last executing test programs:

3m21.762842282s ago: executing program 2 (id=1601):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x14, &(0x7f0000000100)={0x20, 0x24, 0x16, {0x16, 0xc, "fcedfa253d8043e925819d25a1c63ac62b23c698"}}, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x46000)

3m19.655785771s ago: executing program 2 (id=1624):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4044)

3m19.013108103s ago: executing program 2 (id=1633):
r0 = landlock_create_ruleset(&(0x7f0000000200)={0xe249, 0x1, 0x1}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)

3m18.862173808s ago: executing program 2 (id=1636):
syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000009740)='./file1\x00', 0x8, &(0x7f0000009780), 0x1, 0x9798, &(0x7f0000016540)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x100)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5c41164a576d6dd9, 0x20000000ec071, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x8040587f, &(0x7f00000000c0)={0x29, 0x300000000, 0x7fffffffffffffff})

3m16.056952439s ago: executing program 2 (id=1667):
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0)

3m13.069715137s ago: executing program 2 (id=1700):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0)
read(r0, 0x0, 0x0)

2m57.906779313s ago: executing program 32 (id=1700):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0)
read(r0, 0x0, 0x0)

59.335852801s ago: executing program 5 (id=1843):
r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0xff, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

57.060819054s ago: executing program 5 (id=3084):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x523, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@newtfilter={0x9bc, 0x2c, 0x4, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x4, 0xe}, {0xffe4, 0xffe0}, {0xe, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x8f}}, @filter_kind_options=@f_basic={{0xa}, {0x984, 0x2, [@TCA_BASIC_ACT={0x128, 0x3, [@m_pedit={0x124, 0xa, 0x0, 0x0, {{0xa}, {0x4}, {0xf5, 0x6, "c41d0b25b06285aa0797b19a7c9f5df9d280a544e341cd7fa857a7da8b8ac0b1b1669193663e1ce03bfe2e5caefa26e82095040cab3d892406197087cb53984cecab77797af8084a9c30545d5dfdf848b1436185be3cfa6613ce558d163f4bf7277dd100badf448b3f59ee61f1fe342a2cda8c22e07dc739ce5119e0d712fec298b5eb1f7ba66a68d835422656b0ffc9a19deb5333d84a7dd05e0ac4d5ed458ba61590f7cd2ea765b26eae8d45805896b4d03ed95da804fc92d1b45e41f74920ea4d50aac5ed898d4e1c43a0dc80db3c0aab1e5906473c15ba6eb6576bfb1a0eda961d150cefe12b707ebfec98a586f4db"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xe, 0xe}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x10, 0x6}}, @TCA_BASIC_ACT={0x848, 0x3, [@m_police={0x844, 0x16, 0x0, 0x0, {{0xb}, {0x818, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x1ff, 0x10000, 0x5, 0x80000001, 0x5, 0xfffffffa, 0x5f7, 0xbebc, 0x2, 0x7, 0x7, 0x7, 0x798a, 0xff, 0x5, 0xa, 0x7, 0x3, 0x7, 0xff, 0x2, 0x2, 0x7, 0x5, 0x6, 0x2, 0x8, 0x5, 0xe08c, 0x3964, 0xf3, 0x7, 0x6, 0x7, 0x5, 0x6, 0xb, 0x0, 0x0, 0x102, 0xbff, 0x838, 0x2, 0x0, 0x9, 0x3, 0x80000000, 0x7fffffff, 0x0, 0x2, 0x4, 0xad6c, 0xa6f4, 0x6, 0x9f9, 0x7, 0x4, 0x3, 0x6, 0x7fff, 0x5, 0x8000, 0x9, 0x0, 0x2, 0x8, 0x7f, 0x3, 0x1, 0x6, 0xaf75, 0xfffff179, 0x8, 0x0, 0x89, 0x7, 0x8001, 0x10001, 0x8, 0x6, 0x87, 0x7, 0x1, 0x7ca, 0xff, 0x10001, 0x5, 0xdfbd, 0x6d1b, 0xf4dc, 0xf8000000, 0xbfb, 0x200, 0x4, 0x0, 0xfffffff7, 0x6, 0x9, 0x80, 0x0, 0x7, 0x9, 0x4d, 0x3, 0x5, 0x9, 0x7ff, 0x1, 0x7, 0x0, 0x2, 0xf, 0x401, 0x2, 0x1000, 0x4, 0xffffffff, 0x7, 0x5, 0x80, 0x1ff, 0xf, 0x9, 0x0, 0x6, 0xc1, 0xa, 0x2, 0x5, 0x38, 0xff, 0xffffff80, 0x9df, 0x6, 0x2, 0x1ff, 0x0, 0x8, 0xb, 0x200, 0x8, 0x1, 0x2, 0x2, 0x2ee9, 0x1, 0x5, 0x0, 0x80, 0x3, 0x80, 0x2ecc8490, 0x9, 0xa7, 0x24d, 0xa, 0x0, 0xfff, 0x18, 0x8, 0xa, 0x3, 0xd85, 0xd4, 0x9, 0xc64a, 0x9, 0x0, 0x0, 0x0, 0xfff, 0x7, 0x6, 0xabd, 0x3, 0x8000, 0x3, 0x4, 0x1, 0x7, 0x9, 0xdd7, 0xfff, 0x5, 0x3, 0x7, 0x9, 0x9, 0xb, 0x4, 0x80, 0x4, 0x3, 0x6, 0x10000, 0x1, 0xb, 0x6, 0xe, 0x1, 0xfff, 0x0, 0xff, 0x0, 0xc, 0xa4, 0x7f, 0x24, 0xa9a, 0x8, 0x5, 0x8001, 0x2ba, 0x8001, 0x854, 0x4, 0xe7, 0x2, 0x3, 0x2, 0x5, 0x5, 0x2, 0x9, 0x3ff, 0x1, 0xffffffff, 0x8, 0xfff, 0x9, 0x2, 0x3, 0x0, 0x80000000, 0x8, 0xfff, 0x0, 0x86, 0x81, 0x9, 0x9, 0x800, 0xfffffffd, 0x9c1, 0x2, 0xfffffffc, 0x8, 0xc, 0x2, 0x0, 0x3, 0x7, 0x5, 0xd, 0xb]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x4, 0xc6c, 0x9, 0xb, 0x2, 0x3, 0x1, 0x8, 0x1, 0x0, 0x7ff, 0x1, 0x8001, 0x5, 0x7f, 0x8, 0x6, 0x7, 0xffffffff, 0x2, 0xf, 0x4, 0xffffffff, 0x1, 0x1000000, 0xf, 0x2, 0x4, 0x5, 0x3, 0x8000, 0x9f4f5d67, 0x9, 0x9, 0x0, 0x7, 0x8, 0x8, 0x7ff, 0x2, 0x32, 0x3, 0x8, 0x30000000, 0xdd, 0x0, 0x1, 0x400, 0x3, 0x8, 0x101, 0xffffffff, 0x9, 0x3, 0xa, 0x6, 0xd, 0x2, 0x7, 0x3, 0x9, 0x39c0, 0x3, 0x4, 0x94b, 0x5, 0x1, 0x777, 0x2, 0x9, 0x800, 0x1000, 0xa, 0x9e, 0xcc, 0x8, 0x0, 0xffffff37, 0x9, 0x7, 0x8, 0x7ff, 0x7, 0xffffffff, 0x8, 0xfffffffc, 0x101, 0x8, 0x9, 0x4, 0x9, 0x4, 0x9, 0x7, 0x4, 0xf3, 0x1, 0x10000, 0x10000, 0x8, 0x7a36, 0x7, 0x40, 0xd10, 0x455e, 0x4, 0x4, 0x5, 0xff, 0x2, 0x6, 0x40000, 0xffffffff, 0x18bc169, 0x10, 0x4, 0xb66, 0x100, 0x5, 0x3d, 0x5, 0x0, 0x81, 0x81, 0x2, 0x8001, 0x4, 0x7, 0x9, 0x3, 0xc, 0x1, 0x0, 0x6, 0x7fffffff, 0x52acd031, 0xf938, 0xc8, 0x1b, 0x3, 0x80000001, 0x9, 0x6, 0x2, 0x8, 0x41, 0x401, 0xfff, 0x7, 0x100007, 0x1, 0xd17, 0x7, 0x400, 0x0, 0x4, 0x80000000, 0x400, 0x1, 0xfffffffd, 0xc6, 0x9, 0x8, 0x7, 0x25, 0x2, 0x400, 0x4, 0xb, 0x3, 0x1, 0x6, 0x0, 0x81, 0x1, 0x0, 0x200000a, 0x3, 0x3, 0x7, 0x8000, 0xd, 0x8, 0x3, 0xb, 0x9, 0xff, 0x0, 0x0, 0x3, 0x83, 0x1ff, 0x1, 0x4, 0xa, 0x87, 0x800, 0xdba, 0x0, 0xe1d, 0x7f, 0x7, 0x8001, 0x9, 0x9, 0xfffffffa, 0x8, 0x4, 0x5, 0xff, 0x7, 0x9, 0x9ca, 0x0, 0xc, 0x9, 0xfffffb9b, 0xd, 0xfff, 0x9, 0x2, 0x800, 0xfffffff7, 0x7ff, 0x5, 0x5, 0x8001, 0x1, 0x80000001, 0xc9, 0x2, 0x1, 0x8001, 0x5, 0x9, 0x3, 0x8, 0xe47, 0x1ff, 0x3, 0x2, 0x49, 0x7, 0xfffffa1f, 0x1, 0x7f, 0x4, 0x3ff, 0x3, 0x18000, 0x4d0, 0x8000, 0x6, 0x2, 0x5cd]}]]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x9bc}, 0x1, 0x0, 0x0, 0x1}, 0x4041080)
io_uring_enter(r0, 0x1203, 0x109c, 0x16, 0x0, 0xffffffffffffff02)

56.57654305s ago: executing program 5 (id=3091):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000280)={[{@dioread_lock}, {@resgid}]}, 0x6, 0x44b, &(0x7f00000004c0)="$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")
creat(&(0x7f0000000100)='./bus\x00', 0x1fb978507dcbbbd6)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
creat(&(0x7f0000000000)='./file1\x00', 0xf8)

55.425670597s ago: executing program 5 (id=3104):
io_setup(0x4, &(0x7f00000014c0)=<r0=>0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00')
io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)

52.648737529s ago: executing program 5 (id=3128):
memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4)
socket$inet6(0xa, 0x3, 0x2f)
socket$nl_route(0x10, 0x3, 0x0)
socket$alg(0x26, 0x5, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB="07b0cf7e2c89cc"], 0x0)

51.952910532s ago: executing program 33 (id=3128):
memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4)
socket$inet6(0xa, 0x3, 0x2f)
socket$nl_route(0x10, 0x3, 0x0)
socket$alg(0x26, 0x5, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB="07b0cf7e2c89cc"], 0x0)

17.777147352s ago: executing program 0 (id=3482):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000172000/0x3000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000839000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000246000/0x4000)=nil, &(0x7f0000373000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000b71000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000039000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4)
setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x8d}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)

17.195549835s ago: executing program 0 (id=3489):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
writev(0xffffffffffffffff, &(0x7f0000000b80)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="83", 0x1}], 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="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", 0x359, 0x6000000000000000, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x4000000006, 0x6], [0x6, 0xa, 0x1, 0x9, 0x8002, 0x4, 0x5, 0x2, 0x4, 0x800, 0x4000000000009, 0x200000100, 0x3, 0xfffffffffffffff4, 0x6, 0x1000000000005, 0x100, 0xd, 0xdd, 0xfffffffffffffffd, 0x1, 0x2a9, 0x3, 0xc39, 0x8, 0x8, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x7, 0x7, 0xfffffffffffffffa, 0x80, 0x796, 0x5, 0x931, 0x1000101, 0xdfe, 0x1000000000008001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6a7, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffff7, 0x4, 0x0, 0x4, 0x10001, 0x8, 0x6, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x5b9, 0x1, 0x1, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x4000000008000, 0xe000000000002, 0xe4, 0x14, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x5, 0xd3, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000002, 0xe, 0x4, 0x9, 0x7, 0x8, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x4fffffffffffff, 0x7293, 0x0, 0x1, 0x100000007, 0x4, 0x7, 0x406, 0x3, 0x6, 0x5, 0xfffffffffffffffd, 0x13, 0x40, 0x7fffffffffffffff, 0x8, 0x3, 0x5]})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f5})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa7bc3184d"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

7.866368399s ago: executing program 3 (id=3566):
r0 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0xffffffff, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000400)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa090000000000000000000000000000000000000000000000000000000000000000ae000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000a004e210000000800000000000000000000000000000001"], 0x610)
r1 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r2, 0xffffffffffffffff, 0x0)

7.545175805s ago: executing program 3 (id=3571):
r0 = getpid()
syz_pidfd_open(r0, 0x0)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x22883, 0x0)
r2 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000080)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1})
io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

6.080632774s ago: executing program 3 (id=3581):
r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
socket$inet(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)

5.384819377s ago: executing program 0 (id=3589):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)
sendfile(r0, r1, 0x0, 0xffffffff004)
close(r0)

3.398548226s ago: executing program 0 (id=3597):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2710, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x34b130198900281b, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001240)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x57}], 0x1, 0x21, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000000))

3.10731377s ago: executing program 3 (id=3599):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000)
write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000340)=""/185, 0xb9, 0x0, 0x2, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f0000000640)={0x2, 0x0, {&(0x7f0000001900)=""/4096, 0x1000, 0x0, 0x2, 0x2}}, 0x48)
write$vhost_msg(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f0000002b00)={0x2, 0x0, {&(0x7f0000000600)=""/13, 0xd, 0x0, 0x3, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f00000004c0)={0x2, 0x0, {&(0x7f0000000400)=""/192, 0xc0, 0x0, 0x0, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48)

2.329325634s ago: executing program 3 (id=3603):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x2d, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x20000000, 0xfffffffffffffffe, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2, 0x0, 0x8], 0x50000, 0x281302})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.715306155s ago: executing program 0 (id=3606):
unshare(0x24020400)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = syz_open_dev$radio(0x0, 0x1, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r2, 0x0, 0x0, 0x408c0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000000, 0x10031, 0xffffffffffffffff, 0xbe9f6000)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)

1.564728337s ago: executing program 4 (id=3608):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00')
pread64(r2, &(0x7f0000000100)=""/253, 0xfd, 0x1)

1.482911481s ago: executing program 1 (id=3609):
socket$inet6_tcp(0xa, 0x1, 0x0)
fanotify_init(0x222, 0x800)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0x2, 0xa0002f5})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x80000002, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

1.394931533s ago: executing program 1 (id=3610):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045)
r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1)
io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845)

1.27324732s ago: executing program 4 (id=3611):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x4)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0)
close(r1)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)
close(r0)

1.199770195s ago: executing program 3 (id=3612):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000005c0))
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x1d8)
pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xc00)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)

1.144344608s ago: executing program 1 (id=3613):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)}], 0x1}, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', <r4=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x42013, 0x2020e}}, 0x20}, 0x1, 0x0, 0x0, 0x20000886}, 0x0)

