last executing test programs:

3.89078797s ago: executing program 0 (id=579):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000740)=ANY=[@ANYBLOB="12e01b3989dd13411f"], 0x1000f)

3.706297293s ago: executing program 3 (id=582):
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="71756965742c636f6465706167653d69736f383835392d31352c706172743d3078303030303030300000000000000000662c00a20000000700000000ede9debf530c3cc4d04b548919aca0c2937d4da1fc31dc42fc2e3e", @ANYBLOB="23341129bfb4fcc388a80c49b4f4d96254cb9356759776b03b581050240d2d9a5cf3440e76c886f1e5c860656a3648101223fc288fc5274f0e609cfed0fc738d84eb544791dd1cb959421db9fbcb634df876aa2133fd62e245fb6b1ead07ca04772d78564af8f42015e5be557ab3bd60824768691005cbd3d295402693d934226595deeba1ff748b7dde9c617749aa38096ef667700a6b3668cb7296b024fbcf9f74e50bf0f834159f51737baac184f94dd13a9793b76946208f290637d8def94e5f56f1181da3eed500440f", @ANYRES32=0x0, @ANYBLOB="4500a9c2fbb23c14935e1dcc6d11c24ca3ff81ccc7d456f865b15c0db9a185679f266e7b2761a1e9ff25cfd2f5bd23528b4327ab23fd41e3c1e496e2cf4cb0d23634cb204c27f5bbb375103104b01dca3f212fa6ac51c2887da24761469ac2a33fbee72d22376574b781537d01058be21d7c92c49484ac09fda357171efa3a61c7f9fa311eac1e393b07a4d9220454eebac14ae3a319d0067551335db144332626032a9d9f11d455bc5f408b6fa64f16f9244274abfb3c4e4b0f9dd1f039ab085684a71165917b54be56f97348dff06220d2e62c4d915841c0ccda63c1048e10fb6c6cbdf99672bb90bf3d1c5e333e43bbda", @ANYRES16], 0x11, 0x2dd, &(0x7f0000001b40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='.\x00', 0x18920f4, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))
sendfile(r0, r1, 0x0, 0x20fffe82)
creat(&(0x7f0000000000)='./file0\x00', 0x108)

3.67377826s ago: executing program 4 (id=583):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000600)="bb", 0x1)
r1 = socket$netlink(0x10, 0x3, 0x4)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a98000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)

3.402681982s ago: executing program 1 (id=585):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00')
syz_open_dev$tty20(0xc, 0x4, 0x1)
syz_read_part_table(0x615, &(0x7f0000000640)="$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")

3.389989492s ago: executing program 4 (id=586):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000240)={0x79, 0x0, 0x760})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000000c0)=0x4)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.275748251s ago: executing program 3 (id=588):
r0 = epoll_create1(0x80000)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000040)={0x4, <r3=>r1, 0x1})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000140)={0xa000201e})
epoll_pwait(r0, &(0x7f0000000100)=[{}], 0x1, 0x3, 0x0, 0x0)

2.98741231s ago: executing program 4 (id=589):
r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400)
r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000000)={0x0, 0x0, r2, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000240)={r3})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r1, 0x100000000)

2.987183523s ago: executing program 3 (id=590):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000000008d82, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec21, 0x10, 0x2, 0x40000333}, &(0x7f00000001c0)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x40, 0x4000, @fd=r0, 0x7fffffffffffdfff, &(0x7f0000000340)=[{&(0x7f0000001900)="ac", 0x1}], 0x1, 0x0, 0x1})
io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0)

2.828865451s ago: executing program 0 (id=592):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}}, 0x0)
sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14)

2.820420912s ago: executing program 1 (id=593):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x404, &(0x7f0000000500)={[{@discard}, {@min_batch_time}]}, 0x1, 0x5e6, &(0x7f0000000540)="$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")
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x68, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}, @IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x68}}, 0x0)
sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x8100, r2, 0x1, 0x2, 0x6, @random="27a212d89957"}, 0x14)

2.700769854s ago: executing program 4 (id=594):
r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0)
socket$rxrpc(0x21, 0x2, 0xa)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000000)={&(0x7f0000000140)=[{0x5, 0x200, 0x0, 0x0}, {0xffff, 0x6010, 0x0, 0x0}], 0x2})

2.421398272s ago: executing program 0 (id=595):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=<r3=>0x0, &(0x7f0000000000)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22})
io_uring_enter(r2, 0x48e9, 0x0, 0x2, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

2.282929402s ago: executing program 2 (id=596):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x1}, 0x1c)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)
shutdown(r0, 0x2)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55)

2.247895671s ago: executing program 0 (id=597):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300))
r1 = inotify_init()
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000340)=""/263, 0x107}], 0x1)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
fcntl$setstatus(r1, 0x4, 0x42800)

2.200338311s ago: executing program 1 (id=598):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$inet(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)="1268a3db5ba40fe82ecf3465af3b9884890941251ee0", 0x16}, {&(0x7f00000004c0)="6059337673465062eacefc40e1b405cebc348d134fc35955cd0faaf679", 0x1d}, {&(0x7f0000000480)="421451baa0a0fc86bb45108b5682e3b12e9794b15c70cc3e977a8947cae6d3aaa0a213355827b2ed96d2097db7ef0d6848e99cc91065", 0x36}], 0x3}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000580)="56a8c6ad830a8f74a318", 0xa}, {&(0x7f0000000ac0)="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", 0x1ae}, {&(0x7f0000000600)="9c46f2b6aec7ddf8fe83fd452bb6ed0d3949234d4bf8f7f5ae31889f08042779c2a20d1ebee3a5b435b9632debfc43d90571315da865ef", 0x37}], 0x3}}], 0x2, 0x44008090)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4011}, 0x40004)

2.110751272s ago: executing program 1 (id=599):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH")
open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178)
r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x936, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1, 0x1a})
io_uring_enter(r0, 0x47b6, 0x800000, 0x0, 0x0, 0x0)

2.08058804s ago: executing program 2 (id=600):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\b\x00'/20])
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_timeval(r0, 0x1, 0x2, 0x0, 0x48)
getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98)

2.032121441s ago: executing program 0 (id=601):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200)={[{@nodiscard}, {@noheap}, {@discard_unit_section}, {@discard_unit_section}, {@adaptive_mode}, {@background_gc_on}, {@compress_chksum}, {@nogc_merge}, {@fsync_mode_posix}, {@block_mode}, {@data_flush}, {@heap}, {@jqfmt_vfsold}, {@lazytime}]}, 0x1, 0x550f, &(0x7f000000cf00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121042, 0x115)
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000580), 0x109000, 0x0)
sendfile(r0, r1, 0x0, 0x4)

1.919827731s ago: executing program 2 (id=602):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}}, 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0xc048094)

1.69019094s ago: executing program 3 (id=603):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), 0x0, 0x0, 0x0)
syz_fuse_handle_req(r0, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x4, {0x7, 0x28, 0x0, 0x8010, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10, 0xfb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f00000007c0)="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", 0x2000, &(0x7f0000000540)={&(0x7f00000003c0)={0x50, 0x0, 0x40000000, {0x7, 0x2d, 0x4, 0x2402100, 0x8, 0x4, 0x40000005, 0x3, 0x0, 0x0, 0x8, 0x8e60}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.319528928s ago: executing program 0 (id=604):
syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x0, 0x0, &(0x7f0000000480))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x183042, 0x1e1)
pwrite64(r0, &(0x7f00000000c0)="12", 0x1, 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80441, 0x0)
ioctl$FIBMAP(r1, 0x1, &(0x7f0000000080)=0x6)

928.468147ms ago: executing program 1 (id=605):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg$can_bcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000680)=""/112, 0x70}], 0x1}, 0x10150)

829.423605ms ago: executing program 3 (id=606):
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000311bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d009000006"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0)

826.61613ms ago: executing program 2 (id=607):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x2000033f)
setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f0000000340), 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

471.915177ms ago: executing program 4 (id=608):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0x4, 0x1a, 0x2, 0x40, 0xfb, 0x7, 0xd4, 0x0, 0x4, 0x7, 0x2}, {0xffff1000, 0x2, 0xd, 0xb, 0x8, 0x40, 0x6, 0x8, 0x5, 0xf, 0x3, 0xcc}, {0xeeee0000, 0xdddd1000, 0x4, 0x8, 0x2, 0x7, 0x4, 0x1, 0x8c, 0x9, 0x6, 0x5}, {0xeeef0000, 0x3000, 0xd, 0xf, 0x43, 0x46, 0x2, 0xd, 0x46, 0x3, 0xfc, 0x1}, {0x100000, 0x58000, 0x3, 0x3f, 0x3, 0x9, 0x9, 0x7, 0x5, 0x4, 0x1e, 0x4b}, {0x2, 0xd000, 0x9, 0x7, 0x4, 0x6f, 0x1, 0xfb, 0x4, 0x80, 0x1, 0xfc}, {0x8080000, 0x2000, 0xc, 0x9d, 0x3, 0x0, 0x1, 0xb, 0x1, 0x7, 0x0, 0x6}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0x6, 0x9, 0x54, 0x6, 0x2, 0x7}, {0x100000, 0x5}, {0xdddd1000, 0x5}, 0x40010000, 0x0, 0xf000, 0x300, 0x7, 0x0, 0x9000, [0x4, 0x402, 0x8, 0x1]})
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x49323de44ee88a26, 0x0, 0x49, 0x1, 0x7, 0x4, 0xe, 0x0, 0x0, 0xb2, 0x2}, {0xf000, 0xdddd0000, 0x4, 0x5, 0xbb, 0x5, 0x38, 0x8, 0x7, 0xfd, 0xd9, 0x2}, {0xeeef0000, 0x26000, 0xd, 0xe4, 0x3, 0xd, 0x6, 0x9, 0x0, 0x5, 0x42, 0xa}, {0x0, 0x8000000, 0xc, 0x9, 0x44, 0xcb, 0x5, 0x9, 0x40, 0x9, 0x1, 0x5}, {0xffff1000, 0x2000, 0xb, 0x7, 0xe, 0x2, 0x6, 0x8f, 0x1, 0xd, 0x5, 0x1}, {0x80a0001, 0x80a0000, 0xb, 0x5, 0x61, 0x18, 0x7, 0xfc, 0xc, 0x9, 0x6, 0x4}, {0x7002, 0xeeee0000, 0x1b, 0xff, 0xbc, 0x80, 0x1, 0x4, 0x5, 0x0, 0xbf, 0x9}, {0x8000000, 0x2000, 0xf, 0x3, 0x4, 0x6, 0x9, 0xfa, 0x7, 0xc6, 0x0, 0x81}, {0xf000, 0x3}, {0xc000, 0x8}, 0x14, 0x0, 0xeeee8000, 0x20, 0x0, 0x4801, 0x33339800, [0x9, 0x1ff, 0x86d, 0x8001]})

382.929072ms ago: executing program 3 (id=609):
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045)
r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0)
io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd)

382.164453ms ago: executing program 2 (id=610):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000481000/0x1000)=nil)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000488000/0x4000)=nil, &(0x7f00003a5000/0x4000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00004fc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f00001c6000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})

366.892183ms ago: executing program 1 (id=611):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x789})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2})
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000180)={&(0x7f00004ca000/0x1000)=nil, 0x1000})

109.540361ms ago: executing program 2 (id=612):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8)

0s ago: executing program 4 (id=613):
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x800001000089}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
ioprio_set$pid(0x3, 0x0, 0x0)
r0 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x9c0e, 0x10100}, &(0x7f0000000000)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r0, 0x2df0, 0x0, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

