last executing test programs:

11m9.501615617s ago: executing program 32 (id=778):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c00)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x9, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x4d3, 0x6c}, 0x2, @in=@local, 0x3507, 0x1, 0x3, 0x9, 0x2, 0x1, 0x4}]}]}, 0xfc}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a40)=ANY=[@ANYBLOB="a00000002100010000000000fefffffffe8000000000000000000000000000aa0000000000000000000000000000000300000000000200000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fc020000000000000000000000000000ff010000000000000000000000000001ff020000000000000000000000000001ffffffff0000000000000000000000006c01"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0)

9m51.216221573s ago: executing program 33 (id=1742):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)

8m22.724767063s ago: executing program 34 (id=2657):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f6, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x11, 0x0, 0xffff, 0x100, 0xb152, 0x3, 0x7fffffff, 0xfffffff9, 0x5}})
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

8m16.273437175s ago: executing program 35 (id=2719):
r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x0, &(0x7f0000005300), 0x0, 0x51ac, &(0x7f0000005280)="$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")
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000500)=0x2)
ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000700)={{}, 0x0, 0x0, 0xa6a, 0xe, 0x1})

4m59.423234271s ago: executing program 36 (id=4866):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x2c, r0, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0xa}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x2c}}, 0x0)

3m42.45432087s ago: executing program 5 (id=5539):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @empty}}, 0x24)
listen(r0, 0x5)
recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x40)

3m42.205382563s ago: executing program 5 (id=5541):
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
r1 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)

3m41.980527192s ago: executing program 5 (id=5542):
munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000f26000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000002, 0x9132, 0xffffffffffffffff, 0x9aa9b000)
brk(0x200000ffc000)

3m41.900022303s ago: executing program 5 (id=5544):
syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="6e6f646973636172642c6e6f636865636b706f696e745f6d657267652c616c6c6f635f6d6f64653d64656661756c742c6163746976655f6c6f67733d362c666c7573685f6d657267652c6661756c745f696e6a656374696f6e3d30303030303030303030303030303030303235362c646973636172642c6e6f61636c2c6673796e635f6d6f64653d706f7369782c616c6c6f635f6d6f64653d64656661756c742c6e6f657874656e745f63616368652c6163746976655f6c6f67733d322c6661756c745f747970653d30303030303030303030303031363737373231342c0002d1c71f8348abae1fff96ec907a723dca530cf5aea9622c1169c27c91b4d703f02da55a70e4108d30dd0a1b6e467d05c6c0237e3772dfb37da0e9705c62c7f6dc21ef782f52420c3553374831f4ea304136303a65f3196af86a3d58c8bfb0ef60c974b0e0b44af5ce33f407facb3838bd4bf9b7a99d612518ac3ddddf95b10ead9f78580da79051b5011a94bc44336ebf9378b479860af435366b6d4cdb9c5ffd949b52f82ac9c92de853", @ANYRES32=0x0, @ANYRESOCT, @ANYRESOCT=0x0, @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYRESHEX], 0x7, 0x5505, &(0x7f0000011ac0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x4080, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

3m39.437784654s ago: executing program 5 (id=5557):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/dynamic_events\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)="653a6d2d67726f75702f6d866576656e742073", 0x13)

3m38.395730565s ago: executing program 5 (id=5567):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x81}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}]}}]}, 0x154}}, 0x0)

3m37.812619996s ago: executing program 37 (id=5567):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x81}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}]}}]}, 0x154}}, 0x0)

2m32.705812854s ago: executing program 8 (id=6181):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r0, 0xc138fd03, &(0x7f00000003c0)="04000000000000000000000038010000000000000200000000000000fffffe000000000000000fffff000000000000002e2e36")

2m32.164085052s ago: executing program 8 (id=6185):
mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f0000000280)='\x00', 0x1)

2m31.704908604s ago: executing program 8 (id=6193):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0)
ioctl(r0, 0xc138fd10, &(0x7f0000000180)="0400000000000000000000007e01")

2m31.373912457s ago: executing program 8 (id=6198):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000440)='./file0\x00', 0x300000a, &(0x7f0000000200)={[{@nodatacow}, {@nodatasum}, {@nodiscard}, {@clear_cache}, {@datasum}, {@discard_sync}, {@treelog}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@commit={'commit', 0x3d, 0xa913}}, {@ssd_spread}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f0000005600)="$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")
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180))

2m28.96056035s ago: executing program 8 (id=6216):
syz_open_dev$video(&(0x7f0000000000), 0x7fff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000010000000000000104000000200000000100000000000001"], 0x0, 0x3c}, 0x28)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00')
pread64(r0, &(0x7f0000002140)=""/17, 0x11, 0x0)

2m27.676036292s ago: executing program 8 (id=6228):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', <r2=>0x0})
sendmsg$can_raw(r0, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r2}, 0x10, &(0x7f0000000100)={0x0, 0x25}, 0x2, 0x0, 0x0, 0x48984}, 0x48800)

2m26.197931726s ago: executing program 38 (id=6228):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', <r2=>0x0})
sendmsg$can_raw(r0, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r2}, 0x10, &(0x7f0000000100)={0x0, 0x25}, 0x2, 0x0, 0x0, 0x48984}, 0x48800)

2m0.119894814s ago: executing program 2 (id=6461):
unshare(0x22020600)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x0)

1m59.789391018s ago: executing program 2 (id=6465):
r0 = socket(0xa, 0x3, 0x87)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ipvlan0\x00', <r1=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, 0x78, r1})
ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000))

1m59.402784787s ago: executing program 2 (id=6471):
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x2000, 0x8, 0xadea})
r0 = io_uring_setup(0x78eb, &(0x7f00000000c0)={0x0, 0xc63b, 0x3018, 0x2, 0x1f9})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
io_uring_enter(r0, 0x0, 0x2, 0xf, &(0x7f0000000000)={[0x2000000]}, 0x18)

1m59.103158352s ago: executing program 2 (id=6475):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000440)='./file0\x00', 0x300000a, &(0x7f0000000200)={[{@nodatacow}, {@nodatasum}, {@nodiscard}, {@clear_cache}, {@datasum}, {@discard_sync}, {@treelog}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@commit={'commit', 0x3d, 0xa913}}, {@ssd_spread}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f0000005600)="$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")
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180))

1m58.883045671s ago: executing program 6 (id=6478):
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbaaaaaaaaaa08002b10001c40"], 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000000)="114353012008ba00000037510800", 0x59f, 0x4008015, &(0x7f00000000c0)={0x11, 0xe5, r1, 0x1, 0x7}, 0x14)

1m58.523816066s ago: executing program 6 (id=6481):
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0)
r0 = syz_open_dev$I2C(&(0x7f00000003c0), 0x1, 0x2603)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f0000000800)=[{0x63, 0xc810, 0x0, 0x0}], 0x1})
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)

1m57.112574659s ago: executing program 2 (id=6496):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x200000005c832, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00')
read$FUSE(r0, &(0x7f0000003380)={0x2020}, 0x2020)

1m56.111201636s ago: executing program 2 (id=6507):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000)
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})

1m55.63229077s ago: executing program 39 (id=6507):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000)
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})

1m55.188625494s ago: executing program 6 (id=6514):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000400012800c0001006d6163766c616e0030000280080003000300000009000100100000001c0005800a000400aaaaaaaaaa2d00000a0004003426f7b68ed1000008000500", @ANYRES32=r1], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc)

1m54.644361042s ago: executing program 6 (id=6518):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x17, &(0x7f0000000080)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x40008d4)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x0)

1m54.299346692s ago: executing program 6 (id=6524):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8})
r1 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

1m53.96722052s ago: executing program 6 (id=6528):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x1000, {[@fastopen={0x1e, 0x4, "54e8"}]}}}}}}}}, 0x0)

1m38.812173826s ago: executing program 40 (id=6528):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x1000, {[@fastopen={0x1e, 0x4, "54e8"}]}}}}}}}}, 0x0)

5.27676904s ago: executing program 4 (id=7499):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="bf16000000000000b70700000200f0ff4070000000000000480000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6879fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a3449abe802f5ab3e89cf6cfdffffffb8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8ff7e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae1d39c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025f2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da083e8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910a3193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b8840558b3f918d675a79907a72a8252cd3fbaea5d3006a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb5ff0f000002ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f80bb1c9cfcde57b79625e2979fe689a5a246cbbdf6ad488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc856df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d0e68d7eef5d32d5fcc7923d7544fa492aa38717481455e86dcd7816ad8940bd1995369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b14952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d780100358aa54b4b49926c4be9ee4659153d9fa95d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c22e46af480c300000000000000000000000000000000000044ff72f96f084f4b6cdcb1b4a9d8e9f99f1b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f25ef52394db3e9d8318bbb9baff3db95bfd68a08ded502cc08a485c804e4fd107a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d25b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b0d87a6ed800000000000000000000000000000000006cc6f64f583a26a78f7f417f66c0af32f5194ddfce51e5aff28f621bb2fd2a5ab719823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c334832a90ee77d93596e3f12e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e2634e89aaa90c571fa3c07238697b1db783c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170a51f28cea4105541e96a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babc9d1550a683c349017a340444000000000000000000000920ca49f7cc8194aaebdcae5a62bb7587b57f41f1c2034911f23e6bd0291b3319f03a0a15dea685a8ab75b3c60391afa5483231305402b52a8f98638009c142751518f73a847ca583e855d70c6a4a53f61ad753d5e740db44afd32b019d9e8b41361c2c1b9a8a14604fe52837a19dd6952fe2724c0105ab158a54a4a23ff0f4bc43c0e0e426e51258e40bb4b68ff4e3a8fe314a0"], &(0x7f0000000140)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000780)=r2, 0x4)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000240)="6ce0a3da63bd", 0x6}], 0x1)

5.048449996s ago: executing program 4 (id=7502):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c0000009500000000000000eb4779fcbb3e3bbff2971871b1b1c0b4f0fca28377f3aa77d6c8d949060c54d53bd61b3561319f7b346f8cadae05957ee562fe28a5d0b564a59c30cb37ebb90e516d9c72b9d81817f7a04496e4261b41dae579bd93d38e2740ac98d6108c318a35d29534fd3c6bf14ef7a5c59c3d48f092e6b6bb43ec765d850f71052de0718c08"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x801, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x3101, 0x8a05}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r2}]}, @IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, 0x50}}, 0x400c040)

4.617911283s ago: executing program 4 (id=7509):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "41b57012b47bc8e8d8e3484d9c5998b3"}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0x8, 0x1a95, 0x88ad, 0x2, 0x7, 0x2752}}, {0x4}}]}]}, 0x6c}}, 0x0)

3.951448227s ago: executing program 4 (id=7516):
r0 = fanotify_init(0x1, 0x80000)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
fanotify_mark(r0, 0x455, 0x40001010, r1, 0x0)
fanotify_mark(r0, 0x7e, 0x8000022, r1, 0x0)

3.679467436s ago: executing program 3 (id=7520):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r1, 0x4)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0)

3.608374904s ago: executing program 4 (id=7521):
madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1)
madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0)
write(r0, &(0x7f00000002c0)='0', 0x1)

3.009269216s ago: executing program 3 (id=7525):
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES8=0x0, @ANYRES16], 0x1, 0x242, &(0x7f0000000300)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, &(0x7f0000000680)={0x690000, 0x10000, 0x0, 0x0, 0x0, 0xa, 0x2401})

2.523530659s ago: executing program 1 (id=7531):
r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x5, 0x4})
ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000040)=0x1)
ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f0000000300)=0x5)

2.207769861s ago: executing program 1 (id=7535):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001"], 0x34c}, 0x1, 0x0, 0x0, 0xf9612d57cd99e519}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x4, 0x1, 0x4, 0xfffffffe, 0x7, 0x5, 0x151, 0x10000101}, 0x20)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c0006"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800)

2.206655341s ago: executing program 4 (id=7536):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000800904000001020d0000052406000105240006000d240f0100000000fdff07000006241ab80e1e090581032000010d560904110000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x181f80, 0x0)

1.966548551s ago: executing program 1 (id=7538):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000000)={[{@bsdgroups}, {@nodioread_nolock}, {@nolazytime}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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")
r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r0, 0x852)
preadv2(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000280)=""/216, 0xfdef}], 0x2, 0x800, 0x5, 0x4)

1.757349977s ago: executing program 9 (id=7541):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers/ata_piix/new_id\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='8086 7010', 0x9)

1.540169509s ago: executing program 9 (id=7543):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000)

1.538542074s ago: executing program 1 (id=7544):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
waitid(0x1, r0, 0x0, 0x61000006, &(0x7f0000000340))
ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28})

1.425400742s ago: executing program 3 (id=7545):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fff0000}]})
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64, @ANYRES32, @ANYRESDEC, @ANYRESOCT], 0x4, 0x2cc, &(0x7f0000000440)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0)
rmdir(&(0x7f0000000040)='./file0\x00')

1.345360285s ago: executing program 7 (id=7546):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain)
keyctl$setperm(0x5, r0, 0x40008)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000780)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r0)

1.282705325s ago: executing program 0 (id=7547):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000004600), 0x42, 0x0)
sendfile(r0, r0, 0x0, 0x4)

1.16244819s ago: executing program 7 (id=7548):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)={0x3c, r1, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x3c}}, 0x0)

1.115349732s ago: executing program 9 (id=7549):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x3000, 0x200, 0x3, 0x3ff, 0x1b, "b990e644b2425f0839b595f4e028c8a6b4f73c"})
write$UHID_INPUT(r1, &(0x7f0000002640)={0x9, {"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", 0x1000}}, 0x1006)

1.029479759s ago: executing program 3 (id=7550):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0)
pwrite64(r0, &(0x7f00000004c0)="02155e", 0x3, 0x2)

1.012888532s ago: executing program 0 (id=7551):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'gre0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r1, {0x1, 0xfff2}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x12}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5, 0x51, 0x4e}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041890}, 0x0)

959.324571ms ago: executing program 1 (id=7552):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0)
dup3(r1, r0, 0x0)

806.615786ms ago: executing program 9 (id=7553):
r0 = socket(0x2, 0x3, 0xff)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfffd, @local}, 0x10)
shutdown(r0, 0x1)
write$binfmt_elf32(r0, 0x0, 0x3c)

805.127839ms ago: executing program 7 (id=7554):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r1=>0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'ipvlan1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@newlink={0x48, 0x10, 0x401, 0xfffffffe, 0x200, {0x0, 0x0, 0x0, 0x0, 0x10227}, [@IFLA_MASTER={0x8, 0xa, r1}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x840)

784.272448ms ago: executing program 0 (id=7555):
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x792, &(0x7f0000020c00)="$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")
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f00000001c0)={[{@minixdf}, {@noblock_validity}, {@abort}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0xe3}}, {@grpjquota, 0x2e}, {@nouser_xattr}, {@nolazytime}, {@dax}, {@grpid}], [], 0x2c}, 0x84, 0x4ab, &(0x7f0000000740)="$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")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xe1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a5a438, &(0x7f0000004180)=ANY=[], 0xd, 0x0, &(0x7f0000000000))

715.404089ms ago: executing program 3 (id=7556):
r0 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00')
preadv(r1, &(0x7f0000001300)=[{&(0x7f0000002240)=""/4115, 0x1013}], 0x1, 0x142, 0xfffffffc)

629.752235ms ago: executing program 1 (id=7557):
r0 = socket$inet6(0xa, 0x3, 0x2)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e25, 0x86, @mcast2, 0x4}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xffff8001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x401}, 0x1c)

622.58924ms ago: executing program 9 (id=7558):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x0, 0x0, 0x0, 0x4, 0x0)
r0 = landlock_create_ruleset(&(0x7f0000000180)={0x8505, 0x3, 0x3}, 0x18, 0x0)
landlock_restrict_self(r0, 0xb)

495.444954ms ago: executing program 3 (id=7559):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @remote, @link_local, @remote}}}}, 0x0)

493.643991ms ago: executing program 7 (id=7560):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x2, 0x0)
read$FUSE(r0, 0x0, 0x0)

395.14255ms ago: executing program 0 (id=7561):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0)
close(0x3)

300.481969ms ago: executing program 7 (id=7562):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800090001000000fedbdf250a802000040300"], 0x1c}}, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33)

200.313733ms ago: executing program 0 (id=7563):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20a02, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2})
ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x10e)

104.777744ms ago: executing program 9 (id=7564):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
write$FUSE_STATX(r1, &(0x7f0000000b00)={0x130, 0x0, 0x0, {0xfffffffffffffffb, 0x0, 0x0, '\x00', {0x10000, 0xf, 0x1, 0x8, 0x0, 0x0, 0x4000, '\x00', 0x400, 0x1, 0x8001, 0x4, {0x276e81ae, 0x4}, {0xfffffffffffff141, 0x9e}, {0x6, 0x4}, {0x9, 0x4}, 0x3, 0x8000, 0x81, 0xfffffff0}}}, 0x130)

63.270882ms ago: executing program 7 (id=7565):
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040e0b031120"], 0x7)

