last executing test programs:

2.257116579s ago: executing program 0 (id=176):
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8)
fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, <r2=>0x0})
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @empty}}, 0xd9d, 0x1}, &(0x7f0000000040)=0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x7, 0xfff, 0x7}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300), &(0x7f00000001c0), 0xd35, r3}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r4, 0x2000300, 0xe, 0x30, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r5 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[<r6=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r6, <r7=>0x0})
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f000001ca40)={{{@in6=@mcast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in6=@private2}, 0x0, @in6=@mcast2}}, &(0x7f0000001740)=0xe8)
r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r9, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, <r10=>0x0}, 0x2020)
lchown(&(0x7f00000000c0)='./file0\x00', 0x0, r10)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000001aa40)="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", 0x2000, &(0x7f00000018c0)={&(0x7f00000002c0)={0x50, 0x0, 0x3e6, {0x7, 0x2b, 0x1, 0x8, 0x9, 0x7, 0xfffffff8, 0x7fff, 0x0, 0x0, 0x80, 0x3fb9}}, &(0x7f0000000340)={0x18, 0x0, 0xffffffff, {0x3}}, &(0x7f0000000400)={0x18, 0x0, 0xfffffffffffff800, {0x105}}, &(0x7f0000000580)={0x18, 0x0, 0x100000000}, &(0x7f00000005c0)={0x18, 0x0, 0x0, {0x8}}, &(0x7f0000000600)={0x28, 0x0, 0x7ff, {{0x8, 0x7fffffffffffffff, 0x2, r2}}}, &(0x7f0000000680)={0x60, 0x0, 0x2, {{0xdb9, 0x3, 0x199f2f7000000000, 0x100000001, 0x20000000000000, 0x800, 0x8001}}}, &(0x7f0000000700)={0x18, 0x0, 0x10001, {0x9}}, &(0x7f000001cb40)=ANY=[@ANYBLOB="14000000daffffff080000000000000047504c0008b2507ad98a077f8cca3d1cc9d31f20623e843f90e4d7b90f2ccc1f1dc022c98149452bf083"], &(0x7f0000000780)={0x20, 0x0, 0x8000000000000001, {0x0, 0x3}}, &(0x7f0000000880)={0x78, 0x0, 0x9, {0x200, 0x7, 0x0, {0x3, 0x7f, 0x100000000, 0x10000, 0xffffffffffffffff, 0x3, 0x6, 0x1ff, 0xd, 0x6000, 0x0, 0x0, 0x0, 0x3}}}, &(0x7f0000000900)={0x90, 0x0, 0x6, {0x2, 0x1, 0x8, 0x80000000, 0xefa4, 0x1, {0x6, 0x10001, 0xe, 0x2, 0x9, 0x9, 0x4, 0x5, 0x3, 0xa000, 0xe, 0xee00, 0xffffffffffffffff, 0x9, 0xd94}}}, &(0x7f0000000a40)={0x70, 0xfffffffffffffff5, 0x5, [{0x6, 0xc65, 0x1, 0x7, '.'}, {0x2, 0xc70, 0x4, 0x10000, 'GPL\x00'}, {0x0, 0x8, 0x1, 0x1, '\x00'}]}, &(0x7f0000000f40)={0x290, 0x0, 0x8d, [{{0x4, 0x3, 0x1, 0xffffffff, 0x3c, 0x401, {0x5, 0x0, 0x80, 0x1, 0x6, 0x4, 0xf8, 0x1760, 0x80000000, 0x2000, 0xac3, 0x0, 0x0, 0xb7, 0x9}}, {0x4, 0x10, 0x1, 0x6, ','}}, {{0x4, 0x3, 0x100000000, 0x7fff, 0x7, 0x8001, {0x0, 0x4, 0xffffffffffffffff, 0x100000000, 0x3, 0x5, 0x7, 0x0, 0x0, 0xa000, 0x5, 0x0, 0x0, 0x7, 0x5}}, {0x1, 0x3a, 0x4, 0x3, 'GPL\x00'}}, {{0x0, 0x3, 0xc0, 0x85b8, 0x5, 0x6, {0x1, 0x200, 0x5, 0x8000000000000000, 0x7fffffff, 0x733, 0x8, 0x0, 0x4, 0x1000, 0x10, 0x0, 0x0, 0x6, 0x6d}}, {0x1, 0x8, 0x4, 0x8000, '\\M\'*'}}, {{0x0, 0x0, 0x7fffffff, 0x401, 0x7fffffff, 0xfffffffa, {0x1, 0x4, 0x1, 0x3, 0x5, 0x5, 0x8000, 0x81, 0x401, 0x2000, 0x8000, 0xee01, 0xffffffffffffffff, 0x9, 0x401}}, {0x5, 0x5, 0x7, 0x4, '@@\'$#U+'}}]}, &(0x7f0000001540)={0xa0, 0x0, 0x0, {{0x1, 0x1, 0x9, 0x0, 0x10, 0x3, {0x1, 0x3, 0x40, 0xed, 0x1, 0x9, 0xa, 0xe71, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x3957, 0x9}}, {0x0, 0x4}}}, &(0x7f0000001600)={0x20, 0x0, 0xfffffffffffffffe, {0x61bb, 0x4, 0xc58, 0x1}}, &(0x7f0000001780)={0x130, 0x0, 0x4, {0x0, 0x6, 0x0, '\x00', {0x1, 0x100, 0x3ff, 0x5, r8, r10, 0xb000, '\x00', 0x5, 0x2, 0x100000000, 0xb5, {0x7}, {0x9, 0x8}, {0xd2, 0x4}, {0x0, 0x2a2c}, 0x7ca3, 0x40, 0xffffffff, 0x646a}}}})
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r5, 0xc01864b0, &(0x7f0000000080)={r6, r7, 0x1, 0x0, 0x3})
ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000100))
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0)

1.265680278s ago: executing program 2 (id=186):
r0 = socket$kcm(0x10, 0x2, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0)
syz_clone3(&(0x7f0000000340)={0x8000000, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x0], 0x1}, 0x58)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)

1.035361039s ago: executing program 0 (id=187):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18380000000000000000000002000000851000000600000018100000", @ANYRES32, @ANYBLOB="000000000000000000000000000000001800000000000000000000000000000095000000000000000000000000000000180100002020782540000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b702000000000000850000000600000095e6000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222}, 0x21)

967.182153ms ago: executing program 0 (id=188):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x2c)
r1 = socket(0x1, 0x2, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r2, r2)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r0, 0x0, 0x0)
fchdir(r3)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)

966.684787ms ago: executing program 0 (id=189):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8)
r4 = accept(r3, 0x0, 0x0)
sendmmsg$alg(r4, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmsg(r4, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0)

417.37039ms ago: executing program 1 (id=191):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r1, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{r0}, &(0x7f00000005c0), &(0x7f0000000800)='%ps    \x00'}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x10)

417.138655ms ago: executing program 1 (id=192):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}]}}]}, 0x58}}, 0x44080)

343.337407ms ago: executing program 1 (id=193):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00', <r0=>0x0}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r0], 0x8)

343.056388ms ago: executing program 2 (id=194):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000006000000040000000000000e03000000000000000100000000000011048000000a000000000000000000000202000000002e000061"], 0x0, 0x4a}, 0x28)

342.918171ms ago: executing program 1 (id=195):
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640), 0x41, 0x0)
writev(r0, &(0x7f0000005500)=[{&(0x7f0000003440)="0600000000000000839dda8b07257a6d6136e19271de93a120d8af19df66cf6039f1f64c7b9f823dfcd870324392314a3c965f000b25fd7da27c50794c07ca8a4809c5b5ba2f2b5c2a399a164cbe8323c843c21f05bef0f6daffa4bac0373c194da474fa0b72473e", 0x68}], 0x1)

287.315681ms ago: executing program 2 (id=196):
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000))
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000080)={0x60, 0x1, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x4, &(0x7f0000000140)=[{0x4, 0x0, 0x7}], 0x1, 0x0, 0x4, 0x30, 0x2, 0x49})

287.070081ms ago: executing program 2 (id=197):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mkdir(&(0x7f0000000040)='./file0\x00', 0x1)
setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000000)=0x1, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff})
bind$unix(r0, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e)

286.71078ms ago: executing program 1 (id=198):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @local}, 0x10)
setsockopt$packet_buf(r0, 0x107, 0x2, &(0x7f0000000080)="5ec78db485c534bdf7a2172f3f1f30da", 0x10)

225.486395ms ago: executing program 2 (id=199):
syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x89}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0)

