last executing test programs:

12.930628259s ago: executing program 0 (id=532):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x4, 0x7fffffff, 0x8}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x3, 0xe}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0xfffc, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x54}}, 0x24040084)

12.419857109s ago: executing program 0 (id=537):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), r0)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbdf25090000006400038008000100010000000800030004000000140002007665744e315f6d616376746170000000060004000200000008000500e0000000140002006970766c616e31"], 0x78}, 0x1, 0x0, 0x0, 0x4885}, 0x0)

12.201177043s ago: executing program 0 (id=540):
syz_mount_image$jfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x381401a, &(0x7f0000000380)=ANY=[@ANYBLOB='errors=continue,usrquota,integrity,iocharset=cp857,noquota,grpquota,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c007bd598141a550dbf02d47ded539aef16b5f1cf677018ad5588131d50bbd580000000000000000b9b0fa44661887a1633f523184b4e52fbab2783d4a8e4c913491c6800c959a6cba88690ccbce67e3919"], 0x1, 0x61a4, &(0x7f0000000440)="$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")
open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fdatasync(r0)

10.712255795s ago: executing program 0 (id=552):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r3 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x1)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r3, 0x0)
syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x305cc6, 0x1, 0x0, 0x20a}, 0x0, &(0x7f00000000c0))
r4 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r4)

5.360990876s ago: executing program 4 (id=569):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r2)
sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="bbfb2bbd7000fddbdf21670000000800c400020000000800c3"], 0x24}}, 0x0)

5.278417019s ago: executing program 1 (id=570):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x10040)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
r1 = socket$netlink(0x10, 0x3, 0x4)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)

5.177422881s ago: executing program 4 (id=572):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x5, 0xe, 0x0, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

5.118510224s ago: executing program 1 (id=573):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]})
get_mempolicy(0x0, 0x0, 0x203, &(0x7f0000394000/0x3000)=nil, 0x3)

4.996163229s ago: executing program 1 (id=574):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0)
set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0)

4.870391891s ago: executing program 3 (id=575):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r2)
getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @local}, 0x14)

4.754255408s ago: executing program 1 (id=576):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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")
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f000000b700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002d80)=[{0x1010, 0x1, 0x3, "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"}, {0x48, 0x114, 0x7fffffff, "87b101b0f027ec1a6d5ff6bf8bf01d02c7d64fd8c0480f14e329d79e489d974d1928f8295a183eaed3efaa57ad60d4a94e"}, {0x68, 0x10c, 0xfa2a, "4be17b367b9e824923f856cc6a3dad5aa0ea40b7d6095dc16f994eb2b2b8cd0a51cfff6f26067f37a7ccb6939c6019cb31e798a1d6ec6bb0de5ed1cf15a908793ace89d2eadcd23f7090b79dcc48af2073"}, {0x1010, 0x0, 0x0, "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"}, {0x1b8, 0x119, 0x7, "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"}], 0x2288}}, {{0x0, 0x0, &(0x7f0000008000)=[{&(0x7f0000006f40)="e62c08a7faca3fba06746a9d38dcb2a76697a49c4de57cfbfce6f2662e6598d511e4391a871acab945c230948977b0c222cf999a06d032e5b335a1b6a3e0e0f400191822016bd33e2879a99ba3cd1435abd266a1b58673fd280d442c34e9f49b70f14cd3f51d794feaef9479cc085b9b79fa77573bfd0d9f35a7033e3292416c198c5bef80ca2ef1685b3f46d15fafcbf5b25aa89753c14cbcf99202780494f324beac68442b3c60aaa2fe3b65a7c09479c18b6ca235107d4725a5cb8c992ddc5b", 0xc1}], 0x1}}, {{0x0, 0x0, &(0x7f0000009000)=[{0x0}], 0x1}}], 0x3, 0x40080d0)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x48)
pwrite64(r2, &(0x7f0000000100)='2', 0x1, 0x1fecd)
fallocate(r1, 0x1, 0x8, 0x2000402)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3)

4.662796906s ago: executing program 4 (id=577):
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0)
syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x20, 0x4, 0x44, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r3)
sendmsg$NFC_CMD_DEP_LINK_UP(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}}, 0x0)

4.330802912s ago: executing program 0 (id=579):
socket$unix(0x1, 0x2, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8004)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r4, 0x5608, 0x3)
socket$unix(0x1, 0x3, 0x0)
getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f00000000c0), &(0x7f0000000180)=0x4)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8)
writev(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x4, 0x1a2, &(0x7f00000001c0)=ANY=[@ANYRES16=r2], 0x0)
socket$inet6(0xa, 0x1, 0x0)

3.591322688s ago: executing program 4 (id=581):
socket$key(0xf, 0x3, 0x2)
r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
recvmmsg(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000a00)}, 0x3}, {{&(0x7f0000000a80)=@caif, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000b00)=""/198, 0xc6}, {0x0}], 0x2, &(0x7f0000000cc0)=""/25, 0x19}, 0xf23a}], 0x2, 0x100, 0x0)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendfile(r5, r0, 0x0, 0xd0)

3.290727088s ago: executing program 3 (id=583):
r0 = socket$kcm(0x2b, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000400)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
keyctl$read(0x16, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818)
ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000001c0)=0x1)
ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f0000000040)={0x0, 0x2, 0xad8})
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8002)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x118, 0xc8, 0x8, 0x0, 0x5803, 0x228, 0x2e8, 0x2e8, 0x228, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @private0, [0xffffffff, 0xffffff00, 0xff, 0xff], [0xff, 0xff, 0x0, 0xff000000], 'wlan0\x00', 'syzkaller1\x00', {}, {0xff}, 0x32, 0x3, 0x3, 0x4}, 0x0, 0xd8, 0x118, 0x0, {0x0, 0x2000000000000}, [@common=@inet=@esp={{0x30}, {[0x4d4, 0x4d3], 0x1}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x81, 0xff, {0x4}}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0x4], 0x81, 0x32, 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x3, 0x1}, {0x1, 0x4, 0x4}, {0x0, 0x3, 0x1}, 0x4, 0x101}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358)

2.594382751s ago: executing program 2 (id=584):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf4}}, 0x0)

2.390705141s ago: executing program 1 (id=585):
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x7}, 0x18)
connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000e40)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffff53a2513743897e44000d0001007564703aa3"], 0x54}}, 0x0)

2.372377659s ago: executing program 2 (id=586):
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x4d, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x2c, r2, 0xc4fc9e906872338b, 0x70bd2a, 0x1000, {{0x15}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc040000}, 0x4008040)

2.086450199s ago: executing program 2 (id=587):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000008c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xef4, 0x30, 0x30, 0x0, @in6={0xa, 0x4e23, 0x1000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xd}, @ib={0x1b, 0xf, 0xffa, {"509163000000f8ffffff0007f700"}, 0x8000000000000001, 0x8, 0x3}}}, 0x118)

2.037671099s ago: executing program 2 (id=588):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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")
truncate(&(0x7f0000000900)='./file1\x00', 0x24b9)

1.873981707s ago: executing program 1 (id=589):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r3 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x1)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r3, 0x0)
syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x305cc6, 0x1, 0x0, 0x20a}, 0x0, &(0x7f00000000c0))
r4 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r4)

1.721739659s ago: executing program 3 (id=590):
r0 = syz_io_uring_setup(0x10c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
io_uring_setup(0xaae, &(0x7f00000003c0)={0x0, 0xffffeffa, 0x800, 0x7, 0x2})
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800)
recvmmsg(r5, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}], 0x1, 0x40012100, 0x0)

1.65440989s ago: executing program 3 (id=591):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0x9, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4204, r0, 0x1, &(0x7f0000000340)={0x0})

1.602555535s ago: executing program 2 (id=592):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000e80)='kfree\x00', r1}, 0xa)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd7000ffdbdf25090000006400038008000100010000000800030004000000140002007665744e315f6d616376746170000000060004000200000008000500e0000000140002006970766c616e31"], 0x78}, 0x1, 0x0, 0x0, 0x4885}, 0x0)

1.523951855s ago: executing program 3 (id=593):
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = syz_open_dev$sg(0x0, 0x0, 0x800)
ioctl$SG_IO(r0, 0x2285, 0x0)
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00')
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x8001000d, 0xad, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x8d}, 0x90)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
ioctl(0xffffffffffffffff, 0x8b1a, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0)
ioctl(0xffffffffffffffff, 0x8b1a, &(0x7f0000000040))
pread64(r2, &(0x7f0000000080)=""/102355, 0x18fd3, 0xc2a)

546.174867ms ago: executing program 2 (id=594):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4)
sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb00000800060000000000080005000000000024000780"], 0xd0}}, 0x0)

519.886959ms ago: executing program 3 (id=595):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800718, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000000bc0)="$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")

412.542174ms ago: executing program 0 (id=596):
socket$packet(0x11, 0xa, 0x300)
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0xa, 0x300)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)

845.227µs ago: executing program 4 (id=597):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18)
r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_VERSION_NUM(r1, 0x2284, &(0x7f0000000080))

