][T10229] JBD2: Ignoring recovery information on journal
[  238.745289][T10213] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  238.766414][ T5835] Bluetooth: hci0: command tx timeout
[  238.768484][T10251] loop6: detected capacity change from 0 to 256
[  238.846123][T10213] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  238.862864][T10229] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  238.864590][T10213] F2FS-fs (loop5): inject dquot initialize in f2fs_dquot_initialize of f2fs_new_inode+0x525/0xff0
[  238.892740][T10213] F2FS-fs (loop5): inject dquot initialize in f2fs_dquot_initialize of f2fs_new_inode+0x525/0xff0
[  239.011014][ T9803] syz-executor: attempt to access beyond end of device
[  239.011014][ T9803] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  239.031188][ T9803] CPU: 1 UID: 0 PID: 9803 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  239.031217][ T9803] Tainted: [L]=SOFTLOCKUP
[  239.031223][ T9803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  239.031233][ T9803] Call Trace:
[  239.031239][ T9803]  <TASK>
[  239.031245][ T9803]  dump_stack_lvl+0xe8/0x150
[  239.031272][ T9803]  f2fs_handle_critical_error+0x37c/0x540
[  239.031297][ T9803]  f2fs_write_end_io+0xcdb/0xff0
[  239.031316][ T9803]  ? __submit_merged_bio+0x256/0x700
[  239.031345][ T9803]  __submit_merged_bio+0x256/0x700
[  239.031369][ T9803]  __submit_merged_write_cond+0x3c9/0x4e0
[  239.031394][ T9803]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  239.031434][ T9803]  f2fs_write_data_pages+0x2975/0x35e0
[  239.031483][ T9803]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  239.031517][ T9803]  ? css_rstat_updated+0x23a/0x530
[  239.031561][ T9803]  ? rcu_is_watching+0x15/0xb0
[  239.031585][ T9803]  ? mod_memcg_lruvec_state+0x1b8/0x360
[  239.031614][ T9803]  ? __lock_acquire+0x6b5/0x2cf0
[  239.031650][ T9803]  ? __lock_acquire+0x6b5/0x2cf0
[  239.031677][ T9803]  ? do_raw_spin_lock+0x12b/0x2f0
[  239.031706][ T9803]  ? do_raw_spin_unlock+0xf5/0x210
[  239.031732][ T9803]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  239.031756][ T9803]  do_writepages+0x32e/0x550
[  239.031790][ T9803]  ? do_raw_spin_unlock+0xf5/0x210
[  239.031812][ T9803]  filemap_fdatawrite+0x1e9/0x2f0
[  239.031839][ T9803]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  239.031907][ T9803]  ? do_raw_spin_unlock+0xf5/0x210
[  239.031930][ T9803]  f2fs_sync_dirty_inodes+0x30e/0x860
[  239.031964][ T9803]  f2fs_write_checkpoint+0x9df/0x26a0
[  239.032017][ T9803]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  239.032081][ T9803]  kill_f2fs_super+0x314/0x720
[  239.032107][ T9803]  ? __pfx_kill_f2fs_super+0x10/0x10
[  239.032137][ T9803]  ? lockdep_hardirqs_on+0x7a/0x110
[  239.032170][ T9803]  deactivate_locked_super+0xbc/0x130
[  239.032195][ T9803]  cleanup_mnt+0x437/0x4d0
[  239.032211][ T9803]  ? _raw_spin_unlock_irq+0x23/0x50
[  239.032232][ T9803]  task_work_run+0x1d9/0x270
[  239.032251][ T9803]  ? __pfx_task_work_run+0x10/0x10
[  239.032276][ T9803]  exit_to_user_mode_loop+0xed/0x480
[  239.032293][ T9803]  ? rcu_is_watching+0x15/0xb0
[  239.032318][ T9803]  do_syscall_64+0x32d/0xf80
[  239.032337][ T9803]  ? trace_irq_disable+0x3b/0x150
[  239.032359][ T9803]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.032376][ T9803]  ? clear_bhb_loop+0x40/0x90
[  239.032395][ T9803]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.032411][ T9803] RIP: 0033:0x7ff7b379d897
[  239.032429][ T9803] Code: a2 c7 05 5c ee 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  239.032442][ T9803] RSP: 002b:00007fffed0b8d88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  239.032460][ T9803] RAX: 0000000000000000 RBX: 00007ff7b3831ef0 RCX: 00007ff7b379d897
[  239.032470][ T9803] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffed0b8e40
[  239.032479][ T9803] RBP: 00007fffed0b8e40 R08: 00007fffed0b9e40 R09: 00000000ffffffff
[  239.032488][ T9803] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffed0b9ed0
[  239.032496][ T9803] R13: 00007ff7b3831ef0 R14: 000000000003a544 R15: 00007fffed0b9f10
[  239.032520][ T9803]  </TASK>
[  239.032526][ T9803] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  239.484978][ T5829] ocfs2: Unmounting device (7,0) on (node local)
[  239.683751][T10256] loop4: detected capacity change from 0 to 40427
[  239.697679][T10256] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  239.709134][T10256] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  239.796686][T10256] F2FS-fs (loop4): invalid crc value
[  240.014736][T10256] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  240.056738][T10256] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  240.082428][T10256] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  240.207105][T10282] loop5: detected capacity change from 0 to 2048
[  240.290445][T10287] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  240.363032][   T30] audit: type=1800 audit(1772027146.013:47): pid=10282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1454" name="file2" dev="loop5" ino=16 res=0 errno=0
[  240.363918][T10282] NILFS error (device loop5): nilfs_lookup: deleted inode referenced: 12
[  240.539773][T10282] Remounting filesystem read-only
[  240.762957][T10298] loop6: detected capacity change from 0 to 64
[  240.867958][ T9803] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer
[  241.029644][T10284] loop0: detected capacity change from 0 to 32768
[  241.122719][T10284] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  241.236989][T10315] loop6: detected capacity change from 0 to 2048
[  241.293988][T10315] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  241.347675][T10315] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  241.395444][T10284] XFS (loop0): Ending clean mount
[  241.529175][T10081] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.549712][ T5829] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  241.811301][ T5890] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[  241.962275][T10343] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1476'.
[  242.003004][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  242.041945][ T5890] usb 3-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00
[  242.061289][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.086820][ T5890] usb 3-1: config 0 descriptor??
[  242.109143][T10331] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  242.189356][T10335] loop4: detected capacity change from 0 to 32768
[  242.269286][T10335] JBD2: Ignoring recovery information on journal
[  242.415552][T10335] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  242.574761][ T5890] hid (null): unknown global tag 0xe
[  242.583828][T10335] (syz.4.1474,10335,1):ocfs2_verify_group_and_input:428 ERROR: add a group which is in the current volume.
