last executing test programs:

10m4.342793578s ago: executing program 1 (id=508):
syz_mount_image$bfs(&(0x7f00000001c0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000000600)=ANY=[], 0x8, 0xad, &(0x7f0000000040)="$eJzs0btpA0EUBdC7H/xJ7ALcg3tw6twVbOjQkY3BjlSGOlArKmE7ULCpkhHLrkChEAhJcA7MzA3mwYW33q5e8pSUv6SUUu6SPGbKX98/nx/v490kyTJt7jPZv9y4ej4P486fp7x5y+L/4E8//HZ9la4fyuyChQEAgJPVeZ1TdfxQm6Q5VyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA67ILAAD//1vZIlc=")
creat(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x85)
creat(&(0x7f0000000040)='.\x02\x00', 0x0)

10m3.808784617s ago: executing program 1 (id=510):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000540), r0)
sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01012dbd7000fedbdf251100000008001500c0000000080015000000000008000100", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000804)

10m3.482261408s ago: executing program 1 (id=514):
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f00000017c0)={[{@dmask={'dmask', 0x3d, 0xfc}}, {@discard}, {}, {@keep_last_dots}, {@gid}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@gid={'gid', 0x3d, 0xee01}}, {@discard}, {@fmask={'fmask', 0x3d, 0x9}}, {@keep_last_dots}]}, 0xff, 0x1537, &(0x7f0000000280)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)

10m2.993879483s ago: executing program 1 (id=520):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000300)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10, 0x0, 0x0, &(0x7f0000000b40)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x1}}, @rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x30}}], 0x60, 0x40048e1}, 0x4000000)

10m1.941993033s ago: executing program 1 (id=531):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x6, 0x5, 0x20f, 0x6, 0x1, 0x5640, 0x700000, 0x10000101}, 0x20)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f0000019100400014000200100014000c0006"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800)

10m1.367486238s ago: executing program 32 (id=531):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x6, 0x5, 0x20f, 0x6, 0x1, 0x5640, 0x700000, 0x10000101}, 0x20)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f0000019100400014000200100014000c0006"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800)

8m56.432332706s ago: executing program 0 (id=1202):
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0)

8m55.796924576s ago: executing program 0 (id=1210):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x280440e, &(0x7f0000000440)={[{@debug}, {@test_dummy_encryption_v1}, {@resuid={'resuid', 0x3d, 0xee01}}, {@user_xattr}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$eJzs3M1rHOcZAPBnRqsP23JXLqXUvVilFBtK17KLTG0KtYtLLz0U2mvBQl4ZofUHkoorWdBV8g+EJP9ALjkkJsGH+OxLArnmkjjXmBwCJihWAiEkCrMfkiztSpa1q1Hk3w9ezfsxM+/zaKSdeWF3A3hhDWc/0ojjEXEliSg2+tOI6KvVBiKq9f2WlxbGv1laGE9iZeVfXyaRRMSTpYXx5rmSxvZIozEQER/9NYmfv7x53pm5+amxSqU83Wifnr1+6/TM3PwfJq+PXStfK984c+5Po2dHz42cH+1Yrt9+dvH+17/5++fV7976/u5Xr72ZxMUYbIytz6OR9a4Nx/Dq72S9QkSMdeD8+0FPI5/1eSaFbQ5KuxwUAABtpeue4X4ZxeiJtYe3Yrz/ca7BAQAAAB2x0hOxAgAAABxwifU/AAAAHHDN9wE8WVoYb5Z835Gwtx5fioihev7LjVIfKUS1th2I3og4/CSJ9R9rTeqH7dpwRDz69Py7WYkWn0PutupiRPyq1fVPavkPNT4JvTH/NCJGOjD/8Ib2Tyn/ix2YP+/8AXgxPbhUv5Ftvv+lq88/0eL+V2hx73oeed//ms9/y5ue/9by72nz/PfPZ5zjTiFutxvL8v/z/b+90yzZ/Nl2V0ntwOPFiF8XWuWfrOaftMn/yjbnTqJ+iuIPt8vt9sk7/5U3Ik5G6/ybkq2/n+j0xGSlPFL/2XKOxQ9H3243f975Z9f/cJv8t7j+A1nfrafO1P5Lff5z+fK9TZ2N3bfPP/2iL/l3rdbX6Pnf2Ozs9JmIvuQfm/vPbp1vc5/mObL8T/126///Vn//2WtCtfG3kaWy2Nhm7Zc2zPmXu3feaxdPc/2X5/W/uvPrX+t75Rnn+N0Hr57a2Nf8fq3169+sZPM/SuprYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoSiNiMJK0FBFJrZ6mpVLEkYj4RRxOKzdnZn8/cfO/N65mYxFD0ZtOTFbKIxFRrLeTrH2mVl9rn93Q/mNEHIuI14uHau3S+M3K1byTBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNWRiBiMJC1FRBoRy8U0LZXyjgoAAADouKG8AwAAAAC6zvofAAAADj7rfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs2IkHD5OIqF44VCuZvsZYb66RAd2W5h0AkJuevAMAclPIOwAgNztc43tcgAMo2WZ8oGVv9urR35V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANifTh5/8DCJiOqFQ7WS6WuM9bY84sQeRgd0U5p3AEBuerYaLOxdHMDee+5/8aOdjQPYe63X+MCLJNlmfGBtn+rTI/1diwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/WewVpK0FBFprZ6mpVLE0YgYit5kYrJSHomIn0XEJ8Xe/qzdn3fQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNzM3PzUWKVSnn6eSrK7w1VU2lX+vz/C2NtKUqsM5B1GvZL3KxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHmYmZufGqtUytMzeUcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5G1mbn5qrFIpTz9D5d5Odl5XyTtHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADy82MAAAD//1sCDDY=")
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00')
read$FUSE(r0, &(0x7f0000001c00)={0x2020}, 0x5ecfb203)

8m54.958824451s ago: executing program 0 (id=1220):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000040)="560000002a0000000000000000010100fb00"/48, 0x30)

8m54.577122613s ago: executing program 0 (id=1224):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000000)={0x0, 0x16, 0x4, "eb26aba9"}, 0x0, 0x0, 0x0, 0x0})

8m52.643451351s ago: executing program 0 (id=1247):
r0 = open(&(0x7f0000001100)='.\x00', 0x100, 0x30)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000001140)=0x10)
fstat(r0, &(0x7f0000001180))

8m52.25093238s ago: executing program 0 (id=1254):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000080)=0x24, 0x4)
setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000)=0x800, 0x4)

8m37.109345247s ago: executing program 33 (id=1254):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000080)=0x24, 0x4)
setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000)=0x800, 0x4)

6m47.077567956s ago: executing program 7 (id=2521):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x20, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000680)=r0, 0x4)

6m46.768008961s ago: executing program 7 (id=2523):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000006a0083"], 0x28}, 0x1, 0x0, 0x0, 0x4009050}, 0x2400800c)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703110000001f03000000010000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84d0f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x324, 0x0, 0x0, 0x1f00c00e}, 0x4014)

6m46.412790968s ago: executing program 7 (id=2525):
r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2)
ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f00000000c0)=0x1)
ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d3, 0x190, 0x1, 0x2, 0xd59f80, 0x6, 0x8006, 0x9, 0x0, 0x4, 0x71e, 0x13, 0xffffffff, 0x7f, 0x3f, 0x4, {0x0, 0x1}, 0x3, 0xed}})

6m46.088851047s ago: executing program 7 (id=2533):
syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000640)='./file0\x00', 0x3010808, &(0x7f0000000000)={[{@nls={'nls', 0x3d, 'iso8859-5'}}, {}, {@nobarrier}, {@nobarrier}]}, 0x2, 0x5f9, &(0x7f0000000680)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)

6m45.937607362s ago: executing program 7 (id=2536):
r0 = msgget$private(0x0, 0x1c0)
msgrcv(r0, 0x0, 0x0, 0x3, 0x2000)
msgsnd(r0, &(0x7f0000000ac0)={0x3}, 0x8, 0x0)

6m45.13584962s ago: executing program 7 (id=2542):
ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000180)="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")
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'})

6m44.211178209s ago: executing program 34 (id=2542):
ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000180)="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")
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'})

4m33.804882356s ago: executing program 3 (id=3724):
unshare(0x2020600)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0)

4m33.425815615s ago: executing program 3 (id=3729):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
ioctl$TCFLSH(r0, 0x540b, 0x2)

4m33.268811144s ago: executing program 3 (id=3730):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x2c, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0xd}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x2c}, 0x1, 0x0, 0x0, 0x900}, 0x4000000)

4m33.066642016s ago: executing program 3 (id=3734):
syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000300)='./file3\x00', 0x0, &(0x7f0000001040)=ANY=[], 0x1, 0xadc, &(0x7f0000001900)="$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")
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240))
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

4m31.731019401s ago: executing program 3 (id=3742):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt(r0, 0x1, 0x3d, &(0x7f0000000200)="0b00000001000000", 0x8)
sendmsg$sock(r0, &(0x7f0000000300)={&(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000000600)=[@txtime={{0x18, 0x1, 0x3d, 0x7fffffffffffffff}}], 0x18}, 0x0)

4m29.360216364s ago: executing program 3 (id=3766):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001280)=@newqdisc={0x64, 0x24, 0xd0f, 0x70bd2e, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x7, 0x2, 0x0, 0x1, 0x345, 0x8}, {0x4, 0x2, 0x9182, 0x2, 0x7, 0x20008}, 0xffed, 0x0, 0xea1}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x9b678d6aa6adcac3}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840)

4m28.542238549s ago: executing program 35 (id=3766):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001280)=@newqdisc={0x64, 0x24, 0xd0f, 0x70bd2e, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x7, 0x2, 0x0, 0x1, 0x345, 0x8}, {0x4, 0x2, 0x9182, 0x2, 0x7, 0x20008}, 0xffed, 0x0, 0xea1}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x9b678d6aa6adcac3}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840)

2m49.675694685s ago: executing program 2 (id=4544):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
setns(0xc9, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, r0, 0x3141e0b2751b0f9b, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x60c5}, 0x80)

2m49.232886264s ago: executing program 2 (id=4548):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xf, 0x4}, {0xffe0, 0xb}, {0xb, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x80000)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newlink={0x54, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x4c00}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c1}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2m47.922305638s ago: executing program 2 (id=4558):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000007140)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000007180)={0x0, 0x0, &(0x7f00000071c0)={&(0x7f00000003c0)={0x60, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x41, 0x33, @beacon={{{}, {0xde1}, @broadcast}, 0x0, @default, 0x4803, @void, @val, @val={0x3, 0x1, 0xe}, @void, @val={0x6, 0x2, 0x4}, @val={0x5, 0x3, {0x0, 0xca, 0x10}}, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @void, @void, @val={0x72, 0x6}, @void, @void}}]}, 0x60}, 0x1, 0x0, 0x0, 0x880}, 0x0)

2m47.329992136s ago: executing program 2 (id=4561):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/net/afs/sysname\x00', 0x2, 0x0)
preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/133, 0x85}], 0x1, 0x0, 0x7fff)

2m47.17753445s ago: executing program 2 (id=4562):
add_key(0x0, 0x0, &(0x7f0000000200)="308205553082033da00302010202147398e1982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504036129436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657930820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d55b1ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be6", 0x2d6, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x4, 0x290, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x1, 0x1, 0x2, 0x1, 0x9}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0)
sendto$inet(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000200)={0x2, 0x1234, @loopback}, 0x10)

2m46.912194855s ago: executing program 2 (id=4565):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000380)='./nfsd\x00', &(0x7f00000003c0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f0000000440)='3', 0x1)

2m43.967372232s ago: executing program 9 (id=4587):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x0, 0xff}, 0xff}, 0x18)
writev(r0, &(0x7f0000002840)=[{&(0x7f00000001c0)="b4", 0x1}], 0x1)

2m42.511193677s ago: executing program 9 (id=4599):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1e4, 0x65, 0x200, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x3}, {0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x1b0, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xf}}, @TCA_MATCHALL_ACT={0x144, 0x2, [@m_connmark={0x140, 0xa, 0x0, 0x0, {{0xd}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x9, 0x4}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x8, 0x8, 0x3ff}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x7, 0x3, 0x1800}, 0x8001}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffb, 0x2, 0x7, 0x7ff}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x200, 0x9, 0x20000000, 0x4, 0x800}, 0x37}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x71c, 0x4, 0x6, 0x41, 0x7}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x3, 0x7, 0x9, 0x9}, 0x7}}]}, {0x4a, 0x6, "68d5f9b35942b1a9b81011af8ef9f58903979090153440330e71926cf16dfa6a95a63229ec1e046036f5951acc832298a090af5f8dd4c4eda121fe5c11e2758323235d7d4065"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8}}, @TCA_MATCHALL_ACT={0x50, 0x2, [@m_vlan={0x4c, 0x15, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x1000, 0x40, 0x6, 0x2, 0xf}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

2m42.211939784s ago: executing program 9 (id=4600):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/dynamic_debug/control\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='file ne*/sctp/* +', 0x11)

2m41.544235857s ago: executing program 9 (id=4608):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='sys_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='sys_mnt\x00', &(0x7f0000000440)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0)
write(r0, &(0x7f0000000040)="616c676f3d22187f5fe63b335e90bf894834b77742135b8202cfb446648e7b3e0b", 0x21)

2m41.244560158s ago: executing program 9 (id=4613):
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd\x00', 0x15b)
mount(0x0, &(0x7f0000000700)='./nfsd\x00', &(0x7f0000000740)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./nfsd/v4_end_grace\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)

2m40.583928588s ago: executing program 9 (id=4617):
r0 = landlock_create_ruleset(&(0x7f00000000c0)={0xa019, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x6)

2m31.473659872s ago: executing program 36 (id=4565):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000380)='./nfsd\x00', &(0x7f00000003c0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f0000000440)='3', 0x1)

2m25.497005002s ago: executing program 37 (id=4617):
r0 = landlock_create_ruleset(&(0x7f00000000c0)={0xa019, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x6)

1m59.852701043s ago: executing program 6 (id=4798):
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, <r4=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r5=>0x0)
r6 = dup(r0)
syz_ublk_setup_queues(r6, r5, &(0x7f0000000780)={0x0, 0xb69, 0x1, 0x1, 0xd9, 0x0, r0}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc095, 0x2000, 0x0, 0x3a1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x172d, 0x4000, 0x0, 0x104, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6263, 0x4, 0x1, 0x1b4, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x373f, 0x8, 0x3, 0x1fa}}], 0x4, &(0x7f0000001d00)={0x2e, 0x24, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x9f3b}, 0x0, r4, '\x00', {0x3, 0x560, 0x0, 0x0}}, &(0x7f0000001d80))

1m58.083181677s ago: executing program 6 (id=4801):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x340060c1)
setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000100)=0x4, 0x4)
setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000000), 0x4)

1m57.344238332s ago: executing program 6 (id=4802):
r0 = syz_ublk_setup_io_uring(0xb87, &(0x7f0000000900)={0x0, 0xf8ab, 0x100, 0x2, 0x85}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
r4 = socket$nl_crypto(0x10, 0x3, 0x15)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x2, 0x21, r4, 0x0, &(0x7f0000000f40)={0x0, 0x0, 0x0}, 0x0, 0x2000894})
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0)

1m56.369007721s ago: executing program 6 (id=4806):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000001340)={[{@bsdgroups}, {@errors_remount}, {@nombcache}, {@noload}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0xff, 0x460, &(0x7f0000000d80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
pwrite64(r0, &(0x7f0000000740)='E', 0x1, 0x4fed3)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000340)={0x17c04, 0xffffffffffffffff, 0x9, 0x100000001, 0x3, 0x200})

1m55.047640164s ago: executing program 6 (id=4810):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/filehandle\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='mydomain / 64\n', 0xe)

1m53.643804033s ago: executing program 6 (id=4815):
pipe2$9p(&(0x7f00000027c0)={<r0=>0xffffffffffffffff}, 0x0)
ppoll(&(0x7f0000000040)=[{r0, 0x8041}], 0x1, &(0x7f0000000100)={0x77359400}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

1m38.278452998s ago: executing program 38 (id=4815):
pipe2$9p(&(0x7f00000027c0)={<r0=>0xffffffffffffffff}, 0x0)
ppoll(&(0x7f0000000040)=[{r0, 0x8041}], 0x1, &(0x7f0000000100)={0x77359400}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