0s ago: executing program 4 (id=598):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
vmsplice(r2, 0x0, 0x0, 0x4)
chroot(&(0x7f0000000180)='./file1\x00')
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f0000001640), 0x0, &(0x7f00000013c0)=ANY=[@ANYRES16, @ANYBLOB])
chdir(&(0x7f0000000300)='./file0\x00')
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fedbdf099700000008000300", @ANYRES32=r6, @ANYBLOB="08002600851600000a000600ffffffffffff000004000b00050008000000000008003500000000000a0034"], 0x50}, 0x1, 0x0, 0x0, 0x20040040}, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
removexattr(0x0, &(0x7f0000000280)=@known='trusted.overlay.impure\x00')
socket$inet_sctp(0x2, 0x5, 0x84)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r7, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x12, @local, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="f8", 0x1}], 0x1}, 0x2c01}], 0x1, 0x4c851)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.135' (ED25519) to the list of known hosts.
[   66.695437][ T5815] cgroup: Unknown subsys name 'net'
[   66.822336][ T5815] cgroup: Unknown subsys name 'cpuset'
[   66.831075][ T5815] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   68.219077][ T5815] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   70.313939][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   70.322240][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   70.330897][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   70.338429][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   70.347490][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   70.371494][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   70.372334][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   70.387933][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   70.389782][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   70.403763][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   70.405179][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   70.415806][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   70.421133][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   70.426004][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   70.433215][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   70.442557][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   70.453322][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   70.457145][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   70.462727][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   70.476949][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   70.478010][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   70.491559][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   70.506750][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   70.515120][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   70.523549][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   70.902441][ T5825] chnl_net:caif_netlink_parms(): no params data found
[   71.139473][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.146686][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.154607][ T5825] bridge_slave_0: entered allmulticast mode
[   71.161744][ T5825] bridge_slave_0: entered promiscuous mode
[   71.170351][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.177427][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.184820][ T5825] bridge_slave_1: entered allmulticast mode
[   71.191794][ T5825] bridge_slave_1: entered promiscuous mode
[   71.281303][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   71.322695][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.347140][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[   71.353638][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[   71.376561][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   71.396490][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.520036][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   71.532524][ T5825] team0: Port device team_slave_0 added
[   71.544238][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   71.564427][ T5825] team0: Port device team_slave_1 added
[   71.663725][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.671102][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.697012][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.736571][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.743859][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.751101][ T5831] bridge_slave_0: entered allmulticast mode
[   71.758017][ T5831] bridge_slave_0: entered promiscuous mode
[   71.766266][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.773348][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.799267][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.829000][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.836303][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.843585][ T5831] bridge_slave_1: entered allmulticast mode
[   71.850597][ T5831] bridge_slave_1: entered promiscuous mode
[   71.882664][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.889813][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.896927][ T5841] bridge_slave_0: entered allmulticast mode
[   71.904210][ T5841] bridge_slave_0: entered promiscuous mode
[   71.950634][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.957827][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.965638][ T5841] bridge_slave_1: entered allmulticast mode
[   71.973360][ T5841] bridge_slave_1: entered promiscuous mode
[   71.997326][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.017342][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.024536][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.031944][ T5833] bridge_slave_0: entered allmulticast mode
[   72.039100][ T5833] bridge_slave_0: entered promiscuous mode
[   72.073744][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.107456][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.114998][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.122528][ T5833] bridge_slave_1: entered allmulticast mode
[   72.129575][ T5833] bridge_slave_1: entered promiscuous mode
[   72.140274][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.173252][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.180565][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.187705][ T5828] bridge_slave_0: entered allmulticast mode
[   72.194853][ T5828] bridge_slave_0: entered promiscuous mode
[   72.215627][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.230486][ T5825] hsr_slave_0: entered promiscuous mode
[   72.236813][ T5825] hsr_slave_1: entered promiscuous mode
[   72.245547][ T5831] team0: Port device team_slave_0 added
[   72.251588][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.258741][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.265953][ T5828] bridge_slave_1: entered allmulticast mode
[   72.273309][ T5828] bridge_slave_1: entered promiscuous mode
[   72.318255][ T5831] team0: Port device team_slave_1 added
[   72.360489][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.372921][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.384281][ T5841] team0: Port device team_slave_0 added
[   72.390994][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.397933][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   72.423951][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.470352][ T5841] team0: Port device team_slave_1 added
[   72.487401][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.494621][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   72.521188][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.532501][ T5150] Bluetooth: hci2: command tx timeout
[   72.540772][ T5150] Bluetooth: hci0: command tx timeout
[   72.542923][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.574197][ T5833] team0: Port device team_slave_0 added
[   72.583919][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.609639][ T5150] Bluetooth: hci3: command tx timeout
[   72.609912][ T5839] Bluetooth: hci1: command tx timeout
[   72.620893][ T5842] Bluetooth: hci4: command tx timeout
[   72.628962][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.636255][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   72.662200][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.675386][ T5833] team0: Port device team_slave_1 added
[   72.708238][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.715316][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   72.741617][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.809947][ T5828] team0: Port device team_slave_0 added
[   72.826597][ T5831] hsr_slave_0: entered promiscuous mode
[   72.832978][ T5831] hsr_slave_1: entered promiscuous mode
[   72.839024][ T5831] debugfs: 'hsr0' already exists in 'hsr'
[   72.845744][ T5831] Cannot create hsr debugfs directory
[   72.855505][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.862606][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   72.888635][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.901806][ T5828] team0: Port device team_slave_1 added
[   72.926906][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.934323][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   72.960471][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.072126][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.079086][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   73.105520][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.118676][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.126327][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   73.152334][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.179552][ T5841] hsr_slave_0: entered promiscuous mode
[   73.185843][ T5841] hsr_slave_1: entered promiscuous mode
[   73.192172][ T5841] debugfs: 'hsr0' already exists in 'hsr'
[   73.197907][ T5841] Cannot create hsr debugfs directory
[   73.298336][ T5833] hsr_slave_0: entered promiscuous mode
[   73.304644][ T5833] hsr_slave_1: entered promiscuous mode
[   73.311321][ T5833] debugfs: 'hsr0' already exists in 'hsr'
[   73.317055][ T5833] Cannot create hsr debugfs directory
[   73.446656][ T5828] hsr_slave_0: entered promiscuous mode
[   73.454020][ T5828] hsr_slave_1: entered promiscuous mode
[   73.461486][ T5828] debugfs: 'hsr0' already exists in 'hsr'
[   73.467211][ T5828] Cannot create hsr debugfs directory
[   73.633357][ T5825] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   73.644222][ T5825] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   73.677986][ T5825] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   73.704275][ T5825] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   73.825265][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   73.835908][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   73.861335][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   73.871936][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   73.947610][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   73.963706][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   73.974875][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   74.000832][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   74.085096][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   74.100811][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   74.111963][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   74.136682][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   74.250445][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   74.261848][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   74.284179][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   74.294104][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   74.316776][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.341462][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.382560][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.412969][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   74.424047][ T5825] 8021q: adding VLAN 0 to HW filter on device team0
[   74.439018][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.446309][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.483356][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.490492][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.503424][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.510549][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.526968][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   74.552457][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.559723][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.578687][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.585861][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.604596][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.611362][ T5842] Bluetooth: hci2: command tx timeout
[   74.613005][ T5839] Bluetooth: hci0: command tx timeout
[   74.643507][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.650678][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.689999][ T5839] Bluetooth: hci4: command tx timeout
[   74.690018][ T5842] Bluetooth: hci1: command tx timeout
[   74.695602][ T5150] Bluetooth: hci3: command tx timeout
[   74.734164][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   74.758667][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.765785][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.794365][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.801475][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.865944][ T5841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   74.963482][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.041209][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   75.094907][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.102114][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.150419][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.157577][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.303693][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.430221][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.462202][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.502748][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.653623][ T5831] veth0_vlan: entered promiscuous mode
[   75.714952][ T5831] veth1_vlan: entered promiscuous mode
[   75.726945][ T5833] veth0_vlan: entered promiscuous mode