225.295395ms ago: executing program 1 (id=200):
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d0b939d60a53067d50000200006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090b0002"], 0x0)

224.911745ms ago: executing program 2 (id=201):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4000, &(0x7f00000000c0)=ANY=[], 0xff, 0x5fc4, &(0x7f0000006400)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r3, 0x2007ffc)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0)
copy_file_range(r3, 0x0, r4, 0x0, 0xfffffbffa003e45b, 0x700000000000000)

851.202µs ago: executing program 0 (id=202):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

0s ago: executing program 0 (id=203):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
madvise(&(0x7f0000c0c000/0x1000)=nil, 0x1000, 0x4)
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000180)={{&(0x7f00006c3000/0x1000)=nil, 0x1000}})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:21597' (ED25519) to the list of known hosts.
syzkaller login: [   47.965576][ T5837] cgroup: Unknown subsys name 'net'
[   48.066518][ T5837] cgroup: Unknown subsys name 'cpuset'
[   48.071609][ T5837] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.920133][ T5837] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   53.641438][ T5242] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   53.644413][ T5242] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   53.647185][ T5242] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   53.650248][ T5242] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   53.653298][ T5242] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   53.672479][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   53.675352][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   53.678081][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   53.681108][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   53.684126][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   53.707647][ T5242] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   53.710508][ T5242] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   53.713870][ T5242] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   53.716879][ T5242] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   53.719881][ T5242] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   53.846490][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   53.896495][ T5855] chnl_net:caif_netlink_parms(): no params data found
[   53.925025][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.927287][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.929486][ T5850] bridge_slave_0: entered allmulticast mode
[   53.931695][ T5850] bridge_slave_0: entered promiscuous mode
[   53.941226][ T5857] chnl_net:caif_netlink_parms(): no params data found
[   53.948384][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.950572][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.953447][ T5850] bridge_slave_1: entered allmulticast mode
[   53.955797][ T5850] bridge_slave_1: entered promiscuous mode
[   53.989867][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.997003][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.999860][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.003745][ T5855] bridge_slave_0: entered allmulticast mode
[   54.007167][ T5855] bridge_slave_0: entered promiscuous mode
[   54.011346][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.021236][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.024525][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.027492][ T5855] bridge_slave_1: entered allmulticast mode
[   54.030705][ T5855] bridge_slave_1: entered promiscuous mode
[   54.066904][ T5850] team0: Port device team_slave_0 added
[   54.070241][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.074177][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.076740][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.079366][ T5857] bridge_slave_0: entered allmulticast mode
[   54.082004][ T5857] bridge_slave_0: entered promiscuous mode
[   54.085569][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.087687][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.090476][ T5857] bridge_slave_1: entered allmulticast mode
[   54.093618][ T5857] bridge_slave_1: entered promiscuous mode
[   54.096487][ T5850] team0: Port device team_slave_1 added
[   54.099316][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.136639][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.140669][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.143758][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.151624][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.156240][ T5855] team0: Port device team_slave_0 added
[   54.160002][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.164743][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.167009][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.176724][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.180985][ T5855] team0: Port device team_slave_1 added
[   54.202171][ T5857] team0: Port device team_slave_0 added
[   54.213375][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.216131][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.226750][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.233125][ T5857] team0: Port device team_slave_1 added
[   54.235928][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.238777][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.248839][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.277856][ T5850] hsr_slave_0: entered promiscuous mode
[   54.280102][ T5850] hsr_slave_1: entered promiscuous mode
[   54.288578][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.290739][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.299031][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.303564][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.305909][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.314668][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.363440][ T5855] hsr_slave_0: entered promiscuous mode
[   54.365766][ T5855] hsr_slave_1: entered promiscuous mode
[   54.368181][ T5855] debugfs: 'hsr0' already exists in 'hsr'
[   54.370000][ T5855] Cannot create hsr debugfs directory
[   54.378117][ T5857] hsr_slave_0: entered promiscuous mode
[   54.380877][ T5857] hsr_slave_1: entered promiscuous mode
[   54.384229][ T5857] debugfs: 'hsr0' already exists in 'hsr'
[   54.386520][ T5857] Cannot create hsr debugfs directory
[   54.482478][ T5850] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   54.492825][ T5850] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   54.501010][ T5850] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   54.505667][ T5850] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   54.529498][ T5855] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   54.534153][ T5855] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   54.541181][ T5855] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   54.550176][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.553124][ T5850] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.556184][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.559069][ T5850] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.569273][ T5855] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   54.594111][ T5857] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   54.599575][ T5857] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   54.612860][ T5857] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   54.619096][ T5857] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   54.628845][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.631149][ T5855] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.633663][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.635931][ T5855] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.648790][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.651698][ T5857] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.654791][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.657391][ T5857] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.680974][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.696125][ T4709] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.699540][ T4709] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.704722][ T4709] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.707990][ T4709] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.714432][ T4709] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.717674][ T4709] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.727586][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   54.741523][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.744518][ T4709] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.755108][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.758996][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.761831][ T4709] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.785762][ T5855] 8021q: adding VLAN 0 to HW filter on device team0
[   54.795188][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.800533][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.803557][ T4709] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.817451][  T244] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.820221][  T244] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.826385][ T5850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   54.840157][ T5857] 8021q: adding VLAN 0 to HW filter on device team0
[   54.851763][  T244] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.854101][  T244] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.862557][ T5855] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   54.866000][ T5855] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   54.876191][  T244] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.879072][  T244] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.927252][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.975319][ T5850] veth0_vlan: entered promiscuous mode
[   54.981181][ T5850] veth1_vlan: entered promiscuous mode
[   55.004985][ T5850] veth0_macvtap: entered promiscuous mode