(slave bond_slave_0): Enslaving as an active interface with an up link
[   81.873994][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.885394][ T5830] Bluetooth: hci3: command tx timeout
[   81.892204][ T5827] team0: Port device team_slave_0 added
[   81.903141][ T5827] team0: Port device team_slave_1 added
[   81.912749][ T5838] team0: Port device team_slave_1 added
[   81.922398][ T5826] team0: Port device team_slave_1 added
[   81.932562][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.964877][ T5830] Bluetooth: hci4: command tx timeout
[   82.087446][ T5839] team0: Port device team_slave_0 added
[   82.095371][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   82.102332][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   82.128648][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   82.142238][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   82.149327][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   82.175378][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   82.188459][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   82.195846][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   82.222692][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   82.237835][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   82.245150][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   82.271123][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.285616][ T5835] team0: Port device team_slave_0 added
[   82.295038][ T5839] team0: Port device team_slave_1 added
[   82.302463][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   82.309636][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   82.335732][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.348790][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   82.356066][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   82.382212][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.406463][ T5835] team0: Port device team_slave_1 added
[   82.493231][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   82.500286][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   82.526564][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   82.555164][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   82.562159][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   82.588156][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   82.621987][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   82.629034][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   82.655119][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.711260][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   82.718307][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   82.744315][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.785118][ T5838] hsr_slave_0: entered promiscuous mode
[   82.792327][ T5838] hsr_slave_1: entered promiscuous mode
[   82.807806][ T5826] hsr_slave_0: entered promiscuous mode
[   82.815230][ T5826] hsr_slave_1: entered promiscuous mode
[   82.822236][ T5826] debugfs: 'hsr0' already exists in 'hsr'
[   82.828366][ T5826] Cannot create hsr debugfs directory
[   82.849206][ T5827] hsr_slave_0: entered promiscuous mode
[   82.856406][ T5827] hsr_slave_1: entered promiscuous mode
[   82.863430][ T5827] debugfs: 'hsr0' already exists in 'hsr'
[   82.869325][ T5827] Cannot create hsr debugfs directory
[   82.923933][ T5839] hsr_slave_0: entered promiscuous mode
[   82.932714][ T5839] hsr_slave_1: entered promiscuous mode
[   82.940496][ T5839] debugfs: 'hsr0' already exists in 'hsr'
[   82.946444][ T5839] Cannot create hsr debugfs directory
[   83.181825][ T5835] hsr_slave_0: entered promiscuous mode
[   83.189129][ T5835] hsr_slave_1: entered promiscuous mode
[   83.196456][ T5835] debugfs: 'hsr0' already exists in 'hsr'
[   83.202217][ T5835] Cannot create hsr debugfs directory
[   83.798861][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   83.805869][ T5830] Bluetooth: hci0: command tx timeout
[   83.805912][ T5830] Bluetooth: hci1: command tx timeout
[   83.829254][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   83.841458][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   83.863478][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   83.884800][   T51] Bluetooth: hci2: command tx timeout
[   83.957500][ T5827] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   83.964896][   T51] Bluetooth: hci3: command tx timeout
[   83.986959][ T5827] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   83.998309][ T5827] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   84.011635][ T5827] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   84.045539][   T51] Bluetooth: hci4: command tx timeout
[   84.110019][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   84.134971][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   84.147172][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   84.167892][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   84.300384][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   84.320219][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   84.346473][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   84.359629][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   84.378319][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.501064][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   84.559417][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.567006][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.577535][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   84.604198][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   84.621896][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.629894][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.649310][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   84.661298][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   84.799693][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.891382][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   84.930016][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.968738][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.976019][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.026831][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.034380][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.068124][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   85.123601][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.130838][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.177746][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.185100][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.213875][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.329470][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.340247][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   85.362017][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.395547][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.402717][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.456053][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.463305][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.520717][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   85.583589][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.590836][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.671783][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.679048][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.857837][ T5826] veth0_vlan: entered promiscuous mode
[   85.887257][   T51] Bluetooth: hci1: command tx timeout
[   85.887270][ T5830] Bluetooth: hci0: command tx timeout
[   85.950900][ T5826] veth1_vlan: entered promiscuous mode
[   85.967969][   T51] Bluetooth: hci2: command tx timeout
[   85.982394][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.044631][   T51] Bluetooth: hci3: command tx timeout
[   86.126917][   T51] Bluetooth: hci4: command tx timeout
[   86.139829][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.303713][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.326729][ T5826] veth0_macvtap: entered promiscuous mode
[   86.394971][ T5826] veth1_macvtap: entered promiscuous mode
[   86.512443][ T5838] veth0_vlan: entered promiscuous mode
[   86.592427][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.607818][ T5838] veth1_vlan: entered promiscuous mode
[   86.621306][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.666231][   T58] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.676171][   T58] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.691308][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.728812][   T58] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.738072][   T58] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.792435][ T5839] veth0_vlan: entered promiscuous mode
[   86.913168][ T5827] veth0_vlan: entered promiscuous mode
[   86.933779][ T5839] veth1_vlan: entered promiscuous mode
[   87.062144][ T5838] veth0_macvtap: entered promiscuous mode
[   87.113629][ T5827] veth1_vlan: entered promiscuous mode
[   87.157639][ T5838] veth1_macvtap: entered promiscuous mode
[   87.179737][   T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.192531][   T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.261933][ T5835] veth0_vlan: entered promiscuous mode
[   87.278674][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.286765][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.323865][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.362446][ T5835] veth1_vlan: entered promiscuous mode
[   87.377654][ T5839] veth0_macvtap: entered promiscuous mode
[   87.394981][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   87.411547][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.440518][ T5827] veth0_macvtap: entered promiscuous mode
[   87.464410][ T5839] veth1_macvtap: entered promiscuous mode
[   87.482828][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.515333][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.538225][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.547899][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.575652][ T5827] veth1_macvtap: entered promiscuous mode
[   87.700449][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.743558][ T5835] veth0_macvtap: entered promiscuous mode
[   87.766358][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.781301][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.850132][ T5835] veth1_macvtap: entered promiscuous mode
[   87.871000][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.903006][   T58] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.911939][   T58] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.931984][   T58] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.941007][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.948957][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.957062][ T1100] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.966666][   T51] Bluetooth: hci0: command tx timeout
[   87.977763][   T51] Bluetooth: hci1: command tx timeout
[   87.997185][ T1100] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.006197][ T1100] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.037098][ T1100] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.046460][ T1100] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.055363][   T51] Bluetooth: hci2: command tx timeout
[   88.096030][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.116745][ T5945] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   88.136291][   T51] Bluetooth: hci3: command tx timeout
[   88.150144][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.158996][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.169295][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.205341][   T51] Bluetooth: hci4: command tx timeout
[   88.219616][   T58] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.239377][   T58] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.277019][   T58] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.287799][   T58] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.304953][ T5945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   88.317048][ T5945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   88.328437][ T5945] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   88.346732][ T5945] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   88.373564][ T5945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.400955][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.417901][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.439046][ T5945] usb 3-1: config 0 descriptor??
[   88.580788][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.601672][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.609558][ T5957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8'.
[   88.620597][ T5957] netlink: 'syz.0.8': attribute type 13 has an invalid length.
[   88.631146][ T5957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8'.
[   88.678516][ T5957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8'.
[   88.692924][ T5957] netlink: 'syz.0.8': attribute type 13 has an invalid length.
[   88.703049][ T5957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8'.
[   88.712300][   T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   88.726623][ T5957] Zero length message leads to an empty skb
[   88.747527][   T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   88.759323][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.769413][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.793400][   T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   88.825070][   T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   88.892769][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.917528][ T5945] plantronics 0003:047F:FFFF.0001: reserved main item tag 0xd
[   88.917624][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.991061][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.031019][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.045532][ T5945] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[   89.221676][ T5945] usb 3-1: USB disconnect, device number 2
[   89.239852][   T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.250457][ T5962] syz.4.5 uses obsolete (PF_INET,SOCK_PACKET)
[   89.282520][   T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.370501][ T5960] fido_id[5960]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[   89.649807][ T5971] warning: `syz.4.11' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   89.844090][   T30] audit: type=1326 audit(1773312648.306:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5972 comm="syz.1.2" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1557b9c799 code=0x0
[   90.116853][ T5982] loop2: detected capacity change from 0 to 2048
[   90.142433][ T5982] =======================================================
[   90.142433][ T5982] WARNING: The mand mount option has been deprecated and
[   90.142433][ T5982]          and is ignored by this kernel. Remove the mand
[   90.142433][ T5982]          option from the mount to silence this warning.
[   90.142433][ T5982] =======================================================
[   90.259389][ T5982] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[   90.311855][ T5982] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   90.754791][ T6001] netlink: 204 bytes leftover after parsing attributes in process `syz.1.23'.
[   90.848984][ T6006] netlink: 'syz.0.25': attribute type 29 has an invalid length.
[   90.920593][ T6006] netlink: 'syz.0.25': attribute type 29 has an invalid length.
[   90.959025][ T6006] netlink: 500 bytes leftover after parsing attributes in process `syz.0.25'.
[   91.838003][  T805] cfg80211: failed to load regulatory.db
[   92.133302][ T6012] loop4: detected capacity change from 0 to 32768
[   92.547296][ T6012] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   92.719642][    C1] sd 0:0:1:0: [sda] tag#4560 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[   92.730256][    C1] sd 0:0:1:0: [sda] tag#4560 CDB: Read(6) 08 00 00 00 00 00
[   92.994220][ T6012] XFS (loop4): Ending clean mount
[   93.093209][ T6012] XFS (loop4): Quotacheck needed: Please wait.
[   93.290755][ T6012] XFS (loop4): Quotacheck: Done.
[   93.583355][ T6084] loop1: detected capacity change from 0 to 1024
[   93.695648][ T5890] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   93.739358][ T6088] loop3: detected capacity change from 0 to 64
[   93.791662][ T5827] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   93.853451][ T6084] syz.1.38: attempt to access beyond end of device
[   93.853451][ T6084] loop1: rw=8388608, sector=5778, nr_sectors = 2 limit=1024
[   93.894580][ T5890] usb 3-1: Using ep0 maxpacket: 16
[   93.901520][ T6084] Buffer I/O error on dev loop1, logical block 2889, async page read
[   93.910385][ T6084] syz.1.38: attempt to access beyond end of device
[   93.910385][ T6084] loop1: rw=8388608, sector=393216, nr_sectors = 2 limit=1024
[   93.928756][ T5890] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   93.959293][ T6084] Buffer I/O error on dev loop1, logical block 196608, async page read
[   93.975388][ T6084] syz.1.38: attempt to access beyond end of device
[   93.975388][ T6084] loop1: rw=8388608, sector=393218, nr_sectors = 2 limit=1024
[   93.988246][ T5890] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   93.998304][   T30] audit: type=1800 audit(1773312652.446:3): pid=6088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.39" name="file1" dev="loop3" ino=22 res=0 errno=0