[  242.613666][ T5890] bigben 0003:146B:0902.000F: unexpected rdesc, please submit for review
[  242.643314][ T5890] bigben 0003:146B:0902.000F: unknown global tag 0xe
[  242.660746][T10335] (syz.4.1474,10335,1):ocfs2_group_add:511 ERROR: status = -22
[  242.678937][ T5890] bigben 0003:146B:0902.000F: item 0 2 1 14 parsing failed
[  242.698679][T10363] loop0: detected capacity change from 0 to 128
[  242.711977][ T5890] bigben 0003:146B:0902.000F: parse failed
[  242.720290][T10363] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  242.730798][ T5890] bigben 0003:146B:0902.000F: probe with driver bigben failed with error -22
[  242.761212][T10363] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  242.806166][ T5890] usb 3-1: USB disconnect, device number 14
[  242.849017][ T5820] ocfs2: Unmounting device (7,4) on (node local)
[  242.899034][   T36] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  242.945871][T10348] loop6: detected capacity change from 0 to 32768
[  242.977018][T10348] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1478 (10348)
[  243.028466][T10348] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  243.065610][T10348] BTRFS info (device loop6): using sha256 checksum algorithm
[  243.205436][T10348] BTRFS info (device loop6): rebuilding free space tree
[  243.275998][T10348] BTRFS info (device loop6): disabling free space tree
[  243.301715][T10348] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  243.322484][T10348] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  243.362734][T10348] BTRFS info (device loop6): enabling ssd optimizations
[  243.380350][T10348] BTRFS info (device loop6): turning on async discard
[  243.401103][T10348] BTRFS info (device loop6): force clearing of disk cache
[  243.432666][T10348] BTRFS info (device loop6): enabling auto defrag
[  243.439259][T10348] BTRFS info (device loop6): max_inline set to 4096
[  243.484945][T10362] loop5: detected capacity change from 0 to 32768
[  243.563368][T10362] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  243.632680][T10081] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  243.817015][T10362] XFS (loop5): Ending clean mount
[  243.864287][T10362] XFS (loop5): Quotacheck needed: Please wait.
[  244.015461][T10362] XFS (loop5): Quotacheck: Done.
[  244.102981][T10410] loop4: detected capacity change from 0 to 2048
[  244.132582][ T9803] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  244.187091][T10410] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  244.286001][ T5833] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  244.303216][   T30] audit: type=1800 audit(1772027149.953:48): pid=10410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1498" name="file1" dev="loop4" ino=1415 res=0 errno=0
[  244.389489][T10409] UDF-fs: warning (device loop4): udf_truncate_tail_extent: Too long extent after EOF in inode 1415: i_size: 34816 lbcount: 36864 extent 129+4096
[  244.472768][ T5833] usb 7-1: Using ep0 maxpacket: 32
[  244.544170][ T5833] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  244.561095][ T5833] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.612012][ T5833] usb 7-1: config 0 descriptor??
[  244.824360][ T5833] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  244.850582][ T5833] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  244.888320][ T5833] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  244.913677][ T5833] usb 7-1: media controller created
[  244.960055][ T5833] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  245.026792][ T5833] az6027: usb out operation failed. (-71)
[  245.051018][ T5833] az6027: usb out operation failed. (-71)
[  245.059108][ T5833] stb0899_attach: Driver disabled by Kconfig
[  245.070701][ T5833] az6027: no front-end attached
[  245.070701][ T5833] 
[  245.097110][ T5833] az6027: usb out operation failed. (-71)
[  245.106839][ T5833] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  245.151733][ T5833] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input14
[  245.184312][ T5833] dvb-usb: schedule remote query interval to 400 msecs.
[  245.214978][ T5833] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  245.310798][ T5833] usb 7-1: USB disconnect, device number 2
[  245.418777][ T5821] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  245.434421][ T5821] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  245.444464][ T5821] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  245.451440][T10437] netlink: 'syz.5.1510': attribute type 1 has an invalid length.
[  245.471243][ T5821] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  245.489701][ T5821] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  245.503224][T10437] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1510'.
[  245.514920][T10437] netlink: 'syz.5.1510': attribute type 1 has an invalid length.
[  245.557767][ T5833] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  245.856320][T10452] loop6: detected capacity change from 0 to 512
[  245.892193][T10452] EXT4-fs: Ignoring removed nomblk_io_submit option
[  245.914969][T10452] EXT4-fs: Invalid want_extra_isize 4
[  246.134463][   T30] audit: type=1326 audit(1772027151.783:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10457 comm="syz.6.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863799c629 code=0x7ffc0000
[  246.180606][T10444] loop0: detected capacity change from 0 to 32768
[  246.220979][   T30] audit: type=1326 audit(1772027151.783:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10457 comm="syz.6.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863799c629 code=0x7ffc0000
[  246.246068][   T30] audit: type=1326 audit(1772027151.813:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10457 comm="syz.6.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f863799c629 code=0x7ffc0000
[  246.259405][T10444] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  246.269848][   T30] audit: type=1326 audit(1772027151.813:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10457 comm="syz.6.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863799c629 code=0x7ffc0000
[  246.371405][   T30] audit: type=1326 audit(1772027151.813:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10457 comm="syz.6.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f863799c629 code=0x7ffc0000
[  246.398281][   T30] audit: type=1326 audit(1772027151.873:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10457 comm="syz.6.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f863793da19 code=0x7ffc0000
[  246.511595][T10436] chnl_net:caif_netlink_parms(): no params data found
[  246.564383][   T30] audit: type=1326 audit(1772027151.873:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10457 comm="syz.6.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f863793da19 code=0x7ffc0000
[  246.629845][T10444] XFS (loop0): Ending clean mount
[  246.643829][   T30] audit: type=1326 audit(1772027151.873:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10457 comm="syz.6.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f863793da19 code=0x7ffc0000
[  246.668846][T10444] XFS (loop0): Quotacheck needed: Please wait.
[  246.686088][   T30] audit: type=1326 audit(1772027151.873:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10457 comm="syz.6.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f863793da19 code=0x7ffc0000
[  246.781102][   T30] audit: type=1326 audit(1772027151.873:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10457 comm="syz.6.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f863793da19 code=0x7ffc0000
[  246.829137][T10436] bridge0: port 1(bridge_slave_0) entered blocking state
[  246.839104][T10436] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.848283][T10436] bridge_slave_0: entered allmulticast mode
[  246.872032][T10444] XFS (loop0): Quotacheck: Done.