1.129015919s ago: executing program 0 (id=3614):
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dos1xfloppy,usefree,nodots,fmask=0000000000000010,flush,nfs=nostale_ro,dots,nodots,\x00'], 0x2, 0x15a, &(0x7f00000007c0)="$eJzs2z+r01AYB+C33l6NutxZHAIuTkX9BIpUEAOK0kEnherSSsEu0cV+FL+gIJ26HdFoS/9JK/QGkudZ8sLvHDgnkLycQN7e/jgaTqYfJi/mkXU60X0YeSw6cRFX4iwqswAAmmSRUvxIKaVrs7j+LVJKW0O+1rIwAOBkDuj/AEDD6P8A0D76PwC0z6vXb549Kor+yzzPIr7PykE5qK5V/uRp0b+X/3axmjUvy8HZMr9f5fl6fh43/uQPduZX4+6dKv+VPX5ebOQ3Y3j67QMAAEAr9PKl9fP937y3J9/+PrBxfu/Gre4lbQIAOMr085fRu/H4/aejioj/mdWI4jwidkdZtPi2KJpW1P1mAk5t9dDXvRIAAAAAAAAAAAAAAGCfg/8Hyv49eJH2T697jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDpZwAAAP//iBFNOg==")
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
msgget$private(0x0, 0x31)

954.35932ms ago: executing program 4 (id=3615):
r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1, 0x26c, &(0x7f0000000840)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa5e438, &(0x7f0000000780)=ANY=[@ANYRESDEC, @ANYRESHEX=0x0, @ANYRES64=0x0, @ANYBLOB="4ea4164323d0136eb525e4df0380654dda5ebcf2de4311b52a2281c85ff08dbd024f787cd68755278fc572e23916a8c3d6696a0bf0670d64b4f5a0a0e534317a2966e83ce615c95af5aecc2e04a42b3bb6c722a5849ba823ebc75abf6d4b6e5fffc844d9d095cbd2eb8a982eb3140257", @ANYRESHEX, @ANYRESHEX=0x0, @ANYRES16, @ANYBLOB="37b57cfa7d0121345c29b6064f49a0f95b88671b8e9149556e5ff3c7012f7856b6557be6b51d61efea623114a0b4b52f68387d2040dd08c5aa753b596ede3f3d637f96752310a389efcd8cf335ca9dbbbc10bda7a16342968c9ab4fd1ac65da604cd9b42d6d0dc0e895e0b2f42822f1b342f88a8d607008d20b22b776a70a07a2c53fc32be094c857279c58542b176bfbcc6c7e9808da687b44a8b21d23cc2f80050f8fd457f5a5595226d2008bcded226ab2e75d00ab5592daa23e809e04c2b370af460ae93b7efc32bf174830779058ad75290b9abb59be5f8859001e651c1d4", @ANYRES32, @ANYRESDEC, @ANYRESDEC, @ANYRESDEC, @ANYRES16=r0, @ANYRESHEX=0x0], 0xb, 0x0, &(0x7f0000000000))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x8d0010, 0x0, 0x40, 0x0, &(0x7f00000000c0))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0)

823.000212ms ago: executing program 4 (id=3616):
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0)
r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r2, 0xc018480b, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000a40)={0x34, &(0x7f0000000840)={0x20, 0x1, 0x25, "e78adb20e17b2d3a2e415a6b0624544d7f7dc40964b9fd82f586237b3aa2baae9ba8ac70b3"}, 0x0, 0x0, 0x0, 0x0, 0x0})

781.862386ms ago: executing program 1 (id=3617):
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0xa)
r1 = landlock_create_ruleset(&(0x7f00000001c0)={0x2fbd, 0x1}, 0x18, 0x0)
landlock_restrict_self(r1, 0x0)
link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00')

482.095593ms ago: executing program 4 (id=3618):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000840)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001080)={0x44, &(0x7f0000000e00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

209.178967ms ago: executing program 1 (id=3619):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008072, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_clone3(&(0x7f0000000180)={0x800000, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)
write$P9_RGETLOCK(r1, &(0x7f0000000380)=ANY=[], 0x200002e6)
fcntl$setpipe(r1, 0x407, 0x7000000)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
socket$tipc(0x1e, 0x2, 0x0)

207.270125ms ago: executing program 4 (id=3620):
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
futex(&(0x7f0000000240)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

0s ago: executing program 1 (id=3621):
r0 = fsopen(&(0x7f0000000200)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x5)
fchdir(r1)
r2 = inotify_init1(0x800)
inotify_add_watch(r2, &(0x7f0000000240)='.\x00', 0x60000726)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./bus\x00', 0x0, 0x12a)
getdents64(r3, 0x0, 0x0)

kernel console output (not intermixed with test programs):