[   75.780104][ T5841] veth0_vlan: entered promiscuous mode
[   75.811553][ T5833] veth1_vlan: entered promiscuous mode
[   75.828059][ T5841] veth1_vlan: entered promiscuous mode
[   75.837969][ T5831] veth0_macvtap: entered promiscuous mode
[   75.851193][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.880078][ T5831] veth1_macvtap: entered promiscuous mode
[   75.963730][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.984560][ T5825] veth0_vlan: entered promiscuous mode
[   75.996598][ T5833] veth0_macvtap: entered promiscuous mode
[   76.004756][ T5841] veth0_macvtap: entered promiscuous mode
[   76.026147][ T5825] veth1_vlan: entered promiscuous mode
[   76.035764][ T5833] veth1_macvtap: entered promiscuous mode
[   76.046557][ T5841] veth1_macvtap: entered promiscuous mode
[   76.072459][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.081351][ T5828] veth0_vlan: entered promiscuous mode
[   76.111168][   T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.121484][   T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.140050][   T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.151075][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.166968][   T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.176908][ T5828] veth1_vlan: entered promiscuous mode
[   76.199671][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.236345][   T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.245834][   T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.263304][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.278962][   T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.288743][   T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.303549][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.338579][ T5825] veth0_macvtap: entered promiscuous mode
[   76.353614][ T5825] veth1_macvtap: entered promiscuous mode
[   76.377082][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.406767][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.415709][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.442606][ T5828] veth0_macvtap: entered promiscuous mode
[   76.453699][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.489261][ T5828] veth1_macvtap: entered promiscuous mode
[   76.499162][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.509455][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.537486][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.554155][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.562757][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.594126][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.614251][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.646973][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.656019][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.664247][   T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.674218][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.677010][   T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.690642][ T5150] Bluetooth: hci2: command tx timeout
[   76.701836][ T5150] Bluetooth: hci0: command tx timeout
[   76.727809][   T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.737346][   T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.749823][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.757636][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.771196][ T5150] Bluetooth: hci1: command tx timeout
[   76.771755][ T5842] Bluetooth: hci4: command tx timeout
[   76.776597][ T5150] Bluetooth: hci3: command tx timeout
[   76.794499][ T1157] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.827146][ T1157] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.837961][   T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.858990][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.874154][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.885833][   T60] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.898086][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.901055][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   76.919372][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.142428][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.165653][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.323328][ T5951] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   78.377249][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   78.386184][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   78.786301][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   78.888625][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   79.093671][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   79.298254][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   79.400663][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   79.498531][ T5150] Bluetooth: hci0: command tx timeout
[   79.504303][ T5150] Bluetooth: hci2: command tx timeout
[   79.511064][ T5839] Bluetooth: hci3: command tx timeout
[   79.511086][ T5838] Bluetooth: hci1: command tx timeout
[   79.525013][ T5842] Bluetooth: hci4: command tx timeout
[   79.605990][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   79.810340][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   80.015122][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   80.560532][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.568368][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.609649][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.623570][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.877554][ T5958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.891301][ T5958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.641178][  T797] cfg80211: failed to load regulatory.db
[   82.056210][ T5971] loop0: detected capacity change from 0 to 256
[   82.090609][ T5971] =======================================================
[   82.090609][ T5971] WARNING: The mand mount option has been deprecated and
[   82.090609][ T5971]          and is ignored by this kernel. Remove the mand
[   82.090609][ T5971]          option from the mount to silence this warning.
[   82.090609][ T5971] =======================================================
[   82.397492][ T5971] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[   82.881219][ T5994] input: syz0 as /devices/virtual/input/input5
[   85.570171][ T5838] Bluetooth: hci4: command 0x0405 tx timeout
[   87.435836][ T6018] warning: `syz.2.19' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   87.907700][   T30] audit: type=1326 audit(1761704831.437:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6013 comm="syz.2.19" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5322d8efc9 code=0x0
[   88.192152][ T6025] netlink: 92 bytes leftover after parsing attributes in process `syz.4.18'.
[   88.240326][ T6025] netlink: 32 bytes leftover after parsing attributes in process `syz.4.18'.
[   88.932847][ T6039] input: syz0 as /devices/virtual/input/input6
[   93.615103][   T30] audit: type=1326 audit(1761704837.127:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6065 comm="syz.0.33" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f860318efc9 code=0x0
[   94.112814][ T6075] hub 6-0:1.0: USB hub found
[   94.119484][ T6075] hub 6-0:1.0: 1 port detected
[   94.147999][ T6056] loop3: detected capacity change from 0 to 32768
[   94.476446][ T6082] input: syz0 as /devices/virtual/input/input7
[   96.282384][ T5827] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   96.553640][ T6110] loop2: detected capacity change from 0 to 2048
[   96.560053][ T5827] usb 2-1: Using ep0 maxpacket: 8
[   96.583102][ T5827] usb 2-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30
[   96.815423][ T5827] usb 2-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[   96.863730][ T5827] usb 2-1: config 0 interface 0 has no altsetting 0
[   96.879476][ T5827] usb 2-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00
[   96.888663][ T5827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.924696][ T6110] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   96.961752][ T5827] usb 2-1: config 0 descriptor??
[   97.318567][ T6118] Zero length message leads to an empty skb
[   97.882901][ T5827] glorious 0003:258A:0033.0001: unknown main item tag 0x0
[   97.902812][ T5827] glorious 0003:258A:0033.0001: hidraw0: USB HID vf4.f6 Device [Glorious Model D] on usb-dummy_hcd.1-1/input0
[   98.066205][ T5827] usb 2-1: USB disconnect, device number 2
[   98.250222][ T6123] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   98.411207][ T6125] loop3: detected capacity change from 0 to 1024
[   98.874979][ T6119] fido_id[6119]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[   99.442221][ T6134] hub 6-0:1.0: USB hub found
[   99.500646][ T6135] input: syz0 as /devices/virtual/input/input8
[   99.946960][ T6134] hub 6-0:1.0: 1 port detected
[  101.071279][ T6147] loop0: detected capacity change from 0 to 512
[  101.121115][ T6147] EXT4-fs: Ignoring removed mblk_io_submit option
[  101.201071][ T6147] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13
[  101.339063][ T6147] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.55: attempt to clear invalid blocks 2 len 1
[  101.427858][ T6147] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  101.513362][ T6147] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.55: invalid indirect mapped block 1819239214 (level 0)
[  101.589524][ T6147] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.55: invalid indirect mapped block 1819239214 (level 1)
[  101.715271][ T6147] EXT4-fs (loop0): 1 truncate cleaned up
[  101.743725][ T6147] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  102.614254][ T6166] loop3: detected capacity change from 0 to 1024
[  102.694781][   T30] audit: type=1326 audit(1761704846.107:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6163 comm="syz.1.61" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6dcc78efc9 code=0x0
[  102.800124][ T6170] fuse: Unknown parameter 'user_i00000000000000000000'
[  102.860609][ T6147] netlink: 'syz.0.55': attribute type 1 has an invalid length.
[  102.868162][ T6147] netlink: 224 bytes leftover after parsing attributes in process `syz.0.55'.
[  103.078087][ T6173] hub 6-0:1.0: USB hub found
[  103.084553][ T6173] hub 6-0:1.0: 1 port detected
[  103.187411][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.348216][ T6154] loop2: detected capacity change from 0 to 32768
[  103.438580][ T6154] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  103.881409][ T6188] input: syz0 as /devices/virtual/input/input9
[  104.424840][ T6175] loop4: detected capacity change from 0 to 32768
[  104.458780][ T6175] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.64 (6175)
[  104.502294][ T6154] XFS (loop2): Ending clean mount
[  104.555994][ T6175] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  104.631057][ T6175] BTRFS info (device loop4): using blake2b (blake2b-256-lib) checksum algorithm
[  104.632588][ T6154] XFS (loop2): Quotacheck needed: Please wait.
[  105.592844][ T6154] XFS (loop2): Quotacheck: Done.
[  105.763625][ T6214] loop3: detected capacity change from 0 to 2048
[  106.275184][ T6175] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  106.293535][ T6214] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  106.558964][ T6175] BTRFS error (device loop4): open_ctree failed: -12
[  106.571558][ T5841] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  108.242658][ T6235] loop0: detected capacity change from 0 to 512
[  108.533112][ T6235] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.744625][ T6248] hub 6-0:1.0: USB hub found
[  108.749963][ T6248] hub 6-0:1.0: 1 port detected
[  108.851672][ T6235] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  109.023924][ T6236] evm: overlay not supported
[  111.621047][ T6260] input: syz0 as /devices/virtual/input/input10
[  111.982349][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.030991][ T6265] loop0: detected capacity change from 0 to 1764
[  113.210237][ T6272] loop4: detected capacity change from 0 to 2048
[  113.250381][ T6272] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  113.359246][ T6265] isofs_fill_super: get root inode failed
[  113.906546][ T6275] fuse: Unknown parameter 'user_i00000000000000000000'
[  114.961696][ T6287] hub 6-0:1.0: USB hub found
[  114.969453][ T6287] hub 6-0:1.0: 1 port detected
[  115.419922][ T6296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.93'.
[  115.831238][ T6302] input: syz0 as /devices/virtual/input/input11
[  116.220045][ T6304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.93'.
[  117.138775][ T6309] loop1: detected capacity change from 0 to 1024
[  119.570046][ T6322] fuse: Unknown parameter 'user_id00000000000000000000'
[  120.004207][ T6332] hub 6-0:1.0: USB hub found
[  120.011520][ T6332] hub 6-0:1.0: 1 port detected
[  122.109557][ T5897] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  122.457173][   T30] audit: type=1326 audit(1761704866.437:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6338 comm="syz.3.105" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6c78b8efc9 code=0x0
[  122.578982][ T5897] usb 3-1: config 0 interface 0 has no altsetting 0
[  123.211699][ T5897] usb 3-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00
[  123.829179][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.894924][ T5897] usb 3-1: config 0 descriptor??
[  123.918689][ T5897] usb 3-1: can't set config #0, error -71
[  124.294024][ T6358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.109'.
[  124.726532][ T5897] usb 3-1: USB disconnect, device number 2
[  125.479528][ T6365] loop2: detected capacity change from 0 to 1024
[  126.882300][ T6376] loop3: detected capacity change from 0 to 512
[  127.071030][ T6376] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  127.188977][ T6376] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  127.283539][ T6378] hub 6-0:1.0: USB hub found
[  127.288487][ T6378] hub 6-0:1.0: 1 port detected
[  127.440205][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.501266][ T6411] loop3: detected capacity change from 0 to 2048
[  130.561100][ T6411] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  131.463895][ T6398] loop1: detected capacity change from 0 to 32768
[  131.534640][ T6398] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  131.748763][ T6398] XFS (loop1): Ending clean mount