1m36.663789572s ago: executing program 1 (id=4669):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m2.450199856s ago: executing program 5 (id=4923):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001240))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000001, 0x5d031, 0xffffffffffffffff, 0x0)

57.896770767s ago: executing program 5 (id=4929):
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/net/dummy0/carrier\x00', 0x1, 0x0)
write(r0, &(0x7f0000000080)="8da3677c", 0x4)

56.606718463s ago: executing program 5 (id=4931):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rpc\x00')
openat(r0, &(0x7f0000000100)='auth.unix.ip/channel\x00', 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x118)

56.127209798s ago: executing program 5 (id=4932):
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})
fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffff70)
link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00')

55.549587221s ago: executing program 5 (id=4934):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/filehandle\x00', 0x2, 0x0)
write(r0, &(0x7f00000001c0)='mydomain   -147483647 0x2400 0 0 1\n', 0x23)

54.977858132s ago: executing program 5 (id=4935):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x3c)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)

39.739246791s ago: executing program 39 (id=4935):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x3c)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)

27.549236835s ago: executing program 4 (id=4996):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f00000054c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0xfd, @dev={0xfe, 0x80, '\x00', 0x16}, 0x9}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000040)="e1", 0x1}], 0x1}}, {{&(0x7f0000000800)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000840)="9f", 0x1}], 0x1}}], 0x2, 0x20040804)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={0x2, 0x8}, &(0x7f00000000c0)=0x8)

26.669202229s ago: executing program 4 (id=4998):
r0 = syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x1000400, &(0x7f0000000000)=ANY=[], 0x2, 0x679, &(0x7f0000020540)="$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")
linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', r0, &(0x7f0000000100)='./file7\x00', 0x1000)
close(0xffffffffffffffff)
unlink(&(0x7f0000000280)='./file1\x00')

25.679505946s ago: executing program 4 (id=4999):
symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901)
move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24)
chmod(&(0x7f0000000040)='./file0\x00', 0x0)

24.956681662s ago: executing program 4 (id=5001):
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040)=0x400008, 0x4)
r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@nomblk_io_submit}]}, 0xfe, 0x47c, &(0x7f0000000540)="$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")
syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000040))

23.121509574s ago: executing program 4 (id=5003):
r0 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x29, 0x0, &(0x7f0000000180))

20.458667533s ago: executing program 4 (id=5007):
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"])
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_timeval(r0, 0x1, 0x2, 0x0, 0x48)
getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98)

18.27183511s ago: executing program 40 (id=5007):
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"])
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_timeval(r0, 0x1, 0x2, 0x0, 0x48)
getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98)

2.10247858s ago: executing program 8 (id=5028):
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000000)={0xa, 0xe, 0x13e, 0x1ff, 0xffffffff, 0x8f400000})
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)
recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2)

1.755066706s ago: executing program 8 (id=5029):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/apparmor/.replace\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)="04080076657273696f6e00020500000004080070726f66696c6500070504003a3a6f00040600666c6167730003", 0x2d)

1.4314553s ago: executing program 8 (id=5030):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000, 0xfff5}}], 0xf00, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000280)=0x400000d2, 0x4)
shutdown(r0, 0x0)

1.038724698s ago: executing program 8 (id=5031):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000450000000010"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc)

689.297576ms ago: executing program 8 (id=5032):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'})
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x29, 0x0, &(0x7f0000000080))

0s ago: executing program 8 (id=5033):
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f00000009c0), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000a00)=0x20)
mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000f, 0x11, r0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000a40)=0x4000)

kernel console output (not intermixed with test programs):