0s ago: executing program 0 (id=7566):
r0 = getpgid(0x0)
r1 = syz_pidfd_open(r0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680))
pidfd_getfd(r1, r1, 0x0)

kernel console output (not intermixed with test programs):

z.6.6411': attribute type 3 has an invalid length.
[  724.042631][ T5765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  724.095122][   T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  724.624199][T23659] loop7: detected capacity change from 0 to 256
[  724.677029][T23659] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  725.010749][ T1221] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  725.071001][T23674] program syz.1.6427 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  725.092644][T19182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  725.171310][ T1221] usb 3-1: Using ep0 maxpacket: 32
[  725.173544][ T1221] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  725.177561][ T1221] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  725.177591][ T1221] usb 3-1: config 0 has no interface number 0
[  725.196063][ T1221] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  725.196093][ T1221] usb 3-1: Product: syz
[  725.196112][ T1221] usb 3-1: Manufacturer: syz
[  725.196131][ T1221] usb 3-1: SerialNumber: syz
[  725.260995][ T1221] usb 3-1: config 0 descriptor??
[  725.271102][ T1221] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  725.509007][T23666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  725.509505][T23666] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  725.586229][ T1221] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  725.605094][ T1221] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  725.708632][ T1221] kernel read not supported for file /media6 (pid: 1221 comm: kworker/1:2)
[  725.834072][T23696] input: syz0 as /devices/virtual/input/input45
[  726.031050][    C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71
[  726.041085][T19182] usb 3-1: USB disconnect, device number 7
[  726.064045][T19182] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  726.081736][T19182] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  726.088651][T19182] quatech2 3-1:0.51: device disconnected
[  726.173925][ T5765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  727.037781][T23728] loop6: detected capacity change from 0 to 8192
[  727.047504][T23728] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  727.079262][T23735] loop4: detected capacity change from 0 to 4096
[  727.159204][T23743] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  727.221309][ T5765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  727.292880][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  727.931731][   T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  728.270617][ T5765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  728.699830][T23803] device-mapper: ioctl: name not supplied when creating device
[  729.297492][ T5765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  729.388879][T23830] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  729.854588][T21731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  730.033930][T23816] loop2: detected capacity change from 0 to 32768
[  730.034753][T23816] BTRFS warning: excessive commit interval 43283, use with care
[  730.039401][T23816] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.6475 (23816)
[  730.087874][T23816] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  730.087908][T23816] BTRFS info (device loop2): using sha256 checksum algorithm
[  730.310043][T23816] BTRFS info (device loop2): rebuilding free space tree
[  730.345097][T19182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  730.460098][T23816] BTRFS info (device loop2): turning on sync discard
[  730.460142][T23816] BTRFS info (device loop2): enabling free space tree
[  730.460164][T23816] BTRFS info (device loop2): force clearing of disk cache
[  730.823775][T23889] loop4: detected capacity change from 0 to 8
[  731.279453][T23899] loop1: detected capacity change from 0 to 64
[  731.379168][ T5765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  731.454624][ T5621] Bluetooth: hci5: Entering manufacturer mode failed (-110)
[  731.619921][T23881] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  731.633048][T18785] hfs: node 4:3 still has 1 user(s)!
[  731.891691][T23918] loop7: detected capacity change from 0 to 256
[  731.907583][T23918] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x204323ec, utbl_chksum : 0xe619d30d)
[  731.984785][ T5736] lpc_ich 0000:00:00.0: I/O space for ACPI uninitialized
[  731.984823][ T5736] lpc_ich 0000:00:00.0: I/O space for ACPI uninitialized
[  731.984851][ T5736] lpc_ich 0000:00:00.0: I/O space for GPIO uninitialized
[  731.984869][ T5736] lpc_ich 0000:00:00.0: No MFD cells added
[  732.146880][ T5736] lpc_ich 0000:00:01.0: I/O space for ACPI uninitialized
[  732.146917][ T5736] lpc_ich 0000:00:01.0: I/O space for ACPI uninitialized
[  732.146974][ T5736] lpc_ich 0000:00:01.0: I/O space for GPIO uninitialized
[  732.146994][ T5736] lpc_ich 0000:00:01.0: No MFD cells added
[  732.165381][ T5736] lpc_ich 0000:00:01.3: RCBA is disabled by hardware/BIOS, device disabled
[  732.165445][ T5736] lpc_ich 0000:00:01.3: I/O space for GPIO uninitialized
[  732.165464][ T5736] lpc_ich 0000:00:01.3: No MFD cells added
[  732.172882][ T5736] lpc_ich 0000:00:05.0: I/O space for ACPI uninitialized
[  732.172913][ T5736] lpc_ich 0000:00:05.0: I/O space for ACPI uninitialized
[  732.172939][ T5736] lpc_ich 0000:00:05.0: I/O space for GPIO uninitialized
[  732.172988][ T5736] lpc_ich 0000:00:05.0: No MFD cells added
[  732.427838][ T5765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  732.835201][T18789] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  732.841760][T18789] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  732.871767][T18789] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  732.879229][T18789] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  732.880939][T18789] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  732.954723][T23945] netlink: 'syz.6.6514': attribute type 1 has an invalid length.
[  732.989493][T23947] netlink: 'syz.6.6514': attribute type 1 has an invalid length.
[  733.013433][T23945] gretap0: entered promiscuous mode
[  733.497139][T19182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  733.693377][   T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  734.624764][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  734.888213][T24003] loop7: detected capacity change from 0 to 1024
[  734.926537][T24003] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  734.971909][T18789] Bluetooth: hci1: command tx timeout
[  734.972210][T22959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  735.741629][T19182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  736.019176][T23936] bridge0: port 1(bridge_slave_0) entered blocking state
[  736.019358][T23936] bridge0: port 1(bridge_slave_0) entered disabled state
[  736.019540][T23936] bridge_slave_0: entered allmulticast mode
[  736.025636][T23936] bridge_slave_0: entered promiscuous mode
[  736.029307][T23936] bridge0: port 2(bridge_slave_1) entered blocking state
[  736.030652][T23936] bridge0: port 2(bridge_slave_1) entered disabled state
[  736.030799][T23936] bridge_slave_1: entered allmulticast mode
[  736.034132][T23936] bridge_slave_1: entered promiscuous mode
[  736.217377][T23936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  736.236742][T23936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  736.527921][T24051] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6545'.
[  736.529116][T23936] team0: Port device team_slave_0 added
[  736.549714][T23936] team0: Port device team_slave_1 added
[  736.763041][T23936] batman_adv: batadv0: Adding interface: batadv_slave_0
[  736.763064][T23936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  736.763099][T23936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  736.768810][T23936] batman_adv: batadv0: Adding interface: batadv_slave_1
[  736.768828][T23936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  736.768860][T23936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  736.858301][T19182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  737.006754][T24058] mtrr: base(0x10000000) is not aligned on a size(0x0000) boundary
[  737.062818][T18789] Bluetooth: hci1: command tx timeout
[  737.219743][T23936] hsr_slave_0: entered promiscuous mode
[  737.246505][T23936] hsr_slave_1: entered promiscuous mode
[  737.260272][T23936] debugfs: 'hsr0' already exists in 'hsr'
[  737.260296][T23936] Cannot create hsr debugfs directory
[  737.438450][T24066] loop7: detected capacity change from 0 to 256
[  737.964244][ T5765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  738.211393][T24083] zero sized request
[  738.470768][T24087] loop1: detected capacity change from 0 to 1024
[  738.733195][   T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  738.999583][ T5765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  739.130880][T18789] Bluetooth: hci1: command tx timeout
[  739.328866][T24103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6560'.
[  739.687467][T24110] netlink: 'syz.4.6562': attribute type 29 has an invalid length.
[  739.690985][T24110] netlink: 'syz.4.6562': attribute type 29 has an invalid length.
[  739.695242][T24110] netlink: 'syz.4.6562': attribute type 29 has an invalid length.
[  739.967502][T24113] loop1: detected capacity change from 0 to 256
[  740.036335][ T5765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  740.095609][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  741.073003][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  741.211648][T18789] Bluetooth: hci1: command tx timeout
[  741.349893][T24149] scsi_strcpy_devinfo: model string 'moí劌r•�™—˜r³ádel' is too long
[  741.378811][T24147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6574'.
[  741.639652][T23936] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  741.669209][T23936] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  741.675383][T23936] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  741.738108][T23936] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  741.745186][T23936] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  741.762735][T24160] program syz.1.6579 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  741.779340][T23936] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  741.799717][T23936] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  741.839171][T23936] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  742.119433][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  742.179991][T24176] loop1: detected capacity change from 0 to 64
[  742.310598][T23936] 8021q: adding VLAN 0 to HW filter on device bond0
[  742.389636][T23936] 8021q: adding VLAN 0 to HW filter on device team0
[  742.479386][  T999] bridge0: port 1(bridge_slave_0) entered blocking state
[  742.479498][  T999] bridge0: port 1(bridge_slave_0) entered forwarding state
[  742.532348][  T999] bridge0: port 2(bridge_slave_1) entered blocking state
[  742.532469][  T999] bridge0: port 2(bridge_slave_1) entered forwarding state
[  743.002099][ T1221] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  743.150677][ T1221] usb 5-1: Using ep0 maxpacket: 16
[  743.154120][ T1221] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  743.159503][ T1221] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  743.159533][ T1221] usb 5-1: Product: syz
[  743.159553][ T1221] usb 5-1: Manufacturer: syz
[  743.159573][ T1221] usb 5-1: SerialNumber: syz
[  743.163376][ T5765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  743.216508][ T1221] r8152-cfgselector 5-1: Unknown version 0x0000
[  743.216537][ T1221] r8152-cfgselector 5-1: config 0 descriptor??
[  743.668596][ T6290] r8152-cfgselector 5-1: USB disconnect, device number 37
[  743.932883][   T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  744.177721][ T6290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  744.257794][T23936] 8021q: adding VLAN 0 to HW filter on device batadv0
[  744.409812][T24229] loop7: detected capacity change from 0 to 128
[  744.422331][T24229] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  744.429406][T24229] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  744.524390][T23936] veth0_vlan: entered promiscuous mode
[  744.616022][T23936] veth1_vlan: entered promiscuous mode
[  744.735771][T21731] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  744.830062][T23936] veth0_macvtap: entered promiscuous mode
[  744.870280][T23936] veth1_macvtap: entered promiscuous mode
[  745.045065][T23936] batman_adv: batadv0: Interface activated: batadv_slave_0
[  745.085163][T24244] bad cache= option: none_mlock 0
[  745.085163][T24244] nr_zspages 0
[  745.085163][T24244] nr_free_cma 0
[  745.085163][T24244] numa_hit 3227740
[  745.085163][T24244] numa_miss 2
[  745.085163][T24244] numa_foreign 2
[  745.085163][T24244] numa_interleave 7286
[  745.085163][T24244] numa_local 3223946
[  745.085163][T24244] numa_other 3796
[  745.085163][T24244] nr_inactive_anon 2
[  745.085163][T24244] nr_active_anon 22493
[  745.085163][T24244] nr_inactive_file 58569
[  745.085163][T24244] nr_active_file 53
[  745.085163][T24244] nr_unevictable 0
[  745.085163][T24244] nr_slab_reclaimable 8484
[  745.085163][T24244] nr_slab_unreclaimable 106536
[  745.085163][T24244] nr_isolated_anon 0
[  745.085163][T24244] nr_isolated_file 0
[  745.085163][T24244] workingset_nodes 6
[  745.085163][T24244] workingset_refault_anon 535
[  745.085163][T24244] workingset_refault_file 178
[  745.085163][T24244] workingset_activate_anon 40
[  745.085163][T24244] workingset_activate_file 0
[  745.085163][T24244] workingset_restore_anon 40
[  745.085163][T24244] workingset_restore_file 0
[  745.085163][T24244] workingset_nodereclaim 0
[  745.085163][T24244] nr_anon_pages 8443
[  745.085163][T24244] nr_mapped 35970
[  745.085163][T24244] nr_file_pages 72434
[  745.085163][T24244] nr_dirty 492
[  745.085163][T24244] nr_writeback 0
[  745.085163][T24244] nr_shmem 14070
[  745.085163][T24244] nr_shmem_hugepages 0
[  745.085163][T24244] nr_shmem_pmdmapped 0
[  745.085163][T24244] nr_file_hugepages 0
[  745.085163][T24244] nr_file_pmdmapped 0
[  745.085163][T24244] nr_anon_transparent_hugepages 0
[  745.085163][T24244] nr_vmscan_write 16137
[  745.085163][T24244] nr_vmscan_immediate_reclaim 255
[  745.085163][T24244] nr_dirtied 20589
[  745.085163][T24244] nr_written 19209
[  745.085163][T24244] nr_throttled_written 482
[  745.085163][T24244] nr_kernel_misc_reclaimable 0
[  745.085163][T24244] nr_foll_pin_acquired 28772
[  745.085163][T24244] nr_foll_pin_released 28790
[  745.085163][T24244] nr_vmalloc 149209
[  745.085657][T24244] CIFS: VFS: bad cache= option: none_mlock 0
[  745.085657][T24244] nr_zspages 0
[  745.085657][T24244] nr_free_cma 0
[  745.085657][T24244] numa_hit 3227740
[  745.085657][T24244] numa_miss 2
[  745.085657][T24244] numa_foreign 2
[  745.085657][T24244] numa_interleave 7286
[  745.085657][T24244] numa_local 3223946
[  745.085657][T24244] numa_other 3796
[  745.085657][T24244] nr_inactive_anon 2
[  745.085657][T24244] nr_active_anon 22493
[  745.085657][T24244] nr_inactive_file 58569
[  745.085657][T24244] nr_active_file 53
[  745.085657][T24244] nr_unevictable 0
[  745.085657][T24244] nr_slab_reclaimable 8484
[  745.085657][T24244] nr_slab_unreclaimable 106536
[  745.085657][T24244] nr_isolated_anon 0
[  745.085657][T24244] nr_isolated_file 0
[  745.085657][T24244] workingset_nodes 6
[  745.085657][T24244] workingset_refault_anon 535
[  745.085657][T24244] workingset_refault_file 178
[  745.085657][T24244] workingset_activate_anon 40
[  745.085657][T24244] workingset_activate_file 0
[  745.085657][T24244] workingset_restore_anon 40
[  745.085657][T24244] workingset_restore_file 0
[  745.085657][T24244] workingset_nodereclaim 0
[  745.085657][T24244] nr_anon_pages 8443
[  745.085657][T24244] nr_mapped 35970
[  745.085657][T24244] nr_file_pages 72434
[  745.085657][T24244] nr_dirty 492
[  745.085657][T24244] nr_writeback 0
[  745.085657][T24244] nr_shmem 14070
[  745.085657][T24244] nr_shmem_hugepages 0
[  745.085657][T24244] nr_shmem_pmdmapped 0
[  745.085657][T24244] nr_file_hugepages 0
[  745.085657][T24244] nr_file_pmdmapped 0
[  745.085657][T24244] nr_anon_transparent_hugepages 0
[  745.085657][T24244] nr_vmscan_write 16137
[  745.085657][T24244] nr_vmscan_immediate_reclaim 255
[  745.085657][T24244] nr_dirtied 20589
[  745.085657][T24244] nr_written 19209
[  745.085657][T24244] nr_throttled_written 482
[  745.085657][T24244] nr_kernel_misc_reclaimable 0
[  745.085657][T24244] nr_foll_pin_acquired 28772
[  745.085657][T24244] nr_foll_pin_released 28790
[  745.321114][ T5765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  745.331088][   T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  745.778174][T23936] batman_adv: batadv0: Interface activated: batadv_slave_1
[  745.925688][T24257] overlay: filesystem on ./file0 is read-only
[  745.980987][   T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  745.982446][   T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  745.982495][   T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  745.982539][   T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  746.289523][T21731] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  746.289549][T21731] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  746.362483][ T6290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  746.502499][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  746.502595][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  746.536322][T22959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  746.536343][T22959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  746.737762][T24280] loop3: detected capacity change from 0 to 512
[  746.816655][T24280] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  746.816762][T24280] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  746.904031][   T31] kauditd_printk_skb: 13 callbacks suppressed
[  746.904053][   T31] audit: type=1800 audit(1789089655.096:427): pid=24280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6611" name="file1" dev="loop3" ino=15 res=0 errno=0
[  746.912483][ T5736] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  747.063557][ T5736] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  747.064726][ T5736] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  747.064761][ T5736] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  747.066693][ T5736] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  747.066728][ T5736] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  747.069065][ T5736] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  747.069093][ T5736] usb 5-1: Product: syz
[  747.069112][ T5736] usb 5-1: Manufacturer: syz
[  747.069131][ T5736] usb 5-1: SerialNumber: syz
[  747.119731][ T5736] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected
[  747.160495][ T5736] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0
[  747.196506][ T5736] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[  747.300605][T23067] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  747.382775][T24274] ti_usb_3410_5052_2 ttyUSB0: ti_open - submit interrupt urb failed, -90
[  747.428961][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  747.464597][ T5736] usb 5-1: USB disconnect, device number 38
[  747.556062][ T5736] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0
[  747.578278][ T5736] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[  747.579277][ T5736] ti_usb_3410_5052 5-1:2.0: device disconnected
[  747.800185][T24303] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6617'.
[  747.843625][T24303] ipvlan2: entered allmulticast mode
[  747.843650][T24303] erspan0: entered allmulticast mode
[  748.221375][T21351] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  748.372526][T21351] usb 4-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00
[  748.375836][T21351] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  748.375866][T21351] usb 4-1: Product: syz