[   94.036580][ T6084] Buffer I/O error on dev loop1, logical block 196609, async page read
[   94.053507][ T5890] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   94.068455][ T6084] syz.1.38: attempt to access beyond end of device
[   94.068455][ T6084] loop1: rw=8388608, sector=393220, nr_sectors = 2 limit=1024
[   94.079391][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.095393][ T6088] syz.3.39: attempt to access beyond end of device
[   94.095393][ T6088] loop3: rw=8423425, sector=57, nr_sectors = 8 limit=64
[   94.109503][ T6084] Buffer I/O error on dev loop1, logical block 196610, async page read
[   94.113226][ T5890] usb 3-1: Product: syz
[   94.132271][ T6089] syz.1.38: attempt to access beyond end of device
[   94.132271][ T6089] loop1: rw=8388608, sector=5778, nr_sectors = 2 limit=1024
[   94.164020][ T5890] usb 3-1: Manufacturer: syz
[   94.165153][ T6084] syz.1.38: attempt to access beyond end of device
[   94.165153][ T6084] loop1: rw=8388608, sector=393222, nr_sectors = 2 limit=1024
[   94.181681][ T5890] usb 3-1: SerialNumber: syz
[   94.208738][ T6084] Buffer I/O error on dev loop1, logical block 196611, async page read
[   94.234623][ T6084] syz.1.38: attempt to access beyond end of device
[   94.234623][ T6084] loop1: rw=8388608, sector=393224, nr_sectors = 2 limit=1024
[   94.263308][ T6084] Buffer I/O error on dev loop1, logical block 196612, async page read
[   94.310636][ T5890] usb 3-1: 0:2 : does not exist
[   94.319828][ T6084] syz.1.38: attempt to access beyond end of device
[   94.319828][ T6084] loop1: rw=8388608, sector=393226, nr_sectors = 2 limit=1024
[   94.410053][ T6084] Buffer I/O error on dev loop1, logical block 196613, async page read
[   94.451412][ T6084] syz.1.38: attempt to access beyond end of device
[   94.451412][ T6084] loop1: rw=8388608, sector=393228, nr_sectors = 2 limit=1024
[   94.498323][ T5890] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[   94.502855][ T6084] Buffer I/O error on dev loop1, logical block 196614, async page read
[   94.548296][ T6084] Buffer I/O error on dev loop1, logical block 196615, async page read
[   94.592924][ T6084] Buffer I/O error on dev loop1, logical block 196616, async page read
[   94.718453][ T6093] loop4: detected capacity change from 0 to 512
[   94.818468][ T5890] usb 3-1: USB disconnect, device number 3
[   95.015999][ T6091] udevd[6091]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   95.049826][ T6093] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   95.087639][ T6093] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   95.475512][ T5964] delete_channel: no stack
[   95.487668][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.604775][ T6111] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   95.803030][ T6116] netlink: 'syz.2.50': attribute type 9 has an invalid length.
[   95.836293][ T6116] netlink: 'syz.2.50': attribute type 11 has an invalid length.
[   95.861184][ T6116] netlink: 'syz.2.50': attribute type 12 has an invalid length.
[   95.888927][ T6118] loop4: detected capacity change from 0 to 256
[   95.904650][ T6116] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.50'.
[   95.943143][ T6116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.50'.
[   96.039842][ T6118] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d)
[   96.513826][ T6127] netlink: 25 bytes leftover after parsing attributes in process `syz.4.54'.
[   96.688052][ T6131] netlink: 16 bytes leftover after parsing attributes in process `syz.4.56'.
[   96.745909][ T6132] netlink: 16 bytes leftover after parsing attributes in process `syz.4.56'.
[   97.012130][ T6134] loop0: detected capacity change from 0 to 2048
[   97.040782][ T6134] EXT4-fs: quotafile must be on filesystem root
[   97.355887][ T6125] loop1: detected capacity change from 0 to 40427
[   97.440977][ T6125] F2FS-fs (loop1): Image doesn't support compression
[   97.468064][ T6125] F2FS-fs (loop1): build fault injection rate: 684
[   97.498941][ T6125] F2FS-fs (loop1): build fault injection type: 0x35f7
[   97.531092][ T6125] F2FS-fs (loop1): invalid crc value
[   97.934120][ T6154] loop0: detected capacity change from 0 to 2048
[   97.988487][ T6154] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   98.044602][ T5830] Bluetooth: hci4: command 0x0405 tx timeout
[   98.059356][ T6125] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   98.125196][ T6125] F2FS-fs (loop1): Start checkpoint disabled!
[   98.141544][ T6158] netlink: 'syz.2.66': attribute type 3 has an invalid length.
[   98.216604][ T6125] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0
[   98.241039][ T6125] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   98.929219][ T6125] F2FS-fs (loop1): inject kmalloc in f2fs_kmalloc of __f2fs_setxattr+0x1f5/0x1000
[   98.979696][ T6125] overlayfs: failed to verify upper root origin
[   99.117937][ T6049] bio_check_eod: 4604 callbacks suppressed
[   99.117958][ T6049] kworker/u8:9: attempt to access beyond end of device
[   99.117958][ T6049] loop1: rw=2049, sector=45096, nr_sectors = 32 limit=40427
[   99.182268][ T6049] CPU: 1 UID: 0 PID: 6049 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) 
[   99.182298][ T6049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[   99.182312][ T6049] Workqueue: writeback wb_workfn (flush-7:1)
[   99.182351][ T6049] Call Trace:
[   99.182364][ T6049]  <TASK>
[   99.182374][ T6049]  dump_stack_lvl+0xe8/0x150
[   99.182410][ T6049]  f2fs_handle_critical_error+0x37c/0x540
[   99.182446][ T6049]  f2fs_write_end_io+0x1274/0x1740
[   99.182505][ T6049]  __submit_merged_bio+0x256/0x700
[   99.182542][ T6049]  __submit_merged_write_cond+0x3c9/0x4e0
[   99.182580][ T6049]  ? __pfx___submit_merged_write_cond+0x10/0x10
[   99.182637][ T6049]  f2fs_write_data_pages+0x287e/0x34f0
[   99.182667][ T6049]  ? unwind_next_frame+0xa5/0x23c0
[   99.182687][ T6049]  ? lock_release+0x4b/0x3d0
[   99.182765][ T6049]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   99.182813][ T6049]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[   99.182876][ T6049]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[   99.182960][ T6049]  ? __lock_acquire+0x6b5/0x2cf0
[   99.183015][ T6049]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   99.183046][ T6049]  do_writepages+0x32e/0x550
[   99.183082][ T6049]  ? reacquire_held_locks+0x104/0x190
[   99.183104][ T6049]  ? writeback_sb_inodes+0x477/0x1a20
[   99.183139][ T6049]  __writeback_single_inode+0x133/0x11a0
[   99.183168][ T6049]  ? do_raw_spin_unlock+0xf5/0x210
[   99.183200][ T6049]  writeback_sb_inodes+0x992/0x1a20
[   99.183253][ T6049]  ? unwind_next_frame+0xa5/0x23c0
[   99.183283][ T6049]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   99.183307][ T6049]  ? do_raw_spin_lock+0x12b/0x2f0
[   99.183392][ T6049]  ? rcu_is_watching+0x15/0xb0
[   99.183426][ T6049]  wb_writeback+0x456/0xb70
[   99.183458][ T6049]  ? queue_io+0x231/0x4a0
[   99.183495][ T6049]  ? __pfx_wb_writeback+0x10/0x10
[   99.183519][ T6049]  ? do_raw_spin_lock+0x12b/0x2f0
[   99.183566][ T6049]  wb_workfn+0x414/0xf50
[   99.183592][ T6049]  ? look_up_lock_class+0x57/0x110
[   99.183632][ T6049]  ? __pfx_wb_workfn+0x10/0x10
[   99.183663][ T6049]  ? do_raw_spin_unlock+0xf5/0x210
[   99.183694][ T6049]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[   99.183751][ T6049]  ? process_one_work+0x8bb/0x1780
[   99.183781][ T6049]  process_one_work+0x9ab/0x1780
[   99.183841][ T6049]  ? __pfx_process_one_work+0x10/0x10
[   99.183869][ T6049]  ? do_raw_spin_lock+0x12b/0x2f0
[   99.183917][ T6049]  worker_thread+0xb49/0x1140
[   99.183978][ T6049]  kthread+0x388/0x470
[   99.184003][ T6049]  ? __pfx_worker_thread+0x10/0x10
[   99.184021][ T6049]  ? __pfx_kthread+0x10/0x10
[   99.184048][ T6049]  ret_from_fork+0x51e/0xb90
[   99.184084][ T6049]  ? __pfx_ret_from_fork+0x10/0x10
[   99.184112][ T6049]  ? __switch_to+0xc7d/0x1450
[   99.184144][ T6049]  ? __pfx_kthread+0x10/0x10
[   99.184171][ T6049]  ret_from_fork_asm+0x1a/0x30
[   99.184215][ T6049]  </TASK>
[   99.524726][ T6049] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   99.532256][ T6049] CPU: 0 UID: 0 PID: 6049 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) 
[   99.532284][ T6049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[   99.532297][ T6049] Workqueue: writeback wb_workfn (flush-7:1)
[   99.532327][ T6049] Call Trace:
[   99.532357][ T6049]  <TASK>
[   99.532366][ T6049]  dump_stack_lvl+0xe8/0x150
[   99.532400][ T6049]  f2fs_handle_critical_error+0x37c/0x540
[   99.532436][ T6049]  f2fs_write_end_io+0x1274/0x1740
[   99.532489][ T6049]  __submit_merged_bio+0x256/0x700
[   99.532523][ T6049]  __submit_merged_write_cond+0x3c9/0x4e0
[   99.532559][ T6049]  ? __pfx___submit_merged_write_cond+0x10/0x10
[   99.532610][ T6049]  f2fs_write_data_pages+0x287e/0x34f0
[   99.532639][ T6049]  ? unwind_next_frame+0xa5/0x23c0
[   99.532659][ T6049]  ? lock_release+0x4b/0x3d0
[   99.532725][ T6049]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   99.532770][ T6049]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[   99.532828][ T6049]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[   99.532880][ T6049]  ? __lock_acquire+0x6b5/0x2cf0
[   99.532930][ T6049]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   99.532962][ T6049]  do_writepages+0x32e/0x550
[   99.532995][ T6049]  ? reacquire_held_locks+0x104/0x190
[   99.533016][ T6049]  ? writeback_sb_inodes+0x477/0x1a20
[   99.533050][ T6049]  __writeback_single_inode+0x133/0x11a0
[   99.533080][ T6049]  ? do_raw_spin_unlock+0xf5/0x210
[   99.533120][ T6049]  writeback_sb_inodes+0x992/0x1a20
[   99.533169][ T6049]  ? unwind_next_frame+0xa5/0x23c0
[   99.533197][ T6049]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   99.533227][ T6049]  ? do_raw_spin_lock+0x12b/0x2f0
[   99.533297][ T6049]  ? rcu_is_watching+0x15/0xb0
[   99.533329][ T6049]  wb_writeback+0x456/0xb70
[   99.533359][ T6049]  ? queue_io+0x231/0x4a0
[   99.533394][ T6049]  ? __pfx_wb_writeback+0x10/0x10
[   99.533418][ T6049]  ? do_raw_spin_lock+0x12b/0x2f0
[   99.533461][ T6049]  wb_workfn+0x414/0xf50
[   99.533486][ T6049]  ? look_up_lock_class+0x57/0x110
[   99.533523][ T6049]  ? __pfx_wb_workfn+0x10/0x10
[   99.533553][ T6049]  ? do_raw_spin_unlock+0xf5/0x210
[   99.533582][ T6049]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[   99.533635][ T6049]  ? process_one_work+0x8bb/0x1780
[   99.533665][ T6049]  process_one_work+0x9ab/0x1780
[   99.533720][ T6049]  ? __pfx_process_one_work+0x10/0x10
[   99.533749][ T6049]  ? do_raw_spin_lock+0x12b/0x2f0
[   99.533793][ T6049]  worker_thread+0xb49/0x1140
[   99.533842][ T6049]  kthread+0x388/0x470
[   99.533867][ T6049]  ? __pfx_worker_thread+0x10/0x10
[   99.533885][ T6049]  ? __pfx_kthread+0x10/0x10
[   99.533911][ T6049]  ret_from_fork+0x51e/0xb90
[   99.533944][ T6049]  ? __pfx_ret_from_fork+0x10/0x10
[   99.533973][ T6049]  ? __switch_to+0xc7d/0x1450
[   99.534003][ T6049]  ? __pfx_kthread+0x10/0x10
[   99.534036][ T6049]  ret_from_fork_asm+0x1a/0x30
[   99.534076][ T6049]  </TASK>
[   99.534120][ T6049] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   99.824556][ T6049] CPU: 0 UID: 0 PID: 6049 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) 
[   99.824584][ T6049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[   99.824596][ T6049] Workqueue: writeback wb_workfn (flush-7:1)
[   99.824624][ T6049] Call Trace:
[   99.824632][ T6049]  <TASK>
[   99.824641][ T6049]  dump_stack_lvl+0xe8/0x150
[   99.824674][ T6049]  f2fs_handle_critical_error+0x37c/0x540
[   99.824708][ T6049]  f2fs_write_end_io+0x1274/0x1740
[   99.824761][ T6049]  __submit_merged_bio+0x256/0x700
[   99.824796][ T6049]  __submit_merged_write_cond+0x3c9/0x4e0
[   99.824832][ T6049]  ? __pfx___submit_merged_write_cond+0x10/0x10
[   99.824884][ T6049]  f2fs_write_data_pages+0x287e/0x34f0
[   99.824913][ T6049]  ? unwind_next_frame+0xa5/0x23c0
[   99.824933][ T6049]  ? lock_release+0x4b/0x3d0
[   99.825000][ T6049]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   99.825043][ T6049]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[   99.825099][ T6049]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[   99.825152][ T6049]  ? __lock_acquire+0x6b5/0x2cf0
[   99.825202][ T6049]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   99.825233][ T6049]  do_writepages+0x32e/0x550
[   99.825266][ T6049]  ? reacquire_held_locks+0x104/0x190
[   99.825287][ T6049]  ? writeback_sb_inodes+0x477/0x1a20
[   99.825321][ T6049]  __writeback_single_inode+0x133/0x11a0
[   99.825349][ T6049]  ? do_raw_spin_unlock+0xf5/0x210
[   99.825377][ T6049]  writeback_sb_inodes+0x992/0x1a20
[   99.825435][ T6049]  ? unwind_next_frame+0xa5/0x23c0
[   99.825463][ T6049]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   99.825488][ T6049]  ? do_raw_spin_lock+0x12b/0x2f0
[   99.825556][ T6049]  ? rcu_is_watching+0x15/0xb0
[   99.825587][ T6049]  wb_writeback+0x456/0xb70
[   99.825617][ T6049]  ? queue_io+0x231/0x4a0
[   99.825653][ T6049]  ? __pfx_wb_writeback+0x10/0x10
[   99.825676][ T6049]  ? do_raw_spin_lock+0x12b/0x2f0
[   99.825720][ T6049]  wb_workfn+0x414/0xf50
[   99.825745][ T6049]  ? look_up_lock_class+0x57/0x110
[   99.825782][ T6049]  ? __pfx_wb_workfn+0x10/0x10
[   99.825811][ T6049]  ? do_raw_spin_unlock+0xf5/0x210
[   99.825839][ T6049]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[   99.825895][ T6049]  ? process_one_work+0x8bb/0x1780
[   99.825924][ T6049]  process_one_work+0x9ab/0x1780
[   99.825979][ T6049]  ? __pfx_process_one_work+0x10/0x10
[   99.826007][ T6049]  ? do_raw_spin_lock+0x12b/0x2f0
[   99.826051][ T6049]  worker_thread+0xb49/0x1140
[   99.826098][ T6049]  kthread+0x388/0x470
[   99.826124][ T6049]  ? __pfx_worker_thread+0x10/0x10
[   99.826141][ T6049]  ? __pfx_kthread+0x10/0x10
[   99.826167][ T6049]  ret_from_fork+0x51e/0xb90
[   99.826201][ T6049]  ? __pfx_ret_from_fork+0x10/0x10
[   99.826230][ T6049]  ? __switch_to+0xc7d/0x1450
[   99.826260][ T6049]  ? __pfx_kthread+0x10/0x10
[   99.826285][ T6049]  ret_from_fork_asm+0x1a/0x30
[   99.826320][ T6049]  </TASK>
[   99.826356][ T6049] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  100.174708][ T6049] CPU: 0 UID: 0 PID: 6049 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) 
[  100.174737][ T6049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  100.174749][ T6049] Workqueue: writeback wb_workfn (flush-7:1)
[  100.174781][ T6049] Call Trace:
[  100.174789][ T6049]  <TASK>
[  100.174798][ T6049]  dump_stack_lvl+0xe8/0x150
[  100.174834][ T6049]  f2fs_handle_critical_error+0x37c/0x540
[  100.174872][ T6049]  f2fs_write_end_io+0x1274/0x1740
[  100.174929][ T6049]  __submit_merged_bio+0x256/0x700
[  100.174965][ T6049]  __submit_merged_write_cond+0x3c9/0x4e0
[  100.175003][ T6049]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  100.175060][ T6049]  f2fs_write_data_pages+0x287e/0x34f0
[  100.175089][ T6049]  ? unwind_next_frame+0xa5/0x23c0
[  100.175109][ T6049]  ? lock_release+0x4b/0x3d0
[  100.175184][ T6049]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  100.175231][ T6049]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  100.175294][ T6049]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  100.175351][ T6049]  ? __lock_acquire+0x6b5/0x2cf0
[  100.175414][ T6049]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  100.175446][ T6049]  do_writepages+0x32e/0x550
[  100.175483][ T6049]  ? reacquire_held_locks+0x104/0x190
[  100.175505][ T6049]  ? writeback_sb_inodes+0x477/0x1a20
[  100.175541][ T6049]  __writeback_single_inode+0x133/0x11a0
[  100.175571][ T6049]  ? do_raw_spin_unlock+0xf5/0x210
[  100.175603][ T6049]  writeback_sb_inodes+0x992/0x1a20
[  100.175657][ T6049]  ? unwind_next_frame+0xa5/0x23c0
[  100.175687][ T6049]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  100.175712][ T6049]  ? do_raw_spin_lock+0x12b/0x2f0
[  100.175785][ T6049]  ? rcu_is_watching+0x15/0xb0
[  100.175819][ T6049]  wb_writeback+0x456/0xb70
[  100.175851][ T6049]  ? queue_io+0x231/0x4a0
[  100.175889][ T6049]  ? __pfx_wb_writeback+0x10/0x10
[  100.175911][ T6049]  ? do_raw_spin_lock+0x12b/0x2f0
[  100.175958][ T6049]  wb_workfn+0x414/0xf50
[  100.175985][ T6049]  ? look_up_lock_class+0x57/0x110
[  100.176024][ T6049]  ? __pfx_wb_workfn+0x10/0x10
[  100.176056][ T6049]  ? do_raw_spin_unlock+0xf5/0x210
[  100.176086][ T6049]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  100.176147][ T6049]  ? process_one_work+0x8bb/0x1780
[  100.176178][ T6049]  process_one_work+0x9ab/0x1780
[  100.176238][ T6049]  ? __pfx_process_one_work+0x10/0x10
[  100.176267][ T6049]  ? do_raw_spin_lock+0x12b/0x2f0
[  100.176316][ T6049]  worker_thread+0xb49/0x1140
[  100.176370][ T6049]  kthread+0x388/0x470
[  100.176403][ T6049]  ? __pfx_worker_thread+0x10/0x10
[  100.176421][ T6049]  ? __pfx_kthread+0x10/0x10
[  100.176448][ T6049]  ret_from_fork+0x51e/0xb90
[  100.176482][ T6049]  ? __pfx_ret_from_fork+0x10/0x10
[  100.176510][ T6049]  ? __switch_to+0xc7d/0x1450
[  100.176542][ T6049]  ? __pfx_kthread+0x10/0x10
[  100.176570][ T6049]  ret_from_fork_asm+0x1a/0x30
[  100.176614][ T6049]  </TASK>
[  100.177316][ T6049] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  101.271327][ T6177] loop3: detected capacity change from 0 to 40427
[  101.385028][ T6177] F2FS-fs (loop3): invalid crc value
[  101.899608][ T6177] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  101.914180][ T6177] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  102.084569][ T6207] capability: warning: `syz.4.85' uses deprecated v2 capabilities in a way that may be insecure
[  102.404270][ T6213] loop2: detected capacity change from 0 to 512