[  131.828580][ T6398] XFS (loop1): Quotacheck needed: Please wait.
[  131.890611][ T6436] hub 6-0:1.0: USB hub found
[  131.895512][ T6436] hub 6-0:1.0: 1 port detected
[  132.657527][ T6398] XFS (loop1): Quotacheck: Done.
[  132.783353][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  132.827196][ T5831] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  135.827372][ T6466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.140'.
[  136.695576][ T6480] hub 6-0:1.0: USB hub found
[  136.700679][ T6480] hub 6-0:1.0: 1 port detected
[  139.001032][ T6478] loop3: detected capacity change from 0 to 32768
[  139.051301][ T6478] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.143 (6478)
[  139.307310][ T6478] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  139.337891][ T6478] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  139.410145][ T6495] delete_channel: no stack
[  139.417222][ T6495] loop1: detected capacity change from 0 to 22
[  139.424997][ T6495] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  139.555163][ T6478] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR
[  139.562084][ T6478] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[  139.660325][ T6495] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  139.935523][ T6478] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  139.935848][ T6478] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  140.039187][ T6487] loop4: detected capacity change from 0 to 40427
[  140.040327][ T6478] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[  140.080800][ T6478] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  140.129943][ T6478] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  140.151530][ T6487] F2FS-fs (loop4): invalid crc value
[  140.233037][ T6489] loop0: detected capacity change from 0 to 40427
[  140.329612][ T6478] BTRFS error (device loop3): open_ctree failed: -12
[  140.355657][ T6489] F2FS-fs (loop0): Image doesn't support compression
[  140.378634][ T6489] F2FS-fs (loop0): build fault injection rate: 684
[  140.429838][ T6489] F2FS-fs (loop0): build fault injection type: 0x35f7
[  140.486992][   T30] audit: type=1326 audit(1761704884.467:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6508 comm="syz.1.150" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6dcc78efc9 code=0x0
[  140.896180][ T6489] F2FS-fs (loop0): invalid crc value
[  141.103914][ T6487] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  141.289925][ T6487] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  141.790928][ T6526] loop1: detected capacity change from 0 to 1024
[  142.984620][ T6489] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  143.040834][ T6489] F2FS-fs (loop0): Start checkpoint disabled!
[  143.141220][ T6489] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0
[  143.663297][ T6533] hub 6-0:1.0: USB hub found
[  143.668240][ T6533] hub 6-0:1.0: 1 port detected
[  143.946522][ T6537] hub 6-0:1.0: USB hub found
[  143.951544][ T6537] hub 6-0:1.0: 1 port detected
[  145.839522][ T6553] delete_channel: no stack
[  145.859527][ T6553] loop1: detected capacity change from 0 to 22
[  145.895456][ T6553] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  145.930653][ T6553] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  146.822385][ T6565] loop4: detected capacity change from 0 to 1024
[  152.439105][ T6610] loop1: detected capacity change from 0 to 1024
[  154.121454][ T5897] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  154.289437][ T5897] usb 1-1: Using ep0 maxpacket: 8
[  154.336593][ T5897] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  154.388602][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.432446][ T5897] usb 1-1: Product: syz
[  154.436645][ T5897] usb 1-1: Manufacturer: syz
[  154.493156][ T5897] usb 1-1: SerialNumber: syz
[  154.690825][ T5897] usb 1-1: config 0 descriptor??
[  154.918110][ T5897] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  156.742375][ T6642] loop4: detected capacity change from 0 to 512
[  156.770102][ T6642] EXT4-fs: Ignoring removed i_version option
[  156.796506][ T6642] EXT4-fs: Ignoring removed bh option
[  156.835116][ T6642] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  156.850846][ T6642] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  157.037881][ T5825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.260618][ T5897] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  158.287680][ T5897] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick)
[  158.296795][ T5897] usb 1-1: media controller created
[  158.424005][ T6660] loop4: detected capacity change from 0 to 1024
[  158.527308][ T5897] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  158.602500][ T5897] dvb_usb_rtl28xxu 1-1:0.0: unknown tuner MXL5007T
[  159.409232][ T5897] usb 1-1: USB disconnect, device number 2
[  160.866074][ T6666] loop2: detected capacity change from 0 to 40427
[  160.916982][ T6683] loop0: detected capacity change from 0 to 512
[  160.931381][ T6683] EXT4-fs: Ignoring removed i_version option
[  160.954141][ T6683] EXT4-fs: Ignoring removed bh option
[  160.964661][ T6666] F2FS-fs (loop2): Image doesn't support compression
[  160.984211][ T6666] F2FS-fs (loop2): build fault injection rate: 684
[  161.032076][ T6666] F2FS-fs (loop2): build fault injection type: 0x35f7
[  161.045668][ T6683] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  161.078264][ T6666] F2FS-fs (loop2): invalid crc value
[  161.189792][ T6683] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  161.496385][ T6692] hub 6-0:1.0: USB hub found
[  161.501364][ T6692] hub 6-0:1.0: 1 port detected
[  161.615441][ T6666] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  161.686975][ T6666] F2FS-fs (loop2): Start checkpoint disabled!
[  161.740843][ T6666] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0
[  161.777362][ T6666] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  162.091588][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.111396][ T6695] F2FS-fs (loop2): inject kvmalloc in f2fs_kvmalloc of f2fs_insert_range+0x3aa/0x490
[  162.429563][   T36] kworker/u8:2: attempt to access beyond end of device
[  162.429563][   T36] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  162.528410][   T36] CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) 
[  162.528436][   T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  162.528447][   T36] Workqueue: writeback wb_workfn (flush-7:2)
[  162.528482][   T36] Call Trace:
[  162.528490][   T36]  <TASK>
[  162.528499][   T36]  dump_stack_lvl+0x189/0x250
[  162.528525][   T36]  ? lockdep_hardirqs_on+0x9c/0x150
[  162.528549][   T36]  ? __pfx_dump_stack_lvl+0x10/0x10
[  162.528580][   T36]  ? dump_stack+0x9/0x20
[  162.528609][   T36]  f2fs_handle_critical_error+0x37c/0x540
[  162.528642][   T36]  f2fs_write_end_io+0x886/0xb60
[  162.528678][   T36]  __submit_merged_bio+0x27a/0x6a0
[  162.528709][   T36]  __submit_merged_write_cond+0x255/0x530
[  162.528740][   T36]  f2fs_write_data_pages+0x261d/0x3000
[  162.528792][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  162.528825][   T36]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  162.528881][   T36]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  162.528920][   T36]  ? trace_f2fs_writepages+0x7f/0x200
[  162.528946][   T36]  ? f2fs_write_node_pages+0x478/0x6e0
[  162.528976][   T36]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  162.529005][   T36]  ? __lock_acquire+0xab9/0xd20
[  162.529032][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  162.529051][   T36]  do_writepages+0x32e/0x550
[  162.529086][   T36]  ? reacquire_held_locks+0x127/0x1d0
[  162.529107][   T36]  ? writeback_sb_inodes+0x384/0x1010
[  162.529140][   T36]  __writeback_single_inode+0x145/0xff0
[  162.529164][   T36]  ? do_raw_spin_unlock+0x122/0x240
[  162.529193][   T36]  writeback_sb_inodes+0x6c7/0x1010
[  162.529224][   T36]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  162.529262][   T36]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  162.529331][   T36]  ? rcu_is_watching+0x15/0xb0
[  162.529359][   T36]  wb_writeback+0x43b/0xaf0
[  162.529391][   T36]  ? queue_io+0x301/0x590
[  162.529417][   T36]  ? __pfx_wb_writeback+0x10/0x10
[  162.529448][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  162.529473][   T36]  wb_workfn+0x409/0xef0
[  162.529509][   T36]  ? __pfx_wb_workfn+0x10/0x10
[  162.529535][   T36]  ? __lock_acquire+0xab9/0xd20
[  162.529566][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  162.529593][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  162.529612][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  162.529631][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  162.529654][   T36]  process_scheduled_works+0xae1/0x17b0
[  162.529705][   T36]  ? __pfx_process_scheduled_works+0x10/0x10
[  162.529744][   T36]  worker_thread+0x8a0/0xda0
[  162.529791][   T36]  kthread+0x711/0x8a0
[  162.529819][   T36]  ? __pfx_worker_thread+0x10/0x10
[  162.529839][   T36]  ? __pfx_kthread+0x10/0x10
[  162.529865][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  162.529884][   T36]  ? lockdep_hardirqs_on+0x9c/0x150
[  162.529904][   T36]  ? __pfx_kthread+0x10/0x10
[  162.529928][   T36]  ret_from_fork+0x4bc/0x870
[  162.529951][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[  162.529979][   T36]  ? __switch_to_asm+0x39/0x70
[  162.529995][   T36]  ? __switch_to_asm+0x33/0x70
[  162.530009][   T36]  ? __pfx_kthread+0x10/0x10
[  162.530034][   T36]  ret_from_fork_asm+0x1a/0x30
[  162.530068][   T36]  </TASK>
[  162.874353][   T36] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  163.042878][ T6703] loop3: detected capacity change from 0 to 32768
[  163.085903][ T6703] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode.
[  163.187863][   T30] audit: type=1400 audit(1761704907.177:7): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=6702 comm="syz.3.206"
[  163.315880][ T6704] loop0: detected capacity change from 0 to 512
[  163.810188][ T6704] EXT4-fs: Ignoring removed mblk_io_submit option
[  164.511442][ T6704] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13
[  164.540054][ T5828] ocfs2: Unmounting device (7,3) on (node local)
[  164.568375][ T6704] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.205: attempt to clear invalid blocks 2 len 1
[  164.621752][ T6704] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  164.667637][ T6704] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.205: invalid indirect mapped block 1819239214 (level 0)
[  164.687779][ T6704] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.205: invalid indirect mapped block 1819239214 (level 1)
[  164.748544][ T6704] EXT4-fs (loop0): 1 truncate cleaned up
[  164.851938][ T6704] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.043015][ T6704] netlink: 'syz.0.205': attribute type 1 has an invalid length.
[  165.050732][ T6704] netlink: 224 bytes leftover after parsing attributes in process `syz.0.205'.
[  165.202588][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.575045][ T6727] delete_channel: no stack
[  165.581440][ T6727] loop1: detected capacity change from 0 to 22
[  165.588274][ T6727] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  165.601939][ T6727] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  165.801170][ T6732] loop1: detected capacity change from 0 to 512
[  165.823287][ T6732] EXT4-fs: Ignoring removed i_version option
[  165.881178][ T6732] EXT4-fs: Ignoring removed bh option
[  165.935965][ T6732] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  166.103835][ T6732] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  166.216281][ T5831] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.976207][ T6751] loop4: detected capacity change from 0 to 2048
[  167.079110][ T6751] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  167.863782][ T6736] loop0: detected capacity change from 0 to 40427
[  167.901308][ T6736] F2FS-fs (loop0): Image doesn't support compression
[  167.944230][ T6736] F2FS-fs (loop0): build fault injection rate: 684
[  167.990180][ T6736] F2FS-fs (loop0): build fault injection type: 0x35f7
[  168.096200][ T6736] F2FS-fs (loop0): invalid crc value
[  169.368316][ T6763] loop2: detected capacity change from 0 to 512
[  169.376288][ T6763] EXT4-fs: Ignoring removed mblk_io_submit option
[  169.426687][ T6763] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[  169.466411][ T6763] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.222: attempt to clear invalid blocks 2 len 1
[  169.493117][ T6736] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  169.515261][ T6763] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  169.525037][ T6736] F2FS-fs (loop0): Start checkpoint disabled!
[  169.577935][ T6736] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0
[  169.609471][ T6763] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.222: invalid indirect mapped block 1819239214 (level 0)
[  169.754276][ T6763] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.222: invalid indirect mapped block 1819239214 (level 1)
[  169.817344][ T6763] EXT4-fs (loop2): 1 truncate cleaned up
[  169.831056][ T6763] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  169.940882][ T6772] netlink: 'syz.2.222': attribute type 1 has an invalid length.
[  169.949908][ T6772] netlink: 224 bytes leftover after parsing attributes in process `syz.2.222'.
[  170.252836][ T5841] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.966530][ T6779] input: syz0 as /devices/virtual/input/input12
[  171.075132][ T6777] delete_channel: no stack
[  171.083194][ T6777] loop0: detected capacity change from 0 to 22
[  171.090478][ T6777] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  171.160178][ T6777] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  171.768642][ T6791] netlink: 92 bytes leftover after parsing attributes in process `syz.2.229'.
[  171.777958][ T6791] netlink: 32 bytes leftover after parsing attributes in process `syz.2.229'.
[  172.677818][ T6802] loop4: detected capacity change from 0 to 2048
[  172.711571][ T6802] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  176.636854][ T6815] loop1: detected capacity change from 0 to 40427
[  176.682650][ T6815] F2FS-fs (loop1): Image doesn't support compression
[  176.725807][ T6815] F2FS-fs (loop1): build fault injection rate: 684
[  176.763299][ T6815] F2FS-fs (loop1): build fault injection type: 0x35f7