[   55.009274][ T5850] veth1_macvtap: entered promiscuous mode
[   55.024576][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.035033][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.039462][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.050251][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.058387][ T5899] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.065303][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.070057][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.079305][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.103245][ T5855] veth0_vlan: entered promiscuous mode
[   55.115422][ T5857] veth0_vlan: entered promiscuous mode
[   55.121342][ T5855] veth1_vlan: entered promiscuous mode
[   55.125506][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.129812][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.133484][ T5857] veth1_vlan: entered promiscuous mode
[   55.155387][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.155767][ T5855] veth0_macvtap: entered promiscuous mode
[   55.161836][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.166703][ T5855] veth1_macvtap: entered promiscuous mode
[   55.179394][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.184354][ T5857] veth0_macvtap: entered promiscuous mode
[   55.193253][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.196315][ T5857] veth1_macvtap: entered promiscuous mode
[   55.202579][ T5850] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   55.212063][ T5899] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.215757][ T5899] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.223705][ T5899] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.231227][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.239342][ T5899] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.240701][ T5914] =======================================================
[   55.240701][ T5914] WARNING: The mand mount option has been deprecated and
[   55.240701][ T5914]          and is ignored by this kernel. Remove the mand
[   55.240701][ T5914]          option from the mount to silence this warning.
[   55.240701][ T5914] =======================================================
[   55.259014][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.278333][ T5899] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.283064][ T5899] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.315456][ T5899] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.318927][ T5899] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.337830][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.340524][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.371440][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.375605][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.412609][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.415692][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.447179][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.451467][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.664015][ T5242] Bluetooth: hci0: command tx timeout
[   55.742662][   T54] Bluetooth: hci1: command tx timeout
[   55.744840][ T5242] Bluetooth: hci2: command tx timeout
[   56.016479][ T5935] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.9'.
[   56.578341][ T5941] loop0: detected capacity change from 0 to 32768
[   56.581826][ T5941] bcachefs (/dev/loop0): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section
[   56.581826][ T5941] clean (size 2912):
[   56.581826][ T5941] flags:          0
[   56.581826][ T5941] journal_seq:    8
[   56.581826][ T5941] usage: type=inodes v=8
[   56.581826][ T5941] usage: type=key_version v=0
[   56.581826][ T5941] usage: type=reserved v=0
[   56.581826][ T5941] usage: type=reserved v=0
[   56.581826][ T5941] usage: type=reserved v=0
[   56.581826][ T5941] usage: type=(unknown fs_usage_type 3) v=0
[   56.581826][ T5941] data_usage: btree: 1/1 [0]=2816
[   56.581826][ T5941] data_usage: journal: 1/1 [0]=0
[   56.581826][ T5941] data_usage: user: 1/1 [0]=32
[   56.581826][ T5941] dev_usage: dev=0  
[   56.581826][ T5941]   free: buckets=83 sectors=0 fragmented=0
[   56.581826][ T5941]   sb: buckets=25 sectors=6152 fragmented=248
[   56.581826][ T5941]   journal: buckets=8 sectors=2048 fragmented=0
[   56.581826][ T5941]   btree: buckets=11 sectors=2816 fragmented=0
[   56.581826][ T5941]   user: buckets=1 sectors=32 fragmented=224
[   56.581826][ T5941]   cached: buckets=0 sectors=0 fragmented=0
[   56.581826][ T5941]   parity: buckets=0 sectors=0 fragmented=0
[   56.581826][ T5941]   stripe: buckets=0 sectors=0 fragmented=0
[   56.581826][ T5941]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[   56.581826][ T5941]   need_discard: buckets=0 sectors=0 fragmented=0
[   56.581826][ T5941] clock: read=0
[   56.581826][ T5941] clock: write=1288
[   56.581826][ T5941] btree_root: btree=extents level=0 u64s 11 type btree_ptr_v2 720575940379
[   56.581912][ T5941] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[   57.012856][ T5951] loop0: detected capacity change from 0 to 32768
[   57.016502][ T5951] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.17 (5951)
[   57.036147][ T5951] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   57.043741][ T5951] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[   57.094508][ T5968] netlink: 24 bytes leftover after parsing attributes in process `syz.2.22'.
[   57.097867][ T5954] loop1: detected capacity change from 0 to 32768
[   57.100716][ T5968] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   57.111474][ T5954] (syz.1.18,5954,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   57.117458][ T5954] (syz.1.18,5954,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   57.140155][ T5951] BTRFS info (device loop0): enabling ssd optimizations
[   57.140325][ T5954] JBD2: Ignoring recovery information on journal
[   57.156725][ T5951] BTRFS info (device loop0): enabling free space tree
[   57.182838][ T5954] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   57.215901][ T5850] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   57.265811][ T5985] netlink: 28 bytes leftover after parsing attributes in process `syz.2.25'.
[   57.297817][ T5855] ocfs2: Unmounting device (7,1) on (node local)
[   57.600240][ T6011] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   57.742446][   T54] Bluetooth: hci0: command tx timeout
[   57.792583][    T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   57.822458][   T54] Bluetooth: hci1: command tx timeout
[   57.822486][ T5242] Bluetooth: hci2: command tx timeout
[   57.922491][ T5912] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   57.978468][    T9] usb 3-1: Using ep0 maxpacket: 32
[   57.986127][    T9] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   57.990458][    T9] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   57.996083][    T9] usb 3-1: config 0 interface 0 has no altsetting 0
[   57.998589][    T9] usb 3-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00
[   58.001703][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   58.011285][    T9] usb 3-1: config 0 descriptor??
[   58.079779][ T5912] usb 1-1: config index 0 descriptor too short (expected 23569, got 27)
[   58.083702][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   58.089216][ T5912] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[   58.093268][ T5912] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[   58.096666][ T5912] usb 1-1: Manufacturer: syz
[   58.103021][ T5912] usb 1-1: config 0 descriptor??
[   58.182932][ T5912] rc_core: IR keymap rc-hauppauge not found
[   58.185641][ T5912] Registered IR keymap rc-empty
[   58.189044][ T5912] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[   58.196258][ T5912] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input4
[   58.469058][    T9] wacom 0003:056A:0094.0001: ignoring exceeding usage max
[   58.477663][    T9] wacom 0003:056A:0094.0001: Using device in hidraw-only mode
[   58.492776][    T9] wacom 0003:056A:0094.0001: hidraw0: USB HID v0.05 Device [HID 056a:0094] on usb-dummy_hcd.2-1/input0
[   58.695392][    T9] usb 3-1: USB disconnect, device number 2
[   58.733421][ T5896] usb 1-1: USB disconnect, device number 2
[   58.799986][ T6022] netlink: 512 bytes leftover after parsing attributes in process `syz.1.40'.
[   58.949658][ T6024] loop1: detected capacity change from 0 to 32768
[   58.971085][ T6024] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   58.991437][ T6024] XFS (loop1): Ending clean mount
[   58.994998][ T6024] XFS (loop1): Quotacheck needed: Please wait.
[   59.000926][ T6024] XFS (loop1): Quotacheck: Done.
[   59.007219][   T33] audit: type=1800 audit(1756195961.792:2): pid=6024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.41" name="file1" dev="loop1" ino=9286 res=0 errno=0
[   59.022166][ T5855] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   59.332588][ T6051] warning: `syz.2.49' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   59.359753][ T6053] loop0: detected capacity change from 0 to 2048
[   59.375376][ T6054] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   59.383353][ T6053] NILFS error (device loop0): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0
[   59.389430][ T6053] Remounting filesystem read-only
[   59.556756][ T6056] loop2: detected capacity change from 0 to 32768
[   59.559851][ T6056] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.52 (6056)
[   59.613699][ T6056] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   59.617754][ T6056] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[   59.641041][ T6056] BTRFS info (device loop2): enabling ssd optimizations
[   59.644136][ T6056] BTRFS info (device loop2): enabling free space tree
[   59.842351][   T54] Bluetooth: hci0: command tx timeout
[   59.861307][ T5877] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared)
[   59.903391][   T54] Bluetooth: hci1: command tx timeout
[   59.905468][ T5242] Bluetooth: hci2: command tx timeout
[   59.923769][ T5857] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   60.193614][ T6091] loop1: detected capacity change from 0 to 40427