inode:269: inode #11: comm syz.8.4357: mark_inode_dirty error
[  561.487807][T17281] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  561.488028][T17281] EXT4-fs warning (device loop8): ext4_evict_inode:272: couldn't mark inode dirty (err -117)
[  561.488119][T17281] EXT4-fs (loop8): 1 orphan inode deleted
[  561.523327][   T31] EXT4-fs error (device loop8): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1)
[  561.523383][   T31] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  561.525188][   T31] Quota error (device loop8): remove_tree: Can't read quota data block 1
[  561.525234][   T31] EXT4-fs error (device loop8): ext4_release_dquot:7115: comm kworker/u8:2: Failed to release dquot type 0
[  561.525268][   T31] loop8: lost filesystem error report for type 5 error -117
[  561.553792][T17281] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  561.573312][T17264] ntfs3(loop5): mft corrupted
[  561.754990][T17281] EXT4-fs error (device loop8): __ext4_get_inode_loc:4916: comm syz.8.4357: Invalid inode table block 1 in block_group 0
[  561.758690][T17281] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6522: Corrupt filesystem
[  561.772301][T14740] usb 5-1: new full-speed USB device number 29 using dummy_hcd
[  561.914629][T12512] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  561.936823][T12512] EXT4-fs error (device loop8): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0
[  561.936866][T12512] loop8: lost filesystem error report for type 5 error -117
[  561.939013][T12512] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6522: Corrupt filesystem
[  561.939043][T12512] loop8: lost filesystem error report for type 5 error -117
[  561.943059][T12512] EXT4-fs error (device loop8): ext4_quota_off:7363: inode #3: comm syz-executor: mark_inode_dirty error
[  561.943096][T12512] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  561.945275][T12512] EXT4-fs error (device loop8): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0
[  561.945320][T12512] loop8: lost filesystem error report for type 5 error -117
[  562.016459][T14740] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54
[  562.039186][T14740] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  562.039224][T14740] usb 5-1: config 0 has no interface number 0
[  562.066993][T14740] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  562.067030][T14740] usb 5-1: Product: syz
[  562.067050][T14740] usb 5-1: Manufacturer: syz
[  562.067067][T14740] usb 5-1: SerialNumber: syz
[  562.096482][T14740] usb 5-1: config 0 descriptor??
[  562.122132][T14740] usb 5-1: selecting invalid altsetting 1
[  562.138564][T14740] dvb_ttusb_budget: ttusb_init_controller: error
[  562.138588][T14740] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  562.383504][T14740] DVB: Unable to find symbol stv0299_attach()
[  562.596768][T14740] DVB: Unable to find symbol tda8083_attach()
[  562.596793][T14740] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[  562.623771][T14740] usb 5-1: USB disconnect, device number 29
[  563.416872][T17330] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4378'.
[  563.951064][ T5623] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[  564.110227][ T5623] usb 7-1: Using ep0 maxpacket: 32
[  564.120013][ T5623] usb 7-1: New USB device found, idVendor=04f2, idProduct=0618, bcdDevice= 0.00
[  564.127168][ T5623] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  564.127212][ T5623] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[  564.127246][ T5623] usb 7-1: config 0 interface 0 has no altsetting 0
[  564.127334][ T5623] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  564.190168][ T5623] usb 7-1: config 0 descriptor??
[  564.426955][T17373] loop4: detected capacity change from 0 to 256
[  564.674282][ T5623] input: HID 04f2:0618 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:04F2:0618.0042/input/input61
[  564.773487][T17377] loop5: detected capacity change from 0 to 1024
[  564.807945][T17377] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869)
[  564.840611][T17377] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002]
[  564.840716][T17377] System zones: 0-1, 3-36
[  564.840998][T17377] EXT4-fs (loop5): orphan cleanup on readonly fs
[  564.895970][ T5623] topseed 0003:04F2:0618.0042: input,hiddev0,hidraw0: USB HID v0.07 Device [HID 04f2:0618] on usb-dummy_hcd.6-1/input0
[  564.939785][ T5623] usb 7-1: USB disconnect, device number 26
[  565.089201][T17377] EXT4-fs (loop5): 1 orphan inode deleted
[  565.126523][T17377] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  565.298104][T17377] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002]
[  565.374679][T17377] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  565.404262][T17384] fido_id[17384]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  565.597258][ T5619] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  565.897179][T17368] loop8: detected capacity change from 0 to 40427
[  565.927233][T17368] F2FS-fs (loop8): Small segment_count (9 < 1 * 24)
[  565.927268][T17368] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  565.947844][T17368] F2FS-fs (loop8): invalid crc value
[  566.017502][T17392] loop6: detected capacity change from 0 to 4096
[  566.128195][T17368] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  566.205134][T17392] ntfs3(loop6): Failed to load $Extend (-22).
[  566.205186][T17392] ntfs3(loop6): Failed to initialize $Extend.
[  566.205554][T17368] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  566.205581][T17368] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  566.386907][   T30] audit: type=1800 audit(1792307547.882:489): pid=17368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4395" name="file1" dev="loop8" ino=10 res=0 errno=0
[  566.835933][T17382] loop4: detected capacity change from 0 to 32768
[  567.294752][T12512] syz-executor: attempt to access beyond end of device
[  567.294752][T12512] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  567.321661][T17407] loop9: detected capacity change from 0 to 32768
[  567.356965][T17407] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.4413 (17407)
[  567.374516][T17407] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  567.374559][T17407] BTRFS info (device loop9): using crc32c checksum algorithm
[  567.383458][T12512] CPU: 0 UID: 0 PID: 12512 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  567.383500][T12512] Tainted: [L]=SOFTLOCKUP
[  567.383511][T12512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  567.383528][T12512] Call Trace:
[  567.383539][T12512]  <TASK>
[  567.383552][T12512]  dump_stack_lvl+0xe8/0x150
[  567.383605][T12512]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  567.383643][T12512]  f2fs_write_end_bio+0x1211/0x16e0
[  567.383685][T12512]  ? blkg_put+0x22/0x240
[  567.383734][T12512]  __submit_merged_bio+0x258/0x6a0
[  567.383763][T12512]  ? srso_alias_return_thunk+0x5/0xfbef5
[  567.383796][T12512]  ? rcu_is_watching+0x16/0xb0
[  567.383848][T12512]  __submit_merged_write_cond+0x3c9/0x4e0
[  567.383892][T12512]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  567.383940][T12512]  ? srso_alias_return_thunk+0x5/0xfbef5
[  567.383985][T12512]  f2fs_write_data_pages+0x2a27/0x36f0
[  567.384067][T12512]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  567.384158][T12512]  ? srso_alias_return_thunk+0x5/0xfbef5
[  567.384190][T12512]  ? srso_alias_return_thunk+0x5/0xfbef5
[  567.384222][T12512]  ? __bfs+0x153/0x290
[  567.384253][T12512]  ? __pfx_hlock_conflict+0x10/0x10
[  567.384300][T12512]  ? srso_alias_return_thunk+0x5/0xfbef5
[  567.384346][T12512]  ? srso_alias_return_thunk+0x5/0xfbef5
[  567.384377][T12512]  ? srso_alias_return_thunk+0x5/0xfbef5
[  567.384409][T12512]  ? __lock_acquire+0x1511/0x2de0
[  567.384475][T12512]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  567.384512][T12512]  do_writepages+0x338/0x560
[  567.384548][T12512]  ? srso_alias_return_thunk+0x5/0xfbef5
[  567.384583][T12512]  ? srso_alias_return_thunk+0x5/0xfbef5
[  567.384620][T12512]  ? srso_alias_return_thunk+0x5/0xfbef5
[  567.384653][T12512]  ? do_raw_spin_unlock+0xf5/0x200
[  567.384700][T12512]  filemap_fdatawrite+0x1e9/0x2f0
[  567.384741][T12512]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  567.384829][T12512]  ? srso_alias_return_thunk+0x5/0xfbef5
[  567.384864][T12512]  ? srso_alias_return_thunk+0x5/0xfbef5
[  567.384903][T12512]  ? do_raw_spin_unlock+0xf5/0x200
[  567.384949][T12512]  f2fs_sync_dirty_inodes+0x30e/0x830
[  567.385018][T12512]  f2fs_write_checkpoint+0xa3d/0x2710
[  567.385098][T12512]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  567.385205][T12512]  kill_f2fs_super+0x2dd/0x700
[  567.385254][T12512]  ? __pfx_kill_f2fs_super+0x10/0x10
[  567.385306][T12512]  ? call_rcu+0x64d/0x8b0
[  567.385341][T12512]  ? srso_alias_return_thunk+0x5/0xfbef5
[  567.385373][T12512]  ? lockdep_hardirqs_on+0x7b/0x110
[  567.385408][T12512]  ? srso_alias_return_thunk+0x5/0xfbef5
[  567.385458][T12512]  deactivate_locked_super+0xbe/0x110
[  567.385505][T12512]  cleanup_mnt+0x204/0x2a0
[  567.385545][T12512]  task_work_run+0x1d9/0x270
[  567.385583][T12512]  ? __pfx_task_work_run+0x10/0x10
[  567.385628][T12512]  exit_to_user_mode_loop+0x204/0x770
[  567.385660][T12512]  ? srso_alias_return_thunk+0x5/0xfbef5
[  567.385692][T12512]  ? rcu_is_watching+0x16/0xb0
[  567.385734][T12512]  do_syscall_64+0x328/0x520
[  567.385767][T12512]  ? trace_irq_disable+0x3b/0x140
[  567.385798][T12512]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  567.385839][T12512]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  567.385867][T12512] RIP: 0033:0x7fdb3ed9f797
[  567.385893][T12512] Code: a2 c7 05 5c 7f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  567.385915][T12512] RSP: 002b:00007ffc1c351d48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  567.385945][T12512] RAX: 0000000000000000 RBX: 00007fdb3ee34efb RCX: 00007fdb3ed9f797
[  567.385964][T12512] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc1c351e00
[  567.386075][T12512] RBP: 00007ffc1c351e00 R08: 00007ffc1c352e00 R09: 00000000ffffffff
[  567.386101][T12512] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc1c352e90
[  567.386120][T12512] R13: 00007fdb3ee34efb R14: 000000000008a475 R15: 00007ffc1c352ed0
[  567.386171][T12512]  </TASK>
[  567.468599][T12512] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[  567.592474][ T5602] loop8: lost filesystem error report for type 5 error -108
[  568.077102][T17407] BTRFS info (device loop9): enabling ssd optimizations
[  568.077144][T17407] BTRFS info (device loop9): turning on flush-on-commit
[  568.077166][T17407] BTRFS info (device loop9): enabling free space tree
[  568.077188][T17407] BTRFS info (device loop9): enabling auto defrag
[  568.077212][T17407] BTRFS info (device loop9): use lzo compression, level 1
[  568.077512][T17407] BTRFS info (device loop9): max_inline set to 4096
[  568.372403][   T30] audit: type=1800 audit(1792307549.872:490): pid=17407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4413" name="file1" dev="loop9" ino=260 res=0 errno=0
[  568.526753][T15658] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  569.383009][T17458] ubi0: attaching mtd0
[  569.383046][T17458] ubi0 error: ubi_attach_mtd_dev: bad VID header (20) or data offsets (84)
[  570.424226][T17452] loop4: detected capacity change from 0 to 32768
[  570.541553][T17452] ERROR: (device loop4): diNewExt: no free extents
[  570.541553][T17452] 
[  570.669939][T17452] ERROR: (device loop4): remounting filesystem as read-only
[  570.670002][T17452] ialloc: diAlloc returned -5!
[  572.421569][T17522] loop5: detected capacity change from 0 to 256
[  572.691280][T17522] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x9c8165b0, utbl_chksum : 0xe619d30d)
[  572.810775][T17522] exFAT-fs (loop5): error, data size is invalid(16781312)
[  572.810812][T17522] exFAT-fs (loop5): Filesystem has been set read-only
[  572.845816][T17522] exFAT-fs (loop5): error, data size is invalid(16781312)
[  573.172957][T17523] loop9: detected capacity change from 0 to 8192
[  573.207724][T17523] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  573.444681][T17537] loop5: detected capacity change from 0 to 256
[  573.510916][T17537] exfat: Deprecated parameter 'namecase'
[  573.510992][T17537] exfat: Deprecated parameter 'namecase'
[  573.610184][T17537] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  574.415540][T17559] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4470'.
[  574.751215][T17540] loop2: detected capacity change from 0 to 40427
[  574.764542][T17540] F2FS-fs: heap/no_heap options were deprecated
[  574.777145][T17540] F2FS-fs (loop2): build fault injection rate: 19
[  574.777174][T17540] F2FS-fs (loop2): build fault injection type: 0x3bfe8c
[  574.778134][T17540] F2FS-fs (loop2): invalid crc value
[  574.825497][T17540] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa62/0x1940
[  574.910488][T17540] F2FS-fs (loop2): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x21d/0x3d0
[  574.947257][T17540] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  574.973181][T17540] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  575.247186][T17540] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0xa60/0x1ee0
[  575.681230][    C0] F2FS-fs (loop2): inject write IO error in f2fs_write_end_bio of blk_update_request+0x57b/0xe50
[  575.681471][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  575.681511][    C0] Tainted: [L]=SOFTLOCKUP
[  575.681523][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  575.681539][    C0] Call Trace:
[  575.681551][    C0]  <TASK>
[  575.681564][    C0]  dump_stack_lvl+0xe8/0x150
[  575.681610][    C0]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  575.681646][    C0]  f2fs_write_end_bio+0x1211/0x16e0
[  575.681687][    C0]  ? blkg_put+0x22/0x240
[  575.681733][    C0]  blk_update_request+0x57b/0xe50
[  575.681782][    C0]  blk_mq_end_request+0x3e/0x70
[  575.681822][    C0]  blk_flush_complete_seq+0x68a/0xce0
[  575.681869][    C0]  flush_end_io+0xb7e/0xe90
[  575.681919][    C0]  __blk_mq_end_request+0x461/0x600
[  575.681959][    C0]  blk_done_softirq+0x10a/0x160
[  575.681992][    C0]  handle_softirqs+0x226/0x860
[  575.682034][    C0]  ? schedule+0x90/0x2b0
[  575.682062][    C0]  ? run_ksoftirqd+0x36/0x60
[  575.682111][    C0]  ? smpboot_thread_fn+0x4e/0xa70
[  575.682151][    C0]  run_ksoftirqd+0x36/0x60
[  575.682190][    C0]  smpboot_thread_fn+0x565/0xa70
[  575.682234][    C0]  ? smpboot_thread_fn+0x4e/0xa70
[  575.682285][    C0]  kthread+0x38b/0x480
[  575.682314][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  575.682354][    C0]  ? __pfx_kthread+0x10/0x10
[  575.682384][    C0]  ret_from_fork+0x514/0xb70
[  575.682416][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  575.682443][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  575.682475][    C0]  ? __switch_to+0xc89/0x1420
[  575.682518][    C0]  ? __pfx_kthread+0x10/0x10
[  575.682549][    C0]  ret_from_fork_asm+0x1a/0x30
[  575.682597][    C0]  </TASK>
[  575.682608][    C0] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  575.682978][ T5617] F2FS-fs (loop2): do_checkpoint failed err:-5, stop checkpoint
[  575.741804][   T24] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  575.898578][   T24] usb 6-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[  575.909888][   T24] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  575.909931][   T24] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  575.909962][   T24] usb 6-1: config 0 interface 0 has no altsetting 0
[  575.910001][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  575.919826][   T24] usb 6-1: config 0 descriptor??
[  576.026374][T17569] loop6: detected capacity change from 0 to 32768
[  576.051430][T17569] 
[  576.051430][T17569]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  576.051430][T17569] 
[  576.382248][ T7298] 
[  576.382248][ T7298]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  576.382248][ T7298] 
[  576.390712][ T7298] 
[  576.390712][ T7298]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  576.390712][ T7298] 
[  576.418423][   T24] hid_parser_main: 4 callbacks suppressed
[  576.418470][   T24] hid-multitouch 0003:0EEF:72C4.0043: unknown main item tag 0x7
[  576.418568][   T24] hid-multitouch 0003:0EEF:72C4.0043: unbalanced collection at end of report description
[  576.444918][   T24] hid-multitouch 0003:0EEF:72C4.0043: probe with driver hid-multitouch failed with error -22
[  576.611675][T17592] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead
[  576.611761][T17592] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0003 instead
[  576.650578][T17592] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead
[  576.650620][T17592] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead
[  576.650648][T17592] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead
[  576.651310][T17592] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead
[  576.651341][T17592] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001984: 0x2000 instead
[  576.651366][T17592] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001998: 0x00e4 instead
[  576.717136][ T5602] usb 6-1: USB disconnect, device number 30
[  576.821767][T17594] batadv0: entered promiscuous mode
[  576.826322][T17594] macvtap1: entered promiscuous mode
[  576.838914][T17594] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  576.935479][T17594] batadv0: left promiscuous mode
[  576.988699][T17592] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[  576.988722][T17592] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32
[  577.502233][T17600] loop9: detected capacity change from 0 to 64
[  577.549134][T17582] syz.4.4481 (17582): drop_caches: 2
[  577.663166][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  577.758949][T17606] loop8: detected capacity change from 0 to 512
[  578.339189][T17618] loop2: detected capacity change from 0 to 4096
[  578.463349][T17618] ntfs3(loop2): Failed to initialize $Extend/$ObjId.
[  579.067492][ T5624] Bluetooth: hci4: ISO packet too small
[  579.160157][T17636] batadv0: entered promiscuous mode
[  579.167495][T17636] macvtap1: entered promiscuous mode
[  579.187143][T17636] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  579.237262][T17636] batadv0: left promiscuous mode
[  579.545295][T17616] loop4: detected capacity change from 0 to 32768
[  580.179598][ T5623] usb 7-1: new high-speed USB device number 27 using dummy_hcd
[  580.339846][ T5623] usb 7-1: Using ep0 maxpacket: 32
[  580.341935][ T5623] usb 7-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[  580.343390][ T5623] usb 7-1: config 0 has an invalid interface number: 196 but max is 0
[  580.343420][ T5623] usb 7-1: config 0 has no interface number 0
[  580.343568][ T5623] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  580.343604][ T5623] usb 7-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  580.343634][ T5623] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  580.343666][ T5623] usb 7-1: config 0 interface 196 has no altsetting 0
[  580.424504][ T5623] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  580.424544][ T5623] usb 7-1: Product: syz
[  580.424564][ T5623] usb 7-1: Manufacturer: syz
[  580.424582][ T5623] usb 7-1: SerialNumber: syz
[  580.425328][T17627] loop9: detected capacity change from 0 to 40427
[  580.480467][T17627] F2FS-fs (loop9): Insane cp_payload (553648128 >= 504)
[  580.480510][T17627] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  580.481004][T17627] F2FS-fs (loop9): build fault injection rate: 17008
[  580.481027][T17627] F2FS-fs (loop9): build fault injection type: 0x1f8
[  580.483753][T17627] F2FS-fs (loop9): invalid crc value
[  580.529157][ T5623] usb 7-1: config 0 descriptor??
[  580.536937][T17650] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  580.599568][   T24] usb 6-1: new full-speed USB device number 31 using dummy_hcd
[  580.778235][   T24] usb 6-1: not running at top speed; connect to a high speed hub
[  580.778313][   T24] usb 6-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00
[  580.804380][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  580.804451][   T24] usb 6-1: Product: syz
[  580.804475][   T24] usb 6-1: Manufacturer: syz
[  580.804495][   T24] usb 6-1: SerialNumber: syz
[  580.851857][   T24] keyspan 6-1:1.0: Keyspan 4 port adapter converter detected