[  176.816145][ T6815] F2FS-fs (loop1): invalid crc value
[  177.143392][ T6815] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  177.173193][ T6815] F2FS-fs (loop1): Start checkpoint disabled!
[  177.234052][ T6815] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0
[  177.259700][ T6815] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  177.316241][ T6835] delete_channel: no stack
[  177.322901][ T6835] loop0: detected capacity change from 0 to 22
[  177.330158][ T6835] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  177.338396][ T6835] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  177.603014][ T6840] F2FS-fs (loop1): inject kvmalloc in f2fs_kvmalloc of f2fs_insert_range+0x3aa/0x490
[  177.850009][ T1157] kworker/u8:6: attempt to access beyond end of device
[  177.850009][ T1157] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  177.873142][ T1157] CPU: 0 UID: 0 PID: 1157 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) 
[  177.873167][ T1157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  177.873179][ T1157] Workqueue: writeback wb_workfn (flush-7:1)
[  177.873207][ T1157] Call Trace:
[  177.873215][ T1157]  <TASK>
[  177.873223][ T1157]  dump_stack_lvl+0x189/0x250
[  177.873253][ T1157]  ? __pfx_dump_stack_lvl+0x10/0x10
[  177.873278][ T1157]  ? __pfx_queue_work_on+0x10/0x10
[  177.873298][ T1157]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  177.873321][ T1157]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  177.873357][ T1157]  f2fs_handle_critical_error+0x37c/0x540
[  177.873392][ T1157]  f2fs_write_end_io+0x886/0xb60
[  177.873433][ T1157]  __submit_merged_bio+0x27a/0x6a0
[  177.873467][ T1157]  __submit_merged_write_cond+0x255/0x530
[  177.873502][ T1157]  f2fs_write_data_pages+0x261d/0x3000
[  177.873564][ T1157]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  177.873599][ T1157]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  177.873664][ T1157]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  177.873690][ T1157]  ? look_up_lock_class+0x74/0x170
[  177.873730][ T1157]  ? trace_f2fs_writepages+0x7f/0x200
[  177.873757][ T1157]  ? f2fs_write_node_pages+0x478/0x6e0
[  177.873789][ T1157]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  177.873819][ T1157]  ? __lock_acquire+0xab9/0xd20
[  177.873854][ T1157]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  177.873874][ T1157]  do_writepages+0x32e/0x550
[  177.873907][ T1157]  ? reacquire_held_locks+0x127/0x1d0
[  177.873928][ T1157]  ? writeback_sb_inodes+0x384/0x1010
[  177.873964][ T1157]  __writeback_single_inode+0x145/0xff0
[  177.873988][ T1157]  ? do_raw_spin_unlock+0x122/0x240
[  177.874018][ T1157]  writeback_sb_inodes+0x6c7/0x1010
[  177.874076][ T1157]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  177.874157][ T1157]  ? rcu_is_watching+0x15/0xb0
[  177.874192][ T1157]  wb_writeback+0x43b/0xaf0
[  177.874226][ T1157]  ? queue_io+0x301/0x590
[  177.874254][ T1157]  ? __pfx_wb_writeback+0x10/0x10
[  177.874289][ T1157]  ? _raw_spin_unlock_irq+0x23/0x50
[  177.874317][ T1157]  wb_workfn+0x409/0xef0
[  177.874357][ T1157]  ? __pfx_wb_workfn+0x10/0x10
[  177.874385][ T1157]  ? __lock_acquire+0xab9/0xd20
[  177.874420][ T1157]  ? process_scheduled_works+0x9ef/0x17b0
[  177.874449][ T1157]  ? _raw_spin_unlock_irq+0x23/0x50
[  177.874468][ T1157]  ? process_scheduled_works+0x9ef/0x17b0
[  177.874487][ T1157]  ? process_scheduled_works+0x9ef/0x17b0
[  177.874511][ T1157]  process_scheduled_works+0xae1/0x17b0
[  177.874570][ T1157]  ? __pfx_process_scheduled_works+0x10/0x10
[  177.874613][ T1157]  worker_thread+0x8a0/0xda0
[  177.874670][ T1157]  kthread+0x711/0x8a0
[  177.874699][ T1157]  ? __pfx_worker_thread+0x10/0x10
[  177.874720][ T1157]  ? __pfx_kthread+0x10/0x10
[  177.874747][ T1157]  ? _raw_spin_unlock_irq+0x23/0x50
[  177.874767][ T1157]  ? lockdep_hardirqs_on+0x9c/0x150
[  177.874786][ T1157]  ? __pfx_kthread+0x10/0x10
[  177.874812][ T1157]  ret_from_fork+0x4bc/0x870
[  177.874836][ T1157]  ? __pfx_ret_from_fork+0x10/0x10
[  177.874873][ T1157]  ? __switch_to_asm+0x39/0x70
[  177.874888][ T1157]  ? __switch_to_asm+0x33/0x70
[  177.874902][ T1157]  ? __pfx_kthread+0x10/0x10
[  177.874928][ T1157]  ret_from_fork_asm+0x1a/0x30
[  177.874968][ T1157]  </TASK>
[  178.187099][ T1157] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  179.552894][ T6861] loop1: detected capacity change from 0 to 2048
[  179.681467][ T6861] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  180.441277][ T6865] hub 6-0:1.0: USB hub found
[  180.446178][ T6865] hub 6-0:1.0: 1 port detected
[  184.177239][ T6886] delete_channel: no stack
[  184.183033][ T6886] loop1: detected capacity change from 0 to 22
[  184.189878][ T6886] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  184.209540][ T6886] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  185.229463][ T6902] netlink: 92 bytes leftover after parsing attributes in process `syz.0.255'.
[  185.238717][ T6902] netlink: 32 bytes leftover after parsing attributes in process `syz.0.255'.
[  186.862955][ T6911] loop0: detected capacity change from 0 to 2048
[  186.914004][ T6911] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  187.726526][ T6914] loop1: detected capacity change from 0 to 32768
[  187.803329][ T6914] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[  187.948943][ T6919] hub 6-0:1.0: USB hub found
[  187.954212][ T6919] hub 6-0:1.0: 1 port detected
[  188.770495][   T30] audit: type=1400 audit(1761704932.747:8): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=6912 comm="syz.1.258"
[  189.141980][ T5831] ocfs2: Unmounting device (7,1) on (node local)
[  190.920911][ T6939] delete_channel: no stack
[  190.927410][ T6939] loop4: detected capacity change from 0 to 22
[  190.934728][ T6939] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  191.005498][ T6939] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  194.258966][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  196.291192][ T5829] Bluetooth: hci2: command 0x0406 tx timeout
[  196.297247][ T5829] Bluetooth: hci0: command 0x0406 tx timeout
[  196.303630][ T5840] Bluetooth: hci1: command 0x0406 tx timeout
[  196.310515][ T5840] Bluetooth: hci3: command 0x0406 tx timeout
[  196.316588][ T5835] Bluetooth: hci4: command 0x0405 tx timeout
[  197.546159][ T6968] loop1: detected capacity change from 0 to 40427
[  197.629625][ T6968] F2FS-fs (loop1): Image doesn't support compression
[  197.645073][ T6968] F2FS-fs (loop1): build fault injection rate: 684
[  197.673486][ T6968] F2FS-fs (loop1): build fault injection type: 0x35f7
[  197.707114][ T6968] F2FS-fs (loop1): invalid crc value
[  197.902058][ T6990] loop2: detected capacity change from 0 to 2048
[  197.927266][ T6990] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  198.705224][ T6968] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  198.754320][ T6968] F2FS-fs (loop1): Start checkpoint disabled!
[  198.885628][ T6982] loop3: detected capacity change from 0 to 32768
[  198.904251][ T6982] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.275 (6982)
[  198.934160][ T6968] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0
[  200.372436][ T6996] hub 6-0:1.0: USB hub found
[  200.377765][ T6996] hub 6-0:1.0: 1 port detected
[  200.587790][ T6982] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  200.649956][ T6982] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  200.675858][ T6982] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR
[  200.677105][ T6982] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR
[  200.710127][ T6982] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[  200.748185][ T7005] loop4: detected capacity change from 0 to 512
[  200.758484][ T6982] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[  200.775639][ T6982] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  200.797542][ T6982] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  200.854893][ T6982] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  200.941355][ T6982] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[  200.952308][ T6982] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  200.963086][ T6982] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  200.973693][ T6982] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  200.984757][ T6982] BTRFS error (device loop3): open_ctree failed: -12
[  201.113199][ T7005] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  201.149700][ T7005] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  201.850256][ T5825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.312912][ T7044] loop3: detected capacity change from 0 to 128
[  203.430596][ T7044] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  203.500956][ T7044] ext4 filesystem being mounted at /57/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  203.951670][ T7051] loop0: detected capacity change from 0 to 40427
[  203.963113][ T7053] netlink: 72 bytes leftover after parsing attributes in process `syz.3.288'.
[  203.980666][ T7053] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni"
[  204.155756][ T7054] netlink: 28 bytes leftover after parsing attributes in process `syz.3.288'.
[  204.225190][ T7051] F2FS-fs (loop0): invalid crc value
[  204.242770][ T7053] fscrypt: loop3: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12
[  204.647900][ T5828] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  204.712357][ T7051] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  204.724393][ T7051] F2FS-fs (loop0): Start checkpoint disabled!
[  204.746065][ T7051] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0
[  204.759493][ T7051] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  204.792318][ T7058] loop2: detected capacity change from 0 to 512
[  204.836718][ T7058] EXT4-fs: Ignoring removed i_version option
[  204.875343][   T49] kworker/u8:3: attempt to access beyond end of device
[  204.875343][   T49] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  204.892462][ T7058] EXT4-fs: Ignoring removed bh option
[  204.935820][   T49] CPU: 0 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) 
[  204.935845][   T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  204.935856][   T49] Workqueue: writeback wb_workfn (flush-7:0)
[  204.935885][   T49] Call Trace:
[  204.935893][   T49]  <TASK>
[  204.935900][   T49]  dump_stack_lvl+0x189/0x250
[  204.935929][   T49]  ? __pfx_dump_stack_lvl+0x10/0x10
[  204.935960][   T49]  ? __pfx_queue_work_on+0x10/0x10
[  204.935980][   T49]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  204.936001][   T49]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  204.936033][   T49]  f2fs_handle_critical_error+0x37c/0x540
[  204.936066][   T49]  f2fs_write_end_io+0x886/0xb60
[  204.936100][   T49]  __submit_merged_bio+0x27a/0x6a0
[  204.936131][   T49]  __submit_merged_write_cond+0x255/0x530
[  204.936164][   T49]  f2fs_write_data_pages+0x261d/0x3000
[  204.936215][   T49]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  204.936247][   T49]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  204.936301][   T49]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  204.936326][   T49]  ? look_up_lock_class+0x74/0x170
[  204.936357][   T49]  ? trace_f2fs_writepages+0x7f/0x200
[  204.936382][   T49]  ? f2fs_write_node_pages+0x478/0x6e0
[  204.936410][   T49]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  204.936438][   T49]  ? __lock_acquire+0xab9/0xd20
[  204.936465][   T49]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  204.936484][   T49]  do_writepages+0x32e/0x550
[  204.936515][   T49]  ? reacquire_held_locks+0x127/0x1d0
[  204.936535][   T49]  ? writeback_sb_inodes+0x384/0x1010
[  204.936566][   T49]  __writeback_single_inode+0x145/0xff0
[  204.936589][   T49]  ? do_raw_spin_unlock+0x122/0x240
[  204.936616][   T49]  writeback_sb_inodes+0x6c7/0x1010
[  204.936665][   T49]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  204.936728][   T49]  ? rcu_is_watching+0x15/0xb0
[  204.936759][   T49]  wb_writeback+0x43b/0xaf0
[  204.936791][   T49]  ? queue_io+0x301/0x590
[  204.936818][   T49]  ? __pfx_wb_writeback+0x10/0x10
[  204.936849][   T49]  ? _raw_spin_unlock_irq+0x23/0x50
[  204.936874][   T49]  wb_workfn+0x409/0xef0
[  204.936908][   T49]  ? __pfx_wb_workfn+0x10/0x10
[  204.936933][   T49]  ? __lock_acquire+0xab9/0xd20
[  204.936970][   T49]  ? process_scheduled_works+0x9ef/0x17b0
[  204.936997][   T49]  ? _raw_spin_unlock_irq+0x23/0x50
[  204.937015][   T49]  ? process_scheduled_works+0x9ef/0x17b0
[  204.937033][   T49]  ? process_scheduled_works+0x9ef/0x17b0
[  204.937054][   T49]  process_scheduled_works+0xae1/0x17b0
[  204.937103][   T49]  ? __pfx_process_scheduled_works+0x10/0x10
[  204.937142][   T49]  worker_thread+0x8a0/0xda0
[  204.937192][   T49]  kthread+0x711/0x8a0
[  204.937223][   T49]  ? __pfx_worker_thread+0x10/0x10
[  204.937243][   T49]  ? __pfx_kthread+0x10/0x10
[  204.937268][   T49]  ? _raw_spin_unlock_irq+0x23/0x50
[  204.937286][   T49]  ? lockdep_hardirqs_on+0x9c/0x150
[  204.937305][   T49]  ? __pfx_kthread+0x10/0x10
[  204.937330][   T49]  ret_from_fork+0x4bc/0x870
[  204.937352][   T49]  ? __pfx_ret_from_fork+0x10/0x10
[  204.937379][   T49]  ? __switch_to_asm+0x39/0x70
[  204.937393][   T49]  ? __switch_to_asm+0x33/0x70
[  204.937407][   T49]  ? __pfx_kthread+0x10/0x10
[  204.937432][   T49]  ret_from_fork_asm+0x1a/0x30
[  204.937467][   T49]  </TASK>
[  204.937475][   T49] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  205.973458][ T7058] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  205.987493][ T7058] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  206.073871][ T5841] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.145277][ T7080] loop3: detected capacity change from 0 to 512
[  208.305013][ T7080] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  208.378798][ T7080] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  208.799505][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.404370][ T7099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.302'.
[  210.036115][ T7104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.304'.
[  210.430061][ T7103] loop4: detected capacity change from 0 to 256
[  210.462089][ T7103] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  212.384206][ T7127] loop2: detected capacity change from 0 to 512