[   60.198703][ T6091] F2FS-fs (loop1): invalid crc value
[   60.223511][ T6091] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[   60.227291][ T6091] F2FS-fs (loop1): Start checkpoint disabled!
[   60.230448][ T6091] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   60.311218][ T6095] F2FS-fs (loop1): ino:27, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[   60.524748][ T6101] loop0: detected capacity change from 0 to 128
[   60.534208][ T6101] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   60.551135][ T6101] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   60.561725][ T6101] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #2: comm syz.0.61: No space for directory leaf checksum. Please run e2fsck -D.
[   60.567682][ T6101] EXT4-fs error (device loop0): htree_dirblock_to_tree:1051: inode #2: comm syz.0.61: Directory block failed checksum
[   60.586544][ T5850] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   61.003817][ T1093] kworker/u9:5: attempt to access beyond end of device
[   61.003817][ T1093] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[   61.009903][ T1093] CPU: 0 UID: 0 PID: 1093 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT(full) 
[   61.009923][ T1093] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   61.009933][ T1093] Workqueue: writeback wb_workfn (flush-7:1)
[   61.009956][ T1093] Call Trace:
[   61.009970][ T1093]  <TASK>
[   61.009983][ T1093]  dump_stack_lvl+0x189/0x250
[   61.010002][ T1093]  ? __pfx_dump_stack_lvl+0x10/0x10
[   61.010016][ T1093]  ? __pfx_queue_work_on+0x10/0x10
[   61.010029][ T1093]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   61.010046][ T1093]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   61.010066][ T1093]  f2fs_handle_critical_error+0x37c/0x540
[   61.010087][ T1093]  f2fs_write_end_io+0x886/0xb60
[   61.010105][ T1093]  __submit_merged_bio+0x27a/0x6a0
[   61.010132][ T1093]  __submit_merged_write_cond+0x255/0x530
[   61.010150][ T1093]  f2fs_write_data_pages+0x261d/0x3000
[   61.010181][ T1093]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   61.010225][ T1093]  ? rcu_is_watching+0x15/0xb0
[   61.010238][ T1093]  ? lock_release+0x4b/0x3e0
[   61.010261][ T1093]  ? f2fs_write_meta_pages+0x357/0x450
[   61.010280][ T1093]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   61.010299][ T1093]  do_writepages+0x32e/0x550
[   61.010322][ T1093]  __writeback_single_inode+0x145/0xff0
[   61.010338][ T1093]  ? do_raw_spin_unlock+0x4d/0x240
[   61.010386][ T1093]  writeback_sb_inodes+0x6c7/0x1010
[   61.010412][ T1093]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   61.010442][ T1093]  ? rcu_is_watching+0x15/0xb0
[   61.010457][ T1093]  wb_writeback+0x43b/0xaf0
[   61.010475][ T1093]  ? queue_io+0x2f1/0x590
[   61.010491][ T1093]  ? __pfx_wb_writeback+0x10/0x10
[   61.010509][ T1093]  ? rcu_is_watching+0x15/0xb0
[   61.010523][ T1093]  wb_workfn+0x409/0xef0
[   61.010541][ T1093]  ? __pfx_wb_workfn+0x10/0x10
[   61.010554][ T1093]  ? rcu_is_watching+0x15/0xb0
[   61.010566][ T1093]  ? rcu_is_watching+0x15/0xb0
[   61.010581][ T1093]  ? process_scheduled_works+0x9ef/0x17b0
[   61.010593][ T1093]  ? rcu_is_watching+0x15/0xb0
[   61.010605][ T1093]  ? lock_acquire+0x5f/0x360
[   61.010624][ T1093]  ? rcu_is_watching+0x15/0xb0
[   61.010635][ T1093]  ? process_scheduled_works+0x9ef/0x17b0
[   61.010647][ T1093]  ? process_scheduled_works+0x9ef/0x17b0
[   61.010659][ T1093]  process_scheduled_works+0xae1/0x17b0
[   61.010681][ T1093]  ? __pfx_process_scheduled_works+0x10/0x10
[   61.010700][ T1093]  worker_thread+0x8a0/0xda0
[   61.010722][ T1093]  kthread+0x711/0x8a0
[   61.010738][ T1093]  ? __pfx_worker_thread+0x10/0x10
[   61.010750][ T1093]  ? __pfx_kthread+0x10/0x10
[   61.010766][ T1093]  ? rcu_is_watching+0x15/0xb0
[   61.010778][ T1093]  ? __pfx_kthread+0x10/0x10
[   61.010793][ T1093]  ret_from_fork+0x3fc/0x770
[   61.010807][ T1093]  ? __pfx_ret_from_fork+0x10/0x10
[   61.010822][ T1093]  ? __switch_to_asm+0x39/0x70
[   61.010838][ T1093]  ? __switch_to_asm+0x33/0x70
[   61.010853][ T1093]  ? __pfx_kthread+0x10/0x10
[   61.010868][ T1093]  ret_from_fork_asm+0x1a/0x30
[   61.010890][ T1093]  </TASK>
[   61.010896][ T1093] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   61.027699][ T6113] loop2: detected capacity change from 0 to 4096
[   61.033020][ T1093] CPU: 0 UID: 0 PID: 1093 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT(full) 
[   61.033033][ T1093] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   61.033039][ T1093] Workqueue: writeback wb_workfn (flush-7:1)
[   61.033053][ T1093] Call Trace:
[   61.033057][ T1093]  <TASK>
[   61.033060][ T1093]  dump_stack_lvl+0x189/0x250
[   61.033073][ T1093]  ? __pfx_dump_stack_lvl+0x10/0x10
[   61.033081][ T1093]  ? __pfx_queue_work_on+0x10/0x10
[   61.033089][ T1093]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   61.033100][ T1093]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   61.033119][ T1093]  f2fs_handle_critical_error+0x37c/0x540
[   61.033131][ T1093]  f2fs_write_end_io+0x886/0xb60
[   61.033142][ T1093]  __submit_merged_bio+0x27a/0x6a0
[   61.033158][ T1093]  __submit_merged_write_cond+0x255/0x530
[   61.033176][ T1093]  f2fs_write_data_pages+0x261d/0x3000
[   61.033206][ T1093]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   61.033251][ T1093]  ? rcu_is_watching+0x15/0xb0
[   61.033265][ T1093]  ? lock_release+0x4b/0x3e0
[   61.033289][ T1093]  ? f2fs_write_meta_pages+0x357/0x450
[   61.033308][ T1093]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   61.033321][ T1093]  do_writepages+0x32e/0x550
[   61.033335][ T1093]  __writeback_single_inode+0x145/0xff0
[   61.033344][ T1093]  ? do_raw_spin_unlock+0x4d/0x240
[   61.033382][ T1093]  writeback_sb_inodes+0x6c7/0x1010
[   61.033397][ T1093]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   61.033414][ T1093]  ? rcu_is_watching+0x15/0xb0
[   61.033423][ T1093]  wb_writeback+0x43b/0xaf0
[   61.033433][ T1093]  ? queue_io+0x2f1/0x590
[   61.033442][ T1093]  ? __pfx_wb_writeback+0x10/0x10
[   61.033453][ T1093]  ? rcu_is_watching+0x15/0xb0
[   61.033460][ T1093]  wb_workfn+0x409/0xef0
[   61.033470][ T1093]  ? __pfx_wb_workfn+0x10/0x10
[   61.033477][ T1093]  ? rcu_is_watching+0x15/0xb0
[   61.033484][ T1093]  ? rcu_is_watching+0x15/0xb0
[   61.033492][ T1093]  ? process_scheduled_works+0x9ef/0x17b0
[   61.033499][ T1093]  ? rcu_is_watching+0x15/0xb0
[   61.033506][ T1093]  ? lock_acquire+0x5f/0x360
[   61.033516][ T1093]  ? rcu_is_watching+0x15/0xb0
[   61.033523][ T1093]  ? process_scheduled_works+0x9ef/0x17b0
[   61.033529][ T1093]  ? process_scheduled_works+0x9ef/0x17b0
[   61.033536][ T1093]  process_scheduled_works+0xae1/0x17b0
[   61.033548][ T1093]  ? __pfx_process_scheduled_works+0x10/0x10
[   61.033558][ T1093]  worker_thread+0x8a0/0xda0
[   61.033571][ T1093]  kthread+0x711/0x8a0
[   61.033580][ T1093]  ? __pfx_worker_thread+0x10/0x10
[   61.033587][ T1093]  ? __pfx_kthread+0x10/0x10
[   61.033596][ T1093]  ? rcu_is_watching+0x15/0xb0
[   61.033602][ T1093]  ? __pfx_kthread+0x10/0x10
[   61.033611][ T1093]  ret_from_fork+0x3fc/0x770
[   61.033619][ T1093]  ? __pfx_ret_from_fork+0x10/0x10
[   61.033627][ T1093]  ? __switch_to_asm+0x39/0x70
[   61.033637][ T1093]  ? __switch_to_asm+0x33/0x70
[   61.033645][ T1093]  ? __pfx_kthread+0x10/0x10
[   61.033653][ T1093]  ret_from_fork_asm+0x1a/0x30
[   61.033666][ T1093]  </TASK>
[   61.033670][ T1093] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   61.041244][ T6113] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[   61.397615][ T6119] netlink: 'syz.1.68': attribute type 1 has an invalid length.
[   61.555208][ T5912] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   61.606231][ T6128] loop0: detected capacity change from 0 to 8192
[   61.629781][ T6128] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 2074)
[   61.640565][ T6128] FAT-fs (loop0): Filesystem has been set read-only
[   61.723561][ T5912] usb 3-1: Using ep0 maxpacket: 8
[   61.736778][ T5912] usb 3-1: config 0 has an invalid interface number: 52 but max is 0
[   61.736978][ T6134] netlink: 24 bytes leftover after parsing attributes in process `syz.1.75'.
[   61.739907][ T5912] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   61.739926][ T5912] usb 3-1: config 0 has no interface number 0
[   61.739956][ T5912] usb 3-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   61.755609][ T5912] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   61.760034][ T5912] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   61.767016][ T5912] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   61.772178][ T5912] usb 3-1: config 0 interface 52 has no altsetting 0
[   61.775023][ T5912] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00
[   61.779052][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   61.785208][ T5912] usb 3-1: config 0 descriptor??
[   61.912437][ T5242] Bluetooth: hci0: command tx timeout
[   61.992432][ T5242] Bluetooth: hci2: command tx timeout
[   61.994480][ T5242] Bluetooth: hci1: command tx timeout
[   62.002645][ T5912] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input5
[   62.112114][ T6147] loop0: detected capacity change from 0 to 32768
[   62.126465][ T6147] bcachefs (/dev/loop0): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section
[   62.126465][ T6147] clean (size 2912):
[   62.126465][ T6147] flags:          0
[   62.126465][ T6147] journal_seq:    10
[   62.126465][ T6147] usage: type=inodes v=8
[   62.126465][ T6147] usage: type=key_version v=0
[   62.126465][ T6147] btree_keys: 
[   62.126465][ T6147] usage: type=reserved v=0
[   62.126465][ T6147] usage: type=reserved v=0
[   62.126465][ T6147] usage: type=reserved v=0
[   62.126465][ T6147] data_usage: btree: 1/1 [0]=2816
[   62.126465][ T6147] data_usage: journal: 1/1 [0]=0
[   62.126465][ T6147] data_usage: user: 1/1 [0]=16
[   62.126465][ T6147] dev_usage: dev=0  
[   62.126465][ T6147]   free: buckets=83 sectors=0 fragmented=0
[   62.126465][ T6147]   sb: buckets=25 sectors=6152 fragmented=248
[   62.126465][ T6147]   journal: buckets=8 sectors=2048 fragmented=0
[   62.126465][ T6147]   btree: buckets=11 sectors=2816 fragmented=0
[   62.126465][ T6147]   user: buckets=1 sectors=16 fragmented=240