[  748.375886][T21351] usb 4-1: Manufacturer: syz
[  748.375905][T21351] usb 4-1: SerialNumber: syz
[  748.378737][T24313] loop4: detected capacity change from 0 to 4096
[  748.387196][T24313] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  748.439598][T21351] ums_eneub6250 4-1:1.0: USB Mass Storage device detected
[  748.450483][ T5765] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  748.476846][T21351] scsi host1: usb-storage 4-1:1.0
[  748.508135][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  748.548844][T24313] ntfs3(loop4): ino=19, mi_enum_attr
[  748.548902][T24313] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  748.604510][ T5765] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  748.612013][ T5765] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  748.612041][ T5765] usb 1-1: Product: syz
[  748.612060][ T5765] usb 1-1: Manufacturer: syz
[  748.612079][ T5765] usb 1-1: SerialNumber: syz
[  749.384787][ T5765] rtl8150 1-1:1.0: eth9: rtl8150 is detected
[  749.465320][T21351] ums_eneub6250 4-1:1.0: probe with driver ums_eneub6250 failed with error 3
[  749.494782][T24337] loop1: detected capacity change from 0 to 256
[  749.531171][ T5765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  749.564504][ T5621] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  749.568833][T21351] usb 4-1: USB disconnect, device number 14
[  749.575193][ T5621] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  749.577741][ T5621] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  749.578789][ T5621] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  749.584702][ T5765] usb 1-1: USB disconnect, device number 18
[  749.584902][ T5621] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  749.603026][T24337] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x024dac45, utbl_chksum : 0xe619d30d)
[  749.710612][T22959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  751.876012][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  751.996880][ T6290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  752.021246][ T5621] Bluetooth: hci5: command tx timeout
[  752.067342][T24345] loop4: detected capacity change from 0 to 32768
[  752.075719][T24345] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.6629 (24345)
[  752.083241][T24345] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  752.083278][T24345] BTRFS info (device loop4): using blake2b checksum algorithm
[  752.317474][T24345] BTRFS info (device loop4): enabling ssd optimizations
[  752.317509][T24345] BTRFS info (device loop4): turning on async discard
[  752.317529][T24345] BTRFS info (device loop4): enabling free space tree
[  752.317552][T24345] BTRFS info (device loop4): use zstd compression, level 3
[  752.829094][T24393] netlink: 'syz.1.6641': attribute type 1 has an invalid length.
[  752.829121][T24393] netlink: 200 bytes leftover after parsing attributes in process `syz.1.6641'.
[  752.829140][T24393] netlink: 'syz.1.6641': attribute type 1 has an invalid length.
[  753.056989][ T5765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  753.082232][ T5615] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  753.269132][T24407] loop1: detected capacity change from 0 to 256
[  753.269929][T24407] exfat: Deprecated parameter 'namecase'
[  753.286160][   T13] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  753.432501][T24407] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d)
[  753.461394][   T31] audit: type=1400 audit(1789089917.657:428): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="foo" pid=24412 comm="syz.0.6648" name="foo" offset=76
[  753.508639][   T31] audit: type=1800 audit(1789089917.697:429): pid=24407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6647" name="file1" dev="loop1" ino=1048919 res=0 errno=0
[  754.010532][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  754.092612][T18789] Bluetooth: hci5: command tx timeout
[  754.132348][ T5765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  754.429635][   T13] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  754.629671][   T31] audit: type=1400 audit(1789089918.807:430): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=24445 comm="syz.3.6658"
[  754.693513][   T13] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  754.880357][   T13] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  755.040016][ T5624] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  755.131115][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  755.177944][T24442] loop1: detected capacity change from 0 to 32768
[  755.189923][ T5624] usb 1-1: Using ep0 maxpacket: 8
[  755.190532][ T5624] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  755.191825][ T5624] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  755.191863][ T5624] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  755.191895][ T5624] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  755.191925][ T5624] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  755.191974][ T5624] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  755.261366][   T31] audit: type=1800 audit(1789089919.458:431): pid=24442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6655" name="file1" dev="loop1" ino=4 res=0 errno=0
[  755.296932][ T5765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  755.328169][T24437] loop7: detected capacity change from 0 to 32768
[  755.385367][T24437] 
[  755.385367][T24437]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  755.385367][T24437] 
[  755.435882][T24437] ERROR: (device loop7): diWrite: ixpxd invalid
[  755.435882][T24437] 
[  755.438337][T24437] ERROR: (device loop7): txCommit: 
[  755.438337][T24437] 
[  755.462105][  T999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  755.572472][ T5624] usb 1-1: GET_CAPABILITIES returned 0
[  755.572527][ T5624] usbtmc 1-1:16.0: can't read capabilities
[  755.617115][T24437] 
[  755.617115][T24437]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  755.617115][T24437] 
[  755.632172][T24437] 
[  755.632172][T24437]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  755.632172][T24437] 
[  755.756041][T20196] 
[  755.756041][T20196]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  755.756041][T20196] 
[  755.756336][T20196] 
[  755.756336][T20196]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  755.756336][T20196] 
[  755.914841][ T5624] usb 1-1: USB disconnect, device number 19
[  756.170527][T18789] Bluetooth: hci5: command tx timeout
[  756.332244][ T6290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  756.889922][T24466] loop4: detected capacity change from 0 to 32768
[  756.975346][   T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  757.018950][T24466] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  757.193567][T24466] XFS (loop4): Ending clean mount
[  757.329460][   T31] audit: type=1800 audit(1789089921.518:432): pid=24466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6663" name="file1" dev="loop4" ino=6150 res=0 errno=0
[  757.379254][ T5765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  757.394006][T24466] XFS (loop4): Metadata CRC error detected at xfs_agfl_read_verify+0x139/0x200, xfs_agfl block 0x3 
[  757.394074][T24466] XFS (loop4): Unmount and run xfs_repair
[  757.394091][T24466] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  757.394113][T24466] 00000000: 58 41 46 4c 00 00 00 00 d7 dc 42 4e 07 00 00 00  XAFL......BN....
[  757.394134][T24466] 00000010: 9f 91 9c b7 20 0a 10 1d 00 00 00 00 00 00 00 00  .... ...........
[  757.394154][T24466] 00000020: e6 0a 0e bb ff ff ff ff 00 00 0b f0 00 00 0b f1  ................
[  757.394174][T24466] 00000030: 00 00 0b f2 00 00 0b f3 00 00 0b f4 00 00 0b f5  ................
[  757.394195][T24466] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  757.397361][T24466] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  757.397384][T24466] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  757.397404][T24466] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  757.397426][T24466] XFS (loop4): metadata I/O error in "xfs_alloc_read_agfl+0x22c/0x440" at daddr 0x3 len 1 error 74
[  757.776129][ T5615] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  757.841204][ T5615] XFS (loop4): Uncorrected metadata errors detected; please run xfs_repair.
[  757.964024][   T13] vlan0: left allmulticast mode
[  757.964051][   T13] veth0_vlan: left allmulticast mode
[  757.991696][   T13] vlan0: left promiscuous mode
[  757.992473][   T13] bridge0: port 3(vlan0) entered disabled state
[  758.015460][T24484] loop1: detected capacity change from 0 to 32768
[  758.032444][   T13] bridge_slave_1: left allmulticast mode
[  758.032471][   T13] bridge_slave_1: left promiscuous mode
[  758.032804][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  758.057242][   T13] bridge_slave_0: left allmulticast mode
[  758.059020][   T13] bridge_slave_0: left promiscuous mode
[  758.059257][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  758.261520][T18789] Bluetooth: hci5: command tx timeout
[  758.465992][   T13] pimreg3: left allmulticast mode
[  758.851206][   T31] audit: type=1800 audit(1789089923.038:433): pid=24525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.4.6676" name="/" dev="debugfs" ino=1 res=0 errno=0
[  759.275492][   T13] batman_adv: batadv0: Interface deactivated: ipvlan1
[  759.300098][   T13] batman_adv: batadv0: Removing interface: ipvlan1
[  759.857776][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  759.871468][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  759.873391][   T13] bond0 (unregistering): Released all slaves
[  759.932157][T24527] netlink: 168 bytes leftover after parsing attributes in process `syz.3.6677'.
[  760.025466][ T1221] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  760.048467][T24338] bridge0: port 1(bridge_slave_0) entered blocking state
[  760.048689][T24338] bridge0: port 1(bridge_slave_0) entered disabled state
[  760.048987][T24338] bridge_slave_0: entered allmulticast mode
[  760.061137][T24338] bridge_slave_0: entered promiscuous mode
[  760.094354][T24338] bridge0: port 2(bridge_slave_1) entered blocking state
[  760.094473][T24338] bridge0: port 2(bridge_slave_1) entered disabled state
[  760.094618][T24338] bridge_slave_1: entered allmulticast mode
[  760.101941][T24338] bridge_slave_1: entered promiscuous mode
[  760.250365][ T1221] usb 8-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00
[  760.251389][ T1221] usb 8-1: config 1 has an invalid interface number: 3 but max is 0
[  760.251417][ T1221] usb 8-1: config 1 has no interface number 0
[  760.253467][ T1221] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  760.253496][ T1221] usb 8-1: Product: syz
[  760.253516][ T1221] usb 8-1: Manufacturer: syz
[  760.253534][ T1221] usb 8-1: SerialNumber: syz
[  760.300277][ T1221] usb 8-1: 3:1 : does not exist
[  760.300305][ T1221] usb 8-1: 3:2 : does not exist
[  760.356723][T24567] loop3: detected capacity change from 0 to 1024
[  760.493709][T24338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  760.529103][T24338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  760.598360][T24338] team0: Port device team_slave_0 added
[  760.602102][T24567] hfsplus: invalid length 1280 has been corrected to 255
[  760.606219][T24567] hfsplus: invalid length 1280 has been corrected to 255
[  760.606269][T24567] hfsplus: invalid length 1280 has been corrected to 255
[  760.606285][T24567] hfsplus: invalid length 1280 has been corrected to 255
[  760.606303][T24567] hfsplus: invalid length 1280 has been corrected to 255
[  760.643650][T24338] team0: Port device team_slave_1 added
[  760.643667][   T13] IPVS: stopping master sync thread 13196 ...
[  761.053536][T24338] batman_adv: batadv0: Adding interface: batadv_slave_0
[  761.053560][T24338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  761.053595][T24338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  761.096207][T21731] netdevsim netdevsim10 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  761.096248][T21731] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  761.110551][T24580] C: renamed from veth1_to_team (while UP)
[  761.137155][T24580] netlink: 'syz.3.6692': attribute type 2 has an invalid length.
[  761.137174][T24580] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6692'.
[  761.137192][T24580] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  761.140561][T24338] batman_adv: batadv0: Adding interface: batadv_slave_1
[  761.140578][T24338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  761.140610][T24338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  761.593188][T24338] hsr_slave_0: entered promiscuous mode
[  761.594646][T24338] hsr_slave_1: entered promiscuous mode
[  761.595723][T24338] debugfs: 'hsr0' already exists in 'hsr'
[  761.595744][T24338] Cannot create hsr debugfs directory
[  761.636505][   T13] hsr_slave_0: left promiscuous mode
[  761.638845][   T13] hsr_slave_1: left promiscuous mode
[  761.651388][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  761.651413][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  761.668875][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  761.668899][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  761.687516][   T13] batman_adv: batadv0: Interface deactivated: macsec1
[  761.687538][   T13] batman_adv: batadv0: Removing interface: macsec1
[  761.722142][   T13] veth1_macvtap: left promiscuous mode
[  761.722219][   T13] veth0_macvtap: left promiscuous mode
[  761.722334][   T13] veth1_vlan: left promiscuous mode
[  761.722440][   T13] veth0_vlan: left promiscuous mode
[  761.924195][T24587] loop3: detected capacity change from 0 to 8192
[  761.940617][T24587] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  762.840892][   T13] team0 (unregistering): Port device team_slave_1 removed
[  762.880261][   T13] team0 (unregistering): Port device team_slave_0 removed
[  763.158366][T24627] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  764.556959][   T13] IPVS: stop unused estimator thread 0...
[  765.761126][ T1221] usb 8-1: USB disconnect, device number 6
[  765.863769][ T5992] udevd[5992]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  766.326842][T24711] autofs4:pid:24711:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(0.0), cmd(0xc0189375)
[  766.326882][T24711] autofs4:pid:24711:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375)
[  766.818595][T24724] Format for adding new device is "id port_count num_queues" (uint uint uint).
[  767.072617][T24735] CIFS: bad ip= option (127®0.0.1)
[  767.073047][T24735] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  767.073440][T24735] CIFS: Attempting to mount (null)
[  767.109604][T24338] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  767.119068][ T6290] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  767.157345][T24338] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  767.167110][T24338] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  767.192845][T24735] CIFS: VFS: Error connecting to socket. Aborting operation.
[  767.193029][T24735] CIFS: VFS: cifs_mount failed w/return code = -111
[  767.198468][ T1221] usb 8-1: new full-speed USB device number 7 using dummy_hcd
[  767.289122][ T6290] usb 4-1: New USB device found, idVendor=056a, idProduct=00d4, bcdDevice= 0.00
[  767.290249][ T6290] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  767.290301][ T6290] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  767.318547][ T6290] usb 4-1: config 0 descriptor??
[  767.319076][T24728] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  767.515752][T24338] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  767.546465][T24338] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  767.625250][T24338] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  767.630214][T24338] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  767.667150][T24338] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  767.812140][ T6290] hid_parser_main: 62 callbacks suppressed
[  767.812168][ T6290] wacom 0003:056A:00D4.0041: unknown main item tag 0x0
[  767.812195][ T6290] wacom 0003:056A:00D4.0041: unknown main item tag 0x0
[  767.812220][ T6290] wacom 0003:056A:00D4.0041: unknown main item tag 0x0
[  767.812245][ T6290] wacom 0003:056A:00D4.0041: unknown main item tag 0x0
[  767.812270][ T6290] wacom 0003:056A:00D4.0041: unknown main item tag 0x0
[  767.812294][ T6290] wacom 0003:056A:00D4.0041: unknown main item tag 0x0
[  767.812325][ T6290] wacom 0003:056A:00D4.0041: unknown main item tag 0x0
[  767.812350][ T6290] wacom 0003:056A:00D4.0041: unknown main item tag 0x0
[  767.812375][ T6290] wacom 0003:056A:00D4.0041: unknown main item tag 0x0
[  767.812399][ T6290] wacom 0003:056A:00D4.0041: unknown main item tag 0x0
[  767.823215][ T6290] wacom 0003:056A:00D4.0041: unexpected long global item
[  767.826284][ T6290] wacom 0003:056A:00D4.0041: parse failed
[  767.830366][ T6290] wacom 0003:056A:00D4.0041: probe with driver wacom failed with error -22
[  767.905284][T24762] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  768.004162][ T6290] usb 4-1: USB disconnect, device number 15
[  768.151877][ T1221] usb 8-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[  768.152798][ T1221] usb 8-1: unable to read config index 0 descriptor/start: -71
[  768.152845][ T1221] usb 8-1: can't read configurations, error -71
[  768.282668][T24338] 8021q: adding VLAN 0 to HW filter on device bond0
[  768.325266][   T31] audit: type=1400 audit(1789089932.509:434): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=24769 comm="syz.1.6748" name="unknown" offset=28
[  768.362272][T24338] 8021q: adding VLAN 0 to HW filter on device team0
[  768.386561][  T999] bridge0: port 1(bridge_slave_0) entered blocking state
[  768.386674][  T999] bridge0: port 1(bridge_slave_0) entered forwarding state
[  768.441066][T21731] bridge0: port 2(bridge_slave_1) entered blocking state
[  768.441176][T21731] bridge0: port 2(bridge_slave_1) entered forwarding state
[  768.550096][T24778] loop1: detected capacity change from 0 to 8
[  768.962078][T24790] batman_adv: batadv0: Adding interface: gretap1
[  768.962100][T24790] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  768.962133][T24790] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active
[  769.908467][T24828] synth uevent: /devices/platform/pcspkr: unknown uevent action string
[  769.908543][T24828] platform pcspkr: uevent: failed to send synthetic uevent: -22
[  770.975277][T24338] 8021q: adding VLAN 0 to HW filter on device batadv0
[  771.609416][T24868] No such timeout policy "syz1"
[  771.826357][T24876] loop7: detected capacity change from 0 to 512
[  771.961578][ T5276] 8021q: adding VLAN 0 to HW filter on device eth9
[  772.059876][T24883] ubi0: attaching mtd0
[  772.060128][T24883] ubi0 error: ubi_attach_mtd_dev: bad VID header (3) or data offsets (67)
[  772.100702][T24338] veth0_vlan: entered promiscuous mode
[  772.107511][T24338] veth1_vlan: entered promiscuous mode
[  772.237597][T24338] veth0_macvtap: entered promiscuous mode
[  772.264427][T24338] veth1_macvtap: entered promiscuous mode
[  772.349004][T24338] batman_adv: batadv0: Interface activated: batadv_slave_0
[  772.350194][T24891] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6779'.
[  772.451384][T24338] batman_adv: batadv0: Interface activated: batadv_slave_1
[  772.610345][  T999] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  772.614679][T21731] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  772.615442][T21731] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  772.615487][T21731] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  772.912794][T24880] loop1: detected capacity change from 0 to 32768
[  772.930295][T24880] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.6775 (24880)
[  773.019758][T24880] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  773.019797][T24880] BTRFS info (device loop1): using xxhash64 checksum algorithm
[  773.092839][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  773.092873][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  773.291843][T24880] BTRFS info (device loop1): setting nodatasum