BSSID 16:7e:9b:42:34:9b
[  258.172412][ T4926] Bluetooth: hci4: command 0x0406 tx timeout
[  259.635444][    C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  259.635515][    C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  259.635937][ T5725] usb 4-1: USB disconnect, device number 7
[  259.870692][ T8275] loop3: detected capacity change from 0 to 256
[  260.126798][ T8275] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d)
[  260.581689][  T821] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input8
[  260.885818][ T8283] binder: 8282:8283 ioctl c0306201 200000000640 returned -22
[  261.566086][ T8271] loop2: detected capacity change from 0 to 32768
[  261.735565][ T8271] JBD2: Ignoring recovery information on journal
[  262.133385][ T8271] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[  263.172973][ T8322] netlink: 'syz.0.1013': attribute type 1 has an invalid length.
[  263.656486][ T5622] ocfs2: Unmounting device (7,2) on (node local)
[  265.297226][ T8374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1034'.
[  266.673354][ T5725] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  266.873536][ T5725] usb 4-1: Using ep0 maxpacket: 32
[  266.897308][ T5725] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  266.897346][ T5725] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  266.897372][ T5725] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  266.897396][ T5725] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  266.897423][ T5725] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  266.902931][ T5725] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  266.902966][ T5725] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.902987][ T5725] usb 4-1: Product: syz
[  266.903003][ T5725] usb 4-1: Manufacturer: syz
[  266.903018][ T5725] usb 4-1: SerialNumber: syz
[  267.035288][ T5725] usb 4-1: config 0 descriptor??
[  267.621627][ T5725] iforce 4-1:0.0: usb_submit_urb failed: -32
[  267.621688][ T5725] input input10: Device does not respond to id packet M
[  267.849354][ T5725] iforce 4-1:0.0: usb_submit_urb failed: -71
[  267.849414][ T5725] input input10: Device does not respond to id packet B
[  267.849910][ T5725] iforce 4-1:0.0: usb_submit_urb failed: -71
[  267.849958][ T5725] input input10: Device does not respond to id packet N
[  267.936340][ T5725] iforce 4-1:0.0: usb_submit_urb failed: -71
[  267.936846][ T5725] iforce 4-1:0.0: usb_submit_urb failed: -71
[  267.939699][ T5725] iforce 4-1:0.0: usb_submit_urb failed: -71
[  267.940317][ T5725] iforce 4-1:0.0: usb_submit_urb failed: -71
[  268.004016][ T5725] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input10
[  268.038481][ T5725] usb 4-1: USB disconnect, device number 8
[  268.352672][ T8430] tipc: Started in network mode
[  268.352710][ T8430] tipc: Node identity 00000000002d003a0040ffffe0000001, cluster identity 4711
[  268.352800][ T8430] tipc: Enabling of bearer <udp:ÿÿÿÿ> rejected, failed to enable media
[  269.530604][ T8440] netlink: 'syz.0.1062': attribute type 1 has an invalid length.
[  270.605525][ T8461] loop1: detected capacity change from 0 to 4096
[  270.861307][ T8468] loop2: detected capacity change from 0 to 512
[  270.946808][ T8468] EXT4-fs: inline encryption not supported
[  271.474817][ T8480] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  272.065201][ T8468] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.1076: iget: bad extra_isize 90 (inode size 256)
[  272.065247][ T8468] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  272.082533][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  272.082559][    C0] EXT4-fs (loop2): initial error at time 1781845076: ext4_xattr_inode_iget:441: inode 11
[  272.082590][    C0] EXT4-fs (loop2): last error at time 1781845076: ext4_xattr_inode_iget:441: inode 11
[  272.259782][ T8468] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1076: error while reading EA inode 11 err=-117
[  272.259819][ T8468] loop2: lost filesystem error report for type 5 error -117
[  272.275712][ T8468] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.1076: iget: bad extra_isize 90 (inode size 256)
[  272.275754][ T8468] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  272.279323][ T8468] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1076: error while reading EA inode 11 err=-117
[  272.279359][ T8468] loop2: lost filesystem error report for type 5 error -117
[  272.336744][ T8468] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.1076: iget: bad extra_isize 90 (inode size 256)
[  272.336872][ T8468] loop2: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117
[  272.339679][ T8468] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1076: error while reading EA inode 18 err=-117
[  272.339724][ T8468] loop2: lost filesystem error report for type 5 error -117
[  272.420860][ T8468] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.1076: iget: bad extra_isize 90 (inode size 256)
[  272.420905][ T8468] loop2: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117
[  272.548589][ T8468] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1076: error while reading EA inode 18 err=-117
[  272.548632][ T8468] loop2: lost filesystem error report for type 5 error -117
[  272.635816][ T8468] EXT4-fs (loop2): 1 orphan inode deleted
[  272.685308][ T8468] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  273.194334][   T37] audit: type=1800 audit(1781845077.387:34): pid=8487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1072" name="file3" dev="loop1" ino=16 res=0 errno=0
[  273.632815][ T5622] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.868387][ T8508] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1090'.
[  274.882494][ T5725] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  275.044384][ T5725] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  275.044440][ T5725] usb 3-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00
[  275.044465][ T5725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  275.093834][ T5725] usb 3-1: config 0 descriptor??
[  275.331536][ T5725] usbhid 3-1:0.0: can't add hid device: -71
[  275.331680][ T5725] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  275.367328][ T5725] usb 3-1: USB disconnect, device number 7
[  276.176512][ T8549] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1109'.
[  277.492849][ T8585] loop2: detected capacity change from 0 to 64
[  277.631193][ T8557] loop1: detected capacity change from 0 to 32768
[  277.696236][ T8557] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1112 (8557)
[  278.281511][ T8557] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  278.281550][ T8557] BTRFS info (device loop1): using crc32c checksum algorithm
[  278.281584][ T8557] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  278.848141][ T8557] BTRFS info (device loop1): rebuilding free space tree
[  279.753008][ T8640] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1145'.
[  279.759823][ T8557] BTRFS info (device loop1): disabling free space tree
[  279.759919][ T8557] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  279.759947][ T8557] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  280.251718][ T8655] program syz.2.1150 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  280.260068][ T8557] BTRFS info (device loop1): enabling ssd optimizations
[  280.260095][ T8557] BTRFS info (device loop1): turning on async discard
[  280.260111][ T8557] BTRFS info (device loop1): enabling disk space caching
[  280.260128][ T8557] BTRFS info (device loop1): force clearing of disk cache
[  280.260147][ T8557] BTRFS info (device loop1): use zstd compression, level 3
[  280.721349][ T5624] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  280.771986][ T8668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1157'.
[  280.827803][ T8672] loop3: detected capacity change from 0 to 512
[  280.829260][ T8672] EXT4-fs: Ignoring removed nobh option
[  280.829377][ T8672] EXT4-fs: Ignoring removed orlov option
[  280.855575][ T8672] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  280.869110][ T8670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1159'.
[  280.943754][ T8672] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #16: comm syz.3.1160: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0)
[  280.943804][ T8672] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  280.954674][    C0] EXT4-fs (loop3): initial error at time 1781845085: ext4_ext_check_inode:521: inode 16
[  280.954701][    C0] EXT4-fs (loop3): last error at time 1781845085: ext4_ext_check_inode:521: inode 16
[  281.018111][ T8672] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1160: couldn't read orphan inode 16 (err -117)
[  281.018151][ T8672] loop3: lost filesystem error report for type 5 error -117
[  281.039685][ T8672] EXT4-fs (loop3): 1 orphan inode deleted
[  281.067138][ T8672] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  281.965614][ T8678] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  282.093835][ T8678] overlayfs: failed to verify upper root origin
[  282.336154][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  282.856723][ T8715] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1175'.
[  285.287215][ T8711] loop2: detected capacity change from 0 to 40427
[  285.288411][ T8711] F2FS-fs: heap/no_heap options were deprecated
[  285.303025][ T8711] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504)
[  285.303054][ T8711] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  285.443432][ T8711] F2FS-fs (loop2): invalid crc value
[  285.460350][ T8760] loop1: detected capacity change from 0 to 1024
[  285.468361][ T8760] EXT4-fs: Ignoring removed orlov option
[  285.831706][ T8760] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  285.844555][ T8711] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  286.387373][ T8789] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  286.387373][ T8789] The task syz.0.1206 (8789) triggered the difference, watch for misbehavior.
[  287.576995][ T5624] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  287.781002][ T1667] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  288.678353][ T8804] loop0: detected capacity change from 0 to 32768
[  288.728105][ T8804] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  288.823064][ T8804] XFS (loop0): Ending clean mount
[  288.976620][ T8804] XFS (loop0): Quotacheck needed: Please wait.
[  289.104412][ T8813] loop2: detected capacity change from 0 to 32768
[  289.105671][ T8813] btrfs: Deprecated parameter 'usebackuproot'
[  289.105693][ T8813] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  289.214162][ T8813] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1211 (8813)
[  289.280359][ T8813] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  289.303378][ T8813] BTRFS info (device loop2): using crc32c checksum algorithm
[  289.882391][   T47] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  289.893293][ T8804] XFS (loop0): Quotacheck: Done.
[  290.005325][ T8813] BTRFS error (device loop2): failed to load root extent
[  290.005481][ T8813] BTRFS warning (device loop2): try to load backup roots slot 1
[  290.006056][ T1667] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  290.006197][ T8813] BTRFS warning (device loop2): couldn't read tree root
[  290.006219][ T8813] BTRFS warning (device loop2): try to load backup roots slot 2
[  290.013579][ T1667] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  290.013709][ T8813] BTRFS warning (device loop2): couldn't read tree root
[  290.013730][ T8813] BTRFS warning (device loop2): try to load backup roots slot 3
[  290.110943][ T8813] BTRFS info (device loop2): rebuilding free space tree
[  290.317022][ T8827] loop1: detected capacity change from 0 to 32768
[  290.333544][ T5616] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  290.526640][ T8827] BTRFS info: device /dev/loop1 (7:1) using temp-fsid 1f748560-0681-4b41-aa05-54a7a699112c
[  290.526717][ T8827] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1224 (8827)
[  290.589818][ T8874] loop3: detected capacity change from 0 to 1024
[  290.625898][ T8874] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  290.825555][ T8827] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  290.825590][ T8827] BTRFS info (device loop1): using crc32c checksum algorithm
[  290.845616][ T8874] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 2: comm syz.3.1237: lblock 2 mapped to illegal pblock 2 (length 1)
[  290.845673][ T8874] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  290.846050][ T8874] Quota error (device loop3): qtree_write_dquot: dquota write failed
[  290.846107][ T8874] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 48: comm syz.3.1237: lblock 0 mapped to illegal pblock 48 (length 1)
[  290.846137][ T8874] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  290.846416][ T8874] Quota error (device loop3): v2_write_file_info: Can't write info structure
[  290.846435][ T8874] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.1237: Failed to acquire dquot type 0
[  290.846471][ T8874] loop3: lost filesystem error report for type 5 error -117
[  290.846717][ T8874] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: Corrupt filesystem
[  290.846735][ T8874] loop3: lost filesystem error report for type 5 error -117
[  290.847024][ T8874] EXT4-fs error (device loop3): ext4_evict_inode:267: inode #11: comm syz.3.1237: mark_inode_dirty error
[  290.847047][ T8874] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  290.848693][ T8874] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -117)
[  290.848805][ T8874] EXT4-fs (loop3): 1 orphan inode deleted
[  290.900442][ T1667] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1)
[  290.900482][ T1667] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  290.907678][ T1667] Quota error (device loop3): remove_tree: Can't read quota data block 1
[  290.907727][ T1667] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:12: Failed to release dquot type 0
[  290.907747][ T1667] loop3: lost filesystem error report for type 5 error -117
[  290.975967][ T8874] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  291.410940][ T8813] BTRFS info (device loop2): checking UUID tree
[  291.411076][ T8813] BTRFS error (device loop2): failed to check the UUID tree: -4
[  291.503322][ T8893] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000.
[  291.851599][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  291.856009][ T5619] EXT4-fs error (device loop3): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0
[  291.856042][ T5619] loop3: lost filesystem error report for type 5 error -117
[  291.986619][ T5619] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: Corrupt filesystem
[  291.986649][ T5619] loop3: lost filesystem error report for type 5 error -117
[  292.222582][ T8813] BTRFS error (device loop2): open_ctree failed: -4
[  292.277047][ T5619] EXT4-fs error (device loop3): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error
[  292.277082][ T5619] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  292.606615][ T8827] BTRFS error (device loop1): open_ctree failed: -4
[  292.979942][ T8917] dummy0: entered allmulticast mode
[  293.011758][ T8917] dummy0: left allmulticast mode
[  293.144294][ T8919] program syz.3.1248 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  293.714038][   T37] audit: type=1326 audit(1781845097.910:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8927 comm="syz.0.1252" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c749ace59 code=0x7ffc0000
[  293.714097][   T37] audit: type=1326 audit(1781845097.910:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8927 comm="syz.0.1252" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c749ace59 code=0x7ffc0000
[  293.787763][ T8928] program syz.3.1253 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  293.878662][   T37] audit: type=1326 audit(1781845097.970:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8927 comm="syz.0.1252" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c749ace59 code=0x7ffc0000
[  293.878719][   T37] audit: type=1326 audit(1781845098.040:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8927 comm="syz.0.1252" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c749ace59 code=0x7ffc0000
[  293.878957][   T37] audit: type=1326 audit(1781845098.040:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8927 comm="syz.0.1252" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f5c749ace59 code=0x7ffc0000
[  293.879141][   T37] audit: type=1326 audit(1781845098.070:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8927 comm="syz.0.1252" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c749ace59 code=0x7ffc0000
[  293.879532][   T37] audit: type=1326 audit(1781845098.070:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8927 comm="syz.0.1252" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c749ace59 code=0x7ffc0000
[  294.844927][ T8949] loop3: detected capacity change from 0 to 256
[  294.850694][ T8912] loop2: detected capacity change from 0 to 40427
[  294.925371][ T8912] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64)
[  294.925405][ T8912] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  294.961310][ T8912] F2FS-fs (loop2): Image doesn't support compression
[  294.962987][ T8912] F2FS-fs (loop2): invalid crc value
[  295.575379][ T8912] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  295.895862][ T8912] F2FS-fs (loop2): f2fs_disable_checkpoint starts, unusable: 0
[  295.895894][ T8912] F2FS-fs (loop2): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  295.900309][ T8912] F2FS-fs (loop2): Start checkpoint disabled!
[  296.801142][ T8912] F2FS-fs (loop2): f2fs_disable_checkpoint finishes, err:0
[  297.150961][ T8960] loop1: detected capacity change from 0 to 40427
[  297.152153][ T8960] F2FS-fs: heap/no_heap options were deprecated
[  297.177682][ T8960] F2FS-fs (loop1): build fault injection rate: 19
[  297.177708][ T8960] F2FS-fs (loop1): build fault injection type: 0x3bfe8c
[  297.261419][ T8960] F2FS-fs (loop1): invalid crc value
[  297.482305][ T8960] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa00/0x18c0
[  298.008003][ T8960] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x21d/0x3d0
[  298.093938][ T8998] loop0: detected capacity change from 0 to 128
[  298.097730][ T8960] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  298.558030][ T8960] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  300.033728][ T9008] loop3: detected capacity change from 0 to 32768
[  300.087409][ T9008] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1289 (9008)
[  300.288879][ T9008] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  300.288921][ T9008] BTRFS info (device loop3): using crc32c checksum algorithm
[  300.288975][ T9008] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  300.584391][   T44] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  300.713363][ T9008] BTRFS info (device loop3): rebuilding free space tree
[  300.733400][   T44] usb 1-1: Using ep0 maxpacket: 8
[  300.762794][   T44] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[  300.762830][   T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  300.762851][   T44] usb 1-1: Product: syz
[  300.762865][   T44] usb 1-1: Manufacturer: syz
[  300.762880][   T44] usb 1-1: SerialNumber: syz
[  300.805323][   T44] usb 1-1: config 0 descriptor??
[  300.824600][   T44] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[  300.846871][   T44] dvb-usb: bulk message failed: -22 (2/0)
[  300.881722][   T44] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  300.882671][   T44] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[  300.882735][   T44] usb 1-1: media controller created
[  300.941501][   T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  301.015081][   T44] dvb-usb: bulk message failed: -22 (1/0)
[  301.083804][   T44] DVB: Unable to find symbol mt352_attach()