[  212.630189][ T7127] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  212.779543][ T7127] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  212.833331][ T7135] overlayfs: failed to resolve './file1': -2
[  213.704830][ T5890] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  213.737183][ T5841] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.872083][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  213.916160][ T5890] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  213.934495][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.960818][ T5890] usb 5-1: Product: syz
[  213.982134][ T5890] usb 5-1: Manufacturer: syz
[  213.986760][ T5890] usb 5-1: SerialNumber: syz
[  214.013602][ T5890] usb 5-1: config 0 descriptor??
[  214.244806][ T7150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.319'.
[  215.124350][ T7152] loop1: detected capacity change from 0 to 2048
[  215.844230][ T7152] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  216.023888][ T7160] netlink: 92 bytes leftover after parsing attributes in process `syz.3.318'.
[  216.032900][ T7160] netlink: 32 bytes leftover after parsing attributes in process `syz.3.318'.
[  216.181966][   T30] audit: type=1800 audit(1761704959.987:9): pid=7152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.321" name="file1" dev="loop1" ino=1415 res=0 errno=0
[  216.356929][ T5827] usb 5-1: USB disconnect, device number 2
[  216.421592][ T7164] netlink: zone id is out of range
[  216.427391][ T7164] netlink: zone id is out of range
[  216.443123][ T7164] netlink: zone id is out of range
[  216.453878][ T7164] netlink: zone id is out of range
[  216.465433][ T7164] netlink: zone id is out of range
[  216.471889][ T7164] netlink: zone id is out of range
[  216.477880][ T7164] netlink: get zone limit has 4 unknown bytes
[  218.489210][ T7188] loop2: detected capacity change from 0 to 2048
[  218.535750][ T7188] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  222.455263][ T7215] netlink: 92 bytes leftover after parsing attributes in process `syz.2.333'.
[  222.464517][ T7215] netlink: 32 bytes leftover after parsing attributes in process `syz.2.333'.
[  222.763591][ T7219] loop2: detected capacity change from 0 to 256
[  222.806043][ T7219] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  227.168802][ T7271] loop3: detected capacity change from 0 to 40427
[  227.191186][ T7271] F2FS-fs (loop3): invalid crc value
[  227.234982][ T7271] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  227.244592][ T7271] F2FS-fs (loop3): Start checkpoint disabled!
[  227.253487][ T7271] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0
[  227.261076][ T7271] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  227.318628][   T13] kworker/u8:1: attempt to access beyond end of device
[  227.318628][   T13] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  227.333182][   T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
[  227.333204][   T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  227.333215][   T13] Workqueue: writeback wb_workfn (flush-7:3)
[  227.333244][   T13] Call Trace:
[  227.333252][   T13]  <TASK>
[  227.333259][   T13]  dump_stack_lvl+0x189/0x250
[  227.333289][   T13]  ? __pfx_dump_stack_lvl+0x10/0x10
[  227.333313][   T13]  ? __pfx_queue_work_on+0x10/0x10
[  227.333333][   T13]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  227.333354][   T13]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  227.333387][   T13]  f2fs_handle_critical_error+0x37c/0x540
[  227.333420][   T13]  f2fs_write_end_io+0x886/0xb60
[  227.333457][   T13]  __submit_merged_bio+0x27a/0x6a0
[  227.333489][   T13]  __submit_merged_write_cond+0x255/0x530
[  227.333521][   T13]  f2fs_write_data_pages+0x261d/0x3000
[  227.333539][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  227.333593][   T13]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  227.333610][   T13]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  227.333698][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  227.333726][   T13]  ? rcu_is_watching+0x15/0xb0
[  227.333748][   T13]  ? trace_sched_exit_tp+0x36/0x110
[  227.333765][   T13]  ? __schedule+0x17da/0x4d60
[  227.333799][   T13]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  227.333819][   T13]  do_writepages+0x32e/0x550
[  227.333850][   T13]  ? reacquire_held_locks+0x127/0x1d0
[  227.333871][   T13]  ? writeback_sb_inodes+0x384/0x1010
[  227.333904][   T13]  __writeback_single_inode+0x145/0xff0
[  227.333927][   T13]  ? do_raw_spin_unlock+0x122/0x240
[  227.333957][   T13]  writeback_sb_inodes+0x6c7/0x1010
[  227.333979][   T13]  ? preempt_schedule+0xae/0xc0
[  227.334005][   T13]  ? preempt_schedule+0xae/0xc0
[  227.334047][   T13]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  227.334118][   T13]  ? rcu_is_watching+0x15/0xb0
[  227.334149][   T13]  wb_writeback+0x43b/0xaf0
[  227.334181][   T13]  ? queue_io+0x301/0x590
[  227.334208][   T13]  ? __pfx_wb_writeback+0x10/0x10
[  227.334240][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  227.334265][   T13]  wb_workfn+0x409/0xef0
[  227.334302][   T13]  ? __pfx_wb_workfn+0x10/0x10
[  227.334327][   T13]  ? __lock_acquire+0xab9/0xd20
[  227.334358][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  227.334386][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  227.334405][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  227.334424][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  227.334446][   T13]  process_scheduled_works+0xae1/0x17b0
[  227.334498][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  227.334537][   T13]  worker_thread+0x8a0/0xda0
[  227.334586][   T13]  kthread+0x711/0x8a0
[  227.334614][   T13]  ? __pfx_worker_thread+0x10/0x10
[  227.334634][   T13]  ? __pfx_kthread+0x10/0x10
[  227.334660][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  227.334680][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  227.334699][   T13]  ? __pfx_kthread+0x10/0x10
[  227.334724][   T13]  ret_from_fork+0x4bc/0x870
[  227.334747][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  227.334775][   T13]  ? __switch_to_asm+0x39/0x70
[  227.334790][   T13]  ? __switch_to_asm+0x33/0x70
[  227.334805][   T13]  ? __pfx_kthread+0x10/0x10
[  227.334830][   T13]  ret_from_fork_asm+0x1a/0x30
[  227.334865][   T13]  </TASK>
[  227.335899][   T13] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  227.748392][ T7275] Bluetooth: MGMT ver 1.23
[  228.045996][ T7279] netlink: 28 bytes leftover after parsing attributes in process `syz.1.361'.
[  229.735067][ T7301] loop4: detected capacity change from 0 to 512
[  229.832932][ T7301] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  229.849507][ T7301] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  231.142469][ T5825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.617325][ T7326] netlink: 36 bytes leftover after parsing attributes in process `syz.3.375'.
[  231.891049][ T7310] loop0: detected capacity change from 0 to 40427
[  231.899228][ T7310] F2FS-fs (loop0): Image doesn't support compression
[  232.685593][ T7310] F2FS-fs (loop0): build fault injection rate: 684
[  232.696587][ T7310] F2FS-fs (loop0): build fault injection type: 0x35f7
[  232.706193][ T7310] F2FS-fs (loop0): invalid crc value
[  233.292557][ T7310] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  233.451281][ T7342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.378'.
[  233.535115][ T7310] F2FS-fs (loop0): Start checkpoint disabled!
[  233.764444][ T7310] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0
[  234.830889][ T7355] loop1: detected capacity change from 0 to 512
[  234.912677][ T7359] loop4: detected capacity change from 0 to 1024
[  235.037586][ T7355] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  235.191906][ T7355] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  235.597941][ T5831] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.020338][ T7375] netlink: 36 bytes leftover after parsing attributes in process `syz.1.388'.
[  236.780952][ T7383] netlink: 92 bytes leftover after parsing attributes in process `syz.0.385'.
[  236.791429][ T7383] netlink: 32 bytes leftover after parsing attributes in process `syz.0.385'.
[  238.897595][ T7408] loop3: detected capacity change from 0 to 512
[  238.899436][ T5836] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  239.136357][ T7408] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  239.180519][ T5836] usb 3-1: Using ep0 maxpacket: 32
[  239.224086][ T5836] usb 3-1: config 0 has an invalid interface number: 182 but max is 0
[  239.255732][ T7408] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  239.279225][ T5836] usb 3-1: config 0 has no interface number 0
[  239.297098][ T5836] usb 3-1: config 0 interface 182 has no altsetting 0
[  239.339158][ T5836] usb 3-1: New USB device found, idVendor=05e9, idProduct=0009, bcdDevice=73.db
[  239.376723][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.407761][ T5836] usb 3-1: Product: syz
[  239.421661][ T5836] usb 3-1: Manufacturer: syz
[  239.434882][ T5836] usb 3-1: SerialNumber: syz
[  239.462389][ T5836] usb 3-1: config 0 descriptor??
[  239.579903][ T5836] hub 3-1:0.182: bad descriptor, ignoring hub
[  240.149097][ T5836] hub 3-1:0.182: probe with driver hub failed with error -5
[  240.188339][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.445792][ T7424] netlink: 36 bytes leftover after parsing attributes in process `syz.4.404'.
[  240.460512][ T5836] kaweth 3-1:0.182: Firmware present in device.
[  240.492597][ T7400] netlink: 'syz.2.394': attribute type 10 has an invalid length.
[  240.506009][ T7400] team0: Port device dummy0 added
[  240.512383][ T7400] netlink: 'syz.2.394': attribute type 10 has an invalid length.
[  240.531799][ T5836] kaweth 3-1:0.182: Error reading configuration (-32), no net device created
[  240.548584][ T7400] team0: Port device dummy0 removed
[  240.556940][ T7400] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  240.807571][ T5836] kaweth 3-1:0.182: probe with driver kaweth failed with error -5
[  241.301740][ T7434] netlink: 92 bytes leftover after parsing attributes in process `syz.4.405'.
[  241.310976][ T7434] netlink: 32 bytes leftover after parsing attributes in process `syz.4.405'.
[  241.990388][ T5836] usb 3-1: USB disconnect, device number 3
[  243.638450][ T7450] hub 6-0:1.0: USB hub found
[  243.649647][ T7450] hub 6-0:1.0: 1 port detected
[  246.050982][ T7469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.413'.
[  249.722620][   T30] audit: type=1326 audit(1761704993.697:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7489 comm="syz.2.421" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5322d8efc9 code=0x0
[  251.065423][ T7510] netlink: 92 bytes leftover after parsing attributes in process `syz.3.428'.
[  251.100099][ T7510] netlink: 32 bytes leftover after parsing attributes in process `syz.3.428'.
[  253.174924][ T7523] loop0: detected capacity change from 0 to 32768
[  253.283911][ T7523] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  253.337496][ T7523] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  253.711810][   T30] audit: type=1326 audit(1761704997.647:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7543 comm="syz.3.437" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6c78b8efc9 code=0x0
[  254.109022][ T7523] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[  254.136563][  T981] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  254.149856][  T981] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  254.431165][ T5827] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[  254.484905][ T7557] delete_channel: no stack
[  254.502955][ T7557] loop4: detected capacity change from 0 to 22
[  254.515313][ T7557] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  254.578970][ T7557] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  254.656084][ T5827] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30
[  254.822603][ T5827] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  254.924460][ T5827] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[  254.967649][  T981] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 817ms
[  254.979647][ T5827] usb 2-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00
[  254.995537][ T5827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.995983][  T981] gfs2: fsid=syz:syz.0: jid=0: Done
[  255.030260][ T7523] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  255.055169][ T7559] loop3: detected capacity change from 0 to 4096
[  255.090153][ T7523] gfs2: fsid=syz:syz.0: can't create logd thread: -4
[  255.212256][ T7559] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  255.317964][ T5827] usb 2-1: config 0 descriptor??
[  255.344253][ T7551] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  255.387786][ T5842] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11
[  255.655470][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  255.662264][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.047023][ T5827] wacom 0003:056A:00B3.0002: unknown main item tag 0x0
[  256.125381][ T5827] wacom 0003:056A:00B3.0002: Unknown device_type for 'HID 056a:00b3'. Assuming pen.
[  256.331077][ T5827] wacom 0003:056A:00B3.0002: hidraw0: USB HID v0.00 Device [HID 056a:00b3] on usb-dummy_hcd.1-1/input0
[  256.569945][ T5827] input: Wacom Intuos3 12x12 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00B3.0002/input/input13
[  256.646902][ T5827] usb 2-1: USB disconnect, device number 3
[  256.803876][ T7578] fido_id[7578]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[  257.002300][   T30] audit: type=1400 audit(1761705000.967:12): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=7581 comm="syz.3.448"
[  258.772438][   T30] audit: type=1326 audit(1761705002.347:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7594 comm="syz.0.452" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f860318efc9 code=0x0
[  260.725789][ T7618] netlink: 4 bytes leftover after parsing attributes in process `syz.4.459'.
[  261.109413][ T5890] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  261.291141][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  261.291169][ T5890] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  261.293294][ T5890] usb 4-1: New USB device found, idVendor=04f2, idProduct=affc, bcdDevice=88.61
[  261.293321][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.293339][ T5890] usb 4-1: Product: syz
[  261.293353][ T5890] usb 4-1: Manufacturer: syz