[  773.291883][T24880] BTRFS info (device loop1): allowing degraded mounts
[  773.291905][T24880] BTRFS info (device loop1): turning on async discard
[  773.291926][T24880] BTRFS info (device loop1): enabling free space tree
[  773.291949][T24880] BTRFS info (device loop1): force zlib compression, level 3
[  773.482209][  T999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  773.482235][  T999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  773.598014][T18785] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  773.668117][T24935] input: syz0 as /devices/virtual/input/input46
[  775.174098][T24969] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6802'.
[  775.477629][ T5765] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  775.627421][ T5765] usb 4-1: Using ep0 maxpacket: 16
[  775.628031][ T5765] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  775.629548][ T5765] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  775.629600][ T5765] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  775.629636][ T5765] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  775.629664][ T5765] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  775.629695][ T5765] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  775.632402][ T5765] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  775.632431][ T5765] usb 4-1: Manufacturer: syz
[  775.726781][ T5765] usb 4-1: config 0 descriptor??
[  776.046511][T24960] loop9: detected capacity change from 0 to 32768
[  776.057414][T24960] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.6797 (24960)
[  776.091497][ T5765] rc_core: IR keymap rc-hauppauge not found
[  776.091515][ T5765] Registered IR keymap rc-empty
[  776.091653][ T5765] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  776.096113][T24960] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  776.096147][T24960] BTRFS info (device loop9): using crc32c checksum algorithm
[  776.139889][ T5765] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  776.161486][ T5765] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  776.224367][ T5765] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input47
[  776.272626][ T5765] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  776.292744][ T5765] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  776.309756][ T5765] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  776.327882][ T5765] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  776.347677][ T5765] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  776.353706][T24960] BTRFS info (device loop9): enabling ssd optimizations
[  776.353733][T24960] BTRFS info (device loop9): turning on flush-on-commit
[  776.353753][T24960] BTRFS info (device loop9): enabling free space tree
[  776.353773][T24960] BTRFS info (device loop9): enabling auto defrag
[  776.353794][T24960] BTRFS info (device loop9): use lzo compression, level 1
[  776.353818][T24960] BTRFS info (device loop9): max_inline set to 4096
[  776.380144][ T5765] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  776.409182][ T5765] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  776.425925][   T31] audit: type=1800 audit(1789089940.610:435): pid=24960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.6797" name="file1" dev="loop9" ino=260 res=0 errno=0
[  776.448793][ T5765] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  776.467542][ T5765] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  776.488438][ T5765] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  776.507577][ T5765] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  776.532635][ T5765] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  776.532691][ T5765] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  776.580569][ T5765] usb 4-1: USB disconnect, device number 16
[  776.845712][T24338] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  776.850779][T25021] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  777.084791][T25025] loop1: detected capacity change from 0 to 512
[  777.085599][T25025] EXT4-fs: Ignoring removed nomblk_io_submit option
[  777.128940][T25025] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  777.220454][T25025] EXT4-fs (loop1): 1 truncate cleaned up
[  777.291880][T25033] loop7: detected capacity change from 0 to 512
[  777.316553][T25025] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  777.375730][T25033] FAT-fs (loop7): error, clusters badly computed (1 != 0)
[  777.712027][T25041] loop3: detected capacity change from 0 to 512
[  777.759937][T18785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  778.177527][ T5276] 8021q: adding VLAN 0 to HW filter on device eth10
[  778.222596][T25056] loop9: detected capacity change from 0 to 512
[  778.245405][T25056] EXT4-fs (loop9): Test dummy encryption mode enabled
[  778.245459][T25056] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  778.273746][T25056] EXT4-fs (loop9): 1 truncate cleaned up
[  778.286552][T25056] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  778.356050][T25056] EXT4-fs error (device loop9): __ext4_expand_extra_isize:6542: inode #12: comm syz.9.6826: bad extra_isize 62 (inode size 256)
[  778.404937][T25056] EXT4-fs (loop9): Remounting filesystem read-only
[  778.470736][T25064] loop7: detected capacity change from 0 to 2048
[  778.499722][T24338] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  778.572682][T25064] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  778.572862][T25064] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found
[  778.572881][T25064] UDF-fs: Scanning with blocksize 512 failed
[  778.575247][T25067] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  778.575424][T25067] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  778.625421][T25064] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  778.712945][   T31] audit: type=1800 audit(1789089942.900:436): pid=25064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.6830" name="file1" dev="loop7" ino=838 res=0 errno=0
[  779.046311][T25089] xt_hashlimit: size too large, truncated to 1048576
[  779.231059][T25092] xt_hashlimit: size too large, truncated to 1048576
[  780.524479][T25100] loop7: detected capacity change from 0 to 32768
[  780.538571][T25100] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.6842 (25100)
[  780.545272][T25087] loop1: detected capacity change from 0 to 40427
[  780.545969][T25087] F2FS-fs: heap/no_heap options were deprecated
[  780.619059][T25100] BTRFS info (device loop7): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  780.619093][T25100] BTRFS info (device loop7): using blake2b checksum algorithm
[  780.622879][ T5276] 8021q: adding VLAN 0 to HW filter on device eth11
[  780.805131][T25100] BTRFS info (device loop7): enabling ssd optimizations
[  780.805162][T25100] BTRFS info (device loop7): turning on async discard
[  780.805183][T25100] BTRFS info (device loop7): enabling free space tree
[  780.805207][T25100] BTRFS info (device loop7): use zstd compression, level 3
[  781.044746][T25087] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  781.107311][T25087] F2FS-fs (loop1): f2fs_disable_checkpoint starts, unusable: 0
[  781.107336][T25087] F2FS-fs (loop1): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  781.107363][T25087] F2FS-fs (loop1): Start checkpoint disabled!
[  781.202914][T25087] F2FS-fs (loop1): f2fs_disable_checkpoint finishes, err:0
[  781.210176][T25087] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  781.243950][T25087] syz.1.6838: attempt to access beyond end of device
[  781.243950][T25087] loop1: rw=2049, sector=53248, nr_sectors = 8 limit=40427
[  781.313072][T25087] syz.1.6838: attempt to access beyond end of device
[  781.313072][T25087] loop1: rw=0, sector=53248, nr_sectors = 8 limit=40427
[  781.446131][T21731] kworker/u8:7: attempt to access beyond end of device
[  781.446131][T21731] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  781.446218][T21731] CPU: 1 UID: 0 PID: 21731 Comm: kworker/u8:7 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  781.446255][T21731] Tainted: [L]=SOFTLOCKUP
[  781.446266][T21731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  781.446284][T21731] Workqueue: writeback wb_workfn (flush-7:1)
[  781.446324][T21731] Call Trace:
[  781.446343][T21731]  <TASK>
[  781.446355][T21731]  dump_stack_lvl+0xe8/0x150
[  781.446399][T21731]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  781.446445][T21731]  f2fs_write_end_bio+0x1211/0x16e0
[  781.446478][T21731]  ? blkg_put+0x22/0x240
[  781.446536][T21731]  __submit_merged_bio+0x258/0x6a0
[  781.446573][T21731]  ? srso_alias_return_thunk+0x5/0xfbef5
[  781.446606][T21731]  ? rcu_is_watching+0x16/0xb0
[  781.446652][T21731]  __submit_merged_write_cond+0x3c9/0x4e0
[  781.446704][T21731]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  781.446761][T21731]  ? srso_alias_return_thunk+0x5/0xfbef5
[  781.446804][T21731]  f2fs_write_data_pages+0x2a27/0x36f0
[  781.446847][T21731]  ? srso_alias_return_thunk+0x5/0xfbef5
[  781.446925][T21731]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  781.446986][T21731]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  781.447060][T21731]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  781.447123][T21731]  ? __lock_acquire+0x747/0x2de0
[  781.447161][T21731]  ? srso_alias_return_thunk+0x5/0xfbef5
[  781.447203][T21731]  ? __pfx_f2fs_inode_chksum_set+0x10/0x10
[  781.447237][T21731]  ? f2fs_update_inode+0x1394/0x25c0
[  781.447270][T21731]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  781.447315][T21731]  do_writepages+0x338/0x560
[  781.447359][T21731]  ? srso_alias_return_thunk+0x5/0xfbef5
[  781.447390][T21731]  ? reacquire_held_locks+0x117/0x1a0
[  781.447424][T21731]  ? writeback_sb_inodes+0x450/0x1b00
[  781.447469][T21731]  __writeback_single_inode+0x136/0x1220
[  781.447510][T21731]  ? srso_alias_return_thunk+0x5/0xfbef5
[  781.447543][T21731]  ? do_raw_spin_unlock+0xf5/0x200
[  781.447588][T21731]  writeback_sb_inodes+0x9de/0x1b00
[  781.447625][T21731]  ? __lock_acquire+0x747/0x2de0
[  781.447672][T21731]  ? lock_acquire+0x115/0x350
[  781.447710][T21731]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  781.447801][T21731]  ? srso_alias_return_thunk+0x5/0xfbef5
[  781.447834][T21731]  ? rcu_is_watching+0x16/0xb0
[  781.447866][T21731]  ? srso_alias_return_thunk+0x5/0xfbef5
[  781.447897][T21731]  ? queue_io+0x2d3/0x470
[  781.447939][T21731]  wb_writeback+0x41c/0xad0
[  781.447980][T21731]  ? queue_io+0x231/0x470
[  781.448024][T21731]  ? __pfx_wb_writeback+0x10/0x10
[  781.448059][T21731]  ? do_raw_spin_lock+0x12b/0x2f0
[  781.448119][T21731]  wb_workfn+0x431/0x10f0
[  781.448174][T21731]  ? __pfx_wb_workfn+0x10/0x10
[  781.448210][T21731]  ? srso_alias_return_thunk+0x5/0xfbef5
[  781.448242][T21731]  ? trace_hrtimer_start+0x82/0x200
[  781.448292][T21731]  ? srso_alias_return_thunk+0x5/0xfbef5
[  781.448324][T21731]  ? do_raw_spin_lock+0x12b/0x2f0
[  781.448378][T21731]  ? srso_alias_return_thunk+0x5/0xfbef5
[  781.448410][T21731]  ? lock_acquire+0x115/0x350
[  781.448439][T21731]  ? srso_alias_return_thunk+0x5/0xfbef5
[  781.448481][T21731]  ? rcu_is_watching+0x16/0xb0
[  781.448514][T21731]  ? srso_alias_return_thunk+0x5/0xfbef5
[  781.448547][T21731]  ? process_scheduled_works+0x97a/0x1630
[  781.448586][T21731]  process_scheduled_works+0xc3d/0x1630
[  781.448623][T21731]  ? srso_alias_return_thunk+0x5/0xfbef5
[  781.448696][T21731]  ? __pfx_process_scheduled_works+0x10/0x10
[  781.448741][T21731]  ? srso_alias_return_thunk+0x5/0xfbef5
[  781.448773][T21731]  ? assign_work+0x3cf/0x5d0
[  781.448817][T21731]  worker_thread+0xa47/0xfb0
[  781.448858][T21731]  ? srso_alias_return_thunk+0x5/0xfbef5
[  781.448903][T21731]  ? srso_alias_return_thunk+0x5/0xfbef5
[  781.448935][T21731]  ? __kthread_parkme+0x71/0x1f0
[  781.448990][T21731]  kthread+0x38b/0x480
[  781.449018][T21731]  ? __pfx_worker_thread+0x10/0x10
[  781.449054][T21731]  ? __pfx_kthread+0x10/0x10
[  781.449084][T21731]  ret_from_fork+0x514/0xb70
[  781.449115][T21731]  ? __pfx_ret_from_fork+0x10/0x10
[  781.449159][T21731]  ? srso_alias_return_thunk+0x5/0xfbef5
[  781.449190][T21731]  ? __switch_to+0xc89/0x1420
[  781.449233][T21731]  ? __pfx_kthread+0x10/0x10
[  781.449263][T21731]  ret_from_fork_asm+0x1a/0x30
[  781.449328][T21731]  </TASK>
[  781.494358][T21731] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  781.564934][T20196] BTRFS info (device loop7): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  781.712746][T25167] loop4: detected capacity change from 0 to 512
[  781.806036][T25167] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.6859: iget: bad i_size value: 38620345925642
[  781.806077][T25167] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  781.808372][T25167] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.6859: couldn't read orphan inode 15 (err -117)
[  781.808407][T25167] loop4: lost filesystem error report for type 5 error -117
[  781.848768][T25167] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  781.997547][T25167] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.6859: bg 0: block 5: invalid block bitmap
[  782.090036][T25167] EXT4-fs error (device loop4) in ext4_setattr:6247: error 28
[  782.285986][ T5615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  783.089531][T25195] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6870'.
[  783.113906][T25169] loop9: detected capacity change from 0 to 32768
[  783.125967][T25169] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.6862 (25169)
[  783.192655][T25169] BTRFS info (device loop9): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  783.192697][T25169] BTRFS info (device loop9): using crc32c checksum algorithm
[  783.452422][T25169] BTRFS info (device loop9): enabling ssd optimizations
[  783.452453][T25169] BTRFS info (device loop9): turning on async discard
[  783.452474][T25169] BTRFS info (device loop9): enabling free space tree
[  783.495427][ T5276] 8021q: adding VLAN 0 to HW filter on device eth12
[  783.525164][T25224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6876'.
[  783.537633][T25224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6876'.
[  783.723565][T24338] BTRFS info (device loop9): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  783.819253][T25160] loop3: detected capacity change from 0 to 40427
[  783.830967][T25160] F2FS-fs (loop3): invalid crc value
[  783.976153][T25236] sg_read: process 140 (syz.0.6877) changed security contexts after opening file descriptor, this is not allowed.
[  784.304236][T25247] size and base must be multiples of 4 kiB
[  784.304265][T25247] CPU: 1 UID: 0 PID: 25247 Comm: syz.1.6881 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  784.304301][T25247] Tainted: [L]=SOFTLOCKUP
[  784.304311][T25247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  784.304328][T25247] Call Trace:
[  784.304339][T25247]  <TASK>
[  784.304351][T25247]  dump_stack_lvl+0xe8/0x150
[  784.304396][T25247]  mtrr_add+0xd5/0x100
[  784.304439][T25247]  mtrr_ioctl+0xc98/0x13b0
[  784.304488][T25247]  ? __pfx_mtrr_ioctl+0x10/0x10
[  784.304550][T25247]  ? __fget_files+0x2a/0x420
[  784.304589][T25247]  ? __fget_files+0x3a2/0x420
[  784.304625][T25247]  ? __fget_files+0x2a/0x420
[  784.304664][T25247]  ? __pfx_mtrr_ioctl+0x10/0x10
[  784.304705][T25247]  proc_reg_unlocked_ioctl+0x1d6/0x2c0
[  784.304746][T25247]  ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10
[  784.304779][T25247]  __se_sys_ioctl+0xfc/0x170
[  784.304812][T25247]  do_syscall_64+0x166/0x520
[  784.304842][T25247]  ? trace_irq_disable+0x3b/0x140
[  784.304870][T25247]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  784.304907][T25247]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  784.304934][T25247] RIP: 0033:0x7f08d3f9e159
[  784.304959][T25247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  784.304981][T25247] RSP: 002b:00007f08d4f45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  784.305009][T25247] RAX: ffffffffffffffda RBX: 00007f08d4225fa0 RCX: 00007f08d3f9e159
[  784.305030][T25247] RDX: 0000200000000140 RSI: 0000000040104d01 RDI: 0000000000000003
[  784.305049][T25247] RBP: 00007f08d403503b R08: 0000000000000000 R09: 0000000000000000
[  784.305067][T25247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  784.305084][T25247] R13: 00007f08d4226038 R14: 00007f08d4225fa0 R15: 00007fff3c406608
[  784.305126][T25247]  </TASK>
[  784.390866][T25160] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  785.224690][   T31] audit: type=1326 audit(1789089957.415:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25268 comm="syz.1.6888" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f08d3f9e159 code=0x0
[  787.112481][T25325] loop4: detected capacity change from 0 to 2048
[  787.201778][T25323] loop7: detected capacity change from 0 to 4096
[  787.210494][T25325] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  787.353622][T25323] ntfs3(loop7): Failed to load $Extend (-22).
[  787.357663][T25331] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  787.360594][T25323] ntfs3(loop7): Failed to initialize $Extend.
[  787.622384][ T5621] Bluetooth: hci0: Zero size dump init pkt
	o
[  787.724626][   T12] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  787.724666][   T12] EXT4-fs (loop4): This should not happen!! Data will be lost
[  787.724666][   T12] 
[  787.724687][   T12] EXT4-fs (loop4): Total free blocks count 0
[  787.724705][   T12] EXT4-fs (loop4): Free/Dirty block details
[  787.724759][   T12] EXT4-fs (loop4): free_blocks=4096
[  787.724817][   T12] EXT4-fs (loop4): dirty_blocks=656
[  787.724835][   T12] EXT4-fs (loop4): Block reservation details
[  787.724851][   T12] EXT4-fs (loop4): i_reserved_data_blocks=41
[  787.744178][   T12] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8421510 with max blocks 620 with error 28
[  787.835602][ T5615] EXT4-fs warning (device loop4): ext4_evict_inode:196: inode #15: comm syz-executor: data will be lost
[  788.407666][T25367] tap0: tun_chr_ioctl cmd 1074025677
[  788.407764][T25367] tap0: linktype set to 6
[  788.616632][T25378] netlink: 36 bytes leftover after parsing attributes in process `syz.9.6923'.
[  788.905243][T25383] program syz.7.6925 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  788.954327][T25377] loop3: detected capacity change from 0 to 8192
[  789.650100][T25410] loop7: detected capacity change from 0 to 128
[  789.738439][T25410] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  789.738480][T25410] hpfs: filesystem error: improperly stopped
[  789.738499][T25410] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  789.738518][T25410] hpfs: You really don't want any checks? You are crazy...
[  789.738533][T25410] hpfs: Code page index out of array
[  789.738544][T25410] hpfs: code page support is disabled
[  789.738638][T25410] hpfs: hpfs_map_4sectors(): unaligned read
[  789.738707][T25410] hpfs: hpfs_map_4sectors(): unaligned read
[  789.738720][T25410] hpfs: filesystem error: unable to find root dir
[  790.165933][T25429] loop4: detected capacity change from 0 to 512
[  790.229685][T25429] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e019, mo2=0002]
[  790.229799][T25429] System zones: 0-2, 18-18, 34-34
[  790.269798][T25429] EXT4-fs (loop4): 1 orphan inode deleted
[  790.291802][T25429] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  790.312296][T25429] ext4 filesystem being mounted at /1219/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  790.490887][T25441] loop1: detected capacity change from 0 to 256
[  791.225493][ T5615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  791.445989][T25460] bridge0: port 3(vlan2) entered blocking state
[  791.446109][T25460] bridge0: port 3(vlan2) entered disabled state
[  791.446283][T25460] vlan2: entered allmulticast mode
[  791.446302][T25460] bridge0: entered allmulticast mode
[  791.496094][T25469] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  791.508673][T25460] vlan2: left allmulticast mode
[  791.508694][T25460] bridge0: left allmulticast mode
[  791.785295][T25473] loop9: detected capacity change from 0 to 512
[  791.841019][T25473] EXT4-fs error (device loop9): ext4_orphan_get:1403: inode #15: comm syz.9.6955: inode has both inline data and extents flags