[  102.469754][ T6213] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.89: bad orphan inode 11862016
[  102.497535][ T6213] loop2: lost filesystem error report for type 5 error -117
[  102.516206][ T6213] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  102.625150][ T6213] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  102.806653][ T6221] GUP no longer grows the stack in syz.4.90 (6221): 200000011000-200000018000 (20000000e000)
[  102.837972][ T6221] CPU: 0 UID: 0 PID: 6221 Comm: syz.4.90 Not tainted syzkaller #0 PREEMPT(full) 
[  102.838002][ T6221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  102.838015][ T6221] Call Trace:
[  102.838023][ T6221]  <TASK>
[  102.838031][ T6221]  dump_stack_lvl+0xe8/0x150
[  102.838070][ T6221]  __get_user_pages+0x2378/0x2720
[  102.838119][ T6221]  ? mtree_load+0x12a/0x780
[  102.838153][ T6221]  get_user_pages_remote+0x2f6/0xab0
[  102.838180][ T6221]  ? __pfx_mtree_load+0x10/0x10
[  102.838209][ T6221]  ? __pfx_get_user_pages_remote+0x10/0x10
[  102.838238][ T6221]  ? __access_remote_vm+0xa3/0x6f0
[  102.838268][ T6221]  ? __access_remote_vm+0x42c/0x6f0
[  102.838303][ T6221]  __access_remote_vm+0x222/0x6f0
[  102.838344][ T6221]  ? __pfx___access_remote_vm+0x10/0x10
[  102.838378][ T6221]  ? alloc_pages_noprof+0x13b/0x2a0
[  102.838407][ T6221]  proc_pid_cmdline_read+0x419/0x7f0
[  102.838441][ T6221]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[  102.838483][ T6221]  ? rw_verify_area+0x2a6/0x4d0
[  102.838507][ T6221]  vfs_readv+0x587/0x840
[  102.838535][ T6221]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[  102.838565][ T6221]  ? __pfx_vfs_readv+0x10/0x10
[  102.838606][ T6221]  ? __fget_files+0x2a/0x420
[  102.838639][ T6221]  ? __fget_files+0x3a0/0x420
[  102.838665][ T6221]  ? __fget_files+0x2a/0x420
[  102.838709][ T6221]  __x64_sys_preadv+0x19f/0x2a0
[  102.838735][ T6221]  ? __pfx___x64_sys_preadv+0x10/0x10
[  102.838771][ T6221]  do_syscall_64+0x14d/0xf80
[  102.838792][ T6221]  ? trace_irq_disable+0x3b/0x150
[  102.838817][ T6221]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.838842][ T6221]  ? clear_bhb_loop+0x40/0x90
[  102.838867][ T6221]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.838887][ T6221] RIP: 0033:0x7f28cad9c799
[  102.838936][ T6221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  102.838954][ T6221] RSP: 002b:00007f28cbc3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  102.838989][ T6221] RAX: ffffffffffffffda RBX: 00007f28cb015fa0 RCX: 00007f28cad9c799
[  102.839004][ T6221] RDX: 0000000000000001 RSI: 0000200000001200 RDI: 0000000000000003
[  102.839017][ T6221] RBP: 00007f28cae32c99 R08: 0000000000006a76 R09: 0000000000000000
[  102.839029][ T6221] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000000
[  102.839041][ T6221] R13: 00007f28cb016038 R14: 00007f28cb015fa0 R15: 00007ffefdad9d98
[  102.839074][ T6221]  </TASK>
[  103.386189][ T5826] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  103.496365][ T6224] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.92'.
[  103.738743][ T6230] netlink: 'syz.4.94': attribute type 4 has an invalid length.
[  103.770400][ T6230] netlink: 152 bytes leftover after parsing attributes in process `syz.4.94'.
[  103.827865][ T6230] .`: renamed from bond0 (while UP)
[  104.684979][ T5964] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  104.850424][ T6236] loop4: detected capacity change from 0 to 32768
[  104.867543][ T5964] usb 4-1: Using ep0 maxpacket: 16
[  104.898669][ T5964] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  104.920408][ T6236] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.97 (6236)
[  104.944942][ T5964] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  104.996049][ T5964] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  105.015444][ T5964] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.042921][ T5964] usb 4-1: Product: syz
[  105.077049][ T5964] usb 4-1: Manufacturer: syz
[  105.118397][ T5964] usb 4-1: SerialNumber: syz
[  105.170881][ T6236] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  105.211277][ T5964] usb 4-1: config 0 descriptor??
[  105.245516][ T6236] BTRFS info (device loop4): using crc32c checksum algorithm
[  105.265946][ T5964] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  105.329376][ T5964] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[  105.675721][ T6236] BTRFS info (device loop4): enabling ssd optimizations
[  105.702118][ T6236] BTRFS info (device loop4): turning on flush-on-commit
[  105.724567][ T6236] BTRFS info (device loop4): enabling free space tree
[  105.730943][ T6277] input: syz1 as /devices/virtual/input/input6
[  105.748010][ T6236] BTRFS info (device loop4): enabling auto defrag
[  105.784645][ T6236] BTRFS info (device loop4): use lzo compression, level 1
[  105.811450][ T6236] BTRFS info (device loop4): max_inline set to 4096
[  105.861527][ T5964] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  105.880762][ T5964] em28xx 4-1:0.0: Config register raw data: 0xbf
[  105.914858][ T5964] em28xx 4-1:0.0: I2S Audio (3 sample rate(s))
[  105.951420][ T5964] em28xx 4-1:0.0: No AC97 audio processor
[  106.334630][ T5964] usb 4-1: USB disconnect, device number 2
[  106.537001][ T5827] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  106.560429][ T6275] loop0: detected capacity change from 0 to 32768
[  106.653444][ T6275] XFS (loop0): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  106.979879][ T6275] XFS (loop0): Starting recovery (logdev: internal)
[  107.120957][ T6275] XFS (loop0): Ending recovery (logdev: internal)
[  107.286817][ T6275] XFS (loop0): Corruption warning: Metadata has LSN (8192:64) ahead of current LSN (1:192). Please unmount and run xfs_repair (>= v4.3) to resolve.
[  107.322530][ T6275] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  107.355965][ T6275] XFS (loop0): Unmount and run xfs_repair
[  107.373736][ T6275] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  107.389574][ T6275] 00000000: 53 55 4d 59 00 00 00 02 ff ff ff ff ff ff ff ff  SUMY............
[  107.409196][ T6275] 00000010: 00 00 00 00 00 00 00 04 00 00 20 00 00 00 00 40  .......... ....@
[  107.428127][ T6275] 00000020: 9f 91 83 2a 3b 79 45 c3 9d 6d ed 0b c7 35 7f e4  ...*;yE..m...5..
[  107.505663][ T6275] 00000030: 00 00 00 00 25 47 cc 81 00 00 00 0d 00 00 00 03  ....%G..........
[  107.587635][ T6275] 00000040: 00 00 0e a8 00 00 11 58 00 00 00 00 00 00 00 00  .......X........
[  107.622279][ T6275] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  107.695320][ T6275] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  107.732319][ T6275] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  107.792366][ T6275] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x2b0/0x490" at daddr 0x4 len 4 error 74
[  107.819504][ T6275] XFS (loop0): page discard on page ffffea0001b44c00, inode 0x1d06, pos 2048.
[  107.831090][ T6275] XFS (loop0): Corruption warning: Metadata has LSN (8192:64) ahead of current LSN (1:192). Please unmount and run xfs_repair (>= v4.3) to resolve.
[  107.865661][ T6275] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  107.907689][ T6275] XFS (loop0): Unmount and run xfs_repair
[  107.929979][ T6275] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  107.964557][ T6275] 00000000: 53 55 4d 59 00 00 00 02 ff ff ff ff ff ff ff ff  SUMY............
[  107.994996][ T6275] 00000010: 00 00 00 00 00 00 00 04 00 00 20 00 00 00 00 40  .......... ....@
[  108.037065][ T6275] 00000020: 9f 91 83 2a 3b 79 45 c3 9d 6d ed 0b c7 35 7f e4  ...*;yE..m...5..
[  108.083244][ T6275] 00000030: 00 00 00 00 25 47 cc 81 00 00 00 0d 00 00 00 03  ....%G..........
[  108.101670][ T6275] 00000040: 00 00 0e a8 00 00 11 58 00 00 00 00 00 00 00 00  .......X........
[  108.153987][ T6275] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  108.188068][ T6275] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  108.226275][ T6275] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  108.254241][ T6275] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x2b0/0x490" at daddr 0x4 len 4 error 74
[  108.282572][ T6275] XFS (loop0): page discard on page ffffea0001ad4f80, inode 0x1d06, pos 4096.
[  108.321898][ T6275] XFS (loop0): Corruption warning: Metadata has LSN (8192:64) ahead of current LSN (1:192). Please unmount and run xfs_repair (>= v4.3) to resolve.
[  108.366451][ T6275] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  108.402468][ T6275] XFS (loop0): Unmount and run xfs_repair
[  108.419783][ T6275] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  108.443075][ T6275] 00000000: 53 55 4d 59 00 00 00 02 ff ff ff ff ff ff ff ff  SUMY............
[  108.474154][ T6275] 00000010: 00 00 00 00 00 00 00 04 00 00 20 00 00 00 00 40  .......... ....@
[  108.501171][ T6275] 00000020: 9f 91 83 2a 3b 79 45 c3 9d 6d ed 0b c7 35 7f e4  ...*;yE..m...5..
[  108.521997][ T6275] 00000030: 00 00 00 00 25 47 cc 81 00 00 00 0d 00 00 00 03  ....%G..........
[  108.541802][ T6275] 00000040: 00 00 0e a8 00 00 11 58 00 00 00 00 00 00 00 00  .......X........
[  108.561285][ T6275] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  108.572249][ T6275] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  108.608363][ T6275] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  108.632842][ T6275] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x2b0/0x490" at daddr 0x4 len 4 error 74
[  108.670192][ T6275] XFS (loop0): page discard on page ffffea0001b79a00, inode 0x1d06, pos 8192.
[  108.701241][ T6275] XFS (loop0): Corruption warning: Metadata has LSN (8192:64) ahead of current LSN (1:192). Please unmount and run xfs_repair (>= v4.3) to resolve.
[  108.749928][ T6275] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  108.786081][ T6275] XFS (loop0): Unmount and run xfs_repair
[  108.809157][ T6275] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  108.833032][ T6275] 00000000: 53 55 4d 59 00 00 00 02 ff ff ff ff ff ff ff ff  SUMY............
[  108.861567][ T6275] 00000010: 00 00 00 00 00 00 00 04 00 00 20 00 00 00 00 40  .......... ....@
[  108.897102][ T6275] 00000020: 9f 91 83 2a 3b 79 45 c3 9d 6d ed 0b c7 35 7f e4  ...*;yE..m...5..
[  108.925600][ T6275] 00000030: 00 00 00 00 25 47 cc 81 00 00 00 0d 00 00 00 03  ....%G..........
[  108.950630][ T6275] 00000040: 00 00 0e a8 00 00 11 58 00 00 00 00 00 00 00 00  .......X........
[  108.988972][ T6275] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  109.017291][ T6275] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  109.048488][ T6275] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  109.094856][ T6275] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x2b0/0x490" at daddr 0x4 len 4 error 74
[  109.123551][ T6275] XFS (loop0): page discard on page ffffea0001571700, inode 0x1d06, pos 16384.
[  109.148282][ T6275] XFS (loop0): Corruption warning: Metadata has LSN (8192:64) ahead of current LSN (1:192). Please unmount and run xfs_repair (>= v4.3) to resolve.
[  109.196074][ T6275] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  109.226653][ T6275] XFS (loop0): Unmount and run xfs_repair
[  109.239820][ T6275] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  109.257852][ T6275] 00000000: 53 55 4d 59 00 00 00 02 ff ff ff ff ff ff ff ff  SUMY............
[  109.292224][ T6275] 00000010: 00 00 00 00 00 00 00 04 00 00 20 00 00 00 00 40  .......... ....@
[  109.316200][ T6275] 00000020: 9f 91 83 2a 3b 79 45 c3 9d 6d ed 0b c7 35 7f e4  ...*;yE..m...5..
[  109.351541][ T6275] 00000030: 00 00 00 00 25 47 cc 81 00 00 00 0d 00 00 00 03  ....%G..........
[  109.381613][ T6275] 00000040: 00 00 0e a8 00 00 11 58 00 00 00 00 00 00 00 00  .......X........
[  109.417951][ T6275] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  109.435091][ T6275] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  109.465250][ T6275] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  109.478083][ T6275] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x2b0/0x490" at daddr 0x4 len 4 error 74
[  109.503820][ T6275] XFS (loop0): page discard on page ffffea0002ff9a00, inode 0x1d06, pos 32768.
[  109.525101][ T6326] loop2: detected capacity change from 0 to 40427
[  109.553638][ T6326] F2FS-fs (loop2): build fault injection rate: 771
[  109.576532][ T6275] XFS (loop0): Corruption warning: Metadata has LSN (8192:64) ahead of current LSN (1:192). Please unmount and run xfs_repair (>= v4.3) to resolve.
[  109.618558][ T6326] F2FS-fs (loop2): invalid crc value
[  109.663218][ T6275] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  109.715654][ T6275] XFS (loop0): Unmount and run xfs_repair
[  109.721496][ T6275] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  109.742215][ T6275] 00000000: 53 55 4d 59 00 00 00 02 ff ff ff ff ff ff ff ff  SUMY............
[  109.775354][ T6275] 00000010: 00 00 00 00 00 00 00 04 00 00 20 00 00 00 00 40  .......... ....@
[  109.805669][ T6275] 00000020: 9f 91 83 2a 3b 79 45 c3 9d 6d ed 0b c7 35 7f e4  ...*;yE..m...5..
[  109.831601][ T6275] 00000030: 00 00 00 00 25 47 cc 81 00 00 00 0d 00 00 00 03  ....%G..........
[  109.864503][ T6275] 00000040: 00 00 0e a8 00 00 11 58 00 00 00 00 00 00 00 00  .......X........
[  109.893163][ T6275] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  109.924558][ T6275] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  109.948387][ T6275] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  109.975594][ T6275] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x2b0/0x490" at daddr 0x4 len 4 error 74
[  109.976685][ T6326] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  109.998035][ T6275] XFS (loop0): page discard on page ffffea00014fb4c0, inode 0x1d06, pos 65536.
[  110.021626][  T804] loop0: writeback error on inode 7430, offset 0, sector 14980
[  110.060091][ T6326] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  110.092082][ T5838] XFS (loop0): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  110.106925][ T5838] XFS (loop0): Uncorrected metadata errors detected; please run xfs_repair.
[  110.466115][ T5826] syz-executor: attempt to access beyond end of device
[  110.466115][ T5826] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  110.511170][ T5826] CPU: 1 UID: 0 PID: 5826 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  110.511199][ T5826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  110.511211][ T5826] Call Trace:
[  110.511219][ T5826]  <TASK>
[  110.511228][ T5826]  dump_stack_lvl+0xe8/0x150
[  110.511265][ T5826]  f2fs_handle_critical_error+0x37c/0x540
[  110.511300][ T5826]  f2fs_write_end_io+0x1274/0x1740
[  110.511355][ T5826]  __submit_merged_bio+0x256/0x700
[  110.511389][ T5826]  __submit_merged_write_cond+0x3c9/0x4e0
[  110.511425][ T5826]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  110.511505][ T5826]  f2fs_write_data_pages+0x287e/0x34f0
[  110.511582][ T5826]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  110.511640][ T5826]  ? unwind_get_return_address+0x4d/0x90
[  110.511662][ T5826]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  110.511718][ T5826]  ? check_noncircular+0xda/0x150
[  110.511750][ T5826]  ? lockdep_unlock+0x5d/0xd0
[  110.511777][ T5826]  ? __lock_acquire+0x146e/0x2cf0
[  110.511833][ T5826]  ? do_raw_spin_lock+0x12b/0x2f0
[  110.511871][ T5826]  ? do_raw_spin_unlock+0xf5/0x210
[  110.511898][ T5826]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  110.511929][ T5826]  do_writepages+0x32e/0x550
[  110.511971][ T5826]  ? do_raw_spin_unlock+0xf5/0x210
[  110.512002][ T5826]  filemap_fdatawrite+0x1e9/0x2f0
[  110.512031][ T5826]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  110.512105][ T5826]  ? do_raw_spin_unlock+0xf5/0x210
[  110.512137][ T5826]  f2fs_sync_dirty_inodes+0x30e/0x860
[  110.512184][ T5826]  f2fs_write_checkpoint+0x9df/0x26a0
[  110.512251][ T5826]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  110.512326][ T5826]  ? kfree+0x1c5/0x640
[  110.512353][ T5826]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  110.512384][ T5826]  kill_f2fs_super+0x314/0x720
[  110.512421][ T5826]  ? __pfx_kill_f2fs_super+0x10/0x10
[  110.512466][ T5826]  ? lockdep_hardirqs_on+0x7a/0x110
[  110.512502][ T5826]  deactivate_locked_super+0xbc/0x130
[  110.512535][ T5826]  cleanup_mnt+0x437/0x4d0
[  110.512555][ T5826]  ? _raw_spin_unlock_irq+0x23/0x50
[  110.512597][ T5826]  task_work_run+0x1d9/0x270
[  110.512628][ T5826]  ? __pfx_task_work_run+0x10/0x10
[  110.512666][ T5826]  exit_to_user_mode_loop+0xed/0x480
[  110.512694][ T5826]  ? rcu_is_watching+0x15/0xb0
[  110.512724][ T5826]  do_syscall_64+0x32d/0xf80
[  110.512745][ T5826]  ? trace_irq_disable+0x3b/0x150
[  110.512770][ T5826]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.512791][ T5826]  ? clear_bhb_loop+0x40/0x90
[  110.512818][ T5826]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.512838][ T5826] RIP: 0033:0x7f1fb579d9d7
[  110.512857][ T5826] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  110.512873][ T5826] RSP: 002b:00007ffd586bc578 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  110.512894][ T5826] RAX: 0000000000000000 RBX: 00007f1fb5832050 RCX: 00007f1fb579d9d7
[  110.512908][ T5826] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd586bc630
[  110.512920][ T5826] RBP: 00007ffd586bc630 R08: 00007ffd586bd630 R09: 00000000ffffffff
[  110.512934][ T5826] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd586bd6c0
[  110.512946][ T5826] R13: 00007f1fb5832050 R14: 000000000001aef5 R15: 00007ffd586bd700
[  110.512980][ T5826]  </TASK>
[  110.832210][ T5826] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  110.949932][ T6346] loop4: detected capacity change from 0 to 32768