[  246.915384][T10436] bridge_slave_0: entered promiscuous mode
[  246.925344][ T5829] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  246.962715][T10436] bridge0: port 2(bridge_slave_1) entered blocking state
[  246.992790][T10436] bridge0: port 2(bridge_slave_1) entered disabled state
[  247.005288][T10436] bridge_slave_1: entered allmulticast mode
[  247.034280][T10436] bridge_slave_1: entered promiscuous mode
[  247.352081][T10436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  247.407245][T10436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  247.463714][T10486] loop6: detected capacity change from 0 to 512
[  247.507630][  T980] hid_parser_main: 5 callbacks suppressed
[  247.507658][  T980] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  247.541306][T10486] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.1526: inode has both inline data and extents flags
[  247.563113][T10486] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  247.564311][T10486] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.1526: couldn't read orphan inode 15 (err -117)
[  247.574474][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  247.574498][    C0] EXT4-fs (loop6): initial error at time 1772027153: ext4_orphan_get:1391: inode 15
[  247.574531][    C0] EXT4-fs (loop6): last error at time 1772027153: ext4_orphan_get:1391: inode 15
[  247.587774][ T5821] Bluetooth: hci2: command tx timeout
[  247.638347][T10436] team0: Port device team_slave_0 added
[  247.646921][  T980] hid-generic 0000:0000:0000.0010: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  247.652292][T10486] loop6: lost filesystem error report for type 5 error -117
[  247.718702][T10436] team0: Port device team_slave_1 added
[  247.756276][T10486] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  247.849519][T10484] loop4: detected capacity change from 0 to 32768
[  247.886659][T10484] XFS (loop4): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  247.907484][T10081] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  247.972282][T10436] batman_adv: batadv0: Adding interface: batadv_slave_0
[  247.979774][T10436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  248.018186][T10436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  248.034682][T10436] batman_adv: batadv0: Adding interface: batadv_slave_1
[  248.043731][T10436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  248.056606][T10484] XFS (loop4): Starting recovery (logdev: internal)
[  248.074476][T10436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  248.158228][T10484] XFS (loop4): Ending recovery (logdev: internal)
[  248.218625][T10436] hsr_slave_0: entered promiscuous mode
[  248.227806][T10436] hsr_slave_1: entered promiscuous mode
[  248.245380][T10436] debugfs: 'hsr0' already exists in 'hsr'
[  248.260189][T10436] Cannot create hsr debugfs directory
[  248.353460][ T5820] XFS (loop4): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  248.717411][T10512] loop4: detected capacity change from 0 to 256
[  248.738806][T10512] exfat: Deprecated parameter 'utf8'
[  248.766696][T10512] exfat: Deprecated parameter 'utf8'
[  248.773123][T10512] exfat: Deprecated parameter 'utf8'
[  248.830031][T10512] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  249.076451][T10515] loop4: detected capacity change from 0 to 128
[  249.138019][T10515] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  249.181747][T10515] ext4 filesystem being mounted at /314/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  249.184806][T10436] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  249.224002][T10436] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  249.252803][T10436] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  249.266242][T10436] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  249.275907][T10510] loop0: detected capacity change from 0 to 40427
[  249.286870][T10515] fscrypt (loop4, inode 12): Direct key flag not allowed with different contents and filenames modes
[  249.440944][ T5820] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  249.625175][T10535] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1537'.
[  249.640878][ T5821] Bluetooth: hci2: command tx timeout
[  249.649088][T10510] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  249.669530][T10510] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  249.699357][T10436] 8021q: adding VLAN 0 to HW filter on device bond0
[  249.703212][ T5904] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  249.737113][T10436] 8021q: adding VLAN 0 to HW filter on device team0
[  249.759643][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[  249.767098][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[  249.795518][ T5829] syz-executor: attempt to access beyond end of device
[  249.795518][ T5829] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  249.830936][ T5829] CPU: 0 UID: 0 PID: 5829 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  249.830965][ T5829] Tainted: [L]=SOFTLOCKUP
[  249.830972][ T5829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  249.830997][ T5829] Call Trace:
[  249.831004][ T5829]  <TASK>
[  249.831011][ T5829]  dump_stack_lvl+0xe8/0x150
[  249.831040][ T5829]  f2fs_handle_critical_error+0x37c/0x540
[  249.831067][ T5829]  f2fs_write_end_io+0xcdb/0xff0
[  249.831107][ T5829]  __submit_merged_bio+0x256/0x700
[  249.831134][ T5829]  __submit_merged_write_cond+0x3c9/0x4e0
[  249.831162][ T5829]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  249.831204][ T5829]  f2fs_write_data_pages+0x2975/0x35e0
[  249.831268][ T5829]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  249.831302][ T5829]  ? do_raw_spin_lock+0x12b/0x2f0
[  249.831348][ T5829]  ? do_raw_spin_unlock+0xf5/0x210
[  249.831374][ T5829]  ? __lock_acquire+0x6b5/0x2cf0
[  249.831404][ T5829]  ? __lock_acquire+0x6b5/0x2cf0
[  249.831428][ T5829]  ? do_raw_spin_lock+0x12b/0x2f0
[  249.831453][ T5829]  ? do_raw_spin_unlock+0xf5/0x210
[  249.831469][ T5829]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  249.831498][ T5829]  do_writepages+0x32e/0x550
[  249.831549][ T5829]  ? do_raw_spin_unlock+0xf5/0x210
[  249.831579][ T5829]  filemap_fdatawrite+0x1e9/0x2f0
[  249.831613][ T5829]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  249.831689][ T5829]  ? do_raw_spin_unlock+0xf5/0x210
[  249.831728][ T5829]  f2fs_sync_dirty_inodes+0x30e/0x860
[  249.831761][ T5829]  f2fs_write_checkpoint+0x9df/0x26a0
[  249.831816][ T5829]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  249.831888][ T5829]  kill_f2fs_super+0x314/0x720
[  249.831920][ T5829]  ? __pfx_kill_f2fs_super+0x10/0x10
[  249.831956][ T5829]  ? lockdep_hardirqs_on+0x7a/0x110
[  249.831993][ T5829]  deactivate_locked_super+0xbc/0x130
[  249.832018][ T5829]  cleanup_mnt+0x437/0x4d0
[  249.832036][ T5829]  ? _raw_spin_unlock_irq+0x23/0x50
[  249.832058][ T5829]  task_work_run+0x1d9/0x270
[  249.832080][ T5829]  ? __pfx_task_work_run+0x10/0x10
[  249.832119][ T5829]  exit_to_user_mode_loop+0xed/0x480
[  249.832142][ T5829]  ? rcu_is_watching+0x15/0xb0
[  249.832172][ T5829]  do_syscall_64+0x32d/0xf80
[  249.832192][ T5829]  ? trace_irq_disable+0x3b/0x150
[  249.832213][ T5829]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  249.832237][ T5829]  ? clear_bhb_loop+0x40/0x90
[  249.832267][ T5829]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  249.832287][ T5829] RIP: 0033:0x7f58cf39d897