[  301.083831][   T44] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[  301.181529][   T44] rc_core: IR keymap rc-dvico-portable not found
[  301.181551][   T44] Registered IR keymap rc-empty
[  301.184594][   T44] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0
[  301.235926][   T44] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input11
[  301.251362][   T44] dvb-usb: schedule remote query interval to 100 msecs.
[  301.251386][   T44] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[  301.364007][   T44] dvb-usb: bulk message failed: -22 (1/0)
[  301.365963][ T9008] BTRFS info (device loop3): disabling free space tree
[  301.366042][ T9008] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  301.366068][ T9008] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  301.401944][ T5879] usb 1-1: USB disconnect, device number 11
[  301.636645][ T9008] BTRFS info (device loop3): enabling ssd optimizations
[  301.636678][ T9008] BTRFS info (device loop3): turning on async discard
[  301.636697][ T9008] BTRFS info (device loop3): enabling disk space caching
[  301.636714][ T9008] BTRFS info (device loop3): force clearing of disk cache
[  301.636734][ T9008] BTRFS info (device loop3): use zstd compression, level 3
[  301.764755][ T5619] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  302.859459][ T5879] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[  303.543219][ T9111] loop0: detected capacity change from 0 to 64
[  304.139433][ T9122] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x2)
[  304.178363][   T37] kauditd_printk_skb: 11 callbacks suppressed
[  304.178386][   T37] audit: type=1800 audit(1781845108.351:53): pid=9111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1330" name="file1" dev="loop0" ino=21 res=0 errno=0
[  304.506651][ T5879] IPVS: starting estimator thread 0...
[  304.758889][ T9126] IPVS: using max 8 ests per chain, 19200 per kthread
[  304.982535][ T5629] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  305.041658][ T9103] loop1: detected capacity change from 0 to 32768
[  305.139053][ T5629] usb 1-1: Using ep0 maxpacket: 8
[  305.170151][ T5629] usb 1-1: config 0 has an invalid interface number: 186 but max is 0
[  305.170181][ T5629] usb 1-1: config 0 has no interface number 0
[  305.170243][ T5629] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  305.170266][ T5629] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  305.170290][ T5629] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A
[  305.170315][ T5629] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  305.170342][ T5629] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  305.177455][ T5629] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[  305.177487][ T5629] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  305.177509][ T5629] usb 1-1: Product: syz
[  305.177524][ T5629] usb 1-1: Manufacturer: syz
[  305.177539][ T5629] usb 1-1: SerialNumber: syz
[  305.299041][ T5629] usb 1-1: config 0 descriptor??
[  305.563756][ T5629] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0
[  305.888170][  T820] usb 1-1: USB disconnect, device number 12
[  305.961107][   T37] audit: type=1800 audit(1781845110.151:54): pid=9103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1326" name="file1" dev="loop1" ino=4 res=0 errno=0
[  306.792485][ T9178] netlink: 'syz.0.1359': attribute type 12 has an invalid length.
[  306.792510][ T9178] netlink: 'syz.0.1359': attribute type 29 has an invalid length.
[  306.792525][ T9178] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1359'.
[  306.792547][ T9178] netlink: 'syz.0.1359': attribute type 3 has an invalid length.
[  306.792561][ T9178] netlink: 'syz.0.1359': attribute type 2 has an invalid length.
[  306.792574][ T9178] netlink: 35 bytes leftover after parsing attributes in process `syz.0.1359'.
[  307.097115][ T9184] loop0: detected capacity change from 0 to 2048
[  307.151735][ T9184] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  307.213541][ T9188] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  307.247010][ T9190] loop2: detected capacity change from 0 to 128
[  307.370070][ T9184] NILFS error (device loop0): __nilfs_read_inode: invalid file type bits in mode 0177777 for inode 12
[  307.727027][ T9184] Remounting filesystem read-only
[  308.490563][ T9212] input: syz0 as /devices/virtual/input/input12
[  309.431478][ T9231] loop3: detected capacity change from 0 to 4096
[  310.122111][ T9221] loop2: detected capacity change from 0 to 32768
[  310.690674][ T9221] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  310.884012][ T9235] loop0: detected capacity change from 0 to 32768
[  311.264799][ T9235] XFS (loop0): DAX unsupported by block device. Turning off DAX.
[  311.274095][ T9235] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  311.310716][ T5622] ocfs2: Unmounting device (7,2) on (node local)
[  311.384378][ T9235] XFS (loop0): Ending clean mount
[  311.421019][ T9243] loop1: detected capacity change from 0 to 32768
[  311.681058][ T9243] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  311.764979][ T9243] JBD2: Ignoring recovery information on journal
[  311.828205][  T820] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  311.875579][ T9235] XFS (loop0): Quotacheck needed: Please wait.
[  312.007888][  T820] usb 4-1: Using ep0 maxpacket: 32
[  312.030107][  T820] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  312.030137][  T820] usb 4-1: config 0 has no interface number 0
[  312.051481][  T820] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  312.051516][  T820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  312.051538][  T820] usb 4-1: Product: syz
[  312.051553][  T820] usb 4-1: Manufacturer: syz
[  312.051569][  T820] usb 4-1: SerialNumber: syz
[  312.091705][  T820] usb 4-1: config 0 descriptor??
[  312.153912][ T9243] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  312.570432][ T9284] loop2: detected capacity change from 0 to 256
[  312.615759][  T820] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  312.615793][  T820] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  312.822973][  T820] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  312.823329][  T820] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71
[  312.864248][  T820] usb 4-1: USB disconnect, device number 9
[  312.976105][ T9284] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00007372)
[  313.411930][ T9295] loop2: detected capacity change from 0 to 128
[  313.459681][ T9295] EXT4-fs: inline encryption not supported
[  313.562017][ T9295] EXT4-fs (loop2): Test dummy encryption mode enabled
[  313.586742][ T9295] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  313.602794][ T9295] ext4 filesystem being mounted at /157/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  313.645314][ T9235] XFS (loop0): Quotacheck: Done.
[  313.992805][ T5616] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  314.232921][ T5622] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  315.409890][ T9305] loop3: detected capacity change from 0 to 32768
[  315.415398][ T9305] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1408 (9305)
[  315.821870][ T9305] BTRFS info (device loop3): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b
[  315.821905][ T9305] BTRFS info (device loop3): using xxhash64 checksum algorithm
[  316.502008][ T9305] BTRFS info (device loop3): enabling ssd optimizations
[  316.502041][ T9305] BTRFS info (device loop3): turning on async discard
[  316.502058][ T9305] BTRFS info (device loop3): enabling free space tree
[  317.031321][ T5624] ocfs2: Unmounting device (7,1) on (node local)
[  317.081219][   T37] audit: type=1800 audit(1781845121.272:55): pid=9305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1408" name="file1" dev="loop3" ino=260 res=0 errno=0
[  317.445992][ T5619] BTRFS info (device loop3): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b
[  317.473029][ T1338] ieee802154 phy0 wpan0: encryption failed: -22
[  317.473146][ T1338] ieee802154 phy1 wpan1: encryption failed: -22
[  318.685019][ T9404] IPVS: fo: FWM 3 0x00000003 - no destination available
[  318.807550][ T1667] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  319.651172][ T5854] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  319.888457][ T5854] usb 4-1: Using ep0 maxpacket: 16
[  319.892675][ T5854] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  319.892711][ T5854] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  319.892752][ T5854] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[  319.892778][ T5854] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.913695][ T5854] usb 4-1: config 0 descriptor??
[  320.401021][ T5854] hid_parser_main: 457 callbacks suppressed
[  320.401048][ T5854] konepure 0003:1E7D:2DB4.0009: unknown main item tag 0x0
[  320.401078][ T5854] konepure 0003:1E7D:2DB4.0009: unknown main item tag 0x0
[  320.401105][ T5854] konepure 0003:1E7D:2DB4.0009: unknown main item tag 0x0
[  320.401130][ T5854] konepure 0003:1E7D:2DB4.0009: unknown main item tag 0x0
[  320.428088][ T5854] konepure 0003:1E7D:2DB4.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.3-1/input0
[  321.146853][ T5854] usb 4-1: USB disconnect, device number 10
[  322.086807][ T5725] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  322.334112][ T5725] usb 3-1: Using ep0 maxpacket: 32
[  322.337499][ T5725] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  322.337535][ T5725] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  322.337575][ T5725] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  322.337599][ T5725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  322.403984][ T5725] usb 3-1: config 0 descriptor??
[  322.881484][ T5629] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  322.945977][ T5725] ft260 0003:0403:6030.000A: unknown main item tag 0x0
[  322.946016][ T5725] ft260 0003:0403:6030.000A: unknown main item tag 0x0
[  323.036601][ T5629] usb 1-1: Using ep0 maxpacket: 8
[  323.041177][ T5629] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  323.041227][ T5629] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  323.041249][ T5629] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  323.073793][ T5629] usb 1-1: config 0 descriptor??
[  323.081794][ T5725] ft260 0003:0403:6030.000A: failed to retrieve chip version
[  323.082255][ T5725] ft260 0003:0403:6030.000A: probe with driver ft260 failed with error -71
[  323.129067][ T5725] usb 3-1: USB disconnect, device number 8
[  323.343394][ T5629] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  323.723567][ T9462] loop3: detected capacity change from 0 to 32768
[  323.758041][ T9462] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1473 (9462)
[  323.925426][ T5725] usb 1-1: USB disconnect, device number 13
[  324.253269][ T9495] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1488'.
[  324.295860][ T9462] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  324.295899][ T9462] BTRFS info (device loop3): using crc32c checksum algorithm
[  324.667103][ T9462] BTRFS info (device loop3): enabling ssd optimizations
[  324.667137][ T9462] BTRFS info (device loop3): turning on async discard
[  324.667154][ T9462] BTRFS info (device loop3): enabling free space tree
[  324.943657][ T9519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1492'.
[  324.996311][ T5725] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  325.175264][ T5725] usb 2-1: unable to get BOS descriptor or descriptor too short
[  325.209662][ T5725] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  325.209704][ T5725] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  325.240186][ T5725] usb 2-1: string descriptor 0 read error: -22
[  325.240353][ T5725] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  325.240379][ T5725] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  325.297130][ T5725] usb 2-1: selecting invalid altsetting 1
[  325.298721][ T5725] usb 2-1: unit 6 not found!
[  326.010554][ T5854] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  326.182727][ T5725] usb 2-1: 2:0: failed to get current value for ch 0 (-71)
[  326.213256][ T5854] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  326.213306][ T5854] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  326.213327][ T5854] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  326.213382][ T5854] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  326.213410][ T5854] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  326.213437][ T5854] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  326.236999][ T5854] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  326.237029][ T5854] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  326.237048][ T5854] usb 1-1: Product: syz
[  326.237062][ T5854] usb 1-1: Manufacturer: syz
[  326.758804][ T9536] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  326.771680][ T5854] cdc_wdm 1-1:1.0: skipping garbage
[  326.771701][ T5854] cdc_wdm 1-1:1.0: skipping garbage
[  326.908206][ T5854] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  326.908231][ T5854] cdc_wdm 1-1:1.0: Unknown control protocol
[  327.037505][   T44] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  327.211813][ T5854] usb 1-1: USB disconnect, device number 14
[  327.260745][ T5725] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  327.271475][   T44] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x4F, changing to 0xF
[  327.271512][   T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  327.274085][   T44] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  327.274113][   T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.274131][   T44] usb 3-1: Product: syz
[  327.274145][   T44] usb 3-1: Manufacturer: syz
[  327.274158][   T44] usb 3-1: SerialNumber: syz
[  327.288056][   T44] usb 3-1: config 0 descriptor??
[  327.403329][ T5725] usb 2-1: USB disconnect, device number 8
[  327.883606][ T5619] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  329.416015][ T9607] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1532'.
[  329.472560][ T9610] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1532'.
[  330.244475][ T9610] Zero length message leads to an empty skb
[  330.481689][   T44] usb 3-1: USB disconnect, device number 9
[  331.380779][ T9600] loop2: detected capacity change from 0 to 40427
[  331.462263][ T9600] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  331.462293][ T9600] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  331.483457][ T9600] F2FS-fs (loop2): invalid crc value
[  331.850968][ T9617] loop3: detected capacity change from 0 to 32768
[  332.278417][ T9600] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  332.695962][ T9600] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  332.695999][ T9600] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  333.336165][ T9687] sctp: [Deprecated]: syz.3.1560 (pid 9687) Use of int in max_burst socket option deprecated.
[  333.336165][ T9687] Use struct sctp_assoc_value instead
[  333.552770][ T9663] loop0: detected capacity change from 0 to 32768
[  333.761830][ T9663] XFS (loop0): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  333.889015][ T9663] XFS (loop0): Starting recovery (logdev: internal)
[  334.381333][ T9663] XFS (loop0): Ending recovery (logdev: internal)
[  334.437534][ T9712] loop3: detected capacity change from 0 to 256
[  334.535753][ T9712] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  334.608444][ T9712] exFAT-fs (loop3): valid_size(562949953421322) is greater than size(10)
[  335.421129][ T5616] XFS (loop0): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  336.212318][ T9745] loop3: detected capacity change from 0 to 16
[  336.230006][ T9745] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  337.074905][ T5738] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  337.230434][ T5738] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  337.230473][ T5738] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  337.230497][ T5738] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  337.230552][ T5738] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  337.230579][ T5738] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  337.299126][ T5738] usb 3-1: config 0 descriptor??
[  337.503380][ T9777] loop0: detected capacity change from 0 to 1024
[  337.504609][ T9777] EXT4-fs: Ignoring removed nomblk_io_submit option
[  337.530811][ T9777] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6041c01c, mo2=0002]
[  337.530961][ T9777] System zones: 0-1, 3-36
[  337.724395][ T9777] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  337.801415][ T5738] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x4
[  337.926929][ T5738] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  338.058017][ T5738] usb 3-1: USB disconnect, device number 10
[  338.103205][ T5616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  338.501781][ T9792] fido_id[9792]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  338.942443][ T9812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1624'.
[  339.516386][ T5738] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  339.671378][ T5738] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  339.671423][ T5738] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  339.710728][ T5738] usb 1-1: config 0 descriptor??
[  339.728312][ T5738] cp210x 1-1:0.0: cp210x converter detected
[  339.955253][ T9848] loop3: detected capacity change from 0 to 512
[  339.958765][ T9848] EXT4-fs: Ignoring removed orlov option
[  339.963769][ T9848] EXT4-fs (loop3): Test dummy encryption mode enabled
[  339.963793][ T9848] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  340.147859][ T5738] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32
[  340.245330][ T5738] usb 1-1: cp210x converter now attached to ttyUSB0
[  340.278029][ T9848] EXT4-fs (loop3): 1 truncate cleaned up
[  340.339172][ T9848] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  340.373194][ T5738] usb 1-1: USB disconnect, device number 15
[  340.934706][ T5738] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  340.995955][ T9870] loop0: detected capacity change from 0 to 64
[  341.186704][ T5738] cp210x 1-1:0.0: device disconnected
[  341.375909][   T37] audit: type=1800 audit(1781845145.545:56): pid=9858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1640" name="file1" dev="loop3" ino=15 res=0 errno=0
[  341.561137][ T9840] loop2: detected capacity change from 0 to 32768
[  341.574042][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  341.780670][ T9840] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  342.035750][ T9840] XFS (loop2): Ending clean mount
[  342.335007][ T5622] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  344.454588][ T9958] loop3: detected capacity change from 0 to 512
[  344.506301][ T9958] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.1688: inode has both inline data and extents flags
[  344.506347][ T9958] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  344.507036][ T9958] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1688: couldn't read orphan inode 15 (err -117)
[  344.507071][ T9958] loop3: lost filesystem error report for type 5 error -117
[  344.515179][    C1] EXT4-fs (loop3): error count since last fsck: 2
[  344.515207][    C1] EXT4-fs (loop3): initial error at time 1781845148: ext4_orphan_get:1399: inode 15
[  344.515238][    C1] EXT4-fs (loop3): last error at time 1781845148: ext4_orphan_get:1404
[  344.644076][   T44] usb 1-1: new low-speed USB device number 16 using dummy_hcd
[  344.675230][ T9958] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  344.743364][ T9958] syz.3.1688 (pid 9958) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  344.921142][   T44] usb 1-1: unable to get BOS descriptor or descriptor too short
[  344.932457][   T44] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 32, setting to 0
[  344.932510][   T44] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 16, setting to 0