[  580.895611][   T24] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  580.914445][   T24] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  580.931164][   T24] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  580.939006][   T24] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  580.977036][T17627] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  581.187874][ T5623] ipheth 7-1:0.196: ipheth_enable_ncm: usb_control_msg: -71
[  581.216908][T17627] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[  581.216974][T17627] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  581.285929][T17627] F2FS-fs (loop9): Stopped filesystem due to reason: 0
[  581.451440][T17666] loop2: detected capacity change from 0 to 4096
[  581.504675][ T5623] ipheth 7-1:0.196: Apple iPhone USB Ethernet device attached
[  581.528257][ T5623] usb 7-1: USB disconnect, device number 27
[  581.708585][T17666] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  581.803267][ T5623] ipheth 7-1:0.196: Apple iPhone USB Ethernet now disconnected
[  581.834453][T17666] ntfs3(loop2): ino=21, The size of extended attributes must not exceed 64KiB
[  581.949035][T17653] loop8: detected capacity change from 0 to 32768
[  581.964664][T17653] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.4513 (17653)
[  582.050067][T17653] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  582.050108][T17653] BTRFS info (device loop8): using sha256 checksum algorithm
[  582.406297][T17653] BTRFS info (device loop8): enabling ssd optimizations
[  582.406338][T17653] BTRFS info (device loop8): turning on async discard
[  582.406398][T17653] BTRFS info (device loop8): enabling free space tree
[  582.597151][T17672] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  582.875259][T12512] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  583.186667][T17701] batadv0: entered promiscuous mode
[  583.205643][T17701] macvtap1: entered promiscuous mode
[  583.217429][T17701] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  583.340536][T17701] batadv0: left promiscuous mode
[  583.532661][ T5603] usb 6-1: USB disconnect, device number 31
[  583.668155][ T5603] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  583.765884][ T5603] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  583.921327][ T5603] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  583.975840][ T5603] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  583.992186][ T5603] keyspan 6-1:1.0: device disconnected
[  584.403239][T17695] syz.2.4521 (17695): drop_caches: 2
[  584.682372][T17717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead
[  584.682425][T17717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0003 instead
[  584.682722][T17717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead
[  584.682746][T17717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead
[  584.682767][T17717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead
[  584.683551][T17717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead
[  584.683579][T17717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001984: 0x2000 instead
[  584.683605][T17717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001998: 0x00e4 instead
[  585.116114][T17717] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[  585.116140][T17717] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32
[  585.446100][T17708] loop5: detected capacity change from 0 to 40427
[  585.455416][T17708] F2FS-fs: heap/no_heap options were deprecated
[  585.468677][T17708] F2FS-fs (loop5): build fault injection rate: 19
[  585.468706][T17708] F2FS-fs (loop5): build fault injection type: 0x3bfe8c
[  585.475014][T17708] F2FS-fs (loop5): invalid crc value
[  585.538961][T17708] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa62/0x1940
[  585.727828][T17708] F2FS-fs (loop5): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x21d/0x3d0
[  585.794516][T17713] loop6: detected capacity change from 0 to 32768
[  585.818535][T17708] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  585.875630][T17736] input: syz0 as /devices/virtual/input/input63
[  585.877170][T17713] ERROR: (device loop6): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1
[  585.877170][T17713] 
[  586.034792][T17708] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  586.358489][T17746] f2fs_ckpt-7:5: attempt to access beyond end of device
[  586.358489][T17746] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  586.385777][T17746] CPU: 0 UID: 0 PID: 17746 Comm: f2fs_ckpt-7:5 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  586.385829][T17746] Tainted: [L]=SOFTLOCKUP
[  586.385840][T17746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  586.385856][T17746] Call Trace:
[  586.385868][T17746]  <TASK>
[  586.385880][T17746]  dump_stack_lvl+0xe8/0x150
[  586.385925][T17746]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  586.385961][T17746]  f2fs_write_end_bio+0x1211/0x16e0
[  586.386006][T17746]  ? blkg_put+0x22/0x240
[  586.386052][T17746]  __submit_merged_bio+0x258/0x6a0
[  586.386080][T17746]  ? srso_alias_return_thunk+0x5/0xfbef5
[  586.386111][T17746]  ? rcu_is_watching+0x16/0xb0
[  586.386154][T17746]  __submit_merged_write_cond+0x3c9/0x4e0
[  586.386195][T17746]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  586.386249][T17746]  ? srso_alias_return_thunk+0x5/0xfbef5
[  586.386291][T17746]  f2fs_write_data_pages+0x2a27/0x36f0
[  586.386368][T17746]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  586.386454][T17746]  ? ktime_get+0x45/0x220
[  586.386482][T17746]  ? srso_alias_return_thunk+0x5/0xfbef5
[  586.386513][T17746]  ? srso_alias_return_thunk+0x5/0xfbef5
[  586.386544][T17746]  ? __bfs+0x153/0x290
[  586.386573][T17746]  ? __pfx_hlock_conflict+0x10/0x10
[  586.386614][T17746]  ? srso_alias_return_thunk+0x5/0xfbef5
[  586.386659][T17746]  ? srso_alias_return_thunk+0x5/0xfbef5
[  586.386689][T17746]  ? srso_alias_return_thunk+0x5/0xfbef5
[  586.386720][T17746]  ? __lock_acquire+0x1511/0x2de0
[  586.386757][T17746]  ? srso_alias_return_thunk+0x5/0xfbef5
[  586.386813][T17746]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  586.386857][T17746]  do_writepages+0x338/0x560
[  586.386893][T17746]  ? srso_alias_return_thunk+0x5/0xfbef5
[  586.386927][T17746]  ? srso_alias_return_thunk+0x5/0xfbef5
[  586.386961][T17746]  ? srso_alias_return_thunk+0x5/0xfbef5
[  586.386990][T17746]  ? do_raw_spin_unlock+0xf5/0x200
[  586.387033][T17746]  filemap_fdatawrite+0x1e9/0x2f0
[  586.387071][T17746]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  586.387146][T17746]  ? srso_alias_return_thunk+0x5/0xfbef5
[  586.387180][T17746]  ? srso_alias_return_thunk+0x5/0xfbef5
[  586.387215][T17746]  ? do_raw_spin_unlock+0xf5/0x200
[  586.387260][T17746]  f2fs_sync_dirty_inodes+0x30e/0x830
[  586.387319][T17746]  f2fs_write_checkpoint+0xa3d/0x2710
[  586.387395][T17746]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  586.387477][T17746]  ? __pfx_down_write+0x10/0x10
[  586.387514][T17746]  ? srso_alias_return_thunk+0x5/0xfbef5
[  586.387549][T17746]  ? rcu_is_watching+0x16/0xb0
[  586.387584][T17746]  ? srso_alias_return_thunk+0x5/0xfbef5
[  586.387619][T17746]  __checkpoint_and_complete_reqs+0x135/0x480
[  586.387672][T17746]  ? __pfx___checkpoint_and_complete_reqs+0x10/0x10
[  586.387729][T17746]  ? srso_alias_return_thunk+0x5/0xfbef5
[  586.387763][T17746]  ? schedule+0x90/0x2b0
[  586.387804][T17746]  issue_checkpoint_thread+0xd5/0x270
[  586.387848][T17746]  ? srso_alias_return_thunk+0x5/0xfbef5
[  586.387884][T17746]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  586.387919][T17746]  ? srso_alias_return_thunk+0x5/0xfbef5
[  586.387952][T17746]  ? __pfx_autoremove_wake_function+0x10/0x10
[  586.387993][T17746]  ? srso_alias_return_thunk+0x5/0xfbef5
[  586.388024][T17746]  ? __kthread_parkme+0x71/0x1f0
[  586.388068][T17746]  ? __kthread_parkme+0x199/0x1f0
[  586.388114][T17746]  kthread+0x38b/0x480
[  586.388143][T17746]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  586.388179][T17746]  ? __pfx_kthread+0x10/0x10
[  586.388209][T17746]  ret_from_fork+0x514/0xb70
[  586.388241][T17746]  ? __pfx_ret_from_fork+0x10/0x10
[  586.388268][T17746]  ? srso_alias_return_thunk+0x5/0xfbef5
[  586.388299][T17746]  ? __switch_to+0xc89/0x1420
[  586.388341][T17746]  ? __pfx_kthread+0x10/0x10
[  586.388371][T17746]  ret_from_fork_asm+0x1a/0x30
[  586.388419][T17746]  </TASK>
[  586.401583][T17746] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  587.877735][T17525] IPVS: starting estimator thread 0...
[  587.887717][T17772] IPVS: lc: FWM 3 0x00000003 - no destination available
[  587.979495][T17773] IPVS: using max 24 ests per chain, 57600 per kthread
[  588.451105][T17786] loop5: detected capacity change from 0 to 256
[  588.489734][T17786] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d)
[  588.630233][T17760] loop8: detected capacity change from 0 to 32768
[  588.682109][T17760] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  588.996731][T17760] XFS (loop8): Ending clean mount
[  589.056752][T17760] XFS (loop8): Quotacheck needed: Please wait.
[  589.257075][T17807] ip_tables: iptables: counters copy to user failed while replacing table
[  589.260762][T17802] input: syz0 as /devices/virtual/input/input64
[  589.414148][   T30] audit: type=1326 audit(1792307570.912:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17808 comm="syz.4.4563" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50fdf9e559 code=0x7ffc0000
[  589.414253][   T30] audit: type=1326 audit(1792307570.912:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17808 comm="syz.4.4563" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50fdf9e559 code=0x7ffc0000
[  589.414301][   T30] audit: type=1326 audit(1792307570.912:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17808 comm="syz.4.4563" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50fdf9e559 code=0x7ffc0000
[  589.422974][   T30] audit: type=1326 audit(1792307570.922:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17808 comm="syz.4.4563" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50fdf9e559 code=0x7ffc0000
[  589.424225][   T30] audit: type=1326 audit(1792307570.922:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17808 comm="syz.4.4563" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f50fdf9e559 code=0x7ffc0000
[  589.424338][   T30] audit: type=1326 audit(1792307570.922:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17808 comm="syz.4.4563" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50fdf9e559 code=0x7ffc0000
[  589.424398][   T30] audit: type=1326 audit(1792307570.922:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17808 comm="syz.4.4563" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50fdf9e559 code=0x7ffc0000
[  589.437213][   T30] audit: type=1326 audit(1792307570.932:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17808 comm="syz.4.4563" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50fdf9e559 code=0x7ffc0000
[  589.437288][   T30] audit: type=1326 audit(1792307570.932:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17808 comm="syz.4.4563" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50fdf9e559 code=0x7ffc0000
[  589.473801][   T30] audit: type=1326 audit(1792307570.962:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17808 comm="syz.4.4563" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f50fdf5ed8e code=0x7ffc0000
[  589.775331][T17817] ip_tables: iptables: counters copy to user failed while replacing table
[  589.777081][T17817] ip_tables: iptables: counters copy to user failed while replacing table
[  590.252442][T17760] XFS (loop8): Quotacheck: Done.
[  590.452940][T12512] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  590.782114][T17832] input: syz1 as /devices/virtual/input/input66
[  591.571308][T17821] loop9: detected capacity change from 0 to 32768
[  591.620610][T17821] XFS (loop9): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  591.700815][T17821] XFS (loop9): Ending clean mount
[  591.761889][T17853] loop4: detected capacity change from 0 to 1024
[  591.763261][T17853] EXT4-fs: Ignoring removed bh option
[  591.776726][T17853] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  591.855740][T17853] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  591.976337][T17863] loop5: detected capacity change from 0 to 512
[  591.980741][T17853] EXT4-fs error (device loop4): ext4_find_dest_de:2052: inode #12: block 7: comm syz.4.4580: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[  592.114621][T17853] EXT4-fs (loop4): Remounting filesystem read-only
[  592.133351][T17863] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  592.133380][T17863] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e118, mo2=0002]
[  592.133639][T17863] EXT4-fs (loop5): orphan cleanup on readonly fs
[  592.202457][T17863] EXT4-fs error (device loop5): ext4_validate_block_bitmap:436: comm syz.5.4583: bg 0: block 15: invalid block bitmap
[  592.202509][T17863] loop5: lost filesystem error report for type 5 error -117
[  592.203256][T17863] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6680: Corrupt filesystem
[  592.203291][T17863] loop5: lost filesystem error report for type 5 error -117
[  592.217837][    C0] EXT4-fs (loop5): error count since last fsck: 2
[  592.217876][    C0] EXT4-fs (loop5): initial error at time 1792307573: ext4_validate_block_bitmap:436
[  592.217912][    C0] EXT4-fs (loop5): last error at time 1792307573: ext4_mb_clear_bb:6680
[  592.343351][T17863] EXT4-fs (loop5): 1 truncate cleaned up
[  592.348812][T17863] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  592.380723][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  592.428285][T15658] XFS (loop9): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  592.527040][T17869] netlink: 'syz.8.4585': attribute type 83 has an invalid length.
[  592.563408][T17863] EXT4-fs (loop5): shut down requested (1)
[  593.254151][ T5619] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  593.736816][T17897] netlink: 'syz.4.4597': attribute type 12 has an invalid length.
[  595.067121][T17929] netlink: 'syz.5.4610': attribute type 3 has an invalid length.
[  595.067159][T17929] netlink: 'syz.5.4610': attribute type 3 has an invalid length.
[  595.088656][T17931] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4611'.
[  595.127778][T17929] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4610'.
[  595.289706][ T5623] usb 7-1: new low-speed USB device number 28 using dummy_hcd
[  595.386151][T17941] loop8: detected capacity change from 0 to 128
[  595.441830][ T5623] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  595.443204][ T5623] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  595.443236][ T5623] usb 7-1: config 0 has no interface number 0
[  595.443284][ T5623] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  595.443318][ T5623] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  595.443376][ T5623] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  595.516589][ T5623] usb 7-1: config 0 descriptor??
[  595.520762][T17941] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  595.521420][T17926] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  595.524080][T17941] ext4 filesystem being mounted at /315/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  595.596313][ T5623] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  595.766707][T12512] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  595.792108][ T5623] usb 7-1: USB disconnect, device number 28
[  596.728659][T17974] loop5: detected capacity change from 0 to 64
[  596.780631][ T5790] usb 7-1: new high-speed USB device number 29 using dummy_hcd
[  596.940034][ T5790] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  596.941315][ T5790] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  596.941372][ T5790] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  596.950874][ T5790] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected
[  596.951142][ T5790] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81
[  596.951226][ T5790] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1
[  596.952920][ T5790] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84
[  596.953013][ T5790] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2
[  597.014177][ T5790] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  597.017635][ T5790] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88
[  597.017734][ T5790] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6
[  597.035296][ T5790] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  597.410310][ T5623] usb 7-1: USB disconnect, device number 29
[  597.418413][ T5623] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  597.457610][ T5623] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  597.484666][ T5623] keyspan 7-1:1.0: device disconnected
[  597.947064][T17979] smpboot: CPU 1 is now offline
[  598.487386][T17990] loop8: detected capacity change from 0 to 1024
[  600.233752][T18014] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified.
[  600.233787][T18014] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  600.483798][T18018] netlink: 856 bytes leftover after parsing attributes in process `syz.8.4647'.
[  600.826812][T18024] loop6: detected capacity change from 0 to 512
[  601.456279][T18024] syz.6.4650: attempt to access beyond end of device
[  601.456279][T18024] loop6: rw=8912896, sector=17179852706, nr_sectors = 16 limit=512
[  601.456671][T18024] syz.6.4650: attempt to access beyond end of device
[  601.456671][T18024] loop6: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512
[  601.465531][   T30] kauditd_printk_skb: 11 callbacks suppressed
[  601.465551][   T30] audit: type=1800 audit(1792307582.952:512): pid=18024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4650" name="file2" dev="loop6" ino=1048885 res=0 errno=0
[  601.687384][T18024] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fffff00)
[  601.687414][T18024] FAT-fs (loop6): Filesystem has been set read-only
[  602.229049][T18045] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4658'.
[  602.229105][T18045] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4658'.
[  602.257965][T18045] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4658'.
[  602.290743][T18046] loop4: detected capacity change from 0 to 512
[  602.321252][T18048] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4658'.
[  602.365218][T18046] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.4660: inode has both inline data and extents flags
[  602.365252][T18046] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  602.366250][T18046] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.4660: couldn't read orphan inode 15 (err -117)
[  602.366279][T18046] loop4: lost filesystem error report for type 5 error -117
[  602.368201][T18046] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  602.513861][T18046] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters
[  603.084344][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  603.262428][T18054] loop8: detected capacity change from 0 to 4096
[  603.300930][T18054] ntfs3(loop8): ino=3, mi_enum_attr
[  603.398100][T18054] ntfs3(loop8): ino=19, mi_enum_attr
[  603.398131][T18054] ntfs3(loop8): Mark volume as dirty due to NTFS errors
[  603.495473][T18054] ntfs3(loop8): ino=9, attr_set_size_ex
[  603.822616][T18061] loop5: detected capacity change from 0 to 512
[  603.841915][T18061] EXT4-fs: Ignoring removed bh option
[  603.928775][T18061] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  604.387556][T18061] EXT4-fs error (device loop5): ext4_iget_extra_inode:5210: inode #15: comm syz.5.4665: corrupted in-inode xattr: e_value size too large
[  604.387602][T18061] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  604.389288][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  604.389308][    C0] EXT4-fs (loop5): initial error at time 1792307585: ext4_iget_extra_inode:5210: inode 15
[  604.389344][    C0] EXT4-fs (loop5): last error at time 1792307585: ext4_iget_extra_inode:5210: inode 15
[  604.455114][T18061] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.4665: couldn't read orphan inode 15 (err -117)
[  604.455149][T18061] loop5: lost filesystem error report for type 5 error -117