[   62.126465][ T6147]   cached: buckets=0 sectors=0 fragmented=13565952
[   62.126465][ T6147]   parity: buckets=0 sectors=0 fragmented=0
[   62.126465][ T6147]   stripe: buckets=0 sectors=0 fragmented=0
[   62.126465][ T6147]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[   62.126465][ T6147]   need_discard: buckets=0 sectors=0 fragmented=0
[   62.126465][ T6147] clock: read=0
[   62.126465][ T6147] clock: write=1280
[   62.126465][ T6147] btree_root: btree=extents level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c0
[   62.126566][ T6147] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[   62.179693][ T6145] loop1: detected capacity change from 0 to 32768
[   62.197778][ T6145] JBD2: Ignoring recovery information on journal
[   62.217141][ T6145] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   62.224333][   T47] usb 3-1: USB disconnect, device number 3
[   62.270999][ T5855] ocfs2: Unmounting device (7,1) on (node local)
[   62.366301][ T6155] autofs4:pid:6155:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.2816), cmd(0xc0189375)
[   62.371673][ T6155] autofs4:pid:6155:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375)
[   62.592389][ T5912] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   62.653065][    T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   62.752609][ T5912] usb 2-1: New USB device found, idVendor=0925, idProduct=8888, bcdDevice= 0.00
[   62.756290][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   62.763668][ T5912] usb 2-1: config 0 descriptor??
[   62.823684][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   62.827259][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   62.830910][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   62.836156][    T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   62.839687][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   62.844128][    T9] usb 1-1: config 0 descriptor??
[   63.264698][ T5912] smartjoyplus 0003:0925:8888.0002: item fetching failed at offset 3/5
[   63.268312][ T5912] smartjoyplus 0003:0925:8888.0002: parse failed
[   63.270869][ T5912] smartjoyplus 0003:0925:8888.0002: probe with driver smartjoyplus failed with error -22
[   63.300064][    T9] plantronics 0003:047F:FFFF.0003: unbalanced collection at end of report description
[   63.304965][    T9] plantronics 0003:047F:FFFF.0003: parse failed
[   63.307049][    T9] plantronics 0003:047F:FFFF.0003: probe with driver plantronics failed with error -22
[   63.470823][    T9] usb 2-1: USB disconnect, device number 2
[   63.499181][ T5896] usb 1-1: USB disconnect, device number 3
[   63.972831][ T6175] loop2: detected capacity change from 0 to 32768
[   63.976746][ T6175] (syz.2.92,6175,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   63.983375][ T6175] (syz.2.92,6175,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   63.993772][ T6175] JBD2: Ignoring recovery information on journal
[   64.024951][ T6175] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   64.109248][ T5857] ocfs2: Unmounting device (7,2) on (node local)
[   64.176602][ T6185] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   64.179026][ T6185] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   64.235969][ T6178] loop1: detected capacity change from 0 to 40427
[   64.240318][ T6178] F2FS-fs (loop1): Wrong SSA boundary, start(3584) end(4096) blocks(0)
[   64.244784][ T6178] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   64.247993][ T6178] F2FS-fs (loop1): build fault injection type: 0x6
[   64.256330][ T6178] F2FS-fs (loop1): invalid crc value
[   64.283785][ T6178] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[   64.287557][ T6178] F2FS-fs (loop1): Start checkpoint disabled!
[   64.290696][ T6178] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   64.293845][ T6178] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   64.304209][ T6193] loop2: detected capacity change from 0 to 8192
[   64.307388][ T6193] FAT-fs (loop2): bogus number of directory entries (9)
[   64.309645][ T6193] FAT-fs (loop2): Can't find a valid FAT filesystem
[   64.333981][ T4709] kworker/u10:5: attempt to access beyond end of device
[   64.333981][ T4709] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   64.363387][ T6201] loop0: detected capacity change from 0 to 16
[   64.369205][ T4709] CPU: 0 UID: 0 PID: 4709 Comm: kworker/u10:5 Not tainted syzkaller #0 PREEMPT(full) 
[   64.369242][ T4709] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   64.369252][ T4709] Workqueue: writeback wb_workfn (flush-7:1)
[   64.369277][ T4709] Call Trace:
[   64.369283][ T4709]  <TASK>
[   64.369289][ T4709]  dump_stack_lvl+0x189/0x250
[   64.369309][ T4709]  ? __pfx_dump_stack_lvl+0x10/0x10
[   64.369324][ T4709]  ? __pfx_queue_work_on+0x10/0x10
[   64.369338][ T4709]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   64.369355][ T4709]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   64.369374][ T4709]  f2fs_handle_critical_error+0x37c/0x540
[   64.369395][ T4709]  f2fs_write_end_io+0x886/0xb60
[   64.369413][ T4709]  __submit_merged_bio+0x27a/0x6a0
[   64.369433][ T4709]  __submit_merged_write_cond+0x255/0x530
[   64.369450][ T4709]  f2fs_write_data_pages+0x261d/0x3000
[   64.369474][ T4709]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   64.369494][ T4709]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[   64.369516][ T4709]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[   64.369534][ T4709]  ? trace_f2fs_writepages+0x7f/0x200
[   64.369547][ T4709]  ? f2fs_write_node_pages+0x478/0x6e0
[   64.369559][ T4709]  ? xa_load+0x60/0x210
[   64.369577][ T4709]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[   64.369590][ T4709]  ? do_raw_spin_lock+0x121/0x290
[   64.369604][ T4709]  ? rcu_is_watching+0x15/0xb0
[   64.369615][ T4709]  ? set_shrinker_bit+0x7c/0x350
[   64.369629][ T4709]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   64.369646][ T4709]  do_writepages+0x32e/0x550
[   64.369664][ T4709]  ? unwind_next_frame+0xa5/0x2390
[   64.369684][ T4709]  __writeback_single_inode+0x145/0xff0
[   64.369701][ T4709]  ? do_raw_spin_unlock+0x4d/0x240
[   64.369717][ T4709]  writeback_sb_inodes+0x6c7/0x1010
[   64.369738][ T4709]  ? fprop_reflect_period_percpu+0x6b/0x330
[   64.369758][ T4709]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   64.369781][ T4709]  ? rcu_is_watching+0x15/0xb0
[   64.369794][ T4709]  wb_writeback+0x43b/0xaf0
[   64.369811][ T4709]  ? queue_io+0x2f1/0x590
[   64.369827][ T4709]  ? __pfx_wb_writeback+0x10/0x10
[   64.369845][ T4709]  ? rcu_is_watching+0x15/0xb0
[   64.369858][ T4709]  wb_workfn+0x409/0xef0
[   64.369875][ T4709]  ? __pfx_wb_workfn+0x10/0x10
[   64.369887][ T4709]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   64.369900][ T4709]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   64.369914][ T4709]  ? rcu_is_watching+0x15/0xb0
[   64.369927][ T4709]  ? process_scheduled_works+0x9ef/0x17b0
[   64.369938][ T4709]  ? rcu_is_watching+0x15/0xb0
[   64.369948][ T4709]  ? lock_acquire+0x5f/0x360
[   64.369968][ T4709]  ? rcu_is_watching+0x15/0xb0
[   64.369978][ T4709]  ? process_scheduled_works+0x9ef/0x17b0
[   64.369989][ T4709]  ? process_scheduled_works+0x9ef/0x17b0
[   64.370000][ T4709]  process_scheduled_works+0xae1/0x17b0
[   64.370020][ T4709]  ? __pfx_process_scheduled_works+0x10/0x10
[   64.370036][ T4709]  worker_thread+0x8a0/0xda0
[   64.370050][ T4709]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   64.370100][ T4709]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   64.370125][ T4709]  ? __kthread_parkme+0x7b/0x200
[   64.370142][ T4709]  kthread+0x711/0x8a0
[   64.370158][ T4709]  ? __pfx_worker_thread+0x10/0x10
[   64.370169][ T4709]  ? __pfx_kthread+0x10/0x10
[   64.370185][ T4709]  ? rcu_is_watching+0x15/0xb0
[   64.370196][ T4709]  ? __pfx_kthread+0x10/0x10
[   64.370211][ T4709]  ret_from_fork+0x3fc/0x770
[   64.370226][ T4709]  ? __pfx_ret_from_fork+0x10/0x10
[   64.370238][ T4709]  ? __switch_to_asm+0x39/0x70
[   64.370250][ T4709]  ? __switch_to_asm+0x33/0x70
[   64.370258][ T4709]  ? __pfx_kthread+0x10/0x10
[   64.370267][ T4709]  ret_from_fork_asm+0x1a/0x30
[   64.370279][ T4709]  </TASK>
[   64.370349][ T4709] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   64.382110][ T6201] erofs: Unknown parameter '_'
[   64.937276][ T6207] loop0: detected capacity change from 0 to 2048
[   64.971232][ T6207] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   64.977329][ T6207] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   65.004555][   T33] audit: type=1800 audit(1756195967.792:3): pid=6207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.104" name="file0" dev="loop0" ino=13 res=0 errno=0
[   65.044331][ T5850] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.265033][ T6206] loop1: detected capacity change from 0 to 40427
[   65.269734][ T6206] F2FS-fs (loop1): build fault injection rate: 14
[   65.272055][ T6206] F2FS-fs (loop1): build fault injection type: 0x3bfe8c
[   65.280703][ T6206] F2FS-fs (loop1): invalid crc value
[   65.291699][    C0] F2FS-fs (loop1): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[   65.321169][    C0] F2FS-fs (loop1): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[   65.386102][ T6206] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   65.389197][ T6206] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[   65.395050][ T6206] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   65.435014][ T6206] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[   65.443773][ T6206] F2FS-fs (loop1): inject dquot initialize in f2fs_dquot_initialize of f2fs_create+0x14c/0x5c0
[   65.456657][ T6206] F2FS-fs (loop1): inject no more block in inc_valid_block_count of f2fs_map_blocks+0x1912/0x4130
[   65.460681][ T6206] syz.1.101: attempt to access beyond end of device
[   65.460681][ T6206] loop1: rw=34817, sector=45096, nr_sectors = 128 limit=40427
[   65.467485][ T6206] F2FS-fs (loop1): inject truncate fail in f2fs_truncate of f2fs_file_write_iter+0x2027/0x2410
[   65.502840][ T5855] syz-executor: attempt to access beyond end of device
[   65.502840][ T5855] loop1: rw=2049, sector=45224, nr_sectors = 8 limit=40427