[  249.832304][ T5829] Code: a2 c7 05 5c ee 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  249.832317][ T5829] RSP: 002b:00007ffe2e42f3f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  249.832334][ T5829] RAX: 0000000000000000 RBX: 00007f58cf431ef0 RCX: 00007f58cf39d897
[  249.832348][ T5829] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe2e42f4b0
[  249.832359][ T5829] RBP: 00007ffe2e42f4b0 R08: 00007ffe2e4304b0 R09: 00000000ffffffff
[  249.832370][ T5829] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe2e430540
[  249.832379][ T5829] R13: 00007f58cf431ef0 R14: 000000000003cf7b R15: 00007ffe2e430580
[  249.832406][ T5829]  </TASK>
[  249.832445][ T5829] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  249.884683][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  249.921070][ T5904] usb 6-1: Using ep0 maxpacket: 32
[  249.924562][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  249.932613][ T5904] usb 6-1: config 0 has an invalid interface number: 119 but max is 0
[  249.968156][T10542] loop4: detected capacity change from 0 to 2048
[  249.989899][ T5904] usb 6-1: config 0 has no interface number 0
[  250.359162][ T5904] usb 6-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  250.382430][T10542] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  250.447424][ T5904] usb 6-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[  250.477716][ T5820] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.483405][ T5904] usb 6-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 183
[  250.518331][ T5904] usb 6-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  250.609838][ T5904] usb 6-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[  250.638424][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.658457][ T5904] usb 6-1: Product: syz
[  250.672966][ T5904] usb 6-1: Manufacturer: syz
[  250.688472][ T5904] usb 6-1: SerialNumber: syz
[  250.706917][ T5904] usb 6-1: config 0 descriptor??
[  250.728404][T10533] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  250.765787][ T5904] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.119/input/input15
[  250.806057][ T5178] usb 6-1: BOGUS urb xfer, pipe 1 != type 3
[  250.897166][T10436] 8021q: adding VLAN 0 to HW filter on device batadv0
[  251.034669][ T5833] usb 6-1: USB disconnect, device number 2
[  251.407053][T10582] loop0: detected capacity change from 0 to 2048
[  251.531613][T10582] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  251.565169][T10582] UDF-fs: Scanning with blocksize 512 failed
[  251.659462][T10582] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  251.694290][T10589] loop5: detected capacity change from 0 to 16
[  251.721060][ T5821] Bluetooth: hci2: command tx timeout
[  251.724130][T10592] loop6: detected capacity change from 0 to 128
[  251.737127][T10589] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  251.764990][T10436] veth0_vlan: entered promiscuous mode
[  251.783769][ T6123] udevd[6123]: incorrect cramfs checksum on /dev/loop5
[  251.841136][T10592] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  251.845547][T10436] veth1_vlan: entered promiscuous mode
[  251.879471][T10592] hpfs: filesystem error: improperly stopped
[  251.907237][T10592] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  251.927850][T10592] hpfs: You really don't want any checks? You are crazy...
[  251.935308][ T6123] udevd[6123]: incorrect cramfs checksum on /dev/loop5
[  251.968974][T10592] hpfs: hpfs_map_sector(): read error
[  251.990795][    T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  252.001258][T10592] hpfs: code page support is disabled
[  252.018785][T10592] hpfs: hpfs_map_4sectors(): unaligned read
[  252.035063][T10592] hpfs: hpfs_map_4sectors(): unaligned read
[  252.047586][T10592] hpfs: filesystem error: unable to find root dir
[  252.049230][T10436] veth0_macvtap: entered promiscuous mode
[  252.100040][T10436] veth1_macvtap: entered promiscuous mode
[  252.163903][T10436] batman_adv: batadv0: Interface activated: batadv_slave_0
[  252.181228][    T9] usb 5-1: Using ep0 maxpacket: 32
[  252.216234][T10436] batman_adv: batadv0: Interface activated: batadv_slave_1
[  252.237822][    T9] usb 5-1: config index 0 descriptor too short (expected 35577, got 27)
[  252.254718][    T9] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  252.288981][   T49] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  252.302857][    T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92
[  252.313255][T10601] loop6: detected capacity change from 0 to 1024
[  252.322284][T10601] EXT4-fs: Ignoring removed bh option
[  252.325805][   T49] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  252.358403][   T49] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  252.375233][    T9] usb 5-1: config 1 has no interface number 0
[  252.391765][   T36] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  252.401840][    T9] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  252.407330][T10601] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  252.423546][    T9] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  252.443629][    T9] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  252.454374][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.478371][    T9] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found
[  252.687773][    T9] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached
[  252.711035][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  252.715078][T10612] program syz.5.1563 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  252.719832][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  252.744217][ T5997] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  252.816252][T10614] netlink: 'syz.0.1564': attribute type 12 has an invalid length.
[  252.840575][  T127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  252.870922][  T127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  252.926163][ T5997] usb 7-1: Using ep0 maxpacket: 16
[  252.945626][ T5997] usb 7-1: unable to get BOS descriptor or descriptor too short
[  252.968884][ T5997] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  252.990733][ T5997] usb 7-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  253.027306][ T5997] usb 7-1: config 1 interface 0 has no altsetting 0
[  253.066827][ T5997] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  253.097592][ T5997] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.108528][ T5904] usb 5-1: USB disconnect, device number 18
[  253.132579][ T5904] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected
[  253.140934][ T5997] usb 7-1: Product: syz
[  253.145382][ T5997] usb 7-1: Manufacturer: syz
[  253.155931][ T5997] usb 7-1: SerialNumber: syz
[  253.190076][T10624] loop0: detected capacity change from 0 to 2048
[  253.239929][T10624] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  253.346535][T10628] netlink: 'syz.7.1570': attribute type 3 has an invalid length.
[  253.388705][T10628] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1570'.
[  253.399824][ T5997] cdc_ether 7-1:1.0: skipping garbage
[  253.421470][T10630] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  253.433194][ T5997] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22
[  253.469037][ T5997] usb 7-1: USB disconnect, device number 3
[  253.566500][T10638] netlink: 27 bytes leftover after parsing attributes in process `syz.7.1573'.