[  791.841056][T25473] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  791.846496][    C1] EXT4-fs (loop9): error count since last fsck: 1
[  791.846522][    C1] EXT4-fs (loop9): initial error at time 1789089964: ext4_orphan_get:1403: inode 15
[  791.846558][    C1] EXT4-fs (loop9): last error at time 1789089964: ext4_orphan_get:1403: inode 15
[  791.885524][T25478] program syz.3.6958 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  791.889851][T25473] EXT4-fs error (device loop9): ext4_orphan_get:1408: comm syz.9.6955: couldn't read orphan inode 15 (err -117)
[  791.889892][T25473] loop9: lost filesystem error report for type 5 error -117
[  791.902920][T25473] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  792.187506][T24338] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  792.454795][T25496] 9p: Unknown access argument a¥ŸŒM%Nny’'£ˆ=ߺÈø=YýtÚÓBxmù¢: -22
[  793.361911][T25480] loop7: detected capacity change from 0 to 40427
[  793.371380][T25480] F2FS-fs (loop7): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  793.371409][T25480] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  793.372684][T25480] F2FS-fs (loop7): invalid crc value
[  793.586481][ T1221] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  793.738326][ T1221] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[  793.757621][ T1221] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  793.757676][ T1221] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  793.757706][ T1221] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  793.807373][ T1221] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  793.807407][ T1221] usb 5-1: Product: syz
[  793.807427][ T1221] usb 5-1: Manufacturer: syz
[  793.807447][ T1221] usb 5-1: SerialNumber: syz
[  793.936112][T25480] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  793.986107][T25480] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  793.986137][T25480] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[  794.345917][T25480] syz.7.6957: attempt to access beyond end of device
[  794.345917][T25480] loop7: rw=8390659, sector=65536, nr_sectors = 65536 limit=40427
[  794.345985][T25480] F2FS-fs (loop7): Issue discard(8192, 8192, 8192) failed, ret: -5
[  794.401966][ T1221] usb 5-1: Cannot retrieve CPort count: -110
[  794.402020][ T1221] usb 5-1: Cannot retrieve CPort count: -110
[  794.402050][ T1221] es2_ap_driver 5-1:1.0: probe with driver es2_ap_driver failed with error -110
[  794.638846][T25533] input: syz1 as /devices/virtual/input/input48
[  794.763350][ T1221] usb 5-1: USB disconnect, device number 39
[  794.970674][T25509] loop3: detected capacity change from 0 to 32768
[  795.664097][T25551] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6982'.
[  795.901303][T25562] loop9: detected capacity change from 0 to 8
[  795.948156][ T5736] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  796.060327][T25562] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6984'.
[  796.060368][T25562] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6984'.
[  796.105069][ T5736] usb 5-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00
[  796.108014][ T5736] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  796.108050][ T5736] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  796.108093][ T5736] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  796.150477][ T5736] usb 5-1: config 0 descriptor??
[  796.457255][T25580] loop9: detected capacity change from 0 to 128
[  796.501590][T25580] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  796.503530][T25580] ext4 filesystem being mounted at /34/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  796.504347][T25582] vivid-004: disconnect
[  796.569112][T25579] vivid-004: reconnect
[  796.602869][ T5736] hid (null): unknown global tag 0xe
[  796.645785][T24338] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  796.726184][ T5736] hid_parser_main: 294 callbacks suppressed
[  796.726214][ T5736] uclogic 0003:5543:0064.0042: unknown main item tag 0x0
[  796.726251][ T5736] uclogic 0003:5543:0064.0042: unknown main item tag 0x0
[  796.726277][ T5736] uclogic 0003:5543:0064.0042: unknown main item tag 0x0
[  796.726303][ T5736] uclogic 0003:5543:0064.0042: unknown main item tag 0x0
[  796.726328][ T5736] uclogic 0003:5543:0064.0042: unknown main item tag 0x0
[  796.726450][ T5736] uclogic 0003:5543:0064.0042: unknown main item tag 0x0
[  796.726476][ T5736] uclogic 0003:5543:0064.0042: unknown main item tag 0x0
[  796.726502][ T5736] uclogic 0003:5543:0064.0042: unknown main item tag 0x0
[  796.726528][ T5736] uclogic 0003:5543:0064.0042: unknown main item tag 0x0
[  796.726554][ T5736] uclogic 0003:5543:0064.0042: unknown main item tag 0x0
[  796.727788][ T5736] uclogic 0003:5543:0064.0042: reserved main item tag 0xd
[  796.727823][ T5736] uclogic 0003:5543:0064.0042: unknown global tag 0xe
[  796.727843][ T5736] uclogic 0003:5543:0064.0042: item 0 2 1 14 parsing failed
[  796.728650][ T5736] uclogic 0003:5543:0064.0042: parse failed
[  796.734122][ T5736] uclogic 0003:5543:0064.0042: probe with driver uclogic failed with error -22
[  796.874200][   T25] usb 5-1: USB disconnect, device number 40
[  797.359125][T25609] XFS (mtdblock0): Invalid superblock magic number
[  797.443414][T25622] bond0: option arp_interval: invalid value (N)
[  797.443443][T25622] bond0: option arp_interval: allowed values 0 - 2147483647
[  797.760021][T25629] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7007'.
[  797.778884][T25633] program syz.9.7010 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  798.127819][T25652] program syz.0.7016 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  798.147164][T25647] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7012'.
[  798.300139][T25656] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  798.824788][T25681] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7028'.
[  798.825080][T25681] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7028'.
[  798.946327][T25688] bridge0: port 2(bridge_slave_1) entered disabled state
[  798.947036][T25688] bridge0: port 1(bridge_slave_0) entered disabled state
[  798.964381][T25686] loop9: detected capacity change from 0 to 512
[  799.020387][T25686] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -2
[  799.020486][T25686] EXT4-fs error (device loop9): ext4_iget_extra_inode:5210: inode #15: comm syz.9.7029: corrupted in-inode xattr: e_value size too large
[  799.020526][T25686] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  799.025743][T25686] EXT4-fs error (device loop9): ext4_orphan_get:1408: comm syz.9.7029: couldn't read orphan inode 15 (err -117)
[  799.025779][T25686] loop9: lost filesystem error report for type 5 error -117
[  799.026407][    C1] EXT4-fs (loop9): error count since last fsck: 2
[  799.026430][    C1] EXT4-fs (loop9): initial error at time 1789089971: ext4_iget_extra_inode:5210: inode 15
[  799.026468][    C1] EXT4-fs (loop9): last error at time 1789089971: ext4_orphan_get:1408
[  799.046627][T25686] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  799.327506][T25696] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  799.343419][T25692] overlayfs: upper fs does not support file handles, falling back to index=off.
[  799.346084][T25692] overlayfs: NFS export requires "index=on", falling back to nfs_export=off.
[  799.395527][   T31] audit: type=1804 audit(1789089971.585:438): pid=25693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.7029" name="/newroot/40/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file2" dev="loop9" ino=16 res=1 errno=0
[  799.661849][T24338] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  799.826531][T25703] ip6gre1: entered promiscuous mode
[  799.826561][T25703] ip6gre1: entered allmulticast mode
[  799.926329][   T31] audit: type=1326 audit(1789089972.115:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25706 comm="syz.4.7038" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50dcf9e159 code=0x7ffc0000
[  799.926541][   T31] audit: type=1326 audit(1789089972.125:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25706 comm="syz.4.7038" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50dcf9e159 code=0x7ffc0000
[  799.956920][   T31] audit: type=1326 audit(1789089972.125:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25706 comm="syz.4.7038" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50dcf9e159 code=0x7ffc0000
[  799.964108][   T31] audit: type=1326 audit(1789089972.145:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25706 comm="syz.4.7038" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50dcf9e159 code=0x7ffc0000
[  799.964765][   T31] audit: type=1326 audit(1789089972.145:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25706 comm="syz.4.7038" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f50dcf9e159 code=0x7ffc0000
[  799.964820][   T31] audit: type=1326 audit(1789089972.145:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25706 comm="syz.4.7038" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50dcf9e159 code=0x7ffc0000
[  799.964874][   T31] audit: type=1326 audit(1789089972.145:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25706 comm="syz.4.7038" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50dcf9e159 code=0x7ffc0000
[  799.976013][   T31] audit: type=1326 audit(1789089972.145:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25706 comm="syz.4.7038" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50dcf9e159 code=0x7ffc0000
[  799.976070][   T31] audit: type=1326 audit(1789089972.145:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25706 comm="syz.4.7038" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50dcf9e159 code=0x7ffc0000
[  800.179811][T25717] program syz.3.7041 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  800.339802][   T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  800.340193][   T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  800.367651][ T6290] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  800.459592][T25726] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.7044'.
[  800.459620][T25726] veth0_to_bond: default FDB implementation only supports local addresses
[  800.485026][  T999] IPVS: starting estimator thread 0...
[  800.566664][T25730] IPVS: using max 24 ests per chain, 57600 per kthread
[  800.857613][ T6290] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  800.979544][T25740] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1)
[  801.047109][ T5736] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  801.144672][T25750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7051'.
[  801.453346][T25764] loop9: detected capacity change from 0 to 64
[  801.545118][T25757] Process accounting resumed
[  802.345845][T25804] bonding: unable to delete non-existent b
[  802.552709][T25808] loop1: detected capacity change from 0 to 2048
[  802.635375][T25808] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  802.639901][T25808] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  802.648717][T25808] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  803.107498][ T5765] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  803.269952][ T5765] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  803.271572][ T5765] usb 10-1: config 220 has an invalid interface number: 76 but max is 2
[  803.271602][ T5765] usb 10-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  803.271626][ T5765] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  803.271651][ T5765] usb 10-1: config 220 has no interface number 2
[  803.271718][ T5765] usb 10-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  803.271752][ T5765] usb 10-1: config 220 interface 0 has no altsetting 0
[  803.271776][ T5765] usb 10-1: config 220 interface 76 has no altsetting 0
[  803.271800][ T5765] usb 10-1: config 220 interface 1 has no altsetting 0
[  803.355765][ T5765] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  803.355798][ T5765] usb 10-1: Product: syz
[  803.355818][ T5765] usb 10-1: Manufacturer: syz
[  803.355837][ T5765] usb 10-1: SerialNumber: syz
[  803.517934][T25843] loop4: detected capacity change from 0 to 16
[  803.546759][T25843] erofs (device loop4): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk!
[  803.547114][T25843] erofs (device loop4): mounted with root inode @ nid 36.
[  803.578324][T25843] erofs (device loop4): readahead error at folio 7 @ nid 36
[  803.578406][T25843] erofs (device loop4): unknown algorithm 5 @ pos 28160 for nid 36, please upgrade kernel
[  803.578432][T25843] erofs (device loop4): readahead error at folio 6 @ nid 36
[  803.578472][T25843] erofs (device loop4): unknown algorithm 6 @ pos 24064 for nid 36, please upgrade kernel
[  803.578523][T25843] erofs (device loop4): readahead error at folio 5 @ nid 36
[  803.578561][T25843] erofs (device loop4): unknown algorithm 5 @ pos 19968 for nid 36, please upgrade kernel
[  803.578585][T25843] erofs (device loop4): readahead error at folio 4 @ nid 36
[  803.578632][T25843] erofs (device loop4): not enough plain data on disk @ la 15360 of nid 36
[  803.578681][T25843] erofs (device loop4): readahead error at folio 3 @ nid 36
[  803.578712][T25843] erofs (device loop4): unknown algorithm 5 @ pos 11776 for nid 36, please upgrade kernel
[  803.578737][T25843] erofs (device loop4): readahead error at folio 2 @ nid 36
[  803.578773][T25843] erofs (device loop4): readahead error at folio 1 @ nid 36
[  803.578823][T25843] erofs (device loop4): readahead error at folio 0 @ nid 36
[  803.578862][T25843] erofs (device loop4): read error -117 @ 0 of nid 36
[  803.578885][T25843] erofs (device loop4): failed to readdir of logical block 0 of nid 36
[  803.579284][T25843] erofs (device loop4): read error -117 @ 0 of nid 36
[  803.579310][T25843] erofs (device loop4): failed to readdir of logical block 0 of nid 36
[  803.618240][T25844] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7084'.
[  803.691992][T25844] vlan2: entered promiscuous mode
[  803.692014][T25844] syz_tun: entered promiscuous mode
[  803.762620][ T5765] uvcvideo 10-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  803.762660][ T5765] uvcvideo 10-1:220.0: No valid video chain found.
[  803.762720][ T5765] usb 10-1: selecting invalid altsetting 0
[  803.791914][ T5765] usb 10-1: selecting invalid altsetting 0
[  803.791947][ T5765] usbtest 10-1:220.1: probe with driver usbtest failed with error -22
[  803.794491][ T5765] usb 10-1: USB disconnect, device number 10
[  804.087187][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  804.693439][T25871] jffs2: notice: (25871) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  804.771431][T25876] i2c i2c-0: delete_device: Can't find device in list
[  805.280559][T25889] loop7: detected capacity change from 0 to 1024
[  805.281424][T25889] EXT4-fs: Ignoring removed bh option
[  805.362269][T25889] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  805.473756][T25900] loop3: detected capacity change from 0 to 1024
[  805.474452][T25900] EXT4-fs: Ignoring removed nobh option
[  805.578946][T25900] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  805.579049][T25900] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  805.698443][T20196] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  805.814698][T25910] ieee802154 phy0 wpan0: encryption failed: -22
[  805.830863][T23067] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  807.726640][   T31] kauditd_printk_skb: 11 callbacks suppressed
[  807.726665][   T31] audit: type=1400 audit(1789089979.925:459): apparmor="STATUS" info="empty profile name" error=-71 profile="unconfined" name=":/o" pid=25989 comm="syz.7.7136" name=":/o" offset=35
[  807.934047][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  807.934117][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  808.089951][T26002] bond0: invalid ARP target specified
[  809.248706][T26045] loop3: detected capacity change from 0 to 2048
[  809.313723][T26021] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  809.313771][T26021] block device autoloading is deprecated and will be removed.
[  809.373142][T26045] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  809.451709][T26048] block2mtd: illegal erase size
[  809.472016][T26051] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7158'.
[  810.151637][T26070] loop9: detected capacity change from 0 to 128
[  810.176489][ T6290] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  810.236496][T26070] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  810.236549][T26070] hpfs: filesystem error: improperly stopped
[  810.236569][T26070] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  810.236589][T26070] hpfs: You really don't want any checks? You are crazy...
[  810.236603][T26070] hpfs: Code page directory magic doesn't match (magic = 7b3184b5)
[  810.236619][T26070] hpfs: code page support is disabled
[  810.236714][T26070] hpfs: hpfs_map_4sectors(): unaligned read
[  810.236783][T26070] hpfs: hpfs_map_4sectors(): unaligned read
[  810.236796][T26070] hpfs: filesystem error: unable to find root dir
[  810.242966][T26075] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  810.248820][T26072] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7166'.
[  810.326658][ T6290] usb 4-1: Using ep0 maxpacket: 32
[  810.330091][ T6290] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  810.332548][ T6290] usb 4-1: config 0 has an invalid interface number: 85 but max is 0
[  810.332578][ T6290] usb 4-1: config 0 has no interface number 0
[  810.332626][ T6290] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  810.332660][ T6290] usb 4-1: config 0 interface 85 has no altsetting 0
[  810.336254][ T6290] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  810.336283][ T6290] usb 4-1: Product: syz
[  810.336302][ T6290] usb 4-1: Manufacturer: syz
[  810.336321][ T6290] usb 4-1: SerialNumber: syz
[  810.372387][ T6290] usb 4-1: config 0 descriptor??
[  811.020898][ T6290] appletouch 4-1:0.85: Geyser mode initialized.
[  811.028946][ T6290] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input50
[  811.211416][T26063] loop7: detected capacity change from 0 to 32768
[  811.224864][T26063] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.7163 (26063)
[  811.257166][T26063] BTRFS info (device loop7): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  811.257199][T26063] BTRFS info (device loop7): using blake2b checksum algorithm
[  811.293518][   T25] usb 4-1: USB disconnect, device number 17
[  811.465970][   T25] appletouch 4-1:0.85: input: appletouch disconnected
[  811.466120][T26063] BTRFS info (device loop7): checking UUID tree
[  811.469956][T26063] BTRFS info (device loop7): enabling ssd optimizations
[  811.469982][T26063] BTRFS info (device loop7): turning on async discard
[  811.470003][T26063] BTRFS info (device loop7): enabling free space tree
[  811.766613][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  811.859380][T20196] BTRFS info (device loop7): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  812.382214][T26132] loop4: detected capacity change from 0 to 4096
[  812.407093][T26132] EXT4-fs: Ignoring removed orlov option
[  812.433905][T26132] EXT4-fs (loop4): Test dummy encryption mode enabled
[  812.521057][T26132] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  812.872200][ T5615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  813.226088][T26148] loop9: detected capacity change from 0 to 8192
[  813.719644][T26171] sch_fq: defrate 0 ignored.
[  814.617581][T26168] loop4: detected capacity change from 0 to 32768
[  814.702360][T26168] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  814.734421][T26168] JBD2: Ignoring recovery information on journal
[  814.855785][T26168] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  815.263162][ T5615] ocfs2: Unmounting device (7,4) on (node local)
[  815.415041][T26229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7214'.
[  815.566597][T26238] netlink: 'syz.7.7215': attribute type 83 has an invalid length.
[  815.825060][T26250] loop3: detected capacity change from 0 to 128
[  815.877821][T26250] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  815.877879][T26250] hpfs: filesystem error: improperly stopped