[  111.297814][   T30] audit: type=1800 audit(1773312669.766:4): pid=6346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.132" name="file1" dev="loop4" ino=7 res=0 errno=0
[  112.624660][ T6376] loop3: detected capacity change from 0 to 256
[  112.700754][ T6376] FAT-fs (loop3): bogus number of FAT sectors
[  112.714665][ T6376] FAT-fs (loop3): Can't find a valid FAT filesystem
[  113.486844][ T6388] netlink: 27 bytes leftover after parsing attributes in process `syz.4.148'.
[  113.747040][ T5964] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  113.925257][ T5964] usb 1-1: Using ep0 maxpacket: 32
[  113.939010][ T5964] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  113.959771][ T5964] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  113.996154][ T5964] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  114.022583][ T5964] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  114.080065][ T5964] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  114.107084][ T5964] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  114.134862][ T5964] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  114.155000][ T5964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.210616][ T5964] usb 1-1: config 0 descriptor??
[  114.530686][ T5964] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  114.567364][ T5964] usb 1-1: USB disconnect, device number 2
[  114.645387][ T5964] usblp0: removed
[  114.935314][ T6423] netlink: 'syz.3.162': attribute type 1 has an invalid length.
[  115.005511][ T5964] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  115.153538][ T6423] 8021q: adding VLAN 0 to HW filter on device bond1
[  115.260651][ T5964] usb 1-1: Using ep0 maxpacket: 32
[  115.269706][ T5964] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  115.284501][ T5964] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  115.303401][ T5964] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  115.323532][ T5964] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  115.342495][ T5964] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  115.354234][ T5964] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  115.371258][ T5964] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  115.392635][ T5964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.402147][ T6428] bond1: (slave gretap1): making interface the new active one
[  115.419438][ T6428] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  115.432555][ T5964] usb 1-1: config 0 descriptor??
[  115.906100][ T6433] loop3: detected capacity change from 0 to 32768
[  115.920625][ T6433] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.166 (6433)
[  115.935268][ T5964] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  115.953482][ T6433] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  115.964161][ T6433] BTRFS info (device loop3): using sha256 checksum algorithm
[  115.971917][ T6433] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  115.995741][ T5964] usb 1-1: USB disconnect, device number 3
[  116.015354][ T5964] usblp0: removed
[  116.110946][ T6433] BTRFS info (device loop3): rebuilding free space tree
[  116.160822][ T6433] BTRFS info (device loop3): disabling free space tree
[  116.170208][ T6433] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  116.180230][ T6433] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  116.200478][ T6433] BTRFS info (device loop3): enabling ssd optimizations
[  116.207752][ T6433] BTRFS info (device loop3): turning on async discard
[  116.214637][ T6433] BTRFS info (device loop3): enabling disk space caching
[  116.221700][ T6433] BTRFS info (device loop3): force clearing of disk cache
[  116.228955][ T6433] BTRFS info (device loop3): enabling auto defrag
[  116.235711][ T6433] BTRFS info (device loop3): force zlib compression, level 3
[  116.585009][ T5839] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  116.600092][  T134] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared)
[  116.936748][    T9] IPVS: starting estimator thread 0...
[  117.074824][ T6465] IPVS: using max 30 ests per chain, 72000 per kthread
[  117.149757][ T6469] loop4: detected capacity change from 0 to 512
[  117.206192][ T6469] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  117.470683][ T6469] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  117.586677][ T6469] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  117.589276][ T6471] loop2: detected capacity change from 0 to 40427
[  117.629258][ T6471] F2FS-fs (loop2): invalid crc value
[  117.714591][ T6471] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  117.727872][ T6471] F2FS-fs (loop2): Start checkpoint disabled!
[  117.741356][ T6471] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0
[  117.754568][ T6471] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  118.067642][ T6479] syz.2.175: attempt to access beyond end of device
[  118.067642][ T6479] loop2: rw=2049, sector=45096, nr_sectors = 1096 limit=40427
[  118.307010][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.806054][ T6467] loop3: detected capacity change from 0 to 32768
[  118.823885][   T49] kworker/u8:3: attempt to access beyond end of device
[  118.823885][   T49] loop2: rw=1, sector=77824, nr_sectors = 4096 limit=40427
[  118.867518][ T6467] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.169 (6467)
[  119.007743][   T49] kworker/u8:3: attempt to access beyond end of device
[  119.007743][   T49] loop2: rw=1, sector=49152, nr_sectors = 4096 limit=40427
[  119.033390][ T6467] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  119.082531][ T6467] BTRFS info (device loop3): using sha256 checksum algorithm
[  119.209104][ T6467] BTRFS info (device loop3): enabling ssd optimizations
[  119.226091][ T6467] BTRFS info (device loop3): turning on async discard
[  119.243548][ T6467] BTRFS info (device loop3): enabling free space tree
[  119.293992][ T6467] overlayfs: failed to clone lowerpath
[  119.313415][   T49] kworker/u8:3: attempt to access beyond end of device
[  119.313415][   T49] loop2: rw=1, sector=57344, nr_sectors = 16384 limit=40427
[  119.345621][   T49] kworker/u8:3: attempt to access beyond end of device
[  119.345621][   T49] loop2: rw=1, sector=73728, nr_sectors = 8 limit=40427
[  119.387279][   T49] kworker/u8:3: attempt to access beyond end of device
[  119.387279][   T49] loop2: rw=1, sector=73736, nr_sectors = 8 limit=40427
[  119.421365][   T49] kworker/u8:3: attempt to access beyond end of device
[  119.421365][   T49] loop2: rw=1, sector=73744, nr_sectors = 8 limit=40427
[  119.491134][   T49] kworker/u8:3: attempt to access beyond end of device
[  119.491134][   T49] loop2: rw=1, sector=73752, nr_sectors = 8 limit=40427
[  119.519251][ T5839] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  119.559072][   T49] kworker/u8:3: attempt to access beyond end of device
[  119.559072][   T49] loop2: rw=1, sector=73760, nr_sectors = 8 limit=40427
[  119.642370][   T49] kworker/u8:3: attempt to access beyond end of device
[  119.642370][   T49] loop2: rw=1, sector=73768, nr_sectors = 8 limit=40427
[  120.261829][ T6526] netlink: 104 bytes leftover after parsing attributes in process `syz.3.189'.
[  120.280113][ T6492] loop0: detected capacity change from 0 to 40427
[  120.334312][ T6492] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  120.375468][ T6492] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  120.416949][ T6492] F2FS-fs (loop0): invalid crc value
[  120.584831][   T49] CPU: 1 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) 
[  120.584861][   T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  120.584874][   T49] Workqueue: writeback wb_workfn (flush-7:2)
[  120.584912][   T49] Call Trace:
[  120.584921][   T49]  <TASK>
[  120.584929][   T49]  dump_stack_lvl+0xe8/0x150
[  120.584964][   T49]  f2fs_handle_critical_error+0x37c/0x540
[  120.585000][   T49]  f2fs_write_end_io+0x1274/0x1740
[  120.585057][   T49]  __submit_merged_bio+0x256/0x700
[  120.585085][   T49]  ? _raw_spin_unlock+0x28/0x50
[  120.585120][   T49]  f2fs_submit_page_write+0x23ab/0x2540
[  120.585184][   T49]  ? __pfx_f2fs_submit_page_write+0x10/0x10
[  120.585218][   T49]  ? __f2fs_is_valid_blkaddr+0xd2a/0x14f0
[  120.585257][   T49]  do_write_page+0x40f/0xab0
[  120.585292][   T49]  f2fs_outplace_write_data+0x11a/0x220
[  120.585319][   T49]  f2fs_do_write_data_page+0x123b/0x16f0
[  120.585364][   T49]  ? __pfx_f2fs_do_write_data_page+0x10/0x10
[  120.585413][   T49]  ? __lock_acquire+0x6b5/0x2cf0
[  120.585453][   T49]  f2fs_write_single_data_page+0x976/0x18b0
[  120.585506][   T49]  ? __pfx_f2fs_write_single_data_page+0x10/0x10
[  120.585580][   T49]  ? folio_clear_dirty_for_io+0x570/0x710
[  120.585609][   T49]  ? folio_clear_dirty_for_io+0x1d4/0x710
[  120.585639][   T49]  f2fs_write_data_pages+0x1a42/0x34f0
[  120.585718][   T49]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  120.585844][   T49]  ? __lock_acquire+0x6b5/0x2cf0
[  120.585899][   T49]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  120.585930][   T49]  do_writepages+0x32e/0x550
[  120.585965][   T49]  ? reacquire_held_locks+0x104/0x190
[  120.585988][   T49]  ? writeback_sb_inodes+0x477/0x1a20
[  120.586024][   T49]  __writeback_single_inode+0x133/0x11a0
[  120.586054][   T49]  ? do_raw_spin_unlock+0xf5/0x210
[  120.586088][   T49]  writeback_sb_inodes+0x992/0x1a20
[  120.586154][   T49]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  120.586179][   T49]  ? do_raw_spin_lock+0x12b/0x2f0
[  120.586258][   T49]  ? rcu_is_watching+0x15/0xb0
[  120.586293][   T49]  wb_writeback+0x456/0xb70
[  120.586324][   T49]  ? queue_io+0x231/0x4a0
[  120.586361][   T49]  ? __pfx_wb_writeback+0x10/0x10
[  120.586386][   T49]  ? do_raw_spin_lock+0x12b/0x2f0
[  120.586434][   T49]  wb_workfn+0x414/0xf50
[  120.586460][   T49]  ? look_up_lock_class+0x57/0x110
[  120.586497][   T49]  ? __pfx_wb_workfn+0x10/0x10
[  120.586529][   T49]  ? do_raw_spin_unlock+0xf5/0x210
[  120.586566][   T49]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  120.586621][   T49]  ? process_one_work+0x8bb/0x1780
[  120.586651][   T49]  process_one_work+0x9ab/0x1780
[  120.586712][   T49]  ? __pfx_process_one_work+0x10/0x10
[  120.586740][   T49]  ? do_raw_spin_lock+0x12b/0x2f0
[  120.586787][   T49]  worker_thread+0xb49/0x1140
[  120.586819][   T49]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  120.586870][   T49]  kthread+0x388/0x470
[  120.586897][   T49]  ? __pfx_worker_thread+0x10/0x10
[  120.586915][   T49]  ? __pfx_kthread+0x10/0x10
[  120.586942][   T49]  ret_from_fork+0x51e/0xb90
[  120.586978][   T49]  ? __pfx_ret_from_fork+0x10/0x10
[  120.587007][   T49]  ? __switch_to+0xc7d/0x1450
[  120.587039][   T49]  ? __pfx_kthread+0x10/0x10
[  120.587068][   T49]  ret_from_fork_asm+0x1a/0x30
[  120.587113][   T49]  </TASK>
[  120.646766][   T49] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  120.991495][ T6492] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  121.039924][ T6492] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  121.065103][ T6492] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  121.211236][ T6544] netlink: 'syz.3.193': attribute type 4 has an invalid length.
[  121.284130][ T6544] netlink: 'syz.3.193': attribute type 4 has an invalid length.
[  121.390141][ T6492] CPU: 0 UID: 0 PID: 6492 Comm: syz.0.179 Not tainted syzkaller #0 PREEMPT(full) 
[  121.390171][ T6492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  121.390184][ T6492] Call Trace:
[  121.390192][ T6492]  <TASK>
[  121.390202][ T6492]  dump_stack_lvl+0xe8/0x150
[  121.390241][ T6492]  f2fs_handle_critical_error+0x37c/0x540
[  121.390276][ T6492]  f2fs_write_end_io+0x1274/0x1740
[  121.390334][ T6492]  __submit_merged_bio+0x256/0x700
[  121.390371][ T6492]  f2fs_submit_merged_write+0x284/0x390
[  121.390405][ T6492]  ? __pfx_f2fs_submit_merged_write+0x10/0x10
[  121.390453][ T6492]  f2fs_sync_node_pages+0x14bf/0x1680
[  121.390505][ T6492]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  121.390595][ T6492]  f2fs_write_checkpoint+0xeb8/0x26a0
[  121.390667][ T6492]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  121.390744][ T6492]  ? down_write+0x16d/0x200
[  121.390770][ T6492]  ? __pfx_down_write+0x10/0x10
[  121.390801][ T6492]  ? uplift_priority+0xdb/0x730
[  121.390827][ T6492]  ? __pfx_hlock_conflict+0x10/0x10
[  121.390862][ T6492]  f2fs_issue_checkpoint+0x456/0x790
[  121.390908][ T6492]  ? __pfx_f2fs_issue_checkpoint+0x10/0x10
[  121.390989][ T6492]  ? f2fs_sync_fs+0x1f0/0x400
[  121.391019][ T6492]  f2fs_link+0x67f/0x870
[  121.391051][ T6492]  ? __pfx_f2fs_link+0x10/0x10
[  121.391081][ T6492]  ? down_write+0x16d/0x200
[  121.391105][ T6492]  ? __pfx_down_write+0x10/0x10
[  121.391132][ T6492]  ? inode_permission+0x346/0x5f0
[  121.391160][ T6492]  ? try_break_deleg+0x5b/0x180
[  121.391196][ T6492]  vfs_link+0x518/0x6e0
[  121.391232][ T6492]  filename_linkat+0x273/0x600
[  121.391269][ T6492]  ? __pfx_filename_linkat+0x10/0x10
[  121.391300][ T6492]  ? do_getname+0x151/0x250
[  121.391330][ T6492]  __se_sys_linkat+0x60/0x2d0
[  121.391360][ T6492]  do_syscall_64+0x14d/0xf80
[  121.391380][ T6492]  ? trace_irq_disable+0x3b/0x150
[  121.391405][ T6492]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.391426][ T6492]  ? clear_bhb_loop+0x40/0x90
[  121.391452][ T6492]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.391473][ T6492] RIP: 0033:0x7fdbf0d9c799
[  121.391512][ T6492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  121.391529][ T6492] RSP: 002b:00007fdbeeff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000109
[  121.391559][ T6492] RAX: ffffffffffffffda RBX: 00007fdbf1015fa0 RCX: 00007fdbf0d9c799
[  121.391575][ T6492] RDX: ffffffffffffff9c RSI: 00002000000006c0 RDI: ffffffffffffff9c
[  121.391590][ T6492] RBP: 00007fdbf0e32c99 R08: 0000000000000000 R09: 0000000000000000
[  121.391603][ T6492] R10: 0000200000000700 R11: 0000000000000246 R12: 0000000000000000
[  121.391616][ T6492] R13: 00007fdbf1016038 R14: 00007fdbf1015fa0 R15: 00007ffe7e0aace8
[  121.391655][ T6492]  </TASK>
[  121.391678][ T6492] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  126.119653][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  126.243230][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  126.297428][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  126.317346][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  126.327593][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  126.340715][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  126.350657][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  126.424771][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[  126.476300][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  126.485725][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  126.700311][   T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[  126.714738][   T51] CPU: 0 UID: 0 PID: 51 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) 
[  126.714785][   T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  126.714798][   T51] Workqueue: hci3 hci_rx_work
[  126.714824][   T51] Call Trace:
[  126.714833][   T51]  <TASK>
[  126.714842][   T51]  dump_stack_lvl+0xe8/0x150
[  126.714878][   T51]  sysfs_create_dir_ns+0x271/0x2a0
[  126.714910][   T51]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  126.714941][   T51]  ? do_raw_spin_unlock+0xf5/0x210
[  126.714974][   T51]  kobject_add_internal+0x62b/0xd00
[  126.715009][   T51]  kobject_add+0x163/0x240
[  126.715040][   T51]  ? __pfx_kobject_add+0x10/0x10
[  126.715066][   T51]  ? _raw_spin_unlock+0x28/0x50
[  126.715101][   T51]  ? get_device_parent+0x366/0x3a0
[  126.715130][   T51]  device_add+0x408/0xb70
[  126.715158][   T51]  hci_conn_add_sysfs+0xd5/0x210
[  126.715195][   T51]  le_conn_complete_evt+0xf1d/0x1430
[  126.715234][   T51]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  126.715260][   T51]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  126.715287][   T51]  ? __pfx___mutex_lock+0x10/0x10
[  126.715311][   T51]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  126.715333][   T51]  ? skb_pull_data+0xfb/0x200
[  126.715365][   T51]  hci_le_conn_complete_evt+0x187/0x470
[  126.715400][   T51]  hci_event_packet+0x7af/0x12c0
[  126.715428][   T51]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  126.715455][   T51]  ? __pfx_hci_event_packet+0x10/0x10
[  126.715482][   T51]  ? kcov_remote_start+0x49a/0x7a0
[  126.715522][   T51]  ? hci_send_to_monitor+0xe2/0x590
[  126.715554][   T51]  hci_rx_work+0x3ee/0x1040
[  126.715587][   T51]  ? process_one_work+0x8bb/0x1780
[  126.715618][   T51]  process_one_work+0x9ab/0x1780
[  126.715673][   T51]  ? __pfx_process_one_work+0x10/0x10
[  126.715703][   T51]  ? do_raw_spin_lock+0x12b/0x2f0
[  126.715748][   T51]  worker_thread+0xb49/0x1140
[  126.715798][   T51]  kthread+0x388/0x470
[  126.715824][   T51]  ? __pfx_worker_thread+0x10/0x10
[  126.715841][   T51]  ? __pfx_kthread+0x10/0x10
[  126.715868][   T51]  ret_from_fork+0x51e/0xb90
[  126.715903][   T51]  ? __pfx_ret_from_fork+0x10/0x10
[  126.715932][   T51]  ? __switch_to+0xc7d/0x1450
[  126.715975][   T51]  ? __pfx_kthread+0x10/0x10
[  126.716002][   T51]  ret_from_fork_asm+0x1a/0x30
[  126.716040][   T51]  </TASK>
[  126.716159][   T51] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  126.956463][   T51] Bluetooth: hci3: failed to register connection device
[  127.092890][ T6648] loop3: detected capacity change from 0 to 128
[  127.295470][ T6653] Bluetooth: MGMT ver 1.23