[  253.811604][ T5821] Bluetooth: hci2: command tx timeout
[  253.818192][T10647] loop5: detected capacity change from 0 to 512
[  253.982556][T10081] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.997524][T10652] loop4: detected capacity change from 0 to 512
[  254.002469][T10647] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1577: bg 0: block 288: padding at end of block bitmap is not set
[  254.022910][T10647] loop5: lost filesystem error report for type 5 error -117
[  254.033353][T10647] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6685: Corrupt filesystem
[  254.041081][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  254.041108][    C1] EXT4-fs (loop5): initial error at time 1772027159: ext4_validate_block_bitmap:441
[  254.041132][    C1] EXT4-fs (loop5): last error at time 1772027159: ext4_validate_block_bitmap:441
[  254.079855][T10652] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  254.099414][T10652] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002]
[  254.126589][T10647] loop5: lost filesystem error report for type 5 error -117
[  254.138131][T10647] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.1577: attempt to clear invalid blocks 1024 len 1
[  254.156298][T10652] System zones: 1-12
[  254.216389][T10652] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.1579: corrupted in-inode xattr: e_value size too large
[  254.231777][T10647] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  254.250822][T10647] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1577: invalid indirect mapped block 1819239214 (level 0)
[  254.255022][T10652] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  254.277805][T10652] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1579: couldn't read orphan inode 15 (err -117)
[  254.288718][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  254.288745][    C0] EXT4-fs (loop4): initial error at time 1772027159: ext4_iget_extra_inode:5025: inode 15
[  254.288781][    C0] EXT4-fs (loop4): last error at time 1772027159: ext4_iget_extra_inode:5025: inode 15
[  254.303000][T10647] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  254.308648][T10652] loop4: lost filesystem error report for type 5 error -117
[  254.348802][T10652] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  254.436800][T10647] EXT4-fs (loop5): 1 truncate cleaned up
[  254.490859][T10647] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  254.641796][T10663] loop6: detected capacity change from 0 to 1024
[  254.679925][ T5820] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.725897][T10663] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  254.769011][T10663] EXT4-fs warning (device loop6): ext4_resize_begin:72: won't resize using backup superblock at 1
[  254.868567][ T9803] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.927693][T10081] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.980518][T10660] loop0: detected capacity change from 0 to 32768
[  255.056366][T10674] loop5: detected capacity change from 0 to 16
[  255.056745][T10660] JBD2: Ignoring recovery information on journal
[  255.083684][T10674] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  255.104283][T10671] smc: net device bond0 applied user defined pnetid SYZ0
[  255.135763][T10660] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  255.171009][T10673] smc: net device bond0 erased user defined pnetid SYZ0
[  255.500018][ T5829] ocfs2: Unmounting device (7,0) on (node local)
[  255.885864][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  255.892978][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  256.161525][ T5997] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  256.229418][ T5833] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  256.289157][T10712] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  256.320867][ T5997] usb 1-1: Using ep0 maxpacket: 16
[  256.334806][ T5997] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  256.370772][ T5997] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  256.385894][ T5997] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  256.414822][ T5997] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  256.417116][T10697] ocfs2: Slot 0 on device (7,7) was already allocated to this node!
[  256.426365][ T5997] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.474297][ T5833] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  256.474687][ T5997] usb 1-1: config 0 descriptor??
[  256.512254][ T5833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.528839][T10697] JBD2: Ignoring recovery information on journal
[  256.610280][ T5833] usb 6-1: Product: syz
[  256.641053][ T5833] usb 6-1: Manufacturer: syz
[  256.644457][T10697] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  256.646253][ T5833] usb 6-1: SerialNumber: syz
[  256.696163][ T5833] usb 6-1: config 0 descriptor??
[  256.815101][T10697] (syz.7.1596,10697,0):ocfs2_verify_group_and_input:428 ERROR: add a group which is in the current volume.
[  256.844238][T10697] (syz.7.1596,10697,0):ocfs2_group_add:511 ERROR: status = -22
[  256.905114][ T5997] microsoft 0003:045E:07DA.0011: ignoring exceeding usage max
[  256.953936][ T5997] microsoft 0003:045E:07DA.0011: usage index exceeded
[  256.969969][ T5997] microsoft 0003:045E:07DA.0011: item 0 4 2 0 parsing failed
[  256.982567][T10436] ocfs2: Unmounting device (7,7) on (node local)
[  256.993472][ T5997] microsoft 0003:045E:07DA.0011: parse failed
[  257.012166][ T5997] microsoft 0003:045E:07DA.0011: probe with driver microsoft failed with error -22
[  257.042464][T10727] set_capacity_and_notify: 4 callbacks suppressed
[  257.042481][T10727] loop4: detected capacity change from 0 to 1024
[  257.079932][T10727] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003]
[  257.089175][T10727] System zones: 0-1, 3-36
[  257.140919][T10727] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  257.155449][ T5997] usb 1-1: USB disconnect, device number 15
[  257.295620][T10727] fscrypt (loop4, inode 18): Mutually exclusive encryption flags (0x0c)
[  257.361045][ T5820] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.451351][T10735] team0: Device gtp0 is of different type
[  257.559876][ T5833] usb 6-1: Firmware version (0.0) predates our first public release.