[  344.992843][   T44] usb 1-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40
[  344.992878][   T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  345.340227][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  345.480392][   T44] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  345.481142][   T44] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2
[  345.912538][   T44] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  345.913407][   T44] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -2
[  345.983326][   T44] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  346.760719][   T44] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -2
[  346.837262][   T44] usb 1-1: USB disconnect, device number 16
[  347.814959][T10033] loop9: detected capacity change from 0 to 524287998
[  348.579780][T10047] loop3: detected capacity change from 0 to 4096
[  348.585154][T10047] EXT4-fs: inline encryption not supported
[  348.591603][T10047] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  348.591644][T10047] EXT4-fs (loop3): Test dummy encryption mode enabled
[  348.644650][T10047] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c198, mo2=0003]
[  348.644876][T10047] System zones: 0-5
[  348.667303][T10047] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  349.597000][T10047] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx"
[  349.952246][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  350.134289][   T67] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  350.310241][T10053] loop0: detected capacity change from 0 to 32768
[  350.335763][T10053] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1733 (10053)
[  350.556215][T10088] loop3: detected capacity change from 0 to 512
[  350.702292][T10053] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  350.702376][T10053] BTRFS info (device loop0): using sha256 checksum algorithm
[  350.941481][T10088] EXT4-fs (loop3): 1 truncate cleaned up
[  351.015334][T10088] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  351.212432][T10053] BTRFS info (device loop0): enabling ssd optimizations
[  351.212483][T10053] BTRFS info (device loop0): turning on sync discard
[  351.212502][T10053] BTRFS info (device loop0): enabling free space tree
[  351.795785][ T5616] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  351.918394][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  356.983025][T10207] loop0: detected capacity change from 0 to 32768
[  357.123488][T10207] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  357.268932][T10207] XFS (loop0): Ending clean mount
[  357.371293][T10216] loop3: detected capacity change from 0 to 32768
[  357.386476][T10216] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1804 (10216)
[  357.471111][T10216] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  357.471164][T10216] BTRFS info (device loop3): using crc32c checksum algorithm
[  357.659782][ T1669] BTRFS warning (device loop3): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0
[  357.688473][T10216] BTRFS warning (device loop3): couldn't read tree root
[  357.688505][T10216] BTRFS warning (device loop3): try to load backup roots slot 1
[  357.694314][   T13] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0
[  357.724436][T10216] BTRFS warning (device loop3): couldn't read tree root
[  357.724466][T10216] BTRFS warning (device loop3): try to load backup roots slot 2
[  357.744936][   T13] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  357.746219][T10216] BTRFS warning (device loop3): couldn't read tree root
[  357.746246][T10216] BTRFS warning (device loop3): try to load backup roots slot 3
[  357.847599][T10216] BTRFS info (device loop3): checking UUID tree
[  357.868842][T10216] BTRFS info (device loop3): setting nodatasum
[  357.868868][T10216] BTRFS info (device loop3): enabling ssd optimizations
[  357.868887][T10216] BTRFS info (device loop3): turning on flush-on-commit
[  357.868904][T10216] BTRFS info (device loop3): turning on async discard
[  357.868921][T10216] BTRFS info (device loop3): enabling free space tree
[  357.868938][T10216] BTRFS info (device loop3): trying to use backup root at mount time
[  357.868957][T10216] BTRFS info (device loop3): max_inline set to 0
[  358.843570][ T5616] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  361.298227][ T4926] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  361.369410][ T4926] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  361.399375][ T4926] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  361.418101][ T4926] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  361.428020][ T4926] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  361.676180][ T5619] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  363.610436][ T4926] Bluetooth: hci5: command tx timeout
[  364.579116][T10405] loop5: detected capacity change from 0 to 7
[  364.705210][T10405] Dev loop5: unable to read RDB block 7
[  364.705263][T10405]  loop5: unable to read partition table
[  364.705468][T10405] loop5: partition table beyond EOD, truncated
[  364.714277][T10405] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  365.672617][ T4926] Bluetooth: hci5: command tx timeout
[  365.726796][T10429] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1888'.
[  365.822567][T10433] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1888'.
[  366.233574][T10429] bridge0: port 2(bridge_slave_1) entered disabled state
[  366.237824][T10429] bridge0: port 1(bridge_slave_0) entered disabled state
[  367.753687][ T4926] Bluetooth: hci5: command tx timeout
[  369.404711][T10328] bridge0: port 1(bridge_slave_0) entered blocking state
[  369.406707][T10328] bridge0: port 1(bridge_slave_0) entered disabled state
[  369.407083][T10328] bridge_slave_0: entered allmulticast mode
[  369.425334][T10328] bridge_slave_0: entered promiscuous mode
[  369.446453][T10328] bridge0: port 2(bridge_slave_1) entered blocking state
[  369.456170][T10328] bridge0: port 2(bridge_slave_1) entered disabled state
[  369.456532][T10328] bridge_slave_1: entered allmulticast mode
[  369.488905][T10328] bridge_slave_1: entered promiscuous mode
[  369.833308][ T4926] Bluetooth: hci5: command tx timeout
[  369.903478][T10540] block nbd3: Device being setup by another task
[  370.457428][ T4926] block nbd3: Receive control failed (result -32)
[  370.638344][T10328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  371.227758][ T6658] block nbd3: shutting down sockets
[  371.351912][T10328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  371.410843][ T4993] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  371.563417][ T4993] usb 4-1: config 0 has no interfaces?
[  371.563462][ T4993] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  371.563488][ T4993] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  371.688998][ T4993] usb 4-1: config 0 descriptor??
[  371.750034][T10328] team0: Port device team_slave_0 added
[  371.857527][T10328] team0: Port device team_slave_1 added
[  372.160917][ T5854] usb 4-1: USB disconnect, device number 11
[  372.330246][T10328] batman_adv: batadv0: Adding interface: batadv_slave_0
[  372.330267][T10328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  372.330296][T10328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  372.396168][T10328] batman_adv: batadv0: Adding interface: batadv_slave_1
[  372.396187][T10328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  372.396218][T10328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  373.015206][T10328] hsr_slave_0: entered promiscuous mode
[  373.021795][T10328] hsr_slave_1: entered promiscuous mode
[  373.025636][T10328] debugfs: 'hsr0' already exists in 'hsr'
[  373.025663][T10328] Cannot create hsr debugfs directory
[  373.575102][T10588] loop0: detected capacity change from 0 to 40427
[  373.597502][T10588] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  373.597533][T10588] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  373.616428][T10588] F2FS-fs (loop0): invalid crc value
[  374.344587][T10588] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  375.826145][T10648] loop3: detected capacity change from 0 to 32768
[  375.859771][T10648] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1984 (10648)
[  376.105413][T10648] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  376.105453][T10648] BTRFS info (device loop3): using crc32c checksum algorithm
[  377.109452][T10648] BTRFS info (device loop3): setting nodatasum
[  377.109485][T10648] BTRFS info (device loop3): enabling ssd optimizations
[  377.109503][T10648] BTRFS info (device loop3): disabling tree log
[  377.109521][T10648] BTRFS info (device loop3): turning on async discard
[  377.109537][T10648] BTRFS info (device loop3): enabling free space tree
[  377.109554][T10648] BTRFS info (device loop3): enabling auto defrag
[  377.370523][T10699] loop0: detected capacity change from 0 to 512
[  377.388048][T10699] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  377.740530][T10699] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  377.740667][T10699] ext4 filesystem being mounted at /272/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  378.330638][ T5616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  378.924207][ T1338] ieee802154 phy0 wpan0: encryption failed: -22
[  378.924306][ T1338] ieee802154 phy1 wpan1: encryption failed: -22
[  379.150845][ T5619] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  381.317325][   T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  381.418633][T10792] loop3: detected capacity change from 0 to 4096
[  381.608896][T10803] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  382.065796][ T2973] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  384.274977][ T2973] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  384.736750][T10328] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  384.922132][T10328] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  384.923884][T10328] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  385.087624][T10328] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  385.670300][ T2973] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  385.776561][T10328] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  385.953189][T10328] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  385.996376][T10328] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  386.405562][T10328] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  386.455740][T10925] loop3: detected capacity change from 0 to 4096
[  386.468412][T10925] EXT4-fs: inline encryption not supported
[  386.477632][T10925] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  386.477658][T10925] EXT4-fs (loop3): Test dummy encryption mode enabled
[  386.606308][T10931] loop0: detected capacity change from 0 to 4096
[  386.616236][T10925] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  387.328530][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  388.022717][ T2973] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  389.796299][T11021] IPVS: Scheduler module ip_vs_ not found
[  390.611788][T11046] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2149'.
[  392.072062][T11050] loop3: detected capacity change from 0 to 32768
[  392.095867][T11050] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2154 (11050)
[  392.244744][T11050] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  392.244781][T11050] BTRFS info (device loop3): using crc32c checksum algorithm
[  392.486952][T11089] misc userio: Begin command sent, but we're already running
[  393.173559][T11050] BTRFS info (device loop3): enabling ssd optimizations
[  393.173589][T11050] BTRFS info (device loop3): turning on flush-on-commit
[  393.173607][T11050] BTRFS info (device loop3): enabling free space tree
[  393.173712][T11050] BTRFS info (device loop3): force zlib compression, level 3
[  393.173735][T11050] BTRFS info (device loop3): max_inline set to 4096
[  393.449417][ T2973] bridge_slave_1: left allmulticast mode
[  393.449588][ T2973] bridge_slave_1: left promiscuous mode
[  393.515563][ T2973] bridge0: port 2(bridge_slave_1) entered disabled state
[  394.140318][T11138] loop0: detected capacity change from 0 to 1024
[  394.163420][T11138] EXT4-fs: Ignoring removed bh option
[  394.174504][T11138] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  394.249314][ T2973] bridge_slave_0: left allmulticast mode
[  394.249355][ T2973] bridge_slave_0: left promiscuous mode
[  394.353427][T11138] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  394.432056][ T2973] bridge0: port 1(bridge_slave_0) entered disabled state
[  395.268558][ T5616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  395.871993][ T5619] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  397.035289][T11197] loop0: detected capacity change from 0 to 64
[  397.209839][   T37] audit: type=1800 audit(1781845201.402:57): pid=11197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2214" name="file1" dev="loop0" ino=21 res=0 errno=0
[  398.510669][ T5616] hfs: node 4:3 still has 1 user(s)!
[  399.541796][T11255] netlink: 'syz.0.2240': attribute type 1 has an invalid length.
[  400.468367][ T2973] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  400.548924][ T2973] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  400.639415][ T2973] bond0 (unregistering): Released all slaves
[  400.674570][ T2973] bond1 (unregistering): Released all slaves
[  401.403978][T11277] loop0: detected capacity change from 0 to 32768
[  401.476928][T11277] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  401.682448][T10328] 8021q: adding VLAN 0 to HW filter on device bond0
[  401.768489][T11326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2271'.
[  401.909788][T11277] XFS (loop0): Ending clean mount
[  402.125856][T10328] 8021q: adding VLAN 0 to HW filter on device team0
[  402.271475][ T3340] bridge0: port 1(bridge_slave_0) entered blocking state
[  402.357617][ T3340] bridge0: port 1(bridge_slave_0) entered forwarding state
[  402.404095][T11277] XFS (loop0): Quotacheck needed: Please wait.
[  402.531374][ T3340] bridge0: port 2(bridge_slave_1) entered blocking state
[  402.531583][ T3340] bridge0: port 2(bridge_slave_1) entered forwarding state
[  403.024688][T11340] loop3: detected capacity change from 0 to 4096
[  403.074027][T11340] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  404.882764][T11277] XFS (loop0): Quotacheck: Done.
[  405.165292][ T5616] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  407.913121][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1
[  411.573694][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2
[  412.186563][ T2973] hsr_slave_0: left promiscuous mode
[  412.230089][ T2973] hsr_slave_1: left promiscuous mode
[  412.292937][ T2973] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  412.293204][ T2973] batman_adv: batadv0: Removing interface: batadv_slave_0
[  412.343498][ T2973] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  412.343529][ T2973] batman_adv: batadv0: Removing interface: batadv_slave_1
[  412.406439][   T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  413.299893][ T2973] veth1_macvtap: left promiscuous mode
[  413.300154][ T2973] veth0_macvtap: left promiscuous mode
[  413.300441][ T2973] veth1_vlan: left promiscuous mode
[  413.339767][ T2973] veth0_vlan: left promiscuous mode
[  416.038791][ T2973] team0 (unregistering): Port device team_slave_1 removed
[  416.136452][ T2973] team0 (unregistering): Port device team_slave_0 removed
[  417.470603][T10328] 8021q: adding VLAN 0 to HW filter on device batadv0
[  418.441320][T11765] loop3: detected capacity change from 0 to 4096
[  418.562936][T11765] EXT4-fs: inline encryption not supported
[  418.598951][T11765] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  418.659128][T11765] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=84ec118, mo2=0003]
[  418.813644][T11765] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  419.400097][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  419.468055][T11734] loop0: detected capacity change from 0 to 40427
[  419.562021][T11734] F2FS-fs (loop0): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[  419.562056][T11734] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  419.565526][T11734] F2FS-fs (loop0): Image doesn't support compression
[  419.565551][T11734] F2FS-fs (loop0): build fault injection rate: 690
[  419.565568][T11734] F2FS-fs (loop0): build fault injection type: 0x35f7
[  419.567167][T11734] F2FS-fs (loop0): invalid crc value
[  420.173903][T10328] veth0_vlan: entered promiscuous mode
[  420.329404][ T2973] IPVS: stop unused estimator thread 0...
[  420.483699][T11734] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  420.510584][ T5273] 8021q: adding VLAN 0 to HW filter on device eth3
[  420.567890][T10328] veth1_vlan: entered promiscuous mode
[  421.383153][T11734] F2FS-fs (loop0): f2fs_disable_checkpoint starts, unusable: 0
[  421.383253][T11734] F2FS-fs (loop0): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  421.383321][T11734] F2FS-fs (loop0): Start checkpoint disabled!
[  422.130151][ T5617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  422.184844][ T5617] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  422.188543][ T5617] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  422.198198][ T5617] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  422.204626][ T5617] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  422.882336][T11861] loop3: detected capacity change from 0 to 64
[  423.118416][T11734] F2FS-fs (loop0): f2fs_disable_checkpoint finishes, err:0
[  423.136445][T11734] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  423.136481][T11734] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  424.550449][ T5617] Bluetooth: hci2: command tx timeout
[  424.783223][ T5273] 8021q: adding VLAN 0 to HW filter on device eth4
[  425.541363][   T37] audit: type=1326 audit(1781845229.745:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11923 comm="syz.0.2513" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c749ace59 code=0x7ffc0000
[  425.548945][   T37] audit: type=1326 audit(1781845229.755:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11923 comm="syz.0.2513" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c749ace59 code=0x7ffc0000
[  425.633447][   T37] audit: type=1326 audit(1781845229.835:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11923 comm="syz.0.2513" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c749ace59 code=0x7ffc0000
[  425.638177][   T37] audit: type=1326 audit(1781845229.835:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11923 comm="syz.0.2513" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c749ace59 code=0x7ffc0000
[  425.638248][   T37] audit: type=1326 audit(1781845229.835:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11923 comm="syz.0.2513" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5c749ace59 code=0x7ffc0000
[  425.638290][   T37] audit: type=1326 audit(1781845229.835:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11923 comm="syz.0.2513" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c749ace59 code=0x7ffc0000
[  425.638330][   T37] audit: type=1326 audit(1781845229.835:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11923 comm="syz.0.2513" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c749ace59 code=0x7ffc0000
[  425.725055][   T37] audit: type=1326 audit(1781845229.845:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11923 comm="syz.0.2513" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c749ace59 code=0x7ffc0000
[  425.725107][   T37] audit: type=1326 audit(1781845229.935:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11923 comm="syz.0.2513" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c749ace59 code=0x7ffc0000
[  425.725148][   T37] audit: type=1326 audit(1781845229.935:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11923 comm="syz.0.2513" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f5c749ace59 code=0x7ffc0000