[  261.293367][ T5890] usb 4-1: SerialNumber: syz
[  261.296108][ T5890] usb 4-1: config 0 descriptor??
[  261.831934][   T30] audit: type=1400 audit(1761705005.707:14): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=7637 comm="syz.4.465"
[  263.816726][ T7653] loop2: detected capacity change from 0 to 40427
[  263.965622][ T7653] F2FS-fs (loop2): invalid crc value
[  264.089390][ T7653] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  264.102432][ T7653] F2FS-fs (loop2): Start checkpoint disabled!
[  264.120049][ T7653] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0
[  264.128509][ T7653] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  264.608071][ T6392] kworker/u8:9: attempt to access beyond end of device
[  264.608071][ T6392] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  264.655285][ T6392] CPU: 1 UID: 0 PID: 6392 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) 
[  264.655307][ T6392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  264.655317][ T6392] Workqueue: writeback wb_workfn (flush-7:2)
[  264.655354][ T6392] Call Trace:
[  264.655362][ T6392]  <TASK>
[  264.655369][ T6392]  dump_stack_lvl+0x189/0x250
[  264.655398][ T6392]  ? __pfx_dump_stack_lvl+0x10/0x10
[  264.655422][ T6392]  ? __pfx_queue_work_on+0x10/0x10
[  264.655442][ T6392]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  264.655464][ T6392]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  264.655496][ T6392]  f2fs_handle_critical_error+0x37c/0x540
[  264.655529][ T6392]  f2fs_write_end_io+0x886/0xb60
[  264.655566][ T6392]  __submit_merged_bio+0x27a/0x6a0
[  264.655598][ T6392]  __submit_merged_write_cond+0x255/0x530
[  264.655631][ T6392]  f2fs_write_data_pages+0x261d/0x3000
[  264.655684][ T6392]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  264.655716][ T6392]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  264.655772][ T6392]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  264.655797][ T6392]  ? look_up_lock_class+0x74/0x170
[  264.655830][ T6392]  ? trace_f2fs_writepages+0x7f/0x200
[  264.655856][ T6392]  ? f2fs_write_node_pages+0x478/0x6e0
[  264.655886][ T6392]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  264.655915][ T6392]  ? __lock_acquire+0xab9/0xd20
[  264.655941][ T6392]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  264.655961][ T6392]  do_writepages+0x32e/0x550
[  264.655991][ T6392]  ? reacquire_held_locks+0x127/0x1d0
[  264.656012][ T6392]  ? writeback_sb_inodes+0x384/0x1010
[  264.656044][ T6392]  __writeback_single_inode+0x145/0xff0
[  264.656068][ T6392]  ? do_raw_spin_unlock+0x122/0x240
[  264.656097][ T6392]  writeback_sb_inodes+0x6c7/0x1010
[  264.656152][ T6392]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  264.656219][ T6392]  ? rcu_is_watching+0x15/0xb0
[  264.656250][ T6392]  wb_writeback+0x43b/0xaf0
[  264.656282][ T6392]  ? queue_io+0x301/0x590
[  264.656308][ T6392]  ? __pfx_wb_writeback+0x10/0x10
[  264.656340][ T6392]  ? _raw_spin_unlock_irq+0x23/0x50
[  264.656366][ T6392]  wb_workfn+0x409/0xef0
[  264.656402][ T6392]  ? __pfx_wb_workfn+0x10/0x10
[  264.656427][ T6392]  ? __lock_acquire+0xab9/0xd20
[  264.656462][ T6392]  ? process_scheduled_works+0x9ef/0x17b0
[  264.656489][ T6392]  ? _raw_spin_unlock_irq+0x23/0x50
[  264.656508][ T6392]  ? process_scheduled_works+0x9ef/0x17b0
[  264.656527][ T6392]  ? process_scheduled_works+0x9ef/0x17b0
[  264.656550][ T6392]  process_scheduled_works+0xae1/0x17b0
[  264.656601][ T6392]  ? __pfx_process_scheduled_works+0x10/0x10
[  264.656640][ T6392]  worker_thread+0x8a0/0xda0
[  264.656675][ T6392]  ? __kthread_parkme+0x7b/0x200
[  264.656707][ T6392]  kthread+0x711/0x8a0
[  264.656734][ T6392]  ? __pfx_worker_thread+0x10/0x10
[  264.656755][ T6392]  ? __pfx_kthread+0x10/0x10
[  264.656780][ T6392]  ? _raw_spin_unlock_irq+0x23/0x50
[  264.656800][ T6392]  ? lockdep_hardirqs_on+0x9c/0x150
[  264.656819][ T6392]  ? __pfx_kthread+0x10/0x10
[  264.656844][ T6392]  ret_from_fork+0x4bc/0x870
[  264.656867][ T6392]  ? __pfx_ret_from_fork+0x10/0x10
[  264.656895][ T6392]  ? __switch_to_asm+0x39/0x70
[  264.656910][ T6392]  ? __switch_to_asm+0x33/0x70
[  264.656924][ T6392]  ? __pfx_kthread+0x10/0x10
[  264.656949][ T6392]  ret_from_fork_asm+0x1a/0x30
[  264.656985][ T6392]  </TASK>
[  264.657038][ T6392] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  265.576590][ T7654] hub 6-0:1.0: USB hub found
[  265.641191][ T7654] hub 6-0:1.0: 1 port detected
[  265.960145][ T5910] usb 4-1: USB disconnect, device number 2
[  266.414487][ T7663] loop3: detected capacity change from 0 to 128
[  266.454195][ T7663] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  266.480365][ T7663] hpfs: filesystem error: improperly stopped
[  266.498874][ T7663] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  266.516774][ T7663] hpfs: You really don't want any checks? You are crazy...
[  266.530179][ T7663] hpfs: hpfs_map_sector(): read error
[  266.540245][ T7663] hpfs: code page support is disabled
[  266.556603][ T7663] hpfs: hpfs_map_4sectors(): unaligned read
[  266.581630][ T7663] hpfs: hpfs_map_4sectors(): unaligned read
[  266.608686][ T7663] hpfs: filesystem error: unable to find root dir
[  266.661531][ T7663] hpfs: hpfs_map_4sectors(): unaligned read
[  266.668032][ T7663] hpfs: hpfs_map_sector(): read error
[  266.682968][ T7663] hpfs: hpfs_map_4sectors(): unaligned read
[  266.688971][ T7663] hpfs: hpfs_map_sector(): read error
[  267.109455][  T981] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[  267.263375][  T981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  267.290264][  T981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  267.300179][ T5890] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  267.324701][  T981] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00
[  267.343319][  T981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  267.367390][  T981] usb 1-1: config 0 descriptor??
[  267.471221][ T5890] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  267.494241][ T5890] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  267.516947][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  267.751675][ T5890] usb 5-1: config 0 descriptor??
[  267.761491][ T5890] pwc: Askey VC010 type 2 USB webcam detected.
[  268.372631][  T981] ryos 0003:1E7D:3138.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:3138] on usb-dummy_hcd.0-1/input0
[  268.476471][ T5890] pwc: recv_control_msg error -32 req 02 val 2b00
[  268.484711][ T5890] pwc: recv_control_msg error -32 req 02 val 2700
[  268.499026][ T5890] pwc: recv_control_msg error -32 req 02 val 2c00
[  268.508784][ T5890] pwc: recv_control_msg error -32 req 04 val 1000
[  268.530391][  T981] usb 1-1: USB disconnect, device number 3
[  268.538985][ T5890] pwc: recv_control_msg error -32 req 04 val 1300
[  268.552772][ T5890] pwc: recv_control_msg error -32 req 04 val 1400
[  268.564129][ T5890] pwc: recv_control_msg error -32 req 02 val 2000
[  268.571839][ T5890] pwc: recv_control_msg error -32 req 02 val 2100
[  268.579101][ T5890] pwc: recv_control_msg error -32 req 04 val 1500
[  268.586754][ T5890] pwc: recv_control_msg error -32 req 02 val 2500
[  268.602268][ T5890] pwc: recv_control_msg error -32 req 02 val 2400
[  268.613452][ T5890] pwc: recv_control_msg error -32 req 02 val 2600
[  269.499538][   T30] audit: type=1400 audit(1761705012.667:15): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=7683 comm="syz.1.478"
[  269.524477][ T5890] pwc: recv_control_msg error -71 req 02 val 2800
[  269.535963][ T5890] pwc: recv_control_msg error -71 req 04 val 1100
[  269.550154][ T5890] pwc: recv_control_msg error -71 req 04 val 1200
[  269.567935][ T5890] pwc: Registered as video103.
[  270.011795][ T5890] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input16
[  270.044975][ T5890] usb 5-1: USB disconnect, device number 3
[  270.169735][ T5911] usb 2-1: new low-speed USB device number 4 using dummy_hcd
[  273.728543][ T7705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.483'.
[  278.731528][   T30] audit: type=1326 audit(1761705022.557:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7715 comm="syz.3.488" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6c78b8efc9 code=0x0
[  279.370339][ T7740] loop4: detected capacity change from 0 to 16
[  279.543631][ T7740] erofs (device loop4): mounted with root inode @ nid 36.
[  280.945102][ T7747] xt_CT: You must specify a L4 protocol and not use inversions on it
[  281.169933][ T7748] loop1: detected capacity change from 0 to 1024
[  281.379617][ T7752] netlink: 'syz.3.495': attribute type 7 has an invalid length.
[  281.387281][ T7752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.495'.
[  281.752498][ T7738] loop0: detected capacity change from 0 to 32768
[  281.812855][ T7738] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  281.920072][ T7738] XFS (loop0): Ending clean mount
[  281.931415][ T7738] XFS (loop0): Quotacheck needed: Please wait.
[  281.995856][ T7738] XFS (loop0): Quotacheck: Done.
[  282.534029][ T5833] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  284.909847][ T6010] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  284.978347][ T7806] xt_hashlimit: max too large, truncated to 1048576
[  285.207567][ T6010] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  285.335730][ T6010] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  285.386407][ T7809] loop0: detected capacity change from 0 to 1024
[  285.462153][ T6010] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 58368, setting to 1024
[  285.508132][ T7809] EXT4-fs: Ignoring removed orlov option
[  285.640579][ T6010] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  285.897797][ T7809] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  285.916556][ T6010] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  286.054012][ T6010] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  286.235053][ T7802] loop1: detected capacity change from 0 to 8192
[  286.250207][ T6010] usb 3-1: config 0 descriptor??
[  286.302629][   T30] audit: type=1800 audit(1761705030.277:17): pid=7809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.511" name="bus" dev="loop0" ino=18 res=0 errno=0
[  286.432145][ T7809] netlink: 'syz.0.511': attribute type 13 has an invalid length.
[  286.461391][ T7809] netlink: 152 bytes leftover after parsing attributes in process `syz.0.511'.
[  286.506148][   T30] audit: type=1800 audit(1761705030.477:18): pid=7802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.507" name="file2" dev="loop1" ino=1048606 res=0 errno=0
[  286.529058][ T7802] syz.1.507: attempt to access beyond end of device
[  286.529058][ T7802] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  286.554085][ T7809] : renamed from syz_tun (while UP)
[  286.610902][ T7818] loop4: detected capacity change from 0 to 512
[  286.614552][ T7809] : refused to change device tx_queue_len
[  286.627563][ T7802] Buffer I/O error on dev loop1, logical block 57847, async page read
[  286.639031][ T7818] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  286.652110][ T7802] syz.1.507: attempt to access beyond end of device
[  286.652110][ T7802] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  286.704973][ T7809] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  286.706329][ T7802] Buffer I/O error on dev loop1, logical block 57847, async page read
[  286.723086][ T7790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  286.740113][ T7802] syz.1.507: attempt to access beyond end of device
[  286.740113][ T7802] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  286.754597][ T7790] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  286.772431][ T7802] Buffer I/O error on dev loop1, logical block 57847, async page read
[  286.781883][ T7802] syz.1.507: attempt to access beyond end of device
[  286.781883][ T7802] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  286.825807][ T7802] Buffer I/O error on dev loop1, logical block 57847, async page read
[  286.856872][ T7802] syz.1.507: attempt to access beyond end of device
[  286.856872][ T7802] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  286.877221][ T7790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  286.899700][ T7802] Buffer I/O error on dev loop1, logical block 57847, async page read
[  286.901049][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  286.919891][ T7790] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  286.950953][ T7790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  286.970291][ T7790] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  287.137147][ T7824] lo speed is unknown, defaulting to 1000
[  287.143757][ T7824] lo speed is unknown, defaulting to 1000
[  287.152165][ T7824] lo speed is unknown, defaulting to 1000
[  287.164399][ T7824] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  287.366800][ T6010] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor
[  287.826172][ T7824] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  287.836726][ T6010] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0004/input/input17
[  287.933014][ T7824] lo speed is unknown, defaulting to 1000
[  288.602257][ T7824] lo speed is unknown, defaulting to 1000
[  288.648421][ T7791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  288.674150][ T7824] lo speed is unknown, defaulting to 1000
[  288.698822][ T7791] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  288.832135][ T7824] lo speed is unknown, defaulting to 1000
[  288.850660][ T7824] lo speed is unknown, defaulting to 1000
[  289.635448][ T6010] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0
[  289.762658][ T6010] usb 3-1: USB disconnect, device number 4
[  289.784769][ T7848] netlink: 24 bytes leftover after parsing attributes in process `syz.4.522'.
[  289.844366][ T7848] IPVS: Error connecting to the multicast addr
[  289.858149][ T7849] fido_id[7849]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[  290.191328][   T30] audit: type=1326 audit(1761705034.177:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7850 comm="syz.3.523" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6c78b8efc9 code=0x0
[  292.407169][ T7892] netlink: 24 bytes leftover after parsing attributes in process `syz.0.537'.
[  292.442624][ T7892] IPVS: Error connecting to the multicast addr
[  292.457297][ T7898] netlink: 44 bytes leftover after parsing attributes in process `syz.4.536'.