[  604.489095][T18061] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  604.757651][ T5619] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  605.165979][   T30] audit: type=1326 audit(1792307586.642:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18072 comm="syz.6.4672" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6c79e559 code=0x7ffc0000
[  605.166041][   T30] audit: type=1326 audit(1792307586.652:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18072 comm="syz.6.4672" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6c79e559 code=0x7ffc0000
[  605.241330][   T30] audit: type=1326 audit(1792307586.662:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18072 comm="syz.6.4672" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6c79e559 code=0x7ffc0000
[  605.241428][   T30] audit: type=1326 audit(1792307586.662:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18072 comm="syz.6.4672" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6c79e559 code=0x7ffc0000
[  605.241472][   T30] audit: type=1326 audit(1792307586.672:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18072 comm="syz.6.4672" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5d6c79e559 code=0x7ffc0000
[  605.241515][   T30] audit: type=1326 audit(1792307586.672:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18072 comm="syz.6.4672" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6c79e559 code=0x7ffc0000
[  605.241558][   T30] audit: type=1326 audit(1792307586.672:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18072 comm="syz.6.4672" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6c79e559 code=0x7ffc0000
[  605.416450][   T30] audit: type=1326 audit(1792307586.782:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18072 comm="syz.6.4672" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f5d6c79e559 code=0x7ffc0000
[  605.416508][   T30] audit: type=1326 audit(1792307586.782:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18072 comm="syz.6.4672" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6c79e559 code=0x7ffc0000
[  605.738239][T18079] RDS: rds_bind could not find a transport for ::8000:0:20:0, load rds_tcp or rds_rdma?
[  606.208867][T17119] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  606.245517][T17119] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  606.261236][T17119] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  606.281970][T17119] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  606.306274][T17119] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  608.237306][T18119] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[  608.237338][T18119] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  608.262912][    T9] usb 5-1: new low-speed USB device number 30 using dummy_hcd
[  608.315684][T18084] rxe_eth0 speed is unknown, defaulting to 1000
[  608.340645][ T5602] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  608.342822][T18119] vhci_hcd vhci_hcd.0: Device attached
[  608.376857][T17119] Bluetooth: hci6: command tx timeout
[  608.441544][    T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  608.442077][    T9] usb 5-1: config 0 has no interfaces?
[  608.442108][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  608.445447][    T9] usb 5-1: config 0 descriptor??
[  608.500047][ T5602] usb 6-1: Using ep0 maxpacket: 32
[  608.506201][ T5602] usb 6-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=6a.32
[  608.521330][ T5602] usb 6-1: config 0 has an invalid interface number: 86 but max is 0
[  608.521356][ T5602] usb 6-1: config 0 has no interface number 0
[  608.521393][ T5602] usb 6-1: config 0 interface 86 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023
[  608.521416][ T5602] usb 6-1: config 0 interface 86 altsetting 16 endpoint 0x82 has invalid wMaxPacketSize 0
[  608.521437][ T5602] usb 6-1: config 0 interface 86 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 0
[  608.521459][ T5602] usb 6-1: config 0 interface 86 has no altsetting 0
[  608.528486][ T5602] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  608.528513][ T5602] usb 6-1: Product: syz
[  608.528527][ T5602] usb 6-1: Manufacturer: syz
[  608.528541][ T5602] usb 6-1: SerialNumber: syz
[  608.560248][ T5790] usb 41-1: new low-speed USB device number 2 using vhci_hcd
[  608.658618][ T5602] usb 6-1: config 0 descriptor??
[  608.659566][T18124] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  608.728110][T18126] vhci_hcd: connection closed
[  608.749039][  T982] usb 5-1: USB disconnect, device number 30
[  608.842563][ T5790] usb 41-1: device descriptor read/64, error -71
[  608.873781][T18129] loop8: detected capacity change from 0 to 4096
[  608.933958][   T50] vhci_hcd vhci_hcd.4: stop threads
[  608.964299][T18131] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4690'.
[  608.967084][ T5602] ljca 6-1:0.86: submit rx urb failed: -90
[  608.967133][ T5602] ljca 6-1:0.86: probe with driver ljca failed with error -90
[  609.015391][   T50] vhci_hcd vhci_hcd.4: release socket
[  609.060533][   T50] vhci_hcd vhci_hcd.4: disconnect device
[  609.100168][ T5790] vhci_hcd vhci_hcd.4: vhci_device speed not set
[  609.192522][ T5602] usb 6-1: USB disconnect, device number 32
[  609.343365][T18132] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  610.456456][T17119] Bluetooth: hci6: command tx timeout
[  611.414988][T18162] loop8: detected capacity change from 0 to 1024
[  611.638467][ T5624] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  611.697950][ T5624] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  611.714529][ T5624] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  611.748024][ T5624] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  611.777862][ T5624] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  612.532817][ T5624] Bluetooth: hci6: command tx timeout
[  612.594241][T18178] loop4: detected capacity change from 0 to 512
[  612.677215][T18178] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  612.708884][T18178] ext4 filesystem being mounted at /831/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  612.883364][T18179] syz_tun: entered allmulticast mode
[  612.974931][T18173] syz_tun: left allmulticast mode
[  613.260306][T18190] loop5: detected capacity change from 0 to 164
[  613.527151][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  613.874014][T18084] bridge0: port 1(bridge_slave_0) entered blocking state
[  613.874116][T18084] bridge0: port 1(bridge_slave_0) entered disabled state
[  613.874285][T18084] bridge_slave_0: entered allmulticast mode
[  613.901181][ T5624] Bluetooth: hci7: command tx timeout
[  613.935563][T18084] bridge_slave_0: entered promiscuous mode
[  613.957128][T18084] bridge0: port 2(bridge_slave_1) entered blocking state
[  613.957220][T18084] bridge0: port 2(bridge_slave_1) entered disabled state
[  613.957349][T18084] bridge_slave_1: entered allmulticast mode
[  614.001746][T18084] bridge_slave_1: entered promiscuous mode
[  614.097760][T18202] loop4: detected capacity change from 0 to 1024
[  614.536514][T18084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  614.564215][T18207] loop8: detected capacity change from 0 to 64
[  614.612556][ T5624] Bluetooth: hci6: command tx timeout
[  614.668833][T18084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  614.928218][T18084] team0: Port device team_slave_0 added
[  614.954939][T18084] team0: Port device team_slave_1 added
[  615.123885][T18084] batman_adv: batadv0: Adding interface: batadv_slave_0
[  615.123906][T18084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  615.123930][T18084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  615.125518][T18084] batman_adv: batadv0: Adding interface: batadv_slave_1
[  615.125532][T18084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  615.125557][T18084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  615.758318][T18084] hsr_slave_0: entered promiscuous mode
[  615.773935][T18084] hsr_slave_1: entered promiscuous mode
[  615.774645][T18084] debugfs: 'hsr0' already exists in 'hsr'
[  615.774665][T18084] Cannot create hsr debugfs directory
[  615.972318][ T5624] Bluetooth: hci7: command tx timeout
[  616.412832][T18225] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.4722'.
[  616.614127][T18221] ip6gretap0: entered promiscuous mode
[  616.632860][T18221] batadv0: entered promiscuous mode
[  616.988435][T18221] ip6gretap0: left promiscuous mode
[  617.012840][T18221] batadv0: left promiscuous mode
[  618.027581][T18243] loop4: detected capacity change from 0 to 512
[  618.050208][ T5624] Bluetooth: hci7: command tx timeout
[  619.302024][T18164] rxe_eth0 speed is unknown, defaulting to 1000
[  619.380714][ T5602] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  619.541449][ T5602] usb 9-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00
[  619.542525][ T5602] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  619.542555][ T5602] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  619.542591][ T5602] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  619.618473][ T5602] usb 9-1: config 0 descriptor??
[  619.780222][T18255] loop6: detected capacity change from 0 to 512
[  619.828592][T18255] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[  619.828745][T18255] System zones: 1-12
[  619.852131][T18255] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: inode #12: comm syz.6.4736: missing EA_INODE flag
[  619.852156][T18255] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  619.852505][T18255] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.4736: error while reading EA inode 12 err=-117
[  619.852532][T18255] loop6: lost filesystem error report for type 5 error -117
[  619.852854][T18255] EXT4-fs (loop6): 1 orphan inode deleted
[  619.953713][T18255] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  620.130811][ T5624] Bluetooth: hci7: command tx timeout
[  620.162280][T18255] fscrypt (loop6, inode 15): Unsupported log2_data_unit_size in encryption policy: 170
[  620.245023][ T5602] input: HID 28bd:0935 Mouse as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:28BD:0935.0044/input/input67
[  620.502635][ T5602] uclogic 0003:28BD:0935.0044: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0935] on usb-dummy_hcd.8-1/input0
[  620.535860][ T5602] usb 9-1: USB disconnect, device number 10
[  620.688873][ T7298] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  621.156802][T18259] fido_id[18259]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory
[  621.755007][T18270] ALSA: mixer_oss: invalid OSS volume ''
[  621.755028][T18270] ALSA: mixer_oss: invalid OSS volume 'ˆ'
[  621.755044][T18270] ALSA: mixer_oss: invalid OSS volume '
'
[  621.755058][T18270] ALSA: mixer_oss: invalid OSS volume '…¹©3ú.šJÍÚy¦ßÀã­ÄÛƒ£“tšyìZ”Rä'
[  621.755823][T18270] ALSA: mixer_oss: invalid OSS volume ''
[  622.606353][T18283] loop6: detected capacity change from 0 to 2048
[  622.749936][T18283] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4
[  622.754367][T18283] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  622.840137][T18258] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  622.993961][T18258] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  622.995207][T18258] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  622.995229][T18258] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  622.995249][T18258] usb 6-1: config 1 has no interface number 0
[  622.995292][T18258] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 54, changing to 9
[  622.995316][T18258] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  623.071745][T18258] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  623.071774][T18258] usb 6-1: Product: syz
[  623.071791][T18258] usb 6-1: Manufacturer: syz
[  623.071807][T18258] usb 6-1: SerialNumber: syz
[  623.215960][T18290] IPVS: fo: SCTP 172.20.20.187:0 - no destination available
[  624.155427][T18258] cdc_ncm 6-1:1.1: bind() failure
[  624.193433][T18258] usb 6-1: USB disconnect, device number 33
[  625.040568][ T5603] usb 7-1: new high-speed USB device number 30 using dummy_hcd
[  625.190731][ T5603] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  625.195618][ T5603] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  625.195665][ T5603] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  625.195685][ T5603] usb 7-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  625.195708][ T5603] usb 7-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5
[  625.257695][ T5603] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  625.257809][ T5603] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  625.257831][ T5603] usb 7-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  625.257854][ T5603] usb 7-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5
[  625.327213][ T5603] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  625.327241][ T5603] usb 7-1: Product: syz
[  625.327256][ T5603] usb 7-1: Manufacturer: syz
[  625.327270][ T5603] usb 7-1: SerialNumber: syz
[  625.452426][ T5603] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected
[  625.604615][ T5603] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0
[  625.658731][ T5603] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[  625.761874][T18302] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb
[  626.017642][    T9] usb 7-1: USB disconnect, device number 30
[  626.082749][    T9] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0
[  626.130447][    T9] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[  626.131223][    T9] ti_usb_3410_5052 7-1:2.0: device disconnected
[  627.281477][T18324] netlink: 'syz.6.4759': attribute type 2 has an invalid length.
[  629.297751][T18366] loop6: detected capacity change from 0 to 256
[  629.550383][T18366] FAT-fs (loop6): error, allocated dir entry found after end-of-directory marker (i_pos 1)
[  629.550412][T18366] FAT-fs (loop6): Filesystem has been set read-only
[  629.986484][T18164] bridge0: port 1(bridge_slave_0) entered blocking state
[  629.986586][T18164] bridge0: port 1(bridge_slave_0) entered disabled state
[  629.986768][T18164] bridge_slave_0: entered allmulticast mode
[  630.026446][T18164] bridge_slave_0: entered promiscuous mode
[  630.125004][T18164] bridge0: port 2(bridge_slave_1) entered blocking state
[  630.125143][T18164] bridge0: port 2(bridge_slave_1) entered disabled state
[  630.125300][T18164] bridge_slave_1: entered allmulticast mode
[  630.180079][T18164] bridge_slave_1: entered promiscuous mode
[  630.648079][T18164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  630.723590][T18164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  630.800048][ T5602] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  630.949963][ T5602] usb 5-1: Using ep0 maxpacket: 32
[  630.950958][ T5602] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  630.955238][ T5602] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  630.987850][ T5602] usb 5-1: config 0 descriptor??
[  631.015285][T18164] team0: Port device team_slave_0 added
[  631.071532][T18164] team0: Port device team_slave_1 added
[  631.116167][T18393] loop5: detected capacity change from 0 to 1024
[  631.146680][T18393] EXT4-fs: Ignoring removed mblk_io_submit option
[  631.157804][T18393] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  631.200424][T18393] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  631.292469][ T5602] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  631.315453][ T5602] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  631.334714][T18393] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #11: comm syz.5.4781: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  631.334774][T18393] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  631.339282][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  631.339303][    C0] EXT4-fs (loop5): initial error at time 1792307868: ext4_ext_check_inode:521: inode 11
[  631.339335][    C0] EXT4-fs (loop5): last error at time 1792307868: ext4_ext_check_inode:521: inode 11
[  631.375171][ T5602] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  631.375228][ T5602] usb 5-1: media controller created
[  631.411047][T18393] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.4781: couldn't read orphan inode 11 (err -117)
[  631.411089][T18393] loop5: lost filesystem error report for type 5 error -117
[  631.444533][T18393] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  631.481618][T18386] az6027: more than 2 i2c messages at a time is not handled yet. TODO.
[  631.637540][ T5602] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  631.813931][T18164] batman_adv: batadv0: Adding interface: batadv_slave_0
[  631.813950][T18164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  631.813977][T18164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  632.161009][T18400] loop8: detected capacity change from 0 to 2048
[  632.316916][T18393] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:487: comm syz.5.4781: Invalid block bitmap block 0 in block_group 0
[  632.317544][T18393] __quota_error: 1 callbacks suppressed
[  632.317560][T18393] Quota error (device loop5): write_blk: dquota write failed
[  632.317589][T18393] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  632.317651][T18393] EXT4-fs error (device loop5): ext4_acquire_dquot:7079: comm syz.5.4781: Failed to acquire dquot type 0
[  632.418994][T18393] EXT4-fs error (device loop5): ext4_read_inode_bitmap:141: comm syz.5.4781: Invalid inode bitmap blk 137438953472 in block_group 0
[  632.557514][T18405] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  632.746743][ T5602] az6027: usb out operation failed. (-71)
[  632.869112][ T5619] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  632.903296][ T5619] EXT4-fs error (device loop5): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 8589934593 in block_group 0
[  632.903328][ T5619] loop5: lost filesystem error report for type 5 error -117
[  632.906355][ T5602] az6027: usb out operation failed. (-71)
[  632.906371][ T5602] stb0899_attach: Driver disabled by Kconfig
[  632.906381][ T5602] az6027: no front-end attached
[  632.906381][ T5602] 
[  632.982261][ T5602] az6027: usb out operation failed. (-71)
[  632.982284][ T5602] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  633.028594][ T5602] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input68
[  633.133942][ T5602] dvb-usb: schedule remote query interval to 400 msecs.
[  633.133965][ T5602] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  633.208761][ T5602] usb 5-1: USB disconnect, device number 31
[  633.628741][ T5602] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  634.358391][T18164] batman_adv: batadv0: Adding interface: batadv_slave_1
[  634.358410][T18164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  634.358437][T18164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  635.584041][T18446] loop4: detected capacity change from 0 to 256
[  635.767847][T18164] hsr_slave_0: entered promiscuous mode
[  635.784459][T18164] hsr_slave_1: entered promiscuous mode
[  635.785274][T18164] debugfs: 'hsr0' already exists in 'hsr'
[  635.785292][T18164] Cannot create hsr debugfs directory
[  636.156462][T18446] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xdd63664a, utbl_chksum : 0xe619d30d)
[  636.350270][T18454] exFAT-fs (loop4): start_clu is invalid cluster(0xffffffff)
[  636.572697][T18084] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  636.608371][T18084] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  636.626208][T18084] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  636.643215][ T5602] libceph: connect (1)[c::]:6789 error -101
[  636.643699][ T5602] libceph: mon0 (1)[c::]:6789 connect error
[  636.713325][T18084] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  636.842185][T18084] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  636.924904][T18423] ceph: No mds server is up or the cluster is laggy
[  636.986693][T18084] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  637.006567][ T5602] libceph: connect (1)[c::]:6789 error -101
[  637.006789][ T5602] libceph: mon0 (1)[c::]:6789 connect error
[  637.193522][T18084] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  637.282698][T18084] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  637.463855][T18258] libceph: connect (1)[c::]:6789 error -101
[  637.464027][T18258] libceph: mon0 (1)[c::]:6789 connect error
[  637.754002][    T9] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  637.906286][    T9] usb 5-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00