[  426.624674][ T5617] Bluetooth: hci2: command tx timeout
[  426.686171][T11956] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  426.686191][T11956] IPv6: NLM_F_CREATE should be set when creating new route
[  428.705653][ T5617] Bluetooth: hci2: command tx timeout
[  428.934213][ T5879] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  429.084087][ T5879] usb 1-1: Using ep0 maxpacket: 32
[  429.092866][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  429.092905][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  429.092945][ T5879] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  429.092969][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  429.268397][ T5879] usb 1-1: config 0 descriptor??
[  429.735419][ T5879] ft260 0003:0403:6030.000C: unknown main item tag 0x0
[  429.735460][ T5879] ft260 0003:0403:6030.000C: unknown main item tag 0x0
[  429.884226][ T5879] ft260 0003:0403:6030.000C: chip code: 0000 0000
[  430.311906][ T5629] usb 1-1: USB disconnect, device number 17
[  430.786103][ T5617] Bluetooth: hci2: command tx timeout
[  431.113924][ T5629] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  431.270739][ T5629] usb 4-1: Using ep0 maxpacket: 16
[  431.272676][ T5629] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  431.272717][ T5629] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  431.272731][ T5629] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  431.300071][ T5629] usb 4-1: config 0 descriptor??
[  431.777956][ T5629] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0
[  431.778002][ T5629] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0
[  431.778027][ T5629] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0
[  431.778050][ T5629] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0
[  431.778075][ T5629] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0
[  431.779026][ T5629] mcp2221 0003:04D8:00DD.000D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0
[  432.989419][T12086] loop0: detected capacity change from 0 to 40427
[  433.043785][T12086] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  433.043817][T12086] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  433.790094][T12147] loop8: detected capacity change from 0 to 8
[  433.884200][T12147] Dev loop8: unable to read RDB block 8
[  433.884261][T12147]  loop8: unable to read partition table
[  433.884490][T12147] loop8: partition table beyond EOD, truncated
[  433.884534][T12147] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  434.093595][T12086] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  434.289056][T12086] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  434.289092][T12086] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  434.552753][T11829] bridge0: port 1(bridge_slave_0) entered blocking state
[  434.553137][T11829] bridge0: port 1(bridge_slave_0) entered disabled state
[  434.559568][T11829] bridge_slave_0: entered allmulticast mode
[  434.563262][T11829] bridge_slave_0: entered promiscuous mode
[  434.578559][T11829] bridge0: port 2(bridge_slave_1) entered blocking state
[  434.578965][T11829] bridge0: port 2(bridge_slave_1) entered disabled state
[  434.579236][T11829] bridge_slave_1: entered allmulticast mode
[  434.582633][T11829] bridge_slave_1: entered promiscuous mode
[  435.191886][T11829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  435.537929][T11829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  435.639751][ T5629] usb 4-1: USB disconnect, device number 12
[  436.086456][T12164] loop3: detected capacity change from 0 to 32768
[  436.118145][T12164] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2616 (12164)
[  436.721843][T12164] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  436.721884][T12164] BTRFS info (device loop3): using crc32c checksum algorithm
[  436.887300][T12217] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2620'.
[  437.270586][T12164] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  437.270983][T12164] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  437.401349][T11829] team0: Port device team_slave_0 added
[  437.540815][T12164] BTRFS error (device loop3): open_ctree failed: -12
[  437.550884][ T5879] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  437.687815][T11829] team0: Port device team_slave_1 added
[  437.735738][ T5879] usb 1-1: Using ep0 maxpacket: 16
[  437.737819][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  437.737855][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  437.737893][ T5879] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  437.737917][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  437.968149][ T5879] usb 1-1: config 0 descriptor??
[  438.671010][ T5879] usb 1-1: language id specifier not provided by device, defaulting to English
[  438.890819][ T5879] letsketch 0003:6161:4D15.000E: Device info: ᱓
[  439.092080][ T5879] letsketch 0003:6161:4D15.000E: Device info: ï“¿
[  439.342276][ T5879] usb 1-1: Max retries (5) exceeded reading string descriptor 202
[  439.342371][ T5879] letsketch 0003:6161:4D15.000E: probe with driver letsketch failed with error -71
[  439.388113][ T5879] usb 1-1: USB disconnect, device number 18
[  439.561882][T11829] batman_adv: batadv0: Adding interface: batadv_slave_0
[  439.561901][T11829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  439.561926][T11829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  439.646899][T11829] batman_adv: batadv0: Adding interface: batadv_slave_1
[  439.646918][T11829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  439.646949][T11829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  440.327119][ T1338] ieee802154 phy0 wpan0: encryption failed: -22
[  440.327224][ T1338] ieee802154 phy1 wpan1: encryption failed: -22
[  440.671713][T12253] loop3: detected capacity change from 0 to 32768
[  440.684794][T12253] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2651 (12253)
[  440.906730][T12253] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  440.906769][T12253] BTRFS info (device loop3): using sha256 checksum algorithm
[  440.908232][   T12] bridge_slave_1: left allmulticast mode
[  440.908269][   T12] bridge_slave_1: left promiscuous mode
[  440.908612][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  441.531456][   T12] bridge_slave_0: left allmulticast mode
[  441.531493][   T12] bridge_slave_0: left promiscuous mode
[  441.531793][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  441.580086][T12253] BTRFS error (device loop3): open_ctree failed: -4
[  441.728063][T12283] loop0: detected capacity change from 0 to 32768
[  442.026453][T12283] JBD2: Ignoring recovery information on journal
[  442.426096][T12283] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  443.146248][T12353] loop2: detected capacity change from 0 to 7
[  443.239041][T12353] Dev loop2: unable to read RDB block 7
[  443.239075][T12353]  loop2: AHDI p2
[  443.239095][T12353] loop2: partition table partially beyond EOD, truncated
[  443.341316][   T37] kauditd_printk_skb: 79 callbacks suppressed
[  443.341341][   T37] audit: type=1804 audit(1781845247.537:147): pid=12344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2663" name="/newroot/318/file1/file1" dev="loop0" ino=17059 res=1 errno=0
[  443.409717][   T67] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  444.146121][ T5616] ocfs2: Unmounting device (7,0) on (node local)
[  445.212359][ T5854] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  445.363255][ T5854] usb 1-1: Using ep0 maxpacket: 16
[  445.365740][ T5854] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  445.365776][ T5854] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  445.365817][ T5854] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  445.365841][ T5854] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  445.392016][ T5854] usb 1-1: config 0 descriptor??
[  445.507487][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  445.588564][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  445.630214][   T12] bond0 (unregistering): Released all slaves
[  446.041382][T12424] loop3: detected capacity change from 0 to 8192
[  446.081937][ T5854] usb 1-1: language id specifier not provided by device, defaulting to English
[  446.500892][ T5854] letsketch 0003:6161:4D15.000F: Device info: ï“¿
[  446.745363][T11829] hsr_slave_0: entered promiscuous mode
[  446.846357][ T5854] usb 1-1: Max retries (5) exceeded reading string descriptor 201
[  446.846464][ T5854] letsketch 0003:6161:4D15.000F: probe with driver letsketch failed with error -71
[  446.866695][T11829] hsr_slave_1: entered promiscuous mode
[  446.873623][T11829] debugfs: 'hsr0' already exists in 'hsr'
[  446.873654][T11829] Cannot create hsr debugfs directory
[  446.905147][ T5854] usb 1-1: USB disconnect, device number 19
[  448.198623][   T12] hsr_slave_0: left promiscuous mode
[  448.233703][   T12] hsr_slave_1: left promiscuous mode
[  448.264358][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  448.294085][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  448.537551][   T12] veth1_vlan: left promiscuous mode
[  448.537813][   T12] veth0_vlan: left promiscuous mode
[  451.832352][   T12] team0 (unregistering): Port device team_slave_1 removed
[  451.913996][   T12] team0 (unregistering): Port device team_slave_0 removed
[  453.199898][T12577] loop3: detected capacity change from 0 to 40427
[  453.222851][T12577] F2FS-fs (loop3): build fault injection rate: 771
[  453.227600][T12577] F2FS-fs (loop3): invalid crc value
[  454.113732][T12577] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  457.821173][T12723] loop3: detected capacity change from 0 to 512
[  457.955513][T12726] loop0: detected capacity change from 0 to 512
[  457.971855][T12723] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  457.971984][T12723] ext4 filesystem being mounted at /318/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  458.113991][T12726] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  458.114131][T12726] ext4 filesystem being mounted at /331/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  458.450071][T12749] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 3: comm syz.0.2843: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1
[  458.627385][T12726] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #2: block 18: comm syz.0.2843: lblock 23 mapped to illegal pblock 18 (length 1)
[  459.205975][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  459.545309][ T5616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  459.854327][T12780] loop0: detected capacity change from 0 to 512
[  459.956768][T12780] EXT4-fs warning (device loop0): dx_probe:801: inode #2: comm syz.0.2861: Unrecognised inode hash code 255
[  459.956862][T12780] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.2861: Corrupt directory, running e2fsck is recommended
[  460.108157][T12780] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[  460.108315][T12780] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.2861: corrupted in-inode xattr: e_name out of bounds
[  460.108409][T12780] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  460.110465][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  460.110489][    C1] EXT4-fs (loop0): initial error at time 1781845264: ext4_iget_extra_inode:5180: inode 15
[  460.110520][    C1] EXT4-fs (loop0): last error at time 1781845264: ext4_iget_extra_inode:5180: inode 15
[  460.111469][T12780] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.2861: couldn't read orphan inode 15 (err -117)
[  460.111498][T12780] loop0: lost filesystem error report for type 5 error -117
[  460.209071][T12780] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  460.360117][T12780] EXT4-fs warning (device loop0): dx_probe:801: inode #2: comm syz.0.2861: Unrecognised inode hash code 255
[  460.360151][T12780] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.2861: Corrupt directory, running e2fsck is recommended
[  460.360200][T12780] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 4: comm syz.0.2861: path /332/file0: bad entry in directory: inode out of bounds - offset=0, inode=131071, rec_len=1024, size=1024 fake=0
[  460.389432][T12780] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 8: comm syz.0.2861: path /332/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0
[  460.542526][T12730] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 142: padding at end of block bitmap is not set
[  460.775243][ T5616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  461.241640][T12805] netlink: 'syz.3.2872': attribute type 1 has an invalid length.
[  461.241664][T12805] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2872'.
[  461.241908][T12805] bridge0: port 2(bridge_slave_1) entered disabled state
[  462.683215][T12815] loop0: detected capacity change from 0 to 40427
[  462.703236][T12815] F2FS-fs (loop0): Invalid SB checksum offset: 0
[  462.703263][T12815] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  462.792297][T12815] F2FS-fs (loop0): invalid crc value
[  463.452651][T12815] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  463.736960][T12815] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  463.737010][T12815] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  465.309196][ T5616] syz-executor: attempt to access beyond end of device
[  465.309196][ T5616] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  465.422901][ T5616] CPU: 0 UID: 0 PID: 5616 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  465.422938][ T5616] Tainted: [L]=SOFTLOCKUP
[  465.422945][ T5616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  465.422955][ T5616] Call Trace:
[  465.423029][ T5616]  <TASK>
[  465.423082][ T5616]  dump_stack_lvl+0xe8/0x150
[  465.423152][ T5616]  f2fs_stop_checkpoint+0x3f9/0x5e0
[  465.423177][ T5616]  f2fs_write_end_io+0x124b/0x1710
[  465.423219][ T5616]  __submit_merged_bio+0x258/0x6a0
[  465.423236][ T5616]  ? rcu_is_watching+0x15/0xb0
[  465.423280][ T5616]  __submit_merged_write_cond+0x3c9/0x4e0
[  465.423316][ T5616]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  465.423366][ T5616]  f2fs_write_data_pages+0x2a27/0x36f0
[  465.423421][ T5616]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  465.423490][ T5616]  ? do_raw_spin_lock+0x12b/0x2f0
[  465.423522][ T5616]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  465.423545][ T5616]  ? lockdep_hardirqs_on+0x7a/0x110
[  465.423566][ T5616]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  465.423596][ T5616]  ? rt_mutex_slowunlock+0x4ee/0xa20
[  465.423613][ T5616]  ? reacquire_held_locks+0x104/0x190
[  465.423629][ T5616]  ? rt_spin_lock+0x1e0/0x400
[  465.423654][ T5616]  ? rt_spin_unlock+0x14f/0x200
[  465.423683][ T5616]  ? rt_spin_unlock+0x160/0x200
[  465.423699][ T5616]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  465.423722][ T5616]  do_writepages+0x338/0x560
[  465.423748][ T5616]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  465.423768][ T5616]  ? rt_spin_unlock+0x14f/0x200
[  465.423795][ T5616]  filemap_fdatawrite+0x1ec/0x2f0
[  465.423824][ T5616]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  465.423847][ T5616]  ? __lock_acquire+0x683/0x2ce0
[  465.423905][ T5616]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  465.423930][ T5616]  ? rt_spin_unlock+0x160/0x200
[  465.423948][ T5616]  f2fs_sync_dirty_inodes+0x30e/0x830
[  465.423984][ T5616]  f2fs_write_checkpoint+0xa3d/0x2710
[  465.424004][ T5616]  ? __lock_acquire+0x683/0x2ce0
[  465.424060][ T5616]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  465.424133][ T5616]  kill_f2fs_super+0x2f6/0x700
[  465.424161][ T5616]  ? __pfx_kill_f2fs_super+0x10/0x10
[  465.424194][ T5616]  ? call_rcu+0x64b/0x8b0
[  465.424210][ T5616]  ? lockdep_hardirqs_on+0x7a/0x110
[  465.424244][ T5616]  deactivate_locked_super+0xbc/0x130
[  465.424268][ T5616]  cleanup_mnt+0x3d3/0x460
[  465.424294][ T5616]  task_work_run+0x1d9/0x270
[  465.424321][ T5616]  ? __pfx_task_work_run+0x10/0x10
[  465.424357][ T5616]  exit_to_user_mode_loop+0x1fa/0x730
[  465.424380][ T5616]  ? rcu_is_watching+0x15/0xb0
[  465.424397][ T5616]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  465.424416][ T5616]  do_syscall_64+0x353/0x580
[  465.424438][ T5616]  ? trace_irq_disable+0x3b/0x140
[  465.424460][ T5616]  ? clear_bhb_loop+0x40/0x90
[  465.424482][ T5616]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  465.424500][ T5616] RIP: 0033:0x7f5c749ae097
[  465.424554][ T5616] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  465.424570][ T5616] RSP: 002b:00007ffd9bba66e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  465.424614][ T5616] RAX: 0000000000000000 RBX: 00007f5c74a422ca RCX: 00007f5c749ae097
[  465.424626][ T5616] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd9bba67a0
[  465.424636][ T5616] RBP: 00007ffd9bba67a0 R08: 00007ffd9bba77a0 R09: 00000000ffffffff
[  465.424647][ T5616] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd9bba7830
[  465.424658][ T5616] R13: 00007f5c74a422ca R14: 00000000000713b0 R15: 00007ffd9bba7870
[  465.424695][ T5616]  </TASK>
[  465.424737][ T5616] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  465.837379][ T5616] CPU: 0 UID: 0 PID: 5616 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  465.837431][ T5616] Tainted: [L]=SOFTLOCKUP
[  465.837439][ T5616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  465.837451][ T5616] Call Trace:
[  465.837460][ T5616]  <TASK>
[  465.837471][ T5616]  dump_stack_lvl+0xe8/0x150
[  465.837517][ T5616]  f2fs_stop_checkpoint+0x3f9/0x5e0
[  465.837549][ T5616]  f2fs_write_end_io+0x124b/0x1710
[  465.837602][ T5616]  __submit_merged_bio+0x258/0x6a0
[  465.837624][ T5616]  ? rcu_is_watching+0x15/0xb0
[  465.837652][ T5616]  __submit_merged_write_cond+0x3c9/0x4e0
[  465.837711][ T5616]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  465.837774][ T5616]  f2fs_write_data_pages+0x2a27/0x36f0
[  465.837843][ T5616]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  465.837924][ T5616]  ? do_raw_spin_lock+0x12b/0x2f0
[  465.837966][ T5616]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  465.837994][ T5616]  ? lockdep_hardirqs_on+0x7a/0x110
[  465.838021][ T5616]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  465.838048][ T5616]  ? rt_mutex_slowunlock+0x4ee/0xa20
[  465.838069][ T5616]  ? reacquire_held_locks+0x104/0x190
[  465.838090][ T5616]  ? rt_spin_lock+0x1e0/0x400
[  465.838130][ T5616]  ? rt_spin_unlock+0x14f/0x200
[  465.838158][ T5616]  ? rt_spin_unlock+0x160/0x200
[  465.838176][ T5616]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  465.838203][ T5616]  do_writepages+0x338/0x560
[  465.838236][ T5616]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  465.838259][ T5616]  ? rt_spin_unlock+0x14f/0x200
[  465.838293][ T5616]  filemap_fdatawrite+0x1ec/0x2f0
[  465.838329][ T5616]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  465.838358][ T5616]  ? __lock_acquire+0x683/0x2ce0
[  465.838422][ T5616]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  465.838461][ T5616]  ? rt_spin_unlock+0x160/0x200
[  465.838484][ T5616]  f2fs_sync_dirty_inodes+0x30e/0x830
[  465.838529][ T5616]  f2fs_write_checkpoint+0xa3d/0x2710
[  465.838554][ T5616]  ? __lock_acquire+0x683/0x2ce0
[  465.838618][ T5616]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  465.838721][ T5616]  kill_f2fs_super+0x2f6/0x700
[  465.838757][ T5616]  ? __pfx_kill_f2fs_super+0x10/0x10
[  465.838798][ T5616]  ? call_rcu+0x64b/0x8b0
[  465.838820][ T5616]  ? lockdep_hardirqs_on+0x7a/0x110
[  465.838869][ T5616]  deactivate_locked_super+0xbc/0x130
[  465.838898][ T5616]  cleanup_mnt+0x3d3/0x460
[  465.838931][ T5616]  task_work_run+0x1d9/0x270
[  465.838973][ T5616]  ? __pfx_task_work_run+0x10/0x10
[  465.839021][ T5616]  exit_to_user_mode_loop+0x1fa/0x730
[  465.839049][ T5616]  ? rcu_is_watching+0x15/0xb0