[  127.429696][ T6659] netlink: 16 bytes leftover after parsing attributes in process `syz.1.225'.
[  127.515640][ T6663] netlink: 16 bytes leftover after parsing attributes in process `syz.1.225'.
[  128.087954][ T6681] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.232'.
[  128.126733][ T6681] netlink: Conntrack attr has 4 unknown bytes
[  128.561959][ T6692] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.236'.
[  128.654091][ T5890] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  128.846448][ T5890] usb 1-1: Using ep0 maxpacket: 8
[  128.863575][ T5890] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  128.882600][ T5890] usb 1-1: config 0 has no interface number 0
[  128.901349][ T5890] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  128.946542][ T5890] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  128.982689][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.015752][ T5890] usb 1-1: config 0 descriptor??
[  129.066787][ T5890] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  129.466544][ T6707] gretap0: entered promiscuous mode
[  129.688196][ T6709] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.698056][ T6709] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.927045][ T6729] loop1: detected capacity change from 0 to 164
[  129.961636][ T6729] iso9660: Unknown parameter 'i
charset'
[  130.043830][ T6709] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  130.096019][ T6709] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  130.505681][ T6740] usb 1-1: USB disconnect, device number 4
[  130.603904][ T6051] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.629600][ T6051] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.665120][ T6051] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.697954][ T6051] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.966333][ T6751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.252'.
[  131.187822][ T6760] option changes via remount are deprecated (pid=6759 comm=syz.0.255)
[  131.445282][ T6769] loop1: detected capacity change from 0 to 256
[  131.474282][ T5897] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  131.522754][ T6769] FAT-fs (loop1): Directory bread(block 64) failed
[  131.540118][ T6769] FAT-fs (loop1): Directory bread(block 65) failed
[  131.558301][ T6769] FAT-fs (loop1): Directory bread(block 66) failed
[  131.576986][ T6769] FAT-fs (loop1): Directory bread(block 67) failed
[  131.591833][ T6769] FAT-fs (loop1): Directory bread(block 68) failed
[  131.599408][ T6769] FAT-fs (loop1): Directory bread(block 69) failed
[  131.609975][ T6769] FAT-fs (loop1): Directory bread(block 70) failed
[  131.616940][ T6769] FAT-fs (loop1): Directory bread(block 71) failed
[  131.623862][ T6769] FAT-fs (loop1): Directory bread(block 72) failed
[  131.639969][ T6769] FAT-fs (loop1): Directory bread(block 73) failed
[  131.667691][ T5897] usb 5-1: Using ep0 maxpacket: 32
[  131.691979][ T5897] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  131.717693][ T5897] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  131.736889][ T5897] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  131.756271][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  131.776122][   T36] bio_check_eod: 862 callbacks suppressed
[  131.776142][   T36] kworker/u8:2: attempt to access beyond end of device
[  131.776142][   T36] loop1: rw=1, sector=1224, nr_sectors = 8 limit=256
[  131.776826][ T5897] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  131.814858][ T6758] loop2: detected capacity change from 0 to 32768
[  131.824316][ T5897] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  131.837847][ T5897] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  131.847283][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.896057][   T30] audit: type=1800 audit(1773312690.051:5): pid=6758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.251" name="file1" dev="loop2" ino=7 res=0 errno=0
[  131.949534][ T5897] usb 5-1: config 0 descriptor??
[  132.193148][ T5897] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  132.240370][ T5897] usb 5-1: USB disconnect, device number 2
[  132.331361][ T5897] usblp0: removed
[  132.740648][ T5897] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  132.888923][ T6797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.272'.
[  132.932745][ T5897] usb 5-1: Using ep0 maxpacket: 32
[  132.939916][ T5897] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  132.953930][ T5897] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  132.996058][ T5897] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  133.033316][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  133.071221][ T5897] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  133.091917][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  133.102709][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  133.140236][ T5897] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  133.212919][ T5897] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  133.268415][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.306141][ T5897] usb 5-1: config 0 descriptor??
[  133.327939][   T51] Bluetooth: hci3: command 0x0406 tx timeout
[  133.552732][ T5897] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  133.824432][ T5897] usb 5-1: USB disconnect, device number 3
[  133.852575][ T5897] usblp0: removed
[  134.027510][ T6816] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  134.038173][ T6809] loop3: detected capacity change from 0 to 32768
[  134.051586][ T6816] netlink: 'syz.0.279': attribute type 12 has an invalid length.
[  134.059622][ T6816] netlink: 'syz.0.279': attribute type 29 has an invalid length.
[  134.070175][ T6816] netlink: 'syz.0.279': attribute type 1 has an invalid length.
[  134.079347][ T6816] netlink: 'syz.0.279': attribute type 37 has an invalid length.
[  134.090164][ T6816] netlink: 80 bytes leftover after parsing attributes in process `syz.0.279'.
[  134.104077][ T6809] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  134.115421][ T6816] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.281050][ T6809] XFS (loop3): Ending clean mount
[  134.352292][ T6809] XFS (loop3): Quotacheck needed: Please wait.
[  134.364652][ T6826] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  134.394554][ T6826] overlayfs: failed to set xattr on upper
[  134.427741][ T6826] overlayfs: ...falling back to redirect_dir=nofollow.
[  134.475318][ T6826] overlayfs: ...falling back to index=off.
[  134.504480][ T6826] overlayfs: ...falling back to uuid=null.
[  134.534554][ T6826] overlayfs: ...falling back to xino=off.
[  134.556592][ T6826] overlayfs: conflicting lowerdir path
[  134.637834][ T6809] XFS (loop3): Quotacheck: Done.
[  134.831327][ T6834] netlink: 16 bytes leftover after parsing attributes in process `syz.4.285'.
[  134.842614][ T6836] process 'syz.1.284' launched './file0' with NULL argv: empty string added
[  134.904497][ T5839] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  135.141942][ T6842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.289'.
[  135.637540][ T6854] loop2: detected capacity change from 0 to 256
[  135.709093][ T6854] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xd509bb81, utbl_chksum : 0xe619d30d)
[  135.801566][ T6860] mmap: syz.1.296 (6860) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  136.177067][ T6873] vivid-003: disconnect
[  136.198476][ T6863] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.205676][ T6873] vivid-003: reconnect
[  136.315382][ T6875] loop4: detected capacity change from 0 to 128
[  136.410913][   T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  136.577960][ T6863] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  136.587402][   T24] usb 3-1: Using ep0 maxpacket: 8
[  136.620912][   T24] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[  136.651088][ T6863] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  136.675321][   T24] usb 3-1: config 0 has no interface number 0
[  136.693050][   T24] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  136.728171][   T24] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  136.761269][   T24] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  136.790654][   T24] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  136.830704][   T24] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  136.859422][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.895228][   T24] usb 3-1: config 0 descriptor??
[  136.920324][   T24] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  137.073574][ T6866] netlink: 'syz.3.298': attribute type 2 has an invalid length.
[  137.086662][ T6058] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  137.095861][ T6058] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  137.105043][ T6058] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  137.114512][ T6058] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  137.130279][ T6058] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  137.143310][ T6058] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  137.152409][ T6058] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  137.161582][ T6058] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  137.294162][ T5897] usb 3-1: USB disconnect, device number 4
[  137.299048][    C0] ldusb 3-1:0.55: usb_submit_urb failed (-19)
[  137.340810][ T5897] ldusb 3-1:0.55: LD USB Device #0 now disconnected
[  137.849077][ T6885] loop1: detected capacity change from 0 to 40427
[  137.872852][ T6885] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  137.891183][ T6885] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  137.919094][ T6885] F2FS-fs (loop1): invalid crc value
[  138.117735][ T6885] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  138.142914][ T6885] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  138.150147][ T6885] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  138.214489][ T6885] syz.1.307: attempt to access beyond end of device
[  138.214489][ T6885] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  138.230693][ T6885] CPU: 0 UID: 0 PID: 6885 Comm: syz.1.307 Not tainted syzkaller #0 PREEMPT(full) 
[  138.230722][ T6885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  138.230735][ T6885] Call Trace:
[  138.230744][ T6885]  <TASK>
[  138.230753][ T6885]  dump_stack_lvl+0xe8/0x150
[  138.230793][ T6885]  f2fs_handle_critical_error+0x37c/0x540
[  138.230833][ T6885]  f2fs_write_end_io+0x1274/0x1740
[  138.230901][ T6885]  __submit_merged_bio+0x256/0x700
[  138.230940][ T6885]  f2fs_submit_merged_write+0x284/0x390
[  138.230976][ T6885]  ? __pfx_f2fs_submit_merged_write+0x10/0x10
[  138.231029][ T6885]  f2fs_sync_node_pages+0x14bf/0x1680
[  138.231084][ T6885]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  138.231174][ T6885]  f2fs_write_checkpoint+0xeb8/0x26a0
[  138.231255][ T6885]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  138.231341][ T6885]  ? down_write+0x16d/0x200
[  138.231369][ T6885]  ? __pfx_down_write+0x10/0x10
[  138.231392][ T6885]  ? uplift_priority+0xdb/0x730
[  138.231434][ T6885]  f2fs_issue_checkpoint+0x456/0x790
[  138.231483][ T6885]  ? __pfx_f2fs_issue_checkpoint+0x10/0x10
[  138.231520][ T6885]  ? f2fs_add_dentry+0xe3/0x1d0
[  138.231560][ T6885]  ? __pfx_f2fs_do_add_link+0x10/0x10
[  138.231630][ T6885]  ? f2fs_sync_fs+0x1f0/0x400
[  138.231662][ T6885]  f2fs_link+0x67f/0x870
[  138.231698][ T6885]  ? __pfx_f2fs_link+0x10/0x10
[  138.231731][ T6885]  ? down_write+0x16d/0x200
[  138.231758][ T6885]  ? __pfx_down_write+0x10/0x10
[  138.231798][ T6885]  ? inode_permission+0x346/0x5f0
[  138.231826][ T6885]  ? try_break_deleg+0x5b/0x180
[  138.231862][ T6885]  vfs_link+0x518/0x6e0
[  138.231900][ T6885]  filename_linkat+0x273/0x600
[  138.231939][ T6885]  ? __pfx_filename_linkat+0x10/0x10
[  138.231976][ T6885]  ? do_getname+0x151/0x250
[  138.232025][ T6885]  __se_sys_linkat+0x60/0x2d0
[  138.232055][ T6885]  do_syscall_64+0x14d/0xf80
[  138.232076][ T6885]  ? trace_irq_disable+0x3b/0x150
[  138.232102][ T6885]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.232124][ T6885]  ? clear_bhb_loop+0x40/0x90
[  138.232153][ T6885]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.232175][ T6885] RIP: 0033:0x7f1557b9c799
[  138.232196][ T6885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  138.232214][ T6885] RSP: 002b:00007f15589a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000109
[  138.232236][ T6885] RAX: ffffffffffffffda RBX: 00007f1557e15fa0 RCX: 00007f1557b9c799
[  138.232251][ T6885] RDX: ffffffffffffff9c RSI: 00002000000006c0 RDI: ffffffffffffff9c
[  138.232267][ T6885] RBP: 00007f1557c32c99 R08: 0000000000000000 R09: 0000000000000000
[  138.232280][ T6885] R10: 0000200000000700 R11: 0000000000000246 R12: 0000000000000000
[  138.232293][ T6885] R13: 00007f1557e16038 R14: 00007f1557e15fa0 R15: 00007fffcb305e88
[  138.232335][ T6885]  </TASK>
[  138.232683][ T6885] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  138.385020][ T6896] loop0: detected capacity change from 0 to 40427
[  138.396109][ T6735] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  138.523958][ T6896] F2FS-fs (loop0): build fault injection rate: 771
[  138.547409][ T6896] F2FS-fs (loop0): invalid crc value
[  138.682595][ T6735] usb 3-1: Using ep0 maxpacket: 16
[  138.697081][ T6735] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  138.722943][ T6735] usb 3-1: config 0 interface 0 has no altsetting 0
[  138.738942][ T6735] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  138.743055][ T6913] loop4: detected capacity change from 0 to 256
[  138.760435][ T6735] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.783112][ T6735] usb 3-1: config 0 descriptor??
[  138.806953][ T6913] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  138.835166][ T6913] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  138.870000][ T6913] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  138.895118][ T6896] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  138.929521][ T6913] exFAT-fs (loop4): failed to load alloc-bitmap
[  138.973945][ T6896] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  138.984730][ T6913] exFAT-fs (loop4): failed to recognize exfat type
[  139.066980][ T6916] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  139.173016][ T6896] syz.0.311: attempt to access beyond end of device
[  139.173016][ T6896] loop0: rw=2049, sector=45096, nr_sectors = 88 limit=40427
[  139.262699][ T6735] nzxt-smart2 0003:1E71:2009.0002: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0
[  139.286668][ T5838] syz-executor: attempt to access beyond end of device
[  139.286668][ T5838] loop0: rw=2049, sector=45184, nr_sectors = 8 limit=40427
[  139.320494][ T5838] CPU: 1 UID: 0 PID: 5838 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  139.320523][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  139.320548][ T5838] Call Trace:
[  139.320557][ T5838]  <TASK>
[  139.320565][ T5838]  dump_stack_lvl+0xe8/0x150
[  139.320604][ T5838]  f2fs_handle_critical_error+0x37c/0x540
[  139.320639][ T5838]  f2fs_write_end_io+0x1274/0x1740
[  139.320697][ T5838]  __submit_merged_bio+0x256/0x700
[  139.320732][ T5838]  __submit_merged_write_cond+0x3c9/0x4e0
[  139.320769][ T5838]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  139.320824][ T5838]  f2fs_write_data_pages+0x287e/0x34f0
[  139.320897][ T5838]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  139.320943][ T5838]  ? __pfx_css_rstat_updated+0x10/0x10
[  139.321007][ T5838]  ? mod_memcg_lruvec_state+0x208/0x220
[  139.321039][ T5838]  ? lru_gen_update_size+0x7c7/0xd10
[  139.321082][ T5838]  ? __lock_acquire+0x6b5/0x2cf0
[  139.321136][ T5838]  ? filemap_get_folios_tag+0x118/0x720
[  139.321169][ T5838]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  139.321200][ T5838]  do_writepages+0x32e/0x550
[  139.321237][ T5838]  ? do_raw_spin_unlock+0xf5/0x210
[  139.321269][ T5838]  filemap_fdatawrite+0x1e9/0x2f0
[  139.321299][ T5838]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  139.321379][ T5838]  ? do_raw_spin_unlock+0xf5/0x210
[  139.321418][ T5838]  f2fs_sync_dirty_inodes+0x30e/0x860
[  139.321468][ T5838]  f2fs_write_checkpoint+0x9df/0x26a0
[  139.321539][ T5838]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  139.321619][ T5838]  ? kfree+0x1c5/0x640
[  139.321645][ T5838]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  139.321676][ T5838]  kill_f2fs_super+0x314/0x720
[  139.321714][ T5838]  ? __pfx_kill_f2fs_super+0x10/0x10
[  139.321760][ T5838]  ? lockdep_hardirqs_on+0x7a/0x110
[  139.321797][ T5838]  deactivate_locked_super+0xbc/0x130
[  139.321828][ T5838]  cleanup_mnt+0x437/0x4d0
[  139.321848][ T5838]  ? _raw_spin_unlock_irq+0x23/0x50
[  139.321883][ T5838]  task_work_run+0x1d9/0x270
[  139.321913][ T5838]  ? __pfx_task_work_run+0x10/0x10
[  139.321977][ T5838]  exit_to_user_mode_loop+0xed/0x480
[  139.322006][ T5838]  ? rcu_is_watching+0x15/0xb0
[  139.322033][ T5838]  do_syscall_64+0x32d/0xf80
[  139.322054][ T5838]  ? trace_irq_disable+0x3b/0x150
[  139.322078][ T5838]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.322099][ T5838]  ? clear_bhb_loop+0x40/0x90
[  139.322125][ T5838]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.322146][ T5838] RIP: 0033:0x7fdbf0d9d9d7
[  139.322166][ T5838] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  139.322182][ T5838] RSP: 002b:00007ffe7e0a9f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  139.322205][ T5838] RAX: 0000000000000000 RBX: 00007fdbf0e32050 RCX: 00007fdbf0d9d9d7