[  637.921211][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  637.921243][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  637.921283][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  637.976533][ T5602] libceph: connect (1)[c::]:6789 error -101
[  637.976679][ T5602] libceph: mon0 (1)[c::]:6789 connect error
[  638.117050][    T9] usb 5-1: config 0 descriptor??
[  638.661708][    T9] nti 0003:0757:0A00.0045: unknown main item tag 0x0
[  638.661739][    T9] nti 0003:0757:0A00.0045: unknown main item tag 0x0
[  638.661760][    T9] nti 0003:0757:0A00.0045: unknown main item tag 0x0
[  638.661779][    T9] nti 0003:0757:0A00.0045: unknown main item tag 0x0
[  638.661799][    T9] nti 0003:0757:0A00.0045: unknown main item tag 0x0
[  638.661818][    T9] nti 0003:0757:0A00.0045: unknown main item tag 0x0
[  638.661838][    T9] nti 0003:0757:0A00.0045: unknown main item tag 0x0
[  638.661857][    T9] nti 0003:0757:0A00.0045: unknown main item tag 0x0
[  638.661876][    T9] nti 0003:0757:0A00.0045: unknown main item tag 0x0
[  638.661895][    T9] nti 0003:0757:0A00.0045: unknown main item tag 0x0
[  638.787628][    T9] nti 0003:0757:0A00.0045: hidraw0: USB HID v80.00 Device [HID 0757:0a00] on usb-dummy_hcd.4-1/input0
[  638.962217][    T9] usb 5-1: USB disconnect, device number 32
[  639.466439][T18484] fido_id[18484]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  640.151835][T18495] loop4: detected capacity change from 0 to 2048
[  640.308043][T18495]  loop4: p1 p2 < > p3 < p5 p6 > p4
[  640.308070][T18495] loop4: partition table partially beyond EOD, truncated
[  640.326623][T18498] loop6: detected capacity change from 0 to 512
[  640.343548][T18498] EXT4-fs: Ignoring removed nobh option
[  640.387269][T18495] loop4: p2 start 4278190080 is beyond EOD, truncated
[  640.449167][T18498] EXT4-fs (loop6): 1 truncate cleaned up
[  640.459739][T18495] loop4: p4 size 8192 extends beyond EOD, truncated
[  640.481144][T18498] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  640.536305][T18495] loop4: p6 size 8192 extends beyond EOD, truncated
[  640.718171][T18084] 8021q: adding VLAN 0 to HW filter on device bond0
[  641.118101][T10224] udevd[10224]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory
[  641.148623][ T5636] udevd[5636]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  641.172459][T17286] udevd[17286]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory
[  641.195576][ T6405] udevd[6405]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  641.212541][T11136] udevd[11136]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  641.296126][T18511] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4808'.
[  641.333878][ T6405] udevd[6405]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  641.335535][T10224] udevd[10224]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory
[  641.370565][ T5636] udevd[5636]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  641.423040][T11136] udevd[11136]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  641.424250][ T7298] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  641.691620][ T5636] udevd[5636]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory
[  641.802075][T18513] loop4: detected capacity change from 0 to 2048
[  641.803720][T18515] loop8: detected capacity change from 0 to 128
[  641.858369][T18513] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  641.897375][T18515] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  641.914656][T18515] ext4 filesystem being mounted at /366/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  641.962100][T18519] loop5: detected capacity change from 0 to 128
[  642.093724][T18519] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  642.097909][T18519] ext4 filesystem being mounted at /839/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  642.152648][   T30] audit: type=1800 audit(1792307879.657:523): pid=18513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4809" name="file1" dev="loop4" ino=1415 res=0 errno=0
[  642.686760][T12512] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  643.215450][ T5619] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  643.623736][T18533] loop5: detected capacity change from 0 to 2048
[  643.663172][T18533] EXT4-fs: Ignoring removed nobh option
[  643.725833][T18533] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  644.238099][T18542] block nbd8: NBD_DISCONNECT
[  644.273028][T18533] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  644.347571][T18533] EXT4-fs (loop5): Remounting filesystem read-only
[  644.377131][T18084] 8021q: adding VLAN 0 to HW filter on device team0
[  644.397071][T18544] loop4: detected capacity change from 0 to 128
[  644.488963][T18544] FAT-fs (loop4): Invalid FSINFO signature: 0x00000004, 0x80417272 (sector = 1)
[  644.538572][ T3266] bridge0: port 1(bridge_slave_0) entered blocking state
[  644.538663][ T3266] bridge0: port 1(bridge_slave_0) entered forwarding state
[  644.557629][ T3266] bridge0: port 2(bridge_slave_1) entered blocking state
[  644.557730][ T3266] bridge0: port 2(bridge_slave_1) entered forwarding state
[  644.891663][ T5619] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  645.656370][T18553] loop5: detected capacity change from 0 to 2048
[  645.724663][T18553] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  646.201513][T17528] FAT-fs (loop4): Invalid FSINFO signature: 0x00000004, 0x80417272 (sector = 1)
[  646.285110][T18562] loop8: detected capacity change from 0 to 256
[  646.588218][T18568] loop4: detected capacity change from 0 to 24
[  646.625968][T18568] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  646.645413][T18568] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  647.470796][T18571] loop8: detected capacity change from 0 to 4096
[  647.666723][T18571] ntfs3(loop8): Failed to initialize $Extend/$Reparse.
[  648.115648][T18576] netlink: 'syz.5.4829': attribute type 14 has an invalid length.
[  649.110541][T18592] loop4: detected capacity change from 0 to 512
[  649.197392][T18592] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  649.277385][T16292] usb 9-1: new full-speed USB device number 11 using dummy_hcd
[  649.448226][T16292] usb 9-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  649.485277][T16292] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  649.485307][T16292] usb 9-1: Product: syz
[  649.485321][T16292] usb 9-1: Manufacturer: syz
[  649.485335][T16292] usb 9-1: SerialNumber: syz
[  649.574438][T16292] usb 9-1: config 0 descriptor??
[  649.628227][T16292] ums-onetouch 9-1:0.0: USB Mass Storage device detected
[  649.712021][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  650.036185][T16292] usb 9-1: USB disconnect, device number 11
[  651.534403][T18623] loop8: detected capacity change from 0 to 512
[  651.645117][T18623] EXT4-fs (loop8): 1 truncate cleaned up
[  651.662243][T18623] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  651.964136][T18084] 8021q: adding VLAN 0 to HW filter on device batadv0
[  652.015523][T18609] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  652.015563][T18609] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  652.015582][T18609] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  652.018220][   T30] audit: type=1800 audit(1792307889.497:524): pid=18609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4836" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0
[  652.106606][T18623] EXT4-fs error (device loop8): ext4_validate_block_bitmap:445: comm syz.8.4840: bg 0: block 465: padding at end of block bitmap is not set
[  652.212747][T18623] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 16 with error 28
[  652.212784][T18623] EXT4-fs (loop8): This should not happen!! Data will be lost
[  652.212784][T18623] 
[  652.212800][T18623] EXT4-fs (loop8): Total free blocks count 0
[  652.212814][T18623] EXT4-fs (loop8): Free/Dirty block details
[  652.212867][T18623] EXT4-fs (loop8): free_blocks=0
[  652.296887][T18623] EXT4-fs (loop8): dirty_blocks=17
[  652.296913][T18623] EXT4-fs (loop8): Block reservation details
[  652.296926][T18623] EXT4-fs (loop8): i_reserved_data_blocks=17
[  652.399192][T18623] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  652.959142][T18164] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  654.193453][T18644] loop4: detected capacity change from 0 to 32768
[  654.288251][T18644] ERROR: (device loop4): xtSearch: xt_getpage: xtree page corrupt
[  654.288251][T18644] 
[  654.288602][T18644] ERROR: (device loop4): remounting filesystem as read-only
[  654.288617][T18644] xtLookup: xtSearch returned -5
[  654.288627][T18644] free_index: error reading directory table
[  654.288636][T18644] ERROR: (device loop4): xtSearch: xt_getpage: xtree page corrupt
[  654.288636][T18644] 
[  654.288667][T18644] xtLookup: xtSearch returned -5
[  654.288676][T18644] free_index: error reading directory table
[  654.288685][T18644] ERROR: (device loop4): xtSearch: xt_getpage: xtree page corrupt
[  654.288685][T18644] 
[  654.288713][T18644] xtLookup: xtSearch returned -5
[  654.288723][T18644] free_index: error reading directory table
[  654.288732][T18644] ERROR: (device loop4): xtSearch: xt_getpage: xtree page corrupt
[  654.288732][T18644] 
[  654.288760][T18644] xtLookup: xtSearch returned -5
[  654.288769][T18644] free_index: error reading directory table
[  654.288779][T18644] ERROR: (device loop4): xtSearch: xt_getpage: xtree page corrupt
[  654.288779][T18644] 
[  654.288807][T18644] xtLookup: xtSearch returned -5
[  654.288816][T18644] free_index: error reading directory table
[  654.288827][T18644] ERROR: (device loop4): xtSearch: xt_getpage: xtree page corrupt
[  654.288827][T18644] 
[  654.288855][T18644] xtLookup: xtSearch returned -5
[  654.288864][T18644] add_index: get/read_metapage failed!
[  654.288881][T18644] ERROR: (device loop4): xtSearch: xt_getpage: xtree page corrupt
[  654.288881][T18644] 
[  654.288908][T18644] xtLookup: xtSearch returned -5
[  654.288918][T18644] free_index: error reading directory table
[  654.288929][T18644] ERROR: (device loop4): xtSearch: xt_getpage: xtree page corrupt
[  654.288929][T18644] 
[  654.288964][T18644] xtLookup: xtSearch returned -5
[  654.288974][T18644] free_index: error reading directory table
[  654.288983][T18644] ERROR: (device loop4): xtSearch: xt_getpage: xtree page corrupt
[  654.288983][T18644] 
[  654.289011][T18644] xtLookup: xtSearch returned -5
[  654.289020][T18644] free_index: error reading directory table
[  654.593869][T18644] ERROR: (device loop4): xtSearch: xt_getpage: xtree page corrupt
[  654.593869][T18644] 
[  654.593913][T18644] xtLookup: xtSearch returned -5
[  654.593925][T18644] add_index: get/read_metapage failed!
[  655.125765][T18164] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  655.126606][T18164] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  655.242208][T18164] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  655.261744][T18084] veth0_vlan: entered promiscuous mode
[  655.370880][T18164] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  655.444917][T18164] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  655.471621][T18084] veth1_vlan: entered promiscuous mode
[  655.478507][T18164] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  655.553653][T18164] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  655.911513][T18084] veth0_macvtap: entered promiscuous mode
[  655.973342][T18084] veth1_macvtap: entered promiscuous mode
[  656.221227][T18084] batman_adv: batadv0: Interface activated: batadv_slave_0
[  656.298536][T18084] batman_adv: batadv0: Interface activated: batadv_slave_1
[  656.746692][T17525] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  656.898330][T17525] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  656.898382][T17525] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  656.898418][T17525] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  657.076819][T18164] 8021q: adding VLAN 0 to HW filter on device bond0
[  657.452069][T18164] 8021q: adding VLAN 0 to HW filter on device team0
[  657.517892][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state
[  657.518014][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state
[  657.598108][T17525] bridge0: port 2(bridge_slave_1) entered blocking state
[  657.598288][T17525] bridge0: port 2(bridge_slave_1) entered forwarding state
[  657.881789][T18258] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  658.056923][T18258] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  658.075134][T18258] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  658.075159][T18258] usb 6-1: config 0 has no interface number 0
[  658.075194][T18258] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  658.075218][T18258] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  658.075251][T18258] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  658.144586][T18258] usb 6-1: config 0 descriptor??
[  658.897561][T18680] loop4: detected capacity change from 0 to 1756
[  658.904863][T18258] prodikeys 0003:041E:2801.0046: item fetching failed at offset 6/7
[  658.955890][T18258] prodikeys 0003:041E:2801.0046: hid parse failed
[  658.955991][T18258] prodikeys 0003:041E:2801.0046: probe with driver prodikeys failed with error -22
[  659.190027][T18680] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  659.190055][T18680] UDF-fs: Scanning with blocksize 512 failed
[  659.234493][ T5790] usb 6-1: USB disconnect, device number 34
[  659.423548][T18680] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  659.423577][T18680] UDF-fs: Scanning with blocksize 1024 failed
[  659.478775][T18680] UDF-fs: INFO Mounting volume 'CDROM', timestamp 2022/11/22 15:59 (1000)
[  660.557000][T17119] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  660.626870][T17119] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  660.637613][T17119] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  660.662526][T17119] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  660.663215][T17119] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  662.538578][ T5624] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  662.569036][ T5624] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  662.579053][ T5624] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  662.628661][ T5624] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  662.649051][ T5624] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  662.771002][T17119] Bluetooth: hci6: command tx timeout
[  662.864125][ T3266] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  664.777045][T17119] Bluetooth: hci8: command tx timeout
[  664.865397][T17119] Bluetooth: hci6: command tx timeout
[  665.055854][ T3266] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  665.995310][T18722] loop5: detected capacity change from 0 to 32768
[  666.401820][T18722] find_entry called with index = 0
[  666.401842][T18722] find_entry called with index = 0
[  666.401852][T18722] find_entry called with index = 0
[  666.765011][ T3266] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  666.851333][T17119] Bluetooth: hci8: command tx timeout
[  666.934305][T17119] Bluetooth: hci6: command tx timeout
[  667.173026][T18730] loop4: detected capacity change from 0 to 32768
[  667.604641][T18164] 8021q: adding VLAN 0 to HW filter on device batadv0
[  668.938298][T17119] Bluetooth: hci8: command tx timeout
[  669.011528][T17119] Bluetooth: hci6: command tx timeout
[  669.367487][ T3266] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  669.560260][T18164] veth0_vlan: entered promiscuous mode
[  669.566718][T18164] veth1_vlan: entered promiscuous mode
[  670.318745][T18689] rxe_eth0 speed is unknown, defaulting to 1000
[  670.470690][T18164] veth0_macvtap: entered promiscuous mode
[  670.474444][T18164] veth1_macvtap: entered promiscuous mode
[  670.725776][T18164] batman_adv: batadv0: Interface activated: batadv_slave_0
[  670.797232][T18164] batman_adv: batadv0: Interface activated: batadv_slave_1
[  671.017426][T17119] Bluetooth: hci8: command tx timeout
[  671.024194][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  671.025197][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  671.026511][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  671.027049][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  672.827596][T18803] loop5: detected capacity change from 0 to 512
[  672.926580][ T5624] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  672.980038][ T5624] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  672.985870][ T5624] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  672.993939][ T5624] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  672.994518][ T5624] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  673.242625][T18803] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  673.349175][T18713] rxe_eth0 speed is unknown, defaulting to 1000
[  673.811724][T18813] loop4: detected capacity change from 0 to 2048
[  673.962873][ T3266] bridge_slave_1: left allmulticast mode
[  673.962902][ T3266] bridge_slave_1: left promiscuous mode
[  673.963221][ T3266] bridge0: port 2(bridge_slave_1) entered disabled state
[  674.016579][T18813] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  674.087534][ T3266] bridge_slave_0: left allmulticast mode
[  674.087562][ T3266] bridge_slave_0: left promiscuous mode
[  674.087776][ T3266] bridge0: port 1(bridge_slave_0) entered disabled state
[  674.772528][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  675.268056][T17119] Bluetooth: hci9: command tx timeout
[  675.651238][ T5619] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  676.949066][ T3266] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  676.984998][ T3266] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  677.006498][ T3266] bond0 (unregistering): Released all slaves
[  677.061673][  T982] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  677.246705][  T982] usb 6-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00
[  677.265113][  T982] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  677.265147][  T982] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  677.290257][  T982] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  677.290288][  T982] usb 6-1: Product: syz
[  677.290303][  T982] usb 6-1: Manufacturer: syz
[  677.330769][T17119] Bluetooth: hci9: command tx timeout
[  677.364536][  T982] navman 6-1:1.0: navman converter detected
[  677.409105][  T982] usb 6-1: navman converter now attached to ttyUSB0
[  677.701899][T18841] navman ttyUSB0: navman_open - failed submitting interrupt urb, error -90
[  677.707853][ T5790] usb 6-1: USB disconnect, device number 35
[  677.747713][ T5790] navman ttyUSB0: navman converter now disconnected from ttyUSB0
[  677.748262][ T5790] navman 6-1:1.0: device disconnected
[  678.243546][T18856] loop8: detected capacity change from 0 to 256
[  679.213858][T18868] loop4: detected capacity change from 0 to 2048
[  679.286303][T18868] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  679.411455][T17119] Bluetooth: hci9: command tx timeout
[  680.413206][T18881] loop8: detected capacity change from 0 to 256
[  681.490311][T17119] Bluetooth: hci9: command tx timeout
[  681.788013][ T3266] hsr_slave_0: left promiscuous mode
[  681.801946][ T3266] hsr_slave_1: left promiscuous mode
[  681.802938][ T3266] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  681.802961][ T3266] batman_adv: batadv0: Removing interface: batadv_slave_0
[  681.856177][ T3266] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  681.856210][ T3266] batman_adv: batadv0: Removing interface: batadv_slave_1
[  682.091007][ T3266] veth1_macvtap: left promiscuous mode
[  682.091055][ T3266] veth0_macvtap: left promiscuous mode
[  682.091211][ T3266] veth1_vlan: left promiscuous mode
[  682.091277][ T3266] veth0_vlan: left promiscuous mode
[  683.680479][ T3266] team0 (unregistering): Port device team_slave_1 removed
[  683.831380][T18909] loop8: detected capacity change from 0 to 32768
[  683.861921][T18909] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.4896 (18909)
[  683.912496][T18909] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  683.912532][T18909] BTRFS info (device loop8): using crc32c checksum algorithm
[  684.021930][ T3266] team0 (unregistering): Port device team_slave_0 removed