[  465.839071][ T5616]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  465.839094][ T5616]  do_syscall_64+0x353/0x580
[  465.839120][ T5616]  ? trace_irq_disable+0x3b/0x140
[  465.839148][ T5616]  ? clear_bhb_loop+0x40/0x90
[  465.839175][ T5616]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  465.839196][ T5616] RIP: 0033:0x7f5c749ae097
[  465.839218][ T5616] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  465.839237][ T5616] RSP: 002b:00007ffd9bba66e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  465.839260][ T5616] RAX: 0000000000000000 RBX: 00007f5c74a422ca RCX: 00007f5c749ae097
[  465.839275][ T5616] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd9bba67a0
[  465.839289][ T5616] RBP: 00007ffd9bba67a0 R08: 00007ffd9bba77a0 R09: 00000000ffffffff
[  465.839304][ T5616] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd9bba7830
[  465.839319][ T5616] R13: 00007f5c74a422ca R14: 00000000000713b0 R15: 00007ffd9bba7870
[  465.839354][ T5616]  </TASK>
[  465.839364][ T5616] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  466.617368][T11829] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  466.745796][T11829] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  466.770329][T11829] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  466.867087][T11829] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  466.873835][T12950] process 'syz.3.2927' launched './file1' with NULL argv: empty string added
[  466.886592][T11829] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  467.007901][T11829] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  467.243376][T11829] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  467.294865][T12958] loop3: detected capacity change from 0 to 1024
[  467.398017][T11829] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  467.567038][T12958] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  467.717540][   T37] audit: type=1800 audit(1781845271.930:148): pid=12977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2939" name="file3" dev="loop3" ino=16 res=0 errno=0
[  468.167817][T12958] overlayfs: failed to verify upper root origin
[  468.205672][T11829] 8021q: adding VLAN 0 to HW filter on device bond0
[  468.256883][T12989] loop0: detected capacity change from 0 to 128
[  468.418127][T12989] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  468.436314][T12989] ext4 filesystem being mounted at /334/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  468.490315][T11829] 8021q: adding VLAN 0 to HW filter on device team0
[  468.516492][ T1667] bridge0: port 1(bridge_slave_0) entered blocking state
[  468.516834][ T1667] bridge0: port 1(bridge_slave_0) entered forwarding state
[  468.597383][ T1669] bridge0: port 2(bridge_slave_1) entered blocking state
[  468.597534][ T1669] bridge0: port 2(bridge_slave_1) entered forwarding state
[  468.663310][T11829] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  468.663337][T11829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  468.685413][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  469.997983][ T5616] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  470.494373][T13031] netlink: 'syz.0.2960': attribute type 7 has an invalid length.
[  470.790393][T13031] netlink: 'syz.0.2960': attribute type 7 has an invalid length.
[  470.793953][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  470.798498][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  470.802522][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  470.802572][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  471.352970][T13051] loop0: detected capacity change from 0 to 1024
[  471.512609][T13051] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  471.517786][T13051] ext4 filesystem being mounted at /336/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  471.687075][T13062] EXT4-fs error (device loop0): ext4_free_blocks:6718: comm syz.0.2975: Freeing blocks not in datazone - block = 0, count = 16
[  472.021661][T13062] EXT4-fs (loop0): Remounting filesystem read-only
[  472.212491][ T5616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  472.292853][T11829] 8021q: adding VLAN 0 to HW filter on device batadv0
[  472.812161][   T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  472.989164][   T10] usb 1-1: Using ep0 maxpacket: 32
[  472.994991][   T10] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  472.995024][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  473.049738][   T10] usb 1-1: config 0 descriptor??
[  473.321695][   T10] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware
[  473.376356][   T10] usb 1-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2
[  473.376389][   T10] usb 1-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw
[  473.940349][T11829] veth0_vlan: entered promiscuous mode
[  474.038458][T11829] veth1_vlan: entered promiscuous mode
[  474.509864][T11829] veth0_macvtap: entered promiscuous mode
[  474.564844][T11829] veth1_macvtap: entered promiscuous mode
[  474.741080][   T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  474.855591][T11829] batman_adv: batadv0: Interface activated: batadv_slave_0
[  474.949170][T11829] batman_adv: batadv0: Interface activated: batadv_slave_1
[  475.133241][ T1667] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  475.151544][ T1667] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  475.170845][ T1667] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  475.194120][ T1667] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  476.409474][T13145] loop3: detected capacity change from 0 to 32768
[  476.794775][T13145] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  477.232841][ T1666] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  477.232864][ T1666] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  477.680540][T13145] XFS (loop3): Ending clean mount
[  477.684068][T13145] XFS (loop3): Quotacheck needed: Please wait.
[  477.732208][ T1669] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  477.732224][ T1669] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  478.352657][   T37] audit: type=1326 audit(1781845282.561:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13219 comm="syz.0.3047" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c749ace59 code=0x0
[  478.986735][T13145] XFS (loop3): Quotacheck: Done.
[  479.190170][ T5619] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  481.882139][T13319] loop5: detected capacity change from 0 to 512
[  481.900282][T13319] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  481.992466][T13319] EXT4-fs (loop5): 1 truncate cleaned up
[  481.996154][T13319] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  482.762089][T13319] loop5: detected capacity change from 512 to 0
[  482.940396][T11829] EXT4-fs warning (device loop5): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -EIO reading directory block
[  483.011488][T11829] EXT4-fs error (device loop5): ext4_get_inode_loc:5024: inode #2: block 5: comm syz-executor: unable to read itable block
[  483.015181][T11829] buffer_io_error: 10 callbacks suppressed
[  483.015248][T11829] Buffer I/O error on dev loop5, logical block 1, lost sync page write
[  483.015269][T11829] EXT4-fs (loop5): I/O error while writing superblock
[  483.015284][T11829] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6435: IO failure
[  483.015500][T11829] Buffer I/O error on dev loop5, logical block 1, lost sync page write
[  483.015517][T11829] EXT4-fs (loop5): I/O error while writing superblock
[  483.015532][T11829] EXT4-fs error (device loop5): ext4_dirty_inode:6639: inode #2: comm syz-executor: mark_inode_dirty error
[  483.015726][T11829] Buffer I/O error on dev loop5, logical block 1, lost sync page write
[  483.015741][T11829] EXT4-fs (loop5): I/O error while writing superblock
[  483.181618][   T67] EXT4-fs error (device loop5): __ext4_get_inode_loc_noinmem:5009: inode #2: block 5: comm kworker/u8:4: unable to read itable block
[  483.182018][   T67] Buffer I/O error on dev loop5, logical block 1, lost sync page write
[  483.182040][   T67] EXT4-fs (loop5): I/O error while writing superblock
[  483.537575][T11829] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  483.557545][T11829] Buffer I/O error on dev loop5, logical block 1, lost sync page write
[  483.557575][T11829] EXT4-fs (loop5): I/O error while writing superblock
[  484.870935][T13361] loop0: detected capacity change from 0 to 32768
[  484.877284][T13361] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3110 (13361)
[  484.921193][T13361] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  484.921251][T13361] BTRFS info (device loop0): using crc32c checksum algorithm
[  485.044667][T13367] loop3: detected capacity change from 0 to 32768
[  485.068438][T13367] BTRFS info: device /dev/loop3 (7:3) using temp-fsid dcffefb2-e977-41c7-941b-95fc82c1158e
[  485.068512][T13367] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3113 (13367)
[  485.706923][T13367] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  485.706964][T13367] BTRFS info (device loop3): using crc32c checksum algorithm
[  486.052133][T13361] BTRFS info (device loop0): enabling ssd optimizations
[  486.052163][T13361] BTRFS info (device loop0): turning on flush-on-commit
[  486.052180][T13361] BTRFS info (device loop0): enabling free space tree
[  486.052198][T13361] BTRFS info (device loop0): force zlib compression, level 3
[  486.052218][T13361] BTRFS info (device loop0): max_inline set to 4096
[  486.533127][T13367] BTRFS info (device loop3): enabling ssd optimizations
[  486.533158][T13367] BTRFS info (device loop3): turning on flush-on-commit
[  486.533176][T13367] BTRFS info (device loop3): turning on async discard
[  486.533193][T13367] BTRFS info (device loop3): enabling free space tree
[  486.533210][T13367] BTRFS info (device loop3): enabling auto defrag
[  486.533229][T13367] BTRFS info (device loop3): use lzo compression, level 1
[  486.533250][T13367] BTRFS info (device loop3): max_inline set to 4096
[  487.356783][ T5619] BTRFS info (device loop3): last unmount of filesystem dcffefb2-e977-41c7-941b-95fc82c1158e
[  487.486405][ T4926] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  487.635663][ T4926] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  487.649925][ T4926] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  487.655069][ T4926] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  487.731203][ T4926] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  488.436878][ T5616] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  488.982776][T13460] FAULT_FLAG_ALLOW_RETRY missing 1
[  488.982805][T13460] CPU: 1 UID: 0 PID: 13460 Comm: syz.3.3135 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  488.982836][T13460] Tainted: [L]=SOFTLOCKUP
[  488.982843][T13460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  488.982856][T13460] Call Trace:
[  488.982865][T13460]  <TASK>
[  488.982874][T13460]  dump_stack_lvl+0xe8/0x150
[  488.982915][T13460]  handle_userfault+0x155b/0x1800
[  488.982961][T13460]  ? __pfx___folio_put+0x10/0x10
[  488.982989][T13460]  ? __pfx_handle_userfault+0x10/0x10
[  488.983023][T13460]  ? do_pte_missing+0x26ce/0x28f0
[  488.983068][T13460]  handle_mm_fault+0xe0b/0x1520
[  488.983099][T13460]  ? handle_mm_fault+0xe9/0x1520
[  488.983126][T13460]  ? __pfx_handle_mm_fault+0x10/0x10
[  488.983177][T13460]  __get_user_pages+0x166b/0x2590
[  488.983229][T13460]  populate_vma_page_range+0x2be/0x3c0
[  488.983263][T13460]  ? __pfx_populate_vma_page_range+0x10/0x10
[  488.983294][T13460]  ? vma_wants_writenotify+0xb2/0x340
[  488.983327][T13460]  ? vma_set_page_prot+0xc3/0x100
[  488.983353][T13460]  mprotect_fixup+0x9a3/0xb10
[  488.983389][T13460]  ? __pfx_mprotect_fixup+0x10/0x10
[  488.983415][T13460]  ? mas_next_slot+0xc94/0xd70
[  488.983461][T13460]  ? apparmor_file_mprotect+0x1d0/0x400
[  488.983483][T13460]  ? security_file_mprotect+0x1a/0x290
[  488.983515][T13460]  do_mprotect_pkey+0x9d3/0xcd0
[  488.983561][T13460]  ? __pfx_do_mprotect_pkey+0x10/0x10
[  488.983621][T13460]  ? rcu_is_watching+0x15/0xb0
[  488.983649][T13460]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  488.983673][T13460]  __x64_sys_mprotect+0x80/0x90
[  488.983701][T13460]  do_syscall_64+0x174/0x580
[  488.983727][T13460]  ? trace_irq_disable+0x3b/0x140
[  488.983767][T13460]  ? clear_bhb_loop+0x40/0x90
[  488.983795][T13460]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  488.983818][T13460] RIP: 0033:0x7f057b48ce59
[  488.983839][T13460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  488.983858][T13460] RSP: 002b:00007f05796de028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a
[  488.983884][T13460] RAX: ffffffffffffffda RBX: 00007f057b705fa0 RCX: 00007f057b48ce59
[  488.983900][T13460] RDX: 000000000000000f RSI: 0000000000004000 RDI: 0000200000ffc000
[  488.983915][T13460] RBP: 00007f057b522e6f R08: 0000000000000000 R09: 0000000000000000
[  488.983930][T13460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  488.983943][T13460] R13: 00007f057b706038 R14: 00007f057b705fa0 R15: 00007ffe649f1328
[  488.983978][T13460]  </TASK>
[  489.143526][ T1666] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.537743][ T4926] Bluetooth: hci2: command tx timeout
[  491.593244][ T1666] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  492.621273][ T4926] Bluetooth: hci2: command tx timeout
[  493.231241][ T1666] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  494.439322][ T1666] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  494.698542][ T4926] Bluetooth: hci2: command tx timeout
[  496.304346][T13661] loop3: detected capacity change from 0 to 4096
[  496.312987][T13661] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  496.781799][ T4926] Bluetooth: hci2: command tx timeout
[  497.993572][   T37] audit: type=1800 audit(1781845302.213:150): pid=13676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3227" name="file1" dev="loop3" ino=30 res=0 errno=0
[  498.856895][ T1666] bridge_slave_1: left allmulticast mode
[  498.856937][ T1666] bridge_slave_1: left promiscuous mode
[  498.892653][ T1666] bridge0: port 2(bridge_slave_1) entered disabled state
[  498.984237][T13725] loop0: detected capacity change from 0 to 128
[  499.422510][ T1666] bridge_slave_0: left allmulticast mode
[  499.422547][ T1666] bridge_slave_0: left promiscuous mode
[  499.422847][ T1666] bridge0: port 1(bridge_slave_0) entered disabled state
[  499.456088][T13725] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  499.462963][T13725] ext4 filesystem being mounted at /358/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  499.731133][ T5616] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  499.924918][T13740] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  500.051007][T13753] loop0: detected capacity change from 0 to 128
[  500.084240][T13753] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  500.286446][T13753] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  500.288351][T13753] ext2 filesystem being mounted at /359/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  501.743001][ T1338] ieee802154 phy0 wpan0: encryption failed: -22
[  501.743118][ T1338] ieee802154 phy1 wpan1: encryption failed: -22
[  501.947614][ T5616] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  502.852046][T13819] loop3: detected capacity change from 0 to 256
[  503.031788][T13819] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d)
[  503.114850][ T1666] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  503.210696][ T1666] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  503.336456][ T1666] bond0 (unregistering): Released all slaves
[  503.853385][ T5273] 8021q: adding VLAN 0 to HW filter on device eth5
[  503.871816][T13438] bridge0: port 1(bridge_slave_0) entered blocking state
[  503.872011][T13438] bridge0: port 1(bridge_slave_0) entered disabled state
[  503.872238][T13438] bridge_slave_0: entered allmulticast mode
[  503.885142][T13438] bridge_slave_0: entered promiscuous mode
[  504.240925][T13813] loop0: detected capacity change from 0 to 40427
[  504.269191][T13813] F2FS-fs (loop0): invalid crc value
[  504.358478][T13438] bridge0: port 2(bridge_slave_1) entered blocking state
[  504.358840][T13438] bridge0: port 2(bridge_slave_1) entered disabled state
[  504.359207][T13438] bridge_slave_1: entered allmulticast mode
[  504.362791][T13438] bridge_slave_1: entered promiscuous mode
[  504.417782][T13844] syzkaller1: entered promiscuous mode
[  504.417815][T13844] syzkaller1: entered allmulticast mode
[  504.902044][T13813] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  505.312349][T13813] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  505.722519][ T5616] syz-executor: attempt to access beyond end of device
[  505.722519][ T5616] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  505.770551][ T5616] CPU: 1 UID: 0 PID: 5616 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  505.770592][ T5616] Tainted: [L]=SOFTLOCKUP
[  505.770599][ T5616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  505.770611][ T5616] Call Trace:
[  505.770620][ T5616]  <TASK>
[  505.770629][ T5616]  dump_stack_lvl+0xe8/0x150
[  505.770664][ T5616]  f2fs_stop_checkpoint+0x3f9/0x5e0
[  505.770694][ T5616]  f2fs_write_end_io+0x124b/0x1710
[  505.770743][ T5616]  __submit_merged_bio+0x258/0x6a0
[  505.770764][ T5616]  ? rcu_is_watching+0x15/0xb0
[  505.770793][ T5616]  __submit_merged_write_cond+0x3c9/0x4e0
[  505.770837][ T5616]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  505.770899][ T5616]  f2fs_write_data_pages+0x2a27/0x36f0
[  505.770964][ T5616]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  505.771047][ T5616]  ? do_raw_spin_lock+0x12b/0x2f0
[  505.771087][ T5616]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  505.771112][ T5616]  ? lockdep_hardirqs_on+0x7a/0x110
[  505.771131][ T5616]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  505.771146][ T5616]  ? rt_mutex_slowunlock+0x4ee/0xa20
[  505.771158][ T5616]  ? reacquire_held_locks+0x104/0x190
[  505.771169][ T5616]  ? rt_spin_lock+0x1e0/0x400
[  505.771185][ T5616]  ? rt_spin_unlock+0x14f/0x200
[  505.771200][ T5616]  ? rt_spin_unlock+0x160/0x200
[  505.771210][ T5616]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  505.771226][ T5616]  do_writepages+0x338/0x560
[  505.771245][ T5616]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  505.771258][ T5616]  ? rt_spin_unlock+0x14f/0x200
[  505.771276][ T5616]  filemap_fdatawrite+0x1ec/0x2f0
[  505.771296][ T5616]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  505.771313][ T5616]  ? __lock_acquire+0x683/0x2ce0
[  505.771354][ T5616]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  505.771372][ T5616]  ? rt_spin_unlock+0x160/0x200
[  505.771385][ T5616]  f2fs_sync_dirty_inodes+0x30e/0x830
[  505.771410][ T5616]  f2fs_write_checkpoint+0xa3d/0x2710
[  505.771425][ T5616]  ? __lock_acquire+0x683/0x2ce0
[  505.771470][ T5616]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  505.771517][ T5616]  kill_f2fs_super+0x2f6/0x700
[  505.771536][ T5616]  ? __pfx_kill_f2fs_super+0x10/0x10
[  505.771558][ T5616]  ? call_rcu+0x64b/0x8b0
[  505.771569][ T5616]  ? lockdep_hardirqs_on+0x7a/0x110
[  505.771592][ T5616]  deactivate_locked_super+0xbc/0x130
[  505.771609][ T5616]  cleanup_mnt+0x3d3/0x460
[  505.771628][ T5616]  task_work_run+0x1d9/0x270
[  505.771646][ T5616]  ? __pfx_task_work_run+0x10/0x10
[  505.771668][ T5616]  exit_to_user_mode_loop+0x1fa/0x730
[  505.771684][ T5616]  ? rcu_is_watching+0x15/0xb0
[  505.771696][ T5616]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  505.771710][ T5616]  do_syscall_64+0x353/0x580
[  505.771724][ T5616]  ? trace_irq_disable+0x3b/0x140
[  505.771740][ T5616]  ? clear_bhb_loop+0x40/0x90
[  505.771754][ T5616]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  505.771766][ T5616] RIP: 0033:0x7f5c749ae097
[  505.771780][ T5616] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  505.771791][ T5616] RSP: 002b:00007ffd9bba66e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  505.771805][ T5616] RAX: 0000000000000000 RBX: 00007f5c74a422ca RCX: 00007f5c749ae097