[   65.524276][ T5855] CPU: 0 UID: 0 PID: 5855 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   65.524310][ T5855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   65.524317][ T5855] Call Trace:
[   65.524322][ T5855]  <TASK>
[   65.524328][ T5855]  dump_stack_lvl+0x189/0x250
[   65.524347][ T5855]  ? __pfx_dump_stack_lvl+0x10/0x10
[   65.524360][ T5855]  ? __pfx_queue_work_on+0x10/0x10
[   65.524372][ T5855]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   65.524389][ T5855]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   65.524408][ T5855]  f2fs_handle_critical_error+0x37c/0x540
[   65.524429][ T5855]  f2fs_write_end_io+0x886/0xb60
[   65.524443][ T5855]  __submit_merged_bio+0x27a/0x6a0
[   65.524460][ T5855]  __submit_merged_write_cond+0x255/0x530
[   65.524476][ T5855]  f2fs_write_data_pages+0x261d/0x3000
[   65.524505][ T5855]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   65.524524][ T5855]  ? __switch_to+0xdae/0x1670
[   65.524545][ T5855]  ? rcu_is_watching+0x15/0xb0
[   65.524553][ T5855]  ? trace_sched_exit_tp+0x36/0x110
[   65.524563][ T5855]  ? __schedule+0x17ae/0x4cc0
[   65.524572][ T5855]  ? folios_put_refs+0x560/0x640
[   65.524582][ T5855]  ? __pfx_folios_put_refs+0x10/0x10
[   65.524591][ T5855]  ? __pfx___schedule+0x10/0x10
[   65.524605][ T5855]  ? filemap_get_folios_tag+0xed/0x630
[   65.524618][ T5855]  ? rcu_is_watching+0x15/0xb0
[   65.524631][ T5855]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   65.524650][ T5855]  do_writepages+0x32e/0x550
[   65.524667][ T5855]  ? rcu_is_watching+0x15/0xb0
[   65.524680][ T5855]  ? do_raw_spin_unlock+0x4d/0x240
[   65.524695][ T5855]  filemap_fdatawrite+0x199/0x240
[   65.524722][ T5855]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   65.524748][ T5855]  ? rcu_is_watching+0x15/0xb0
[   65.524760][ T5855]  ? do_raw_spin_unlock+0x4d/0x240
[   65.524774][ T5855]  f2fs_sync_dirty_inodes+0x31f/0x830
[   65.524792][ T5855]  f2fs_write_checkpoint+0x95a/0x1df0
[   65.524811][ T5855]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   65.524836][ T5855]  ? kill_f2fs_super+0x298/0x6c0
[   65.524845][ T5855]  kill_f2fs_super+0x2c3/0x6c0
[   65.524853][ T5855]  ? __pfx_kill_f2fs_super+0x10/0x10
[   65.524860][ T5855]  ? radix_tree_delete_item+0x2b6/0x400
[   65.524871][ T5855]  ? shrinker_free+0x2ce/0x3e0
[   65.524879][ T5855]  deactivate_locked_super+0xbc/0x130
[   65.524889][ T5855]  cleanup_mnt+0x425/0x4c0
[   65.524898][ T5855]  task_work_run+0x1d4/0x260
[   65.524908][ T5855]  ? __pfx_task_work_run+0x10/0x10
[   65.524917][ T5855]  ? __x64_sys_umount+0x122/0x160
[   65.524926][ T5855]  ? __pfx___x64_sys_umount+0x10/0x10
[   65.524936][ T5855]  ? rcu_is_watching+0x15/0xb0
[   65.524943][ T5855]  exit_to_user_mode_loop+0xec/0x110
[   65.524954][ T5855]  do_syscall_64+0x2bd/0x3b0
[   65.524993][ T5855]  ? rcu_is_watching+0x15/0xb0
[   65.525000][ T5855]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   65.525008][ T5855]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   65.525016][ T5855] RIP: 0033:0x7f54cfd8ff17
[   65.525025][ T5855] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   65.525032][ T5855] RSP: 002b:00007ffdd99fbc18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   65.525042][ T5855] RAX: 0000000000000000 RBX: 00007f54cfe11c05 RCX: 00007f54cfd8ff17
[   65.525047][ T5855] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdd99fbcd0
[   65.525052][ T5855] RBP: 00007ffdd99fbcd0 R08: 0000000000000000 R09: 0000000000000000
[   65.525056][ T5855] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdd99fcd60
[   65.525062][ T5855] R13: 00007f54cfe11c05 R14: 000000000000ff4b R15: 00007ffdd99fcda0
[   65.525074][ T5855]  </TASK>
[   65.525139][ T5855] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   65.666398][ T6222] loop0: detected capacity change from 0 to 32768
[   65.730710][ T6222] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   65.771713][ T6222] XFS (loop0): Ending clean mount
[   65.791003][   T33] audit: type=1800 audit(1756195968.572:4): pid=6222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.108" name="file1" dev="loop0" ino=9286 res=0 errno=0
[   65.811280][ T5850] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   65.891594][ T6240] loop0: detected capacity change from 0 to 16
[   65.895815][ T6240] erofs (device loop0): mounted with root inode @ nid 36.
[   65.969956][ T6247] [U] V3Fپ"S/4:XTZWTLW=
[   65.976224][ T6247] [U] J"E:"
[   65.977695][ T6247] [U] 
[   66.006080][ T6249] loop0: detected capacity change from 0 to 4096
[   66.009379][ T6249] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[   66.013227][ T6249] ntfs3(loop0): ino=3, mi_enum_attr
[   66.225932][ T6269] netlink: 212288 bytes leftover after parsing attributes in process `syz.1.126'.
[   66.278286][ T6273] loop1: detected capacity change from 0 to 64
[   66.462138][ T6275] loop0: detected capacity change from 0 to 32768
[   66.466340][ T6275] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.129 (6275)
[   66.473268][ T6275] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   66.477602][ T6275] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[   66.539401][ T6264] loop2: detected capacity change from 0 to 32768
[   66.597932][ T6275] BTRFS info (device loop0): enabling ssd optimizations
[   66.600753][ T6275] BTRFS info (device loop0): enabling free space tree
[   66.629830][ T6264] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   66.727526][ T6264] XFS (loop2): Ending clean mount
[   66.730797][ T6264] XFS (loop2): Quotacheck needed: Please wait.
[   66.740756][ T6264] XFS (loop2): Quotacheck: Done.
[   66.861233][   T33] audit: type=1800 audit(1756195969.592:5): pid=6316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.129" name="file1" dev="loop0" ino=260 res=0 errno=0
[   67.068775][ T5857] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   67.238649][ T5850] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   67.340314][ T6326] syz.2.140 uses obsolete (PF_INET,SOCK_PACKET)
[   67.426171][ T6330] process 'syz.0.141' launched './file0' with NULL argv: empty string added
[   67.508050][ T6335] loop2: detected capacity change from 0 to 512
[   67.513085][ T6335] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   67.538468][ T6322] loop1: detected capacity change from 0 to 40427
[   67.554050][ T6322] F2FS-fs (loop1): invalid crc value
[   67.615180][ T6322] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[   67.619649][ T6322] F2FS-fs (loop1): Start checkpoint disabled!
[   67.626516][ T6322] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   67.657149][   T32] kworker/u9:1: attempt to access beyond end of device
[   67.657149][   T32] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   67.665487][   T32] CPU: 0 UID: 0 PID: 32 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) 
[   67.665506][   T32] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   67.665515][   T32] Workqueue: writeback wb_workfn (flush-7:1)
[   67.665538][   T32] Call Trace:
[   67.665542][   T32]  <TASK>
[   67.665548][   T32]  dump_stack_lvl+0x189/0x250
[   67.665567][   T32]  ? __pfx_dump_stack_lvl+0x10/0x10
[   67.665582][   T32]  ? __pfx_queue_work_on+0x10/0x10
[   67.665595][   T32]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   67.665611][   T32]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   67.665629][   T32]  f2fs_handle_critical_error+0x37c/0x540
[   67.665648][   T32]  f2fs_write_end_io+0x886/0xb60
[   67.665663][   T32]  __submit_merged_bio+0x27a/0x6a0
[   67.665682][   T32]  __submit_merged_write_cond+0x255/0x530
[   67.665702][   T32]  f2fs_write_data_pages+0x261d/0x3000
[   67.665732][   T32]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   67.665755][   T32]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[   67.665823][   T32]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[   67.665846][   T32]  ? trace_f2fs_writepages+0x7f/0x200
[   67.665863][   T32]  ? f2fs_write_node_pages+0x478/0x6e0
[   67.665877][   T32]  ? xa_load+0x60/0x210
[   67.665898][   T32]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[   67.665913][   T32]  ? do_raw_spin_lock+0x121/0x290
[   67.665931][   T32]  ? rcu_is_watching+0x15/0xb0
[   67.665944][   T32]  ? set_shrinker_bit+0x7c/0x350
[   67.665960][   T32]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   67.665979][   T32]  do_writepages+0x32e/0x550
[   67.665998][   T32]  ? unwind_next_frame+0xa5/0x2390
[   67.666018][   T32]  __writeback_single_inode+0x145/0xff0
[   67.666036][   T32]  ? do_raw_spin_unlock+0x4d/0x240
[   67.666054][   T32]  writeback_sb_inodes+0x6c7/0x1010
[   67.666076][   T32]  ? fprop_reflect_period_percpu+0x6b/0x330
[   67.666096][   T32]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   67.666125][   T32]  ? rcu_is_watching+0x15/0xb0
[   67.666141][   T32]  wb_writeback+0x43b/0xaf0
[   67.666161][   T32]  ? queue_io+0x2f1/0x590
[   67.666177][   T32]  ? __pfx_wb_writeback+0x10/0x10
[   67.666195][   T32]  ? rcu_is_watching+0x15/0xb0
[   67.666210][   T32]  wb_workfn+0x409/0xef0
[   67.666229][   T32]  ? __pfx_wb_workfn+0x10/0x10
[   67.666241][   T32]  ? rcu_is_watching+0x15/0xb0
[   67.666255][   T32]  ? rcu_is_watching+0x15/0xb0
[   67.666269][   T32]  ? process_scheduled_works+0x9ef/0x17b0
[   67.666283][   T32]  ? rcu_is_watching+0x15/0xb0
[   67.666296][   T32]  ? lock_acquire+0x5f/0x360
[   67.666314][   T32]  ? rcu_is_watching+0x15/0xb0
[   67.666327][   T32]  ? process_scheduled_works+0x9ef/0x17b0
[   67.666338][   T32]  ? process_scheduled_works+0x9ef/0x17b0
[   67.666351][   T32]  process_scheduled_works+0xae1/0x17b0
[   67.666374][   T32]  ? __pfx_process_scheduled_works+0x10/0x10
[   67.666394][   T32]  worker_thread+0x8a0/0xda0
[   67.666416][   T32]  kthread+0x711/0x8a0
[   67.666434][   T32]  ? __pfx_worker_thread+0x10/0x10
[   67.666447][   T32]  ? __pfx_kthread+0x10/0x10
[   67.666462][   T32]  ? _raw_spin_unlock_irq+0x23/0x50
[   67.666479][   T32]  ? lockdep_hardirqs_on+0x9c/0x150
[   67.666495][   T32]  ? __pfx_kthread+0x10/0x10
[   67.666511][   T32]  ret_from_fork+0x3fc/0x770
[   67.666526][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[   67.666540][   T32]  ? __switch_to_asm+0x39/0x70