[  139.322218][ T5838] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe7e0aa010
[  139.322230][ T5838] RBP: 00007ffe7e0aa010 R08: 00007ffe7e0ab010 R09: 00000000ffffffff
[  139.322244][ T5838] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe7e0ab0a0
[  139.322256][ T5838] R13: 00007fdbf0e32050 R14: 0000000000021e3c R15: 00007ffe7e0ab0e0
[  139.322293][ T5838]  </TASK>
[  139.324222][ T5838] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  139.861448][ T6735] usb 3-1: USB disconnect, device number 5
[  141.256525][ T6965] gretap0: entered promiscuous mode
[  141.924212][ T6990] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.343'.
[  142.161623][ T6992] loop4: detected capacity change from 0 to 2048
[  142.186592][ T6992] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=3932051, location=3932051
[  142.224942][ T6992] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  142.693007][ T7002] loop4: detected capacity change from 0 to 8192
[  142.985362][ T7007] veth0_vlan: entered allmulticast mode
[  143.019368][ T7007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.349'.
[  143.200915][ T7015] netlink: 'syz.1.360': attribute type 4 has an invalid length.
[  143.981743][ T7025] Illegal XDP return value 1733373985 on prog  (id 25) dev N/A, expect packet loss!
[  144.162059][ T7027] netlink: 4 bytes leftover after parsing attributes in process `syz.4.355'.
[  144.768883][ T7045] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.362'.
[  145.139762][ T7057] loop3: detected capacity change from 0 to 512
[  145.192527][ T7057] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  145.248667][ T7057] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  145.301357][ T7057] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  145.327236][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  145.334717][    C1] EXT4-fs (loop3): initial error at time 1773312703: ext4_mb_generate_buddy:1315
[  145.343929][    C1] EXT4-fs (loop3): last error at time 1773312703: ext4_mb_generate_buddy:1315
[  145.366797][ T7057] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  145.398498][ T7057] EXT4-fs (loop3): 1 truncate cleaned up
[  145.409025][ T5964] libceph: connect (1)[c::]:6789 error -101
[  145.419780][ T5964] libceph: mon0 (1)[c::]:6789 connect error
[  145.422138][ T7057] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  145.456795][ T7057] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.3.368: path /79/bus/file0: bad entry in directory: directory entry overrun - offset=80, inode=2147483648, rec_len=1024, size=60 fake=0
[  145.495444][ T5964] libceph: connect (1)[c::]:6789 error -101
[  145.521019][ T5964] libceph: mon0 (1)[c::]:6789 connect error
[  145.586691][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.812595][ T6735] libceph: connect (1)[c::]:6789 error -101
[  145.832751][ T6735] libceph: mon0 (1)[c::]:6789 connect error
[  146.121635][ T7063] ceph: No mds server is up or the cluster is laggy
[  146.391145][ T5964] libceph: connect (1)[c::]:6789 error -101
[  146.416884][ T5964] libceph: mon0 (1)[c::]:6789 connect error
[  146.908989][   T30] audit: type=1326 audit(1773312704.945:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7084 comm="syz.3.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908b59c799 code=0x7fc00000
[  147.202557][ T7098] 9pnet: p9_errstr2errno: server reported unknown error ½p
[  147.325625][ T7101] syzkaller1: entered promiscuous mode
[  147.344541][ T7101] syzkaller1: entered allmulticast mode
[  147.379386][ T7102] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  147.468426][   T30] audit: type=1326 audit(1773312705.502:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7084 comm="syz.3.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f908b59c799 code=0x7fc00000
[  147.878599][ T7112] loop2: detected capacity change from 0 to 4096
[  147.931419][ T7112] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  148.270399][   T30] audit: type=1800 audit(1773312706.279:8): pid=7112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.387" name="file1" dev="loop2" ino=30 res=0 errno=0
[  148.348803][ T7126] netlink: 'syz.4.392': attribute type 1 has an invalid length.
[  148.374305][ T7126] netlink: 'syz.4.392': attribute type 4 has an invalid length.
[  148.376642][ T6058] ntfs3(loop2): ino=1e, ntfs3_write_inode failed, -22.
[  148.392532][ T7126] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.392'.
[  148.433809][ T6058] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  149.384703][ T7148] loop0: detected capacity change from 0 to 512
[  149.428366][ T7150] netlink: 'syz.2.402': attribute type 22 has an invalid length.
[  149.474607][ T7148] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  149.510105][ T7148] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  149.658975][ T7157] loop4: detected capacity change from 0 to 512
[  149.761013][ T5838] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.493729][   T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  150.676635][   T24] usb 4-1: unable to get BOS descriptor or descriptor too short
[  150.704072][   T24] usb 4-1: config 1 interface 0 has no altsetting 0
[  150.717428][   T24] usb 4-1: string descriptor 0 read error: -22
[  150.728168][   T24] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.40
[  150.748775][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.861134][ T7189] loop2: detected capacity change from 0 to 512
[  150.908776][ T7189] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  150.970108][ T7189] xt_hashlimit: size too large, truncated to 1048576
[  151.046695][ T7189] --map-set only usable from mangle table
[  151.246108][   T24] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0
[  151.272219][   T24] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0
[  151.291599][   T24] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0
[  151.304294][   T24] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0
[  151.317999][   T24] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0
[  151.334878][   T24] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0
[  151.347316][   T24] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0
[  151.358975][   T24] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0
[  151.372349][   T24] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0
[  151.379503][ T5826] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.384902][   T24] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0
[  151.533367][   T24] kone 0003:1E7D:2CED.0003: hidraw0: USB HID v0.05 Device [HID 1e7d:2ced] on usb-dummy_hcd.3-1/input0
[  151.579522][   T24] kone 0003:1E7D:2CED.0003: couldn't init struct kone_device
[  151.602333][   T24] kone 0003:1E7D:2CED.0003: couldn't install mouse
[  151.637379][   T24] kone 0003:1E7D:2CED.0003: probe with driver kone failed with error -5
[  151.683821][   T24] usb 4-1: USB disconnect, device number 3
[  152.677795][ T7213] capability: warning: `syz.0.425' uses 32-bit capabilities (legacy support in use)
[  153.479883][ T7224] block nbd2: shutting down sockets
[  154.019014][ T7241] loop6: detected capacity change from 0 to 2640
[  154.037782][ T7241] buffer_io_error: 4602 callbacks suppressed
[  154.037800][ T7241] Buffer I/O error on dev loop6, logical block 0, async page read
[  154.087246][ T7241] Buffer I/O error on dev loop6, logical block 0, async page read
[  154.116752][ T7241] Buffer I/O error on dev loop6, logical block 0, async page read
[  154.150603][ T7244] Buffer I/O error on dev loop6, logical block 0, lost async page write
[  154.180669][ T7241] Buffer I/O error on dev loop6, logical block 1, async page read
[  154.203735][ T7241] Dev loop6: unable to read RDB block 8
[  154.219051][ T7241] Buffer I/O error on dev loop6, logical block 3, async page read
[  154.238660][ T7241]  loop6: unable to read partition table
[  154.258378][ T5882] Buffer I/O error on dev loop6, logical block 3, async page read
[  154.270539][ T7241] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[  154.463173][ T5198] Buffer I/O error on dev loop6, logical block 0, async page read
[  154.471387][ T5198] Buffer I/O error on dev loop6, logical block 0, async page read
[  154.479582][ T5198] Buffer I/O error on dev loop6, logical block 0, async page read
[  154.500248][ T5198] ldm_validate_partition_table(): Disk read failed.
[  154.522625][ T5198] Dev loop6: unable to read RDB block 0
[  154.544996][ T5198]  loop6: unable to read partition table
[  154.917845][ T7251] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  154.929043][ T7243] loop2: detected capacity change from 0 to 32768
[  154.963787][ T7252] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  156.615324][ T7276] loop1: detected capacity change from 0 to 256
[  156.643419][ T7276] exfat: Deprecated parameter 'namecase'
[  156.750254][ T7276] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d)
[  157.599578][ T7286] netlink: 36 bytes leftover after parsing attributes in process `syz.4.455'.
[  157.902001][ T7294] loop2: detected capacity change from 0 to 128
[  157.922126][ T7295] loop0: detected capacity change from 0 to 512
[  157.972335][ T7294] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  157.993071][ T7294] ext4 filesystem being mounted at /98/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  158.180575][ T7294] EXT4-fs error (device loop2): ext4_check_dx_root:2201: inode #2: comm syz.2.459: Corrupt dir, invalid name for '.', running e2fsck is recommended
[  158.273584][ T7294] EXT4-fs (loop2): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  158.394693][ T5826] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  158.606091][ T7307] loop5: detected capacity change from 0 to 7
[  158.641257][  T804] kernel write not supported for file [eventfd] (pid: 804 comm: kworker/1:2)
[  158.671894][ T7307] Dev loop5: unable to read RDB block 7
[  158.678358][ T7307]  loop5: unable to read partition table
[  158.692809][ T7307] loop5: partition table beyond EOD, truncated
[  158.716274][ T7307] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  160.400358][ T5897] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[  160.578007][ T5897] usb 2-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  160.610897][ T5897] usb 2-1: config 1 interface 0 has no altsetting 0
[  160.627500][ T7343] loop0: detected capacity change from 0 to 32768
[  160.640979][ T5897] usb 2-1: string descriptor 0 read error: -22
[  160.653864][ T5897] usb 2-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.40
[  160.683417][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.709023][ T7347] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  160.889665][   T30] audit: type=1326 audit(1773312718.869:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7348 comm="syz.4.480" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f28cad9c799 code=0x0
[  161.179151][ T5897] hid_parser_main: 4007 callbacks suppressed
[  161.179174][ T5897] logitech 0003:046D:C298.0004: unknown main item tag 0x0
[  161.223698][ T5897] logitech 0003:046D:C298.0004: unknown main item tag 0x0
[  161.236384][ T5897] logitech 0003:046D:C298.0004: unknown main item tag 0x0
[  161.264392][ T5897] logitech 0003:046D:C298.0004: unknown main item tag 0x0
[  161.286458][ T5897] logitech 0003:046D:C298.0004: unknown main item tag 0x0
[  161.301070][ T5897] logitech 0003:046D:C298.0004: unknown main item tag 0x0
[  161.316793][ T5897] logitech 0003:046D:C298.0004: unknown main item tag 0x0
[  161.333472][ T5897] logitech 0003:046D:C298.0004: unknown main item tag 0x0
[  161.348552][ T5897] logitech 0003:046D:C298.0004: unknown main item tag 0x0
[  161.373995][ T5897] logitech 0003:046D:C298.0004: unknown main item tag 0x0
[  161.417335][ T5897] logitech 0003:046D:C298.0004: hidraw0: USB HID vff.7f Device [HID 046d:c298] on usb-dummy_hcd.1-1/input0
[  161.464651][ T5897] logitech 0003:046D:C298.0004: no inputs found
[  161.521568][ T5897] usb 2-1: USB disconnect, device number 2
[  161.562537][ T7358] fido_id[7358]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[  162.075773][ T7371] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  162.625643][ T7379] pim6reg: entered allmulticast mode
[  162.653045][ T7383] syz_tun: entered allmulticast mode
[  162.692470][ T7379] pim6reg: left allmulticast mode
[  162.717714][ T7379] syz_tun: left allmulticast mode
[  163.278680][ T7389] loop1: detected capacity change from 0 to 32768
[  163.288417][ T7389] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.495 (7389)
[  163.315340][ T7389] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  163.325932][ T7389] BTRFS info (device loop1): using xxhash64 checksum algorithm
[  163.333566][ T7389] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  163.469833][ T7389] BTRFS info (device loop1): rebuilding free space tree
[  163.505641][ T7389] BTRFS info (device loop1): disabling free space tree
[  163.513369][ T7389] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  163.523827][ T7389] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  163.540623][ T7389] BTRFS info (device loop1): setting nodatasum
[  163.546894][ T7389] BTRFS info (device loop1): allowing degraded mounts
[  163.553702][ T7389] BTRFS info (device loop1): turning on async discard
[  163.561087][ T7389] BTRFS info (device loop1): enabling disk space caching
[  163.568291][ T7389] BTRFS info (device loop1): force clearing of disk cache
[  163.575450][ T7389] BTRFS info (device loop1): force zlib compression, level 3
[  163.664682][ T7389] BTRFS info (device loop1): balance: start -s
[  163.680191][ T7389] BTRFS info (device loop1): relocating block group 1048576 flags system
[  163.727518][ T7389] BTRFS info (device loop1): balance: ended with status: 0
[  163.846444][ T5835] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  164.950647][   T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  165.127935][   T24] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  165.159194][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.171556][   T24] usb 3-1: Product: syz
[  165.184002][   T24] usb 3-1: Manufacturer: syz
[  165.197876][   T24] usb 3-1: SerialNumber: syz
[  165.645831][   T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  165.688392][   T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  166.330037][   T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO
[  166.356620][   T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  166.373433][   T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  167.095932][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807bc1ac00: rx timeout, send abort
[  167.107192][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807bc1ac00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  167.427945][   T24] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71
[  167.485968][   T24] usb 3-1: USB disconnect, device number 6
[  167.596838][ T7482] netlink: 'syz.4.523': attribute type 3 has an invalid length.
[  167.622056][ T7484] netlink: 'syz.1.526': attribute type 8 has an invalid length.
[  167.653538][ T7484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.526'.
[  167.689819][ T7484] bond0: entered promiscuous mode
[  167.702925][ T7484] bond_slave_0: entered promiscuous mode
[  167.712717][ T7486] loop4: detected capacity change from 0 to 64
[  167.718946][ T7484] bond_slave_1: entered promiscuous mode
[  167.728960][ T7484] gretap0: entered promiscuous mode
[  167.766036][ T7484] bond0: left promiscuous mode
[  167.771049][ T7484] bond_slave_0: left promiscuous mode
[  167.780481][ T7484] bond_slave_1: left promiscuous mode
[  167.805478][ T7484] gretap0: left promiscuous mode
[  168.250035][ T7501] Bluetooth: hci0: service_discovery: too big uuid_count value 39717
[  168.255285][ T7495] loop4: detected capacity change from 0 to 4096
[  168.624380][ T7513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.538'.
[  168.634363][ T7513] netlink: 'syz.1.538': attribute type 20 has an invalid length.
[  168.651054][ T7513] netlink: 'syz.1.538': attribute type 21 has an invalid length.
[  168.838307][ T7516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.542'.
[  168.867166][ T7516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.542'.
[  169.070614][ T7523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.544'.
[  169.098242][ T7525] loop2: detected capacity change from 0 to 64
[  169.181827][ T7525] hfs: request for non-existent node 65538 in B*Tree
[  169.204427][ T7525] hfs: request for non-existent node 65538 in B*Tree
[  169.213345][ T7525] hfs: fail to find leaf node: node ID 65538
[  170.033506][ T7523] hsr_slave_1 (unregistering): left promiscuous mode
[  170.106268][ T7531] netlink: 12 bytes leftover after parsing attributes in process `syz.1.547'.
[  170.339390][ T7539] loop3: detected capacity change from 0 to 1024
[  170.517538][ T7539] hfsplus: b-tree write err: -5, ino 2
[  170.584922][ T6058] hfsplus: b-tree write err: -5, ino 25
[  170.598338][ T6058] hfsplus: b-tree write err: -5, ino 4
[  170.613940][ T6058] hfsplus: b-tree write err: -5, ino 2
[  170.629084][ T6058] hfsplus: b-tree write err: -5, ino 26
[  170.972709][ T7558] loop2: detected capacity change from 0 to 1024
[  171.070329][ T7551] loop1: detected capacity change from 0 to 32768
[  171.086111][ T7551] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.557 (7551)
[  171.134027][ T7551] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  171.158641][ T7551] BTRFS info (device loop1): using blake2b checksum algorithm
[  171.251022][ T7558] hfsplus: xattr search failed