[  815.877898][T26250] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  815.877934][T26250] hpfs: You really don't want any checks? You are crazy...
[  815.877948][T26250] hpfs: Code page directory magic doesn't match (magic = 7b3184b5)
[  815.877963][T26250] hpfs: code page support is disabled
[  815.878364][T26250] hpfs: hpfs_map_4sectors(): unaligned read
[  815.878446][T26250] hpfs: hpfs_map_4sectors(): unaligned read
[  815.878459][T26250] hpfs: filesystem error: unable to find root dir
[  816.046729][ T1221] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  816.199444][ T1221] usb 1-1: Using ep0 maxpacket: 8
[  816.202913][ T1221] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  816.224668][ T1221] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  816.224697][ T1221] usb 1-1: Product: syz
[  816.224733][ T1221] usb 1-1: Manufacturer: syz
[  816.224753][ T1221] usb 1-1: SerialNumber: syz
[  816.257693][ T1221] usb 1-1: config 0 descriptor??
[  816.277095][ T1221] gspca_main: se401-2.14.0 probing 047d:5003
[  816.477682][T26251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  816.484883][T26251] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  816.538905][T26277] loop7: detected capacity change from 0 to 512
[  816.655485][T26277] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  816.655594][T26277] ext4 filesystem being mounted at /286/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  816.723081][ T1221] gspca_se401: ExtraFeatures: 255
[  816.723101][ T1221] gspca_se401: Frame size: 0x0 1/16th janggu
[  816.723119][ T1221] gspca_se401: Frame size: 256x521 bayer
[  816.723134][ T1221] gspca_se401: Frame size: 36x45825 bayer
[  816.723149][ T1221] gspca_se401: Frame size: 0x0 1/16th janggu
[  816.745505][T26277] EXT4-fs (loop7): shut down requested (2)
[  816.810796][T26287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7236'.
[  816.882489][T26289] loop9: detected capacity change from 0 to 128
[  816.903533][T26289] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  816.903593][T26289] hpfs: filesystem error: improperly stopped
[  816.903612][T26289] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  816.903660][T26289] hpfs: You really don't want any checks? You are crazy...
[  816.904009][T26289] hpfs: hpfs_map_sector(): read error
[  816.904024][T26289] hpfs: code page support is disabled
[  816.910695][T26289] hpfs: hpfs_map_4sectors(): unaligned read
[  816.910769][T26289] hpfs: hpfs_map_4sectors(): unaligned read
[  816.910781][T26289] hpfs: filesystem error: unable to find root dir
[  816.974476][ T1221] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input51
[  816.986660][T26289] hpfs: hpfs_map_4sectors(): unaligned read
[  816.987236][T26289] hpfs: hpfs_map_sector(): read error
[  816.996250][T20196] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  817.104669][ T1221] usb 1-1: USB disconnect, device number 20
[  817.343218][T26301] program syz.7.7238 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  817.595358][T26307] loop1: detected capacity change from 0 to 512
[  817.830138][T26315] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7245'.
[  817.830170][T26315] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7245'.
[  818.032319][T26320] loop1: detected capacity change from 0 to 256
[  818.243586][T26327] bridge0: port 2(bridge_slave_1) entered disabled state
[  818.244412][T26327] bridge0: port 1(bridge_slave_0) entered disabled state
[  818.344193][T26316] i2c i2c-0: new_device: Instantiated device isp1301 at 0x02
[  818.655697][T26333] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7251'.
[  818.655955][T26333] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7251'.
[  818.929081][T21351] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  819.078226][T21351] usb 8-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02
[  819.080601][T21351] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  819.080632][T21351] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  819.080678][T21351] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  819.148056][T21351] ums-alauda 8-1:1.0: USB Mass Storage device detected
[  819.169874][T21351] ums-alauda 8-1:1.0: This device (0584,0008,0102 S 06 P f4) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller)
[  819.169874][T21351]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  819.172056][T21351] scsi host1: usb-storage 8-1:1.0
[  819.588618][T26320] loop1: detected capacity change from 0 to 32768
[  820.291036][  T999] scsi 1:0:0:0: Direct-Access     Fujifilm DPC-R1 (Alauda)  0102 PQ: 0 ANSI: 0 CCS
[  820.322547][  T999] scsi 1:0:0:1: Direct-Access     Fujifilm DPC-R1 (Alauda)  0102 PQ: 0 ANSI: 0 CCS
[  820.552671][T26385] netlink: 'syz.3.7274': attribute type 2 has an invalid length.
[  820.978580][T26394] batadv_slave_0: entered promiscuous mode
[  820.980525][T26394] batadv_slave_0: left promiscuous mode
[  821.355271][  T999] sd 1:0:0:0: Attached scsi generic sg1 type 0
[  821.433153][T26398] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  821.451585][   T13] sd 1:0:0:0: [sdb] Media removed, stopped polling
[  821.511850][T26404] program syz.1.7282 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  821.549461][T26408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7285'.
[  821.606246][T26409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7285'.
[  821.644743][ T5736] usb 8-1: USB disconnect, device number 9
[  821.645036][T21731] sd 1:0:0:1: [sdc] Media removed, stopped polling
[  821.686251][  T999] sd 1:0:0:1: Attached scsi generic sg2 type 0
[  822.110022][T21731] sd 1:0:0:1: [sdc] Attached SCSI removable disk
[  822.165033][   T13] sd 1:0:0:0: [sdb] Attached SCSI removable disk
[  822.246637][ T5992] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK
[  822.317554][T26423] netlink: 72 bytes leftover after parsing attributes in process `syz.9.7291'.
[  822.317585][T26423] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7291'.
[  822.575104][T26428] tipc: Started in network mode
[  822.575137][T26428] tipc: Node identity ac14140f, cluster identity 4711
[  822.575368][T26428] tipc: New replicast peer: 255.255.255.255
[  822.576068][T26428] tipc: Enabled bearer <udp:syz2>, priority 26
[  823.041224][T26433] bridge0: port 2(bridge_slave_1) entered disabled state
[  823.348798][ T5737] udevd[5737]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory
[  823.570277][ T1221] tipc: Node number set to 2886997007
[  823.756469][T21351] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[  823.917971][T21351] usb 10-1: Using ep0 maxpacket: 8
[  823.922832][T21351] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  823.946523][T21351] usb 10-1: config 168 descriptor has 1 excess byte, ignoring
[  823.946561][T21351] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  823.946603][T21351] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  823.946633][T21351] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  823.946662][T21351] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  823.946691][T21351] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  823.946721][T21351] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  823.946752][T21351] usb 10-1: config 168 interface 0 has no altsetting 0
[  823.948128][T21351] usb 10-1: config 168 descriptor has 1 excess byte, ignoring
[  823.948166][T21351] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  823.948210][T21351] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  823.948244][T21351] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  823.948276][T21351] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  823.948308][T21351] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  823.948342][T21351] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  823.948376][T21351] usb 10-1: config 168 interface 0 has no altsetting 0
[  823.954310][T21351] usb 10-1: config 168 descriptor has 1 excess byte, ignoring
[  823.954348][T21351] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  823.954392][T21351] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  823.954426][T21351] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  823.954458][T21351] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  823.954492][T21351] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  823.954526][T21351] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  823.954561][T21351] usb 10-1: config 168 interface 0 has no altsetting 0
[  823.967875][T21351] usb 10-1: string descriptor 0 read error: -22
[  823.968030][T21351] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  824.126199][T21351] adutux 10-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  824.127929][T26476] loop7: detected capacity change from 0 to 256
[  824.300931][T21351] usb 10-1: USB disconnect, device number 11
[  824.834282][T26496] overlayfs: workdir and upperdir must be separate subtrees
[  825.192552][T26502] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7319'.
[  825.300967][T26506] loop7: detected capacity change from 0 to 512
[  825.321270][T26506] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  825.372277][T26513] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  825.408791][T26506] EXT4-fs (loop7): 1 truncate cleaned up
[  825.516513][T26506] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  825.561954][T26488] loop1: detected capacity change from 0 to 32768
[  825.567156][   T31] audit: type=1800 audit(1789089997.755:460): pid=26506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.7320" name="file1" dev="loop7" ino=15 res=0 errno=0
[  825.569867][T26488] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.7313 (26488)
[  825.589844][T26488] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  825.589876][T26488] BTRFS info (device loop1): using blake2b checksum algorithm
[  825.648692][T26506] EXT4-fs error (device loop7): __ext4_expand_extra_isize:6542: inode #15: comm syz.7.7320: bad extra_isize 62 (inode size 256)
[  825.724881][T26506] EXT4-fs (loop7): Remounting filesystem read-only
[  825.785924][T26488] BTRFS info (device loop1): enabling ssd optimizations
[  825.785954][T26488] BTRFS info (device loop1): turning on async discard
[  825.785975][T26488] BTRFS info (device loop1): enabling free space tree
[  825.785998][T26488] BTRFS info (device loop1): use zstd compression, level 3
[  825.908836][T20196] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  825.958989][T26493] loop3: detected capacity change from 0 to 32768
[  826.006122][T26493] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  826.116488][T26493] XFS (loop3): Ending clean mount
[  826.135356][T18785] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  826.310938][T23067] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  826.486579][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  827.483608][T26576] netlink: 'syz.0.7339': attribute type 3 has an invalid length.
[  827.483636][T26576] netlink: 'syz.0.7339': attribute type 1 has an invalid length.
[  827.483654][T26576] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7339'.
[  827.575745][T26554] loop4: detected capacity change from 0 to 32768
[  827.598448][T26554] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.7330 (26554)
[  827.690610][T26554] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  827.690651][T26554] BTRFS info (device loop4): using crc32c checksum algorithm
[  827.924749][T26554] BTRFS info (device loop4): enabling ssd optimizations
[  827.924866][T26554] BTRFS info (device loop4): turning on async discard
[  827.924889][T26554] BTRFS info (device loop4): enabling free space tree
[  828.043568][T26554] BTRFS critical (device loop4 state E): emergency shutdown
[  828.199633][ T5615] BTRFS info (device loop4 state E): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  829.576015][T26640] loop9: detected capacity change from 0 to 512
[  829.588019][T26640] EXT4-fs: Ignoring removed bh option
[  829.696859][T26640] EXT4-fs error (device loop9): ext4_iget_extra_inode:5210: inode #15: comm syz.9.7357: corrupted in-inode xattr: e_value size too large
[  829.696902][T26640] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  829.698144][T26640] EXT4-fs error (device loop9): ext4_orphan_get:1408: comm syz.9.7357: couldn't read orphan inode 15 (err -117)
[  829.698180][T26640] loop9: lost filesystem error report for type 5 error -117
[  829.702986][T26640] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  830.008015][   T31] audit: type=1326 audit(1789090002.175:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26650 comm="syz.0.7361" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43c79e159 code=0x7ffc0000
[  830.008078][   T31] audit: type=1326 audit(1789090002.205:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26650 comm="syz.0.7361" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43c79e159 code=0x7ffc0000
[  830.074965][   T31] audit: type=1326 audit(1789090002.265:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26650 comm="syz.0.7361" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fd43c79e159 code=0x7ffc0000
[  830.075027][   T31] audit: type=1326 audit(1789090002.265:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26650 comm="syz.0.7361" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43c79e159 code=0x7ffc0000
[  830.075080][   T31] audit: type=1326 audit(1789090002.265:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26650 comm="syz.0.7361" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43c79e159 code=0x7ffc0000
[  830.075734][   T31] audit: type=1326 audit(1789090002.265:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26650 comm="syz.0.7361" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fd43c79e159 code=0x7ffc0000
[  830.076076][   T31] audit: type=1326 audit(1789090002.265:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26650 comm="syz.0.7361" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43c79e159 code=0x7ffc0000
[  830.091114][T24338] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  830.103247][   T31] audit: type=1326 audit(1789090002.285:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26650 comm="syz.0.7361" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43c79e159 code=0x7ffc0000
[  830.214652][   T31] audit: type=1326 audit(1789090002.375:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26650 comm="syz.0.7361" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7fd43c79e159 code=0x7ffc0000
[  830.220388][T26657] netlink: 'syz.1.7364': attribute type 1 has an invalid length.
[  830.305806][T26617] loop4: detected capacity change from 0 to 32768
[  830.315002][T26617] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.7349 (26617)
[  830.339785][T26617] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  830.339819][T26617] BTRFS info (device loop4): using crc32c checksum algorithm
[  830.539151][T26617] BTRFS info (device loop4): enabling ssd optimizations
[  830.539183][T26617] BTRFS info (device loop4): turning on async discard
[  830.539204][T26617] BTRFS info (device loop4): enabling free space tree
[  830.704899][T26617] BTRFS error (device loop4): balance: mixed groups data and metadata options must be the same
[  830.716225][T26685] netlink: 'syz.0.7369': attribute type 34 has an invalid length.
[  830.818876][ T5615] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  831.233350][T26696] loop1: detected capacity change from 0 to 2048
[  831.248496][T26696] EXT4-fs: Ignoring removed mblk_io_submit option
[  831.248524][T26696] EXT4-fs: Ignoring removed i_version option
[  831.347461][T26696] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  831.707676][T26706] loop3: detected capacity change from 0 to 1024
[  831.789168][T18785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  832.084664][T26689] loop9: detected capacity change from 0 to 32768
[  832.135956][T26689] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.7370 (26689)
[  832.192075][T26689] BTRFS info (device loop9): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  832.192109][T26689] BTRFS info (device loop9): using blake2b checksum algorithm
[  832.273582][T26715] loop1: detected capacity change from 0 to 1024
[  832.403357][T26715] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  832.403463][T26715] ext4 filesystem being mounted at /426/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  832.516225][T26689] BTRFS info (device loop9): enabling ssd optimizations
[  832.516257][T26689] BTRFS info (device loop9): turning on async discard
[  832.516277][T26689] BTRFS info (device loop9): enabling free space tree
[  832.516301][T26689] BTRFS info (device loop9): use zstd compression, level 3
[  832.549474][T26723] loop3: detected capacity change from 0 to 4096
[  832.609356][T26723] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  832.625008][T26689] BTRFS critical (device loop9 state E): emergency shutdown
[  832.679978][T26659] loop7: detected capacity change from 0 to 40427
[  832.723732][T26659] F2FS-fs (loop7): invalid crc value
[  832.843287][T26723] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  832.847794][T26723] ntfs3(loop3): ino=1a, mi_enum_attr
[  832.847990][T26723] ntfs3(loop3): Failed to initialize $Extend/$ObjId.
[  832.884110][T18785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  832.931392][T24338] BTRFS info (device loop9 state E): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  833.079870][T26659] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  833.117079][T26659] F2FS-fs (loop7): f2fs_disable_checkpoint starts, unusable: 0
[  833.117110][T26659] F2FS-fs (loop7): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  833.117141][T26659] F2FS-fs (loop7): Start checkpoint disabled!
[  833.243569][T26659] F2FS-fs (loop7): f2fs_disable_checkpoint finishes, err:0
[  834.496495][ T1221] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  834.635502][ T5621] block nbd1: Receive control failed (result -32)
[  834.635524][T18789] block nbd1: Receive control failed (result -32)
[  834.666985][ T1221] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  834.668020][ T1221] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  834.671118][ T1221] usb 5-1: config 0 descriptor??
[  834.701778][ T1221] cp210x 5-1:0.0: cp210x converter detected
[  835.083289][ T1221] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  835.109699][ T1221] usb 5-1: cp210x converter now attached to ttyUSB0
[  835.303051][   T25] usb 5-1: USB disconnect, device number 41
[  835.335494][   T25] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  835.360489][   T25] cp210x 5-1:0.0: device disconnected
[  835.715873][T26818] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7404'.
[  835.715902][T26818] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7404'.
[  835.871751][T26827] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  835.871751][T26827] The task syz.3.7407 (26827) triggered the difference, watch for misbehavior.
[  836.134170][T26838] loop9: detected capacity change from 0 to 2048
[  836.217641][T26838] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  837.020247][T26866] loop4: detected capacity change from 0 to 2048
[  837.062567][T26866] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  837.084255][T26866] EXT4-fs (loop4): shut down requested (1)
[  837.234528][ T5615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  839.432984][T26957] Failed to get privilege flags for destination (handle=0x2:0x0)
[  839.433704][T26955] loop3: detected capacity change from 0 to 1024
[  839.482385][T26955] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  839.482749][T26955] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  839.510497][T26955] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 2: comm syz.3.7455: lblock 2 mapped to illegal pblock 2 (length 1)
[  839.510539][T26955] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  839.510782][T26955] EXT4-fs (loop3): Remounting filesystem read-only
[  839.510804][T26955] __quota_error: 2 callbacks suppressed
[  839.510819][T26955] Quota error (device loop3): qtree_write_dquot: dquota write failed
[  839.510862][T26955] Quota error (device loop3): v2_write_file_info: Can't write info structure