[   67.666557][   T32]  ? __switch_to_asm+0x33/0x70
[   67.666572][   T32]  ? __pfx_kthread+0x10/0x10
[   67.666588][   T32]  ret_from_fork_asm+0x1a/0x30
[   67.666609][   T32]  </TASK>
[   67.666616][   T32] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   68.179384][ T6368] loop1: detected capacity change from 0 to 1764
[   68.485543][ T6375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.160'.
[   68.516252][ T6377] netlink: 'syz.2.161': attribute type 1 has an invalid length.
[   68.779588][ T6387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.165'.
[   68.799629][ T6387] bridge1: port 1(veth3) entered blocking state
[   68.801808][ T6387] bridge1: port 1(veth3) entered disabled state
[   68.805816][ T6387] veth3: entered allmulticast mode
[   68.808136][ T6387] veth3: entered promiscuous mode
[   68.817263][ T6387] bridge1: port 2(veth0_to_bond) entered blocking state
[   68.819516][ T6387] bridge1: port 2(veth0_to_bond) entered disabled state
[   68.821797][ T6387] veth0_to_bond: entered allmulticast mode
[   68.825463][ T6387] veth0_to_bond: entered promiscuous mode
[   69.157091][ T6397] loop0: detected capacity change from 0 to 32768
[   69.168834][ T6397] bcachefs (/dev/loop0): error validating superblock: Invalid superblock section members_v2: device 0: too many buckets (got 2251799813685376, max 2147483583)
[   69.168834][ T6397] members_v2 (size 152):
[   69.168834][ T6397] Device:                        0
[   69.168834][ T6397]   Label:                       (none)
[   69.168834][ T6397]   UUID:                        7af6772b-00de-4159-84cd-1faead05aceb
[   69.168834][ T6397]   Size:                        1073741824
[   69.168834][ T6397]   read errors:                 0
[   69.168834][ T6397]   write errors:                0
[   69.168834][ T6397]   checksum errors:             0
[   69.168834][ T6397]   seqread iops:                0
[   69.168834][ T6397]   seqwrite iops:               0
[   69.168834][ T6397]   randread iops:               0
[   69.168834][ T6397]   randwrite iops:              0
[   69.168834][ T6397]   Bucket size:                 8388608
[   69.168834][ T6397]   First bucket:                0
[   69.168834][ T6397]   Buckets:                     2251799813685376
[   69.168834][ T6397]   Last mount:                  1714681267
[   69.168834][ T6397]   Last superblock write:       42
[   69.168834][ T6397]   State:                       rw
[   69.168834][ T6397]   Data allowed:                journal,btree,user
[   69.168834][ T6397]   Has data:                    (none)
[   69.168834][ T6397]   Btree allocated bitmap blocksize:256
[   69.168834][ T6397]   Btree allocated bitmap:      00000000000000000000010000100000100110000
[   69.168904][ T6397] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[   69.574882][   T47] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   69.605205][ T6416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.178'.
[   69.613993][ T6415] Illegal XDP return value 4291128056 on prog  (id 11) dev N/A, expect packet loss!
[   69.742734][   T47] usb 2-1: Using ep0 maxpacket: 16
[   69.761244][   T47] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   69.772479][   T47] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[   69.779690][   T47] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   69.784221][ T6420] netlink: 'syz.2.180': attribute type 11 has an invalid length.
[   69.785111][   T47] usb 2-1: config 0 interface 0 has no altsetting 0
[   69.796894][   T47] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[   69.800347][   T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.807492][   T47] usb 2-1: config 0 descriptor??
[   70.266669][ T6404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   70.270422][ T6404] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   70.316901][ T6430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.185'.
[   70.339286][ T6430] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.539560][ T5917] usb 2-1: USB disconnect, device number 3
[   70.740439][ T6435] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.186'.
[   71.264015][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.266644][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.304245][ T6450] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[   71.405662][ T6456] dlm: no locking on control device
[   71.663806][ T6469] loop2: detected capacity change from 0 to 32768
[   71.853005][ T5917] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   72.140372][   T33] audit: type=1800 audit(1756195974.692:6): pid=6476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.201" name="file1" dev="loop2" ino=4 res=0 errno=0
[   72.306029][ T6476] ERROR: (device loop2): dbAdjCtl: the maximum free buddy is not the old root
[   72.306029][ T6476] 
[   72.310778][ T6476] ERROR: (device loop2): remounting filesystem as read-only
[   72.425131][ T5917] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   72.429423][ T5917] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   72.436736][ T5917] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   72.440347][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.444222][ T5917] usb 2-1: Product: syz
[   72.445898][ T5917] usb 2-1: Manufacturer: syz
[   72.447474][ T5917] usb 2-1: SerialNumber: syz
[   72.451453][ T5917] cdc_ncm 2-1:1.0: skipping garbage
[   72.453497][ T5917] cdc_ncm 2-1:1.0: NCM or ECM functional descriptors missing
[   72.456153][ T5917] cdc_ncm 2-1:1.0: bind() failure
[   72.460759][ T5917] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[   72.461549][ T5857] ------------[ cut here ]------------
[   72.463914][ T5917] cdc_ncm 2-1:1.1: bind() failure
[   72.465674][ T5857] kernel BUG at fs/jfs/inode.c:169!
[   72.475461][ T5857] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[   72.477945][ T5857] CPU: 1 UID: 0 PID: 5857 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   72.481524][ T5857] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   72.485353][ T5857] RIP: 0010:jfs_evict_inode+0x438/0x440
[   72.487493][ T5857] Code: fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 f3 75 e8 fe e9 16 fe ff ff e8 79 0a 85 fe 90 <0f> 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[   72.494767][ T5857] RSP: 0018:ffffc90003d2fae0 EFLAGS: 00010293
[   72.497156][ T5857] RAX: ffffffff833aa0b7 RBX: ffff88802b16c4b8 RCX: ffff8881057bd640
[   72.500225][ T5857] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88802b16c4b8
[   72.503238][ T5857] RBP: 0000000000000001 R08: ffffffff8fa38337 R09: 1ffffffff1f47066
[   72.506243][ T5857] R10: dffffc0000000000 R11: ffffffff833a7db0 R12: dffffc0000000000
[   72.509248][ T5857] R13: dffffc0000000000 R14: ffff88802b16c140 R15: ffffffff833a9c80
[   72.512340][ T5857] FS:  000055555dbd6500(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[   72.515836][ T5857] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   72.518437][ T5857] CR2: 000055555dbf15c8 CR3: 000000011d238000 CR4: 00000000000006f0
[   72.521514][ T5857] Call Trace:
[   72.522838][ T5857]  <TASK>
[   72.524009][ T5857]  ? evict+0x4f8/0x9c0
[   72.525643][ T5857]  ? __pfx_jfs_evict_inode+0x10/0x10
[   72.527714][ T5857]  evict+0x504/0x9c0
[   72.529227][ T5857]  ? __pfx_evict+0x10/0x10
[   72.530976][ T5857]  ? rcu_is_watching+0x15/0xb0
[   72.532851][ T5857]  ? do_raw_spin_unlock+0x4d/0x240
[   72.534839][ T5857]  evict_inodes+0x64c/0x6d0
[   72.536611][ T5857]  ? __pfx_evict_inodes+0x10/0x10
[   72.538542][ T5857]  generic_shutdown_super+0x9a/0x2c0
[   72.540546][ T5857]  kill_block_super+0x44/0x90
[   72.542332][ T5857]  deactivate_locked_super+0xbc/0x130
[   72.544392][ T5857]  cleanup_mnt+0x425/0x4c0
[   72.546138][ T5857]  task_work_run+0x1d4/0x260
[   72.547812][ T5857]  ? __pfx_task_work_run+0x10/0x10
[   72.549394][ T5857]  ? __x64_sys_umount+0x122/0x160
[   72.550944][ T5857]  ? __pfx___x64_sys_umount+0x10/0x10
[   72.552912][ T5857]  ? rcu_is_watching+0x15/0xb0
[   72.554703][ T5857]  exit_to_user_mode_loop+0xec/0x110
[   72.556691][ T5857]  do_syscall_64+0x2bd/0x3b0
[   72.558436][ T5857]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   72.560704][ T5857]  ? exc_page_fault+0x9f/0xf0
[   72.562445][ T5857]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   72.564499][ T5857] RIP: 0033:0x7fcdc058ff17
[   72.566233][ T5857] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   72.573107][ T5857] RSP: 002b:00007ffed78f99d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   72.576090][ T5857] RAX: 0000000000000000 RBX: 00007fcdc0611c05 RCX: 00007fcdc058ff17
[   72.579112][ T5857] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffed78f9a90
[   72.581920][ T5857] RBP: 00007ffed78f9a90 R08: 0000000000000000 R09: 0000000000000000
[   72.584869][ T5857] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffed78fab20
[   72.587776][ T5857] R13: 00007fcdc0611c05 R14: 0000000000011a2b R15: 00007ffed78fab60
[   72.590795][ T5857]  </TASK>
[   72.591985][ T5857] Modules linked in:
[   72.594317][ T5857] ---[ end trace 0000000000000000 ]---
[   72.604490][ T5857] RIP: 0010:jfs_evict_inode+0x438/0x440
[   72.606637][ T5857] Code: fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 f3 75 e8 fe e9 16 fe ff ff e8 79 0a 85 fe 90 <0f> 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[   72.614680][ T5857] RSP: 0018:ffffc90003d2fae0 EFLAGS: 00010293
[   72.616986][ T5857] RAX: ffffffff833aa0b7 RBX: ffff88802b16c4b8 RCX: ffff8881057bd640
[   72.619958][ T5857] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88802b16c4b8
[   72.623716][ T5857] RBP: 0000000000000001 R08: ffffffff8fa38337 R09: 1ffffffff1f47066
[   72.626771][ T5857] R10: dffffc0000000000 R11: ffffffff833a7db0 R12: dffffc0000000000
[   72.629750][ T5857] R13: dffffc0000000000 R14: ffff88802b16c140 R15: ffffffff833a9c80
[   72.633534][ T5857] FS:  000055555dbd6500(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[   72.636486][ T5857] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   72.638663][ T5857] CR2: 000000110c39bb0f CR3: 000000011d238000 CR4: 00000000000006f0
[   72.641071][ T5857] Kernel panic - not syncing: Fatal exception
[   72.643823][ T5857] Kernel Offset: disabled
[   72.645541][ T5857] Rebooting in 86400 seconds..