[  505.771814][ T5616] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd9bba67a0
[  505.771821][ T5616] RBP: 00007ffd9bba67a0 R08: 00007ffd9bba77a0 R09: 00000000ffffffff
[  505.771830][ T5616] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd9bba7830
[  505.771837][ T5616] R13: 00007f5c74a422ca R14: 000000000007b56c R15: 00007ffd9bba7870
[  505.771856][ T5616]  </TASK>
[  505.771862][ T5616] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  505.968390][   T67] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  506.183074][T13438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  506.656817][T13438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  507.151983][T13438] team0: Port device team_slave_0 added
[  507.182145][T13438] team0: Port device team_slave_1 added
[  508.201510][T13438] batman_adv: batadv0: Adding interface: batadv_slave_0
[  508.201530][T13438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  508.201560][T13438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  508.267049][T13438] batman_adv: batadv0: Adding interface: batadv_slave_1
[  508.267067][T13438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  508.267093][T13438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  508.519146][   T37] audit: type=1326 audit(1781845312.735:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13961 comm="syz.3.3356" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f057b48ce59 code=0x7ffc0000
[  508.519611][   T37] audit: type=1326 audit(1781845312.735:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13961 comm="syz.3.3356" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f057b48ce59 code=0x7ffc0000
[  508.519653][   T37] audit: type=1326 audit(1781845312.735:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13961 comm="syz.3.3356" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f057b48ce59 code=0x7ffc0000
[  508.520280][   T37] audit: type=1326 audit(1781845312.735:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13961 comm="syz.3.3356" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f057b48ce59 code=0x7ffc0000
[  508.520576][   T37] audit: type=1326 audit(1781845312.735:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13961 comm="syz.3.3356" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f057b48ce59 code=0x7ffc0000
[  508.521257][   T37] audit: type=1326 audit(1781845312.735:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13961 comm="syz.3.3356" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f057b48ce59 code=0x7ffc0000
[  508.521299][   T37] audit: type=1326 audit(1781845312.735:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13961 comm="syz.3.3356" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f057b48ce59 code=0x7ffc0000
[  508.521614][   T37] audit: type=1326 audit(1781845312.735:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13961 comm="syz.3.3356" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f057b48ce59 code=0x7ffc0000
[  508.522416][   T37] audit: type=1326 audit(1781845312.735:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13961 comm="syz.3.3356" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f057b48ce59 code=0x7ffc0000
[  508.522458][   T37] audit: type=1326 audit(1781845312.735:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13961 comm="syz.3.3356" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f057b48ce59 code=0x7ffc0000
[  508.972447][ T1666] hsr_slave_0: left promiscuous mode
[  509.010695][ T1666] hsr_slave_1: left promiscuous mode
[  509.031192][ T1666] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  509.031223][ T1666] batman_adv: batadv0: Removing interface: batadv_slave_0
[  509.071551][ T1666] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  509.071580][ T1666] batman_adv: batadv0: Removing interface: batadv_slave_1
[  509.564614][ T1666] veth1_macvtap: left promiscuous mode
[  509.603277][ T1666] veth0_macvtap: left promiscuous mode
[  509.625480][ T1666] veth1_vlan: left promiscuous mode
[  509.625706][ T1666] veth0_vlan: left promiscuous mode
[  510.083361][T14011] loop5: detected capacity change from 0 to 7
[  510.101255][T14011] Dev loop5: unable to read RDB block 7
[  510.101286][T14011]  loop5: AHDI p1 p2 p3
[  510.101306][T14011] loop5: partition table partially beyond EOD, truncated
[  510.101574][T14011] loop5: p1 start 3741368766 is beyond EOD, truncated
[  510.101593][T14011] loop5: p2 size 151585024 extends beyond EOD, truncated
[  510.608687][T14023] loop0: detected capacity change from 0 to 256
[  510.612928][T14023] exfat: Deprecated parameter 'utf8'
[  510.612953][T14023] exfat: Deprecated parameter 'utf8'
[  510.613052][T14023] exfat: Deprecated parameter 'namecase'
[  510.613128][T14023] exfat: Deprecated parameter 'namecase'
[  510.776942][T14023] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  510.944356][ T5602] udevd[5602]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory
[  513.910819][ T1666] team0 (unregistering): Port device team_slave_1 removed
[  514.007444][ T1666] team0 (unregistering): Port device team_slave_0 removed
[  514.759479][T14117] loop3: detected capacity change from 0 to 32768
[  514.760700][T14117] btrfs: Deprecated parameter 'usebackuproot'
[  514.760723][T14117] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  514.764030][T14117] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3419 (14117)
[  514.927302][T14117] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  514.927339][T14117] BTRFS info (device loop3): using crc32c checksum algorithm
[  515.178469][T14117] BTRFS info (device loop3): rebuilding free space tree
[  515.242018][ T5273] 8021q: adding VLAN 0 to HW filter on device eth6
[  515.770745][T14117] BTRFS info (device loop3): enabling ssd optimizations
[  515.770784][T14117] BTRFS info (device loop3): using spread ssd allocation scheme
[  515.770803][T14117] BTRFS info (device loop3): turning on flush-on-commit
[  515.770822][T14117] BTRFS info (device loop3): enabling free space tree
[  515.770839][T14117] BTRFS info (device loop3): force clearing of disk cache
[  515.770858][T14117] BTRFS info (device loop3): trying to use backup root at mount time
[  515.770879][T14117] BTRFS info (device loop3): force zlib compression, level 3
[  515.920171][T13438] hsr_slave_0: entered promiscuous mode
[  515.947094][T13438] hsr_slave_1: entered promiscuous mode
[  515.967921][T13438] debugfs: 'hsr0' already exists in 'hsr'
[  515.967952][T13438] Cannot create hsr debugfs directory
[  516.475159][T14188] loop0: detected capacity change from 0 to 8192
[  521.548703][ T5273] 8021q: adding VLAN 0 to HW filter on device eth7
[  523.014732][T13438] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  523.150170][T13438] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  523.155004][T13438] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  523.403931][T13438] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  523.584910][T13438] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  523.822794][T13438] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  523.883413][T13438] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  524.014993][T13438] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  524.886396][ T5273] 8021q: adding VLAN 0 to HW filter on device eth8
[  525.156317][T14117] BTRFS critical (device loop3 state E): emergency shutdown
[  525.858197][T13438] 8021q: adding VLAN 0 to HW filter on device bond0
[  526.258208][ T5619] BTRFS info (device loop3 state E): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  526.408961][T13438] 8021q: adding VLAN 0 to HW filter on device team0
[  526.711771][ T2973] bridge0: port 1(bridge_slave_0) entered blocking state
[  526.750548][ T2973] bridge0: port 1(bridge_slave_0) entered forwarding state
[  526.923319][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  526.923520][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  530.291663][T13438] 8021q: adding VLAN 0 to HW filter on device batadv0
[  531.710188][T13438] veth0_vlan: entered promiscuous mode
[  531.818138][T13438] veth1_vlan: entered promiscuous mode
[  532.419213][T13438] veth0_macvtap: entered promiscuous mode
[  532.609526][T13438] veth1_macvtap: entered promiscuous mode
[  532.692314][ T5711] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  532.735692][T13438] batman_adv: batadv0: Interface activated: batadv_slave_0
[  532.808265][T13438] batman_adv: batadv0: Interface activated: batadv_slave_1
[  532.852372][ T5711] usb 4-1: Using ep0 maxpacket: 16
[  532.863316][ T5711] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  532.863350][ T5711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  532.863371][ T5711] usb 4-1: Product: syz
[  532.863386][ T5711] usb 4-1: Manufacturer: syz
[  532.863401][ T5711] usb 4-1: SerialNumber: syz
[  532.912587][ T5711] usb 4-1: config 0 descriptor??
[  533.126471][ T1039] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  533.150719][ T1039] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  533.151558][ T1039] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  533.156486][ T1039] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  533.433871][ T5711] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  533.494311][ T5711] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  533.495438][ T5711] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  533.495539][ T5711] usb 4-1: media controller created
[  533.538460][ T5711] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  534.039412][ T5711] zl10353_read_register: readreg error (reg=127, ret==0)
[  534.039538][ T5711] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  534.039592][ T5711] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  534.075301][ T5711] usb 4-1: USB disconnect, device number 13
[  535.586990][ T5711] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  536.807571][  T824] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  536.807595][  T824] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  537.300013][ T1184] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  537.454887][T14623] loop3: detected capacity change from 0 to 128
[  537.459613][T14624] loop0: detected capacity change from 0 to 128
[  537.609317][   T10] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  537.609415][   T10] dvb_usb_az6027 1-1:0.0: probe with driver dvb_usb_az6027 failed with error -110
[  537.752396][   T10] usb 1-1: USB disconnect, device number 20
[  537.773821][T14623] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  537.802482][T14623] ext4 filesystem being mounted at /375/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  538.062270][ T1184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  538.062294][ T1184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  538.413979][T14640] 
[  538.413996][T14640] ======================================================
[  538.414046][T14640] WARNING: possible circular locking dependency detected
[  538.414081][T14640] syzkaller #0 Tainted: G             L     
[  538.414093][T14640] ------------------------------------------------------
[  538.414155][T14640] syz.3.3612/14640 is trying to acquire lock:
[  538.414188][T14640] ffff8880264d07f0 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x426/0x10c0
[  538.414273][T14640] 
[  538.414273][T14640] but task is already holding lock:
[  538.414280][T14640] ffff88805e3e0cd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x317/0x10e0
[  538.414324][T14640] 
[  538.414324][T14640] which lock already depends on the new lock.
[  538.414324][T14640] 
[  538.414331][T14640] 
[  538.414331][T14640] the existing dependency chain (in reverse order) is:
[  538.414339][T14640] 
[  538.414339][T14640] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}:
[  538.414404][T14640]        percpu_down_read_internal+0x48/0x1d0
[  538.414424][T14640]        ext4_writepages+0x205/0x3b0
[  538.414441][T14640]        do_writepages+0x338/0x560
[  538.414468][T14640]        __writeback_single_inode+0x12e/0xf90
[  538.414489][T14640]        writeback_single_inode+0x4dd/0xe10
[  538.414518][T14640]        write_inode_now+0x1c2/0x290
[  538.414545][T14640]        iput+0x98b/0xf00
[  538.414564][T14640]        ext4_xattr_block_set+0x1b0c/0x2a80
[  538.414582][T14640]        ext4_expand_extra_isize_ea+0x1342/0x1e70
[  538.414601][T14640]        __ext4_expand_extra_isize+0x30d/0x400
[  538.414629][T14640]        __ext4_mark_inode_dirty+0x455/0x700
[  538.414651][T14640]        ext4_evict_inode+0x976/0x10c0
[  538.414682][T14640]        evict+0x624/0xb50
[  538.414707][T14640]        ext4_orphan_cleanup+0xc7a/0x14c0
[  538.414730][T14640]        ext4_fill_super+0x5cc3/0x65d0
[  538.414749][T14640]        get_tree_bdev_flags+0x430/0x4f0
[  538.414775][T14640]        vfs_get_tree+0x92/0x2a0
[  538.414799][T14640]        do_new_mount+0x319/0xdc0
[  538.414817][T14640]        __se_sys_mount+0x31d/0x420
[  538.414836][T14640]        do_syscall_64+0x174/0x580
[  538.414860][T14640]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  538.414879][T14640] 
[  538.414879][T14640] -> #0 (sb_internal){.+.+}-{0:0}:
[  538.414904][T14640]        __lock_acquire+0x1520/0x2ce0
[  538.414930][T14640]        lock_acquire+0x106/0x350
[  538.414954][T14640]        percpu_down_read_internal+0x48/0x1d0
[  538.414971][T14640]        ext4_evict_inode+0x426/0x10c0
[  538.414992][T14640]        evict+0x624/0xb50
[  538.415016][T14640]        ext4_ext_migrate+0xddf/0x10e0
[  538.415033][T14640]        ext4_ioctl+0x234f/0x4b90
[  538.415053][T14640]        __se_sys_ioctl+0xff/0x170
[  538.415079][T14640]        do_syscall_64+0x174/0x580
[  538.415101][T14640]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  538.415119][T14640] 
[  538.415119][T14640] other info that might help us debug this:
[  538.415119][T14640] 
[  538.415126][T14640]  Possible unsafe locking scenario:
[  538.415126][T14640] 
[  538.415140][T14640]        CPU0                    CPU1
[  538.415169][T14640]        ----                    ----
[  538.415181][T14640]   lock(&sbi->s_writepages_rwsem);
[  538.415195][T14640]                                lock(sb_internal);
[  538.415210][T14640]                                lock(&sbi->s_writepages_rwsem);
[  538.415225][T14640]   rlock(sb_internal);
[  538.415239][T14640] 
[  538.415239][T14640]  *** DEADLOCK ***
[  538.415239][T14640] 
[  538.415245][T14640] 3 locks held by syz.3.3612/14640:
[  538.415257][T14640]  #0: ffff8880264d0500 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write_file+0x63/0x210
[  538.415345][T14640]  #1: ffff88805fc9b388 (&sb->s_type->i_mutex_key#11){++++}-{4:4}, at: ext4_ioctl+0x2347/0x4b90
[  538.415400][T14640]  #2: ffff88805e3e0cd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x317/0x10e0
[  538.415444][T14640] 
[  538.415444][T14640] stack backtrace:
[  538.415459][T14640] CPU: 1 UID: 0 PID: 14640 Comm: syz.3.3612 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  538.415487][T14640] Tainted: [L]=SOFTLOCKUP
[  538.415493][T14640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  538.415504][T14640] Call Trace:
[  538.415512][T14640]  <TASK>
[  538.415521][T14640]  dump_stack_lvl+0xe8/0x150
[  538.415548][T14640]  print_circular_bug+0x2e1/0x300
[  538.415567][T14640]  check_noncircular+0x12e/0x150
[  538.415588][T14640]  __lock_acquire+0x1520/0x2ce0
[  538.415614][T14640]  ? __lock_acquire+0x683/0x2ce0
[  538.415642][T14640]  ? __lock_acquire+0x683/0x2ce0
[  538.415679][T14640]  ? __asan_memset+0x22/0x50
[  538.415699][T14640]  ? ext4_evict_inode+0x426/0x10c0
[  538.415721][T14640]  lock_acquire+0x106/0x350
[  538.415745][T14640]  ? ext4_evict_inode+0x426/0x10c0
[  538.415774][T14640]  percpu_down_read_internal+0x48/0x1d0
[  538.415794][T14640]  ? ext4_evict_inode+0x426/0x10c0
[  538.415815][T14640]  ext4_evict_inode+0x426/0x10c0
[  538.415834][T14640]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  538.415858][T14640]  ? reacquire_held_locks+0x104/0x190
[  538.415877][T14640]  ? rt_spin_lock+0x1e0/0x400
[  538.415896][T14640]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  538.415915][T14640]  ? __pfx_ext4_evict_inode+0x10/0x10
[  538.415936][T14640]  ? rt_spin_unlock+0x14f/0x200
[  538.415957][T14640]  ? rt_spin_unlock+0x160/0x200
[  538.415976][T14640]  ? __pfx_ext4_evict_inode+0x10/0x10
[  538.416000][T14640]  evict+0x624/0xb50
[  538.416030][T14640]  ? __pfx_evict+0x10/0x10
[  538.416057][T14640]  ? rt_spin_unlock+0x160/0x200
[  538.416075][T14640]  ? iput+0xb84/0xf00
[  538.416097][T14640]  ext4_ext_migrate+0xddf/0x10e0
[  538.416121][T14640]  ? __pfx_ext4_ext_migrate+0x10/0x10
[  538.416141][T14640]  ? rwbase_write_lock+0x550/0x720
[  538.416171][T14640]  ext4_ioctl+0x234f/0x4b90
[  538.416195][T14640]  ? __pfx_ext4_ioctl+0x10/0x10
[  538.416215][T14640]  ? is_bpf_text_address+0x292/0x2b0
[  538.416244][T14640]  ? is_bpf_text_address+0x26/0x2b0
[  538.416275][T14640]  ? kernel_text_address+0xa5/0xe0
[  538.416301][T14640]  ? __kernel_text_address+0xd/0x30
[  538.416329][T14640]  ? unwind_get_return_address+0x4d/0x90
[  538.416360][T14640]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  538.416389][T14640]  ? arch_stack_walk+0xfb/0x150
[  538.416425][T14640]  ? stack_trace_save+0xa9/0x100
[  538.416450][T14640]  ? __pfx_stack_trace_save+0x10/0x10
[  538.416474][T14640]  ? kasan_save_track+0x4f/0x80
[  538.416498][T14640]  ? stack_depot_save_flags+0x33/0x800
[  538.416522][T14640]  ? __lock_acquire+0x683/0x2ce0
[  538.416553][T14640]  ? kasan_save_track+0x4f/0x80
[  538.416574][T14640]  ? kasan_save_track+0x3e/0x80
[  538.416595][T14640]  ? kasan_save_free_info+0x40/0x50
[  538.416623][T14640]  ? __kasan_slab_free+0x5c/0x80
[  538.416644][T14640]  ? kfree+0x1c5/0x6c0
[  538.416662][T14640]  ? tomoyo_path_number_perm+0x4ba/0x5f0
[  538.416696][T14640]  ? security_file_ioctl+0xc3/0x2a0
[  538.416717][T14640]  ? __se_sys_ioctl+0x47/0x170
[  538.416745][T14640]  ? do_syscall_64+0x174/0x580
[  538.416771][T14640]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  538.416800][T14640]  ? file_ioctl+0x259/0x7e0
[  538.416830][T14640]  ? __pfx_file_ioctl+0x10/0x10
[  538.416865][T14640]  ? kasan_quarantine_put+0xbb/0x1f0
[  538.416890][T14640]  ? tomoyo_path_number_perm+0x219/0x5f0
[  538.416915][T14640]  ? tomoyo_path_number_perm+0x219/0x5f0
[  538.416940][T14640]  ? do_vfs_ioctl+0x1184/0x1550
[  538.416971][T14640]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  538.417006][T14640]  ? hook_file_ioctl+0x1f3/0x600
[  538.417037][T14640]  ? __fget_files+0x2a/0x420
[  538.417059][T14640]  ? __fget_files+0x2a/0x420
[  538.417081][T14640]  ? __fget_files+0x3a8/0x420
[  538.417103][T14640]  ? __fget_files+0x2a/0x420
[  538.417126][T14640]  ? bpf_lsm_file_ioctl+0x9/0x20
[  538.417151][T14640]  ? __pfx_ext4_ioctl+0x10/0x10
[  538.417172][T14640]  __se_sys_ioctl+0xff/0x170
[  538.417283][T14640]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  538.417309][T14640]  do_syscall_64+0x174/0x580
[  538.417336][T14640]  ? trace_irq_disable+0x3b/0x140
[  538.417365][T14640]  ? clear_bhb_loop+0x40/0x90
[  538.417390][T14640]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  538.417412][T14640] RIP: 0033:0x7f057b48ce59
[  538.417433][T14640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  538.417452][T14640] RSP: 002b:00007f0579279028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  538.417478][T14640] RAX: ffffffffffffffda RBX: 00007f057b706270 RCX: 00007f057b48ce59
[  538.417496][T14640] RDX: 0000000000000000 RSI: 0000000000006609 RDI: 0000000000000005
[  538.417509][T14640] RBP: 00007f057b522e6f R08: 0000000000000000 R09: 0000000000000000
[  538.417522][T14640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  538.417535][T14640] R13: 00007f057b706308 R14: 00007f057b706270 R15: 00007ffe649f1328
[  538.417558][T14640]  </TASK>
[  538.857043][ T5619] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.