[  839.510962][T26955] EXT4-fs (loop3): 1 orphan inode deleted
[  839.583451][T26955] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  839.614208][T26955] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  839.872113][T26969] program syz.4.7458 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  840.713700][T27001] loop3: detected capacity change from 0 to 2048
[  840.783518][T27008] loop9: detected capacity change from 0 to 524287936
[  840.798591][T27001] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  840.854880][T27000] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  840.951563][T23067] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  840.992668][T27012] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7478'.
[  841.219168][T27018] size and base must be multiples of 4 kiB
[  841.219197][T27018] CPU: 1 UID: 0 PID: 27018 Comm: syz.4.7482 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  841.219234][T27018] Tainted: [L]=SOFTLOCKUP
[  841.219245][T27018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  841.219262][T27018] Call Trace:
[  841.219273][T27018]  <TASK>
[  841.219285][T27018]  dump_stack_lvl+0xe8/0x150
[  841.219332][T27018]  mtrr_del+0xc8/0xf0
[  841.219374][T27018]  mtrr_ioctl+0xcb8/0x13b0
[  841.219425][T27018]  ? __pfx_mtrr_ioctl+0x10/0x10
[  841.219487][T27018]  ? __fget_files+0x2a/0x420
[  841.219527][T27018]  ? __fget_files+0x3a2/0x420
[  841.219564][T27018]  ? __fget_files+0x2a/0x420
[  841.219602][T27018]  ? __pfx_mtrr_ioctl+0x10/0x10
[  841.219645][T27018]  proc_reg_unlocked_ioctl+0x1d6/0x2c0
[  841.219680][T27018]  ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10
[  841.219715][T27018]  __se_sys_ioctl+0xfc/0x170
[  841.219749][T27018]  do_syscall_64+0x166/0x520
[  841.219780][T27018]  ? trace_irq_disable+0x3b/0x140
[  841.219808][T27018]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  841.219844][T27018]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  841.219872][T27018] RIP: 0033:0x7f50dcf9e159
[  841.219897][T27018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  841.219921][T27018] RSP: 002b:00007f50ddd9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  841.219950][T27018] RAX: ffffffffffffffda RBX: 00007f50dd225fa0 RCX: 00007f50dcf9e159
[  841.219977][T27018] RDX: 0000200000000200 RSI: 0000000040104d04 RDI: 0000000000000003
[  841.219996][T27018] RBP: 00007f50dd03503b R08: 0000000000000000 R09: 0000000000000000
[  841.220015][T27018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  841.220032][T27018] R13: 00007f50dd226038 R14: 00007f50dd225fa0 R15: 00007ffed3dc8f48
[  841.220077][T27018]  </TASK>
[  841.341987][   T25] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  841.421908][   T31] audit: type=1326 audit(1789090013.615:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27019 comm="syz.9.7483" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f209779e159 code=0x0
[  841.529196][   T25] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  841.530230][   T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  841.530265][   T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  841.530309][   T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  841.533355][   T25] usb 8-1: config 0 descriptor??
[  841.614375][   T31] audit: type=1400 audit(1789090013.805:473): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="p" pid=27029 comm="syz.4.7486" name="p" offset=79
[  841.796032][T27033] openvswitch: netlink: IP tunnel TTL not specified.
[  841.796069][T27033] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  841.947579][   T25] hid_parser_main: 174 callbacks suppressed
[  841.947608][   T25] pyra 0003:1E7D:2CF6.0043: unknown main item tag 0x0
[  841.947637][   T25] pyra 0003:1E7D:2CF6.0043: unknown main item tag 0x0
[  841.947663][   T25] pyra 0003:1E7D:2CF6.0043: unknown main item tag 0x0
[  841.947688][   T25] pyra 0003:1E7D:2CF6.0043: unknown main item tag 0x0
[  841.947714][   T25] pyra 0003:1E7D:2CF6.0043: unknown main item tag 0x0
[  841.947740][   T25] pyra 0003:1E7D:2CF6.0043: unknown main item tag 0x0
[  841.947766][   T25] pyra 0003:1E7D:2CF6.0043: unknown main item tag 0x0
[  841.983045][T27035] loop4: detected capacity change from 0 to 4096
[  842.019459][   T25] pyra 0003:1E7D:2CF6.0043: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.7-1/input0
[  842.055802][T27037] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified.
[  842.055840][T27037] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  842.347934][   T25] pyra 0003:1E7D:2CF6.0043: couldn't init struct pyra_device
[  842.348005][   T25] pyra 0003:1E7D:2CF6.0043: couldn't install mouse
[  842.354197][   T25] pyra 0003:1E7D:2CF6.0043: probe with driver pyra failed with error -71
[  842.399026][   T25] usb 8-1: USB disconnect, device number 10
[  842.745253][T27055] loop9: detected capacity change from 0 to 128
[  842.767532][T27055] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  842.771449][T27055] ext4 filesystem being mounted at /120/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  842.811918][T27055] fscrypt (loop9, inode 12): Unsupported encryption flags (0x08)
[  842.909377][T24338] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  843.020581][T27063] netlink: 256 bytes leftover after parsing attributes in process `syz.7.7503'.
[  843.020610][T27063] netlink: 32 bytes leftover after parsing attributes in process `syz.7.7503'.
[  843.221449][T27070] jffs2: notice: (27070) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  843.377901][T27075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7506'.
[  843.784473][T27088] loop9: detected capacity change from 0 to 1024
[  843.792188][T27088] hfsplus: failed to load extents file
[  843.964553][T27052] loop3: detected capacity change from 0 to 32768
[  844.023679][T27052] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  844.126537][   T25] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[  844.128645][T27052] XFS (loop3): Ending clean mount
[  844.267936][T23067] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  844.324743][   T25] usb 10-1: Using ep0 maxpacket: 32
[  844.337733][   T25] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  844.340731][   T25] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  844.340765][   T25] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  844.340805][   T25] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  844.355447][   T25] usb 10-1: config 0 descriptor??
[  844.379457][   T25] hub 10-1:0.0: USB hub found
[  844.562252][   T25] hub 10-1:0.0: 26 ports detected
[  844.562895][   T25] hub 10-1:0.0: insufficient power available to use all downstream ports
[  844.738591][T27116] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  844.738615][T27116] IPv6: NLM_F_CREATE should be set when creating new route
[  844.738842][T27116] IPv6: NLM_F_CREATE should be set when creating new route
[  844.738871][T27116] IPv6: NLM_F_CREATE should be set when creating new route
[  844.762997][   T25] hub 10-1:0.0: config failed, can't get hub status (err -71)
[  844.771735][   T25] usbhid 10-1:0.0: can't add hid device: -71
[  844.771836][   T25] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[  844.833271][   T25] usb 10-1: USB disconnect, device number 12
[  845.076015][T27125] loop3: detected capacity change from 0 to 512
[  845.294341][T27131] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  845.846835][ T5621] Bluetooth: hci4: command 0x0406 tx timeout
[  845.891860][T27148] netlink: Only one type of NAT may be specified
[  845.891893][T27148] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  846.057809][   T25] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  846.089765][T27154] netlink: 'syz.9.7539': attribute type 1 has an invalid length.
[  846.112066][T27155] loop1: detected capacity change from 0 to 512
[  846.113129][T27125] syz.3.7525: attempt to access beyond end of device
[  846.113129][T27125] loop3: rw=8390659, sector=13520, nr_sectors = 128 limit=512
[  846.140039][T27155] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  846.159565][T27155] EXT4-fs (loop1): 1 truncate cleaned up
[  846.166128][T27155] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  846.202296][   T31] audit: type=1800 audit(1789090018.395:474): pid=27155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7538" name="file1" dev="loop1" ino=15 res=0 errno=0
[  846.238799][   T25] usb 5-1: Using ep0 maxpacket: 8
[  846.242571][   T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  846.246686][   T25] usb 5-1: config 1 has an invalid interface number: 17 but max is 1
[  846.246713][   T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  846.246737][   T25] usb 5-1: config 1 has 3 interfaces, different from the descriptor's value: 2
[  846.246762][   T25] usb 5-1: config 1 has no interface number 2
[  846.246829][   T25] usb 5-1: config 1 interface 1 has no altsetting 0
[  846.249593][   T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  846.249621][   T25] usb 5-1: Product: syz
[  846.249640][   T25] usb 5-1: Manufacturer: syz
[  846.249658][   T25] usb 5-1: SerialNumber: syz
[  846.432219][T18785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  846.519539][T27163] netlink: 164 bytes leftover after parsing attributes in process `syz.7.7542'.
[  846.543359][   T25] usb 5-1: selecting invalid altsetting 0
[  846.543437][   T25] usb 5-1: selecting invalid altsetting 0
[  846.543500][   T25] cdc_ncm 5-1:1.0: bind() failure
[  846.585249][   T25] cdc_ncm 5-1:1.17: CDC Union missing and no IAD found
[  846.585301][   T25] cdc_ncm 5-1:1.17: bind() failure
[  846.622602][   T25] usb 5-1: selecting invalid altsetting 0
[  846.622632][   T25] usbtest 5-1:1.1: probe with driver usbtest failed with error -22
[  846.771555][T27175] loop3: detected capacity change from 0 to 128
[  846.785677][T27175] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  846.800019][T27175] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  846.912876][T21731] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  847.248505][T27192] ip6gretap1: entered allmulticast mode
[  847.252771][T27192] batman_adv: batadv0: Adding interface: ip6gretap1
[  847.252790][T27192] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  847.252828][T27192] batman_adv: batadv0: Interface activated: ip6gretap1
[  847.608118][T27207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7561'.
[  847.757592][T27211] tap0: tun_chr_ioctl cmd 1074025677
[  847.757801][T27211] tap0: linktype set to 270
[  847.780157][T27213] IPv6: NLM_F_CREATE should be specified when creating new route
[  847.781206][T27213] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.7562'.
[  848.842796][T21351] usb 5-1: USB disconnect, device number 42
[  856.088936][T18789] Bluetooth: hci1: command 0x0406 tx timeout
[  856.566597][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  869.373364][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  869.373432][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  876.566585][T18789] Bluetooth: hci5: command 0x0406 tx timeout
[  920.566668][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  930.808173][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  930.808245][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  992.248780][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  992.248850][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  997.366750][   T32] INFO: task jbd2/sda1-8:4943 blocked in I/O wait for more than 143 seconds.
[  997.366800][   T32]       Tainted: G             L      syzkaller #0
[  997.366817][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  997.366830][   T32] task:jbd2/sda1-8     state:D stack:25288 pid:4943  tgid:4943  ppid:2     
** replaying previous printk message **
[  997.366830][   T32] task:jbd2/sda1-8     state:D stack:25288 pid:4943  tgid:4943  ppid:2      task_flags:0x240040 flags:0x00080000
[  997.366911][   T32] Call Trace:
[  997.366922][   T32]  <TASK>
[  997.366939][   T32]  __schedule+0x17db/0x58f0
[  997.367009][   T32]  ? __pfx___schedule+0x10/0x10
[  997.367048][   T32]  ? schedule+0x90/0x2b0
[  997.367079][   T32]  schedule+0x164/0x2b0
[  997.367110][   T32]  io_schedule+0x7f/0xd0
[  997.367141][   T32]  bit_wait_io+0x11/0xd0
[  997.367174][   T32]  __wait_on_bit+0xac/0x300
[  997.367205][   T32]  ? __pfx_bit_wait_io+0x10/0x10
[  997.367240][   T32]  out_of_line_wait_on_bit+0x13b/0x190
[  997.367274][   T32]  ? __pfx_bit_wait_io+0x10/0x10
[  997.367305][   T32]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  997.367341][   T32]  ? __pfx_wake_bit_function+0x10/0x10
[  997.367379][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.367416][   T32]  ? __wait_on_buffer+0xe/0x80
[  997.367455][   T32]  jbd2_journal_commit_transaction+0x2f1d/0x5b70
[  997.367485][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.367518][   T32]  ? trace_hrtimer_start+0x82/0x200
[  997.367608][   T32]  ? __pfx_jbd2_journal_commit_transaction+0x10/0x10
[  997.367652][   T32]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  997.367704][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.367745][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.367790][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.367828][   T32]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  997.367873][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.367908][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.367940][   T32]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  997.367989][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.368309][   T32]  ? __timer_delete_sync+0x4a7/0x520
[  997.368349][   T32]  kjournald2+0x3bc/0x750
[  997.368407][   T32]  ? __pfx_kjournald2+0x10/0x10
[  997.368442][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.368478][   T32]  ? __pfx_autoremove_wake_function+0x10/0x10
[  997.368517][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.368549][   T32]  ? __kthread_parkme+0x71/0x1f0
[  997.368595][   T32]  ? __kthread_parkme+0x199/0x1f0
[  997.368644][   T32]  kthread+0x38b/0x480
[  997.368673][   T32]  ? __pfx_kjournald2+0x10/0x10
[  997.368707][   T32]  ? __pfx_kthread+0x10/0x10
[  997.368738][   T32]  ret_from_fork+0x514/0xb70
[  997.368778][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  997.368822][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.368856][   T32]  ? __switch_to+0xc89/0x1420
[  997.368899][   T32]  ? __pfx_kthread+0x10/0x10
[  997.368930][   T32]  ret_from_fork_asm+0x1a/0x30
[  997.368998][   T32]  </TASK>
[  997.369020][   T32] INFO: task syz-executor:5601 blocked in I/O wait for more than 143 seconds.
[  997.369047][   T32]       Tainted: G             L      syzkaller #0
[  997.369062][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  997.369075][   T32] task:syz-executor    state:D stack:22120 pid:5601  tgid:5601  ppid:5600   task_flags:0x440100 flags:0x00080000
[  997.369153][   T32] Call Trace:
[  997.369163][   T32]  <TASK>
[  997.369179][   T32]  __schedule+0x17db/0x58f0
[  997.369233][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.369276][   T32]  ? __pfx___schedule+0x10/0x10
[  997.369314][   T32]  ? schedule+0x90/0x2b0
[  997.369346][   T32]  schedule+0x164/0x2b0
[  997.369377][   T32]  io_schedule+0x7f/0xd0
[  997.369408][   T32]  bit_wait_io+0x11/0xd0
[  997.369441][   T32]  __wait_on_bit+0xac/0x300
[  997.369470][   T32]  ? __pfx_bit_wait_io+0x10/0x10
[  997.369524][   T32]  out_of_line_wait_on_bit+0x13b/0x190
[  997.369558][   T32]  ? __pfx_bit_wait_io+0x10/0x10
[  997.369589][   T32]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  997.369625][   T32]  ? __pfx_wake_bit_function+0x10/0x10
[  997.369664][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.369707][   T32]  do_get_write_access+0x662/0x1070
[  997.369806][   T32]  jbd2_journal_get_write_access+0x1d7/0x230
[  997.369856][   T32]  __ext4_journal_get_write_access+0xf1/0x620
[  997.369908][   T32]  ? __pfx___ext4_journal_get_write_access+0x10/0x10
[  997.369949][   T32]  ? trace_kmem_cache_alloc+0x29/0xe0
[  997.369992][   T32]  ? jbd2__journal_start+0x145/0x5d0
[  997.370033][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.370076][   T32]  ext4_reserve_inode_write+0x294/0x360
[  997.370131][   T32]  __ext4_mark_inode_dirty+0x146/0x7b0
[  997.370178][   T32]  ext4_dirty_inode+0xd0/0x110
[  997.370222][   T32]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  997.370264][   T32]  __mark_inode_dirty+0x3a8/0x13b0
[  997.370305][   T32]  file_update_time_flags+0x399/0x440
[  997.370341][   T32]  ext4_page_mkwrite+0x224/0x1140
[  997.370395][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.370457][   T32]  ? __pfx_ext4_page_mkwrite+0x10/0x10
[  997.370496][   T32]  ? __lock_acquire+0x747/0x2de0
[  997.370538][   T32]  do_page_mkwrite+0x147/0x310
[  997.370572][   T32]  do_wp_page+0x1a9c/0x4b80
[  997.370633][   T32]  ? __pfx_do_wp_page+0x10/0x10
[  997.370667][   T32]  ? do_raw_spin_lock+0x12b/0x2f0
[  997.370709][   T32]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  997.370746][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.370803][   T32]  handle_mm_fault+0x15d7/0x3750
[  997.370857][   T32]  ? handle_mm_fault+0xf1/0x3750
[  997.370911][   T32]  ? __pfx_handle_mm_fault+0x10/0x10
[  997.370948][   T32]  ? lock_vma_under_rcu+0x45a/0x500
[  997.371009][   T32]  ? sched_clock_cpu+0x74/0x440
[  997.371051][   T32]  do_user_addr_fault+0xa4f/0x1340
[  997.371089][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.371125][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.371157][   T32]  ? trace_page_fault_user+0x84/0x1e0
[  997.371191][   T32]  exc_page_fault+0x6a/0xc0
[  997.376056][   T32]  asm_exc_page_fault+0x26/0x30
[  997.376090][   T32] RIP: 0033:0x7fd8934701e3
[  997.376116][   T32] RSP: 002b:00007fff6a1bb9c0 EFLAGS: 00010212
[  997.376140][   T32] RAX: 00007fd88f5fb084 RBX: 00007fff6a1bbaf0 RCX: 0000000000000000
[  997.376161][   T32] RDX: 00007fd88f5fb080 RSI: 0000000000000008 RDI: 00007fff6a1bbaf0
[  997.376180][   T32] RBP: 00000000000003e6 R08: 0000000000000000 R09: 0000000000000000
[  997.376197][   T32] R10: 00007fff6a1bbad0 R11: 0000000000000000 R12: 0000000000000000
[  997.376215][   T32] R13: 0000000000004f7c R14: ffffffffffffb084 R15: 0000000000000000
[  997.376257][   T32]  </TASK>
[  997.376463][   T32] INFO: task syz.1.7557:27196 blocked in I/O wait for more than 143 seconds.
[  997.376490][   T32]       Tainted: G             L      syzkaller #0
[  997.376505][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  997.376517][   T32] task:syz.1.7557      state:D stack:25608 pid:27196 tgid:27196 ppid:18785  task_flags:0x440040 flags:0x00080002
[  997.376593][   T32] Call Trace:
[  997.376603][   T32]  <TASK>
[  997.376621][   T32]  __schedule+0x17db/0x58f0
[  997.376675][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.376718][   T32]  ? __pfx___schedule+0x10/0x10
[  997.376763][   T32]  ? schedule+0x90/0x2b0
[  997.376794][   T32]  schedule+0x164/0x2b0
[  997.376824][   T32]  io_schedule+0x7f/0xd0
[  997.376856][   T32]  bit_wait_io+0x11/0xd0
[  997.376888][   T32]  __wait_on_bit+0xac/0x300
[  997.376918][   T32]  ? __pfx_bit_wait_io+0x10/0x10
[  997.376953][   T32]  out_of_line_wait_on_bit+0x13b/0x190
[  997.376986][   T32]  ? __pfx_bit_wait_io+0x10/0x10
[  997.377016][   T32]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  997.377051][   T32]  ? __pfx_wake_bit_function+0x10/0x10
[  997.377089][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.377132][   T32]  do_get_write_access+0x662/0x1070
[  997.377201][   T32]  jbd2_journal_get_write_access+0x1d7/0x230
[  997.377248][   T32]  __ext4_journal_get_write_access+0xf1/0x620
[  997.377300][   T32]  ? __pfx___ext4_journal_get_write_access+0x10/0x10
[  997.377342][   T32]  ? trace_kmem_cache_alloc+0x29/0xe0
[  997.377383][   T32]  ? jbd2__journal_start+0x145/0x5d0
[  997.377423][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.377465][   T32]  ext4_reserve_inode_write+0x294/0x360
[  997.380186][   T32]  __ext4_mark_inode_dirty+0x146/0x7b0
[  997.380265][   T32]  ext4_dirty_inode+0xd0/0x110
[  997.380308][   T32]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  997.380348][   T32]  __mark_inode_dirty+0x3a8/0x13b0