[  257.573698][ T5833] usb 6-1: Please update to version 0.2 or newer
[  257.671884][ T5833] usb 6-1: USB disconnect, device number 3
[  258.032431][T10739] loop4: detected capacity change from 0 to 40427
[  258.045270][T10733] loop7: detected capacity change from 0 to 32768
[  258.060525][T10739] F2FS-fs (loop4): build fault injection rate: 771
[  258.118570][T10739] F2FS-fs (loop4): invalid crc value
[  258.129396][T10733] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  258.311957][T10733] XFS (loop7): Ending clean mount
[  258.324370][T10768] loop0: detected capacity change from 0 to 128
[  258.335981][T10739] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  258.355947][T10739] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  258.439512][ T5820] syz-executor: attempt to access beyond end of device
[  258.439512][ T5820] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  258.462061][ T5820] CPU: 1 UID: 0 PID: 5820 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  258.462090][ T5820] Tainted: [L]=SOFTLOCKUP
[  258.462096][ T5820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  258.462106][ T5820] Call Trace:
[  258.462113][ T5820]  <TASK>
[  258.462121][ T5820]  dump_stack_lvl+0xe8/0x150
[  258.462150][ T5820]  f2fs_handle_critical_error+0x37c/0x540
[  258.462178][ T5820]  f2fs_write_end_io+0xcdb/0xff0
[  258.462218][ T5820]  __submit_merged_bio+0x256/0x700
[  258.462244][ T5820]  __submit_merged_write_cond+0x3c9/0x4e0
[  258.462273][ T5820]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  258.462315][ T5820]  f2fs_write_data_pages+0x2975/0x35e0
[  258.462371][ T5820]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  258.462431][ T5820]  ? arch_stack_walk+0xfb/0x150
[  258.462460][ T5820]  ? __lock_acquire+0x6b5/0x2cf0
[  258.462500][ T5820]  ? __lock_acquire+0x6b5/0x2cf0
[  258.462523][ T5820]  ? update_cfs_rq_load_avg+0x3fb/0x4e0
[  258.462560][ T5820]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  258.462582][ T5820]  do_writepages+0x32e/0x550
[  258.462615][ T5820]  ? do_raw_spin_unlock+0xf5/0x210
[  258.462638][ T5820]  filemap_fdatawrite+0x1e9/0x2f0
[  258.462665][ T5820]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  258.462738][ T5820]  ? do_raw_spin_unlock+0xf5/0x210
[  258.462760][ T5820]  f2fs_sync_dirty_inodes+0x30e/0x860
[  258.462798][ T5820]  f2fs_write_checkpoint+0x9df/0x26a0
[  258.462853][ T5820]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  258.462913][ T5820]  ? kfree+0x1c1/0x630
[  258.462936][ T5820]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  258.462968][ T5820]  kill_f2fs_super+0x314/0x720
[  258.462996][ T5820]  ? __pfx_kill_f2fs_super+0x10/0x10
[  258.463031][ T5820]  ? lockdep_hardirqs_on+0x7a/0x110
[  258.463067][ T5820]  deactivate_locked_super+0xbc/0x130
[  258.463094][ T5820]  cleanup_mnt+0x437/0x4d0
[  258.463112][ T5820]  ? _raw_spin_unlock_irq+0x23/0x50
[  258.463136][ T5820]  task_work_run+0x1d9/0x270
[  258.463158][ T5820]  ? __pfx_task_work_run+0x10/0x10
[  258.463183][ T5820]  exit_to_user_mode_loop+0xed/0x480
[  258.463200][ T5820]  ? rcu_is_watching+0x15/0xb0
[  258.463224][ T5820]  do_syscall_64+0x32d/0xf80
[  258.463244][ T5820]  ? trace_irq_disable+0x3b/0x150
[  258.463265][ T5820]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.463280][ T5820]  ? clear_bhb_loop+0x40/0x90
[  258.463299][ T5820]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.463312][ T5820] RIP: 0033:0x7f06bcf9d897
[  258.463328][ T5820] Code: a2 c7 05 5c ee 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  258.463341][ T5820] RSP: 002b:00007ffd6b5213c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  258.463359][ T5820] RAX: 0000000000000000 RBX: 00007f06bd031ef0 RCX: 00007f06bcf9d897
[  258.463371][ T5820] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd6b521480
[  258.463380][ T5820] RBP: 00007ffd6b521480 R08: 00007ffd6b522480 R09: 00000000ffffffff
[  258.463389][ T5820] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd6b522510
[  258.463399][ T5820] R13: 00007f06bd031ef0 R14: 000000000003f132 R15: 00007ffd6b522550
[  258.463425][ T5820]  </TASK>
[  258.463432][ T5820] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  258.872045][T10436] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  259.328724][T10773] loop6: detected capacity change from 0 to 32768
[  259.405286][   T30] kauditd_printk_skb: 284 callbacks suppressed
[  259.405303][   T30] audit: type=1800 audit(1772027165.053:343): pid=10773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1624" name="file1" dev="loop6" ino=7 res=0 errno=0
[  260.109570][T10795] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1644'.
[  260.120307][T10796] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1635'.
[  260.462455][T10788] loop7: detected capacity change from 0 to 131072
[  260.477022][T10788] F2FS-fs (loop7): invalid crc value
[  260.645277][T10788] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  260.658616][T10788] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[  261.091578][T10827] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1649'.
[  261.183661][T10827] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1649'.
[  261.274013][T10829] serio: Serial port ptm0
[  261.501173][ T5997] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  261.592218][T10839] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1654'.
[  261.681636][ T5997] usb 1-1: Using ep0 maxpacket: 32
[  261.698567][ T5997] usb 1-1: unable to get BOS descriptor or descriptor too short
[  261.712484][ T5997] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  261.730093][ T5997] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  261.787672][ T5997] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  261.808635][ T5997] usb 1-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3
[  261.829770][ T5997] usb 1-1: Product: syz
[  261.834447][ T5997] usb 1-1: Manufacturer: syz
[  261.839331][ T5997] usb 1-1: SerialNumber: syz
[  261.953789][T10847] loop6: detected capacity change from 0 to 256
[  262.033473][T10847] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  262.116873][   T30] audit: type=1800 audit(1772027167.753:344): pid=10847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1658" name="file1" dev="loop6" ino=1048666 res=0 errno=0
[  262.142175][ T5997] usb 1-1: bad CDC descriptors
[  262.172343][T10853] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008)
[  262.174413][ T5997] usb 1-1: USB disconnect, device number 16
[  262.196014][   T30] audit: type=1800 audit(1772027167.793:345): pid=10847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1658" name="file1" dev="loop6" ino=1048666 res=0 errno=0
[  262.239601][T10853] FAT-fs (loop6): Filesystem has been set read-only
[  262.282561][T10853] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008)
[  262.891083][ T5890] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  263.067688][ T5890] usb 8-1: config index 0 descriptor too short (expected 23569, got 27)
[  263.087549][ T5890] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  263.120480][ T5890] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  263.130779][ T5890] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  263.139583][ T5890] usb 8-1: Manufacturer: syz
[  263.163931][ T5890] usb 8-1: config 0 descriptor??
[  263.207125][T10866] loop5: detected capacity change from 0 to 32768
[  263.221775][   T24] usb 1-1: new full-speed USB device number 17 using dummy_hcd
[  263.266936][T10872] loop4: detected capacity change from 0 to 32768
[  263.321539][ T5890] rc_core: IR keymap rc-hauppauge not found
[  263.350074][T10872] add_index: next_index = 0.  Resetting!