[  293.738378][ T7921] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.546'.
[  293.805712][ T7904] loop0: detected capacity change from 0 to 32768
[  293.965870][ T7929] loop3: detected capacity change from 0 to 512
[  294.000404][ T7929] EXT4-fs: Ignoring removed nobh option
[  294.011779][ T7929] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  294.191994][ T7929] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #3: comm syz.3.550: corrupted inode contents
[  294.246234][ T7929] EXT4-fs (loop3): Remounting filesystem read-only
[  294.290144][ T7929] Quota error (device loop3): write_blk: dquota write failed
[  294.298010][ T7929] Quota error (device loop3): qtree_write_dquot: Error -30 occurred while creating quota
[  294.308086][ T7929] EXT4-fs (loop3): 1 truncate cleaned up
[  294.315592][ T7929] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  294.328776][ T7929] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  294.382796][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  294.497354][ T7945] netdevsim netdevsim4: Direct firmware load for ./file0/file1 failed with error -2
[  294.529416][ T7945] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0/file1
[  297.438803][ T7986] netlink: 10 bytes leftover after parsing attributes in process `syz.1.567'.
[  299.528895][ T7993] loop3: detected capacity change from 0 to 164
[  299.583401][ T7993] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  299.631022][ T7993] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  299.654437][   T30] audit: type=1326 audit(1761705043.637:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz.1.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dcc78efc9 code=0x7ffc0000
[  299.689025][ T7993] Symlink component flag not implemented
[  299.698513][ T7993] Symlink component flag not implemented
[  299.707173][ T7993] Symlink component flag not implemented (7)
[  299.727974][ T7993] Symlink component flag not implemented (116)
[  299.748178][   T30] audit: type=1326 audit(1761705043.667:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz.1.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f6dcc78efc9 code=0x7ffc0000
[  299.827625][   T30] audit: type=1326 audit(1761705043.667:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz.1.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dcc78efc9 code=0x7ffc0000
[  299.899532][   T30] audit: type=1326 audit(1761705043.667:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz.1.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dcc78efc9 code=0x7ffc0000
[  300.130789][ T8004] netlink: 'syz.3.575': attribute type 7 has an invalid length.
[  300.141313][ T8002] loop1: detected capacity change from 0 to 2048
[  300.152587][ T8004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.575'.
[  301.205420][ T8002] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  301.270125][   T30] audit: type=1800 audit(1761705045.257:24): pid=8002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.576" name="bus" dev="loop1" ino=18 res=0 errno=0
[  301.358050][ T8024] loop2: detected capacity change from 0 to 128
[  302.362189][ T5831] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  302.708375][ T8042] tipc: Started in network mode
[  302.769506][ T8042] tipc: Node identity ac14140f, cluster identity 4711
[  302.777104][ T8042] tipc: New replicast peer: 255.255.255.83
[  302.787266][ T8042] tipc: Enabled bearer <udp:£>, priority 10
[  302.794736][ T8047] loop2: detected capacity change from 0 to 128
[  302.871083][ T8047] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000)
[  302.907922][ T8047] FAT-fs (loop2): Filesystem has been set read-only
[  302.976811][ T8047] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000)
[  304.123975][  T981] tipc: Node number set to 2886997007
[  304.522264][ T8065] netlink: 92 bytes leftover after parsing attributes in process `syz.2.594'.
[  304.531574][ T8065] netlink: 32 bytes leftover after parsing attributes in process `syz.2.594'.
[  304.558969][ T8067] loop3: detected capacity change from 0 to 512
[  304.756017][ T8067] ------------[ cut here ]------------
[  304.761692][ T8067] EA inode 11 i_nlink=2
[  304.766693][ T8067] WARNING: fs/ext4/xattr.c:1058 at ext4_xattr_inode_update_ref+0x51a/0x5b0, CPU#1: syz.3.595/8067
[  304.781900][ T8067] Modules linked in:
[  304.787195][ T8067] CPU: 1 UID: 0 PID: 8067 Comm: syz.3.595 Not tainted syzkaller #0 PREEMPT(full) 
[  304.797677][ T8067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  304.807839][ T8067] RIP: 0010:ext4_xattr_inode_update_ref+0x51a/0x5b0
[  304.814591][ T8067] Code: 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 0f 85 80 00 00 00 41 8b 17 48 c7 c7 c0 1f 80 8b 4c 89 e6 e8 47 2a f8 fe 90 <0f> 0b 90 90 4c 8b 6c 24 28 e9 59 fe ff ff e8 d3 cc c8 08 44 89 f9
[  304.834499][ T8067] RSP: 0018:ffffc9000bcd7100 EFLAGS: 00010246
[  304.840706][ T8067] RAX: 9d281ab0829f5f00 RBX: 0000000000000001 RCX: 0000000000080000
[  304.848738][ T8067] RDX: ffffc9000c18a000 RSI: 000000000000b5f2 RDI: 000000000000b5f3
[  304.857505][ T8067] RBP: ffffc9000bcd71f8 R08: 0000000000000003 R09: 0000000000000004
[  304.865668][ T8067] R10: dffffc0000000000 R11: fffffbfff1bba6d0 R12: 000000000000000b
[  304.873833][ T8067] R13: ffff88805ee6d980 R14: 1ffff1100bdcdb1e R15: ffff88805ee6d8f0
[  304.882122][ T8067] FS:  00007f6c79aa06c0(0000) GS:ffff888125feb000(0000) knlGS:0000000000000000
[  304.892842][ T8067] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  304.901082][ T8067] CR2: 000000110c3a3afb CR3: 0000000058a66000 CR4: 00000000003526f0
[  304.909172][ T8067] Call Trace:
[  304.912550][ T8067]  <TASK>
[  304.915537][ T8067]  ? __pfx_inode_set_ctime_to_ts+0x10/0x10
[  304.921446][ T8067]  ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10
[  304.927843][ T8067]  ? ext4_xattr_inode_iget+0x3d2/0x5f0
[  304.933422][ T8067]  ext4_xattr_set_entry+0xabb/0x1e20
[  304.938785][ T8067]  ext4_xattr_ibody_set+0x254/0x6a0
[  304.944135][ T8067]  ext4_expand_extra_isize_ea+0x13ad/0x1ea0
[  304.950177][ T8067]  __ext4_expand_extra_isize+0x30d/0x400
[  304.955885][ T8067]  __ext4_mark_inode_dirty+0x46c/0x700
[  304.961485][ T8067]  ext4_evict_inode+0x80d/0xee0
[  304.966406][ T8067]  ? __pfx_ext4_evict_inode+0x10/0x10
[  304.971905][ T8067]  ? do_raw_spin_unlock+0x122/0x240
[  304.977162][ T8067]  ? __pfx_ext4_evict_inode+0x10/0x10
[  304.982604][ T8067]  evict+0x504/0x9c0
[  304.986517][ T8067]  ? __pfx_evict+0x10/0x10
[  304.991531][ T8067]  ? do_raw_spin_unlock+0x122/0x240
[  304.997511][ T8067]  ? _raw_spin_unlock+0x28/0x50
[  305.002420][ T8067]  ? iput+0x946/0xc50
[  305.006416][ T8067]  ext4_orphan_cleanup+0xc20/0x1460
[  305.011672][ T8067]  ? __pfx_ext4_orphan_cleanup+0x10/0x10
[  305.017359][ T8067]  ? ext4_register_li_request+0x259/0x720
[  305.023154][ T8067]  ? errseq_check_and_advance+0x66/0x120
[  305.028809][ T8067]  ext4_fill_super+0x5920/0x61e0
[  305.033818][ T8067]  ? __pfx_ext4_fill_super+0x10/0x10
[  305.039130][ T8067]  ? snprintf+0xda/0x120
[  305.043456][ T8067]  ? __pfx_snprintf+0x10/0x10
[  305.048206][ T8067]  ? set_blocksize+0x21e/0x500
[  305.053027][ T8067]  ? sb_set_blocksize+0x104/0x180
[  305.058095][ T8067]  ? setup_bdev_super+0x4c1/0x5b0
[  305.063183][ T8067]  get_tree_bdev_flags+0x40e/0x4d0
[  305.068319][ T8067]  ? __pfx_ext4_fill_super+0x10/0x10
[  305.073652][ T8067]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  305.079306][ T8067]  vfs_get_tree+0x92/0x2b0
[  305.083803][ T8067]  do_new_mount+0x302/0xa10
[  305.088313][ T8067]  ? apparmor_capable+0x137/0x1b0
[  305.094336][ T8067]  ? __pfx_do_new_mount+0x10/0x10
[  305.100011][ T8067]  ? ns_capable+0x8a/0xf0
[  305.104338][ T8067]  ? kmem_cache_free+0x19b/0x690
[  305.109268][ T8067]  __se_sys_mount+0x313/0x410
[  305.113963][ T8067]  ? __pfx___se_sys_mount+0x10/0x10
[  305.119148][ T8067]  ? do_syscall_64+0xbe/0xfa0
[  305.123837][ T8067]  ? __x64_sys_mount+0x20/0xc0
[  305.128584][ T8067]  do_syscall_64+0xfa/0xfa0
[  305.133106][ T8067]  ? lockdep_hardirqs_on+0x9c/0x150
[  305.138293][ T8067]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  305.144397][ T8067]  ? clear_bhb_loop+0x60/0xb0
[  305.149062][ T8067]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  305.154967][ T8067] RIP: 0033:0x7f6c78b9076a
[  305.159408][ T8067] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  305.179146][ T8067] RSP: 002b:00007f6c79a9fe68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  305.187579][ T8067] RAX: ffffffffffffffda RBX: 00007f6c79a9fef0 RCX: 00007f6c78b9076a
[  305.196140][ T8067] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f6c79a9feb0
[  305.204717][ T8067] RBP: 0000200000000180 R08: 00007f6c79a9fef0 R09: 0000000000800718
[  305.212722][ T8067] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0
[  305.220716][ T8067] R13: 00007f6c79a9feb0 R14: 000000000000046f R15: 0000200000000680
[  305.228682][ T8067]  </TASK>
[  305.231722][ T8067] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  305.238984][ T8067] CPU: 1 UID: 0 PID: 8067 Comm: syz.3.595 Not tainted syzkaller #0 PREEMPT(full) 
[  305.248157][ T8067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  305.258198][ T8067] Call Trace:
[  305.261468][ T8067]  <TASK>
[  305.264386][ T8067]  dump_stack_lvl+0x99/0x250
[  305.268962][ T8067]  ? __asan_memcpy+0x40/0x70
[  305.273531][ T8067]  ? __pfx_dump_stack_lvl+0x10/0x10
[  305.278714][ T8067]  ? __pfx__printk+0x10/0x10
[  305.283295][ T8067]  vpanic+0x237/0x6d0
[  305.287265][ T8067]  ? __pfx_vpanic+0x10/0x10
[  305.291749][ T8067]  ? is_bpf_text_address+0x292/0x2b0
[  305.297023][ T8067]  ? is_bpf_text_address+0x26/0x2b0
[  305.302216][ T8067]  panic+0xb9/0xc0
[  305.305924][ T8067]  ? __pfx_panic+0x10/0x10
[  305.310334][ T8067]  __warn+0x334/0x4c0
[  305.314301][ T8067]  ? ext4_xattr_inode_update_ref+0x51a/0x5b0
[  305.320268][ T8067]  ? ext4_xattr_inode_update_ref+0x51a/0x5b0
[  305.326229][ T8067]  report_bug+0x2be/0x4f0
[  305.330546][ T8067]  ? ext4_xattr_inode_update_ref+0x51a/0x5b0
[  305.336509][ T8067]  ? ext4_xattr_inode_update_ref+0x51a/0x5b0
[  305.342476][ T8067]  ? ext4_xattr_inode_update_ref+0x51c/0x5b0
[  305.348435][ T8067]  handle_bug+0x84/0x160
[  305.352669][ T8067]  exc_invalid_op+0x1a/0x50
[  305.357155][ T8067]  asm_exc_invalid_op+0x1a/0x20
[  305.361981][ T8067] RIP: 0010:ext4_xattr_inode_update_ref+0x51a/0x5b0
[  305.368553][ T8067] Code: 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 0f 85 80 00 00 00 41 8b 17 48 c7 c7 c0 1f 80 8b 4c 89 e6 e8 47 2a f8 fe 90 <0f> 0b 90 90 4c 8b 6c 24 28 e9 59 fe ff ff e8 d3 cc c8 08 44 89 f9
[  305.388140][ T8067] RSP: 0018:ffffc9000bcd7100 EFLAGS: 00010246
[  305.394191][ T8067] RAX: 9d281ab0829f5f00 RBX: 0000000000000001 RCX: 0000000000080000
[  305.402148][ T8067] RDX: ffffc9000c18a000 RSI: 000000000000b5f2 RDI: 000000000000b5f3
[  305.410104][ T8067] RBP: ffffc9000bcd71f8 R08: 0000000000000003 R09: 0000000000000004
[  305.418059][ T8067] R10: dffffc0000000000 R11: fffffbfff1bba6d0 R12: 000000000000000b
[  305.426012][ T8067] R13: ffff88805ee6d980 R14: 1ffff1100bdcdb1e R15: ffff88805ee6d8f0
[  305.433980][ T8067]  ? __pfx_inode_set_ctime_to_ts+0x10/0x10
[  305.439776][ T8067]  ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10
[  305.446092][ T8067]  ? ext4_xattr_inode_iget+0x3d2/0x5f0
[  305.451540][ T8067]  ext4_xattr_set_entry+0xabb/0x1e20
[  305.456822][ T8067]  ext4_xattr_ibody_set+0x254/0x6a0
[  305.462010][ T8067]  ext4_expand_extra_isize_ea+0x13ad/0x1ea0
[  305.467905][ T8067]  __ext4_expand_extra_isize+0x30d/0x400
[  305.473533][ T8067]  __ext4_mark_inode_dirty+0x46c/0x700
[  305.479005][ T8067]  ext4_evict_inode+0x80d/0xee0
[  305.483847][ T8067]  ? __pfx_ext4_evict_inode+0x10/0x10
[  305.489206][ T8067]  ? do_raw_spin_unlock+0x122/0x240
[  305.494392][ T8067]  ? __pfx_ext4_evict_inode+0x10/0x10
[  305.499768][ T8067]  evict+0x504/0x9c0
[  305.503689][ T8067]  ? __pfx_evict+0x10/0x10
[  305.508092][ T8067]  ? do_raw_spin_unlock+0x122/0x240
[  305.513278][ T8067]  ? _raw_spin_unlock+0x28/0x50
[  305.518114][ T8067]  ? iput+0x946/0xc50
[  305.522084][ T8067]  ext4_orphan_cleanup+0xc20/0x1460
[  305.527275][ T8067]  ? __pfx_ext4_orphan_cleanup+0x10/0x10
[  305.532892][ T8067]  ? ext4_register_li_request+0x259/0x720
[  305.538595][ T8067]  ? errseq_check_and_advance+0x66/0x120
[  305.544213][ T8067]  ext4_fill_super+0x5920/0x61e0
[  305.549170][ T8067]  ? __pfx_ext4_fill_super+0x10/0x10
[  305.554436][ T8067]  ? snprintf+0xda/0x120
[  305.558664][ T8067]  ? __pfx_snprintf+0x10/0x10
[  305.563321][ T8067]  ? set_blocksize+0x21e/0x500
[  305.568073][ T8067]  ? sb_set_blocksize+0x104/0x180
[  305.573086][ T8067]  ? setup_bdev_super+0x4c1/0x5b0
[  305.578096][ T8067]  get_tree_bdev_flags+0x40e/0x4d0
[  305.583192][ T8067]  ? __pfx_ext4_fill_super+0x10/0x10
[  305.588458][ T8067]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  305.594083][ T8067]  vfs_get_tree+0x92/0x2b0
[  305.598507][ T8067]  do_new_mount+0x302/0xa10
[  305.602996][ T8067]  ? apparmor_capable+0x137/0x1b0
[  305.608010][ T8067]  ? __pfx_do_new_mount+0x10/0x10
[  305.613021][ T8067]  ? ns_capable+0x8a/0xf0
[  305.617338][ T8067]  ? kmem_cache_free+0x19b/0x690
[  305.622264][ T8067]  __se_sys_mount+0x313/0x410
[  305.626929][ T8067]  ? __pfx___se_sys_mount+0x10/0x10
[  305.632110][ T8067]  ? do_syscall_64+0xbe/0xfa0
[  305.636769][ T8067]  ? __x64_sys_mount+0x20/0xc0
[  305.641514][ T8067]  do_syscall_64+0xfa/0xfa0
[  305.646008][ T8067]  ? lockdep_hardirqs_on+0x9c/0x150
[  305.651193][ T8067]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  305.657239][ T8067]  ? clear_bhb_loop+0x60/0xb0
[  305.661898][ T8067]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  305.667771][ T8067] RIP: 0033:0x7f6c78b9076a
[  305.672174][ T8067] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  305.691763][ T8067] RSP: 002b:00007f6c79a9fe68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  305.700168][ T8067] RAX: ffffffffffffffda RBX: 00007f6c79a9fef0 RCX: 00007f6c78b9076a
[  305.708126][ T8067] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f6c79a9feb0
[  305.716082][ T8067] RBP: 0000200000000180 R08: 00007f6c79a9fef0 R09: 0000000000800718
[  305.724037][ T8067] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0
[  305.731993][ T8067] R13: 00007f6c79a9feb0 R14: 000000000000046f R15: 0000200000000680
[  305.739960][ T8067]  </TASK>
[  305.743250][ T8067] Kernel Offset: disabled
[  305.747562][ T8067] Rebooting in 86400 seconds..