[  997.380389][   T32]  file_update_time_flags+0x399/0x440
[  997.380426][   T32]  ext4_page_mkwrite+0x224/0x1140
[  997.380481][   T32]  ? __pfx_filemap_fault+0x10/0x10
[  997.380525][   T32]  ? __pfx_ext4_page_mkwrite+0x10/0x10
[  997.380582][   T32]  do_page_mkwrite+0x147/0x310
[  997.380616][   T32]  do_pte_missing+0x757/0x34b0
[  997.380670][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.380707][   T32]  ? handle_mm_fault+0xf1/0x3750
[  997.380750][   T32]  handle_mm_fault+0x1a53/0x3750
[  997.380809][   T32]  ? handle_mm_fault+0xf1/0x3750
[  997.380861][   T32]  ? __pfx_handle_mm_fault+0x10/0x10
[  997.380897][   T32]  ? lock_vma_under_rcu+0x45a/0x500
[  997.380957][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.381003][   T32]  do_user_addr_fault+0xa4f/0x1340
[  997.381042][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.381077][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.381109][   T32]  ? trace_page_fault_user+0x84/0x1e0
[  997.381142][   T32]  exc_page_fault+0x6a/0xc0
[  997.381174][   T32]  asm_exc_page_fault+0x26/0x30
[  997.381201][   T32] RIP: 0033:0x7f08d3e727a9
[  997.381224][   T32] RSP: 002b:00007fff3c406650 EFLAGS: 00010202
[  997.381248][   T32] RAX: 0000001b32722000 RBX: ffffffff8bde7043 RCX: 0000001b32721ff8
[  997.381269][   T32] RDX: 0000001b32124220 RSI: 0000000000000008 RDI: 00007f08d4d55720
[  997.381288][   T32] RBP: 000000000000002f R08: 00007f08d4210000 R09: 00007f08d4212000
[  997.381307][   T32] R10: 000000008bde7047 R11: 0000000000000002 R12: 00007f08d4226038
[  997.381327][   T32] R13: 000000000000002e R14: ffffffff8bde743b R15: 00007f08d4d55720
[  997.381348][   T32]  ? mtree_range_walk+0x35b/0x8b0
[  997.381385][   T32]  ? trace_raw_output_ma_write+0x143/0x1d0
[  997.381437][   T32]  </TASK>
[  997.381449][   T32] INFO: task syz.7.7565:27214 blocked in I/O wait for more than 143 seconds.
[  997.381474][   T32]       Tainted: G             L      syzkaller #0
[  997.381489][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  997.381502][   T32] task:syz.7.7565      state:D stack:25608 pid:27214 tgid:27214 ppid:20196  task_flags:0x440040 flags:0x00080002
[  997.381576][   T32] Call Trace:
[  997.381586][   T32]  <TASK>
[  997.381603][   T32]  __schedule+0x17db/0x58f0
[  997.381666][   T32]  ? __pfx___schedule+0x10/0x10
[  997.381704][   T32]  ? schedule+0x90/0x2b0
[  997.381736][   T32]  schedule+0x164/0x2b0
[  997.381770][   T32]  io_schedule+0x7f/0xd0
[  997.381801][   T32]  bit_wait_io+0x11/0xd0
[  997.381833][   T32]  __wait_on_bit+0xac/0x300
[  997.381863][   T32]  ? __pfx_bit_wait_io+0x10/0x10
[  997.381899][   T32]  out_of_line_wait_on_bit+0x13b/0x190
[  997.381932][   T32]  ? __pfx_bit_wait_io+0x10/0x10
[  997.381962][   T32]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  997.381998][   T32]  ? __pfx_wake_bit_function+0x10/0x10
[  997.382035][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.382093][   T32]  do_get_write_access+0x662/0x1070
[  997.382159][   T32]  jbd2_journal_get_write_access+0x1d7/0x230
[  997.382207][   T32]  __ext4_journal_get_write_access+0xf1/0x620
[  997.382259][   T32]  ? __pfx___ext4_journal_get_write_access+0x10/0x10
[  997.382301][   T32]  ? trace_kmem_cache_alloc+0x29/0xe0
[  997.382342][   T32]  ? jbd2__journal_start+0x145/0x5d0
[  997.382382][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.382424][   T32]  ext4_reserve_inode_write+0x294/0x360
[  997.382477][   T32]  __ext4_mark_inode_dirty+0x146/0x7b0
[  997.382526][   T32]  ext4_dirty_inode+0xd0/0x110
[  997.382567][   T32]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  997.382608][   T32]  __mark_inode_dirty+0x3a8/0x13b0
[  997.382648][   T32]  file_update_time_flags+0x399/0x440
[  997.382684][   T32]  ext4_page_mkwrite+0x224/0x1140
[  997.382739][   T32]  ? __pfx_filemap_fault+0x10/0x10
[  997.382787][   T32]  ? __pfx_ext4_page_mkwrite+0x10/0x10
[  997.382843][   T32]  do_page_mkwrite+0x147/0x310
[  997.382878][   T32]  do_pte_missing+0x757/0x34b0
[  997.382931][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.382968][   T32]  ? handle_mm_fault+0xf1/0x3750
[  997.383011][   T32]  handle_mm_fault+0x1a53/0x3750
[  997.383064][   T32]  ? handle_mm_fault+0xf1/0x3750
[  997.383116][   T32]  ? __pfx_handle_mm_fault+0x10/0x10
[  997.383151][   T32]  ? lock_vma_under_rcu+0x45a/0x500
[  997.383192][   T32]  ? __pfx_do_futex+0x10/0x10
[  997.383258][   T32]  do_user_addr_fault+0xa4f/0x1340
[  997.383296][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.383331][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.383363][   T32]  ? trace_page_fault_user+0x84/0x1e0
[  997.383395][   T32]  exc_page_fault+0x6a/0xc0
[  997.383427][   T32]  asm_exc_page_fault+0x26/0x30
[  997.383454][   T32] RIP: 0033:0x7fec0ba72f32
[  997.383478][   T32] RSP: 002b:00007ffd85d6a6d0 EFLAGS: 00010202
[  997.383502][   T32] RAX: 0000000000001008 RBX: 00007fec0c955720 RCX: 0000000000000000
[  997.383521][   T32] RDX: 0000001b32d23000 RSI: 0000000000000008 RDI: 00007fec0c955720
[  997.383540][   T32] RBP: 000000000000015c R08: 00007fec0be10000 R09: 00007fec0be26038
[  997.383559][   T32] R10: 0000000000000003 R11: 0000000000000002 R12: ffffffff825090f2
[  997.383578][   T32] R13: 00007fec0be26038 R14: 00000000000000ac R15: fffffffffffff000
[  997.383602][   T32]  ? __follow_mount_rcu+0x202/0x530
[  997.383659][   T32]  </TASK>
[  997.383671][   T32] INFO: task syz.0.7566:27218 blocked in I/O wait for more than 143 seconds.
[  997.383694][   T32]       Tainted: G             L      syzkaller #0
[  997.383710][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  997.383722][   T32] task:syz.0.7566      state:D stack:26952 pid:27218 tgid:27218 ppid:23936  task_flags:0x440040 flags:0x00080002
[  997.383804][   T32] Call Trace:
[  997.383814][   T32]  <TASK>
[  997.383830][   T32]  __schedule+0x17db/0x58f0
[  997.383894][   T32]  ? __pfx___schedule+0x10/0x10
[  997.383932][   T32]  ? schedule+0x90/0x2b0
[  997.383963][   T32]  schedule+0x164/0x2b0
[  997.383994][   T32]  io_schedule+0x7f/0xd0
[  997.384024][   T32]  bit_wait_io+0x11/0xd0
[  997.384056][   T32]  __wait_on_bit+0xac/0x300
[  997.384085][   T32]  ? __pfx_bit_wait_io+0x10/0x10
[  997.384120][   T32]  out_of_line_wait_on_bit+0x13b/0x190
[  997.384154][   T32]  ? __pfx_bit_wait_io+0x10/0x10
[  997.384184][   T32]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  997.384220][   T32]  ? __pfx_wake_bit_function+0x10/0x10
[  997.384257][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.384301][   T32]  do_get_write_access+0x662/0x1070
[  997.384365][   T32]  jbd2_journal_get_write_access+0x1d7/0x230
[  997.384413][   T32]  __ext4_journal_get_write_access+0xf1/0x620
[  997.384464][   T32]  ? __pfx___ext4_journal_get_write_access+0x10/0x10
[  997.384509][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.384550][   T32]  ext4_reserve_inode_write+0x294/0x360
[  997.384604][   T32]  __ext4_mark_inode_dirty+0x146/0x7b0
[  997.384652][   T32]  ext4_dirty_inode+0xd0/0x110
[  997.384694][   T32]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  997.384735][   T32]  __mark_inode_dirty+0x3a8/0x13b0
[  997.384771][   T32]  ? mnt_get_write_access+0x216/0x280
[  997.384801][   T32]  ? ext4_file_mmap_prepare+0x277/0x450
[  997.384840][   T32]  touch_atime+0x568/0x670
[  997.384865][   T32]  ? ext4_file_mmap_prepare+0x277/0x450
[  997.384910][   T32]  ext4_file_mmap_prepare+0x277/0x450
[  997.384955][   T32]  mmap_region+0xe8a/0x2240
[  997.385001][   T32]  ? __page_table_check_zero+0x3c3/0x430
[  997.385032][   T32]  ? __page_table_check_zero+0x6c/0x430
[  997.385070][   T32]  ? __pfx_mmap_region+0x10/0x10
[  997.385104][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.385136][   T32]  ? __lock_acquire+0x747/0x2de0
[  997.385187][   T32]  ? lock_acquire+0x115/0x350
[  997.385227][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.385259][   T32]  ? __lock_acquire+0x747/0x2de0
[  997.385345][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.385400][   T32]  ? mt_find+0x186/0x630
[  997.385439][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.385470][   T32]  ? mt_find+0x5ff/0x630
[  997.385507][   T32]  ? mt_find+0x186/0x630
[  997.385541][   T32]  ? __pfx_mt_find+0x10/0x10
[  997.385583][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.385615][   T32]  ? security_mmap_addr+0x71/0x240
[  997.385646][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.385678][   T32]  ? shmem_mapping+0xd/0x50
[  997.385705][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.385737][   T32]  ? memfd_check_seals_mmap+0xc5/0x220
[  997.385784][   T32]  do_mmap+0xe0a/0x1300
[  997.385820][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.385864][   T32]  ? __pfx_do_mmap+0x10/0x10
[  997.385897][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.385936][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.385977][   T32]  ? vm_mmap_pgoff+0x1dd/0x4e0
[  997.386007][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.386039][   T32]  ? down_write_killable+0x17e/0x240
[  997.386079][   T32]  ? __pfx_down_write_killable+0x10/0x10
[  997.386113][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.386157][   T32]  vm_mmap_pgoff+0x272/0x4e0
[  997.386191][   T32]  ? lock_acquire+0x115/0x350
[  997.386225][   T32]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  997.386260][   T32]  ? __fget_files+0x2a/0x420
[  997.386303][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.394372][   T32]  ? __fget_files+0x3a2/0x420
[  997.394416][   T32]  ? __fget_files+0x2a/0x420
[  997.394460][   T32]  ksys_mmap_pgoff+0x4dc/0x760
[  997.394508][   T32]  do_syscall_64+0x166/0x520
[  997.394539][   T32]  ? trace_irq_disable+0x3b/0x140
[  997.394567][   T32]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  997.394603][   T32]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  997.394630][   T32] RIP: 0033:0x7fd43c79dec2
[  997.394654][   T32] RSP: 002b:00007fff0fb7d798 EFLAGS: 00000206 ORIG_RAX: 0000000000000009
[  997.394683][   T32] RAX: ffffffffffffffda RBX: 0000001b34164000 RCX: 00007fd43c79dec2
[  997.394703][   T32] RDX: 0000000000000003 RSI: 00000000005c0000 RDI: 0000001b34164000
[  997.394722][   T32] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000
[  997.394740][   T32] R10: 0000000000100001 R11: 0000000000000206 R12: 00000000000000bc
[  997.394771][   T32] R13: 00000000000927c0 R14: 00000000000cef80 R15: 00007fff0fb7da70
[  997.394814][   T32]  </TASK>
[  997.394828][   T32] 
[  997.394828][   T32] Showing all locks held in the system:
[  997.394841][   T32] locks held by pr/ttyS0/16: 2, last CPU#0:
[  997.394861][   T32]  #0: ffffffff8ec364b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60
[  997.394933][   T32]  #1: ffffffff9ad39098 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0
[  997.395015][   T32] locks held by khungtaskd/32: 1, last CPU#1:
[  997.395034][   T32]  #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  997.395102][   T32] locks held by kworker/u8:3/50: 4, on CPU#1:
[  997.395121][   T32]  #0: ffff8880206b5140 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  997.395198][   T32]  #1: ffffc90000bb7c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  997.395273][   T32]  #2: ffff8880363740e8 (&type->s_umount_key#34){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0
[  997.395358][   T32]  #3: ffff888036372c98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0
[  997.395424][   T32] locks held by kworker/u8:4/59: 5, last CPU#0:
[  997.395443][   T32]  #0: ffff88804fb81940 ((wq_completion)krds_cp_wq#4/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  997.395519][   T32]  #1: ffffc9000200fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  997.395612][   T32]  #2: ffff888051dab680 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920
[  997.395690][   T32]  #3: ffffffff8eeac370 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  997.395760][   T32]  #4: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __page_table_check_zero+0x6c/0x430
[  997.400775][   T32] locks held by klogd/4970: 1, last CPU#1:
[  997.400795][   T32]  #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: sock_def_readable+0xae/0x550
[  997.400882][   T32] locks held by syz-executor/5601: 3, on CPU#0:
[  997.400902][   T32]  #0: ffff888028107a88 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500
[  997.400982][   T32]  #1: ffff888036374558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x202/0x1140
[  997.401063][   T32]  #2: ffff888036370938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fbf/0x2200
[  997.401151][   T32] locks held by kworker/u8:7/21731: 3, last CPU#1:
[  997.401186][   T32]  #0: ffff88801b0a4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  997.401263][   T32]  #1: ffffc90005aafc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  997.401342][   T32]  #2: ffff888076887258 (&devlink->lock_key#9){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40
[  997.401432][   T32] locks held by getty/23415: 2, on CPU#0:
[  997.401452][   T32]  #0: ffff888035bfc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  997.401531][   T32]  #1: ffffc900033862e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  997.401611][   T32] locks held by syz.1.7557/27196: 3, on CPU#0:
[  997.401631][   T32]  #0: ffff88807a331588 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500
[  997.401710][   T32]  #1: ffff888036374558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x202/0x1140
[  997.401797][   T32]  #2: ffff888036370938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fbf/0x2200
[  997.401875][   T32] locks held by syz.7.7565/27214: 3, on CPU#0:
[  997.401895][   T32]  #0: ffff88801b166a88 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500
[  997.401974][   T32]  #1: ffff888036374558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x202/0x1140
[  997.404933][   T32]  #2: ffff888036370938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fbf/0x2200
[  997.405037][   T32] locks held by syz.0.7566/27218: 3, on CPU#1:
[  997.405057][   T32]  #0: ffff88801b091d38 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0
[  997.405127][   T32]  #1: ffff888036374460 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450
[  997.405211][   T32]  #2: ffff888036370938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fbf/0x2200
[  997.405289][   T32] 
[  997.405297][   T32] =============================================
[  997.405297][   T32] 
[  997.405309][   T32] NMI backtrace for cpu 1
[  997.405329][   T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  997.405363][   T32] Tainted: [L]=SOFTLOCKUP
[  997.405373][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  997.405389][   T32] Call Trace:
[  997.405400][   T32]  <TASK>
[  997.405411][   T32]  dump_stack_lvl+0xe8/0x150
[  997.405453][   T32]  nmi_cpu_backtrace+0x274/0x2d0
[  997.405493][   T32]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  997.405540][   T32]  nmi_trigger_cpumask_backtrace+0x17d/0x390
[  997.405584][   T32]  sys_info+0x135/0x170
[  997.405619][   T32]  watchdog+0xfd7/0x1030
[  997.405656][   T32]  ? watchdog+0x1c7/0x1030
[  997.405692][   T32]  kthread+0x38b/0x480
[  997.405720][   T32]  ? __pfx_watchdog+0x10/0x10
[  997.405745][   T32]  ? __pfx_kthread+0x10/0x10
[  997.405780][   T32]  ret_from_fork+0x514/0xb70
[  997.405810][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  997.405852][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.405884][   T32]  ? __switch_to+0xc89/0x1420
[  997.405926][   T32]  ? __pfx_kthread+0x10/0x10
[  997.405955][   T32]  ret_from_fork_asm+0x1a/0x30
[  997.406017][   T32]  </TASK>
[  997.406028][   T32] Sending NMI from CPU 1 to CPUs 0:
[  997.406057][    C0] NMI backtrace for cpu 0
[  997.406074][    C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  997.406106][    C0] Tainted: [L]=SOFTLOCKUP
[  997.406115][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  997.406129][    C0] RIP: 0010:io_serial_in+0x77/0xc0
[  997.406159][    C0] Code: e8 fe 24 55 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ef 24 c5 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 25 9b 9d fb cc 44 89 f9 80 e1 07
[  997.406179][    C0] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002
[  997.406199][    C0] RAX: 1ffffffff35a7200 RBX: 00000000000003fd RCX: 0000000000000000
[  997.406216][    C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020
[  997.406230][    C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  997.406246][    C0] R10: dffffc0000000000 R11: ffffffff8572a560 R12: dffffc0000000000
[  997.406270][    C0] R13: 0000000000000000 R14: ffffffff9ad390c0 R15: 0000000000000000
[  997.406288][    C0] FS:  0000000000000000(0000) GS:ffff888124cd2000(0000) knlGS:0000000000000000
[  997.406308][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  997.406326][    C0] CR2: 00005634da9cc660 CR3: 000000000eb48000 CR4: 0000000000350ef0
[  997.406347][    C0] Call Trace:
[  997.406357][    C0]  <TASK>
[  997.406369][    C0]  wait_for_lsr+0x184/0x2f0
[  997.406401][    C0]  __serial8250_console_fifo_write+0xcd/0x3e0
[  997.406441][    C0]  serial8250_console_write+0xaa1/0x1200
[  997.406467][    C0]  ? lockdep_hardirqs_on+0x7b/0x110
[  997.406502][    C0]  ? __pfx_serial8250_console_write+0x10/0x10
[  997.406527][    C0]  ? __schedule+0x17f1/0x58f0
[  997.406556][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.406590][    C0]  nbcon_emit_next_record+0xef5/0x1a90
[  997.406629][    C0]  ? __pfx_nbcon_emit_next_record+0x10/0x10
[  997.406661][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.406689][    C0]  ? nbcon_context_try_acquire+0x819/0xbd0
[  997.406727][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.406756][    C0]  ? _raw_spin_lock_irqsave+0x4c/0x60
[  997.406797][    C0]  nbcon_kthread_func+0x679/0x880
[  997.406827][    C0]  ? nbcon_kthread_func+0x163/0x880
[  997.406852][    C0]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  997.406879][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.406911][    C0]  ? __kthread_parkme+0x71/0x1f0
[  997.406947][    C0]  ? __kthread_parkme+0x199/0x1f0
[  997.406986][    C0]  kthread+0x38b/0x480
[  997.407010][    C0]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  997.407033][    C0]  ? __pfx_kthread+0x10/0x10
[  997.407058][    C0]  ret_from_fork+0x514/0xb70
[  997.407084][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  997.407121][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.407150][    C0]  ? __switch_to+0xc89/0x1420
[  997.407185][    C0]  ? __pfx_kthread+0x10/0x10
[  997.407210][    C0]  ret_from_fork_asm+0x1a/0x30
[  997.407264][    C0]  </TASK>
[  997.410180][   T32] Kernel panic - not syncing: hung_task: blocked tasks
[  999.924531][   T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  999.935201][   T32] Tainted: [L]=SOFTLOCKUP
[  999.939512][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  999.949553][   T32] Call Trace:
[  999.952821][   T32]  <TASK>
[  999.955745][   T32]  vpanic+0x56d/0xa60
[  999.959739][   T32]  ? __pfx___schedule+0x10/0x10
[  999.964583][   T32]  ? __pfx_vpanic+0x10/0x10
[  999.969090][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  999.974733][   T32]  panic+0xc5/0xd0
[  999.978460][   T32]  ? __pfx_panic+0x10/0x10
[  999.982875][   T32]  ? preempt_schedule_common+0x7f/0xd0
[  999.988329][   T32]  ? preempt_schedule_thunk+0x16/0x40
[  999.993724][   T32]  ? nmi_trigger_cpumask_backtrace+0x31a/0x390
[  999.999886][   T32]  ? nmi_trigger_cpumask_backtrace+0x31f/0x390
[ 1000.006051][   T32]  watchdog+0x1030/0x1030
[ 1000.010382][   T32]  ? watchdog+0x1c7/0x1030
[ 1000.014798][   T32]  kthread+0x38b/0x480
[ 1000.018858][   T32]  ? __pfx_watchdog+0x10/0x10
[ 1000.023522][   T32]  ? __pfx_kthread+0x10/0x10
[ 1000.028107][   T32]  ret_from_fork+0x514/0xb70
[ 1000.032693][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[ 1000.037823][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1000.043492][   T32]  ? __switch_to+0xc89/0x1420
[ 1000.048179][   T32]  ? __pfx_kthread+0x10/0x10
[ 1000.052770][   T32]  ret_from_fork_asm+0x1a/0x30
[ 1000.057558][   T32]  </TASK>
[ 1000.060780][   T32] Kernel Offset: disabled
[ 1000.065085][   T32] Rebooting in 86400 seconds..