[  263.355870][ T5890] Registered IR keymap rc-empty
[  263.387535][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  263.399208][T10872] find_entry called with index >= next_index
[  263.399241][T10872] find_entry called with index >= next_index
[  263.399250][T10872] find_entry called with index >= next_index
[  263.399260][T10872] find_entry called with index >= next_index
[  263.409767][T10872] non-latin1 character 0x3ff found in JFS file name
[  263.425161][ T5890] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0
[  263.464462][T10872] mount with iocharset=utf8 to access
[  263.496347][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  263.516022][ T5890] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input16
[  263.542042][   T24] usb 1-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00
[  263.575021][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.621419][   T24] usb 1-1: config 0 descriptor??
[  263.742259][T10891] rc rc0: two consecutive events of type space
[  263.882679][T10896] loop5: detected capacity change from 0 to 128
[  263.906445][T10896] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  263.944382][ T5890] usb 8-1: USB disconnect, device number 2
[  263.968524][T10896] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  264.000092][T10900] ------------[ cut here ]------------
[  264.006191][T10900] RTNL: assertion failed at net/core/dev.c (9543)
[  264.013057][T10900] WARNING: net/core/dev.c:9543 at __dev_set_promiscuity+0x530/0x710, CPU#1: syz.4.1679/10900
[  264.023371][T10900] Modules linked in:
[  264.027999][T10900] CPU: 1 UID: 0 PID: 10900 Comm: syz.4.1679 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  264.039719][T10900] Tainted: [L]=SOFTLOCKUP
[  264.044364][T10900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  264.054699][T10900] RIP: 0010:__dev_set_promiscuity+0x53c/0x710
[  264.061136][T10900] Code: 41 ff d3 e9 06 fc ff ff e8 b1 06 47 f8 e9 fc fb ff ff e8 a7 06 47 f8 48 8d 3d a0 fc a1 06 48 c7 c6 a0 91 dc 8c ba 47 25 00 00 <67> 48 0f b9 3a e9 22 fb ff ff e8 85 06 47 f8 48 8b 7c 24 08 48 c7
[  264.081509][T10900] RSP: 0018:ffffc90003a276a0 EFLAGS: 00010287
[  264.087873][T10900] RAX: ffffffff897e97c9 RBX: ffff8880598d8000 RCX: 0000000000080000
[  264.096022][T10900] RDX: 0000000000002547 RSI: ffffffff8cdc91a0 RDI: ffffffff90209470
[  264.104293][T10900] RBP: 0000000000000000 R08: ffffffff8fbd11a7 R09: 1ffffffff1f7a234
[  264.112677][T10900] R10: dffffc0000000000 R11: fffffbfff1f7a235 R12: 00000000ffffffff
[  264.121141][T10900] R13: 0000000000000000 R14: ffff8880598d80b0 R15: 1ffff1100b31b016
[  264.129146][T10900] FS:  00007f06bde106c0(0000) GS:ffff888125559000(0000) knlGS:0000000000000000
[  264.138525][T10900] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  264.145816][T10900] CR2: 00007f9f2a744000 CR3: 0000000069d40000 CR4: 00000000003526f0
[  264.154392][T10900] Call Trace:
[  264.157777][T10900]  <TASK>
[  264.160945][T10900]  ? __hw_addr_add_ex+0x361/0x650
[  264.166024][T10900]  __dev_set_rx_mode+0x17c/0x260
[  264.171144][T10900]  dev_mc_add+0xc8/0x120
[  264.175516][T10900]  igmp6_group_added+0x234/0x820
[  264.180877][T10900]  ? __pfx_igmp6_group_added+0x10/0x10
[  264.186761][T10900]  ? mld_del_delrec+0x1af/0xcd0
[  264.191770][T10900]  ? __ipv6_dev_mc_inc+0x548/0xa50
[  264.197343][T10900]  __ipv6_dev_mc_inc+0x897/0xa50
[  264.202817][T10900]  addrconf_join_solict+0x104/0x190
[  264.208172][T10900]  ? __pfx_addrconf_join_solict+0x10/0x10
[  264.214150][T10900]  ? do_raw_spin_unlock+0xf5/0x210
[  264.219387][T10900]  __ipv6_dev_ac_inc+0x87b/0xaf0
[  264.224682][T10900]  ipv6_sock_ac_join+0x6b5/0x890
[  264.229841][T10900]  ? __pfx_ipv6_sock_ac_join+0x10/0x10
[  264.235657][T10900]  ? _copy_from_user+0x94/0xb0
[  264.240452][T10900]  do_ipv6_setsockopt+0x2031/0x31c0
[  264.245817][T10900]  ? __pfx_do_ipv6_setsockopt+0x10/0x10
[  264.251826][T10900]  ? futex_private_hash_put+0x13b/0x170
[  264.257715][T10900]  ? futex_wake+0x4ac/0x580
[  264.262403][T10900]  ? __lock_acquire+0x6b5/0x2cf0
[  264.268089][T10900]  ? aa_sk_perm+0x6d5/0x900
[  264.272868][T10900]  ? __pfx_aa_sk_perm+0x10/0x10
[  264.278428][T10900]  ? __fget_files+0x2a/0x420
[  264.283449][T10900]  ? aa_sock_opt_perm+0xff/0x1a0
[  264.288605][T10900]  ipv6_setsockopt+0x59/0x170
[  264.293982][T10900]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  264.300010][T10900]  do_sock_setsockopt+0x17c/0x1b0
[  264.305412][T10900]  __x64_sys_setsockopt+0x13d/0x1b0
[  264.311391][T10900]  do_syscall_64+0x14d/0xf80
[  264.316238][T10900]  ? trace_irq_disable+0x3b/0x150
[  264.321344][T10900]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  264.327664][T10900]  ? clear_bhb_loop+0x40/0x90
[  264.332606][T10900]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  264.338736][T10900] RIP: 0033:0x7f06bcf9c629
[  264.343601][T10900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  264.364735][T10900] RSP: 002b:00007f06bde10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  264.374449][T10900] RAX: ffffffffffffffda RBX: 00007f06bd215fa0 RCX: 00007f06bcf9c629
[  264.382751][T10900] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000003
[  264.391581][T10900] RBP: 00007f06bd032b39 R08: 0000000000000014 R09: 0000000000000000