[  171.305572][ T7551] BTRFS info (device loop1): enabling ssd optimizations
[  171.339699][ T7551] BTRFS info (device loop1): turning on async discard
[  171.356356][ T7551] BTRFS info (device loop1): enabling free space tree
[  171.386989][ T7551] BTRFS info (device loop1): use zstd compression, level 3
[  171.485344][   T30] audit: type=1800 audit(1773312729.454:10): pid=7551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.557" name="file1" dev="loop1" ino=260 res=0 errno=0
[  172.167623][ T7599] loop2: detected capacity change from 0 to 128
[  172.219878][ T7599] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  172.272676][ T7599] ext4 filesystem being mounted at /129/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  172.361096][ T5835] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  172.416470][ T7599] syz.2.569 (pid 7599) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  172.604223][ T5826] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  172.807494][ T7611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.574'.
[  172.936689][ T7615] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  172.989933][ T7611] team0: Port device team_slave_0 removed
[  173.048324][ T7619] input: syz0 as /devices/virtual/input/input7
[  173.365901][ T7633] loop3: detected capacity change from 0 to 64
[  173.454778][   T30] audit: type=1800 audit(1773312731.422:11): pid=7633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.582" name="file1" dev="loop3" ino=22 res=0 errno=0
[  173.543293][ T7633] syz.3.582: attempt to access beyond end of device
[  173.543293][ T7633] loop3: rw=8423425, sector=57, nr_sectors = 8 limit=64
[  174.327881][ T7661] loop1: detected capacity change from 0 to 1024
[  174.369259][ T7661] EXT4-fs error (device loop1): ext4_quota_enable:7192: inode #3: comm syz.1.593: iget: bad extended attribute block 5
[  174.432359][ T7661] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  174.434233][ T7661] EXT4-fs error (device loop1): ext4_quota_enable:7195: comm syz.1.593: Bad quota inode: 3, type: 0
[  174.443426][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  174.443469][    C1] EXT4-fs (loop1): initial error at time 1773312732: ext4_quota_enable:7192: inode 3
[  174.443505][    C1] EXT4-fs (loop1): last error at time 1773312732: ext4_quota_enable:7192: inode 3
[  174.510644][ T7661] loop1: lost filesystem error report for type 5 error -117
[  174.510958][ T7661] EXT4-fs warning (device loop1): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  174.570328][ T7661] EXT4-fs (loop1): mount failed
[  174.640807][ T6735] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  174.800050][ T6735] usb 5-1: Using ep0 maxpacket: 16
[  174.816464][ T6735] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  174.840050][ T6735] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.850168][ T6735] usb 5-1: Product: syz
[  174.860130][ T6735] usb 5-1: Manufacturer: syz
[  174.869086][ T6735] usb 5-1: SerialNumber: syz
[  174.900126][ T6735] usb 5-1: config 0 descriptor??
[  175.005363][ T7679] loop1: detected capacity change from 0 to 1024
[  175.024056][ T7679] EXT4-fs: Ignoring removed nomblk_io_submit option
[  175.159852][ T7679] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  175.196421][ T7686] netlink: 44 bytes leftover after parsing attributes in process `syz.2.602'.
[  175.283644][ T7686] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.293933][ T7686] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.324074][   T30] audit: type=1800 audit(1773312733.270:12): pid=7679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.599" name="file1" dev="loop1" ino=15 res=0 errno=0
[  175.354874][ T7683] loop0: detected capacity change from 0 to 40427
[  175.362332][ T7683] F2FS-fs: heap/no_heap options were deprecated
[  175.368782][ T7683] F2FS-fs: heap/no_heap options were deprecated
[  175.380526][ T7683] F2FS-fs (loop0): Image doesn't support compression
[  175.384639][ T6735] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  175.398956][ T7683] F2FS-fs (loop0): invalid crc value
[  175.479295][ T7690] netlink: 44 bytes leftover after parsing attributes in process `syz.2.602'.
[  175.518778][ T7683] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  175.536236][ T7683] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  175.559178][ T7666] dtv5100: wlen = 0, aborting.
[  175.629772][ T5838] syz-executor: attempt to access beyond end of device
[  175.629772][ T5838] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  175.664015][ T5838] CPU: 1 UID: 0 PID: 5838 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  175.664042][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  175.664052][ T5838] Call Trace:
[  175.664059][ T5838]  <TASK>
[  175.664067][ T5838]  dump_stack_lvl+0xe8/0x150
[  175.664097][ T5838]  f2fs_handle_critical_error+0x37c/0x540
[  175.664125][ T5838]  f2fs_write_end_io+0x1274/0x1740
[  175.664169][ T5838]  __submit_merged_bio+0x256/0x700
[  175.664196][ T5838]  __submit_merged_write_cond+0x3c9/0x4e0
[  175.664224][ T5838]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  175.664268][ T5838]  f2fs_write_data_pages+0x287e/0x34f0
[  175.664326][ T5838]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  175.664361][ T5838]  ? __pfx_css_rstat_updated+0x10/0x10
[  175.664412][ T5838]  ? mod_memcg_lruvec_state+0x208/0x220
[  175.664438][ T5838]  ? lru_gen_update_size+0x7c7/0xd10
[  175.664479][ T5838]  ? __lock_acquire+0x6b5/0x2cf0
[  175.664527][ T5838]  ? filemap_get_folios_tag+0x118/0x720
[  175.664555][ T5838]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  175.664584][ T5838]  do_writepages+0x32e/0x550
[  175.664617][ T5838]  ? do_raw_spin_unlock+0xf5/0x210
[  175.664630][ T6735] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  175.664654][ T5838]  filemap_fdatawrite+0x1e9/0x2f0
[  175.664781][ T5838]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  175.664978][ T5838]  ? do_raw_spin_unlock+0xf5/0x210
[  175.665079][ T5838]  f2fs_sync_dirty_inodes+0x30e/0x860
[  175.665202][ T5838]  f2fs_write_checkpoint+0x9df/0x26a0
[  175.665363][ T5838]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  175.665552][ T5838]  ? kfree+0x1c5/0x640
[  175.665623][ T5838]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  175.665710][ T5838]  kill_f2fs_super+0x314/0x720
[  175.665809][ T5838]  ? __pfx_kill_f2fs_super+0x10/0x10
[  175.665922][ T5838]  ? lockdep_hardirqs_on+0x7a/0x110
[  175.666020][ T5838]  deactivate_locked_super+0xbc/0x130
[  175.666106][ T5838]  cleanup_mnt+0x437/0x4d0
[  175.666152][ T5838]  ? _raw_spin_unlock_irq+0x23/0x50
[  175.666265][ T5838]  task_work_run+0x1d9/0x270
[  175.666357][ T5838]  ? __pfx_task_work_run+0x10/0x10
[  175.666455][ T5838]  exit_to_user_mode_loop+0xed/0x480
[  175.666533][ T5838]  ? rcu_is_watching+0x15/0xb0
[  175.666597][ T5838]  do_syscall_64+0x32d/0xf80
[  175.666668][ T5838]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.666722][ T5838]  ? clear_bhb_loop+0x40/0x90
[  175.666789][ T5838]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.666843][ T5838] RIP: 0033:0x7fdbf0d9d9d7
[  175.666898][ T5838] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  175.666939][ T5838] RSP: 002b:00007ffe7e0a9f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  175.667001][ T5838] RAX: 0000000000000000 RBX: 00007fdbf0e32050 RCX: 00007fdbf0d9d9d7
[  175.667035][ T5838] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe7e0aa010
[  175.667067][ T5838] RBP: 00007ffe7e0aa010 R08: 00007ffe7e0ab010 R09: 00000000ffffffff
[  175.667106][ T5838] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe7e0ab0a0
[  175.667139][ T5838] R13: 00007fdbf0e32050 R14: 000000000002abc8 R15: 00007ffe7e0ab0e0
[  175.667218][ T5838]  </TASK>
[  175.671999][ T5838] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  175.731453][ T6735] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  175.731529][ T6735] usb 5-1: media controller created
[  175.746685][   T51] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  175.746807][   T51] Bluetooth: hci0: Injecting HCI hardware error event
[  175.755016][ T5830] Bluetooth: hci0: hardware error 0x00
[  176.058821][ T6735] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  176.155460][ T6735] zl10353_read_register: readreg error (reg=127, ret==0)
[  176.162817][ T6735] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  176.170808][ T6735] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  176.189001][ T6735] usb 5-1: USB disconnect, device number 4
[  176.237947][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.374236][ T6735] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  176.976968][ T7710] ------------[ cut here ]------------
[  176.984922][ T7710] address < vma->vm_start || address + (nr << 12) > vma->vm_end
[  176.984976][ T7710] WARNING: mm/rmap.c:1682 at folio_add_new_anon_rmap+0x5fe/0x14b0, CPU#0: syz.1.611/7710
[  177.004378][ T7710] Modules linked in:
[  177.008837][ T7710] CPU: 0 UID: 0 PID: 7710 Comm: syz.1.611 Not tainted syzkaller #0 PREEMPT(full) 
[  177.018207][ T7710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  177.028658][ T7710] RIP: 0010:folio_add_new_anon_rmap+0x5fe/0x14b0
[  177.036589][ T7710] Code: 89 f5 4d 8b 36 4c 89 e7 4c 89 f6 e8 ec aa a9 ff 4d 39 f4 73 1a e8 82 a8 a9 ff 4c 8b 74 24 10 49 bc 00 00 00 00 00 fc ff df 90 <0f> 0b 90 eb 5a 44 89 f8 c1 e0 0c 48 98 49 01 c4 49 83 c5 08 4c 89
[  177.056826][ T7710] RSP: 0018:ffffc90002f675a0 EFLAGS: 00010287
[  177.063285][ T7710] RAX: ffffffff821d041e RBX: ffffea0001251000 RCX: 0000000000080000
[  177.071333][ T7710] RDX: ffffc90004299000 RSI: 000000000003fdfe RDI: 000000000003fdff
[  177.079479][ T7710] RBP: 0000000000000000 R08: ffffea0001251007 R09: 1ffffd400024a200
[  177.087973][ T7710] R10: dffffc0000000000 R11: fffff9400024a201 R12: dffffc0000000000
[  177.096155][ T7710] R13: ffff8880323f7dc8 R14: ffffea0001251008 R15: 0000000000000001
[  177.104294][ T7710] FS:  00007f15589a96c0(0000) GS:ffff88812543e000(0000) knlGS:0000000000000000
[  177.113479][ T7710] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  177.120150][ T7710] CR2: 000000110c2c092d CR3: 000000007e334000 CR4: 00000000003526f0
[  177.128253][ T7710] DR0: 0000000000000000 DR1: 0000000000006800 DR2: 0000000000009951
[  177.136352][ T7710] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  177.144439][ T7710] Call Trace:
[  177.147765][ T7710]  <TASK>
[  177.150779][ T7710]  mfill_atomic_install_pte+0x578/0x870
[  177.156851][ T7710]  ? __pfx_mfill_atomic_install_pte+0x10/0x10
[  177.163274][ T7710]  ? __might_fault+0x5c/0x130
[  177.168139][ T7710]  __mfill_atomic_pte+0x3c4/0x5f0
[  177.173306][ T7710]  mfill_atomic_copy+0x4d9/0x1330
[  177.178375][ T7710]  ? __kernel_text_address+0xd/0x30
[  177.183892][ T7710]  ? arch_stack_walk+0xfb/0x150
[  177.188816][ T7710]  ? __pfx_mfill_atomic_copy+0x10/0x10
[  177.194409][ T7710]  userfaultfd_ioctl+0x2b8a/0x4b00
[  177.199583][ T7710]  ? __kasan_slab_free+0x5c/0x80
[  177.204676][ T7710]  ? kfree+0x1c5/0x640
[  177.208820][ T7710]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[  177.214470][ T7710]  ? kasan_quarantine_put+0xbb/0x1f0
[  177.219861][ T7710]  ? tomoyo_path_number_perm+0x219/0x630
[  177.225625][ T7710]  ? tomoyo_path_number_perm+0x219/0x630
[  177.231341][ T7710]  ? do_vfs_ioctl+0x1166/0x1530
[  177.236343][ T7710]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  177.241436][ T7710]  ? do_futex+0x333/0x420
[  177.245919][ T7710]  ? __fget_files+0x2a/0x420
[  177.250601][ T7710]  ? __fget_files+0x2a/0x420
[  177.255692][ T7710]  ? __fget_files+0x3a0/0x420
[  177.260467][ T7710]  ? __fget_files+0x2a/0x420
[  177.265628][ T7710]  ? bpf_lsm_file_ioctl+0x9/0x20
[  177.270665][ T7710]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[  177.276265][ T7710]  __se_sys_ioctl+0xfc/0x170
[  177.280905][ T7710]  do_syscall_64+0x14d/0xf80
[  177.285659][ T7710]  ? trace_irq_disable+0x3b/0x150
[  177.290845][ T7710]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.297059][ T7710]  ? clear_bhb_loop+0x40/0x90
[  177.301875][ T7710]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.307812][ T7710] RIP: 0033:0x7f1557b9c799
[  177.312382][ T7710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  177.332168][ T7710] RSP: 002b:00007f15589a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  177.340677][ T7710] RAX: ffffffffffffffda RBX: 00007f1557e15fa0 RCX: 00007f1557b9c799
[  177.348827][ T7710] RDX: 0000200000000040 RSI: 00000000c028aa03 RDI: 0000000000000003
[  177.356963][ T7710] RBP: 00007f1557c32c99 R08: 0000000000000000 R09: 0000000000000000
[  177.365392][ T7710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  177.373768][ T7710] R13: 00007f1557e16038 R14: 00007f1557e15fa0 R15: 00007fffcb305e88
[  177.381911][ T7710]  </TASK>
[  177.385019][ T7710] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  177.392335][ T7710] CPU: 0 UID: 0 PID: 7710 Comm: syz.1.611 Not tainted syzkaller #0 PREEMPT(full) 
[  177.401575][ T7710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  177.411657][ T7710] Call Trace:
[  177.414962][ T7710]  <TASK>
[  177.417914][ T7710]  vpanic+0x56c/0xa60
[  177.421958][ T7710]  ? __pfx__printk+0x10/0x10
[  177.426580][ T7710]  ? __pfx_vpanic+0x10/0x10
[  177.431113][ T7710]  ? is_bpf_text_address+0x292/0x2b0
[  177.436455][ T7710]  ? is_bpf_text_address+0x26/0x2b0
[  177.441690][ T7710]  panic+0xc5/0xd0
[  177.445446][ T7710]  ? __pfx_panic+0x10/0x10
[  177.449906][ T7710]  __warn+0x315/0x4f0
[  177.453936][ T7710]  ? folio_add_new_anon_rmap+0x5fe/0x14b0
[  177.459683][ T7710]  ? folio_add_new_anon_rmap+0x5fe/0x14b0
[  177.465429][ T7710]  __report_bug+0x29a/0x540
[  177.469976][ T7710]  ? folio_add_new_anon_rmap+0x5fe/0x14b0
[  177.475725][ T7710]  ? __pfx___report_bug+0x10/0x10
[  177.480784][ T7710]  ? __lock_acquire+0x6b5/0x2cf0
[  177.485769][ T7710]  ? try_charge_memcg+0x24a/0x1560
[  177.490905][ T7710]  ? folio_add_new_anon_rmap+0x5fe/0x14b0
[  177.496648][ T7710]  report_bug+0x16a/0x220
[  177.501000][ T7710]  ? folio_add_new_anon_rmap+0x5fe/0x14b0
[  177.506744][ T7710]  ? folio_add_new_anon_rmap+0x600/0x14b0
[  177.512484][ T7710]  handle_bug+0x9c/0x200
[  177.516775][ T7710]  exc_invalid_op+0x1a/0x50
[  177.521302][ T7710]  asm_exc_invalid_op+0x1a/0x20
[  177.526195][ T7710] RIP: 0010:folio_add_new_anon_rmap+0x5fe/0x14b0
[  177.532549][ T7710] Code: 89 f5 4d 8b 36 4c 89 e7 4c 89 f6 e8 ec aa a9 ff 4d 39 f4 73 1a e8 82 a8 a9 ff 4c 8b 74 24 10 49 bc 00 00 00 00 00 fc ff df 90 <0f> 0b 90 eb 5a 44 89 f8 c1 e0 0c 48 98 49 01 c4 49 83 c5 08 4c 89
[  177.552177][ T7710] RSP: 0018:ffffc90002f675a0 EFLAGS: 00010287
[  177.558270][ T7710] RAX: ffffffff821d041e RBX: ffffea0001251000 RCX: 0000000000080000
[  177.566263][ T7710] RDX: ffffc90004299000 RSI: 000000000003fdfe RDI: 000000000003fdff
[  177.574255][ T7710] RBP: 0000000000000000 R08: ffffea0001251007 R09: 1ffffd400024a200
[  177.582248][ T7710] R10: dffffc0000000000 R11: fffff9400024a201 R12: dffffc0000000000
[  177.590280][ T7710] R13: ffff8880323f7dc8 R14: ffffea0001251008 R15: 0000000000000001
[  177.598285][ T7710]  ? folio_add_new_anon_rmap+0xc7e/0x14b0
[  177.604054][ T7710]  mfill_atomic_install_pte+0x578/0x870
[  177.609634][ T7710]  ? __pfx_mfill_atomic_install_pte+0x10/0x10
[  177.615730][ T7710]  ? __might_fault+0x5c/0x130
[  177.620446][ T7710]  __mfill_atomic_pte+0x3c4/0x5f0
[  177.625524][ T7710]  mfill_atomic_copy+0x4d9/0x1330
[  177.630572][ T7710]  ? __kernel_text_address+0xd/0x30
[  177.635803][ T7710]  ? arch_stack_walk+0xfb/0x150
[  177.640713][ T7710]  ? __pfx_mfill_atomic_copy+0x10/0x10
[  177.646224][ T7710]  userfaultfd_ioctl+0x2b8a/0x4b00
[  177.651361][ T7710]  ? __kasan_slab_free+0x5c/0x80
[  177.656321][ T7710]  ? kfree+0x1c5/0x640
[  177.660432][ T7710]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[  177.665952][ T7710]  ? kasan_quarantine_put+0xbb/0x1f0
[  177.671279][ T7710]  ? tomoyo_path_number_perm+0x219/0x630
[  177.676935][ T7710]  ? tomoyo_path_number_perm+0x219/0x630
[  177.682601][ T7710]  ? do_vfs_ioctl+0x1166/0x1530
[  177.687483][ T7710]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  177.692545][ T7710]  ? do_futex+0x333/0x420
[  177.696909][ T7710]  ? __fget_files+0x2a/0x420
[  177.701531][ T7710]  ? __fget_files+0x2a/0x420
[  177.706144][ T7710]  ? __fget_files+0x3a0/0x420
[  177.710852][ T7710]  ? __fget_files+0x2a/0x420
[  177.715476][ T7710]  ? bpf_lsm_file_ioctl+0x9/0x20
[  177.720433][ T7710]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[  177.725923][ T7710]  __se_sys_ioctl+0xfc/0x170
[  177.730544][ T7710]  do_syscall_64+0x14d/0xf80
[  177.735154][ T7710]  ? trace_irq_disable+0x3b/0x150
[  177.740203][ T7710]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.746336][ T7710]  ? clear_bhb_loop+0x40/0x90
[  177.751040][ T7710]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.756950][ T7710] RIP: 0033:0x7f1557b9c799
[  177.761385][ T7710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  177.781015][ T7710] RSP: 002b:00007f15589a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  177.789459][ T7710] RAX: ffffffffffffffda RBX: 00007f1557e15fa0 RCX: 00007f1557b9c799
[  177.797471][ T7710] RDX: 0000200000000040 RSI: 00000000c028aa03 RDI: 0000000000000003
[  177.805517][ T7710] RBP: 00007f1557c32c99 R08: 0000000000000000 R09: 0000000000000000
[  177.813543][ T7710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  177.821537][ T7710] R13: 00007f1557e16038 R14: 00007f1557e15fa0 R15: 00007fffcb305e88
[  177.829549][ T7710]  </TASK>
[  177.833495][ T7710] Kernel Offset: disabled
[  177.837842][ T7710] Rebooting in 86400 seconds..