[  684.200955][T18909] BTRFS info (device loop8): enabling ssd optimizations
[  684.200985][T18909] BTRFS info (device loop8): turning on flush-on-commit
[  684.201002][T18909] BTRFS info (device loop8): enabling free space tree
[  684.201017][T18909] BTRFS info (device loop8): enabling auto defrag
[  684.201035][T18909] BTRFS info (device loop8): use lzo compression, level 1
[  684.201054][T18909] BTRFS info (device loop8): max_inline set to 4096
[  684.201962][T18928] program syz.5.4899 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  685.227154][T18800] rxe_eth0 speed is unknown, defaulting to 1000
[  685.258058][T18909] BTRFS critical (device loop8 state E): emergency shutdown
[  685.275458][T18898] tipc: New replicast peer: 127.0.0.2
[  685.279126][T18898] tipc: Enabled bearer <udp:syz0>, priority 22
[  686.160408][T18947] program syz.4.4902 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  686.206669][T12512] BTRFS info (device loop8 state E): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  687.653475][T18966] loop5: detected capacity change from 0 to 512
[  687.734439][T18966] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  687.734536][T18966] System zones: 0-2, 18-18, 34-35
[  687.788494][T18966] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  687.788619][T18966] ext4 filesystem being mounted at /871/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  688.270764][ T5619] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  688.306683][T18689] bridge0: port 1(bridge_slave_0) entered blocking state
[  688.306779][T18689] bridge0: port 1(bridge_slave_0) entered disabled state
[  688.306945][T18689] bridge_slave_0: entered allmulticast mode
[  688.330594][T18689] bridge_slave_0: entered promiscuous mode
[  688.668029][T18689] bridge0: port 2(bridge_slave_1) entered blocking state
[  688.668130][T18689] bridge0: port 2(bridge_slave_1) entered disabled state
[  688.668305][T18689] bridge_slave_1: entered allmulticast mode
[  688.684282][T18689] bridge_slave_1: entered promiscuous mode
[  688.918207][T18987] netlink: 'syz.4.4911': attribute type 2 has an invalid length.
[  688.918230][T18987] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4911'.
[  690.882974][ T5790] kernel read not supported for file /dsp1 (pid: 5790 comm: kworker/0:7)
[  690.982920][ T3266] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  691.403877][  T982] kernel read not supported for file /dummy_udc (pid: 982 comm: kworker/0:2)
[  691.892449][T18689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  691.895254][T18689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  691.966466][T19015] loop5: detected capacity change from 0 to 1024
[  692.001382][T19015] EXT4-fs: Ignoring removed bh option
[  692.045509][T19015] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  692.175207][T18713] bridge0: port 1(bridge_slave_0) entered blocking state
[  692.175304][T18713] bridge0: port 1(bridge_slave_0) entered disabled state
[  692.175462][T18713] bridge_slave_0: entered allmulticast mode
[  692.214946][T18713] bridge_slave_0: entered promiscuous mode
[  692.244751][T19015] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  692.452807][T18689] team0: Port device team_slave_0 added
[  692.454191][T18713] bridge0: port 2(bridge_slave_1) entered blocking state
[  692.454280][T18713] bridge0: port 2(bridge_slave_1) entered disabled state
[  692.454461][T18713] bridge_slave_1: entered allmulticast mode
[  692.506961][T18713] bridge_slave_1: entered promiscuous mode
[  693.007394][T19025] loop4: detected capacity change from 0 to 4096
[  693.036615][T19025] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  693.037295][T19025] ntfs3(loop4): ino=3, mi_enum_attr
[  693.105427][ T5619] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  693.268457][T19025] ntfs3(loop4): Failed to initialize $Extend/$Reparse.
[  693.362334][ T3266] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  693.518143][T18689] team0: Port device team_slave_1 added
[  693.813312][T18713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  694.332194][ T3266] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  695.211040][T19047] loop8: detected capacity change from 0 to 131072
[  695.244538][T19047] F2FS-fs (loop8): Segment count (31) mismatch with total segments from devices (0)
[  695.244569][T19047] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  695.245489][T19047] F2FS-fs (loop8): invalid crc value
[  695.362848][T19047] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  695.387213][T19047] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  695.387246][T19047] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4
[  695.426957][T19047] F2FS-fs (loop8): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 0, max: 36
[  695.707447][T18713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  695.857459][T18689] batman_adv: batadv0: Adding interface: batadv_slave_0
[  695.857480][T18689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  695.857511][T18689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  696.281037][T18713] team0: Port device team_slave_0 added
[  696.285245][T18689] batman_adv: batadv0: Adding interface: batadv_slave_1
[  696.285262][T18689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  696.285289][T18689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  697.190623][ T3266] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  697.421374][T18713] team0: Port device team_slave_1 added
[  697.745946][T19066] loop4: detected capacity change from 0 to 512
[  697.797181][T19066] EXT4-fs (loop4): 1 truncate cleaned up
[  697.812051][T19066] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  697.956665][T18713] batman_adv: batadv0: Adding interface: batadv_slave_0
[  697.956684][T18713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  697.956709][T18713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  698.153297][T18713] batman_adv: batadv0: Adding interface: batadv_slave_1
[  698.153316][T18713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  698.153344][T18713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  698.278428][T19066] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.4928: bg 0: block 465: padding at end of block bitmap is not set
[  698.396460][T18689] hsr_slave_0: entered promiscuous mode
[  698.418223][T18689] hsr_slave_1: entered promiscuous mode
[  698.418984][T18689] debugfs: 'hsr0' already exists in 'hsr'
[  698.419006][T18689] Cannot create hsr debugfs directory
[  698.570234][T19066] EXT4-fs (loop4): Remounting filesystem read-only
[  698.758510][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  699.407803][T18713] hsr_slave_0: entered promiscuous mode
[  699.443626][T18713] hsr_slave_1: entered promiscuous mode
[  699.444262][T18713] debugfs: 'hsr0' already exists in 'hsr'
[  699.444281][T18713] Cannot create hsr debugfs directory
[  700.418659][T19090] loop4: detected capacity change from 0 to 256
[  702.565874][T18800] bridge0: port 1(bridge_slave_0) entered blocking state
[  702.565973][T18800] bridge0: port 1(bridge_slave_0) entered disabled state
[  702.566105][T18800] bridge_slave_0: entered allmulticast mode
[  702.617122][T18800] bridge_slave_0: entered promiscuous mode
[  702.920955][T18800] bridge0: port 2(bridge_slave_1) entered blocking state
[  702.921053][T18800] bridge0: port 2(bridge_slave_1) entered disabled state
[  702.921211][T18800] bridge_slave_1: entered allmulticast mode
[  702.962930][T18800] bridge_slave_1: entered promiscuous mode
[  703.345025][ T3266] bridge_slave_1: left allmulticast mode
[  703.345056][ T3266] bridge_slave_1: left promiscuous mode
[  703.345237][ T3266] bridge0: port 2(bridge_slave_1) entered disabled state
[  703.397156][ T3266] bridge_slave_0: left allmulticast mode
[  703.397186][ T3266] bridge_slave_0: left promiscuous mode
[  703.397382][ T3266] bridge0: port 1(bridge_slave_0) entered disabled state
[  703.443501][T19119] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4939'.
[  703.501647][T19121] loop4: detected capacity change from 0 to 512
[  703.696613][T19121] EXT4-fs (loop4): 1 truncate cleaned up
[  703.765976][T19121] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  703.836064][T19121] EXT4-fs warning (device loop4): ext4_resize_begin:72: won't resize using backup superblock at 1
[  703.989020][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  704.982633][ T3266] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  704.989039][ T3266] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  705.076660][ T3266] bond0 (unregistering): Released all slaves
[  705.128073][T18800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  705.167864][T18800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  707.320446][T19158] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4948'.
[  707.320475][T19158] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4948'.
[  707.320491][T19158] netlink: 'syz.4.4948': attribute type 5 has an invalid length.
[  707.320504][T19158] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4948'.
[  709.193636][T19184] loop8: detected capacity change from 0 to 256
[  709.391247][T18800] team0: Port device team_slave_0 added
[  709.733071][ T3266] hsr_slave_0: left promiscuous mode
[  709.733710][ T3266] hsr_slave_1: left promiscuous mode
[  709.734600][ T3266] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  709.734621][ T3266] batman_adv: batadv0: Removing interface: batadv_slave_0
[  709.735447][ T3266] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  709.735465][ T3266] batman_adv: batadv0: Removing interface: batadv_slave_1
[  709.796406][ T3266] veth1_macvtap: left promiscuous mode
[  709.796481][ T3266] veth0_macvtap: left promiscuous mode
[  709.796577][ T3266] veth1_vlan: left promiscuous mode
[  709.796642][ T3266] veth0_vlan: left promiscuous mode
[  711.194086][ T3266] team0 (unregistering): Port device team_slave_1 removed
[  711.257259][ T3266] team0 (unregistering): Port device team_slave_0 removed
[  711.926759][T18800] team0: Port device team_slave_1 added
[  712.012704][T19187] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4955'.
[  712.126219][T19196] loop8: detected capacity change from 0 to 16
[  712.146251][T19196] erofs (device loop8): mounted with root inode @ nid 36.
[  712.195795][   T30] audit: type=1800 audit(1792307949.697:525): pid=19196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4959" name="file1" dev="loop8" ino=86 res=0 errno=0
[  713.074745][T18800] batman_adv: batadv0: Adding interface: batadv_slave_0
[  713.074765][T18800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  713.074792][T18800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  713.097429][T18800] batman_adv: batadv0: Adding interface: batadv_slave_1
[  713.097449][T18800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  713.097477][T18800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  713.551845][T18800] hsr_slave_0: entered promiscuous mode
[  713.570327][T18800] hsr_slave_1: entered promiscuous mode
[  713.574330][T18800] debugfs: 'hsr0' already exists in 'hsr'
[  713.574356][T18800] Cannot create hsr debugfs directory
[  713.871587][T19213] loop4: detected capacity change from 0 to 1024
[  714.080093][T19213] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  714.080213][T19213] ext4 filesystem being mounted at /908/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  714.145753][T19213] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.4964: bg 0: block 112: padding at end of block bitmap is not set
[  714.598838][T19213] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 1 with error 28
[  714.598883][T19213] EXT4-fs (loop4): This should not happen!! Data will be lost
[  714.598883][T19213] 
[  714.629925][T19213] EXT4-fs (loop4): Total free blocks count 0
[  714.629947][T19213] EXT4-fs (loop4): Free/Dirty block details
[  714.630105][T19213] EXT4-fs (loop4): free_blocks=0
[  714.630142][T19213] EXT4-fs (loop4): dirty_blocks=16
[  714.630155][T19213] EXT4-fs (loop4): Block reservation details
[  714.630168][T19213] EXT4-fs (loop4): i_reserved_data_blocks=1
[  714.744473][T19223] EXT4-fs error (device loop4): ext4_free_blocks:6719: comm syz.4.4964: Freeing blocks not in datazone - block = 0, count = 16
[  715.070785][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  715.994602][T19236] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4969'.
[  717.514407][ T5624] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  717.538197][ T5624] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  717.551634][ T5624] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  717.567986][ T5624] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  717.602574][ T5624] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  719.014673][T16292] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  719.221293][T16292] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  719.225686][T16292] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  719.225712][T16292] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  719.225733][T16292] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  719.271903][T16292] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  719.271933][T16292] usb 9-1: Product: syz
[  719.271954][T16292] usb 9-1: Manufacturer: syz
[  719.271969][T16292] usb 9-1: SerialNumber: syz
[  719.736271][T17119] Bluetooth: hci7: command tx timeout
[  719.768615][T17119] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  719.817227][ T5629] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  719.818587][T19285] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  719.835864][T19285] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  719.857911][T19285] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  720.155751][T16292] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  720.200688][T16292] usb 9-1: USB disconnect, device number 12
[  720.297978][T16292] usblp0: removed
[  721.810522][ T5624] Bluetooth: hci7: command tx timeout
[  721.971811][ T5624] Bluetooth: hci10: command tx timeout
[  722.840981][T19256] rxe_eth0 speed is unknown, defaulting to 1000
[  723.171083][T19326] loop8: detected capacity change from 0 to 128
[  723.237627][T19326] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  723.258212][T19326] ext4 filesystem being mounted at /434/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  723.716203][T19285] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  723.738404][T19285] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  723.747578][T19285] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  723.791535][T19285] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  723.817517][T19285] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  723.843188][T12512] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  723.892853][ T5629] Bluetooth: hci7: command tx timeout
[  724.087870][ T5624] Bluetooth: hci10: command tx timeout
[  725.950046][T16292] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  725.974397][ T5624] Bluetooth: hci11: command tx timeout
[  725.995145][ T5624] Bluetooth: hci7: command tx timeout
[  726.115883][T16292] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  726.126371][T19282] rxe_eth0 speed is unknown, defaulting to 1000
[  726.176478][T19285] Bluetooth: hci10: command tx timeout
[  726.223885][T16292] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  726.223924][T16292] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  726.223969][T16292] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  726.238816][T19350] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  726.314474][T16292] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[  727.025528][T17528] bridge_slave_1: left allmulticast mode
[  727.025557][T17528] bridge_slave_1: left promiscuous mode
[  727.025741][T17528] bridge0: port 2(bridge_slave_1) entered disabled state
[  727.078191][T17528] bridge_slave_0: left allmulticast mode
[  727.078223][T17528] bridge_slave_0: left promiscuous mode
[  727.078423][T17528] bridge0: port 1(bridge_slave_0) entered disabled state
[  727.805794][T19369] loop8: detected capacity change from 0 to 1024
[  728.051301][T19285] Bluetooth: hci11: command tx timeout
[  728.216967][T19285] Bluetooth: hci10: command tx timeout
[  728.656229][T16292] usb 9-1: USB disconnect, device number 13
[  728.869950][T17528] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  728.902470][T17528] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  728.904036][T17528] bond0 (unregistering): Released all slaves
[  729.128402][T19381] Format for deleting device is "id" (uint).
[  730.010467][T19394] loop4: detected capacity change from 0 to 1024
[  730.135252][T19285] Bluetooth: hci11: command tx timeout
[  731.533294][T19408] loop4: detected capacity change from 0 to 512
[  731.553342][T19408] EXT4-fs: Ignoring removed nomblk_io_submit option
[  731.553420][T19408] EXT4-fs: Ignoring removed nomblk_io_submit option
[  731.554194][T19408] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  731.640177][T17528] hsr_slave_0: left promiscuous mode
[  731.647598][T17528] hsr_slave_1: left promiscuous mode
[  731.648410][T17528] batman_adv: batadv0: Removing interface: batadv_slave_0
[  731.675962][T17528] batman_adv: batadv0: Removing interface: batadv_slave_1
[  732.072778][T19408] EXT4-fs (loop4): 1 truncate cleaned up
[  732.201947][T19408] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  732.212467][ T5624] Bluetooth: hci11: command tx timeout
[  732.462455][T19285] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  732.518658][T19285] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  732.533312][T19285] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  732.577581][T19285] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  732.616252][T19285] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  733.647135][T17528] team0 (unregistering): Port device team_slave_1 removed
[  733.874755][T17528] team0 (unregistering): Port device team_slave_0 removed
[  734.231534][ T5618] EXT4-fs error (device loop4): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39
[  734.417354][ T5618] EXT4-fs error (device loop4): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39
[  734.775042][ T5624] Bluetooth: hci8: command tx timeout
[  735.065097][ T5618] bridge0: port 3(syz_tun) entered disabled state
[  735.223222][ T5618] syz_tun (unregistering): left allmulticast mode
[  735.223249][ T5618] syz_tun (unregistering): left promiscuous mode
[  735.223330][ T5618] bridge0: port 3(syz_tun) entered disabled state
[  735.298047][T19332] rxe_eth0 speed is unknown, defaulting to 1000
[  735.707423][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  736.126878][T19439] loop8: detected capacity change from 0 to 512
[  736.205713][T19439] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  736.367950][T19439] EXT4-fs (loop8): 1 orphan inode deleted
[  736.407188][T14443] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  736.407277][T14443] EXT4-fs error (device loop8): ext4_release_dquot:7115: comm kworker/u8:4: Failed to release dquot type 1
[  736.407298][T14443] loop8: lost filesystem error report for type 5 error -117
[  736.407752][T19439] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  736.412336][T19439] ext4 filesystem being mounted at /445/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  736.532138][T19439] EXT4-fs (loop8): shut down requested (2)
[  736.851528][ T5624] Bluetooth: hci8: command tx timeout
[  737.518985][T12512] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  738.872625][T19285] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  738.895723][T19285] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  738.919144][T19285] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  738.933018][ T5629] Bluetooth: hci8: command tx timeout
[  738.951645][T19285] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  738.952692][T19285] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  739.678236][T19468] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  740.274662][T19414] rxe_eth0 speed is unknown, defaulting to 1000
[  740.745739][ T5603] usb 9-1: new full-speed USB device number 14 using dummy_hcd
[  740.908655][ T5603] usb 9-1: unable to get BOS descriptor or descriptor too short
[  740.909139][ T5603] usb 9-1: not running at top speed; connect to a high speed hub