[  264.399839][T10900] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  264.409368][T10900] R13: 00007f06bd216038 R14: 00007f06bd215fa0 R15: 00007ffd6b522158
[  264.417865][T10900]  </TASK>
[  264.421283][T10900] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  264.429374][T10900] CPU: 1 UID: 0 PID: 10900 Comm: syz.4.1679 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  264.440875][T10900] Tainted: [L]=SOFTLOCKUP
[  264.445319][T10900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  264.456076][T10900] Call Trace:
[  264.459570][T10900]  <TASK>
[  264.462622][T10900]  vpanic+0x56c/0xa60
[  264.466792][T10900]  ? __pfx__printk+0x10/0x10
[  264.472008][T10900]  ? __pfx_vpanic+0x10/0x10
[  264.477292][T10900]  ? is_bpf_text_address+0x292/0x2b0
[  264.483451][T10900]  ? is_bpf_text_address+0x26/0x2b0
[  264.489558][T10900]  panic+0xc5/0xd0
[  264.493825][T10900]  ? __pfx_panic+0x10/0x10
[  264.498785][T10900]  __warn+0x315/0x4f0
[  264.503204][T10900]  ? __dev_set_promiscuity+0x530/0x710
[  264.509177][T10900]  ? __dev_set_promiscuity+0x530/0x710
[  264.515341][T10900]  __report_bug+0x29a/0x540
[  264.520457][T10900]  ? __ipv6_dev_mc_inc+0x897/0xa50
[  264.525830][T10900]  ? addrconf_join_solict+0x104/0x190
[  264.531389][T10900]  ? __ipv6_dev_ac_inc+0x87b/0xaf0
[  264.537022][T10900]  ? __dev_set_promiscuity+0x530/0x710
[  264.542653][T10900]  ? __pfx___report_bug+0x10/0x10
[  264.547794][T10900]  report_bug_entry+0x19a/0x290
[  264.553008][T10900]  ? __dev_set_promiscuity+0x53c/0x710
[  264.558645][T10900]  ? __dev_set_promiscuity+0x541/0x710
[  264.564995][T10900]  handle_bug+0xce/0x200
[  264.569414][T10900]  exc_invalid_op+0x1a/0x50
[  264.574093][T10900]  asm_exc_invalid_op+0x1a/0x20
[  264.579165][T10900] RIP: 0010:__dev_set_promiscuity+0x53c/0x710
[  264.585682][T10900] Code: 41 ff d3 e9 06 fc ff ff e8 b1 06 47 f8 e9 fc fb ff ff e8 a7 06 47 f8 48 8d 3d a0 fc a1 06 48 c7 c6 a0 91 dc 8c ba 47 25 00 00 <67> 48 0f b9 3a e9 22 fb ff ff e8 85 06 47 f8 48 8b 7c 24 08 48 c7
[  264.606782][T10900] RSP: 0018:ffffc90003a276a0 EFLAGS: 00010287
[  264.613316][T10900] RAX: ffffffff897e97c9 RBX: ffff8880598d8000 RCX: 0000000000080000
[  264.621824][T10900] RDX: 0000000000002547 RSI: ffffffff8cdc91a0 RDI: ffffffff90209470
[  264.629968][T10900] RBP: 0000000000000000 R08: ffffffff8fbd11a7 R09: 1ffffffff1f7a234
[  264.638547][T10900] R10: dffffc0000000000 R11: fffffbfff1f7a235 R12: 00000000ffffffff
[  264.647296][T10900] R13: 0000000000000000 R14: ffff8880598d80b0 R15: 1ffff1100b31b016
[  264.655448][T10900]  ? __dev_set_promiscuity+0x529/0x710
[  264.661285][T10900]  ? __hw_addr_add_ex+0x361/0x650
[  264.666411][T10900]  __dev_set_rx_mode+0x17c/0x260
[  264.671525][T10900]  dev_mc_add+0xc8/0x120
[  264.675776][T10900]  igmp6_group_added+0x234/0x820
[  264.680800][T10900]  ? __pfx_igmp6_group_added+0x10/0x10
[  264.686442][T10900]  ? mld_del_delrec+0x1af/0xcd0
[  264.691548][T10900]  ? __ipv6_dev_mc_inc+0x548/0xa50
[  264.696743][T10900]  __ipv6_dev_mc_inc+0x897/0xa50
[  264.701948][T10900]  addrconf_join_solict+0x104/0x190
[  264.707444][T10900]  ? __pfx_addrconf_join_solict+0x10/0x10
[  264.713631][T10900]  ? do_raw_spin_unlock+0xf5/0x210
[  264.718748][T10900]  __ipv6_dev_ac_inc+0x87b/0xaf0
[  264.724409][T10900]  ipv6_sock_ac_join+0x6b5/0x890
[  264.729816][T10900]  ? __pfx_ipv6_sock_ac_join+0x10/0x10
[  264.736318][T10900]  ? _copy_from_user+0x94/0xb0
[  264.741217][T10900]  do_ipv6_setsockopt+0x2031/0x31c0
[  264.746862][T10900]  ? __pfx_do_ipv6_setsockopt+0x10/0x10
[  264.752686][T10900]  ? futex_private_hash_put+0x13b/0x170
[  264.758282][T10900]  ? futex_wake+0x4ac/0x580
[  264.763024][T10900]  ? __lock_acquire+0x6b5/0x2cf0
[  264.768090][T10900]  ? aa_sk_perm+0x6d5/0x900
[  264.772884][T10900]  ? __pfx_aa_sk_perm+0x10/0x10
[  264.777857][T10900]  ? __fget_files+0x2a/0x420
[  264.782628][T10900]  ? aa_sock_opt_perm+0xff/0x1a0
[  264.787844][T10900]  ipv6_setsockopt+0x59/0x170
[  264.792892][T10900]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  264.799222][T10900]  do_sock_setsockopt+0x17c/0x1b0
[  264.804430][T10900]  __x64_sys_setsockopt+0x13d/0x1b0
[  264.810164][T10900]  do_syscall_64+0x14d/0xf80
[  264.815016][T10900]  ? trace_irq_disable+0x3b/0x150
[  264.820232][T10900]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  264.826291][T10900]  ? clear_bhb_loop+0x40/0x90
[  264.831511][T10900]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  264.837679][T10900] RIP: 0033:0x7f06bcf9c629
[  264.842104][T10900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  264.862768][T10900] RSP: 002b:00007f06bde10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  264.873360][T10900] RAX: ffffffffffffffda RBX: 00007f06bd215fa0 RCX: 00007f06bcf9c629
[  264.881857][T10900] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000003
[  264.890389][T10900] RBP: 00007f06bd032b39 R08: 0000000000000014 R09: 0000000000000000
[  264.898548][T10900] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  264.906867][T10900] R13: 00007f06bd216038 R14: 00007f06bd215fa0 R15: 00007ffd6b522158
[  264.915808][T10900]  </TASK>
[  264.919410][T10900] Kernel Offset: disabled
[  264.924192][T10900] Rebooting in 86400 seconds..