VM DIAGNOSIS:
08:12:55  Registers:
info registers vcpu 0

CPU#0
RAX=364379d72b7b8500 RBX=ffffffff819683b8 RCX=364379d72b7b8500 RDX=0000000000000001
RSI=ffffffff8be33660 RDI=ffffffff819683b8 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa38330 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7973f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2b62de CR3=0000000027e42000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=800302e410001ff0 030410001fe00300
XMM02=ca100020a0030610 0020900308100020 XMM03=01e380040020b403 04040020b00306eb
XMM04=0020c80300080020 c00304040020b803 XMM05=011f800402100000 0000000806060143
XMM06=8600080020c80300 080020c003040400 XMM07=20b80301e3800400 20b40304040020b0
XMM08=0306ebca100020a0 0306100020900308 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff82354cc6 RBX=ffffc900042cfd80 RCX=0000000000000000 RDX=ffff888108c60000
RSI=0000000000000000 RDI=0000000000000000 RBP=00000000000007ff RSP=ffffc900042cfb20
R8 =ffff8881000e01bf R9 =1ffff1102001c037 R10=dffffc0000000000 R11=ffffed102001c038
R12=ffffc900042cfe00 R13=0000000000000000 R14=ffff88802b374f18 R15=ffff88802b374f40
RIP=ffffffff81bfafa1 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f18718ebc80 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055555dbf15c8 CR3=000000002775e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00ff000000000000 XMM05=6863612a62732a2a 656d762a6400312a
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000ff0000 XMM09=72737c2a64737c2a 656d766e7c00312d
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