[  740.909572][ T5603] usb 9-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40
[  740.942016][ T5603] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  740.942047][ T5603] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  740.942067][ T5603] usb 9-1: config 1 has no interface number 0
[  740.982802][ T5603] usb 9-1: string descriptor 0 read error: -22
[  740.982928][ T5603] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  741.010112][T19285] Bluetooth: hci8: command tx timeout
[  741.082545][ T5603] usb 9-1: 1:0 : does not exist
[  741.082572][ T5603] usb 9-1: 1:2 : does not exist
[  741.082640][ T5603] usb 9-1: BAAD SPEAKER p_chmask mismatch
[  741.093704][T19285] Bluetooth: hci3: command tx timeout
[  741.773407][ T5603] snd-usb-audio 9-1:1.1: probe with driver snd-usb-audio failed with error -22
[  741.884259][ T5603] usb 9-1: USB disconnect, device number 14
[  742.579126][T17528] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 31488 - 0
[  742.579872][T17528] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  743.087595][T19256] bridge0: port 1(bridge_slave_0) entered blocking state
[  743.087692][T19256] bridge0: port 1(bridge_slave_0) entered disabled state
[  743.087867][T19256] bridge_slave_0: entered allmulticast mode
[  743.130847][T19256] bridge_slave_0: entered promiscuous mode
[  743.178169][T19285] Bluetooth: hci3: command tx timeout
[  743.524707][T19256] bridge0: port 2(bridge_slave_1) entered blocking state
[  743.524819][T19256] bridge0: port 2(bridge_slave_1) entered disabled state
[  743.524969][T19256] bridge_slave_1: entered allmulticast mode
[  743.528488][T19256] bridge_slave_1: entered promiscuous mode
[  743.958935][T19256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  744.296292][T17528] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 31488 - 0
[  744.296332][T17528] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  744.330134][ T5603] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[  744.485658][ T5603] usb 9-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[  744.486607][ T5603] usb 9-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  744.486636][ T5603] usb 9-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  744.486660][ T5603] usb 9-1: config 0 interface 0 has no altsetting 0
[  744.486691][ T5603] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  744.550802][ T5603] usb 9-1: config 0 descriptor??
[  744.644486][T19282] bridge0: port 1(bridge_slave_0) entered blocking state
[  744.644605][T19282] bridge0: port 1(bridge_slave_0) entered disabled state
[  744.644786][T19282] bridge_slave_0: entered allmulticast mode
[  744.686513][T19282] bridge_slave_0: entered promiscuous mode
[  744.745660][T19282] bridge0: port 2(bridge_slave_1) entered blocking state
[  744.745773][T19282] bridge0: port 2(bridge_slave_1) entered disabled state
[  744.745907][T19282] bridge_slave_1: entered allmulticast mode
[  744.786550][T19282] bridge_slave_1: entered promiscuous mode
[  744.806998][T19256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  745.011889][ T5603] hid_parser_main: 28 callbacks suppressed
[  745.011914][ T5603] acrux 0003:1A34:0802.0047: unknown main item tag 0x2
[  745.017978][ T5603] acrux 0003:1A34:0802.0047: no output reports found
[  745.058506][ T5603] acrux 0003:1A34:0802.0047: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.8-1/input0
[  745.234098][ T5603] usb 9-1: USB disconnect, device number 15
[  745.254844][T19285] Bluetooth: hci3: command tx timeout
[  745.555262][T19524] fido_id[19524]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory
[  745.963322][T19460] rxe_eth0 speed is unknown, defaulting to 1000
[  746.015191][T19282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  746.352799][T19256] team0: Port device team_slave_0 added
[  746.767786][T17528] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 31488 - 0
[  746.767823][T17528] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  746.832600][T19282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  746.918561][T19256] team0: Port device team_slave_1 added
[  747.332821][T19285] Bluetooth: hci3: command tx timeout
[  747.687023][T17528] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 31488 - 0
[  747.687062][T17528] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  747.821827][T19282] team0: Port device team_slave_0 added
[  747.894268][T19256] batman_adv: batadv0: Adding interface: batadv_slave_0
[  747.894287][T19256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  747.894311][T19256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  747.955366][T19256] batman_adv: batadv0: Adding interface: batadv_slave_1
[  747.955384][T19256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  747.955409][T19256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  748.089151][T19547] loop8: detected capacity change from 0 to 4096
[  748.108311][T19547] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512).
[  748.522774][T19282] team0: Port device team_slave_1 added
[  748.586592][T19547] ntfs3(loop8): ino=19, mi_enum_attr
[  748.586625][T19547] ntfs3(loop8): Mark volume as dirty due to NTFS errors
[  748.607375][T19547] ntfs3(loop8): Failed to initialize $Extend/$ObjId.
[  749.244535][T19282] batman_adv: batadv0: Adding interface: batadv_slave_0
[  749.244554][T19282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  749.244582][T19282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  749.246519][T19282] batman_adv: batadv0: Adding interface: batadv_slave_1
[  749.246533][T19282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  749.246557][T19282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  749.712046][T19256] hsr_slave_0: entered promiscuous mode
[  749.712990][T19256] hsr_slave_1: entered promiscuous mode
[  749.713618][T19256] debugfs: 'hsr0' already exists in 'hsr'
[  749.713636][T19256] Cannot create hsr debugfs directory
[  749.871551][T19563] program syz.8.5024 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  750.393463][ T5603] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[  750.548364][ T5603] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  750.566857][ T5603] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  750.581791][ T5603] usb 9-1: config 0 descriptor??
[  750.795368][ T5603] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  750.923318][T19282] hsr_slave_0: entered promiscuous mode
[  750.943461][T19282] hsr_slave_1: entered promiscuous mode
[  750.946766][T19282] debugfs: 'hsr0' already exists in 'hsr'
[  750.946787][T19282] Cannot create hsr debugfs directory
[  752.085365][ T5603] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 1
[  752.085392][ T5603] [drm] Initialized udl on minor 1
[  752.575563][ T5603] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed
[  752.655027][T19332] bridge0: port 1(bridge_slave_0) entered blocking state
[  752.655121][T19332] bridge0: port 1(bridge_slave_0) entered disabled state
[  752.655293][T19332] bridge_slave_0: entered allmulticast mode
[  752.699830][T19332] bridge_slave_0: entered promiscuous mode
[  752.715779][T19332] bridge0: port 2(bridge_slave_1) entered blocking state
[  752.715872][T19332] bridge0: port 2(bridge_slave_1) entered disabled state
[  752.716026][T19332] bridge_slave_1: entered allmulticast mode
[  752.758458][T19332] bridge_slave_1: entered promiscuous mode
[  752.835986][ T5603] udl 9-1:0.0: [drm] Cannot find any crtc or sizes
[  752.935781][ T5603] usb 9-1: USB disconnect, device number 16
[  753.536501][T17528] ip6gretap0: left allmulticast mode
[  753.536532][T17528] ip6gretap0: left promiscuous mode
[  753.536722][T17528] bridge0: port 4(ip6gretap0) entered disabled state
[  753.572918][T17528] bridge_slave_1: left allmulticast mode
[  753.572946][T17528] bridge_slave_1: left promiscuous mode
[  753.579109][T17528] bridge0: port 2(bridge_slave_1) entered disabled state
[  753.616463][T17528] bridge_slave_0: left allmulticast mode
[  753.616491][T17528] bridge_slave_0: left promiscuous mode
[  753.616660][T17528] bridge0: port 1(bridge_slave_0) entered disabled state
[  753.967825][T19602] loop8: detected capacity change from 0 to 164
[  754.818842][   T30] audit: type=1400 audit(1792307992.317:526): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="::o" pid=19607 comm="syz.8.5029" name="::o" offset=35
[  755.165813][T17528] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  755.192420][T17528] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  755.197575][T17528] bond0 (unregistering): Released all slaves
[  755.469145][T19332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  755.487104][T19332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  755.643261][T19414] bridge0: port 1(bridge_slave_0) entered blocking state
[  755.643359][T19414] bridge0: port 1(bridge_slave_0) entered disabled state
[  755.643545][T19414] bridge_slave_0: entered allmulticast mode
[  755.647265][T19414] bridge_slave_0: entered promiscuous mode
[  755.683224][T19414] bridge0: port 2(bridge_slave_1) entered blocking state
[  755.683318][T19414] bridge0: port 2(bridge_slave_1) entered disabled state
[  755.683444][T19414] bridge_slave_1: entered allmulticast mode
[  755.686566][T19414] bridge_slave_1: entered promiscuous mode
[  755.770036][T17528] tipc: Disabling bearer <eth:vlan1>
[  755.809066][T17528] tipc: Disabling bearer <udp:syz0>
[  755.846045][T17528] tipc: Left network mode
[  755.947728][T19332] team0: Port device team_slave_0 added
[  755.950769][T19332] team0: Port device team_slave_1 added
[  756.365125][T19414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  756.583794][T19332] batman_adv: batadv0: Adding interface: batadv_slave_0
[  756.583817][T19332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  756.583842][T19332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  756.676643][T19414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  756.844816][T19332] batman_adv: batadv0: Adding interface: batadv_slave_1
[  756.844835][T19332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  756.844861][T19332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  756.850873][   T33] INFO: task syz-executor:15658 blocked for more than 143 seconds.
[  756.850904][   T33]       Tainted: G             L      syzkaller #0
[  756.850917][   T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  756.850927][   T33] task:syz-executor    state:D stack:22440 pid:15658 tgid:15658 ppid:1      task_flags:0x400140 flags:0x00080002
[  756.850982][   T33] Call Trace:
[  756.850990][   T33]  <TASK>
[  756.851004][   T33]  __schedule+0x17db/0x58f0
[  756.851061][   T33]  ? __pfx___schedule+0x10/0x10
[  756.851094][   T33]  ? schedule+0x90/0x2b0
[  756.851120][   T33]  schedule+0x164/0x2b0
[  756.851145][   T33]  schedule_preempt_disabled+0x13/0x30
[  756.851168][   T33]  __mutex_lock+0x7c1/0x1550
[  756.851198][   T33]  ? __mutex_lock+0x5d4/0x1550
[  756.851228][   T33]  ? nfsd_shutdown_threads+0x4e/0xd0
[  756.851260][   T33]  ? __pfx___mutex_lock+0x10/0x10
[  756.851286][   T33]  ? net_generic+0x1e/0x240
[  756.851316][   T33]  ? srso_alias_return_thunk+0x5/0xfbef5
[  756.851344][   T33]  ? net_generic+0x1e/0x240
[  756.851369][   T33]  ? net_generic+0x1e/0x240
[  756.851393][   T33]  ? net_generic+0x1e/0x240
[  756.851427][   T33]  ? srso_alias_return_thunk+0x5/0xfbef5
[  756.851456][   T33]  nfsd_shutdown_threads+0x4e/0xd0
[  756.851486][   T33]  nfsd_umount+0x41/0x60
[  756.851518][   T33]  deactivate_locked_super+0xbe/0x110
[  756.851553][   T33]  cleanup_mnt+0x204/0x2a0
[  756.851582][   T33]  task_work_run+0x1d9/0x270
[  756.851611][   T33]  ? __pfx_task_work_run+0x10/0x10
[  756.851644][   T33]  exit_to_user_mode_loop+0x204/0x770
[  756.851685][   T33]  ? srso_alias_return_thunk+0x5/0xfbef5
[  756.851710][   T33]  ? rcu_is_watching+0x16/0xb0
[  756.851742][   T33]  do_syscall_64+0x328/0x520
[  756.851767][   T33]  ? trace_irq_disable+0x3b/0x140
[  756.851816][   T33]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  756.851842][   T33]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  756.851864][   T33] RIP: 0033:0x7f4ce119f797
[  756.851883][   T33] RSP: 002b:00007ffd5c0642d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  756.851904][   T33] RAX: 0000000000000000 RBX: 00007f4ce1234efb RCX: 00007f4ce119f797
[  756.851919][   T33] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd5c064390
[  756.851933][   T33] RBP: 00007ffd5c064390 R08: 00007ffd5c065390 R09: 00000000ffffffff
[  756.851948][   T33] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd5c065420
[  756.851962][   T33] R13: 00007f4ce1234efb R14: 00000000000915cb R15: 00007ffd5c065460
[  756.851995][   T33]  </TASK>
[  756.852048][   T33] 
[  756.852048][   T33] Showing all locks held in the system:
[  756.852061][   T33] locks held by khungtaskd/33: 1, last CPU#0:
[  756.852076][   T33]  #0: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  756.852141][   T33] locks held by kworker/u8:9/1287: 3, on CPU#0:
[  756.852157][   T33]  #0: ffff88801c0a4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  756.852241][   T33]  #1: ffffc90005c07c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  756.852299][   T33]  #2: ffffffff91255e00 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  756.852370][   T33] locks held by getty/5367: 2, on CPU#0:
[  756.852384][   T33]  #0: ffff888035cd00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  756.852446][   T33]  #1: ffffc900032432e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  756.852510][   T33] locks held by syz-executor/5619: 2, on CPU#0:
[  756.852525][   T33]  #0: ffff8880359080e8 (&type->s_umount_key#102){++++}-{4:4}, at: deactivate_super+0xac/0xe0
[  756.852592][   T33]  #1: ffffffff9009f9e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0
[  756.852654][   T33] locks held by syz-executor/7298: 2, on CPU#0:
[  756.852669][   T33]  #0: ffff888066f140e8 (&type->s_umount_key#102){++++}-{4:4}, at: deactivate_super+0xac/0xe0
[  756.852734][   T33]  #1: ffffffff9009f9e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0
[  756.852795][   T33] locks held by syz-executor/15658: 2, on CPU#0:
[  756.852810][   T33]  #0: ffff88807bcf00e8 (&type->s_umount_key#102){++++}-{4:4}, at: deactivate_super+0xac/0xe0
[  756.852876][   T33]  #1: ffffffff9009f9e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0
[  756.852934][   T33] locks held by kworker/u8:13/17528: 4, on CPU#0:
[  756.852948][   T33]  #0: ffff88801d2ce140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  756.853006][   T33]  #1: ffffc9000252fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  756.853063][   T33]  #2: ffffffff912475a8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810
[  756.853113][   T33]  #3: ffffffff91255e00 (rtnl_mutex){+.+.}-{4:4}, at: wiphy_unregister+0x274/0xb20
[  756.853174][   T33] locks held by syz.2.4565/17813: 3, on CPU#0:
[  756.853188][   T33]  #0: ffff88802cea7970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  756.853238][   T33]  #1: ffff88805165c460 (sb_writers#41){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  756.853293][   T33]  #2: ffffffff9009f9e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10
[  756.853341][   T33] locks held by kworker/0:6/18258: 2, last CPU#0:
[  756.853356][   T33]  #0: ffff88801c069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  756.853418][   T33]  #1: ffffc90006bf7c40 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  756.853478][   T33] locks held by syz-executor/19256: 6, last CPU#0:
[  756.853493][   T33]  #0: ffff88803703a460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  756.853548][   T33]  #1: ffff88803d115480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540
[  756.853609][   T33]  #2: ffff88802a504d28 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540
[  756.853674][   T33]  #3: ffffffff90acd1c0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370
[  756.853737][   T33]  #4: ffff88807b719128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880
[  756.853802][   T33]  #5: ffff88807b71c258 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170
[  756.853858][   T33] locks held by syz-executor/19282: 1, last CPU#0:
[  756.853872][   T33]  #0: ffffffff917ab9b0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  756.853931][   T33] locks held by syz-executor/19332: 2, last CPU#0:
[  756.853946][   T33]  #0: ffffffff917c0f98 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  756.854003][   T33]  #1: ffffffff91255e00 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30
[  756.854053][   T33] locks held by syz-executor/19414: 2, on CPU#0:
[  756.854068][   T33]  #0: ffffffff909bcae8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  756.854125][   T33]  #1: ffffffff91255e00 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30
[  756.854181][   T33] locks held by syz-executor/19460: 2, on CPU#0:
[  756.854196][   T33]  #0: ffffffff917ab170 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  756.854253][   T33]  #1: ffffffff91255e00 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30
[  756.854305][   T33] locks held by syz.8.5033/19619: 2, last CPU#0:
[  756.854320][   T33]  #0: ffff88805f00e4c8 (&runtime->oss.params_lock){+.+.}-{4:4}, at: snd_pcm_oss_get_active_substream+0x198/0x280
[  756.854384][   T33]  #1: ffff88805f00e228 (&runtime->buffer_mutex){+.+.}-{4:4}, at: snd_pcm_runtime_buffer_set_silence+0xa9/0x200
[  756.854444][   T33] locks held by dhcpcd-run-hook/19623: 1, last CPU#0:
[  756.854459][   T33]  #0: ffff888026d8ce60 (&sig->cred_guard_mutex){+.+.}-{4:4}, at: bprm_execve+0xbc/0x1590
[  756.854514][   T33] 
[  756.854520][   T33] =============================================
[  756.854520][   T33] 
[  756.854530][   T33] NMI backtrace for cpu 0
[  756.854545][   T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  756.854571][   T33] Tainted: [L]=SOFTLOCKUP
[  756.854579][   T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  756.854620][   T33] Call Trace:
[  756.854629][   T33]  <TASK>
[  756.854638][   T33]  dump_stack_lvl+0xe8/0x150
[  756.854672][   T33]  nmi_cpu_backtrace+0x274/0x2d0
[  756.854707][   T33]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  756.854748][   T33]  nmi_trigger_cpumask_backtrace+0x17d/0x390
[  756.854783][   T33]  sys_info+0x135/0x170
[  756.854813][   T33]  watchdog+0xfd7/0x1030
[  756.854845][   T33]  ? watchdog+0x1c7/0x1030
[  756.854874][   T33]  kthread+0x38b/0x480
[  756.854896][   T33]  ? __pfx_watchdog+0x10/0x10
[  756.854917][   T33]  ? __pfx_kthread+0x10/0x10
[  756.854939][   T33]  ret_from_fork+0x514/0xb70
[  756.854964][   T33]  ? __pfx_ret_from_fork+0x10/0x10
[  756.854984][   T33]  ? srso_alias_return_thunk+0x5/0xfbef5
[  756.855008][   T33]  ? __switch_to+0xc89/0x1420
[  756.855042][   T33]  ? __pfx_kthread+0x10/0x10
[  756.855065][   T33]  ret_from_fork_asm+0x1a/0x30
[  756.855101][   T33]  </TASK>
[  756.855115][   T33] Kernel panic - not syncing: hung_task: blocked tasks
[  757.750000][   T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  757.760693][   T33] Tainted: [L]=SOFTLOCKUP
[  757.765099][   T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  757.775162][   T33] Call Trace:
[  757.778526][   T33]  <TASK>
[  757.781453][   T33]  vpanic+0x56d/0xa60
[  757.785455][   T33]  ? __pfx_vpanic+0x10/0x10
[  757.789971][   T33]  ? srso_alias_return_thunk+0x5/0xfbef5
[  757.795803][   T33]  ? console_srcu_read_unlock+0x3a/0x60
[  757.801362][   T33]  panic+0xc5/0xd0
[  757.805223][   T33]  ? __pfx_panic+0x10/0x10
[  757.809809][   T33]  ? srso_alias_return_thunk+0x5/0xfbef5
[  757.815469][   T33]  ? nmi_cpu_backtrace+0x2b0/0x2d0
[  757.820647][   T33]  ? nmi_trigger_cpumask_backtrace+0x24d/0x390
[  757.827183][   T33]  watchdog+0x1030/0x1030
[  757.831529][   T33]  ? watchdog+0x1c7/0x1030
[  757.835953][   T33]  kthread+0x38b/0x480
[  757.840018][   T33]  ? __pfx_watchdog+0x10/0x10
[  757.844714][   T33]  ? __pfx_kthread+0x10/0x10
[  757.849740][   T33]  ret_from_fork+0x514/0xb70
[  757.854328][   T33]  ? __pfx_ret_from_fork+0x10/0x10
[  757.859458][   T33]  ? srso_alias_return_thunk+0x5/0xfbef5
[  757.865198][   T33]  ? __switch_to+0xc89/0x1420
[  757.870015][   T33]  ? __pfx_kthread+0x10/0x10
[  757.874648][   T33]  ret_from_fork_asm+0x1a/0x30
[  757.879577][   T33]  </TASK>
[  757.882664][   T33] Kernel Offset: disabled
[  757.887013][   T33] Rebooting in 86400 seconds..